kontrola logu na Keylogger / log je v 2 postoch
Napsal: 08 led 2021 22:09
Zdravím,
prosím o kontrolu logu na keylogger a podobné veci.
AdwareCleaner nenašiel nič a FRST log som robil až po ňom.
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 05-01-2021
Ran by saullerist (administrator) on DESKTOP-3SMP07F (TOSHIBA Satellite L650) (08-01-2021 21:40:34)
Running from C:\Users\saullerist\Desktop
Loaded Profiles: saullerist
Platform: Windows 10 Home Version 2004 20279.1 (X64) Language: Slovenčina (Slovensko)
Default browser: FF
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Dynabook Inc. -> Dynabook Inc.) C:\Windows\System32\DriverStore\FileRepository\tossrvctl.inf_amd64_652655c5335c62da\DSDFunctionKeyCtlService.exe <2>
(Dynabook Inc. -> Dynabook Inc.) C:\Windows\System32\DriverStore\FileRepository\tossrvctl.inf_amd64_652655c5335c62da\dynabookSystemService.exe
(Dynabook Inc. -> Dynabook Inc.) C:\Windows\System32\DriverStore\FileRepository\tossrvctl.inf_amd64_652655c5335c62da\RMService.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.52\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.52\GoogleCrashHandler64.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe <55>
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12011.1001.1.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Windows -> ) C:\Windows\System32\AggregatorHost.exe
(Microsoft Windows -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Scans\MsMpEngCP.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\CredentialEnrollmentManager.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.20279.1_none_90c877b89342316e\TiWorker.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2011.6-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2011.6-0\NisSrv.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe <7>
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\steam.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
HKU\S-1-5-21-1796023744-1759536030-3900380101-1002\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [50010064 2020-11-03] (Google LLC -> )
HKU\S-1-5-21-1796023744-1759536030-3900380101-1002\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [32414392 2020-12-08] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-1796023744-1759536030-3900380101-1002\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3411232 2020-12-21] (Valve -> Valve Corporation)
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0348387B-4643-42E1-8829-2FEEBA6FAFAC} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [26896568 2020-12-08] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {06A812AE-5323-4342-B1EA-3DCF41D27001} - System32\Tasks\Agent Activation Runtime\S-1-5-21-1796023744-1759536030-3900380101-1002 => C:\WINDOWS\System32\AgentActivationRuntimeStarter.exe [32768 2020-12-10] (Microsoft Windows -> )
Task: {1047E825-BC15-4910-B698-64EB4CF7B260} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MpCmdRun.exe [545704 2020-11-20] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {4DA3F32C-CAE5-4618-95EA-A8743FEAA28E} - System32\Tasks\Microsoft\Windows\Shell\UpdateAgentTask_RemoveFOD => C:\WINDOWS\System32\ShellUpdateAgentTask.exe
Task: {592B68C5-94FA-4030-B47C-09892DA378AE} - System32\Tasks\Microsoft\Windows\Shell\ThemesSyncedImageDownload => {79F8E185-4E45-4B74-8182-02AA430661E4} C:\Windows\System32\Themes.SsfDownload.ScheduledTask.dll [245760 2020-12-10] (Microsoft Windows -> Microsoft Corporation)
Task: {6F87B0C7-EEA0-4F38-868A-D06BDBFBBD8A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MpCmdRun.exe [545704 2020-11-20] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {742A9E60-5AC3-467A-A1F5-3A9C9F5C2CB8} - System32\Tasks\Microsoft\Windows\Shell\UpdateAgentTask_SetCBSEndOfLife => C:\WINDOWS\System32\ShellUpdateAgentTask.exe
Task: {769BEB31-15CD-4B22-9149-9850590EE438} - System32\Tasks\Microsoft\Windows\Shell\UpdateAgentTask_AcquireFOD => C:\WINDOWS\System32\ShellUpdateAgentTask.exe
