Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Slow computer with pop up messages


  • Please log in to reply

#1
fonzy

fonzy

    Member

  • Member
  • PipPip
  • 76 posts

Hi,

 

I am trying to sort a shared laptop that is experiencing slowness and a lot of pop up messages. There are two accounts on the laptop.The laptop slows to the point of almost freezing even when copying the logs below. Many thanks for you help with this

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 08-03-2020
Ran by cstar (administrator) on FAMILY-ACER-LAP (Acer Aspire A315-21) (08-03-2020 15:28:14)
Running from C:\Users\cstar\Desktop
Loaded Profiles: cstar & famil (Available Profiles: cstar & famil)
Platform: Windows 10 Home Version 1909 18363.657 (X64) Language: English (United Kingdom)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(0) C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.12527.20242.0_x86__8wekyb3d8bbwe\Office16\SDXHelperBgt.exe
(0) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.20012.135.0_x64__8wekyb3d8bbwe\YourPhone.exe
(Acer Incorporated -> ) C:\Program Files (x86)\Acer\Acer Collection\ACEStd.exe
(Acer Incorporated -> ) C:\Program Files (x86)\Acer\Care Center\ACCStd.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files (x86)\Acer\Acer Collection\ACEMon.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\ePowerButton_NB.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\ePowerButton_NB.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QAAdminAgent.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QAAgent.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QAAgent.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QALockHandler.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Acer Incorporated -> acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
(Acer Incorporated -> TODO: <Company name>) C:\Program Files\Acer\User Experience Improvement Program\Plugin\AppMonitor\AppMonitorPlugIn.exe
(Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\atiesrxx.exe
(AMD) [File not signed] C:\Program Files\AMD\Performance Profile Client\AUEPLauncher.exe
(AMD) [File not signed] C:\Program Files\AMD\Performance Profile Client\AUEPMaster.exe
(Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.442\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.442\GoogleCrashHandler64.exe
(Google LLC -> Google) C:\Users\cstar\AppData\Local\Google\Chrome\User Data\SwReporter\77.225.200\software_reporter_tool.exe
(Google LLC -> Google) C:\Users\cstar\AppData\Local\Google\Chrome\User Data\SwReporter\77.225.200\software_reporter_tool.exe
(Google LLC -> Google) C:\Users\cstar\AppData\Local\Google\Chrome\User Data\SwReporter\77.225.200\software_reporter_tool.exe
(Google LLC -> Google) C:\Users\cstar\AppData\Local\Google\Chrome\User Data\SwReporter\77.225.200\software_reporter_tool.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\famil\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2020.19081.28230.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\LogonUI.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\WpcMon.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2001.10-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2001.10-0\NisSrv.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Plex, Inc. -> ) C:\Program Files (x86)\Plex\Plex Media Server\Plex Tuner Service.exe
(Plex, Inc. -> Plex, Inc.) C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe
(Plex, Inc. -> Plex, Inc.) C:\Program Files (x86)\Plex\Plex Media Server\Plex Update Service.exe
(Plex, Inc. -> Python Software Foundation) C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe
(Plex, Inc. -> Python Software Foundation) C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe
(Qualcomm Atheros -> Qualcomm Technologies Inc.) C:\Windows\System32\drivers\QcomWlanSrvx64.exe
(Qualcomm Atheros -> Windows ® Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(SweetLabs Inc. -> SweetLabs, Inc) C:\Users\famil\AppData\Local\Host App Service\Engine\HostAppServiceUpdater.exe
(WildTangent Inc -> ) C:\Program Files (x86)\WildTangent Games\Integration\WildTangentHelperService.exe
(Windscribe Limited -> Windscribe Limited) C:\Program Files (x86)\Windscribe\WindscribeService.exe
 
==================== Registry (Whitelisted) ===================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [18368512 2017-04-16] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-09-05] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-21-4035741328-3155629565-2648758277-1001\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [47552040 2019-12-22] (Google LLC -> )
HKU\S-1-5-21-4035741328-3155629565-2648758277-1001\...\Run: [Plex Media Server] => C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe [24182768 2019-12-13] (Plex, Inc. -> Plex, Inc.)
HKU\S-1-5-21-4035741328-3155629565-2648758277-1001\...\Run: [Windscribe] => C:\Program Files (x86)\Windscribe\Windscribe.exe [10106544 2019-01-19] (Windscribe Limited -> Windscribe Limited)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\80.0.3987.132\Installer\chrmstp.exe [2020-03-04] (Google LLC -> Google LLC)
 
==================== Scheduled Tasks (Whitelisted) ============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
Task: {025294D4-D773-447D-8976-9D53F8F39B17} - System32\Tasks\ACCBackgroundApplication => C:\Program Files (x86)\Acer\Care Center\ACCStd.exe [4645168 2017-10-30] (Acer Incorporated -> )
Task: {17915D0D-A731-4651-A3FD-E1B52DF3C8A3} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [474368 2019-09-25] (Acer Incorporated -> Acer Incorporated)
Task: {20A46A67-554F-4C3A-8E34-EEBDC6A23718} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2001.10-0\MpCmdRun.exe [473544 2020-03-02] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {24CBB736-D92A-48B7-AA18-2B15EB6F8B5D} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [468992 2019-01-09] (Advanced Micro Devices, Inc.) [File not signed]
Task: {2CF81D2D-474F-4D66-B047-1023523AA3EB} - System32\Tasks\Acer Collection Monitor Application => C:\Program Files (x86)\Acer\Acer Collection\ACEMon.exe [417072 2017-12-13] (Acer Incorporated -> Acer Incorporated)
Task: {35EA7F4B-564E-4A01-B95C-7E777C148A75} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2001.10-0\MpCmdRun.exe [473544 2020-03-02] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {381ABB22-AD12-423C-890D-BE0B3A51F8D4} - System32\Tasks\DashlaneUpgradeCheck => net [Argument = start "Dashlane Upgrade Service"]
Task: {3EA6E9B3-6066-4E04-B156-425BB1EF299A} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe [2920752 2017-10-30] (Acer Incorporated -> )
Task: {4A1FB026-D3F9-4B45-A457-61A98795D96F} - System32\Tasks\Oem\AcerJumpstartTask => C:\Program Files (x86)\Acer\Acer Jumpstart\hermes.exe [64320 2019-07-11] (Acer Incorporated -> Acer)
Task: {6619090C-D7E5-460A-ACD9-57FA5B62547C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2001.10-0\MpCmdRun.exe [473544 2020-03-02] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {66474282-ACE7-44C4-915A-1DFBE65A64B3} - System32\Tasks\ACCAgent => C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe [41264 2017-10-30] (Acer Incorporated -> )
Task: {7E372C8C-D9AC-4AEF-8EAE-4B102726BDF1} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1240656 2019-09-11] (Adobe Inc. -> Adobe Systems)
Task: {972C4ED1-9811-41B7-A33B-02176BE6F474} - System32\Tasks\Power Button => C:\Program Files\Acer\Acer Quick Access\ePowerButton_NB.exe [2770736 2019-09-26] (Acer Incorporated -> Acer Incorporated)
Task: {9D7B8058-3FDE-48B9-9628-A6E01C67C40D} - System32\Tasks\AcerCMUpdateTask2.1.16258 => C:\Program Files (x86)\Acer\Amundsen\2.1.16258\AWC.exe [152880 2016-09-20] (Acer Incorporated -> )
Task: {AC995341-DED0-4ADB-A646-7C6754B9DB3E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-09-05] (Google Inc -> Google Inc.)
Task: {BF03CEC4-ACC4-4A08-9EC5-B01CF128637C} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\BIN64\InstallManagerApp.exe [468992 2019-01-09] (Advanced Micro Devices, Inc.) [File not signed]
Task: {C6051536-E144-43F6-937E-E0C6780B61F7} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-09-05] (Google Inc -> Google Inc.)
Task: {D13C7352-D0E2-4319-B3DE-5C371F9EE335} - System32\Tasks\HPCustParticipation HP DeskJet 3630 series => C:\Program Files\HP\HP DeskJet 3630 series\Bin\HPCustPartic.exe [6438536 2017-02-08] (Hewlett Packard -> HP Inc.)
Task: {D9273552-E654-4645-BDED-5BDD19CC63D8} - System32\Tasks\App Explorer => C:\Users\cstar\AppData\Local\Host App Service\Engine\HostAppServiceUpdater.exe [7470248 2020-01-06] (SweetLabs Inc. -> SweetLabs, Inc) <==== ATTENTION
Task: {E3F3A285-09AD-40BA-A8CD-2F669E933C9A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2001.10-0\MpCmdRun.exe [473544 2020-03-02] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {EFFC4823-8A16-41D0-8B4E-52BDDEEAD2BF} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe [215856 2017-09-13] (Acer Incorporated -> TODO: <Company name>)
Task: {F16A53C3-4096-44E5-9650-1E3A9A98B210} - System32\Tasks\Acer Collection Application => C:\Program Files (x86)\Acer\Acer Collection\ACEStd.exe [479024 2017-12-14] (Acer Incorporated -> )
Task: {F986B0D4-38F9-4AA7-91D0-37393F3B9214} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [446256 2019-09-26] (Acer Incorporated -> Acer Incorporated)
 
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{1e1c3259-6ffd-451c-8e44-1377f9bab954}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{2e9f43fb-0adb-4c2b-90de-f33151e75b58}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{f894cb87-5e57-4628-b4cf-9090c3a44f2c}: [DhcpNameServer] 192.168.0.1
 
Internet Explorer:
==================
HKU\S-1-5-21-4035741328-3155629565-2648758277-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-4035741328-3155629565-2648758277-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer17win10.msn.com/?pc=ACTE
HKU\S-1-5-21-4035741328-3155629565-2648758277-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = www.google.com
hxxp://hp13.msn.com
HKU\S-1-5-21-4035741328-3155629565-2648758277-1004\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer17win10.msn.com/?pc=ACTE
HKU\S-1-5-21-4035741328-3155629565-2648758277-1004\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer17win10.msn.com/?pc=ACTE
BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_151\bin\ssv.dll [2019-02-13] (Oracle America, Inc. -> Oracle Corporation)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_151\bin\jp2ssv.dll [2019-02-13] (Oracle America, Inc. -> Oracle Corporation)
 
FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.151.2 -> C:\Program Files\Java\jre1.8.0_151\bin\dtplugin\npDeployJava1.dll [2019-02-13] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.151.2 -> C:\Program Files\Java\jre1.8.0_151\bin\plugin2\npjp2.dll [2019-02-13] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-02-04] (Adobe Inc. -> Adobe Systems Inc.)
 
Chrome: 
=======
CHR Profile: C:\Users\cstar\AppData\Local\Google\Chrome\User Data\Default [2020-03-08]
CHR Notifications: Default -> hxxps://advisor.sky.com
CHR StartupUrls: Default -> "hxxps://www.bing.com/?PC=XC04"
CHR Extension: (Slides) - C:\Users\cstar\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-09-05]
CHR Extension: (Docs) - C:\Users\cstar\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-09-05]
CHR Extension: (Google Drive) - C:\Users\cstar\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-09-05]
CHR Extension: (YouTube) - C:\Users\cstar\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-09-05]
CHR Extension: (Sheets) - C:\Users\cstar\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-09-05]
CHR Extension: (Google Docs Offline) - C:\Users\cstar\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-01-09]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\cstar\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2018-12-26]
CHR Extension: (Chrome Web Store Payments) - C:\Users\cstar\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-24]
CHR Extension: (Gmail) - C:\Users\cstar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-07-02]
CHR Extension: (Chrome Media Router) - C:\Users\cstar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-02-25]
CHR HKU\S-1-5-21-4035741328-3155629565-2648758277-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR HKLM-x32\...\Chrome\Extension: [pbjikboenpfhbbejgkoklgkhjpfogcam]
 
==================== Services (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [551832 2017-07-13] (Advanced Micro Devices, Inc. -> AMD)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [338312 2017-04-24] (Qualcomm Atheros -> Windows ® Win 7 DDK provider)
R2 AUEPLauncher; C:\Program Files\AMD\Performance Profile Client\AUEPLauncher.exe [43008 2019-01-09] (AMD) [File not signed]
S2 Dashlane Upgrade Service; C:\Program Files (x86)\Dashlane\Upgrade\DashlaneUpgradeService.exe [83992 2017-08-23] (Dashlane -> Dashlane, Inc.)
R2 PlexUpdateService; C:\Program Files (x86)\Plex\Plex Media Server\Plex Update Service.exe [2140656 2019-12-13] (Plex, Inc. -> Plex, Inc.)
S3 QALSvc; C:\Program Files\Acer\Acer Quick Access\QALSvc.exe [466224 2019-09-26] (Acer Incorporated -> Acer Incorporated)
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [508208 2019-09-26] (Acer Incorporated -> Acer Incorporated)
R2 QcomWlanSrv; C:\WINDOWS\System32\drivers\QcomWlanSrvx64.exe [191976 2018-12-20] (Qualcomm Atheros -> Qualcomm Technologies Inc.)
R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [299824 2017-09-13] (Acer Incorporated -> acer)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2001.10-0\NisSrv.exe [3285864 2020-03-02] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WildTangentHelper; C:\Program Files (x86)\WildTangent Games\Integration\WildTangentHelperService.exe [1657136 2020-02-12] (WildTangent Inc -> )
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2001.10-0\MsMpEng.exe [103168 2020-03-02] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WindscribeService; C:\Program Files (x86)\Windscribe\WindscribeService.exe [493232 2019-01-19] (Windscribe Limited -> Windscribe Limited)
 
===================== Drivers (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
S3 amdkmcsp; C:\WINDOWS\system32\DRIVERS\amdkmcsp.sys [101232 2017-06-16] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc. )
R3 amdkmdag; C:\WINDOWS\System32\DriverStore\FileRepository\c0315893.inf_amd64_c7f492d4318c2a29\atikmdag.sys [36557720 2017-07-13] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R3 amdkmdap; C:\WINDOWS\System32\DriverStore\FileRepository\c0315893.inf_amd64_c7f492d4318c2a29\atikmpag.sys [528792 2017-07-13] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R0 amdpsp; C:\WINDOWS\System32\DRIVERS\amdpsp.sys [243048 2017-06-16] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc. )
R3 amduart; C:\WINDOWS\System32\drivers\amduart.sys [91640 2017-05-12] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [107400 2018-10-03] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices)
R3 LMDriver; C:\WINDOWS\System32\drivers\LMDriver.sys [22320 2017-10-30] (Acer Incorporated -> Acer Incorporated)
R3 Qcamain10x64; C:\WINDOWS\System32\drivers\Qcamain10x64.sys [2353664 2018-12-20] (Qualcomm Atheros -> Qualcomm Atheros, Inc.)
R3 RadioShim; C:\WINDOWS\System32\drivers\RadioShim.sys [16688 2017-10-30] (Acer Incorporated -> Acer Incorporated)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [954368 2017-04-18] (Realtek Semiconductor Corp. -> Realtek )
R3 RTSPER; C:\WINDOWS\system32\DRIVERS\RtsPer.sys [782304 2017-06-29] (Realtek Semiconductor Corp. -> Realsil Semiconductor Corporation)
R3 SynRMIHID; C:\WINDOWS\system32\DRIVERS\SynRMIHID.sys [57432 2016-09-05] (Synaptics Incorporated -> Synaptics Incorporated)
R3 tapwindscribe0901; C:\WINDOWS\System32\drivers\tapwindscribe0901.sys [54896 2018-07-06] (Windscribe Limited -> The OpenVPN Project)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [45960 2020-03-02] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [376544 2020-03-02] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [53984 2020-03-02] (Microsoft Windows -> Microsoft Corporation)
 
==================== NetSvcs (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== One month (created) ===================
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2020-03-08 15:28 - 2020-03-08 15:33 - 000022796 _____ C:\Users\cstar\Desktop\FRST.txt
2020-03-08 15:27 - 2020-03-08 15:30 - 000000000 ____D C:\FRST
2020-03-08 15:24 - 2020-03-08 15:24 - 002279936 _____ (Farbar) C:\Users\cstar\Desktop\FRST64.exe
2020-03-08 15:16 - 2020-03-08 15:16 - 000000000 ___HD C:\OneDriveTemp
2020-03-06 21:11 - 2020-03-06 21:11 - 000000020 ___SH C:\Users\cstar\ntuser.ini
2020-03-06 20:58 - 2020-03-06 20:58 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2020-03-06 20:55 - 2020-03-06 20:55 - 000000000 ____D C:\Users\famil\AppData\Local\PackageStaging
2020-03-06 20:53 - 2020-03-06 20:53 - 000000020 ___SH C:\Users\famil\ntuser.ini
2020-03-06 20:52 - 2020-03-07 00:07 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-03-06 20:52 - 2020-03-06 20:52 - 000004302 _____ C:\WINDOWS\system32\Tasks\Software Update Application
2020-03-06 20:52 - 2020-03-06 20:52 - 000002862 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-4035741328-3155629565-2648758277-1004
2020-03-06 20:52 - 2020-03-06 20:52 - 000002862 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-4035741328-3155629565-2648758277-1001
2020-03-06 20:52 - 2020-03-06 20:52 - 000002770 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task v2
2020-03-06 20:52 - 2020-03-06 20:52 - 000002706 _____ C:\WINDOWS\system32\Tasks\UbtFrameworkService
2020-03-06 20:52 - 2020-03-06 20:52 - 000002392 _____ C:\WINDOWS\system32\Tasks\ModifyLinkUpdate
2020-03-06 20:52 - 2020-03-06 20:52 - 000002290 _____ C:\WINDOWS\system32\Tasks\Power Button
2020-03-06 20:52 - 2020-03-06 20:52 - 000002216 _____ C:\WINDOWS\system32\Tasks\Quick Access
2020-03-06 20:52 - 2020-03-06 20:52 - 000000000 ____D C:\WINDOWS\system32\Tasks\Oem
2020-03-06 20:51 - 2020-03-08 15:17 - 000003534 _____ C:\WINDOWS\system32\Tasks\DashlaneUpgradeCheck
2020-03-06 20:51 - 2020-03-08 15:16 - 000003112 _____ C:\WINDOWS\system32\Tasks\AMDLinkUpdate
2020-03-06 20:51 - 2020-03-06 20:53 - 000002658 _____ C:\WINDOWS\system32\Tasks\HPCustParticipation HP DeskJet 3630 series
2020-03-06 20:51 - 2020-03-06 20:52 - 000003852 _____ C:\WINDOWS\system32\Tasks\ACCAgent
2020-03-06 20:51 - 2020-03-06 20:52 - 000003692 _____ C:\WINDOWS\system32\Tasks\AcerCMUpdateTask2.1.16258
2020-03-06 20:51 - 2020-03-06 20:52 - 000003482 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2020-03-06 20:51 - 2020-03-06 20:52 - 000003348 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2020-03-06 20:51 - 2020-03-06 20:52 - 000003124 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2020-03-06 20:51 - 2020-03-06 20:52 - 000002820 _____ C:\WINDOWS\system32\Tasks\ACC
2020-03-06 20:51 - 2020-03-06 20:52 - 000002630 _____ C:\WINDOWS\system32\Tasks\Acer Collection Monitor Application
2020-03-06 20:51 - 2020-03-06 20:52 - 000002596 _____ C:\WINDOWS\system32\Tasks\Acer Collection Application
2020-03-06 20:51 - 2020-03-06 20:52 - 000002408 _____ C:\WINDOWS\system32\Tasks\App Explorer
2020-03-06 20:51 - 2020-03-06 20:52 - 000002328 _____ C:\WINDOWS\system32\Tasks\ACCBackgroundApplication
2020-03-06 20:42 - 2020-03-06 20:51 - 000011433 _____ C:\WINDOWS\diagwrn.xml
2020-03-06 20:42 - 2020-03-06 20:51 - 000011433 _____ C:\WINDOWS\diagerr.xml
2020-03-06 20:22 - 2020-03-07 00:13 - 000840852 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-03-06 20:10 - 2020-03-06 21:11 - 000000000 ____D C:\Users\cstar
2020-03-06 20:10 - 2020-03-06 20:53 - 000000000 ____D C:\Users\famil
2020-03-06 20:10 - 2019-03-19 04:46 - 000001105 _____ C:\Users\famil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-03-06 20:10 - 2019-03-19 04:46 - 000001105 _____ C:\Users\cstar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-03-06 20:02 - 2020-03-06 19:13 - 002874368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2020-03-06 19:58 - 2020-03-07 08:50 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2020-03-06 19:58 - 2020-03-06 20:18 - 000267280 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-03-06 19:57 - 2020-03-06 20:53 - 000000000 ____D C:\Windows.old
2020-03-06 19:40 - 2020-03-06 19:57 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2020-03-06 19:37 - 2020-03-06 19:40 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2020-03-06 19:37 - 2020-03-06 19:37 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2020-03-06 19:29 - 2020-03-06 19:29 - 000000000 ____D C:\ProgramData\USOShared
2020-03-06 19:29 - 2020-03-06 19:29 - 000000000 ____D C:\ProgramData\ssh
2020-03-06 19:18 - 2020-03-06 19:18 - 009711616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 005502464 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 004470272 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2020-03-06 19:18 - 2020-03-06 19:18 - 004308480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 003365376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2020-03-06 19:18 - 2020-03-06 19:18 - 001541632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbengine.exe
2020-03-06 19:18 - 2020-03-06 19:18 - 000939008 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000806400 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000800568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2020-03-06 19:18 - 2020-03-06 19:18 - 000742912 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000722944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapi.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000633344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncController.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncController.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000411136 _____ (Microsoft Corporation) C:\WINDOWS\system32\DavSyncProvider.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000387832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapibase.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DavSyncProvider.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000307200 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveui.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000283264 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeunlock.exe
2020-03-06 19:18 - 2020-03-06 19:18 - 000249856 _____ (Gracenote, Inc.) C:\WINDOWS\SysWOW64\gnsdk_fp.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.XamlHost.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.XamlHost.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveskybackup.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000093104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpfve.sys
2020-03-06 19:18 - 2020-03-06 19:18 - 000053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeUISrv.exe
2020-03-06 19:18 - 2020-03-06 19:18 - 000035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeui.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecerts.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fvecerts.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwmp.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdxm.ocx
2020-03-06 19:18 - 2020-03-06 19:18 - 000005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxmasf.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmploc.DLL
2020-03-06 19:17 - 2020-03-06 19:17 - 025444352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 022635008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 019850240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 019813376 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 018026496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 008013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 007802224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 007754752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 007259648 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 007017472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 006284800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 005912064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 005083352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 005013504 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 004856832 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 004575232 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 004481536 _____ (Microsoft Corporation) C:\WINDOWS\system32\DHolographicDisplay.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 004348616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 004129416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 003820032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 003637760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 003525592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 003484672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 003243080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 002956472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2020-03-06 19:17 - 2020-03-06 19:17 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2020-03-06 19:17 - 2020-03-06 19:17 - 002493720 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 002422592 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVCORE.DLL
2020-03-06 19:17 - 2020-03-06 19:17 - 002399232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 002314952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 002230232 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 002225160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 002175288 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 002138472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVCORE.DLL
2020-03-06 19:17 - 2020-03-06 19:17 - 002132280 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 002072152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 002032128 _____ C:\WINDOWS\system32\rdpnano.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001866272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001835128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001788728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001610240 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001555688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001540096 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001510752 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001505320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001489064 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001417760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001343488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001319936 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001301504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001297936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001273856 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001272360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001263616 _____ (Microsoft Corporation) C:\WINDOWS\system32\opengl32.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001248256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOE.DLL
2020-03-06 19:17 - 2020-03-06 19:17 - 001244944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001214976 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001151816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001138688 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001106944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001105776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001098720 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001080832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001060352 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001039872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOE.DLL
2020-03-06 19:17 - 2020-03-06 19:17 - 001012792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001000960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000996352 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000986112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe
2020-03-06 19:17 - 2020-03-06 19:17 - 000952416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000904704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\opengl32.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000893952 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2020-03-06 19:17 - 2020-03-06 19:17 - 000890368 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000852480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000843776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000835584 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000805376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000775680 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000749568 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000744248 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOE.DLL
2020-03-06 19:17 - 2020-03-06 19:17 - 000737552 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOD.DLL
2020-03-06 19:17 - 2020-03-06 19:17 - 000705536 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000685056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000682744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOE.DLL
2020-03-06 19:17 - 2020-03-06 19:17 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000666280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOD.DLL
2020-03-06 19:17 - 2020-03-06 19:17 - 000664576 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdbui.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000609280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000571392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiaaut.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000551824 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000537608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000529408 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe
2020-03-06 19:17 - 2020-03-06 19:17 - 000516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000510768 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2020-03-06 19:17 - 2020-03-06 19:17 - 000486400 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000476672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxbde40.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000472576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedRealitySvc.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000463272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000460288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcSpecfc.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000450560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxdiagn.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe
2020-03-06 19:17 - 2020-03-06 19:17 - 000437760 _____ (Microsoft Corporation) C:\WINDOWS\system32\P2PGraph.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000432256 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000430080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000430080 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000428544 _____ (Microsoft Corporation) C:\WINDOWS\system32\p2psvc.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000421376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2020-03-06 19:17 - 2020-03-06 19:17 - 000420360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000417280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\provplatformdesktop.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000386048 _____ (curl, hxxps://curl.haxx.se/) C:\WINDOWS\SysWOW64\curl.exe
2020-03-06 19:17 - 2020-03-06 19:17 - 000380928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcLayers.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000376320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspbde40.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000366416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000363840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000358400 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000356864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\P2PGraph.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000353792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnrpsvc.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000345088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\udfs.sys
2020-03-06 19:17 - 2020-03-06 19:17 - 000341504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000327680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\upnphost.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\VAN.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000315392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxdiag.exe
2020-03-06 19:17 - 2020-03-06 19:17 - 000315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcLayers.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd2x40.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000309248 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapisrv.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_AnalogShell.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe
2020-03-06 19:17 - 2020-03-06 19:17 - 000267528 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFMCP.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000261016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityUxHost.exe
2020-03-06 19:17 - 2020-03-06 19:17 - 000257536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\provplatformdesktop.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpRelayTransport.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapisrv.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\srrstr.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000245248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\glu32.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msltus40.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sti.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\IndexedDbLegacy.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000219136 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscinterop.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000219136 _____ (Microsoft Corporation) C:\WINDOWS\system32\P2P.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdsdwmdr.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiagSvc.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\p2pnetsh.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000194560 _____ (Microsoft Corporation) C:\WINDOWS\system32\recdisc.exe
2020-03-06 19:17 - 2020-03-06 19:17 - 000186880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2020-03-06 19:17 - 2020-03-06 19:17 - 000185856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceCenter.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngOnline.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetpp.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IndexedDbLegacy.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000174080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\p2pnetsh.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000173568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\P2P.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpdr.sys
2020-03-06 19:17 - 2020-03-06 19:17 - 000164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscinterop.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\glu32.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000158208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2020-03-06 19:17 - 2020-03-06 19:17 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000145720 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-kernel-processor-power-events.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sud.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000129088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWSD.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000119808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiadss.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFolders.exe
2020-03-06 19:17 - 2020-03-06 19:17 - 000100664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmcl.sys
2020-03-06 19:17 - 2020-03-06 19:17 - 000099712 _____ (Microsoft Corporation) C:\WINDOWS\system32\FsIso.exe
2020-03-06 19:17 - 2020-03-06 19:17 - 000097080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dfrgui.exe
2020-03-06 19:17 - 2020-03-06 19:17 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdSSDP.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcXtrnal.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2020-03-06 19:17 - 2020-03-06 19:17 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdbusenum.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvvmtransport.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedsbs.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Groupinghc.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2020-03-06 19:17 - 2020-03-06 19:17 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvvmtransport.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ComputerDefaults.exe
2020-03-06 19:17 - 2020-03-06 19:17 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iemigplugin.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\reg.exe
2020-03-06 19:17 - 2020-03-06 19:17 - 000059221 _____ C:\WINDOWS\system32\srms.dat
2020-03-06 19:17 - 2020-03-06 19:17 - 000058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\udhisapi.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\SrTasks.exe
2020-03-06 19:17 - 2020-03-06 19:17 - 000042512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe
2020-03-06 19:17 - 2020-03-06 19:17 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XInput1_4.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\upnpcont.exe
2020-03-06 19:17 - 2020-03-06 19:17 - 000032056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys
2020-03-06 19:17 - 2020-03-06 19:17 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimsg.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimsg.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000019768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.exe
2020-03-06 19:17 - 2020-03-06 19:17 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiatrace.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcXtrnal.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedssync.exe
2020-03-06 19:16 - 2020-03-06 19:17 - 025900032 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 014816256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 006519752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 006083832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 005943296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 005848840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 005764664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 005112320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 004538880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 004150272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AI.MachineLearning.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 003967888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 003742544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneCoreUAPCommonProxyStub.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 002876416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 002821120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 002800128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2020-03-06 19:16 - 2020-03-06 19:16 - 002743808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 002584008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 002576384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 002561536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 002490712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 002305536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 002260176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 002095104 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001985928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001957008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001952360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001916744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001893888 _____ (The ICU Project) C:\WINDOWS\SysWOW64\icu.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001847808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsservices.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001730560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001693184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001664696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001664680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001651848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001616784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001587712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001563648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001562424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001535288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001531656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001515008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmgaclient.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001488384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001473488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001458688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001413840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001398584 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 001368576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001356800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001348096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001334064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ttdrecordcpu.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001321472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001305608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContentDeliveryManager.Utilities.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001284096 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001283592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2020-03-06 19:16 - 2020-03-06 19:16 - 001260544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpsharercom.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001244672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001218120 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 001216000 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdclt.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 001213752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001195008 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdengin2.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001189376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Graphics.Display.DisplayEnhancementService.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001178816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001154448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001122816 _____ (Microsoft Corporation) C:\WINDOWS\system32\CBDHSvc.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001101312 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001083392 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001079296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001077264 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 001067008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001062912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmgaserver.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 001059840 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 001054864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001047968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001020032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001007616 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001007160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001006592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000957952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000928776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000910848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MiracastReceiver.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000910336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontext.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000904504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000895488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000892488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000875008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000864768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000842552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000839680 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000829536 _____ (Microsoft Corporation) C:\WINDOWS\system32\BioIso.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000822072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000813568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000800048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000792296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputHost.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000788992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000784384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000783480 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000777528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Services.TargetedContent.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000775768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000774664 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000769336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000769024 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcIsoCtnr.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000768528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000768488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000749568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprddm.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000739328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000729088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FlightSettings.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000704512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.FileExplorer.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000700416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BTAGService.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000699904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000696320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsreg.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000691712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000679368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000678400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiaaut.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000673456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000673080 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000671232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiaservc.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000670720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000669496 _____ (Microsoft Corporation) C:\WINDOWS\system32\computecore.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000669352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000652800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000646144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000632320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000631808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000629248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.Search.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000628400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000612352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000602224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscms.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000599552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000599552 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000597816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000593128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000588256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000574976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_9.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000568120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000564736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Input.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000558080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSDApi.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000546816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxdiagn.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000542288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000541696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResourceMapper.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000539648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9on12.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000538624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000532480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000531464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000529408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ddraw.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000521728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Launcher.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000512000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000510464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000507152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskschd.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000501232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp_win.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000500736 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2020-03-06 19:16 - 2020-03-06 19:16 - 000497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000494080 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.FileExplorer.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000488056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000487576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase_enclave.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000478800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sechost.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000477184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000464384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000463272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000462848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\upnphost.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000454736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppResolver.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000453632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000453432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000450360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11on12.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000441072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MediaControl.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000423936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputSwitch.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000422008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000421376 _____ (curl, hxxps://curl.haxx.se/) C:\WINDOWS\system32\curl.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000415544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000415232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2020-03-06 19:16 - 2020-03-06 19:16 - 000407040 _____ (Microsoft Corporation) C:\WINDOWS\system32\DispBroker.Desktop.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000406480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Enumeration.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000405632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000399360 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000384000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000383984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MMDevAPI.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000382976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000380944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000380416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000379840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ws2_32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000376832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webauthn.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000375504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000369664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxdiag.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskcomp.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000354816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Magnify.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000346624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\secproc.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000336928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000332288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000327680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2020-03-06 19:16 - 2020-03-06 19:16 - 000321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\sti.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000321024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000320512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000317952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000316216 _____ (Microsoft Corporation) C:\WINDOWS\system32\computestorage.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000312832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WiFiDisplay.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000311296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL
2020-03-06 19:16 - 2020-03-06 19:16 - 000307712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000300392 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000291840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Diagnostics.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000285256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000283688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ttdwriter.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000283136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000281600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000279624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winsta.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000279040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000274944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Lights.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000274464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BCP47Langs.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpviewerax.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000270336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000267496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000251512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000240128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ssdpsrv.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000236520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfgmgr32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\icm32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptui.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmd.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastapi.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2020-03-06 19:16 - 2020-03-06 19:16 - 000224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCenter.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000222208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netplwiz.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000217600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msutb.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000211968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFilterHost.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000210744 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\sti_ci.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000199680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\accessibilitycpl.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000199480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000195584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\container.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000193800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000190464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regapi.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000190256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logoncli.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000189440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwpolicyiomgr.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000187920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ifsutil.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000187392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schtasks.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000186880 _____ (Microsoft Corp.) C:\WINDOWS\system32\Defrag.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallServiceTasks.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\twext.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\sud.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiapi.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000170920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xmllite.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000167136 _____ (Microsoft Corporation) C:\WINDOWS\system32\vertdll.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000166400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MicrosoftAccountTokenProvider.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000163840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BitLockerCsp.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000162816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincredui.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000158208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Winlangdb.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000157184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ComposableShellProxyStub.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWSD.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000150536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmvdsitf.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000149512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ulib.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdrsvc.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000148992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twext.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiadss.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpatialAudioLicenseSrv.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000143808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imm32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000139264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prntvpt.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\t2embed.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000137864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devobj.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000136536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\omadmapi.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000135480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wldp.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000135000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000133464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BCP47mrm.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000131584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwbase.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000127520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmcmnutils.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinHvPlatform.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdshext.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000125232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KerbClientShared.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000120344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\profext.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000116904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000116728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rmclient.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000115200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleprn.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000113152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssitlb.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000110080 _____ C:\WINDOWS\system32\ResBParser.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdSSDP.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GraphicsCapture.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvsetup.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000105832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpenWith.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\dfrgui.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cdfs.sys
2020-03-06 19:16 - 2020-03-06 19:16 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mapistub.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mapi32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GameChatTranscription.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000098592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Display.BrightnessOverride.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\compstui.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\globinputhost.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000096032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Utilman.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EaseOfAccessDialog.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000093496 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompMgmtLauncher.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000089328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafPrintProvider.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000088064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3api.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3msm.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000084496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
2020-03-06 19:16 - 2020-03-06 19:16 - 000084488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winhvr.sys
2020-03-06 19:16 - 2020-03-06 19:16 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiarpc.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dtdump.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcbuilder.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sethc.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ComputerDefaults.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usp10.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\reg.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000072816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000072704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzautoupdate.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\udhisapi.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\keyiso.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clfsw32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\enterpriseresourcemanager.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AtBroker.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ssdpapi.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\coloradapterclient.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ApiSetHost.AppExecutionAlias.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmgaproxystub.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\printui.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000061240 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvhostsvc.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssprxy.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000056832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devrtl.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000056008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptdll.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efsext.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\findnetprinters.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtutils.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnrollCtrl.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ByteCodeGenerator.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbauth.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edpnotify.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AssignedAccessRuntime.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscntrs.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguageProfileCallback.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GameInput.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\XInput1_4.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ddrawex.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\compact.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\upnpcont.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000039936 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcicda.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XInputUap.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Websocket.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\enrollmentapi.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000033048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NtlmShared.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmintegrator.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerCookies.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciwave.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciseq.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000021520 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winnlsres.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfapigp.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiatrace.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fixmapi.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedssync.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDJPN.DLL
2020-03-06 19:16 - 2020-03-06 19:16 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDKOR.DLL
2020-03-06 19:16 - 2020-03-06 19:16 - 000012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbd106.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DMAlertListener.ProxyStub.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimg32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCertResources.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6r.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3r.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin
2020-03-06 19:16 - 2020-03-06 19:16 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin
2020-03-06 19:16 - 2020-03-06 19:16 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin
2020-03-06 19:16 - 2020-03-06 19:16 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin
2020-03-06 19:16 - 2020-03-06 19:16 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin
2020-03-06 19:16 - 2020-03-06 19:16 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin
2020-03-06 19:16 - 2020-03-06 19:16 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin
2020-03-06 19:16 - 2020-03-06 19:16 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin
2020-03-06 19:16 - 2020-03-06 19:16 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin
2020-03-06 19:16 - 2020-03-06 19:16 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin
2020-03-06 19:16 - 2020-03-06 19:16 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin
2020-03-06 19:16 - 2020-03-06 19:16 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin
2020-03-06 19:15 - 2020-03-06 19:15 - 005865272 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwizimg.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 005041664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 003752960 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 002861568 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsservices.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 002773776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 002703872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 002147328 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 001858560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 001845408 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 001835008 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 001697792 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 001697280 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 001687040 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 001647072 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 001412096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 001375232 _____ (Microsoft Corporation) C:\WINDOWS\system32\APMon.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 001097216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2020-03-06 19:15 - 2020-03-06 19:15 - 000921600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000913408 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000896512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdmDiagnostics.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000888056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000875008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprddm.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000861696 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000857088 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2020-03-06 19:15 - 2020-03-06 19:15 - 000832000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000818688 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000776704 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockController.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000680448 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000634880 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000629760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000618496 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000612864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000610816 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000595968 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\ddraw.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000551424 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2020-03-06 19:15 - 2020-03-06 19:15 - 000541480 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000518656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000509440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000507704 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwizeng.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000455680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2020-03-06 19:15 - 2020-03-06 19:15 - 000443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000394752 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000382976 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000379192 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys
2020-03-06 19:15 - 2020-03-06 19:15 - 000329216 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiagnosticLogCSP.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpviewerax.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000315904 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenterprisediagnostics.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\coredpus.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000278080 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe
2020-03-06 19:15 - 2020-03-06 19:15 - 000270848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngctasks.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000253952 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerCsp.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000248320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastapi.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000244736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndproxy.sys
2020-03-06 19:15 - 2020-03-06 19:15 - 000243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\VideoHandlers.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Gpu.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpnServiceDS.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincredui.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000205312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcsps.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiapi.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\prntvpt.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000176440 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxlib.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000173568 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2020-03-06 19:15 - 2020-03-06 19:15 - 000170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\NcaSvc.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000164776 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmapi.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000162696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcmnutils.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000153088 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvcext.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\luafv.sys
2020-03-06 19:15 - 2020-03-06 19:15 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000132912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Display.BrightnessOverride.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000132608 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_ForceSync.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tunnel.sys
2020-03-06 19:15 - 2020-03-06 19:15 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptcatsvc.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafPrintProvider.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\compstui.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000114176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys
2020-03-06 19:15 - 2020-03-06 19:15 - 000111104 _____ (Microsoft Corporation) C:\WINDOWS\system32\AxInstSv.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpoext.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcbuilder.exe
2020-03-06 19:15 - 2020-03-06 19:15 - 000093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wanarp.sys
2020-03-06 19:15 - 2020-03-06 19:15 - 000084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterpriseresourcemanager.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\efsext.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdProxy.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000066832 _____ (Microsoft Corporation) C:\WINDOWS\system32\iumcrypt.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\findnetprinters.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\printui.exe
2020-03-06 19:15 - 2020-03-06 19:15 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtutils.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\edpnotify.exe
2020-03-06 19:15 - 2020-03-06 19:15 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AxInstUI.exe
2020-03-06 19:15 - 2020-03-06 19:15 - 000056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnppolicy.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ddrawex.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mskssrv.sys
2020-03-06 19:15 - 2020-03-06 19:15 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\posetup.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmproxy.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndistapi.sys
2020-03-06 19:15 - 2020-03-06 19:15 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsunattend.exe
2020-03-06 19:15 - 2020-03-06 19:15 - 000017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmsprep.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000016696 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwizres.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d8thk.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000011576 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxlibres.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMAlertListener.ProxyStub.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3r.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 009929016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 007905208 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 007600448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 007263992 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 006435840 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 006167552 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 004562896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 004140544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 004047360 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 004009472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Service.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 003792384 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 003728896 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 003654656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 003550208 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 003387392 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 003372440 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 002988552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 002871848 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 002766088 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 002698768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 002590208 _____ C:\WINDOWS\system32\dwmscene.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 002178048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmgaclient.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 002084576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001999960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001974824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 001940952 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001918976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001856000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConstraintIndex.Search.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001830200 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001819136 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreShell.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001757096 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2020-03-06 19:14 - 2020-03-06 19:14 - 001743680 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001726480 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001717776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001657856 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001655880 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001607680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001553408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmgaserver.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 001512320 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 001505592 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001482040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 001480192 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocoreworker.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 001423872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001395600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001394168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001372160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001366128 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2020-03-06 19:14 - 2020-03-06 19:14 - 001330952 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001313792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001300280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 001261464 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001257472 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001182232 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 001170960 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001084728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Services.TargetedContent.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001083904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001051448 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001042944 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2020-03-06 19:14 - 2020-03-06 19:14 - 001023128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001009664 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000986936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000982840 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000977688 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000974336 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthSSO.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000928120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000911824 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000891736 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000878080 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2020-03-06 19:14 - 2020-03-06 19:14 - 000875448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000858112 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000844800 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000824848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000822416 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000818656 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000811536 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000811160 _____ C:\WINDOWS\SysWOW64\locale.nls
2020-03-06 19:14 - 2020-03-06 19:14 - 000811160 _____ C:\WINDOWS\system32\locale.nls
2020-03-06 19:14 - 2020-03-06 19:14 - 000797112 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000771584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000759488 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskschd.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000758800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000752792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000747320 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.immersiveshell.serviceprovider.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000728576 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\mousocoreworker.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000686080 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDApi.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000683008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplicationFrame.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000678928 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000674280 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000670208 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000661816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000649728 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicesFlowBroker.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000642560 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000639400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp_win.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000638264 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000637440 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000617784 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000606720 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000606112 _____ (Microsoft Corporation) C:\WINDOWS\system32\sechost.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000604984 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000598528 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000596008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppResolver.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_PCDisplay.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000587064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000586768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000563712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000561680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000558592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000552448 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000550400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000545432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000535552 _____ (Microsoft Corporation) C:\WINDOWS\system32\usosvc.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000533504 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000524216 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000522176 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000518456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000516648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000516096 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000514576 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000513336 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000511000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64win.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000505856 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputSwitch.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000497664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000497664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000492032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Narrator.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000480768 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskcomp.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000477496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2020-03-06 19:14 - 2020-03-06 19:14 - 000474112 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudDomainJoinDataModelServer.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000467952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000467456 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2020-03-06 19:14 - 2020-03-06 19:14 - 000465208 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000461320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000459896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000457216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cldflt.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000456504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000448000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000446464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Magnify.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000442704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2_32.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000437776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000435200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000416056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000400696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000398728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000396288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Lights.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000392704 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationControllerPS.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000390456 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000386320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppLockerCSP.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000372752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000369504 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47Langs.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000363624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000358944 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsta.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000353960 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000350720 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SpeechPrivacy.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000350208 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000344064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.BlueLightReduction.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000335448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000331776 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFWSD.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ComposableShellProxyStub.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000324616 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcommdlg.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000317440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConhostV1.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000314368 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000311096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000293376 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000293344 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgmgr32.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000292352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000284160 _____ (Microsoft Corporation) C:\WINDOWS\system32\container.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000283144 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000281088 _____ (Microsoft Corporation) C:\WINDOWS\system32\msutb.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmd.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\DesktopSwitcherDataModel.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000260920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000259984 _____ (Microsoft Corporation) C:\WINDOWS\system32\logoncli.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000258048 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_ManagePhone.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnservice.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000251704 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000247856 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000237880 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\accessibilitycpl.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwpolicyiomgr.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\schtasks.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000225080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000220984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdigest.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000214032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ifsutil.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000210400 _____ (Microsoft Corporation) C:\WINDOWS\system32\xmllite.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000205112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winquic.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\regapi.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000202552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\appid.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000201528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Win32CompatibilityAppraiserCSP.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000194176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winquic.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000186672 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47mrm.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000180536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000180024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ulib.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000179720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000178192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000176152 _____ (Microsoft Corporation) C:\WINDOWS\system32\imm32.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000165832 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000164368 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000162384 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwbase.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\srpapi.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000159112 _____ (Microsoft Corporation) C:\WINDOWS\system32\devobj.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000157752 _____ (Microsoft Corporation) C:\WINDOWS\system32\rmclient.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmgaproxystub.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000152408 _____ (Microsoft Corporation) C:\WINDOWS\system32\KerbClientShared.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserexport.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000147184 _____ (Microsoft Corporation) C:\WINDOWS\system32\smss.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000146744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000146416 _____ (Microsoft Corporation) C:\WINDOWS\system32\profext.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000144376 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000143160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000142544 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingUI.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000141840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000140496 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmredir.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000132624 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudDomainJoinAUG.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000129848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mup.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvsetup.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000127280 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000123920 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdnet.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatecsp.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000119840 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpenWith.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Utilman.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\EaseOfAccessDialog.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000117264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bindflt.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000115120 _____ (Microsoft Corporation) C:\WINDOWS\system32\phoneactivate.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000113664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Taskbar.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000113160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mountmgr.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetDriverInstall.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000107832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairingExperienceMEM.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreShellExtFramework.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000106808 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000105488 _____ (Microsoft Corporation) C:\WINDOWS\system32\icfupgd.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000102216 _____ (Microsoft Corporation) C:\WINDOWS\system32\changepk.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\sethc.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSReset.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000092624 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskhostw.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\keyiso.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000087048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\npfs.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AtBroker.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthSystray.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\clfsw32.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetDriverInstall.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\usp10.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwm.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000071480 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\UsoClient.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000066360 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptdll.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcadm.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000063288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthHost.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\vss_ps.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\devrtl.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000058880 _____ C:\WINDOWS\system32\runexehelper.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000053248 _____ C:\WINDOWS\system32\Drivers\UsbPmApi.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcalua.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nsiproxy.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000047616 _____ C:\WINDOWS\system32\UsbPmApi.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000047616 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000046632 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser_broker.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Websocket.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\compact.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000043536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msfs.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpgradeResultsUI.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000039304 _____ (Microsoft Corporation) C:\WINDOWS\system32\NtlmShared.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000037888 _____ C:\WINDOWS\system32\usocoreps.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000037392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000036368 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\winnsi.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxssrv.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\nsisvc.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000028344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winnsi.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidtel.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ws2ifsl.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000024792 _____ (Microsoft Corporation) C:\WINDOWS\system32\nsi.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfapigp.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wci.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000020944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000020352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nsi.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\winnlsres.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmsgapi.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\applockerfltr.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\bindflt.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaevts.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\pacjsworker.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimg32.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tier2punctuations.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 017787904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 007849424 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 007582752 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 007278592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 006231200 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 005890048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AI.MachineLearning.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 004615376 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 004470784 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 004005888 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 003703296 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 003590968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 003353088 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 003327256 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 003263488 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 003261440 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 003184128 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 003141120 _____ (Microsoft Corporation) C:\WINDOWS\system32\directml.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 003110400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 003084800 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 002870272 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 002714624 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 002656768 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 002552120 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 002473976 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 002466304 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 002456064 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 002448712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 002321408 _____ (The ICU Project) C:\WINDOWS\system32\icu.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 002284544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 002249216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 002232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 002125904 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 002120704 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcDesktopMonSvc.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 002114048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 002071552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001942016 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001920512 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001884200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001841152 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001784832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001783296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001761792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001748480 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001744400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001687040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001635328 _____ (Microsoft Corporation) C:\WINDOWS\system32\TaskFlowDataEngine.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001616608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ttdrecordcpu.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001602560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001581056 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001543168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowManagement.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001497088 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001481216 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpsharercom.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001428992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 001413912 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001383856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001337872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001332736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MiracastReceiver.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001282048 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsf3gip.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001259416 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 001180160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001159680 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001158656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001150240 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputHost.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001149928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 001098240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Signals.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001094656 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcRefreshTask.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001091584 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001084216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001070080 _____ (Microsoft Corporation) C:\WINDOWS\system32\BTAGService.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001069064 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001036800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001029432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ClipSp.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 001026792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001006904 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000977408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontext.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000957952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000944664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000931840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000916480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000913920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000893440 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000878080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Service.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000874296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000851968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000841216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000839680 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9on12.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000833312 _____ (Microsoft Corporation) C:\WINDOWS\system32\pkeyhelper.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000826368 _____ (Microsoft Corporation) C:\WINDOWS\system32\printfilterpipelinesvc.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000824832 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000817152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\PEAuth.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000810496 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrSvc.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000808960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Input.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000804872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000803840 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000782848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000750080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.Search.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000750080 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000737280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Launcher.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000732200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000727040 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntime.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000727040 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000722288 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000716288 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntimewindows.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000706760 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscms.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000702464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000680448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000657424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000656960 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11on12.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000654912 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000642008 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000640512 _____ (Microsoft Corporation) C:\WINDOWS\system32\vds.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000637968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000601088 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000594944 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_9.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000589592 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000551736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Vid.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000539648 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2020-03-06 19:13 - 2020-03-06 19:13 - 000534528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.UserService.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000531976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2020-03-06 19:13 - 2020-03-06 19:13 - 000524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000524264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Enumeration.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000481592 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000477696 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000472064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000464384 _____ (Microsoft Corporation) C:\WINDOWS\system32\webauthn.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000464384 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.ConversationalAgent.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000449888 _____ (Microsoft Corporation) C:\WINDOWS\system32\MMDevAPI.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000441144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000437776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000427008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000425264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000422712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000420152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmicmiplugin.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000415808 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000404480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\exfat.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000395776 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000373248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Diagnostics.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\MbbCx.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000355840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicSvc.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000352256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcApi.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000342896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ttdwriter.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000338800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000338432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000336960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSrvPolicyManager.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000322504 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000312320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000296760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000295936 _____ (Microsoft Corporation) C:\WINDOWS\system32\TDLMigration.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000292664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000291328 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceDirectoryClient.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000291256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\directxdatabaseupdater.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicCapsule.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcTok.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000277504 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_CapabilityAccess.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3svc.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateDeploymentProvider.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000253952 _____ (Microsoft Corporation) C:\WINDOWS\system32\icm32.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000250880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000249656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\ManageCI.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000245248 _____ (Microsoft Corporation) C:\WINDOWS\system32\wosc.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsbas.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApproveChildRequest.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000233472 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000232448 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallServiceTasks.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountTokenProvider.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000223032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelppm.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Winlangdb.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgiadaptercache.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000204816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spacedump.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000201016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdppm.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000199480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdk8.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000194064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\fcon.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\AarSvc.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000182288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpioclx.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000180240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000178688 _____ (Microsoft Corporation) C:\WINDOWS\system32\appsruprov.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmvdsitf.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatialAudioLicenseSrv.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000160256 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_AppExecutionAlias.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000151568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbus.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_BackgroundApps.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000149504 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleprn.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\GraphicsCapture.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000132608 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Storage.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\globinputhost.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsutil.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000129024 _____ (Microsoft Corporation) C:\WINDOWS\system32\UtcDecoderHost.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000129024 _____ (Microsoft Corporation) C:\WINDOWS\system32\GameChatTranscription.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000128528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssitlb.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplicationControlCSP.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapistub.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapi32.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\vds_ps.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3msm.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS
2020-03-06 19:13 - 2020-03-06 19:13 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3api.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000089912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicAgent.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000088488 _____ (Microsoft Corporation) C:\WINDOWS\system32\coloradapterclient.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000088352 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApiSetHost.AppExecutionAlias.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000079376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\uaspstor.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\CustomInstallExec.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\autopilot.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.EnrollmentStatusTracking.ConfigProvider.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000067112 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsManagementServiceWinRt.ProxyStub.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo-overrides.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnrollCtrl.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbauth.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidspi.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ByteCodeGenerator.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AssignedAccessRuntime.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguageProfileCallback.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\audioresourceregistrar.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\GameInput.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000055304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storufs.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000052752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmstorfl.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringconfigsp.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\XInputUap.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcicda.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000047208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\printfilterpipelineprxy.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\cellulardatacapabilityhandler.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.Common.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000043536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storvsc.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiredNetworkCSP.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerCookies.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\IcsEntitlementHost.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthMini.SYS
2020-03-06 19:13 - 2020-03-06 19:13 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevQueryBroker.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciwave.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\FaxPrinterInstaller.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\KNetPwrDepBroker.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciseq.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000028936 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmbuspipe.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicPS.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscisvif.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Win32_DeviceGuard.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsldr.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\autopilotdiag.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\CSystemEventsBrokerClient.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000023352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\isapnp.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\fixmapi.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000019256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msisadrv.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscproxystub.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsilog.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dstokenclean.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscadminui.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCertResources.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6r.dll
2020-03-06 19:12 - 2020-03-06 19:13 - 000208184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\processr.sys
2020-03-06 19:12 - 2020-03-06 19:12 - 000804664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2020-03-06 19:12 - 2020-03-06 19:12 - 000425472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\HdAudio.sys
2020-03-06 19:12 - 2020-03-06 19:12 - 000355000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2020-03-06 19:12 - 2020-03-06 19:12 - 000324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys
2020-03-06 19:12 - 2020-03-06 19:12 - 000257536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbaudio2.sys
2020-03-06 19:12 - 2020-03-06 19:12 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthA2dp.sys
2020-03-06 19:12 - 2020-03-06 19:12 - 000069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\monitor.sys
2020-03-06 19:12 - 2020-03-06 19:12 - 000047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\devauthe.sys
2020-03-06 19:12 - 2020-03-06 19:12 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WSDScan.sys
2020-03-06 19:12 - 2020-03-06 19:12 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\serscan.sys
2020-03-06 18:53 - 2020-03-06 18:53 - 000903168 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsFilt.dll
2020-03-06 18:53 - 2020-03-06 18:53 - 000568320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsFilt.dll
2020-03-06 18:53 - 2020-03-06 18:53 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\XPSSHHDR.dll
2020-03-06 18:53 - 2020-03-06 18:53 - 000081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XPSSHHDR.dll
2020-03-06 18:53 - 2020-03-06 18:53 - 000076060 _____ C:\WINDOWS\SysWOW64\xpsrchvw.xml
2020-03-06 18:53 - 2020-03-06 18:53 - 000076060 _____ C:\WINDOWS\system32\xpsrchvw.xml
2020-03-06 18:52 - 2020-03-06 18:52 - 001166488 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2020-03-06 18:52 - 2020-03-06 18:52 - 000778912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2020-03-06 18:52 - 2020-03-06 18:52 - 000124568 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2020-03-06 18:52 - 2020-03-06 18:52 - 000103072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2020-03-06 18:52 - 2020-03-06 18:52 - 000035592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2020-03-06 18:52 - 2020-03-06 18:52 - 000035592 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2020-03-06 18:52 - 2020-03-06 18:52 - 000000000 ____D C:\Program Files\Reference Assemblies
2020-03-06 18:52 - 2020-03-06 18:52 - 000000000 ____D C:\Program Files\MSBuild
2020-03-06 18:52 - 2020-03-06 18:52 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2020-03-06 18:52 - 2020-03-06 18:52 - 000000000 ____D C:\Program Files (x86)\MSBuild
2020-03-06 18:44 - 2020-03-06 18:44 - 000492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2020-03-06 18:44 - 2020-03-06 18:44 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2020-02-28 16:36 - 2020-03-06 20:54 - 000000000 ___DC C:\WINDOWS\Panther
2020-02-19 09:33 - 2020-02-01 07:36 - 000801080 _____ (Microsoft Corporation) C:\WINDOWS\system32\sedplugins.dll
2020-02-16 20:23 - 2020-02-16 20:23 - 000063827 _____ C:\Users\cstar\Downloads\Climax (2018) [1080p] [WEBRip] [YTS.LT].torrent
2020-02-16 20:22 - 2020-02-16 20:22 - 000044345 _____ C:\Users\cstar\Downloads\Brutal (2017) [1080p] [BluRay] [YTS.LT].torrent
2020-02-16 20:11 - 2020-02-16 20:11 - 000070261 _____ C:\Users\cstar\Downloads\Come to Daddy (2019) [1080p] [WEBRip] [5.1] [YTS.LT].torrent
2020-02-09 10:57 - 2020-02-09 10:57 - 011789216 _____ C:\Users\famil\Downloads\TotalAV_Setup (1).exe
 