Task: {798DF91D-F240-419A-96F9-BE1CAE57BDA9} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MpCmdRun.exe [545704 2020-11-20] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {81C5BC77-FD07-42F3-81C8-99D9DD879647} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [693216 2021-01-07] (Mozilla Corporation -> Mozilla Foundation)
Task: {83CE6C76-3F28-489E-A7C6-794989F68298} - System32\Tasks\S-1-5-21-1796023744-1759536030-3900380101-1002\DataSenseLiveTileTask => C:\WINDOWS\System32\DataUsageLiveTileTask.exe
Task: {87876812-554A-47E6-A1CC-48BCC1406F56} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\UUS Failover Task => C:\WINDOWS\system32\failover.exe
Task: {B40F8511-B9B4-4F7B-9312-FC6DAA6B9F00} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155432 2019-11-01] (Google Inc -> Google LLC)
Task: {B91219DC-34E0-47A2-B494-6279369FA6B4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155432 2019-11-01] (Google Inc -> Google LLC)
Task: {CB0B6B17-3C30-4A50-AC4A-0D3442972629} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [686384 2020-12-08] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {CE4330EF-036E-4564-9532-A5CED048145E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MpCmdRun.exe [545704 2020-11-20] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {DCB6B88A-7EDE-48DD-80A7-832385E1711A} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\WINDOWS\System32\MbaeParserTask.exe
Task: {EFBE98E8-21EB-4BDB-BABF-3DCA57B3A10D} - System32\Tasks\Microsoft\Windows\Management\Provisioning\MdmDiagnosticsCleanup => C:\WINDOWS\system32\MdmDiagnosticsTool.exe [90112 2020-12-10] (Microsoft Windows -> Microsoft Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Winsock: Catalog5 04 C:\WINDOWS\SysWOW64\nlansp_c.dll [84480 2020-12-10] (Microsoft Windows -> Microsoft Corporation) ATTENTION: LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Winsock: Catalog5-x64 04 C:\Windows\system32\nlansp_c.dll [126976 2020-12-10] (Microsoft Windows -> Microsoft Corporation) ATTENTION: LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 195.146.128.62
Tcpip\..\Interfaces\{5c6459f7-5caf-472f-850f-576031683b95}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{5c6459f7-5caf-472f-850f-576031683b95}: [DhcpNameServer] 192.168.1.1 195.146.128.62
Tcpip\..\Interfaces\{6f775dc0-2278-405d-8f3d-3e457ae63af2}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{9dfcf0d8-e52f-4e05-8126-662ce4070db5}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{f8af2a01-6a97-4ec5-b189-b0d3323b1796}: [DhcpNameServer] 192.168.1.1 195.146.128.62
ManualProxies:
Edge:
======
DownloadDir: C:\Users\saullerist\Downloads
Edge DefaultProfile: Default
Edge Profile: C:\Users\saullerist\AppData\Local\Microsoft\Edge\User Data\Default [2021-01-08]
Edge DownloadDir: C:\Users\saullerist\Downloads
FireFox:
========
FF DefaultProfile: axn99qis.default
FF ProfilePath: C:\Users\saullerist\AppData\Roaming\Mozilla\Firefox\Profiles\axn99qis.default [2020-10-06]
FF ProfilePath: C:\Users\saullerist\AppData\Roaming\Mozilla\Firefox\Profiles\jtgg6ln9.default-release [2021-01-08]
FF DownloadDir: C:\Users\saullerist\Desktop
FF Homepage: Mozilla\Firefox\Profiles\jtgg6ln9.default-release -> www.google.sk
Chrome:
=======
CHR HKU\S-1-5-21-1796023744-1759536030-3900380101-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 DSDFunctionKeyCtlService; C:\WINDOWS\System32\DriverStore\FileRepository\tossrvctl.inf_amd64_652655c5335c62da\DSDFunctionKeyCtlService.exe [615768 2020-11-18] (Dynabook Inc. -> Dynabook Inc.)
S3 FrameServerMonitor; C:\WINDOWS\system32\FrameServerMonitor.dll [303104 2020-12-10] (Microsoft Windows -> Microsoft Corporation)
S3 McpManagementService; C:\WINDOWS\System32\McpManagementService.dll [290816 2020-12-10] (Microsoft Windows -> Microsoft Corporation)
R2 TSDSettingService; C:\WINDOWS\System32\DriverStore\FileRepository\tossrvctl.inf_amd64_652655c5335c62da\dynabookSystemService.exe [44767040 2020-11-18] (Dynabook Inc. -> Dynabook Inc.)
S2 TSDTabletControlService; C:\WINDOWS\System32\DriverStore\FileRepository\tossrvctl.inf_amd64_652655c5335c62da\TOSTABSYSSVC.exe [254792 2020-11-18] (Dynabook Inc. -> Dynabook Inc.)