==================== One month (modified) ==================
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2020-03-08 15:33 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\AppReadiness
2020-03-08 15:33 - 2019-03-19 04:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-03-08 15:27 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\AppLocker
2020-03-08 15:20 - 2018-12-26 20:11 - 000000000 ____D C:\Users\cstar\AppData\Local\Plex Media Server
2020-03-08 15:16 - 2018-09-05 17:35 - 000000000 ___RD C:\Users\famil\OneDrive
2020-03-08 15:16 - 2018-09-05 16:35 - 000000000 ___RD C:\Users\cstar\3D Objects
2020-03-08 15:16 - 2018-09-05 16:35 - 000000000 ____D C:\Users\cstar\AppData\Local\Packages
2020-03-08 15:16 - 2018-06-07 15:02 - 000000000 __RHD C:\Users\Public\AccountPictures
2020-03-08 09:03 - 2018-09-05 17:18 - 000000000 ____D C:\Users\famil\AppData\Local\Host App Service
2020-03-08 08:59 - 2019-03-19 04:50 - 000000000 ____D C:\WINDOWS\INF
2020-03-07 04:42 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\appcompat
2020-03-07 00:29 - 2019-03-19 04:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-03-07 00:06 - 2019-03-19 04:37 - 001048576 _____ C:\WINDOWS\system32\config\BBI
2020-03-07 00:06 - 2018-06-07 15:19 - 000065536 _____ C:\WINDOWS\psp_storage.bin
2020-03-06 23:26 - 2019-03-19 04:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-03-06 21:13 - 2018-09-05 17:19 - 000000000 ____D C:\Users\famil\AppData\Local\Packages
2020-03-06 21:11 - 2019-03-19 04:52 - 000000000 ___RD C:\WINDOWS\PrintDialog
2020-03-06 20:54 - 2018-09-05 17:20 - 000000000 ___RD C:\Users\famil\3D Objects
2020-03-06 20:52 - 2019-03-19 04:37 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2020-03-06 20:51 - 2019-03-19 04:52 - 000000000 ____D C:\Program Files\Windows Defender
2020-03-06 20:22 - 2018-09-05 16:42 - 000002348 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-03-06 20:22 - 2018-09-05 16:42 - 000002307 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2020-03-06 20:22 - 2018-09-05 16:42 - 000002307 _____ C:\ProgramData\Desktop\Google Chrome.lnk
2020-03-06 20:16 - 2019-02-13 20:47 - 000000000 ____D C:\Users\cstar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AviSynth
2020-03-06 20:16 - 2019-02-13 20:43 - 000000000 ____D C:\Users\cstar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HandBrake
2020-03-06 20:16 - 2018-10-24 10:37 - 000000000 ____D C:\Users\famil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
2020-03-06 20:03 - 2019-03-19 04:52 - 000000000 ____D C:\ProgramData\USOPrivate
2020-03-06 20:03 - 2018-06-07 15:33 - 000074891 _____ C:\WINDOWS\system32\Drivers\rtkhdasetting.zip
2020-03-06 20:03 - 2018-06-07 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2020-03-06 20:03 - 2018-06-07 15:32 - 000000000 ____D C:\WINDOWS\system32\DAX3
2020-03-06 20:03 - 2018-06-07 15:32 - 000000000 ____D C:\WINDOWS\system32\DAX2
2020-03-06 20:03 - 2018-06-07 15:12 - 000000000 ____D C:\WINDOWS\SysWOW64\sda
2020-03-06 19:57 - 2020-01-11 15:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windscribe
2020-03-06 19:57 - 2019-12-26 21:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Plex Media Server
2020-03-06 19:57 - 2019-06-18 17:15 - 000000000 ____D C:\Program Files\UNP
2020-03-06 19:57 - 2019-03-19 04:56 - 000000000 ____D C:\WINDOWS\Setup
2020-03-06 19:57 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2020-03-06 19:57 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\spool
2020-03-06 19:57 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\oobe
2020-03-06 19:57 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\NDF
2020-03-06 19:57 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\ServiceState
2020-03-06 19:57 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\Registration
2020-03-06 19:57 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2020-03-06 19:57 - 2019-03-19 04:49 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2020-03-06 19:57 - 2019-02-13 20:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2020-03-06 19:57 - 2019-02-13 20:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AviSynth
2020-03-06 19:57 - 2019-02-03 18:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Problem Report Wizard
2020-03-06 19:57 - 2018-12-26 16:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Backup and Sync from Google
2020-03-06 19:57 - 2018-09-15 07:33 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2020-03-06 19:57 - 2018-09-15 07:33 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2020-03-06 19:57 - 2018-09-05 23:02 - 000000000 ____D C:\WINDOWS\oem
2020-03-06 19:57 - 2018-09-05 17:22 - 000000000 ____D C:\WINDOWS\system32\MRT
2020-03-06 19:57 - 2018-09-05 16:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Acer
2020-03-06 19:57 - 2018-06-07 16:02 - 000000000 ____D C:\WINDOWS\SysWOW64\WildTangent
2020-03-06 19:57 - 2018-06-07 15:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2020-03-06 19:57 - 2018-06-07 15:23 - 000000000 ____D C:\WINDOWS\system32\ihvmanager
2020-03-06 19:57 - 2018-06-07 15:16 - 000000000 ____D C:\Program Files\AMD
2020-03-06 19:56 - 2019-03-19 04:52 - 000000000 __RHD C:\Users\Public\Libraries
2020-03-06 19:41 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\Resources
2020-03-06 19:41 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\Help
2020-03-06 19:41 - 2019-03-03 12:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2020-03-06 19:40 - 2019-02-03 18:42 - 000000000 ____D C:\Program Files\Common Files\ATI Technologies
2020-03-06 19:40 - 2018-06-07 15:32 - 000000000 ____D C:\Program Files\Realtek
2020-03-06 19:30 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\TextInput
2020-03-06 19:30 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2020-03-06 19:29 - 2019-03-19 11:35 - 000000000 ____D C:\WINDOWS\system32\Drivers\en-GB
2020-03-06 19:29 - 2019-03-19 04:52 - 000000000 ___SD C:\WINDOWS\system32\UNP
2020-03-06 19:29 - 2019-03-19 04:52 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2020-03-06 19:29 - 2019-03-19 04:52 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2020-03-06 19:29 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2020-03-06 19:29 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SystemResources
2020-03-06 19:29 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2020-03-06 19:29 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2020-03-06 19:29 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2020-03-06 19:29 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2020-03-06 19:29 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\migwiz
2020-03-06 19:29 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\Dism
2020-03-06 19:29 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\appraiser
2020-03-06 19:29 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\ShellExperiences
2020-03-06 19:29 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\ShellComponents
2020-03-06 19:29 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\Provisioning
2020-03-06 19:29 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2020-03-06 19:29 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\DiagTrack
2020-03-06 19:29 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\bcastdvr
2020-03-06 19:29 - 2019-03-19 04:37 - 000000000 ____D C:\WINDOWS\servicing
2020-03-06 19:27 - 2019-03-19 11:37 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll
2020-03-06 19:27 - 2019-03-19 11:37 - 000018903 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2020-03-06 18:53 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2020-03-06 18:53 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2020-03-06 18:53 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2020-03-06 18:53 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2020-03-06 18:53 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2020-03-06 18:53 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2020-03-06 18:53 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\et-EE
2020-03-06 18:53 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\es-MX
2020-03-05 15:45 - 2019-02-04 07:37 - 000000000 ____D C:\Users\famil\AppData\Local\D3DSCache
2020-03-02 17:16 - 2018-09-05 17:53 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2020-03-01 16:43 - 2018-09-05 18:00 - 000000000 ____D C:\Users\cstar\AppData\Local\ElevatedDiagnostics
2020-02-29 09:35 - 2018-09-06 15:21 - 000000000 ____D C:\Users\famil\AppData\Local\PlaceholderTileLogoFolder
2020-02-26 15:44 - 2018-09-05 16:32 - 000000000 ____D C:\Users\cstar\AppData\Local\Host App Service
2020-02-23 09:20 - 2018-09-05 17:30 - 000000000 ____D C:\Program Files\rempl
2020-02-17 10:38 - 2018-09-05 16:39 - 000000000 ___RD C:\Users\cstar\OneDrive
2020-02-16 22:20 - 2018-11-17 15:00 - 000000000 ____D C:\Users\cstar\AppData\Roaming\Azureus
2020-02-14 08:00 - 2019-11-25 20:55 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2020-02-12 17:16 - 2018-09-05 17:22 - 120407888 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
 
==================== Files in the root of some directories ========
 
2019-09-14 18:01 - 2019-09-14 18:01 - 000007603 _____ () C:\Users\cstar\AppData\Local\Resmon.ResmonCfg
 
==================== SigCheck ============================
 
(There is no automatic fix for files that do not pass verification.)
 
==================== End of FRST.txt ========================
 
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-03-2020
Ran by cstar (08-03-2020 15:38:36)
Running from C:\Users\cstar\Desktop
Windows 10 Home Version 1909 18363.657 (X64) (2020-03-06 20:53:39)
Boot Mode: Normal
==========================================================
 
 
==================== Accounts: =============================
 
Administrator (S-1-5-21-4035741328-3155629565-2648758277-500 - Administrator - Disabled)
charl (S-1-5-21-4035741328-3155629565-2648758277-1003 - Limited - Disabled)
cstar (S-1-5-21-4035741328-3155629565-2648758277-1001 - Administrator - Enabled) => C:\Users\cstar
DefaultAccount (S-1-5-21-4035741328-3155629565-2648758277-503 - Limited - Disabled)
famil (S-1-5-21-4035741328-3155629565-2648758277-1004 - Limited - Enabled) => C:\Users\famil
Guest (S-1-5-21-4035741328-3155629565-2648758277-501 - Limited - Disabled)
holly (S-1-5-21-4035741328-3155629565-2648758277-1002 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-4035741328-3155629565-2648758277-504 - Limited - Disabled)
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 
==================== Installed Programs ======================
 
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
Acer Care Center (HKLM\...\{1AF41E84-3408-499A-8C93-8891F0612719}) (Version: 2.00.3034 - Acer Incorporated)
Acer Collection (HKLM-x32\...\{8CD449EA-BBA0-477F-AFF9-9AF6E8C50EF2}) (Version: 1.01.3011 - Acer Incorporated)
Acer Configuration Manager (HKLM-x32\...\{414D554E-4453-454E-0201-000000016258}) (Version: 2.1.16258 - Acer)
Acer Jumpstart (HKLM-x32\...\{4B92BFBE-917D-4FA1-97E9-DB9D91286E90}) (Version: 3.0.18135.100 - Acer)
Acer Quick Access (HKLM\...\{8BBF04F1-C68A-441C-B5EF-446EE9960EAF}) (Version: 2.01.3028 - Acer Incorporated)
Acer UEIP Framework (HKLM\...\{12A718F2-2357-4D41-9E1F-18583A4745F7}) (Version: 3.03.3005 - Acer Incorporated)
Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 20.006.20034 - Adobe Systems Incorporated)
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 19.1.1 - Advanced Micro Devices, Inc.)
App Explorer (HKU\S-1-5-21-4035741328-3155629565-2648758277-1001\...\Host App Service) (Version: 0.273.3.727 - SweetLabs) <==== ATTENTION
App Explorer (HKU\S-1-5-21-4035741328-3155629565-2648758277-1004\...\Host App Service) (Version: 0.273.3.727 - SweetLabs) <==== ATTENTION
AviSynth (HKLM-x32\...\AviSynth) (Version: 2.6.0 MT - )
Backup and Sync from Google (HKLM\...\{825F60D9-2633-4D52-B2B0-5DA143433BBC}) (Version: 3.48.8668.1933 - Google, Inc.)
Branding64 (HKLM\...\{EE2AFCE4-0238-4DE0-A140-1647021627C1}) (Version: 1.00.0001 - Advanced Micro Devices, Inc.) Hidden
Dashlane Upgrade Service (HKLM-x32\...\Dashlane Upgrade Service) (Version: 2.1.17.0 - Dashlane, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 80.0.3987.132 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.441 - Google LLC) Hidden
HandBrake 1.2.0 (HKLM-x32\...\HandBrake) (Version: 1.2.0 - )
HP DeskJet 3630 series Basic Device Software (HKLM\...\{2125FB8B-5542-495A-B0F7-CD6DDBE99C2A}) (Version: 40.11.1107.1739 - HP Inc.)
HP DeskJet 3630 series Help (HKLM-x32\...\{5F074370-FEB0-4477-820F-A59DF28A933E}) (Version: 35.0.0 - Hewlett Packard)
HP Dropbox Plugin (HKLM-x32\...\{D12BC084-97D6-438A-AA7C-5962608D17A0}) (Version: 36.0.41.58587 - HP)
HP Google Drive Plugin (HKLM-x32\...\{BFA42100-DB54-467A-BB87-CF70732B4065}) (Version: 36.0.41.58587 - HP)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.9572 - HP)
Java 8 Update 151 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180151F0}) (Version: 8.0.1510.12 - Oracle Corporation)
Microsoft OneDrive (HKU\S-1-5-21-4035741328-3155629565-2648758277-1001\...\OneDriveSetup.exe) (Version: 19.232.1124.0005 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-4035741328-3155629565-2648758277-1004\...\OneDriveSetup.exe) (Version: 19.232.1124.0008 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.14.26429 (HKLM-x32\...\{80586c77-db42-44bb-bfc8-7aebbb220c00}) (Version: 14.14.26429.4 - Microsoft Corporation)
OEM Application Profile (HKLM-x32\...\{60499BF0-C3D1-40CC-8600-8A7246534466}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.)
Plex Media Server (HKLM-x32\...\{31f2ca4b-f84d-4930-bc76-30d3ddb40bbc}) (Version: 1.18.3.2156 - Plex, Inc.)
Plex Media Server (HKLM-x32\...\{8CC5692D-EC4C-49F9-82ED-92065D829FBB}) (Version: 1.18.2156 - Plex, Inc.) Hidden
Product Improvement Study for HP DeskJet 3630 series (HKLM\...\{416B7D0C-0AEC-4FE6-AE40-4E12857CCA55}) (Version: 40.11.1107.1739 - HP Inc.)
Qualcomm Atheros 11ac Wireless LAN Installer (HKLM-x32\...\{20CA507E-24AA-4741-87CF-CC1B250790B7}) (Version: 11.0.10454 - Qualcomm)
Qualcomm Atheros Bluetooth Installer (64) (HKLM\...\{628988B4-3FA5-4EA6-BAA3-DA640F6718BD}) (Version: 10.0.0.309 - Qualcomm Atheros)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.15063.21299 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.16.323.2017 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8122 - Realtek Semiconductor Corp.)
Roblox Player for famil (HKU\S-1-5-21-4035741328-3155629565-2648758277-1004\...\roblox-player) (Version:  - Roblox Corporation)
Roblox Studio for famil (HKU\S-1-5-21-4035741328-3155629565-2648758277-1004\...\roblox-studio) (Version:  - Roblox Corporation)
Stopping Plex (HKLM-x32\...\{62D904BF-8577-433A-BF34-7F7F6E906E9E}) (Version: 1.18.2156 - Plex, Inc.) Hidden
UpdateAssistant (HKLM\...\{52C1DD03-104E-4AC6-9DC6-21D585721ED1}) (Version: 1.19.0.0 - Microsoft Corporation) Hidden
Vulkan Run Time Libraries 1.0.39.1 (HKLM\...\VulkanRT1.0.39.1) (Version: 1.0.39.1 - LunarG, Inc.)
Vuze (HKLM\...\8461-7759-5462-8226) (Version: 5.7.6.0 - Azureus Software, Inc.)
WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.1.0.1 - WildTangent)
WildTangent Helper (HKLM-x32\...\{A39303AB-4898-4F12-BAA0-0B8630F86DB4}) (Version: 1.0.0.400 - WildTangent) Hidden
Windows 10 Update Assistant (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22532 - Microsoft Corporation)
Windows Setup Remediations (x64) (KB4023057) (HKLM\...\{5534e02f-0f5d-40dd-ba92-bea38d22384d}.sdb) (Version:  - )
Windscribe (HKLM-x32\...\{fa690e90-ddb0-4f0c-b3f1-136c084e5fc7}_is1) (Version: 1.83 Build 20 - Windscribe Limited)
 
Packages:
=========
Acer Product Registration -> C:\Program Files\WindowsApps\AcerIncorporated.AcerRegistration_2.0.3013.0_x64__48frkmn4z8aw4 [2019-12-09] (Acer Incorporated)
Booking.com Partner App -> C:\Program Files\WindowsApps\4AE8B7C2.Booking.comPartnerApp_1.1.2.1000_x64__6wqyppa9wfhnr [2018-09-05] (Booking.com B.V.)
eBay -> C:\Program Files\WindowsApps\eBay_1.0.1606.2210_x64__96rgg7pjt343r [2018-06-07] (CN=Acer Incorporated)
Evernote -> C:\Program Files\WindowsApps\Evernote.Evernote_6.23.8859.0_x86__q4d96b2w5wcc2 [2020-02-21] (Evernote)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_110.1.671.0_x64__v10z8vjag6ke6 [2020-02-07] (HP Inc.)
iTunes -> C:\Program Files\WindowsApps\AppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqa [2020-01-31] (Apple Inc.) [Startup Task]
LinkedIn -> C:\Program Files\WindowsApps\7EE7776C.LinkedInforWindows_2.1.7098.0_neutral__w1wdnht996qgy [2018-09-05] (LinkedIn)
Microsoft Advertising SDK for JavaScript -> C:\Program Files\WindowsApps\Microsoft.Advertising.JavaScript_10.1809.1.0_x64__8wekyb3d8bbwe [2018-09-30] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for JavaScript -> C:\Program Files\WindowsApps\Microsoft.Advertising.JavaScript_10.1809.1.0_x86__8wekyb3d8bbwe [2018-09-30] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-18] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-18] (Microsoft Corporation) [MS Ad]
Microsoft News -> C:\Program Files\WindowsApps\Microsoft.BingNews_4.35.20273.0_x64__8wekyb3d8bbwe [2020-02-07] (Microsoft Corporation) [MS Ad]
Minecraft for Windows 10 -> C:\Program Files\WindowsApps\Microsoft.MinecraftUWP_1.14.3002.0_x64__8wekyb3d8bbwe [2020-02-12] (Microsoft Studios)
Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.95.602.0_x64__mcm4njqhnhss8 [2019-10-25] (Netflix, Inc.)
PhotoDirector for acer -> C:\Program Files\WindowsApps\CyberLinkCorp.ac.PhotoDirectorforacerDesktop_8.0.5229.0_x64__ypz87dpxkv292 [2019-06-12] (CYBERLINK COM CORP)
PowerDirector for acer -> C:\Program Files\WindowsApps\CyberLinkCorp.ac.PowerDirectorforacerDesktop_14.0.4304.0_x64__ypz87dpxkv292 [2018-06-07] (CYBERLINK COM CORP)
Simple Mahjong -> C:\Program Files\WindowsApps\26720RandomSaladGamesLLC.SimpleMahjong_5.7.25.0_x64__kx24dqmazqk8j [2020-01-17] (Random Salad Games LLC) [MS Ad]
Spades -> C:\Program Files\WindowsApps\26720RandomSaladGamesLLC.Spades_5.2.24.0_x64__kx24dqmazqk8j [2018-06-07] (Random Salad Games LLC) [MS Ad]
Stagelight -> C:\Program Files\WindowsApps\OpenLabsLLC.58714A8CB3A31_4.0.7326.0_x64__xgwf4v8gps778 [2019-03-22] (Open Labs LLC)
Translator -> C:\Program Files\WindowsApps\Microsoft.BingTranslator_5.6.0.0_x64__8wekyb3d8bbwe [2019-08-01] (Microsoft Corporation)
WildTangent Games -> C:\Program Files\WindowsApps\WildTangentGames.63435CFB65F55_2.0.82.0_x64__qt5r5pa5dyg8m [2019-12-24] (WildTangent Games)
 
==================== Custom CLSID (Whitelisted): ==============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
ShellIconOverlayIdentifiers: [  GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync64.dll [2019-12-22] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync64.dll [2019-12-22] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync64.dll [2019-12-22] (Google LLC -> Google)
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2019-12-22] (Google LLC -> Google)
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2019-12-22] (Google LLC -> Google)
 
==================== Codecs (Whitelisted) ====================
 
==================== Shortcuts & WMI ========================
 
==================== Loaded Modules (Whitelisted) =============
 
2019-12-26 21:43 - 2019-12-26 21:43 - 000629760 _____ () [File not signed] \\?\C:\Users\cstar\AppData\Local\Plex Media Server\Codecs\8bf330d-2818-windows-x86\aac_decoder.dll
2019-12-26 21:43 - 2019-12-26 21:43 - 000336384 _____ () [File not signed] \\?\C:\Users\cstar\AppData\Local\Plex Media Server\Codecs\8bf330d-2818-windows-x86\ac3_decoder.dll
2019-12-26 21:43 - 2019-12-26 21:43 - 000393728 _____ () [File not signed] \\?\C:\Users\cstar\AppData\Local\Plex Media Server\Codecs\8bf330d-2818-windows-x86\ac3_encoder.dll
2019-12-26 21:43 - 2019-12-26 21:43 - 001558016 _____ () [File not signed] \\?\C:\Users\cstar\AppData\Local\Plex Media Server\Codecs\8bf330d-2818-windows-x86\h264_decoder.dll
2019-12-26 21:43 - 2019-12-26 21:43 - 000817152 _____ () [File not signed] \\?\C:\Users\cstar\AppData\Local\Plex Media Server\Codecs\8bf330d-2818-windows-x86\hevc_decoder.dll
2019-12-26 21:43 - 2019-12-26 21:43 - 001799680 _____ () [File not signed] \\?\C:\Users\cstar\AppData\Local\Plex Media Server\Codecs\8bf330d-2818-windows-x86\libx264_encoder.dll
2019-12-26 21:43 - 2019-12-26 21:43 - 001267200 _____ () [File not signed] \\?\C:\Users\cstar\AppData\Local\Plex Media Server\Codecs\8bf330d-2818-windows-x86\mpeg4_decoder.dll
2018-03-13 03:47 - 2018-03-13 03:47 - 000912896 _____ () [File not signed] C:\Program Files\AMD\Performance Profile Client\aws-cpp-sdk-core.dll
2018-03-13 03:47 - 2018-03-13 03:47 - 003109888 _____ () [File not signed] C:\Program Files\AMD\Performance Profile Client\aws-cpp-sdk-s3.dll
2015-02-19 00:13 - 2015-02-19 00:13 - 000817152 _____ () [File not signed] C:\Program Files\AMD\Performance Profile Client\Device.dll
2015-02-19 00:13 - 2015-02-19 00:13 - 003650560 _____ () [File not signed] C:\Program Files\AMD\Performance Profile Client\Platform.dll
 
==================== Alternate Data Streams (Whitelisted) ========
 
==================== Safe Mode (Whitelisted) ==================
 
==================== Association (Whitelisted) =================
 
==================== Internet Explorer trusted/restricted ==========
 
==================== Hosts content: =========================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2020-02-16 21:05 - 2020-02-16 21:05 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
 
==================== Other Areas ===========================
 
(Currently there is no automatic fix for this section.)
 
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\ProgramData\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-4035741328-3155629565-2648758277-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\cstar\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\backgrounddefault.jpg
HKU\S-1-5-21-4035741328-3155629565-2648758277-1004\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Acer01.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is enabled.
 
==================== MSCONFIG/TASK MANAGER disabled items ==
 
(If an entry is included in the fixlist, it will be removed.)
 
HKU\S-1-5-21-4035741328-3155629565-2648758277-1001\...\StartupApproved\Run: => "GoogleDriveSync"
 
==================== FirewallRules (Whitelisted) ================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
FirewallRules: [{456E4800-7D6D-45E9-97E0-C21E8ED68CFF}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{58DDFC90-CEFE-420B-B6D6-2ABB086EBE12}] => (Allow) C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16051.12527.20242.0_x86__8wekyb3d8bbwe\Office16\OUTLOOK.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{9FC92949-0850-4137-9B61-65D77ED44E74}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{DD04D94A-B1E3-4C37-8D78-CF62E1A83DCE}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{6BC89333-55B1-4238-9EC1-102E89095615}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{EF7C3FCA-CFE0-43B6-A213-C6B69DC3242E}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{ABFA87AF-64A5-46E1-BEAA-844848631C4B}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{0B8ADAC5-0008-4CB6-B96D-EB9A1DB4F7AA}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{C2DBF5AB-EEA6-4C77-9548-ADF38D078B48}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{0481FA25-57AC-4F8C-B0C9-D6282BEA2E59}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [UDP Query User{069BFB9D-A822-499A-A165-0BAFF1CB8430}C:\program files (x86)\windscribe\wsappcontrol.exe] => (Allow) C:\program files (x86)\windscribe\wsappcontrol.exe (Windscribe Limited -> Windscribe Limited)
FirewallRules: [TCP Query User{42DAA503-36EE-481C-800A-AFB3A35FD027}C:\program files (x86)\windscribe\wsappcontrol.exe] => (Allow) C:\program files (x86)\windscribe\wsappcontrol.exe (Windscribe Limited -> Windscribe Limited)
FirewallRules: [{F4D3316A-BAE4-4696-B793-F1E9162724A4}] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\Plex Tuner Service.exe (Plex, Inc. -> )
FirewallRules: [{3E3BF6D2-59EF-449F-A1DC-FCAA8BB40C4D}] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\Plex DLNA Server.exe (Plex, Inc. -> Plex, Inc.)
FirewallRules: [{4CEEE69D-B350-4EAD-9987-7BEA17422B8E}] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe (Plex, Inc. -> Python Software Foundation)
FirewallRules: [{7185881E-BB66-456E-8C3D-6580F63E34C3}] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe (Plex, Inc. -> Plex, Inc.)
FirewallRules: [{DEBF7159-697B-49C1-9E26-E885BA173387}] => (Allow) C:\Program Files\WindowsApps\OpenLabsLLC.58714A8CB3A31_4.0.7326.0_x64__xgwf4v8gps778\Stagelight Container64.exe (Open Labs, LLC -> )
FirewallRules: [{838C3BE1-BDC7-498E-921C-9A9D2C34C51E}] => (Allow) C:\Program Files\WindowsApps\OpenLabsLLC.58714A8CB3A31_4.0.7326.0_x64__xgwf4v8gps778\Stagelight Container64.exe (Open Labs, LLC -> )
FirewallRules: [{8A29F89F-5363-4D1E-A96E-B41C7546B0C5}] => (Allow) C:\Program Files\WindowsApps\OpenLabsLLC.58714A8CB3A31_4.0.7326.0_x64__xgwf4v8gps778\Stagelight Container64.exe (Open Labs, LLC -> )
FirewallRules: [{22D3A992-DCE4-4F7E-A26C-627E3F7CD86C}] => (Allow) C:\Program Files\WindowsApps\OpenLabsLLC.58714A8CB3A31_4.0.7326.0_x64__xgwf4v8gps778\Stagelight Container64.exe (Open Labs, LLC -> )
FirewallRules: [{B569C5F2-09C9-481B-9F0F-365285C36C49}] => (Allow) C:\Program Files\WindowsApps\OpenLabsLLC.58714A8CB3A31_4.0.7326.0_x64__xgwf4v8gps778\Stagelight Container32.exe (Open Labs, LLC -> )
FirewallRules: [{9D00AF9B-170A-4FA0-A7AD-5DFB501F13B2}] => (Allow) C:\Program Files\WindowsApps\OpenLabsLLC.58714A8CB3A31_4.0.7326.0_x64__xgwf4v8gps778\Stagelight Container32.exe (Open Labs, LLC -> )
FirewallRules: [{72A59BCA-E358-4148-AC1A-AAD63C00C7CA}] => (Allow) C:\Program Files\WindowsApps\OpenLabsLLC.58714A8CB3A31_4.0.7326.0_x64__xgwf4v8gps778\Stagelight Container32.exe (Open Labs, LLC -> )
FirewallRules: [{A06E3237-FFF3-4661-8C25-917220490460}] => (Allow) C:\Program Files\WindowsApps\OpenLabsLLC.58714A8CB3A31_4.0.7326.0_x64__xgwf4v8gps778\Stagelight Container32.exe (Open Labs, LLC -> )
FirewallRules: [{5993E86B-1DB6-474C-BB06-2CB07CA40F79}] => (Allow) C:\Program Files\WindowsApps\OpenLabsLLC.58714A8CB3A31_4.0.7326.0_x64__xgwf4v8gps778\Stagelight.exe (Open Labs, LLC -> )
FirewallRules: [{16244203-E66A-41D9-8313-79DCE7E13349}] => (Allow) C:\Program Files\WindowsApps\OpenLabsLLC.58714A8CB3A31_4.0.7326.0_x64__xgwf4v8gps778\Stagelight.exe (Open Labs, LLC -> )
FirewallRules: [{EF618FFB-BB0B-4767-968C-11BC929FF9A1}] => (Allow) C:\Program Files\WindowsApps\OpenLabsLLC.58714A8CB3A31_4.0.7326.0_x64__xgwf4v8gps778\Stagelight.exe (Open Labs, LLC -> )
FirewallRules: [{568A9013-774C-4554-A58C-585D6D859CB6}] => (Allow) C:\Program Files\WindowsApps\OpenLabsLLC.58714A8CB3A31_4.0.7326.0_x64__xgwf4v8gps778\Stagelight.exe (Open Labs, LLC -> )
FirewallRules: [{C34C1F04-DB63-457B-9F24-8D00214EF32F}] => (Allow) C:\Program Files\HP\HP DeskJet 3630 series\Bin\HPNetworkCommunicatorCom.exe (Hewlett Packard -> HP Inc.)
FirewallRules: [{4A047994-DB1E-41EA-B346-B85AD9D593E6}] => (Allow) LPort=5357
FirewallRules: [{11F15BF7-1B28-4FDF-A07C-1ECF4C20D569}] => (Allow) C:\Program Files\HP\HP DeskJet 3630 series\Bin\DeviceSetup.exe (Hewlett Packard -> HP Inc.)
FirewallRules: [{C2E7FE94-5E7A-44A6-BB35-E85922FABE5C}] => (Allow) C:\Users\cstar\AppData\Local\Temp\7zS1382\HPDiagnosticCoreUI.exe No File
FirewallRules: [{B0A9EC79-0D40-4FB6-B78C-ECC062036BF4}] => (Allow) C:\Users\cstar\AppData\Local\Temp\7zS1382\HPDiagnosticCoreUI.exe No File
FirewallRules: [UDP Query User{28756D35-6D16-485F-B65E-AC98BA1E3F75}C:\program files\java\jre1.8.0_151\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_151\bin\javaw.exe
FirewallRules: [TCP Query User{3F22C98C-FADB-4B6A-8DD6-4BAA8DDC675A}C:\program files\java\jre1.8.0_151\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_151\bin\javaw.exe
FirewallRules: [{AA716A3D-232B-44FC-9275-F04E561847BE}] => (Allow) C:\Users\cstar\AppData\Local\Temp\7zS5BFF\HP.EasyStart.exe No File
FirewallRules: [{97CBA24A-DE23-4583-9ECC-2412FD8CCDDC}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe No File
FirewallRules: [{E933AB54-5E0B-4B3E-9CD8-0856336F9A29}] => (Allow) C:\Program Files\Vuze\Azureus.exe (Azureus Software, Inc. -> Azureus Software, Inc)
FirewallRules: [{E6EC4295-FDC5-4B78-B831-E52A18FCC880}] => (Allow) C:\Program Files\Vuze\Azureus.exe (Azureus Software, Inc. -> Azureus Software, Inc)
FirewallRules: [TCP Query User{BFC0F214-66B3-4667-90BC-2DB85C1E4C52}C:\program files\vuze\azureus.exe] => (Allow) C:\program files\vuze\azureus.exe (Azureus Software, Inc. -> Azureus Software, Inc)
FirewallRules: [UDP Query User{4E5D133E-9237-4A5E-833A-FC745F903E8C}C:\program files\vuze\azureus.exe] => (Allow) C:\program files\vuze\azureus.exe (Azureus Software, Inc. -> Azureus Software, Inc)
FirewallRules: [TCP Query User{9BE63530-9997-4313-8DA2-D644F327E760}C:\games\football manager 2019\fm.exe] => (Allow) C:\games\football manager 2019\fm.exe (Sports Interactive) [File not signed]
FirewallRules: [UDP Query User{C4443C3B-5268-48A1-A97C-AE0F3CA04807}C:\games\football manager 2019\fm.exe] => (Allow) C:\games\football manager 2019\fm.exe (Sports Interactive) [File not signed]
FirewallRules: [{5FCB64B6-CDF7-4F19-8DB1-CFE828B64797}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{78934094-D2FA-4644-BBF9-19D980C0F063}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{C5DD9F18-F64B-4EDE-983F-5014BD4A2EB0}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{D3E556F8-AE35-45CE-B626-081E18AD8CFB}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{5EE9FDE7-1869-479E-BC83-84E6C7177172}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{270C3029-81DE-4618-BE77-D4A30C3E00DE}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{4F01DCDE-8582-49F1-9B89-B39D56AF84D9}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{A158E49B-4143-40E4-98B4-2D1884D3E319}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
 
==================== Restore Points =========================
 
06-03-2020 23:23:28 Windows Update
 
==================== Faulty Device Manager Devices ============
 
 
==================== Event log errors: ========================
 
Application errors:
==================
Error: (03/08/2020 03:20:17 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1020) (User: NT AUTHORITY)
Description: The required buffer size is greater than the buffer size passed to the Collect function of the "C:\Windows\System32\perfts.dll" Extensible Counter DLL for the "LSM" service. The given buffer size was 23496 and the required size was 39848.
 
Error: (03/08/2020 03:19:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: LaunchUWPService.exe, version: 1.1.3001.0, time stamp: 0x582c63b6
Faulting module name: KERNELBASE.dll, version: 10.0.18362.628, time stamp: 0x54734dee
Exception code: 0xe0434352
Fault offset: 0x00113db2
Faulting process ID: 0x32c4
Faulting application start time: 0x01d5f55cece88027
Faulting application path: C:\Program Files (x86)\Acer\Acer Collection\LaunchUWPService.exe
Faulting module path: C:\WINDOWS\System32\KERNELBASE.dll
Report ID: 23cb9f03-99e5-4cc6-9166-543c3be89b45
Faulting package full name: 
Faulting package-relative application ID:
 
Error: (03/08/2020 03:19:18 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: LaunchUWPService.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.InvalidOperationException
   at System.Windows.Threading.Dispatcher.VerifyAccess()
   at System.Windows.Window.Close()
   at LaunchUWPService.MainWindow+<CallService>d__3.MoveNext()
   at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(System.Threading.Tasks.Task)
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(System.Threading.Tasks.Task)
   at LaunchUWPService.MainWindow+<<-ctor>b__1_0>d.MoveNext()
 
Exception Info: System.AggregateException
   at System.Threading.Tasks.Task.ThrowIfExceptional(Boolean)
   at System.Threading.Tasks.Task.Wait(Int32, System.Threading.CancellationToken)
   at LaunchUWPService.MainWindow..ctor()
 
Exception Info: System.Windows.Markup.XamlParseException
   at System.Windows.Markup.WpfXamlLoader.Load(System.Xaml.XamlReader, System.Xaml.IXamlObjectWriterFactory, Boolean, System.Object, System.Xaml.XamlObjectWriterSettings, System.Uri)
   at System.Windows.Markup.WpfXamlLoader.LoadBaml(System.Xaml.XamlReader, Boolean, System.Object, System.Xaml.Permissions.XamlAccessLevel, System.Uri)
   at System.Windows.Markup.XamlReader.LoadBaml(System.IO.Stream, System.Windows.Markup.ParserContext, System.Object, Boolean)
   at System.Windows.Application.LoadBamlStreamWithSyncInfo(System.IO.Stream, System.Windows.Markup.ParserContext)
   at System.Windows.Application.LoadComponent(System.Uri, Boolean)
   at System.Windows.Application.DoStartup()
   at System.Windows.Application.<.ctor>b__1_0(System.Object)
   at System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
   at System.Windows.Threading.ExceptionWrapper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
   at System.Windows.Threading.DispatcherOperation.InvokeImpl()
   at System.Windows.Threading.DispatcherOperation.InvokeInSecurityContext(System.Object)
   at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
   at MS.Internal.CulturePreservingExecutionContext.Run(MS.Internal.CulturePreservingExecutionContext, System.Threading.ContextCallback, System.Object)
   at System.Windows.Threading.DispatcherOperation.Invoke()
   at System.Windows.Threading.Dispatcher.ProcessQueue()
   at System.Windows.Threading.Dispatcher.WndProcHook(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
   at MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
   at MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
   at System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
   at System.Windows.Threading.ExceptionWrapper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
   at System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
   at MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
   at MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef)
   at System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame)
   at System.Windows.Threading.Dispatcher.PushFrame(System.Windows.Threading.DispatcherFrame)
   at System.Windows.Application.RunDispatcher(System.Object)
   at System.Windows.Application.RunInternal(System.Windows.Window)
   at System.Windows.Application.Run(System.Windows.Window)
   at LaunchUWPService.App.Main()
 
Error: (03/07/2020 08:53:09 AM) (Source: Microsoft-Windows-Perflib) (EventID: 1020) (User: NT AUTHORITY)
Description: The required buffer size is greater than the buffer size passed to the Collect function of the "C:\Windows\System32\perfts.dll" Extensible Counter DLL for the "LSM" service. The given buffer size was 29320 and the required size was 29544.
 
Error: (03/06/2020 08:22:25 PM) (Source: Microsoft-Windows-PerfNet) (EventID: 2002) (User: NT AUTHORITY)
Description: Unable to open the Redirector service performance object. The first four bytes (DWORD) of the Data section contains the status code.
 
Error: (03/06/2020 08:22:24 PM) (Source: MSDTC Client 2) (EventID: 4104) (User: )
Description: Failed trying to get the state of the cluster node: .The error code returned: 0x8007085A
 
Error: (03/06/2020 08:02:11 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 256) (User: )
Description: The Cryptographic Services service failed to initialise the Catalogue Database. The error was: -2147418113 (0x8000ffff) : Catastrophic failure
.
 
Error: (03/06/2020 08:02:07 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 256) (User: )
Description: The Cryptographic Services service failed to initialise the Catalogue Database. The error was: -2147418113 (0x8000ffff) : Catastrophic failure
.
 
 
System errors:
=============
Error: (03/08/2020 03:28:19 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: The server Windows.Internal.Shell.ConsentUx.Details.ConsentUxService did not register with DCOM within the required timeout.
 
Error: (03/08/2020 03:26:19 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: The server Windows.Internal.Shell.ConsentUx.Details.ConsentUxService did not register with DCOM within the required timeout.
 
Error: (03/08/2020 03:24:19 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: The server Windows.Internal.Shell.ConsentUx.Details.ConsentUxService did not register with DCOM within the required timeout.
 
Error: (03/08/2020 03:19:29 PM) (Source: DCOM) (EventID: 10001) (User: FAMILY-ACER-LAP)
Description: Unable to start a DCOM Server: Microsoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c!App.AppXaygf26t1thjd8qjpynd7k9g9ng00agm4.mca as Unavailable/Unavailable. The error:
"2147942746"
Happened while starting this command:
"C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.56.102.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe" -ServerName:SkypeBackgroundHost
 
Error: (03/08/2020 10:12:40 AM) (Source: DCOM) (EventID: 10010) (User: FAMILY-ACER-LAP)
Description: The server {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} did not register with DCOM within the required timeout.
 
Error: (03/08/2020 10:12:39 AM) (Source: DCOM) (EventID: 10010) (User: FAMILY-ACER-LAP)
Description: The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout.
 
Error: (03/08/2020 10:12:38 AM) (Source: DCOM) (EventID: 10010) (User: FAMILY-ACER-LAP)
Description: The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout.
 
Error: (03/08/2020 10:12:38 AM) (Source: DCOM) (EventID: 10010) (User: FAMILY-ACER-LAP)
Description: The server {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} did not register with DCOM within the required timeout.
 
 
==================== Memory info =========================== 
 
BIOS: Insyde Corp. V1.04 03/12/2018
Motherboard: SR Squirtle_SR
Processor: AMD A6-9220 RADEON R4, 5 COMPUTE CORES 2C+3G 
Percentage of memory in use: 82%
Total physical RAM: 3973.37 MB
Available physical RAM: 711.22 MB
Total Virtual: 5381.37 MB
Available Virtual: 859.27 MB
 
==================== Drives ================================
 
Drive c: (Acer) (Fixed) (Total:930.4 GB) (Free:583.66 GB) NTFS
 
\\?\Volume{c56f5c1e-1d22-4fbe-b5ca-832e751a33b3}\ (Recovery) (Fixed) (Total:1 GB) (Free:0.57 GB) NTFS
\\?\Volume{1806de26-f80f-4887-9a61-7747e7856366}\ (ESP) (Fixed) (Total:0.09 GB) (Free:0.04 GB) FAT32
 
==================== MBR & Partition Table ====================
 
==========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 4BAD8D68)
 
Partition: GPT.
 
==================== End of Addition.txt =======================

 


  • 0

Advertisements


#2
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,598 posts
  • MVP

Uninstall:

 

Acer Collection

Java 8 Update 151

 

(Search for:

programs

hit Enter

Find each and click on.  Click on Uninstall.)

 

Reboot.

 

Download the attached fixlist.txt to the same location as FRST

Attached File  fixlist.txt   478bytes   135 downloads

Run FRST and press Fix
A fix log will be generated please post that

Reboot if the fix doesn't reboot it for you

Run FRST again as before.  Make sure Addition.txt is checked and hit Scan.  Post both logs.

 

Get Process Explorer

https://live.sysinte...com/procexp.exe

Save it to your desktop then run it (Vista or Win7+ - right click and Run As Administrator).  

View, Select Column, check Verified Signer, OK
Options, Verify Image Signatures


Click twice on the CPU column header  to sort things by CPU usage with the big hitters at the top.  

Wait a full minute then:

File, Save As, Save.  Note the file name.   Open the file  on your desktop and copy and paste the text to a reply.


Copy the next 2 lines:

TASKLIST /SVC  > \junk.txt
notepad \junk.txt

Open an Elevated Command Prompt:
Win 7: Start, All Programs, Accessories then right click on Command Prompt and Run as Administrator
Win 8: http://www.eightforu...indows-8-a.html
win 10: http://www.howtogeek...-in-windows-10/

Right click and Paste (or Edit then Paste) and the copied lines should appear.
Hit Enter if notepad does not open.  Copy and paste the text from notepad into a reply.


Get the free version of Speccy:

http://www.filehippo...ownload_speccy/ 

(Look in the upper right for the Download
Latest Version button  - Do NOT press the large Start Download button on the upper left!)  
Download, Save and Install it.  Tell it you do not need CCLEANER.    Run Speccy.  When it finishes (the little icon in the bottom left will stop moving),
File, Save as Text File,  (to your desktop) note the name it gives. OK.  Open the file in notepad and delete the line that gives the serial number of your Operating System.  
(It will be near the top,  10-20  lines down.) Save the file.  Attach the file to your next post.  Attaching the log is the best option as it is too big for the forum.  Attaching is a multi step process.

First click on More Reply Options
Then scroll down to where you see
Choose File and click on it.  Point it at the file and hit Open.
Now click on Attach this file.






 


  • 0

#3
fonzy

fonzy

    Member

  • Topic Starter
  • Member
  • PipPip
  • 76 posts
Thanks for your reply. I have had to attach the Fixlog,  addition.txt as well as the Speccy log because the post was too long otherwise. Really appreciate your help with this!
 
 
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 08-03-2020
Ran by cstar (administrator) on FAMILY-ACER-LAP (Acer Aspire A315-21) (09-03-2020 18:41:58)
Running from C:\Users\cstar\Desktop
Loaded Profiles: cstar & famil (Available Profiles: cstar & famil)
Platform: Windows 10 Home Version 1909 18363.657 (X64) Language: English (United Kingdom)
Default browser: Chrome
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(0) C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.12527.20242.0_x86__8wekyb3d8bbwe\Office16\SDXHelperBgt.exe
(0) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.20012.135.0_x64__8wekyb3d8bbwe\YourPhone.exe
(0) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.20012.135.0_x64__8wekyb3d8bbwe\YourPhoneServer\YourPhoneServer.exe
(0) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.20011.13511.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Acer Incorporated -> ) C:\Program Files (x86)\Acer\Amundsen\2.1.16258\awc.exe
(Acer Incorporated -> ) C:\Program Files (x86)\Acer\Care Center\ACCStd.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\ePowerButton_NB.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QAAdminAgent.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QAAdminAgent.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QAAgent.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QAAgent.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QALockHandler.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QALockHandler.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Acer Incorporated -> acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
(Acer Incorporated -> TODO: <Company name>) C:\Program Files\Acer\User Experience Improvement Program\Plugin\AppMonitor\AppMonitorPlugIn.exe
(Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\atiesrxx.exe
(AMD) [File not signed] C:\Program Files\AMD\Performance Profile Client\AUEPLauncher.exe
(AMD) [File not signed] C:\Program Files\AMD\Performance Profile Client\AUEPMaster.exe
(Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iTunes_12104.2.43056.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.442\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.442\GoogleCrashHandler64.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\famil\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2020.19081.28230.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12527.20152.0_x64__8wekyb3d8bbwe\HxTsr.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\LogonUI.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\schtasks.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\WpcMon.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2001.10-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2001.10-0\NisSrv.exe
(Plex, Inc. -> ) C:\Program Files (x86)\Plex\Plex Media Server\Plex Tuner Service.exe
(Plex, Inc. -> Plex, Inc.) C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe
(Plex, Inc. -> Plex, Inc.) C:\Program Files (x86)\Plex\Plex Media Server\Plex Update Service.exe
(Plex, Inc. -> Python Software Foundation) C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe
(Plex, Inc. -> Python Software Foundation) C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe
(Qualcomm Atheros -> Qualcomm Technologies Inc.) C:\Windows\System32\drivers\QcomWlanSrvx64.exe
(Qualcomm Atheros -> Windows ® Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(SweetLabs Inc. -> SweetLabs, Inc) C:\Users\famil\AppData\Local\Host App Service\Engine\HostAppServiceUpdater.exe
(WildTangent Inc -> ) C:\Program Files (x86)\WildTangent Games\Integration\WildTangentHelperService.exe
(Windscribe Limited -> Windscribe Limited) C:\Program Files (x86)\Windscribe\Windscribe.exe
(Windscribe Limited -> Windscribe Limited) C:\Program Files (x86)\Windscribe\WindscribeService.exe
(Windscribe Limited -> Windscribe Limited) C:\Program Files (x86)\Windscribe\wsappcontrol.exe
 
==================== Registry (Whitelisted) ===================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [18368512 2017-04-16] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKU\S-1-5-21-4035741328-3155629565-2648758277-1001\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [47552040 2019-12-22] (Google LLC -> )
HKU\S-1-5-21-4035741328-3155629565-2648758277-1001\...\Run: [Plex Media Server] => C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe [24182768 2019-12-13] (Plex, Inc. -> Plex, Inc.)
HKU\S-1-5-21-4035741328-3155629565-2648758277-1001\...\Run: [Windscribe] => C:\Program Files (x86)\Windscribe\Windscribe.exe [10106544 2019-01-19] (Windscribe Limited -> Windscribe Limited)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\80.0.3987.132\Installer\chrmstp.exe [2020-03-04] (Google LLC -> Google LLC)
 