R2 TSDWirelessLEDCtlService; C:\WINDOWS\System32\DriverStore\FileRepository\tossrvctl.inf_amd64_652655c5335c62da\RMService.exe [446240 2020-11-18] (Dynabook Inc. -> Dynabook Inc.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\NisSrv.exe [2491880 2020-11-20] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MsMpEng.exe [128376 2020-11-20] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 a016bus; C:\WINDOWS\System32\drivers\a016bus.sys [109096 2008-01-18] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 a016mgmt; C:\WINDOWS\System32\drivers\a016mgmt.sys [130600 2008-01-18] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 a016obex; C:\WINDOWS\System32\drivers\a016obex.sys [125480 2008-01-18] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
R3 FwLnk; C:\WINDOWS\System32\drivers\FwLnk.sys [9216 2009-07-07] (Microsoft Windows Hardware Compatibility Publisher -> TOSHIBA Corporation)
S3 HWHandSet; C:\WINDOWS\System32\drivers\hw_quusbmdm.sys [226560 2018-12-12] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
S3 hw_usbdev; C:\WINDOWS\System32\drivers\hw_usbdev.sys [116864 2018-12-12] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
R0 IntelPMT; C:\WINDOWS\System32\drivers\IntelPMT.sys [49472 2020-12-10] (Microsoft Windows Hardware Abstraction Layer Publisher -> Microsoft Corporation)
S3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [224408 2019-11-01] (Malwarebytes Corporation -> Malwarebytes)
S0 megasas35i; C:\WINDOWS\System32\drivers\megasas35i.sys [95008 2020-12-10] (Microsoft Windows -> Broadcom Inc)
S3 NDKPerf; C:\WINDOWS\System32\drivers\NDKPerf.sys [74016 2020-12-10] (Microsoft Windows -> )
S3 s0016bus; C:\WINDOWS\System32\drivers\s0016bus.sys [115240 2008-05-16] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s0016mgmt; C:\WINDOWS\System32\drivers\s0016mgmt.sys [137256 2008-05-16] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s0016obex; C:\WINDOWS\System32\drivers\s0016obex.sys [136744 2008-05-16] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s0016unic; C:\WINDOWS\System32\drivers\s0016unic.sys [151592 2008-05-16] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s0017bus; C:\WINDOWS\System32\drivers\s0017bus.sys [113704 2008-10-21] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s0017mgmt; C:\WINDOWS\System32\drivers\s0017mgmt.sys [133160 2008-10-21] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s0017obex; C:\WINDOWS\System32\drivers\s0017obex.sys [128552 2008-10-21] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s0017unic; C:\WINDOWS\System32\drivers\s0017unic.sys [145960 2008-10-21] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s1018bus; C:\WINDOWS\System32\drivers\s1018bus.sys [113704 2009-03-25] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s1018mgmt; C:\WINDOWS\System32\drivers\s1018mgmt.sys [133160 2009-03-25] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s1018obex; C:\WINDOWS\System32\drivers\s1018obex.sys [128552 2009-03-25] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s1018unic; C:\WINDOWS\System32\drivers\s1018unic.sys [146472 2009-03-25] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s1029bus; C:\WINDOWS\System32\drivers\s1029bus.sys [116264 2009-05-25] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s1029mgmt; C:\WINDOWS\System32\drivers\s1029mgmt.sys [139304 2009-05-25] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s1029obex; C:\WINDOWS\System32\drivers\s1029obex.sys [135208 2009-05-25] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s1029unic; C:\WINDOWS\System32\drivers\s1029unic.sys [151592 2009-05-25] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s1039mgmt; C:\WINDOWS\System32\drivers\s1039mgmt.sys [141424 2010-03-15] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s1039obex; C:\WINDOWS\System32\drivers\s1039obex.sys [137328 2010-03-15] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s1039unic; C:\WINDOWS\System32\drivers\s1039unic.sys [158320 2010-03-15] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s916bus; C:\WINDOWS\System32\drivers\s916bus.sys [108072 2007-11-02] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s916mgmt; C:\WINDOWS\System32\drivers\s916mgmt.sys [130088 2007-11-02] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s916obex; C:\WINDOWS\System32\drivers\s916obex.sys [124968 2007-11-02] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 se3ebus; C:\WINDOWS\System32\drivers\se3ebus.sys [107784 2007-04-10] (MCCI Corporation -> MCCI Corporation)
S3 se3emgmt; C:\WINDOWS\System32\drivers\se3emgmt.sys [126216 2007-04-10] (MCCI Corporation -> MCCI Corporation)
S3 se3eobex; C:\WINDOWS\System32\drivers\se3eobex.sys [123144 2007-04-10] (MCCI Corporation -> MCCI Corporation)
R3 Thotkey; C:\WINDOWS\System32\drivers\Thotkey.sys [47816 2020-07-21] (Dynabook Inc. -> Dynabook Inc.)
R1 TosSrvCtlDrv; C:\WINDOWS\System32\DriverStore\FileRepository\tossrvctl.inf_amd64_652655c5335c62da\TosSrvCtlDrv.sys [25832 2020-11-18] (Dynabook Inc. -> Dynabook Inc.)