==================== Scheduled Tasks (Whitelisted) ============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
Task: {025294D4-D773-447D-8976-9D53F8F39B17} - System32\Tasks\ACCBackgroundApplication => C:\Program Files (x86)\Acer\Care Center\ACCStd.exe [4645168 2017-10-30] (Acer Incorporated -> )
Task: {17915D0D-A731-4651-A3FD-E1B52DF3C8A3} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [474368 2019-09-25] (Acer Incorporated -> Acer Incorporated)
Task: {1902DBE4-EC58-45E0-B030-B4539993FB61} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\BIN64\InstallManagerApp.exe [468992 2019-01-09] (Advanced Micro Devices, Inc.) [File not signed]
Task: {20A46A67-554F-4C3A-8E34-EEBDC6A23718} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2001.10-0\MpCmdRun.exe [473544 2020-03-02] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {24CBB736-D92A-48B7-AA18-2B15EB6F8B5D} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [468992 2019-01-09] (Advanced Micro Devices, Inc.) [File not signed]
Task: {35EA7F4B-564E-4A01-B95C-7E777C148A75} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2001.10-0\MpCmdRun.exe [473544 2020-03-02] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {381ABB22-AD12-423C-890D-BE0B3A51F8D4} - System32\Tasks\DashlaneUpgradeCheck => net [Argument = start "Dashlane Upgrade Service"]
Task: {3EA6E9B3-6066-4E04-B156-425BB1EF299A} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe [2920752 2017-10-30] (Acer Incorporated -> )
Task: {4A1FB026-D3F9-4B45-A457-61A98795D96F} - System32\Tasks\Oem\AcerJumpstartTask => C:\Program Files (x86)\Acer\Acer Jumpstart\hermes.exe [64320 2019-07-11] (Acer Incorporated -> Acer)
Task: {6619090C-D7E5-460A-ACD9-57FA5B62547C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2001.10-0\MpCmdRun.exe [473544 2020-03-02] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {66474282-ACE7-44C4-915A-1DFBE65A64B3} - System32\Tasks\ACCAgent => C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe [41264 2017-10-30] (Acer Incorporated -> )
Task: {7E372C8C-D9AC-4AEF-8EAE-4B102726BDF1} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1240656 2019-09-11] (Adobe Inc. -> Adobe Systems)
Task: {972C4ED1-9811-41B7-A33B-02176BE6F474} - System32\Tasks\Power Button => C:\Program Files\Acer\Acer Quick Access\ePowerButton_NB.exe [2770736 2019-09-26] (Acer Incorporated -> Acer Incorporated)
Task: {9D7B8058-3FDE-48B9-9628-A6E01C67C40D} - System32\Tasks\AcerCMUpdateTask2.1.16258 => C:\Program Files (x86)\Acer\Amundsen\2.1.16258\AWC.exe [152880 2016-09-20] (Acer Incorporated -> )
Task: {AC995341-DED0-4ADB-A646-7C6754B9DB3E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-09-05] (Google Inc -> Google Inc.)
Task: {C6051536-E144-43F6-937E-E0C6780B61F7} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-09-05] (Google Inc -> Google Inc.)
Task: {D13C7352-D0E2-4319-B3DE-5C371F9EE335} - System32\Tasks\HPCustParticipation HP DeskJet 3630 series => C:\Program Files\HP\HP DeskJet 3630 series\Bin\HPCustPartic.exe [6438536 2017-02-08] (Hewlett Packard -> HP Inc.)
Task: {D9273552-E654-4645-BDED-5BDD19CC63D8} - System32\Tasks\App Explorer => C:\Users\cstar\AppData\Local\Host App Service\Engine\HostAppServiceUpdater.exe [7470248 2020-01-06] (SweetLabs Inc. -> SweetLabs, Inc) <==== ATTENTION
Task: {E3F3A285-09AD-40BA-A8CD-2F669E933C9A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2001.10-0\MpCmdRun.exe [473544 2020-03-02] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {EFFC4823-8A16-41D0-8B4E-52BDDEEAD2BF} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe [215856 2017-09-13] (Acer Incorporated -> TODO: <Company name>)
Task: {F986B0D4-38F9-4AA7-91D0-37393F3B9214} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [446256 2019-09-26] (Acer Incorporated -> Acer Incorporated)
 
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{1e1c3259-6ffd-451c-8e44-1377f9bab954}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{2e9f43fb-0adb-4c2b-90de-f33151e75b58}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{f894cb87-5e57-4628-b4cf-9090c3a44f2c}: [DhcpNameServer] 192.168.0.1
 
Internet Explorer:
==================
HKU\S-1-5-21-4035741328-3155629565-2648758277-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-4035741328-3155629565-2648758277-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer17win10.msn.com/?pc=ACTE
HKU\S-1-5-21-4035741328-3155629565-2648758277-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = www.google.com
hxxp://hp13.msn.com
HKU\S-1-5-21-4035741328-3155629565-2648758277-1004\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer17win10.msn.com/?pc=ACTE
HKU\S-1-5-21-4035741328-3155629565-2648758277-1004\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer17win10.msn.com/?pc=ACTE
 
FireFox:
========
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-02-04] (Adobe Inc. -> Adobe Systems Inc.)
 
Chrome: 
=======
CHR Profile: C:\Users\cstar\AppData\Local\Google\Chrome\User Data\Default [2020-03-09]
CHR Notifications: Default -> hxxps://advisor.sky.com
CHR StartupUrls: Default -> "hxxps://www.bing.com/?PC=XC04"
CHR Extension: (Slides) - C:\Users\cstar\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-09-05]
CHR Extension: (Docs) - C:\Users\cstar\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-09-05]
CHR Extension: (Google Drive) - C:\Users\cstar\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-09-05]
CHR Extension: (YouTube) - C:\Users\cstar\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-09-05]
CHR Extension: (Sheets) - C:\Users\cstar\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-09-05]
CHR Extension: (Google Docs Offline) - C:\Users\cstar\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-01-09]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\cstar\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2018-12-26]
CHR Extension: (Chrome Web Store Payments) - C:\Users\cstar\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-24]
CHR Extension: (Gmail) - C:\Users\cstar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-07-02]
CHR Extension: (Chrome Media Router) - C:\Users\cstar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-02-25]
CHR HKU\S-1-5-21-4035741328-3155629565-2648758277-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR HKLM-x32\...\Chrome\Extension: [pbjikboenpfhbbejgkoklgkhjpfogcam]
 
==================== Services (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [551832 2017-07-13] (Advanced Micro Devices, Inc. -> AMD)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [338312 2017-04-24] (Qualcomm Atheros -> Windows ® Win 7 DDK provider)
R2 AUEPLauncher; C:\Program Files\AMD\Performance Profile Client\AUEPLauncher.exe [43008 2019-01-09] (AMD) [File not signed]
S2 Dashlane Upgrade Service; C:\Program Files (x86)\Dashlane\Upgrade\DashlaneUpgradeService.exe [83992 2017-08-23] (Dashlane -> Dashlane, Inc.)
R2 PlexUpdateService; C:\Program Files (x86)\Plex\Plex Media Server\Plex Update Service.exe [2140656 2019-12-13] (Plex, Inc. -> Plex, Inc.)
S3 QALSvc; C:\Program Files\Acer\Acer Quick Access\QALSvc.exe [466224 2019-09-26] (Acer Incorporated -> Acer Incorporated)
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [508208 2019-09-26] (Acer Incorporated -> Acer Incorporated)
R2 QcomWlanSrv; C:\WINDOWS\System32\drivers\QcomWlanSrvx64.exe [191976 2018-12-20] (Qualcomm Atheros -> Qualcomm Technologies Inc.)
R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [299824 2017-09-13] (Acer Incorporated -> acer)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2001.10-0\NisSrv.exe [3285864 2020-03-02] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WildTangentHelper; C:\Program Files (x86)\WildTangent Games\Integration\WildTangentHelperService.exe [1657136 2020-02-12] (WildTangent Inc -> )
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2001.10-0\MsMpEng.exe [103168 2020-03-02] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WindscribeService; C:\Program Files (x86)\Windscribe\WindscribeService.exe [493232 2019-01-19] (Windscribe Limited -> Windscribe Limited)
 
===================== Drivers (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
S3 amdkmcsp; C:\WINDOWS\system32\DRIVERS\amdkmcsp.sys [101232 2017-06-16] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc. )
R3 amdkmdag; C:\WINDOWS\System32\DriverStore\FileRepository\c0315893.inf_amd64_c7f492d4318c2a29\atikmdag.sys [36557720 2017-07-13] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R3 amdkmdap; C:\WINDOWS\System32\DriverStore\FileRepository\c0315893.inf_amd64_c7f492d4318c2a29\atikmpag.sys [528792 2017-07-13] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R0 amdpsp; C:\WINDOWS\System32\DRIVERS\amdpsp.sys [243048 2017-06-16] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc. )
R3 amduart; C:\WINDOWS\System32\drivers\amduart.sys [91640 2017-05-12] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [107400 2018-10-03] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices)
R3 LMDriver; C:\WINDOWS\System32\drivers\LMDriver.sys [22320 2017-10-30] (Acer Incorporated -> Acer Incorporated)
R3 Qcamain10x64; C:\WINDOWS\System32\drivers\Qcamain10x64.sys [2353664 2018-12-20] (Qualcomm Atheros -> Qualcomm Atheros, Inc.)
R3 RadioShim; C:\WINDOWS\System32\drivers\RadioShim.sys [16688 2017-10-30] (Acer Incorporated -> Acer Incorporated)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [954368 2017-04-18] (Realtek Semiconductor Corp. -> Realtek )
R3 RTSPER; C:\WINDOWS\system32\DRIVERS\RtsPer.sys [782304 2017-06-29] (Realtek Semiconductor Corp. -> Realsil Semiconductor Corporation)
R3 SynRMIHID; C:\WINDOWS\system32\DRIVERS\SynRMIHID.sys [57432 2016-09-05] (Synaptics Incorporated -> Synaptics Incorporated)
R3 tapwindscribe0901; C:\WINDOWS\System32\drivers\tapwindscribe0901.sys [54896 2018-07-06] (Windscribe Limited -> The OpenVPN Project)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [45960 2020-03-02] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [376544 2020-03-02] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [53984 2020-03-02] (Microsoft Windows -> Microsoft Corporation)
 