R0 TVALZ_O; C:\WINDOWS\System32\drivers\TVALZ_O.SYS [46088 2019-04-30] (Dynabook Inc. -> Dynabook Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [48536 2020-11-20] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [429296 2020-11-20] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [70896 2020-11-20] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2021-01-08 21:40 - 2021-01-08 21:42 - 000018053 _____ C:\Users\saullerist\Desktop\FRST.txt
2021-01-08 21:39 - 2021-01-08 21:41 - 000000000 ____D C:\FRST
2021-01-08 21:33 - 2021-01-08 21:34 - 000000000 ____D C:\AdwCleaner
2021-01-08 21:32 - 2021-01-08 21:32 - 008447152 _____ (Malwarebytes) C:\Users\saullerist\Desktop\AdwCleaner.exe
2021-01-08 21:28 - 2021-01-08 21:28 - 002282496 _____ (Farbar) C:\Users\saullerist\Desktop\FRST64.exe
2021-01-08 21:28 - 2021-01-08 21:28 - 002086424 _____ (Malwarebytes) C:\Users\saullerist\Desktop\MBSetup.exe
2021-01-08 10:57 - 2021-01-08 10:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 7.0
2021-01-08 10:56 - 2021-01-08 10:57 - 000000000 ____D C:\Program Files\LibreOffice
2021-01-07 11:49 - 2021-01-07 11:49 - 000000000 ___HD C:\$WINDOWS.~BT
2021-01-07 11:05 - 2021-01-07 11:05 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-01-07 09:24 - 2021-01-07 11:04 - 000000000 ____D C:\Program Files\Mozilla Firefox
2021-01-05 19:03 - 2021-01-05 19:03 - 000000000 ____D C:\Users\saullerist\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2021-01-05 19:01 - 2021-01-05 19:01 - 000000000 ____D C:\Users\saullerist\AppData\Local\Steam
2021-01-05 18:58 - 2021-01-08 19:09 - 000000000 ____D C:\Program Files (x86)\Steam
2021-01-05 18:58 - 2021-01-05 18:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2020-12-18 13:04 - 2020-12-18 13:04 - 000000000 ____D C:\ProgramData\ATI
2020-12-18 13:02 - 2020-12-18 13:02 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2020-12-18 12:58 - 2020-12-18 12:58 - 000000020 ___SH C:\Users\saullerist\ntuser.ini
2020-12-18 12:55 - 2021-01-03 15:02 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-12-18 12:55 - 2020-12-20 09:53 - 000004210 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2020-12-18 12:55 - 2020-12-18 12:55 - 000003504 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2020-12-18 12:55 - 2020-12-18 12:55 - 000003384 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2020-12-18 12:55 - 2020-12-18 12:55 - 000003280 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2020-12-18 12:55 - 2020-12-18 12:55 - 000003160 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2020-12-18 12:55 - 2020-12-18 12:55 - 000002238 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC
2020-12-18 12:55 - 2020-12-18 12:55 - 000000000 ____D C:\WINDOWS\system32\Tasks\S-1-5-21-1796023744-1759536030-3900380101-1002
2020-12-18 12:55 - 2020-12-18 12:55 - 000000000 ____D C:\WINDOWS\system32\Tasks\Agent Activation Runtime
2020-12-18 12:54 - 2020-12-18 12:55 - 000011433 _____ C:\WINDOWS\diagwrn.xml
2020-12-18 12:54 - 2020-12-18 12:55 - 000011433 _____ C:\WINDOWS\diagerr.xml
2020-12-18 12:47 - 2021-01-03 15:06 - 008957458 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-12-18 12:38 - 2020-12-18 12:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2020-12-18 12:37 - 2020-12-18 12:58 - 000000000 ____D C:\Users\saullerist
2020-12-18 12:37 - 2020-12-18 12:37 - 000000000 ____D C:\Program Files\ATI Technologies
2020-12-18 12:37 - 2020-12-18 12:36 - 000000000 ____D C:\Users\saullerist\AppData\Roaming\ATI
2020-12-18 12:37 - 2020-12-18 12:36 - 000000000 ____D C:\Users\saullerist\AppData\Local\ATI
2020-12-18 12:36 - 2020-12-18 12:36 - 000000000 ____D C:\Users\Default\AppData\Roaming\ATI
2020-12-18 12:36 - 2020-12-18 12:36 - 000000000 ____D C:\Users\Default\AppData\Local\ATI
2020-12-18 12:36 - 2020-12-18 12:36 - 000000000 ____D C:\Users\Default User\AppData\Roaming\ATI
2020-12-18 12:36 - 2020-12-18 12:36 - 000000000 ____D C:\Users\Default User\AppData\Local\ATI
2020-12-18 12:30 - 2020-12-18 12:32 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2020-12-18 12:30 - 2020-12-18 12:31 - 000644656 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-12-18 11:49 - 2020-12-18 12:29 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2020-12-18 11:44 - 2020-12-18 11:49 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2020-12-18 11:33 - 2020-06-29 00:16 - 000076060 _____ C:\WINDOWS\SysWOW64\xpsrchvw.xml
2020-12-18 11:33 - 2020-06-20 14:28 - 000076060 _____ C:\WINDOWS\system32\xpsrchvw.xml
2020-12-18 11:28 - 2020-12-18 11:28 - 000000000 ____D C:\Program Files\Reference Assemblies
2020-12-18 11:28 - 2020-12-18 11:28 - 000000000 ____D C:\Program Files\MSBuild
2020-12-18 11:28 - 2020-12-18 11:28 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2020-12-18 11:28 - 2020-12-18 11:28 - 000000000 ____D C:\Program Files (x86)\MSBuild
2020-12-18 11:00 - 2020-12-18 11:00 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2020-12-16 20:41 - 2021-01-07 11:50 - 000000000 ___DC C:\WINDOWS\Panther
2020-12-15 13:18 - 2020-12-18 12:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Backup and Sync from Google
2020-12-15 13:18 - 2020-12-15 13:18 - 000000000 ____D C:\Program Files\Google
2020-12-10 13:39 - 2020-12-10 13:39 - 000020303 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2020-12-10 13:39 - 2020-12-10 13:39 - 000000000 ____D C:\WINDOWS\SysWOW64\FxsTmp
2020-12-10 13:39 - 2020-12-10 13:39 - 000000000 ____D C:\WINDOWS\system32\Hydrogen
2020-12-10 13:39 - 2020-12-10 13:39 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2020-12-10 13:39 - 2020-12-10 13:39 - 000000000 ____D C:\WINDOWS\addins
2020-12-10 13:39 - 2020-12-10 13:39 - 000000000 ____D C:\ProgramData\WindowsHolographicDevices
2020-12-10 13:39 - 2020-12-10 13:39 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2020-12-10 13:39 - 2020-12-10 13:39 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2020-12-10 13:39 - 2020-12-10 08:10 - 000023461 _____ C:\WINDOWS\Core.xml
2020-12-10 13:38 - 2020-12-10 13:38 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2020-12-10 13:38 - 2020-12-10 13:38 - 000000000 ____D C:\ProgramData\ssh
2020-12-10 13:38 - 2020-11-16 17:13 - 001687040 _____ C:\WINDOWS\system32\libcrypto.dll
2020-12-10 13:37 - 2020-12-10 13:37 - 000000000 ____D C:\WINDOWS\SysWOW64\MailContactsCalendarSync
2020-12-10 13:37 - 2020-12-10 13:37 - 000000000 ____D C:\WINDOWS\system32\MailContactsCalendarSync
2020-12-10 13:37 - 2020-12-10 13:37 - 000000000 ____D C:\WINDOWS\OCR
2020-12-10 13:36 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\SysWOW64\winrm
2020-12-10 13:36 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN
2020-12-10 13:36 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\SysWOW64\sysprep
2020-12-10 13:36 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\SysWOW64\slmgr
2020-12-10 13:36 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2020-12-10 13:36 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\SysWOW64\0409
2020-12-10 13:36 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\system32\winrm
2020-12-10 13:36 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\system32\WCN
2020-12-10 13:36 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\system32\slmgr
2020-12-10 13:36 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\system32\sk
2020-12-10 13:36 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2020-12-10 13:36 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\system32\0409
2020-12-10 13:36 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\DigitalLocker
2020-12-10 08:33 - 2020-12-10 08:33 - 000000000 _SHDL C:\Users\Default User
2020-12-10 08:33 - 2020-12-10 08:33 - 000000000 _SHDL C:\Users\All Users
2020-12-10 08:19 - 2020-12-18 11:46 - 000000000 ____D C:\WINDOWS\Setup
2020-12-10 08:15 - 2021-01-08 21:32 - 000000000 ___RD C:\Program Files (x86)
2020-12-10 08:15 - 2021-01-08 18:35 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-12-10 08:15 - 2021-01-07 22:40 - 000000000 ____D C:\WINDOWS\SystemTemp
2020-12-10 08:15 - 2021-01-06 11:43 - 000000000 ____D C:\WINDOWS\AppReadiness
2020-12-10 08:15 - 2020-12-30 15:21 - 000000000 ___HD C:\Program Files\WindowsApps
2020-12-10 08:15 - 2020-12-28 09:52 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2020-12-10 08:15 - 2020-12-20 09:53 - 000000000 ____D C:\WINDOWS\system32\NDF
2020-12-10 08:15 - 2020-12-19 13:20 - 000000000 ____D C:\WINDOWS\appcompat
2020-12-10 08:15 - 2020-12-18 13:16 - 000000000 ___RD C:\WINDOWS\PrintDialog
2020-12-10 08:15 - 2020-12-18 12:59 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2020-12-10 08:15 - 2020-12-18 12:56 - 000000000 ____D C:\WINDOWS\system32\oobe
2020-12-10 08:15 - 2020-12-18 12:55 - 000000000 ____D C:\Program Files\Windows Defender
2020-12-10 08:15 - 2020-12-18 12:30 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2020-12-10 08:15 - 2020-12-18 12:30 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2020-12-10 08:15 - 2020-12-18 12:29 - 000000000 ____D C:\WINDOWS\system32\spool
2020-12-10 08:15 - 2020-12-18 12:29 - 000000000 ____D C:\WINDOWS\ServiceState
2020-12-10 08:15 - 2020-12-18 12:29 - 000000000 ____D C:\WINDOWS\Registration
2020-12-10 08:15 - 2020-12-18 12:29 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2020-12-10 08:15 - 2020-12-18 11:57 - 000000000 ____D C:\ProgramData\USOPrivate
2020-12-10 08:15 - 2020-12-18 11:54 - 000000000 __RHD C:\Users\Public\Libraries
2020-12-10 08:15 - 2020-12-18 11:50 - 000000000 ____D C:\WINDOWS\Resources
2020-12-10 08:15 - 2020-12-18 11:50 - 000000000 ____D C:\WINDOWS\Help
2020-12-10 08:15 - 2020-12-18 11:38 - 000000000 ____D C:\WINDOWS\SystemResources
2020-12-10 08:15 - 2020-12-18 11:38 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2020-12-10 08:15 - 2020-12-10 13:39 - 000000000 ____D C:\WINDOWS\SystemApps
2020-12-10 08:15 - 2020-12-10 13:39 - 000000000 ____D C:\WINDOWS\system32\setup
2020-12-10 08:15 - 2020-12-10 13:39 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2020-12-10 08:15 - 2020-12-10 13:39 - 000000000 ____D C:\WINDOWS\ShellComponents
2020-12-10 08:15 - 2020-12-10 13:38 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ___SD C:\WINDOWS\system32\F12