==================== NetSvcs (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== One month (created) ===================
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2020-03-09 18:41 - 2020-03-09 18:45 - 000020975 _____ C:\Users\cstar\Desktop\FRST.txt
2020-03-09 18:41 - 2020-03-09 18:41 - 002798456 _____ (Sysinternals - www.sysinternals.com) C:\Users\cstar\Desktop\procexp.exe
2020-03-09 18:38 - 2020-03-09 18:38 - 000003112 _____ C:\WINDOWS\system32\Tasks\AMDLinkUpdate
2020-03-08 19:48 - 2020-03-08 19:49 - 285385257 _____ C:\Users\cstar\Downloads\met190620.mp3f.zip
2020-03-08 19:14 - 2020-03-08 19:15 - 191009478 _____ C:\Users\cstar\Downloads\BirthdayBash2018_MP3.zip
2020-03-08 19:12 - 2020-03-08 19:12 - 000894976 _____ (Spotify Ltd) C:\Users\cstar\Downloads\SpotifySetup.exe
2020-03-08 19:11 - 2020-03-08 19:12 - 098769937 _____ C:\Users\cstar\Downloads\Headzapoppin-20200308T191120Z-001.zip
2020-03-08 18:52 - 2020-03-08 19:54 - 000129503 _____ C:\Users\cstar\Desktop\Fixlog.txt
2020-03-08 15:27 - 2020-03-09 18:44 - 000000000 ____D C:\FRST
2020-03-08 15:24 - 2020-03-08 15:24 - 002279936 _____ (Farbar) C:\Users\cstar\Desktop\FRST64.exe
2020-03-08 15:16 - 2020-03-08 15:16 - 000000000 ___HD C:\OneDriveTemp
2020-03-06 21:11 - 2020-03-06 21:11 - 000000020 ___SH C:\Users\cstar\ntuser.ini
2020-03-06 20:58 - 2020-03-06 20:58 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2020-03-06 20:55 - 2020-03-06 20:55 - 000000000 ____D C:\Users\famil\AppData\Local\PackageStaging
2020-03-06 20:53 - 2020-03-06 20:53 - 000000020 ___SH C:\Users\famil\ntuser.ini
2020-03-06 20:52 - 2020-03-08 20:03 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-03-06 20:52 - 2020-03-08 18:52 - 000003380 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-4035741328-3155629565-2648758277-1001
2020-03-06 20:52 - 2020-03-06 20:52 - 000004302 _____ C:\WINDOWS\system32\Tasks\Software Update Application
2020-03-06 20:52 - 2020-03-06 20:52 - 000002862 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-4035741328-3155629565-2648758277-1004
2020-03-06 20:52 - 2020-03-06 20:52 - 000002770 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task v2
2020-03-06 20:52 - 2020-03-06 20:52 - 000002706 _____ C:\WINDOWS\system32\Tasks\UbtFrameworkService
2020-03-06 20:52 - 2020-03-06 20:52 - 000002392 _____ C:\WINDOWS\system32\Tasks\ModifyLinkUpdate
2020-03-06 20:52 - 2020-03-06 20:52 - 000002290 _____ C:\WINDOWS\system32\Tasks\Power Button
2020-03-06 20:52 - 2020-03-06 20:52 - 000002216 _____ C:\WINDOWS\system32\Tasks\Quick Access
2020-03-06 20:52 - 2020-03-06 20:52 - 000000000 ____D C:\WINDOWS\system32\Tasks\Oem
2020-03-06 20:51 - 2020-03-09 18:40 - 000003534 _____ C:\WINDOWS\system32\Tasks\DashlaneUpgradeCheck
2020-03-06 20:51 - 2020-03-06 20:53 - 000002658 _____ C:\WINDOWS\system32\Tasks\HPCustParticipation HP DeskJet 3630 series
2020-03-06 20:51 - 2020-03-06 20:52 - 000003852 _____ C:\WINDOWS\system32\Tasks\ACCAgent
2020-03-06 20:51 - 2020-03-06 20:52 - 000003692 _____ C:\WINDOWS\system32\Tasks\AcerCMUpdateTask2.1.16258
2020-03-06 20:51 - 2020-03-06 20:52 - 000003482 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2020-03-06 20:51 - 2020-03-06 20:52 - 000003348 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2020-03-06 20:51 - 2020-03-06 20:52 - 000003124 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2020-03-06 20:51 - 2020-03-06 20:52 - 000002820 _____ C:\WINDOWS\system32\Tasks\ACC
2020-03-06 20:51 - 2020-03-06 20:52 - 000002408 _____ C:\WINDOWS\system32\Tasks\App Explorer
2020-03-06 20:51 - 2020-03-06 20:52 - 000002328 _____ C:\WINDOWS\system32\Tasks\ACCBackgroundApplication
2020-03-06 20:42 - 2020-03-06 20:51 - 000011433 _____ C:\WINDOWS\diagwrn.xml
2020-03-06 20:42 - 2020-03-06 20:51 - 000011433 _____ C:\WINDOWS\diagerr.xml
2020-03-06 20:22 - 2020-03-07 00:13 - 000840852 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-03-06 20:10 - 2020-03-08 18:52 - 000002416 _____ C:\Users\cstar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-03-06 20:10 - 2020-03-06 21:11 - 000000000 ____D C:\Users\cstar
2020-03-06 20:10 - 2020-03-06 20:53 - 000000000 ____D C:\Users\famil
2020-03-06 20:10 - 2019-03-19 04:46 - 000001105 _____ C:\Users\famil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-03-06 20:02 - 2020-03-06 19:13 - 002874368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2020-03-06 19:58 - 2020-03-07 08:50 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2020-03-06 19:58 - 2020-03-06 20:18 - 000267280 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-03-06 19:57 - 2020-03-06 20:53 - 000000000 ____D C:\Windows.old
2020-03-06 19:40 - 2020-03-06 19:57 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2020-03-06 19:37 - 2020-03-06 19:40 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2020-03-06 19:37 - 2020-03-06 19:37 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2020-03-06 19:29 - 2020-03-06 19:29 - 000000000 ____D C:\ProgramData\USOShared
2020-03-06 19:29 - 2020-03-06 19:29 - 000000000 ____D C:\ProgramData\ssh
2020-03-06 19:18 - 2020-03-06 19:18 - 009711616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 005502464 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 004470272 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2020-03-06 19:18 - 2020-03-06 19:18 - 004308480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 003365376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2020-03-06 19:18 - 2020-03-06 19:18 - 001541632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbengine.exe
2020-03-06 19:18 - 2020-03-06 19:18 - 000939008 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000806400 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000800568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2020-03-06 19:18 - 2020-03-06 19:18 - 000742912 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000722944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapi.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000633344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncController.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncController.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000411136 _____ (Microsoft Corporation) C:\WINDOWS\system32\DavSyncProvider.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000387832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapibase.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DavSyncProvider.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000307200 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveui.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000283264 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeunlock.exe
2020-03-06 19:18 - 2020-03-06 19:18 - 000249856 _____ (Gracenote, Inc.) C:\WINDOWS\SysWOW64\gnsdk_fp.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.XamlHost.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.XamlHost.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveskybackup.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000093104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpfve.sys
2020-03-06 19:18 - 2020-03-06 19:18 - 000053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeUISrv.exe
2020-03-06 19:18 - 2020-03-06 19:18 - 000035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeui.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecerts.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fvecerts.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwmp.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdxm.ocx
2020-03-06 19:18 - 2020-03-06 19:18 - 000005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxmasf.dll
2020-03-06 19:18 - 2020-03-06 19:18 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmploc.DLL
2020-03-06 19:17 - 2020-03-06 19:17 - 025444352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 022635008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 019850240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 019813376 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 018026496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 008013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 007802224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 007754752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 007259648 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 007017472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 006284800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 005912064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 005083352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 005013504 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 004856832 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 004575232 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 004481536 _____ (Microsoft Corporation) C:\WINDOWS\system32\DHolographicDisplay.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 004348616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 004129416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 003820032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 003637760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 003525592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 003484672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 003243080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 002956472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2020-03-06 19:17 - 2020-03-06 19:17 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2020-03-06 19:17 - 2020-03-06 19:17 - 002493720 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 002422592 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVCORE.DLL
2020-03-06 19:17 - 2020-03-06 19:17 - 002399232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 002314952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 002230232 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 002225160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 002175288 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 002138472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVCORE.DLL
2020-03-06 19:17 - 2020-03-06 19:17 - 002132280 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 002072152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 002032128 _____ C:\WINDOWS\system32\rdpnano.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001866272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001835128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001788728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001610240 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001555688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001540096 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001510752 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001505320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001489064 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001417760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001343488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001319936 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001301504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001297936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001273856 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001272360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001263616 _____ (Microsoft Corporation) C:\WINDOWS\system32\opengl32.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001248256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOE.DLL
2020-03-06 19:17 - 2020-03-06 19:17 - 001244944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001214976 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001151816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001138688 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001106944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001105776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001098720 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001080832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001060352 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001039872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOE.DLL
2020-03-06 19:17 - 2020-03-06 19:17 - 001012792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 001000960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000996352 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000986112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe
2020-03-06 19:17 - 2020-03-06 19:17 - 000952416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000904704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\opengl32.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000893952 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2020-03-06 19:17 - 2020-03-06 19:17 - 000890368 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000852480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000843776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000835584 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000805376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000775680 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000749568 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000744248 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOE.DLL
2020-03-06 19:17 - 2020-03-06 19:17 - 000737552 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOD.DLL
2020-03-06 19:17 - 2020-03-06 19:17 - 000705536 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000685056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000682744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOE.DLL
2020-03-06 19:17 - 2020-03-06 19:17 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000666280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOD.DLL
2020-03-06 19:17 - 2020-03-06 19:17 - 000664576 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdbui.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000609280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000571392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiaaut.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000551824 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000537608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000529408 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe
2020-03-06 19:17 - 2020-03-06 19:17 - 000516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000510768 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2020-03-06 19:17 - 2020-03-06 19:17 - 000486400 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000476672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxbde40.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000472576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedRealitySvc.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000463272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000460288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcSpecfc.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000450560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxdiagn.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe
2020-03-06 19:17 - 2020-03-06 19:17 - 000437760 _____ (Microsoft Corporation) C:\WINDOWS\system32\P2PGraph.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000432256 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000430080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000430080 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000428544 _____ (Microsoft Corporation) C:\WINDOWS\system32\p2psvc.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000421376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2020-03-06 19:17 - 2020-03-06 19:17 - 000420360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000417280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\provplatformdesktop.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000386048 _____ (curl, hxxps://curl.haxx.se/) C:\WINDOWS\SysWOW64\curl.exe
2020-03-06 19:17 - 2020-03-06 19:17 - 000380928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcLayers.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000376320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspbde40.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000366416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000363840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000358400 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000356864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\P2PGraph.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000353792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnrpsvc.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000345088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\udfs.sys
2020-03-06 19:17 - 2020-03-06 19:17 - 000341504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000327680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\upnphost.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\VAN.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000315392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxdiag.exe
2020-03-06 19:17 - 2020-03-06 19:17 - 000315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcLayers.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd2x40.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000309248 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapisrv.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_AnalogShell.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe
2020-03-06 19:17 - 2020-03-06 19:17 - 000267528 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFMCP.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000261016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityUxHost.exe
2020-03-06 19:17 - 2020-03-06 19:17 - 000257536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\provplatformdesktop.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpRelayTransport.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapisrv.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\srrstr.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000245248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\glu32.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msltus40.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sti.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\IndexedDbLegacy.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000219136 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscinterop.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000219136 _____ (Microsoft Corporation) C:\WINDOWS\system32\P2P.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdsdwmdr.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiagSvc.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\p2pnetsh.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000194560 _____ (Microsoft Corporation) C:\WINDOWS\system32\recdisc.exe
2020-03-06 19:17 - 2020-03-06 19:17 - 000186880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2020-03-06 19:17 - 2020-03-06 19:17 - 000185856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceCenter.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngOnline.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetpp.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IndexedDbLegacy.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000174080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\p2pnetsh.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000173568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\P2P.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpdr.sys
2020-03-06 19:17 - 2020-03-06 19:17 - 000164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscinterop.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\glu32.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000158208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2020-03-06 19:17 - 2020-03-06 19:17 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000145720 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-kernel-processor-power-events.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sud.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000129088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWSD.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000119808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiadss.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFolders.exe
2020-03-06 19:17 - 2020-03-06 19:17 - 000100664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmcl.sys
2020-03-06 19:17 - 2020-03-06 19:17 - 000099712 _____ (Microsoft Corporation) C:\WINDOWS\system32\FsIso.exe
2020-03-06 19:17 - 2020-03-06 19:17 - 000097080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dfrgui.exe
2020-03-06 19:17 - 2020-03-06 19:17 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdSSDP.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcXtrnal.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2020-03-06 19:17 - 2020-03-06 19:17 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdbusenum.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvvmtransport.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedsbs.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Groupinghc.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2020-03-06 19:17 - 2020-03-06 19:17 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvvmtransport.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ComputerDefaults.exe
2020-03-06 19:17 - 2020-03-06 19:17 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iemigplugin.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\reg.exe
2020-03-06 19:17 - 2020-03-06 19:17 - 000059221 _____ C:\WINDOWS\system32\srms.dat
2020-03-06 19:17 - 2020-03-06 19:17 - 000058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\udhisapi.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\SrTasks.exe
2020-03-06 19:17 - 2020-03-06 19:17 - 000042512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe
2020-03-06 19:17 - 2020-03-06 19:17 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XInput1_4.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\upnpcont.exe
2020-03-06 19:17 - 2020-03-06 19:17 - 000032056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys
2020-03-06 19:17 - 2020-03-06 19:17 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimsg.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimsg.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000019768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.exe
2020-03-06 19:17 - 2020-03-06 19:17 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiatrace.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcXtrnal.dll
2020-03-06 19:17 - 2020-03-06 19:17 - 000013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedssync.exe
2020-03-06 19:16 - 2020-03-06 19:17 - 025900032 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 014816256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 006519752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 006083832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 005943296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 005848840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 005764664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 005112320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 004538880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 004150272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AI.MachineLearning.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 003967888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 003742544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneCoreUAPCommonProxyStub.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 002876416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 002821120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 002800128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2020-03-06 19:16 - 2020-03-06 19:16 - 002743808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 002584008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 002576384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 002561536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 002490712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 002305536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 002260176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 002095104 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001985928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001957008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001952360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001916744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001893888 _____ (The ICU Project) C:\WINDOWS\SysWOW64\icu.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001847808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsservices.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001730560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001693184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001664696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001664680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001651848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001616784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001587712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001563648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001562424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001535288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001531656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001515008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmgaclient.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001488384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001473488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001458688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001413840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001398584 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 001368576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001356800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001348096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001334064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ttdrecordcpu.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001321472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001305608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContentDeliveryManager.Utilities.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001284096 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001283592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2020-03-06 19:16 - 2020-03-06 19:16 - 001260544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpsharercom.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001244672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001218120 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 001216000 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdclt.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 001213752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001195008 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdengin2.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001189376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Graphics.Display.DisplayEnhancementService.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001178816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001154448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001122816 _____ (Microsoft Corporation) C:\WINDOWS\system32\CBDHSvc.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001101312 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001083392 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001079296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001077264 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 001067008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001062912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmgaserver.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 001059840 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 001054864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001047968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001020032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001007616 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001007160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 001006592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000957952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000928776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000910848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MiracastReceiver.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000910336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontext.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000904504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000895488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000892488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000875008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000864768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000842552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000839680 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000829536 _____ (Microsoft Corporation) C:\WINDOWS\system32\BioIso.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000822072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000813568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000800048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000792296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputHost.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000788992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000784384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000783480 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000777528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Services.TargetedContent.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000775768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000774664 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000769336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000769024 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcIsoCtnr.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000768528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000768488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000749568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprddm.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000739328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000729088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FlightSettings.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000704512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.FileExplorer.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000700416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BTAGService.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000699904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000696320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsreg.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000691712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000679368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000678400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiaaut.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000673456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000673080 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000671232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiaservc.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000670720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000669496 _____ (Microsoft Corporation) C:\WINDOWS\system32\computecore.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000669352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000652800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000646144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000632320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000631808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000629248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.Search.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000628400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000612352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000602224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscms.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000599552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000599552 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000597816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000593128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000588256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000574976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_9.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000568120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000564736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Input.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000558080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSDApi.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000546816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxdiagn.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000542288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000541696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResourceMapper.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000539648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9on12.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000538624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000532480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000531464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000529408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ddraw.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000521728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Launcher.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000512000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000510464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000507152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskschd.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000501232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp_win.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000500736 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2020-03-06 19:16 - 2020-03-06 19:16 - 000497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000494080 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.FileExplorer.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000488056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000487576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase_enclave.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000478800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sechost.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000477184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000464384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000463272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000462848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\upnphost.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000454736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppResolver.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000453632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000453432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000450360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11on12.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000441072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MediaControl.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000423936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputSwitch.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000422008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000421376 _____ (curl, hxxps://curl.haxx.se/) C:\WINDOWS\system32\curl.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000415544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000415232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2020-03-06 19:16 - 2020-03-06 19:16 - 000407040 _____ (Microsoft Corporation) C:\WINDOWS\system32\DispBroker.Desktop.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000406480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Enumeration.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000405632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000399360 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000384000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000383984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MMDevAPI.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000382976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000380944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000380416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000379840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ws2_32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000376832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webauthn.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000375504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000369664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxdiag.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskcomp.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000354816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Magnify.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000346624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\secproc.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000336928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000332288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000327680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2020-03-06 19:16 - 2020-03-06 19:16 - 000321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\sti.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000321024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000320512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000317952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000316216 _____ (Microsoft Corporation) C:\WINDOWS\system32\computestorage.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000312832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WiFiDisplay.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000311296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL
2020-03-06 19:16 - 2020-03-06 19:16 - 000307712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000300392 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000291840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Diagnostics.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000285256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000283688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ttdwriter.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000283136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000281600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000279624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winsta.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000279040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000274944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Lights.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000274464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BCP47Langs.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpviewerax.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000270336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000267496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000251512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000240128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ssdpsrv.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000236520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfgmgr32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\icm32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptui.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmd.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastapi.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2020-03-06 19:16 - 2020-03-06 19:16 - 000224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCenter.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000222208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netplwiz.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000217600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msutb.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000211968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFilterHost.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000210744 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\sti_ci.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000199680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\accessibilitycpl.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000199480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000195584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\container.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000193800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000190464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regapi.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000190256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logoncli.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000189440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwpolicyiomgr.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000187920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ifsutil.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000187392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schtasks.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000186880 _____ (Microsoft Corp.) C:\WINDOWS\system32\Defrag.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallServiceTasks.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\twext.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\sud.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiapi.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000170920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xmllite.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000167136 _____ (Microsoft Corporation) C:\WINDOWS\system32\vertdll.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000166400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MicrosoftAccountTokenProvider.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000163840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BitLockerCsp.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000162816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincredui.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000158208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Winlangdb.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000157184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ComposableShellProxyStub.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWSD.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000150536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmvdsitf.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000149512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ulib.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdrsvc.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000148992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twext.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiadss.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpatialAudioLicenseSrv.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000143808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imm32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000139264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prntvpt.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\t2embed.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000137864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devobj.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000136536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\omadmapi.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000135480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wldp.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000135000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000133464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BCP47mrm.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000131584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fwbase.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000127520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmcmnutils.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinHvPlatform.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdshext.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000125232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KerbClientShared.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000120344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\profext.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000116904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000116728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rmclient.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000115200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleprn.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000113152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssitlb.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000110080 _____ C:\WINDOWS\system32\ResBParser.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdSSDP.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GraphicsCapture.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvsetup.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000105832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpenWith.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\dfrgui.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cdfs.sys
2020-03-06 19:16 - 2020-03-06 19:16 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mapistub.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mapi32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GameChatTranscription.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000098592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Display.BrightnessOverride.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\compstui.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\globinputhost.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000096032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Utilman.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EaseOfAccessDialog.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000093496 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompMgmtLauncher.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000089328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafPrintProvider.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000088064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3api.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3msm.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000084496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
2020-03-06 19:16 - 2020-03-06 19:16 - 000084488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winhvr.sys
2020-03-06 19:16 - 2020-03-06 19:16 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiarpc.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dtdump.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcbuilder.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sethc.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ComputerDefaults.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usp10.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\reg.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000072816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000072704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzautoupdate.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\udhisapi.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\keyiso.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clfsw32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\enterpriseresourcemanager.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AtBroker.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ssdpapi.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\coloradapterclient.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ApiSetHost.AppExecutionAlias.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmgaproxystub.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\printui.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000061240 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvhostsvc.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssprxy.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000056832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devrtl.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000056008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptdll.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efsext.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\findnetprinters.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtutils.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnrollCtrl.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ByteCodeGenerator.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbauth.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edpnotify.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AssignedAccessRuntime.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscntrs.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguageProfileCallback.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GameInput.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\XInput1_4.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ddrawex.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\compact.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\upnpcont.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000039936 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcicda.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XInputUap.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Websocket.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\enrollmentapi.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000033048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NtlmShared.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmintegrator.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerCookies.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciwave.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciseq.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000021520 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winnlsres.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfapigp.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiatrace.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fixmapi.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedssync.exe
2020-03-06 19:16 - 2020-03-06 19:16 - 000013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDJPN.DLL
2020-03-06 19:16 - 2020-03-06 19:16 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDKOR.DLL
2020-03-06 19:16 - 2020-03-06 19:16 - 000012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbd106.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DMAlertListener.ProxyStub.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimg32.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCertResources.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6r.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3r.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll
2020-03-06 19:16 - 2020-03-06 19:16 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin
2020-03-06 19:16 - 2020-03-06 19:16 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin
2020-03-06 19:16 - 2020-03-06 19:16 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin
2020-03-06 19:16 - 2020-03-06 19:16 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin
2020-03-06 19:16 - 2020-03-06 19:16 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin
2020-03-06 19:16 - 2020-03-06 19:16 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin
2020-03-06 19:16 - 2020-03-06 19:16 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin
2020-03-06 19:16 - 2020-03-06 19:16 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin
2020-03-06 19:16 - 2020-03-06 19:16 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin
2020-03-06 19:16 - 2020-03-06 19:16 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin
2020-03-06 19:16 - 2020-03-06 19:16 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin
2020-03-06 19:16 - 2020-03-06 19:16 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin
2020-03-06 19:15 - 2020-03-06 19:15 - 005865272 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwizimg.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 005041664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 003752960 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 002861568 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsservices.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 002773776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 002703872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 002147328 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 001858560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 001845408 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 001835008 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 001697792 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 001697280 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 001687040 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 001647072 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 001412096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 001375232 _____ (Microsoft Corporation) C:\WINDOWS\system32\APMon.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 001097216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2020-03-06 19:15 - 2020-03-06 19:15 - 000921600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000913408 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000896512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdmDiagnostics.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000888056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000875008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprddm.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000861696 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000857088 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2020-03-06 19:15 - 2020-03-06 19:15 - 000832000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000818688 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000776704 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockController.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000680448 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000634880 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000629760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000618496 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000612864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000610816 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000595968 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\ddraw.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000551424 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2020-03-06 19:15 - 2020-03-06 19:15 - 000541480 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000518656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000509440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000507704 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwizeng.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000455680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2020-03-06 19:15 - 2020-03-06 19:15 - 000443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000394752 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000382976 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000379192 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys
2020-03-06 19:15 - 2020-03-06 19:15 - 000329216 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiagnosticLogCSP.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpviewerax.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000315904 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenterprisediagnostics.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\coredpus.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000278080 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe
2020-03-06 19:15 - 2020-03-06 19:15 - 000270848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngctasks.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000253952 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerCsp.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000248320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastapi.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000244736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndproxy.sys
2020-03-06 19:15 - 2020-03-06 19:15 - 000243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\VideoHandlers.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Gpu.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpnServiceDS.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincredui.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000205312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcsps.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiapi.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\prntvpt.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000176440 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxlib.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000173568 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2020-03-06 19:15 - 2020-03-06 19:15 - 000170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\NcaSvc.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000164776 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmapi.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000162696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcmnutils.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000153088 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvcext.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\luafv.sys
2020-03-06 19:15 - 2020-03-06 19:15 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000132912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Display.BrightnessOverride.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000132608 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_ForceSync.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tunnel.sys
2020-03-06 19:15 - 2020-03-06 19:15 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptcatsvc.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafPrintProvider.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\compstui.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000114176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys
2020-03-06 19:15 - 2020-03-06 19:15 - 000111104 _____ (Microsoft Corporation) C:\WINDOWS\system32\AxInstSv.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpoext.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcbuilder.exe
2020-03-06 19:15 - 2020-03-06 19:15 - 000093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wanarp.sys
2020-03-06 19:15 - 2020-03-06 19:15 - 000084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterpriseresourcemanager.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\efsext.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdProxy.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000066832 _____ (Microsoft Corporation) C:\WINDOWS\system32\iumcrypt.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\findnetprinters.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\printui.exe
2020-03-06 19:15 - 2020-03-06 19:15 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtutils.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\edpnotify.exe
2020-03-06 19:15 - 2020-03-06 19:15 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AxInstUI.exe
2020-03-06 19:15 - 2020-03-06 19:15 - 000056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnppolicy.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ddrawex.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mskssrv.sys
2020-03-06 19:15 - 2020-03-06 19:15 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\posetup.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmproxy.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndistapi.sys
2020-03-06 19:15 - 2020-03-06 19:15 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsunattend.exe
2020-03-06 19:15 - 2020-03-06 19:15 - 000017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmsprep.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000016696 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwizres.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d8thk.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000011576 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxlibres.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMAlertListener.ProxyStub.dll
2020-03-06 19:15 - 2020-03-06 19:15 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3r.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 009929016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 007905208 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 007600448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 007263992 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 006435840 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 006167552 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 004562896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 004140544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 004047360 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 004009472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Service.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 003792384 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 003728896 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 003654656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 003550208 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 003387392 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 003372440 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 002988552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 002871848 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 002766088 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 002698768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 002590208 _____ C:\WINDOWS\system32\dwmscene.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 002178048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmgaclient.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 002084576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001999960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001974824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 001940952 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001918976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001856000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConstraintIndex.Search.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001830200 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001819136 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreShell.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001757096 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2020-03-06 19:14 - 2020-03-06 19:14 - 001743680 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001726480 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001717776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001657856 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001655880 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001607680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001553408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmgaserver.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 001512320 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 001505592 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001482040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 001480192 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocoreworker.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 001423872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001395600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001394168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001372160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001366128 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2020-03-06 19:14 - 2020-03-06 19:14 - 001330952 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001313792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001300280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 001261464 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001257472 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001182232 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 001170960 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001084728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Services.TargetedContent.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001083904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001051448 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001042944 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2020-03-06 19:14 - 2020-03-06 19:14 - 001023128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 001009664 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000986936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000982840 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000977688 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000974336 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthSSO.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000928120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000911824 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000891736 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000878080 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2020-03-06 19:14 - 2020-03-06 19:14 - 000875448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000858112 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000844800 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000824848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000822416 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000818656 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000811536 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000811160 _____ C:\WINDOWS\SysWOW64\locale.nls
2020-03-06 19:14 - 2020-03-06 19:14 - 000811160 _____ C:\WINDOWS\system32\locale.nls
2020-03-06 19:14 - 2020-03-06 19:14 - 000797112 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000771584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000759488 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskschd.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000758800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000752792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000747320 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.immersiveshell.serviceprovider.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000728576 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\mousocoreworker.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000686080 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDApi.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000683008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplicationFrame.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000678928 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000674280 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000670208 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000661816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000649728 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicesFlowBroker.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000642560 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000639400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp_win.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000638264 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000637440 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000617784 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000606720 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000606112 _____ (Microsoft Corporation) C:\WINDOWS\system32\sechost.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000604984 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000598528 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000596008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppResolver.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_PCDisplay.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000587064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000586768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000563712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000561680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000558592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000552448 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000550400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000545432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000535552 _____ (Microsoft Corporation) C:\WINDOWS\system32\usosvc.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000533504 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000524216 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000522176 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000518456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000516648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000516096 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000514576 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000513336 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000511000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64win.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000505856 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputSwitch.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000497664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000497664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000492032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Narrator.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000480768 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskcomp.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000477496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2020-03-06 19:14 - 2020-03-06 19:14 - 000474112 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudDomainJoinDataModelServer.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000467952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000467456 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2020-03-06 19:14 - 2020-03-06 19:14 - 000465208 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000461320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000459896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000457216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cldflt.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000456504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000448000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000446464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Magnify.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000442704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2_32.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000437776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000435200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000416056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000400696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000398728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000396288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Lights.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000392704 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationControllerPS.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000390456 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000386320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppLockerCSP.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000372752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000369504 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47Langs.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000363624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000358944 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsta.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000353960 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000350720 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SpeechPrivacy.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000350208 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000344064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.BlueLightReduction.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000335448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000331776 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFWSD.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ComposableShellProxyStub.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000324616 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcommdlg.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000317440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConhostV1.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000314368 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000311096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000293376 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000293344 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgmgr32.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000292352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000284160 _____ (Microsoft Corporation) C:\WINDOWS\system32\container.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000283144 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000281088 _____ (Microsoft Corporation) C:\WINDOWS\system32\msutb.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000280064 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmd.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\DesktopSwitcherDataModel.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000260920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000259984 _____ (Microsoft Corporation) C:\WINDOWS\system32\logoncli.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000258048 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_ManagePhone.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnservice.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000251704 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000247856 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000237880 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\accessibilitycpl.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwpolicyiomgr.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\schtasks.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000225080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000220984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdigest.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000214032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ifsutil.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000210400 _____ (Microsoft Corporation) C:\WINDOWS\system32\xmllite.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000205112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winquic.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\regapi.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000202552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\appid.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000201528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Win32CompatibilityAppraiserCSP.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000194176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winquic.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000186672 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47mrm.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000180536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000180024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ulib.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000179720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000178192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000176152 _____ (Microsoft Corporation) C:\WINDOWS\system32\imm32.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000165832 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000164368 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000162384 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwbase.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\srpapi.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000159112 _____ (Microsoft Corporation) C:\WINDOWS\system32\devobj.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000157752 _____ (Microsoft Corporation) C:\WINDOWS\system32\rmclient.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmgaproxystub.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000152408 _____ (Microsoft Corporation) C:\WINDOWS\system32\KerbClientShared.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserexport.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000147184 _____ (Microsoft Corporation) C:\WINDOWS\system32\smss.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000146744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000146416 _____ (Microsoft Corporation) C:\WINDOWS\system32\profext.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000144376 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000143160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000142544 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingUI.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000141840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000140496 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmredir.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000132624 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudDomainJoinAUG.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000129848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mup.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvsetup.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000127280 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000123920 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdnet.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatecsp.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000119840 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpenWith.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Utilman.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\EaseOfAccessDialog.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000117264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bindflt.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000115120 _____ (Microsoft Corporation) C:\WINDOWS\system32\phoneactivate.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000113664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Taskbar.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000113160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mountmgr.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetDriverInstall.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000107832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairingExperienceMEM.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreShellExtFramework.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000106808 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000105488 _____ (Microsoft Corporation) C:\WINDOWS\system32\icfupgd.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000102216 _____ (Microsoft Corporation) C:\WINDOWS\system32\changepk.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\sethc.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSReset.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000092624 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskhostw.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\keyiso.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000087048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\npfs.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AtBroker.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthSystray.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\clfsw32.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetDriverInstall.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\usp10.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwm.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000071480 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\UsoClient.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000066360 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptdll.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcadm.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000063288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthHost.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\vss_ps.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\devrtl.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000058880 _____ C:\WINDOWS\system32\runexehelper.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000053248 _____ C:\WINDOWS\system32\Drivers\UsbPmApi.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcalua.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nsiproxy.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000047616 _____ C:\WINDOWS\system32\UsbPmApi.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000047616 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000046632 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser_broker.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Websocket.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\compact.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000043536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msfs.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpgradeResultsUI.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000039304 _____ (Microsoft Corporation) C:\WINDOWS\system32\NtlmShared.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000037888 _____ C:\WINDOWS\system32\usocoreps.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000037392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000036368 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\winnsi.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxssrv.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\nsisvc.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000028344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winnsi.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidtel.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ws2ifsl.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000024792 _____ (Microsoft Corporation) C:\WINDOWS\system32\nsi.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfapigp.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wci.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000020944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000020352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nsi.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\winnlsres.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmsgapi.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\applockerfltr.sys
2020-03-06 19:14 - 2020-03-06 19:14 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\bindflt.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaevts.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\pacjsworker.exe
2020-03-06 19:14 - 2020-03-06 19:14 - 000008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimg32.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2020-03-06 19:14 - 2020-03-06 19:14 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tier2punctuations.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 017787904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 007849424 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 007582752 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 007278592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 006231200 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 005890048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AI.MachineLearning.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 004615376 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 004470784 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 004005888 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 003703296 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 003590968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 003353088 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 003327256 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 003263488 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 003261440 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 003184128 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 003141120 _____ (Microsoft Corporation) C:\WINDOWS\system32\directml.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 003110400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 003084800 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 002870272 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 002714624 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 002656768 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 002552120 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 002473976 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 002466304 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 002456064 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 002448712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 002321408 _____ (The ICU Project) C:\WINDOWS\system32\icu.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 002284544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 002249216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 002232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 002125904 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 002120704 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcDesktopMonSvc.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 002114048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 002071552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001942016 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001920512 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001884200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001841152 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001784832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001783296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001761792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001748480 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001744400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001687040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001635328 _____ (Microsoft Corporation) C:\WINDOWS\system32\TaskFlowDataEngine.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001616608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ttdrecordcpu.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001602560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001581056 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001543168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowManagement.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001497088 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001481216 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpsharercom.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001428992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 001413912 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001383856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001337872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001332736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MiracastReceiver.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001282048 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsf3gip.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001259416 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 001180160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001159680 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001158656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001150240 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputHost.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001149928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 001098240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Signals.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001094656 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcRefreshTask.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001091584 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001084216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001070080 _____ (Microsoft Corporation) C:\WINDOWS\system32\BTAGService.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001069064 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001036800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001029432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ClipSp.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 001026792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 001006904 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000977408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontext.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000957952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000944664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000931840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000916480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000913920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000893440 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000878080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Service.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000874296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000851968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000841216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000839680 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9on12.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000833312 _____ (Microsoft Corporation) C:\WINDOWS\system32\pkeyhelper.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000826368 _____ (Microsoft Corporation) C:\WINDOWS\system32\printfilterpipelinesvc.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000824832 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000817152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\PEAuth.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000810496 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrSvc.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000808960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Input.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000804872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000803840 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000782848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000750080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.Search.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000750080 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000737280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Launcher.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000732200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000727040 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntime.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000727040 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000722288 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000716288 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntimewindows.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000706760 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscms.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000702464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000680448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000657424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000656960 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11on12.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000654912 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000642008 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000640512 _____ (Microsoft Corporation) C:\WINDOWS\system32\vds.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000637968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000601088 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000594944 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_9.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000589592 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000551736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Vid.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000539648 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2020-03-06 19:13 - 2020-03-06 19:13 - 000534528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.UserService.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000531976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2020-03-06 19:13 - 2020-03-06 19:13 - 000524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000524264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Enumeration.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000481592 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000477696 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000472064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000464384 _____ (Microsoft Corporation) C:\WINDOWS\system32\webauthn.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000464384 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.ConversationalAgent.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000449888 _____ (Microsoft Corporation) C:\WINDOWS\system32\MMDevAPI.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000441144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000437776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000427008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000425264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000422712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000420152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmicmiplugin.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000415808 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000404480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\exfat.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000395776 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000373248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Diagnostics.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\MbbCx.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000355840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicSvc.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000352256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcApi.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000342896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ttdwriter.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000338800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000338432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000336960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSrvPolicyManager.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000322504 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000312320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000296760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000295936 _____ (Microsoft Corporation) C:\WINDOWS\system32\TDLMigration.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000292664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000291328 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceDirectoryClient.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000291256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\directxdatabaseupdater.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicCapsule.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcTok.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000277504 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_CapabilityAccess.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3svc.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateDeploymentProvider.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000253952 _____ (Microsoft Corporation) C:\WINDOWS\system32\icm32.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000250880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000249656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\ManageCI.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000245248 _____ (Microsoft Corporation) C:\WINDOWS\system32\wosc.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsbas.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApproveChildRequest.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000233472 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000232448 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallServiceTasks.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountTokenProvider.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000223032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelppm.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Winlangdb.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgiadaptercache.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000204816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spacedump.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000201016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdppm.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000199480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdk8.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000194064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\fcon.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\AarSvc.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000182288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpioclx.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000180240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000178688 _____ (Microsoft Corporation) C:\WINDOWS\system32\appsruprov.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmvdsitf.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatialAudioLicenseSrv.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000160256 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_AppExecutionAlias.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000151568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbus.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_BackgroundApps.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000149504 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleprn.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\GraphicsCapture.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000132608 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Storage.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\globinputhost.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsutil.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000129024 _____ (Microsoft Corporation) C:\WINDOWS\system32\UtcDecoderHost.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000129024 _____ (Microsoft Corporation) C:\WINDOWS\system32\GameChatTranscription.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000128528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssitlb.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplicationControlCSP.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapistub.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapi32.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\vds_ps.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3msm.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS
2020-03-06 19:13 - 2020-03-06 19:13 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3api.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000089912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicAgent.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000088488 _____ (Microsoft Corporation) C:\WINDOWS\system32\coloradapterclient.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000088352 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApiSetHost.AppExecutionAlias.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000079376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\uaspstor.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\CustomInstallExec.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\autopilot.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.EnrollmentStatusTracking.ConfigProvider.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000067112 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsManagementServiceWinRt.ProxyStub.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo-overrides.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnrollCtrl.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbauth.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidspi.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ByteCodeGenerator.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AssignedAccessRuntime.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguageProfileCallback.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\audioresourceregistrar.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\GameInput.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000055304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storufs.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000052752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmstorfl.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringconfigsp.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\XInputUap.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcicda.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000047208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\printfilterpipelineprxy.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\cellulardatacapabilityhandler.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.Common.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000043536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storvsc.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiredNetworkCSP.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerCookies.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\IcsEntitlementHost.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthMini.SYS
2020-03-06 19:13 - 2020-03-06 19:13 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevQueryBroker.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciwave.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\FaxPrinterInstaller.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\KNetPwrDepBroker.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciseq.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000028936 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmbuspipe.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicPS.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscisvif.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Win32_DeviceGuard.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsldr.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\autopilotdiag.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\CSystemEventsBrokerClient.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000023352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\isapnp.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\fixmapi.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000019256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msisadrv.sys
2020-03-06 19:13 - 2020-03-06 19:13 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscproxystub.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsilog.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dstokenclean.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscadminui.exe
2020-03-06 19:13 - 2020-03-06 19:13 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCertResources.dll
2020-03-06 19:13 - 2020-03-06 19:13 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6r.dll
2020-03-06 19:12 - 2020-03-06 19:13 - 000208184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\processr.sys
2020-03-06 19:12 - 2020-03-06 19:12 - 000804664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2020-03-06 19:12 - 2020-03-06 19:12 - 000425472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\HdAudio.sys
2020-03-06 19:12 - 2020-03-06 19:12 - 000355000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2020-03-06 19:12 - 2020-03-06 19:12 - 000324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys
2020-03-06 19:12 - 2020-03-06 19:12 - 000257536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbaudio2.sys
2020-03-06 19:12 - 2020-03-06 19:12 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthA2dp.sys
2020-03-06 19:12 - 2020-03-06 19:12 - 000069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\monitor.sys
2020-03-06 19:12 - 2020-03-06 19:12 - 000047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\devauthe.sys
2020-03-06 19:12 - 2020-03-06 19:12 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WSDScan.sys
2020-03-06 19:12 - 2020-03-06 19:12 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\serscan.sys
2020-03-06 18:53 - 2020-03-06 18:53 - 000903168 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsFilt.dll
2020-03-06 18:53 - 2020-03-06 18:53 - 000568320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsFilt.dll
2020-03-06 18:53 - 2020-03-06 18:53 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\XPSSHHDR.dll
2020-03-06 18:53 - 2020-03-06 18:53 - 000081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XPSSHHDR.dll
2020-03-06 18:53 - 2020-03-06 18:53 - 000076060 _____ C:\WINDOWS\SysWOW64\xpsrchvw.xml
2020-03-06 18:53 - 2020-03-06 18:53 - 000076060 _____ C:\WINDOWS\system32\xpsrchvw.xml
2020-03-06 18:52 - 2020-03-06 18:52 - 001166488 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2020-03-06 18:52 - 2020-03-06 18:52 - 000778912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2020-03-06 18:52 - 2020-03-06 18:52 - 000124568 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2020-03-06 18:52 - 2020-03-06 18:52 - 000103072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2020-03-06 18:52 - 2020-03-06 18:52 - 000035592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2020-03-06 18:52 - 2020-03-06 18:52 - 000035592 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2020-03-06 18:52 - 2020-03-06 18:52 - 000000000 ____D C:\Program Files\Reference Assemblies
2020-03-06 18:52 - 2020-03-06 18:52 - 000000000 ____D C:\Program Files\MSBuild
2020-03-06 18:52 - 2020-03-06 18:52 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2020-03-06 18:52 - 2020-03-06 18:52 - 000000000 ____D C:\Program Files (x86)\MSBuild
2020-03-06 18:44 - 2020-03-06 18:44 - 000492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2020-03-06 18:44 - 2020-03-06 18:44 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2020-02-28 16:36 - 2020-03-06 20:54 - 000000000 ___DC C:\WINDOWS\Panther
2020-02-19 09:33 - 2020-02-01 07:36 - 000801080 _____ (Microsoft Corporation) C:\WINDOWS\system32\sedplugins.dll
2020-02-16 20:23 - 2020-02-16 20:23 - 000063827 _____ C:\Users\cstar\Downloads\Climax (2018) [1080p] [WEBRip] [YTS.LT].torrent
2020-02-16 20:22 - 2020-02-16 20:22 - 000044345 _____ C:\Users\cstar\Downloads\Brutal (2017) [1080p] [BluRay] [YTS.LT].torrent
2020-02-16 20:11 - 2020-02-16 20:11 - 000070261 _____ C:\Users\cstar\Downloads\Come to Daddy (2019) [1080p] [WEBRip] [5.1] [YTS.LT].torrent
2020-02-09 10:57 - 2020-02-09 10:57 - 011789216 _____ C:\Users\famil\Downloads\TotalAV_Setup (1).exe
 
==================== One month (modified) ==================
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2020-03-09 18:44 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\AppLocker
2020-03-09 18:38 - 2018-12-26 20:11 - 000000000 ____D C:\Users\cstar\AppData\Local\Plex Media Server
2020-03-09 18:37 - 2019-03-19 04:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-03-09 17:31 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\AppReadiness
2020-03-09 16:02 - 2018-09-05 17:18 - 000000000 ____D C:\Users\famil\AppData\Local\Host App Service
2020-03-09 15:54 - 2018-09-05 17:35 - 000000000 ___RD C:\Users\famil\OneDrive
2020-03-08 20:02 - 2019-03-19 04:37 - 001048576 _____ C:\WINDOWS\system32\config\BBI
2020-03-08 20:02 - 2018-06-07 15:19 - 000065536 _____ C:\WINDOWS\psp_storage.bin
2020-03-08 19:21 - 2019-03-19 04:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-03-08 18:52 - 2018-09-05 16:39 - 000000000 ___RD C:\Users\cstar\OneDrive
2020-03-08 18:42 - 2018-09-05 16:35 - 000000000 ____D C:\Users\cstar\AppData\Local\Packages
2020-03-08 18:42 - 2018-06-07 15:40 - 000000000 ____D C:\Program Files (x86)\Acer
2020-03-08 18:35 - 2018-09-05 16:32 - 000000000 ____D C:\Users\cstar\AppData\Local\Host App Service
2020-03-08 15:16 - 2018-09-05 16:35 - 000000000 ___RD C:\Users\cstar\3D Objects
2020-03-08 15:16 - 2018-06-07 15:02 - 000000000 __RHD C:\Users\Public\AccountPictures
2020-03-08 08:59 - 2019-03-19 04:50 - 000000000 ____D C:\WINDOWS\INF
2020-03-07 04:42 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\appcompat
2020-03-07 00:29 - 2019-03-19 04:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-03-06 21:13 - 2018-09-05 17:19 - 000000000 ____D C:\Users\famil\AppData\Local\Packages
2020-03-06 21:11 - 2019-03-19 04:52 - 000000000 ___RD C:\WINDOWS\PrintDialog
2020-03-06 20:54 - 2018-09-05 17:20 - 000000000 ___RD C:\Users\famil\3D Objects
2020-03-06 20:52 - 2019-03-19 04:37 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2020-03-06 20:51 - 2019-03-19 04:52 - 000000000 ____D C:\Program Files\Windows Defender
2020-03-06 20:22 - 2018-09-05 16:42 - 000002348 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-03-06 20:22 - 2018-09-05 16:42 - 000002307 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2020-03-06 20:22 - 2018-09-05 16:42 - 000002307 _____ C:\ProgramData\Desktop\Google Chrome.lnk
2020-03-06 20:16 - 2019-02-13 20:47 - 000000000 ____D C:\Users\cstar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AviSynth
2020-03-06 20:16 - 2019-02-13 20:43 - 000000000 ____D C:\Users\cstar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HandBrake
2020-03-06 20:16 - 2018-10-24 10:37 - 000000000 ____D C:\Users\famil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
2020-03-06 20:03 - 2019-03-19 04:52 - 000000000 ____D C:\ProgramData\USOPrivate
2020-03-06 20:03 - 2018-06-07 15:33 - 000074891 _____ C:\WINDOWS\system32\Drivers\rtkhdasetting.zip
2020-03-06 20:03 - 2018-06-07 15:32 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2020-03-06 20:03 - 2018-06-07 15:32 - 000000000 ____D C:\WINDOWS\system32\DAX3
2020-03-06 20:03 - 2018-06-07 15:32 - 000000000 ____D C:\WINDOWS\system32\DAX2
2020-03-06 20:03 - 2018-06-07 15:12 - 000000000 ____D C:\WINDOWS\SysWOW64\sda
2020-03-06 19:57 - 2020-01-11 15:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windscribe
2020-03-06 19:57 - 2019-12-26 21:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Plex Media Server
2020-03-06 19:57 - 2019-06-18 17:15 - 000000000 ____D C:\Program Files\UNP
2020-03-06 19:57 - 2019-03-19 04:56 - 000000000 ____D C:\WINDOWS\Setup
2020-03-06 19:57 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2020-03-06 19:57 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\spool
2020-03-06 19:57 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\oobe
2020-03-06 19:57 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\NDF
2020-03-06 19:57 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\ServiceState
2020-03-06 19:57 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\Registration
2020-03-06 19:57 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2020-03-06 19:57 - 2019-03-19 04:49 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2020-03-06 19:57 - 2019-02-13 20:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AviSynth
2020-03-06 19:57 - 2019-02-03 18:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Problem Report Wizard
2020-03-06 19:57 - 2018-12-26 16:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Backup and Sync from Google
2020-03-06 19:57 - 2018-09-15 07:33 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2020-03-06 19:57 - 2018-09-15 07:33 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2020-03-06 19:57 - 2018-09-05 23:02 - 000000000 ____D C:\WINDOWS\oem
2020-03-06 19:57 - 2018-09-05 17:22 - 000000000 ____D C:\WINDOWS\system32\MRT
2020-03-06 19:57 - 2018-09-05 16:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Acer
2020-03-06 19:57 - 2018-06-07 16:02 - 000000000 ____D C:\WINDOWS\SysWOW64\WildTangent
2020-03-06 19:57 - 2018-06-07 15:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2020-03-06 19:57 - 2018-06-07 15:23 - 000000000 ____D C:\WINDOWS\system32\ihvmanager
2020-03-06 19:57 - 2018-06-07 15:16 - 000000000 ____D C:\Program Files\AMD
2020-03-06 19:56 - 2019-03-19 04:52 - 000000000 __RHD C:\Users\Public\Libraries
2020-03-06 19:41 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\Resources
2020-03-06 19:41 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\Help
2020-03-06 19:41 - 2019-03-03 12:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2020-03-06 19:40 - 2019-02-03 18:42 - 000000000 ____D C:\Program Files\Common Files\ATI Technologies
2020-03-06 19:40 - 2018-06-07 15:32 - 000000000 ____D C:\Program Files\Realtek
2020-03-06 19:30 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\TextInput
2020-03-06 19:30 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2020-03-06 19:29 - 2019-03-19 11:35 - 000000000 ____D C:\WINDOWS\system32\Drivers\en-GB
2020-03-06 19:29 - 2019-03-19 04:52 - 000000000 ___SD C:\WINDOWS\system32\UNP
2020-03-06 19:29 - 2019-03-19 04:52 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2020-03-06 19:29 - 2019-03-19 04:52 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2020-03-06 19:29 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2020-03-06 19:29 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SystemResources
2020-03-06 19:29 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2020-03-06 19:29 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2020-03-06 19:29 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2020-03-06 19:29 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2020-03-06 19:29 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\migwiz
2020-03-06 19:29 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\Dism
2020-03-06 19:29 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\appraiser
2020-03-06 19:29 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\ShellExperiences
2020-03-06 19:29 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\ShellComponents
2020-03-06 19:29 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\Provisioning
2020-03-06 19:29 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2020-03-06 19:29 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\DiagTrack
2020-03-06 19:29 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\bcastdvr
2020-03-06 19:29 - 2019-03-19 04:37 - 000000000 ____D C:\WINDOWS\servicing
2020-03-06 19:27 - 2019-03-19 11:37 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll
2020-03-06 19:27 - 2019-03-19 11:37 - 000018903 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2020-03-06 18:53 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2020-03-06 18:53 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2020-03-06 18:53 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2020-03-06 18:53 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2020-03-06 18:53 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2020-03-06 18:53 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2020-03-06 18:53 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\et-EE
2020-03-06 18:53 - 2019-03-19 04:52 - 000000000 ____D C:\WINDOWS\system32\es-MX
2020-03-05 15:45 - 2019-02-04 07:37 - 000000000 ____D C:\Users\famil\AppData\Local\D3DSCache
2020-03-02 17:16 - 2018-09-05 17:53 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2020-03-01 16:43 - 2018-09-05 18:00 - 000000000 ____D C:\Users\cstar\AppData\Local\ElevatedDiagnostics
2020-02-29 09:35 - 2018-09-06 15:21 - 000000000 ____D C:\Users\famil\AppData\Local\PlaceholderTileLogoFolder
2020-02-23 09:20 - 2018-09-05 17:30 - 000000000 ____D C:\Program Files\rempl
2020-02-16 22:20 - 2018-11-17 15:00 - 000000000 ____D C:\Users\cstar\AppData\Roaming\Azureus
2020-02-14 08:00 - 2019-11-25 20:55 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2020-02-12 17:16 - 2018-09-05 17:22 - 120407888 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
 
==================== Files in the root of some directories ========
 
2019-09-14 18:01 - 2019-09-14 18:01 - 000007603 _____ () C:\Users\cstar\AppData\Local\Resmon.ResmonCfg
 
==================== SigCheck ============================
 
(There is no automatic fix for files that do not pass verification.)
 
==================== End of FRST.txt ========================
 
 
 
 
Process CPU Private Bytes Working Set PID Description Company Name Verified Signer
AdminService.exe 3,344 K 7,000 K 3440 Windows Setup API Windows ® Win 7 DDK provider (Verified) Qualcomm Atheros
ApplicationFrameHost.exe 11,172 K 31,076 K 10588 Application Frame Host Microsoft Corporation (Verified) Microsoft Windows
AppMonitorPlugIn.exe 28,968 K 21,140 K 10200 AppMonitorPlugIn TODO: <Company name> (Verified) Acer Incorporated
armsvc.exe 1,396 K 5,900 K 3428 Adobe Acrobat Update Service Adobe Systems (Verified) Adobe Inc.
atieclxx.exe 2,452 K 9,944 K 5000 AMD External Events Client Module AMD (Verified) Advanced Micro Devices, Inc.
atiesrxx.exe 1,400 K 5,760 K 2100 AMD External Events Service Module AMD (Verified) Advanced Micro Devices, Inc.
audiodg.exe 9,608 K 14,980 K 1228 Windows Audio Device Graph Isolation Microsoft Corporation (Verified) Microsoft Windows
AUEPLauncher.exe 1,540 K 5,816 K 7164 AMD User Experience Program Launcher AMD (No signature was present in the subject) AMD
AUEPMaster.exe 3,792 K 13,420 K 6020 AMD User Experience Program Master AMD (No signature was present in the subject) AMD
chrome.exe 2,032 K 8,208 K 13028 Google Chrome Google LLC (Verified) Google LLC
chrome.exe 1,720 K 6,020 K 12992 Google Chrome Google LLC (Verified) Google LLC
chrome.exe 7,008 K 16,436 K 5316 Google Chrome Google LLC (Verified) Google LLC
chrome.exe 17,164 K 28,060 K 11560 Google Chrome Google LLC (Verified) Google LLC
chrome.exe 20,924 K 40,756 K 12932 Google Chrome Google LLC (Verified) Google LLC
chrome.exe 22,168 K 36,912 K 13160 Google Chrome Google LLC (Verified) Google LLC
conhost.exe 6,496 K 908 K 1908 Console Window Host Microsoft Corporation (Verified) Microsoft Windows
conhost.exe 6,504 K 6,872 K 3336 Console Window Host Microsoft Corporation (Verified) Microsoft Windows
conhost.exe 6,872 K 8,264 K 8284 Console Window Host Microsoft Corporation (Verified) Microsoft Windows
conhost.exe 6,492 K 6,432 K 12268 Console Window Host Microsoft Corporation (Verified) Microsoft Windows
conhost.exe 6,912 K 8,492 K 11512 Console Window Host Microsoft Corporation (Verified) Microsoft Windows
ctfmon.exe 3,732 K 12,992 K 8100 CTF Loader Microsoft Corporation (Verified) Microsoft Windows
dasHost.exe 4,672 K 12,764 K 1932 Device Association Framework Provider Host Microsoft Corporation (Verified) Microsoft Windows
dasHost.exe 876 K 3,088 K 2796 Device Association Framework Provider Host Microsoft Corporation (Verified) Microsoft Windows
dllhost.exe 3,780 K 9,700 K 4668 COM Surrogate Microsoft Corporation (Verified) Microsoft Windows
dllhost.exe 4,840 K 10,292 K 8572 COM Surrogate Microsoft Corporation (Verified) Microsoft Windows
dllhost.exe 4,484 K 18,692 K 7944 COM Surrogate Microsoft Corporation (Verified) Microsoft Windows
dllhost.exe 3,484 K 10,928 K 11784 COM Surrogate Microsoft Corporation (Verified) Microsoft Windows
fontdrvhost.exe 1,344 K 2,456 K 932 Usermode Font Driver Host Microsoft Corporation (Verified) Microsoft Windows
fontdrvhost.exe 1,560 K 2,884 K 1636 Usermode Font Driver Host Microsoft Corporation (Verified) Microsoft Windows
fontdrvhost.exe 3,472 K 7,164 K 9128 Usermode Font Driver Host Microsoft Corporation (Verified) Microsoft Windows
GoogleCrashHandler.exe 1,840 K 312 K 2088 Google Crash Handler Google LLC (Verified) Google LLC
GoogleCrashHandler64.exe 1,708 K 712 K 6808 Google Crash Handler Google LLC (Verified) Google LLC
HostAppServiceUpdater.exe 5,716 K 340 K 3552 Host App Service Updater SweetLabs, Inc (Verified) SweetLabs Inc.
LogonUI.exe 11,308 K 25,348 K 7724 Windows Logon User Interface Host Microsoft Corporation (Verified) Microsoft Windows
NisSrv.exe 5,508 K 9,336 K 1160 Microsoft Network Realtime Inspection Service Microsoft Corporation (Verified) Microsoft Windows Publisher
OneDrive.exe 25,064 K 18,756 K 3788 Microsoft OneDrive Microsoft Corporation (Verified) Microsoft Corporation
Plex Tuner Service.exe 4,176 K 11,688 K 12252 (Verified) Plex, Inc.
Plex Update Service.exe 2,120 K 8,348 K 3612 Plex Update Service Plex, Inc. (Verified) Plex, Inc.
procexp.exe 5,228 K 11,056 K 8544 Sysinternals Process Explorer Sysinternals - www.sysinternals.com (Verified) Microsoft Corporation
QAAdminAgent.exe 20,356 K 11,944 K 6348 QAAdminAgent Acer Incorporated (Verified) Acer Incorporated
QAAgent.exe 1,664 K 368 K 6948 QAAgent Acer Incorporated (Verified) Acer Incorporated
QAAgent.exe 1,680 K 1,180 K 10620 QAAgent Acer Incorporated (Verified) Acer Incorporated
QALockHandler.exe 1,728 K 8,652 K 1440 QALockHandler Acer Incorporated (Verified) Acer Incorporated
QALockHandler.exe 1,736 K 8,392 K 7280 QALockHandler Acer Incorporated (Verified) Acer Incorporated
QcomWlanSrvx64.exe 1,160 K 4,668 K 3632 Qualcomm Atheros Universal WLAN Driver Service Qualcomm Technologies Inc. (Verified) Qualcomm Atheros
RAVCpl64.exe 6,884 K 13,964 K 7036 Realtek HD Audio Manager Realtek Semiconductor (Verified) Realtek Semiconductor Corp.
RAVCpl64.exe 7,796 K 14,040 K 10344 Realtek HD Audio Manager Realtek Semiconductor (Verified) Realtek Semiconductor Corp.
Registry 9,320 K 54,052 K 88
RuntimeBroker.exe 3,704 K 17,500 K 9768 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
RuntimeBroker.exe 4,648 K 14,456 K 11464 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
RuntimeBroker.exe 3,200 K 14,940 K 1608 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
RuntimeBroker.exe 4,080 K 3,224 K 9236 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
RuntimeBroker.exe 2,468 K 9,272 K 8268 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
RuntimeBroker.exe 7,056 K 21,176 K 8200 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
RuntimeBroker.exe 6,796 K 15,264 K 7888 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
RuntimeBroker.exe 6,336 K 21,896 K 7940 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
RuntimeBroker.exe 12,048 K 31,272 K 7596 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
RuntimeBroker.exe 3,380 K 18,260 K 10568 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
RuntimeBroker.exe 2,700 K 15,472 K 1036 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
RuntimeBroker.exe 2,700 K 10,564 K 216 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
RuntimeBroker.exe 10,688 K 35,312 K 2888 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
schtasks.exe 1,240 K 1,208 K 4292 Task Scheduler Configuration Tool Microsoft Corporation (Verified) Microsoft Windows
SDXHelperBgt.exe Suspended 2,588 K 8,676 K 4872 Office SDX Helper Background Task Microsoft Corporation (Verified) Microsoft Corporation
SearchUI.exe Suspended 97,652 K 46,080 K 10684 Search and Cortana application Microsoft Corporation (Verified) Microsoft Windows
SecurityHealthService.exe 3,736 K 13,948 K 5740 Windows Security Health Service Microsoft Corporation (Verified) Microsoft Windows Publisher
SecurityHealthSystray.exe 1,688 K 8,600 K 6544 Windows Security notification icon Microsoft Corporation (Verified) Microsoft Windows
SecurityHealthSystray.exe 1,704 K 8,024 K 10284 Windows Security notification icon Microsoft Corporation (Verified) Microsoft Windows
services.exe 5,432 K 8,260 K 744 Services and Controller app Microsoft Corporation (Verified) Microsoft Windows Publisher
SettingSyncHost.exe 12,604 K 3,520 K 8896 Host Process for Setting Synchronization Microsoft Corporation (Verified) Microsoft Windows
SettingSyncHost.exe 6,100 K 5,252 K 3716 Host Process for Setting Synchronization Microsoft Corporation (Verified) Microsoft Windows
SgrmBroker.exe 3,180 K 5,796 K 2144 System Guard Runtime Monitor Broker Service Microsoft Corporation (Verified) Microsoft Windows Publisher
ShellExperienceHost.exe Suspended 15,236 K 1,072 K 8364 Windows Shell Experience Host Microsoft Corporation (Verified) Microsoft Windows
ShellExperienceHost.exe 15,704 K 25,132 K 11348 Windows Shell Experience Host Microsoft Corporation (Verified) Microsoft Windows
sihost.exe 6,288 K 24,352 K 6012 Shell Infrastructure Host Microsoft Corporation (Verified) Microsoft Windows
SkypeApp.exe Suspended 151,076 K 25,704 K 8160 SkypeApp Microsoft Corporation (No signature was present in the subject) Microsoft Corporation
SkypeBackgroundHost.exe Suspended 1,956 K 8,116 K 4484 Microsoft Skype Microsoft Corporation (No signature was present in the subject) Microsoft Corporation
smartscreen.exe 9,024 K 25,180 K 12240 Windows Defender SmartScreen Microsoft Corporation (Verified) Microsoft Windows
smss.exe 1,152 K 668 K 384 Windows Session Manager Microsoft Corporation (Verified) Microsoft Windows Publisher
spoolsv.exe 11,292 K 20,932 K 3180 Spooler SubSystem App Microsoft Corporation (Verified) Microsoft Windows
StartMenuExperienceHost.exe Suspended 29,164 K 55,468 K 7184 (Verified) Microsoft Windows
StartMenuExperienceHost.exe 41,268 K 36,864 K 3780 (Verified) Microsoft Windows
svchost.exe 956 K 3,080 K 924 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,896 K 10,164 K 1188 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,844 K 6,144 K 1196 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,480 K 6,680 K 1520 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,120 K 7,304 K 1548 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,812 K 11,652 K 1560 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,576 K 5,256 K 1616 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,528 K 5,420 K 1740 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,932 K 6,772 K 2212 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,832 K 7,148 K 2776 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,620 K 5,188 K 3640 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 3,520 K 11,136 K 3680 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,264 K 5,020 K 3688 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,724 K 6,308 K 3696 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 4,204 K 10,412 K 3820 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,300 K 4,560 K 3876 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,788 K 6,632 K 4644 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,688 K 7,116 K 5032 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,056 K 8,212 K 5060 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 5,152 K 15,092 K 5564 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 6,360 K 9,560 K 5536 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,356 K 4,868 K 2200 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,772 K 7,488 K 4156 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,904 K 8,772 K 10068 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 5,244 K 1,128 K 5200 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 6,504 K 21,900 K 12620 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,076 K 2,792 K 5888 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 4,332 K 9,308 K 1052 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 4,040 K 12,224 K 5460 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,040 K 6,844 K 2492 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,552 K 9,076 K 1260 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,788 K 8,032 K 5700 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 6,540 K 11,088 K 9360 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 3,436 K 10,172 K 4000 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,320 K 9,076 K 2704 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,968 K 11,564 K 6644 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 4,036 K 16,488 K 1644 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,276 K 7,340 K 2580 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 4,620 K 16,024 K 9832 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,576 K 10,116 K 1268 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,716 K 11,692 K 6364 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 3,080 K 8,844 K 2996 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 6,100 K 6,308 K 1844 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 6,928 K 14,764 K 1512 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,236 K 6,588 K 1980 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,832 K 7,888 K 14328 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 6,088 K 15,952 K 2924 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 34,024 K 26,704 K 3504 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 4,788 K 10,824 K 2132 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 3,120 K 10,204 K 7056 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,292 K 11,852 K 1280 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 4,516 K 9,508 K 3800 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 8,140 K 23,012 K 5972 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 36,384 K 30,984 K 6100 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 9,912 K 17,284 K 6784 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 3,044 K 10,072 K 1760 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 4,392 K 18,168 K 7116 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 3,684 K 7,556 K 7684 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 3,068 K 11,964 K 12308 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 3,676 K 7,952 K 2184 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 13,328 K 14,748 K 3240 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,824 K 5,592 K 2984 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 9,908 K 19,288 K 3536 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,712 K 15,764 K 4900 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 7,544 K 20,840 K 6236 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 10,180 K 20,724 K 11596 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 5,904 K 20,380 K 5872 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,296 K 5,292 K 2608 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 4,824 K 13,520 K 3456 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 4,840 K 12,372 K 3660 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 6,684 K 20,660 K 6372 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,552 K 7,944 K 2192 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,656 K 13,428 K 3112 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 7,036 K 27,792 K 4468 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 10,224 K 24,856 K 4568 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 3,660 K 17,676 K 2880 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,344 K 8,044 K 3620 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 2,972 K 7,872 K 696 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 1,980 K 6,928 K 3268 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
SystemSettings.exe Suspended 46,244 K 36,696 K 7256 Settings Microsoft Corporation (Verified) Microsoft Windows
taskhostw.exe 5,640 K 14,396 K 5780 Host Process for Windows Tasks Microsoft Corporation (Verified) Microsoft Windows
taskhostw.exe 4,024 K 2,560 K 260 Host Process for Windows Tasks Microsoft Corporation (Verified) Microsoft Windows
taskhostw.exe 5,028 K 15,796 K 5124 Host Process for Windows Tasks Microsoft Corporation (Verified) Microsoft Windows
taskhostw.exe 6,456 K 15,388 K 880 Host Process for Windows Tasks Microsoft Corporation (Verified) Microsoft Windows
UBTService.exe 29,048 K 18,432 K 796 UEIPSvc acer (Verified) Acer Incorporated
unsecapp.exe 1,392 K 6,932 K 10204 Sink to receive asynchronous callbacks for WMI client application Microsoft Corporation (Verified) Microsoft Windows
unsecapp.exe 1,492 K 6,968 K 3792 Sink to receive asynchronous callbacks for WMI client application Microsoft Corporation (Verified) Microsoft Windows
unsecapp.exe 1,420 K 6,740 K 7580 Sink to receive asynchronous callbacks for WMI client application Microsoft Corporation (Verified) Microsoft Windows
unsecapp.exe 1,452 K 6,632 K 10652 Sink to receive asynchronous callbacks for WMI client application Microsoft Corporation (Verified) Microsoft Windows
Video.UI.exe Suspended 22,304 K 11,252 K 5900 (No signature was present in the subject)
WindowsInternal.ComposableShell.Experiences.TextInput.InputApp.exe 11,724 K 33,548 K 11924 WindowsInternal.ComposableShell.Experiences.TextInput.InputApp.exe Microsoft Corporation (Verified) Microsoft Windows
WindscribeService.exe 1,456 K 6,068 K 3772 Manages the firewall and controls the VPN tunnel Windscribe Limited (Verified) Windscribe Limited
wininit.exe 1,492 K 6,164 K 676 Windows Start-Up Application Microsoft Corporation (Verified) Microsoft Windows Publisher
winlogon.exe 2,400 K 11,468 K 4476 Windows Log-on Application Microsoft Corporation (Verified) Microsoft Windows
winlogon.exe 2,536 K 7,468 K 7408 Windows Log-on Application Microsoft Corporation (Verified) Microsoft Windows
WinStore.App.exe Suspended 45,148 K 10,808 K 7736 Store Microsoft Corporation (No signature was present in the subject) Microsoft Corporation
WmiPrvSE.exe 13,924 K 16,636 K 5628 WMI Provider Host Microsoft Corporation (Verified) Microsoft Windows
WmiPrvSE.exe 6,792 K 14,528 K 6460 WMI Provider Host Microsoft Corporation (Verified) Microsoft Windows
WpcMon.exe 2,728 K 10,852 K 4828 Family Safety Monitor Microsoft Corporation (Verified) Microsoft Windows
wsappcontrol.exe 2,112 K 6,848 K 4312 Windscribe auto-login utility Windscribe Limited (Verified) Windscribe Limited
YourPhone.exe Suspended 16,084 K 2,756 K 9048 (No signature was present in the subject)
YourPhoneServer.exe 3,052 K 10,324 K 7780 (No signature was present in the subject)
svchost.exe < 0.01 4,864 K 16,580 K 7400 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe < 0.01 3,840 K 20,732 K 8388 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
csrss.exe < 0.01 1,628 K 6,576 K 708 Client Server Runtime Process Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe < 0.01 66,048 K 67,080 K 2596 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe < 0.01 7,276 K 16,668 K 6340 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
AppleMobileDeviceProcess.exe < 0.01 3,208 K 10,772 K 10800 MobileDeviceProcess Apple Inc. (Verified) Apple Inc.
chrome.exe < 0.01 215,836 K 172,412 K 13144 Google Chrome Google LLC (Verified) Google LLC
Microsoft.Photos.exe 0.01 50,084 K 49,400 K 476 (No signature was present in the subject)
dwm.exe 0.01 44,792 K 20,872 K 116 Desktop Window Manager Microsoft Corporation (Verified) Microsoft Windows
Windscribe.exe 0.01 19,116 K 28,656 K 10628 Windscribe client Windscribe Limited (Verified) Windscribe Limited
svchost.exe 0.01 17,300 K 14,108 K 1672 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 0.01 3,176 K 8,416 K 2356 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 0.01 3,268 K 17,296 K 7524 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
sihost.exe 0.01 6,408 K 24,332 K 10088 Shell Infrastructure Host Microsoft Corporation (Verified) Microsoft Windows
ePowerButton_NB.exe 0.01 60,484 K 6,796 K 11400 ePowerButton_NB Acer Incorporated (Verified) Acer Incorporated
WildTangentHelperService.exe 0.02 4,976 K 16,628 K 3740 (Verified) WildTangent Inc
PlexScriptHost.exe 0.02 25,368 K 13,428 K 11996 Python Python Software Foundation (Verified) Plex, Inc.
chrome.exe 0.03 18,728 K 39,488 K 11204 Google Chrome Google LLC (Verified) Google LLC
svchost.exe 0.03 14,236 K 24,132 K 3476 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 0.04 1,656 K 5,312 K 1172 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
backgroundTaskHost.exe 0.04 6,796 K 19,752 K 10472 Background Task Host Microsoft Corporation (Verified) Microsoft Windows
SearchUI.exe 0.05 85,184 K 89,780 K 7340 Search and Cortana application Microsoft Corporation (Verified) Microsoft Windows
backgroundTaskHost.exe 0.05 6,020 K 14,688 K 13996 Background Task Host Microsoft Corporation (Verified) Microsoft Windows
ACCStd.exe 0.05 56,456 K 10,520 K 12592 ACCStd (Verified) Acer Incorporated
csrss.exe 0.05 1,744 K 5,172 K 580 Client Server Runtime Process Microsoft Corporation (Verified) Microsoft Windows Publisher
Plex Media Server.exe 0.05 29,940 K 43,772 K 10524 Plex Media Server Plex, Inc. (Verified) Plex, Inc.
chrome.exe 0.06 92,464 K 126,464 K 12912 Google Chrome Google LLC (Verified) Google LLC
chrome.exe 0.08 106,400 K 128,892 K 6024 Google Chrome Google LLC (Verified) Google LLC
PlexScriptHost.exe 0.09 27,176 K 18,292 K 8704 Python Python Software Foundation (Verified) Plex, Inc.
Memory Compression 0.10 668 K 113,196 K 2668
QASvc.exe 0.10 2,800 K 8,280 K 3892 QASvc Acer Incorporated (Verified) Acer Incorporated
lsass.exe 0.11 7,740 K 17,236 K 760 Local Security Authority Process Microsoft Corporation (Verified) Microsoft Windows Publisher
explorer.exe 0.11 119,580 K 105,752 K 7288 Windows Explorer Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 0.12 10,864 K 17,316 K 1860 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
explorer.exe 0.13 57,112 K 98,884 K 2552 Windows Explorer Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 0.15 10,768 K 18,228 K 504 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
svchost.exe 0.15 15,768 K 33,336 K 1008 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows Publisher
HxTsr.exe 0.31 4,292 K 20,172 K 10884 Microsoft Outlook Communications Microsoft Corporation (No signature was present in the subject) Microsoft Corporation
QAAdminAgent.exe 0.33 3,896 K 12,424 K 6388 QAAdminAgent Acer Incorporated (Verified) Acer Incorporated
atieclxx.exe 0.39 2,452 K 8,212 K 4664 AMD External Events Client Module AMD (Verified) Advanced Micro Devices, Inc.
SearchIndexer.exe 1.15 31,728 K 41,352 K 7060 Microsoft Windows Search Indexer Microsoft Corporation (Verified) Microsoft Windows
csrss.exe 1.83 4,024 K 6,476 K 7156 Client Server Runtime Process Microsoft Corporation (Verified) Microsoft Windows Publisher
SearchFilterHost.exe 2.49 1,896 K 8,132 K 6972 Microsoft Windows Search Filter Host Microsoft Corporation (Verified) Microsoft Windows
System 2.61 212 K 6,256 K 4
Interrupts 3.15 0 K 0 K n/a Hardware Interrupts and DPCs
MsMpEng.exe 3.84 187,552 K 140,640 K 4500 Antimalware Service Executable Microsoft Corporation (Verified) Microsoft Windows Publisher
dwm.exe 4.95 84,712 K 52,548 K 1396 Desktop Window Manager Microsoft Corporation (Verified) Microsoft Windows
SearchProtocolHost.exe 5.37 2,632 K 12,316 K 4588 Microsoft Windows Search Protocol Host Microsoft Corporation (Verified) Microsoft Windows
RuntimeBroker.exe 9.80 12,404 K 36,480 K 7328 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
procexp64.exe 16.61 34,576 K 69,052 K 9268 Sysinternals Process Explorer Sysinternals - www.sysinternals.com (Verified) Microsoft Corporation
System Idle Process 45.44 60 K 8 K 0
 