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ___SD C:\WINDOWS\system32\dsc
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\system32\MUI
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\system32\migwiz
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\system32\Dism
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\system32\Com
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\IME
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\BrowserCore
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ____D C:\Program Files\Windows NT
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ____D C:\Program Files\Common Files\System
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ____D C:\Program Files (x86)\Windows NT
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2020-12-10 08:15 - 2020-12-10 08:33 - 000000000 __SHD C:\Program Files\Windows Sidebar
2020-12-10 08:15 - 2020-12-10 08:33 - 000000000 __SHD C:\Program Files (x86)\Windows Sidebar
2020-12-10 08:15 - 2020-12-10 08:33 - 000000000 ___SD C:\WINDOWS\SysWOW64\Configuration
2020-12-10 08:15 - 2020-12-10 08:33 - 000000000 ___SD C:\WINDOWS\system32\Configuration
2020-12-10 08:15 - 2020-12-10 08:33 - 000000000 ____D C:\WINDOWS\Web
2020-12-10 08:15 - 2020-12-10 08:33 - 000000000 ____D C:\WINDOWS\SysWOW64\SMI
2020-12-10 08:15 - 2020-12-10 08:33 - 000000000 ____D C:\WINDOWS\system32\winevt
2020-12-10 08:15 - 2020-12-10 08:33 - 000000000 ____D C:\WINDOWS\system32\ras
2020-12-10 08:15 - 2020-12-10 08:33 - 000000000 ____D C:\WINDOWS\system32\PointOfService
2020-12-10 08:15 - 2020-12-10 08:33 - 000000000 ____D C:\WINDOWS\SKB
2020-12-10 08:15 - 2020-12-10 08:33 - 000000000 ____D C:\WINDOWS\schemas
2020-12-10 08:15 - 2020-12-10 08:33 - 000000000 ____D C:\WINDOWS\security
2020-12-10 08:15 - 2020-12-10 08:33 - 000000000 ____D C:\WINDOWS\Provisioning
2020-12-10 08:15 - 2020-12-10 08:33 - 000000000 ____D C:\WINDOWS\PLA
2020-12-10 08:15 - 2020-12-10 08:33 - 000000000 ____D C:\WINDOWS\Media
2020-12-10 08:15 - 2020-12-10 08:33 - 000000000 ____D C:\WINDOWS\InputMethod
2020-12-10 08:15 - 2020-12-10 08:33 - 000000000 ____D C:\WINDOWS\IdentityCRL
2020-12-10 08:15 - 2020-12-10 08:33 - 000000000 ____D C:\WINDOWS\Globalization
2020-12-10 08:15 - 2020-12-10 08:33 - 000000000 ____D C:\WINDOWS\DiagTrack
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ___SD C:\WINDOWS\SysWOW64\Nui
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ___SD C:\WINDOWS\system32\UNP
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ___SD C:\WINDOWS\system32\Nui
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ___SD C:\WINDOWS\Downloaded Program Files
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ___RD C:\WINDOWS\Offline Web Pages
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ___HD C:\WINDOWS\LanguageOverlayCache
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\WUModels
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\WaaS
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\Vss
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\tracing
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\TAPI
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\SysWOW64\ras
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\SysWOW64\NDF
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\SysWOW64\Msdtc
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\SysWOW64\Keywords
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\SysWOW64\Ipmi
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\SysWOW64\InputMethod
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\SysWOW64\IME
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\SysWOW64\icsxml
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicyUsers
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\SysWOW64\downlevel
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\SysWOW64\Bthprops
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\SysWOW64\AppLocker
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\Sgrm
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\ProximityToast
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\Keywords
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\Ipmi
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\InputMethod
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\inetsrv
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\IME
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\icsxml
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\ias
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\DriverState
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\Drivers\DriverData
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\downlevel
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\DDFs
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\config\TxR
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\config\systemprofile
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\config\RegBack
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\config\Journal
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\Bthprops
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\appraiser
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\AppLocker
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\System
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\SchCache
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\ShellExperiences
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\rescache
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\Performance
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\ModemLogs
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\L2Schemas
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\GameBarPresenceWriter
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\Cursors
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\Containers
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\Branding
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\bcastdvr
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\ProgramData\USOShared
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\Program Files\ModifiableWindowsApps
2020-12-10 08:15 - 2020-12-10 08:12 - 000215943 _____ C:\WINDOWS\SysWOW64\dssec.dat
2020-12-10 08:15 - 2020-12-10 08:12 - 000215943 _____ C:\WINDOWS\system32\dssec.dat
2020-12-10 08:15 - 2020-12-10 08:12 - 000003683 _____ C:\WINDOWS\system32\Drivers\etc\lmhosts.sam
2020-12-10 08:15 - 2020-12-10 08:12 - 000003103 _____ C:\WINDOWS\SysWOW64\mmc.exe.config
2020-12-10 08:15 - 2020-12-10 08:12 - 000003103 _____ C:\WINDOWS\system32\mmc.exe.config
2020-12-10 08:15 - 2020-12-10 08:12 - 000000858 _____ C:\WINDOWS\system32\DefaultQuestions.json
2020-12-10 08:15 - 2020-12-10 08:12 - 000000741 _____ C:\WINDOWS\SysWOW64\NOISE.DAT
2020-12-10 08:15 - 2020-12-10 08:12 - 000000741 _____ C:\WINDOWS\system32\NOISE.DAT
2020-12-10 08:13 - 2021-01-08 10:50 - 000000000 ____D C:\WINDOWS\INF
2020-12-10 08:10 - 2020-12-10 13:39 - 000557056 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr
2020-12-10 08:10 - 2020-12-10 13:39 - 000485376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr
2020-12-10 08:10 - 2020-12-10 13:39 - 000316640 _____ C:\WINDOWS\WMSysPr9.prx
2020-12-10 08:10 - 2020-12-10 13:39 - 000200704 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\WINDOWS\system32\l3codecp.acm
2020-12-10 08:10 - 2020-12-10 13:39 - 000192512 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\WINDOWS\SysWOW64\l3codecp.acm
2020-12-10 08:10 - 2020-12-10 13:39 - 000118784 _____ C:\WINDOWS\system32\VirtualMonitorManager.dll
2020-12-10 08:10 - 2020-12-10 13:39 - 000114688 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\WINDOWS\system32\l3codeca.acm
2020-12-10 08:10 - 2020-12-10 13:39 - 000070656 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\WINDOWS\SysWOW64\l3codeca.acm
2020-12-10 08:10 - 2020-12-10 08:10 - 000016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\rendezvousSession.tlb
2020-12-10 08:10 - 2020-12-10 08:10 - 000016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsraLegacy.tlb
2020-12-10 08:10 - 2020-12-10 08:10 - 000010429 _____ C:\WINDOWS\system32\ScavengeSpace.xml
2020-12-10 08:10 - 2020-12-10 08:10 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsraLegacy.tlb
2020-12-10 08:10 - 2020-12-10 08:10 - 000006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rendezvousSession.tlb
2020-12-10 08:10 - 2020-12-10 08:10 - 000002349 ___RS C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Immersive Control Panel.lnk
2020-12-10 08:10 - 2020-12-10 08:10 - 000001649 _____ C:\WINDOWS\SysWOW64\WindowsCodecsRaw.txt
2020-12-10 08:10 - 2020-12-10 08:10 - 000001649 _____ C:\WINDOWS\system32\WindowsCodecsRaw.txt
2020-12-10 08:10 - 2020-12-10 08:10 - 000001105 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-12-10 08:10 - 2020-12-10 08:10 - 000001105 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-12-10 08:10 - 2020-12-10 08:10 - 000000112 _____ C:\WINDOWS\SysWOW64\MixedRealityRuntime.json
2020-12-10 08:10 - 2020-12-10 08:10 - 000000112 _____ C:\WINDOWS\system32\MixedRealityRuntime.json
2020-12-10 08:09 - 2020-12-10 08:09 - 003860832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmpltfm.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 003408896 _____ C:\WINDOWS\system32\rdpnanoTransport.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 002764800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2020-12-10 08:09 - 2020-12-10 08:09 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2020-12-10 08:09 - 2020-12-10 08:09 - 001945888 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2020-12-10 08:09 - 2020-12-10 08:09 - 000980320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmpal.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000915296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmcodecs.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000839680 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\ir41_32original.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000831488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Bubbles.scr
2020-12-10 08:09 - 2020-12-10 08:09 - 000774144 _____ C:\WINDOWS\system32\FsNVSDeviceSource.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000749568 _____ (Microsoft Corporation) C:\WINDOWS\system32\TabletPC.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000746496 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\ir50_32original.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000745472 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhctrl.ocx
2020-12-10 08:09 - 2020-12-10 08:09 - 000732000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ortcengine.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000678112 _____ (SQLite Development Team) C:\WINDOWS\SysWOW64\winsqlite3.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000634880 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000581120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhctrl.ocx
2020-12-10 08:09 - 2020-12-10 08:09 - 000561152 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000518144 _____ C:\WINDOWS\SysWOW64\msjetoledb40.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000482816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000442368 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2020-12-10 08:09 - 2020-12-10 08:09 - 000434176 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmon.ocx
2020-12-10 08:09 - 2020-12-10 08:09 - 000429056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000421376 _____ (curl, hxxps://curl.haxx.se/) C:\WINDOWS\system32\curl.exe
2020-12-10 08:09 - 2020-12-10 08:09 - 000386560 _____ (curl, hxxps://curl.haxx.se/) C:\WINDOWS\SysWOW64\curl.exe
2020-12-10 08:09 - 2020-12-10 08:09 - 000374272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hdwwiz.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000352544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sysmon.ocx
2020-12-10 08:09 - 2020-12-10 08:09 - 000341504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2020-12-10 08:09 - 2020-12-10 08:09 - 000338432 _____ (Intel Corporation.) C:\WINDOWS\SysWOW64\ir41_qcxoriginal.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000327968 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpg2splt.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\unimdm.tsp
2020-12-10 08:09 - 2020-12-10 08:09 - 000302080 _____ C:\WINDOWS\SysWOW64\Windows.Internal.UI.Shell.WindowTabManager.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000300544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000282912 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSNP.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000254976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unimdm.tsp
2020-12-10 08:09 - 2020-12-10 08:09 - 000253952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ssText3d.scr
2020-12-10 08:09 - 2020-12-10 08:09 - 000251168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000245760 _____ (Microsoft Corporation) C:\WINDOWS\system32\powercfg.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000238880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mpg2splt.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\desk.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000214816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSNP.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000212992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bthprops.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000211938 _____ C:\WINDOWS\SysWOW64\lcphrase.tbl
2020-12-10 08:09 - 2020-12-10 08:09 - 000211938 _____ C:\WINDOWS\system32\lcphrase.tbl
2020-12-10 08:09 - 2020-12-10 08:09 - 000208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\powercfg.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000205088 _____ (Microsoft Corporation) C:\WINDOWS\system32\VBICodec.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000200192 _____ (Intel Corporation.) C:\WINDOWS\SysWOW64\ir50_qcoriginal.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000197632 _____ (Intel(R) Corporation) C:\WINDOWS\SysWOW64\ir32_32original.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000197632 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iac25_32.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000196608 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\DscCoreConfProv.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000195618 _____ C:\WINDOWS\system32\C_10002.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000188928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\intl.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000185344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\desk.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000183808 _____ (Intel Corporation.) C:\WINDOWS\SysWOW64\ir50_qcxoriginal.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000177698 _____ C:\WINDOWS\system32\C_10003.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Ribbons.scr
2020-12-10 08:09 - 2020-12-10 08:09 - 000176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