 
 
Image Name                     PID Services                                    
========================= ======== ============================================
System Idle Process              0 N/A                                         
System                           4 N/A                                         
Registry                        88 N/A                                         
smss.exe                       384 N/A                                         
csrss.exe                      580 N/A                                         
wininit.exe                    676 N/A                                         
services.exe                   744 N/A                                         
lsass.exe                      760 KeyIso, SamSs, VaultSvc                     
svchost.exe                    924 PlugPlay                                    
fontdrvhost.exe                932 N/A                                         
svchost.exe                   1008 BrokerInfrastructure, DcomLaunch, Power,    
                                   SystemEventsBroker                          
svchost.exe                    504 RpcEptMapper, RpcSs                         
svchost.exe                    696 LSM                                         
svchost.exe                   1172 CoreMessagingRegistrar                      
svchost.exe                   1188 BthAvctpSvc                                 
svchost.exe                   1196 BTAGService                                 
svchost.exe                   1260 bthserv                                     
svchost.exe                   1268 NcbService                                  
svchost.exe                   1280 TimeBrokerSvc                               
svchost.exe                   1512 Schedule                                    
svchost.exe                   1520 DispBrokerDesktopSvc                        
svchost.exe                   1548 DisplayEnhancementService                   
svchost.exe                   1560 ProfSvc                                     
svchost.exe                   1616 hidserv                                     
svchost.exe                   1672 EventLog                                    
svchost.exe                   1740 DeviceAssociationService                    
svchost.exe                   1760 UserManager                                 
svchost.exe                   1844 nsi                                         
svchost.exe                   1860 StateRepository                             
dasHost.exe                   1932 N/A                                         
svchost.exe                   1980 Dhcp                                        
atiesrxx.exe                  2100 AMD External Events Utility                 
svchost.exe                   2132 NlaSvc                                      
svchost.exe                   2184 Dnscache                                    
svchost.exe                   2192 SSDPSRV                                     
svchost.exe                   2212 FontCache                                   
svchost.exe                   2356 netprofm                                    
svchost.exe                   2492 WinHttpAutoProxySvc                         
svchost.exe                   2580 EventSystem                                 
svchost.exe                   2596 SysMain                                     
svchost.exe                   2608 Themes                                      
Memory Compression            2668 N/A                                         
svchost.exe                   2704 SENS                                        
svchost.exe                   2776 AudioEndpointBuilder                        
dasHost.exe                   2796 N/A                                         
svchost.exe                   2880 Audiosrv                                    
svchost.exe                   2984 DusmSvc                                     
svchost.exe                   2996 Wcmsvc                                      
svchost.exe                   2924 WlanSvc                                     
svchost.exe                   3112 ShellHWDetection                            
spoolsv.exe                   3180 Spooler                                     
svchost.exe                   3240 BFE, mpssvc                                 
svchost.exe                   3268 LanmanWorkstation                           
armsvc.exe                    3428 AdobeARMservice                             
AdminService.exe              3440 AtherosSvc                                  
svchost.exe                   3456 CryptSvc                                    
svchost.exe                   3476 DiagTrack                                   
svchost.exe                   3504 DPS                                         
svchost.exe                   3536 Winmgmt                                     
Plex Update Service.exe       3612 PlexUpdateService                           
svchost.exe                   3620 LanmanServer                                
QcomWlanSrvx64.exe            3632 QcomWlanSrv                                 
svchost.exe                   3640 SstpSvc                                     
svchost.exe                   3660 stisvc                                      
svchost.exe                   3680 iphlpsvc                                    
svchost.exe                   3688 TrkWks                                      
svchost.exe                   3696 W32Time                                     
WildTangentHelperService.     3740 WildTangentHelper                           
WindscribeService.exe         3772 WindscribeService                           
svchost.exe                   3800 WpnService                                  
svchost.exe                   3820 AppIDSvc                                    
svchost.exe                   3876 WdiServiceHost                              
svchost.exe                   4000 RasMan                                      
MsMpEng.exe                   4500 WinDefend                                   
svchost.exe                   4644 PolicyAgent                                 
dllhost.exe                   4668 N/A                                         
svchost.exe                   5032 NgcSvc                                      
svchost.exe                   5060 NgcCtnrSvc                                  
NisSrv.exe                    1160 WdNisSvc                                    
csrss.exe                      708 N/A                                         
winlogon.exe                  4476 N/A                                         
fontdrvhost.exe               1636 N/A                                         
dwm.exe                        116 N/A                                         
atieclxx.exe                  5000 N/A                                         
svchost.exe                   5564 UsoSvc                                      
svchost.exe                   6100 wuauserv                                    
svchost.exe                   5872 CDPSvc                                      
WmiPrvSE.exe                  5628 N/A                                         
AUEPLauncher.exe              7164 AUEPLauncher                                
svchost.exe                   6340 DoSvc                                       
AUEPMaster.exe                6020 N/A                                         
svchost.exe                   6644 StorSvc                                     
GoogleCrashHandler.exe        2088 N/A                                         
GoogleCrashHandler64.exe      6808 N/A                                         
SgrmBroker.exe                2144 SgrmBroker                                  
svchost.exe                   7056 wscsvc                                      
SearchIndexer.exe             7060 WSearch                                     
svchost.exe                   5888 WdiSystemHost                               
svchost.exe                   1052 PcaSvc                                      
svchost.exe                   5972 InstallService                              
svchost.exe                   7116 LicenseManager                              
svchost.exe                   1644 TokenBroker                                 
svchost.exe                   6364 lfsvc                                       
svchost.exe                   5536 DsSvc                                       
SecurityHealthService.exe     5740 SecurityHealthService                       
svchost.exe                   2200 lmhosts                                     
svchost.exe                   4900 camsvc                                      
svchost.exe                   6236 CDPUserSvc_3221f2                           
sihost.exe                    6012 N/A                                         
svchost.exe                   6784 WpnUserService_3221f2                       
taskhostw.exe                 5780 N/A                                         
svchost.exe                   4156 TabletInputService                          
svchost.exe                   4568 WpcMonSvc                                   
WpcMon.exe                    4828 N/A                                         
explorer.exe                  7288 N/A                                         
svchost.exe                   7400 wlidsvc                                     
svchost.exe                   7524 cbdhsvc_3221f2                              
StartMenuExperienceHost.e     7184 N/A                                         
RuntimeBroker.exe             7888 N/A                                         
SearchUI.exe                  7340 N/A                                         
RuntimeBroker.exe             8200 N/A                                         
ShellExperienceHost.exe       8364 N/A                                         
SettingSyncHost.exe           8896 N/A                                         
YourPhone.exe                 9048 N/A                                         
RuntimeBroker.exe             1608 N/A                                         
SecurityHealthSystray.exe     6544 N/A                                         
RAVCpl64.exe                  7036 N/A                                         
OneDrive.exe                  3788 N/A                                         
RuntimeBroker.exe             9236 N/A                                         
QASvc.exe                     3892 QASvc                                       
svchost.exe                  10068 Appinfo                                     
QAAgent.exe                   6948 N/A                                         
QALockHandler.exe             1440 N/A                                         
QAAdminAgent.exe              6348 N/A                                         
unsecapp.exe                 10204 N/A                                         
unsecapp.exe                  3792 N/A                                         
svchost.exe                   5200 OneSyncSvc_3221f2,                          
                                   PimIndexMaintenanceSvc_3221f2,              
                                   UnistoreSvc_3221f2, UserDataSvc_3221f2      
HostAppServiceUpdater.exe     3552 N/A                                         
RuntimeBroker.exe             1036 N/A                                         
SDXHelperBgt.exe              4872 N/A                                         
UBTService.exe                 796 UEIPSvc                                     
WmiPrvSE.exe                  6460 N/A                                         
AppMonitorPlugIn.exe         10200 N/A                                         
taskhostw.exe                 5124 N/A                                         
Video.UI.exe                  5900 N/A                                         
RuntimeBroker.exe             8268 N/A                                         
Microsoft.Photos.exe           476 N/A                                         
RuntimeBroker.exe             7328 N/A                                         
YourPhoneServer.exe           7780 N/A                                         
svchost.exe                   7684 ClipSVC                                     
dllhost.exe                   8572 N/A                                         
LogonUI.exe                   7724 N/A                                         
csrss.exe                     7156 N/A                                         
winlogon.exe                  7408 N/A                                         
fontdrvhost.exe               9128 N/A                                         
dwm.exe                       1396 N/A                                         
atieclxx.exe                  4664 N/A                                         
sihost.exe                   10088 N/A                                         
taskhostw.exe                  260 N/A                                         
svchost.exe                   6372 CDPUserSvc_bbccf3                           
svchost.exe                   4468 WpnUserService_bbccf3                       
taskhostw.exe                  880 N/A                                         
explorer.exe                  2552 N/A                                         
svchost.exe                   8388 cbdhsvc_bbccf3                              
dllhost.exe                   7944 N/A                                         
StartMenuExperienceHost.e     3780 N/A                                         
RuntimeBroker.exe             7940 N/A                                         
RuntimeBroker.exe             2888 N/A                                         
schtasks.exe                  4292 N/A                                         
conhost.exe                   1908 N/A                                         
ctfmon.exe                    8100 N/A                                         
SettingSyncHost.exe           3716 N/A                                         
SkypeApp.exe                  8160 N/A                                         
SkypeBackgroundHost.exe       4484 N/A                                         
SecurityHealthSystray.exe    10284 N/A                                         
RAVCpl64.exe                 10344 N/A                                         
Plex Media Server.exe        10524 N/A                                         
RuntimeBroker.exe            10568 N/A                                         
Windscribe.exe               10628 N/A                                         
SearchUI.exe                 10684 N/A                                         
AppleMobileDeviceProcess.    10800 N/A                                         
wsappcontrol.exe              4312 N/A                                         
conhost.exe                   3336 N/A                                         
PlexScriptHost.exe            8704 N/A                                         
conhost.exe                   8284 N/A                                         
QAAgent.exe                  10620 N/A                                         
QAAdminAgent.exe              6388 N/A                                         
QALockHandler.exe             7280 N/A                                         
unsecapp.exe                  7580 N/A                                         
unsecapp.exe                 10652 N/A                                         
ShellExperienceHost.exe      11348 N/A                                         
RuntimeBroker.exe            11464 N/A                                         
svchost.exe                  11596 BITS                                        
dllhost.exe                  11784 N/A                                         
Plex Tuner Service.exe       12252 N/A                                         
conhost.exe                  12268 N/A                                         
SystemSettings.exe            7256 N/A                                         
ApplicationFrameHost.exe     10588 N/A                                         
PlexScriptHost.exe           11996 N/A                                         
conhost.exe                  11512 N/A                                         
svchost.exe                  12308 WbioSrvc                                    
svchost.exe                  12620 OneSyncSvc_bbccf3,                          
                                   PimIndexMaintenanceSvc_bbccf3,              
                                   UnistoreSvc_bbccf3, UserDataSvc_bbccf3      
chrome.exe                   12912 N/A                                         
chrome.exe                   12992 N/A                                         
chrome.exe                   13028 N/A                                         
chrome.exe                   13144 N/A                                         
chrome.exe                   13160 N/A                                         
chrome.exe                    6024 N/A                                         
ACCStd.exe                   12592 N/A                                         
ePowerButton_NB.exe          11400 N/A                                         
chrome.exe                   11560 N/A                                         
chrome.exe                   11204 N/A                                         
chrome.exe                   12932 N/A                                         
RuntimeBroker.exe             9768 N/A                                         
WindowsInternal.Composabl    11924 N/A                                         
chrome.exe                    5316 N/A                                         
WinStore.App.exe              7736 N/A                                         
RuntimeBroker.exe             7596 N/A                                         
svchost.exe                   5460 AppXSvc                                     
smartscreen.exe              12240 N/A                                         
audiodg.exe                   1228 N/A                                         
svchost.exe                   5700 dmwappushservice                            
svchost.exe                   9360 SmsRouter                                   
backgroundTaskHost.exe       13996 N/A                                         
backgroundTaskHost.exe       10472 N/A                                         
SearchProtocolHost.exe        4588 N/A                                         
SearchFilterHost.exe          6972 N/A                                         
RuntimeBroker.exe             6780 N/A                                         
SearchProtocolHost.exe        1168 N/A                                         
cmd.exe                       9744 N/A                                         
conhost.exe                  13952 N/A                                         
backgroundTaskHost.exe        4632 N/A                                         
tasklist.exe                  5728 N/A                                         
 

 

Attached Files


  • 0

#4
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,598 posts
  • MVP

Speccy shows it is about to melt down.  Sometimes it is wrong so let's get a second opinion:

 

run Speedfan to monitor your temps in real time:



http://www.filehippo...nload_speedfan/

Download, save and Install it (Win 7+ or Vista right click and Run As Admin.) then run it (Win 7+ or Vista right click and Run As Admin.).

It will tell you your temps in real time tho the default is to show the hard drive temp in the systray.  You can change it:  Hit Configure then click on the highest temp and check Show in tray.  With no other programs running what is the highest temp you see?  Run an anti-virus scan, play one of your games or watch a video for at least 5 minutes.  What is the highest temp now?
 

We don't really want it to go over about 65 under load.  If it does it usually means either the fan is defective (speedfan should tell you your fan speed so you can see if it is running) or (most likely) the interface between the fan and the heatsink is clogged with dust. The best fix for a clogged heatsink is to remove the fan (not the heatsink or heatpipe) and vacuum out the heatsink.  However on some PCs this is major surgery.  Sometimes you can blow air backwards through the exhaust vent while vacuuming at the input vent and if you are lucky it may clear the heatsink.  Don't do it too long as the fan may overrev.

 

Process Explorer shows the CPU is very busy which will make it very slow.  Not sure what exactly is the problem but Interrupts is way too high which may mean a bad driver.

 

Let's try Latency Monitor:

 

Go to

http://www.resplendence.com/downloads

Scroll down to

System Monitoring Tools

and then find

LatencyMon 6.70 (or it may be a higher number if they update)

Click on Download free home edition

Save it then right click and Run As Admin.  It will install and then start the program.  
It will tell you to click on the Start button but there isn't one.  
Instead click on the green arrowhead (looks like a Play button).   Let it run for at least 20 seconds.  Then hit the red box to stop it.

Edit, Copy Report text to Clipboard then move to a REPLY and Ctrl + v to paste the text into a reply.


  • 0

#5
fonzy

fonzy

    Member

  • Topic Starter
  • Member
  • PipPip
  • 76 posts
Thanks for your reply. I have done as asked and the results are;
 
With nothing running the highest temperature I see is:

HD0 - 37c
Temp 1 - 82c
GPU - 85c
 
With something running
 
HD0 - 38c
Temp1 - 85c
GPU - 94c
 
Is it easy to clean the fan on a laptop? I couldn't see the fan speed on Speedfan
 
 
_________________________________________________________________________________________________________
CONCLUSION
_________________________________________________________________________________________________________
Your system appears to be suitable for handling real-time audio and other tasks without dropouts. 
LatencyMon has been analyzing your system for  0:00:24  (h:mm:ss) on all processors.
 
 
_________________________________________________________________________________________________________
SYSTEM INFORMATION
_________________________________________________________________________________________________________
Computer name:                                        FAMILY-ACER-LAP
OS version:                                           Windows 10 , 10.0, build: 18363 (x64)
Hardware:                                             Aspire A315-21, Acer, SR, Squirtle_SR
CPU:                                                  AuthenticAMD AMD A6-9220 RADEON R4, 5 COMPUTE CORES 2C+3G 
Logical processors:                                   2
Processor groups:                                     1
RAM:                                                  3973 MB total
 
 
_________________________________________________________________________________________________________
CPU SPEED
_________________________________________________________________________________________________________
Reported CPU speed:                                   2495 MHz
 
Note: reported execution times may be calculated based on a fixed reported CPU speed. Disable variable speed settings like Intel Speed Step and AMD Cool N Quiet in the BIOS setup for more accurate results.
 
WARNING: the CPU speed that was measured is only a fraction of the CPU speed reported. Your CPUs may be throttled back due to variable speed settings and thermal issues. It is suggested that you run a utility which reports your actual CPU frequency and temperature. 
 
 
 
_________________________________________________________________________________________________________
MEASURED INTERRUPT TO USER PROCESS LATENCIES
_________________________________________________________________________________________________________
The interrupt to process latency reflects the measured interval that a usermode process needed to respond to a hardware request from the moment the interrupt service routine started execution. This includes the scheduling and execution of a DPC routine, the signaling of an event and the waking up of a usermode thread from an idle wait state in response to that event.
 
Highest measured interrupt to process latency (µs):   356.30
Average measured interrupt to process latency (µs):   7.039588
 
Highest measured interrupt to DPC latency (µs):       350.80
Average measured interrupt to DPC latency (µs):       2.459651
 
 
_________________________________________________________________________________________________________
 REPORTED ISRs
_________________________________________________________________________________________________________
Interrupt service routines are routines installed by the OS and device drivers that execute in response to a hardware interrupt signal.
 
Highest ISR routine execution time (µs):              142.311022
Driver with highest ISR routine execution time:       storport.sys - Microsoft Storage Port Driver, Microsoft Corporation
 
Highest reported total ISR routine time (%):          0.037432
Driver with highest ISR total time:                   storport.sys - Microsoft Storage Port Driver, Microsoft Corporation
 
Total time spent in ISRs (%)                          0.04230
 
ISR count (execution time <250 µs):                   1672
ISR count (execution time 250-500 µs):                0
ISR count (execution time 500-999 µs):                0
ISR count (execution time 1000-1999 µs):              0
ISR count (execution time 2000-3999 µs):              0
ISR count (execution time >=4000 µs):                 0
 
 
_________________________________________________________________________________________________________
REPORTED DPCs
_________________________________________________________________________________________________________
DPC routines are part of the interrupt servicing dispatch mechanism and disable the possibility for a process to utilize the CPU while it is interrupted until the DPC has finished execution.
 
Highest DPC routine execution time (µs):              508.404810
Driver with highest DPC routine execution time:       tcpip.sys - TCP/IP Driver, Microsoft Corporation
 
Highest reported total DPC routine time (%):          0.166711
Driver with highest DPC total execution time:         rspLLL64.sys - Resplendence Latency Monitoring and Auxiliary Kernel Library, Resplendence Software Projects Sp.
 
Total time spent in DPCs (%)                          0.462848
 
DPC count (execution time <250 µs):                   54173
DPC count (execution time 250-500 µs):                0
DPC count (execution time 500-999 µs):                9
DPC count (execution time 1000-1999 µs):              0
DPC count (execution time 2000-3999 µs):              0
DPC count (execution time >=4000 µs):                 0
 
 
_________________________________________________________________________________________________________
 REPORTED HARD PAGEFAULTS
_________________________________________________________________________________________________________
Hard pagefaults are events that get triggered by making use of virtual memory that is not resident in RAM but backed by a memory mapped file on disk. The process of resolving the hard pagefault requires reading in the memory from disk while the process is interrupted and blocked from execution.
 
NOTE: some processes were hit by hard pagefaults. If these were programs producing audio, they are likely to interrupt the audio stream resulting in dropouts, clicks and pops. Check the Processes tab to see which programs were hit.
 
Process with highest pagefault count:                 accstd.exe
 
Total number of hard pagefaults                       203
Hard pagefault count of hardest hit process:          132
Number of processes hit:                              15
 
 
_________________________________________________________________________________________________________
 PER CPU DATA
_________________________________________________________________________________________________________
CPU 0 Interrupt cycle time (s):                       1.206829
CPU 0 ISR highest execution time (µs):                142.311022
CPU 0 ISR total execution time (s):                   0.020317
CPU 0 ISR count:                                      1672
CPU 0 DPC highest execution time (µs):                508.404810
CPU 0 DPC total execution time (s):                   0.190821
CPU 0 DPC count:                                      53207
_________________________________________________________________________________________________________
CPU 1 Interrupt cycle time (s):                       0.163251
CPU 1 ISR highest execution time (µs):                0.0
CPU 1 ISR total execution time (s):                   0.0
CPU 1 ISR count:                                      0
CPU 1 DPC highest execution time (µs):                294.665731
CPU 1 DPC total execution time (s):                   0.031494
CPU 1 DPC count:                                      975
_________________________________________________________________________________________________________

  • 0

#6
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,598 posts
  • MVP

It's definitely an overheat problem.  CPUs will slow down when they get hot so this is most of your problem tho there is something using the CPU that shouldn't be using so much and this will also cause overheating.  I would uninstall the Acer Care Center software and see if System Idle gets better (in Process Explorer).  You could also try right clicking (In Process Explorer) on

 

SearchProtocolHost.exe 5.37 2,632 K 12,316 K 4588 Microsoft Windows Search Protocol Host Microsoft Corporation (Verified) Microsoft Windows
RuntimeBroker.exe 9.80 12,404 K 36,480 K 7328 Runtime Broker Microsoft Corporation (Verified) Microsoft Windows
 
and selecting Pause.  See if that helps System Idle and perhaps the temps in Speedfan.  You can also try pausing Windows Defender (from its controls - doubt it will let Process Explorer pause it)
 
Your Interrupts is very high so rerun Latency Monitor and after letting it run for 20 second and stopping, click on Drivers tab.  Click on Highest Execution  (MS) column header once or twice to bring the drivers witht he highest times to the top then take a screen shot (save as .jpg)
and attach it.

 

As for how hard it is to clean that depends on the laptop.  HP's are nearly impossible.  Dell's are easy.  Google your make and model number and add "disassembly" to the search and you will usually find a YouTube video showing how to do it. Not all screws you have to take out are the same size so it's important to note where each came from.  I draw a sketch showing the screws and number them then take a piece of masking tape and tape it sticky side up to my bench then put the number down one side and stick each screw to its number as I remove them.  Take pictures as you take it apart so you are sure you can get it back together the same way.

 

Try to remove the fan so you can clean the heatsink.  That's the easiest way. However, ACER's seem to make the fan part of the heatsink assembly so you may need to remove the whole thing.

 

If you have to remove the heatsink and/or heatpipe (Funny shaped piece of copper usually held in place by 3 or 4 screws and attached to the heatsink) from the CPU then you will need to clean up the old thermal stuff and apply a new coat of Arctic Silver 5.  (may be 2 places where it needs thermal paste) Amazon sells a kit with cleaner for $14:

Arctic Silver 5 (Anti-Static Kit) - 3.5 Grams with ArctiClean 60 ML Combo Kit + Microfiber (7" X 6") Cleaning Cloth + Anti Static Wrist Strap

Consult the Arctic Silver website:  http://www.arcticsilver.com/#for proper use.  You will need an old credit card or similar and a clean coffee filter or other special cleaning cloth.


  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP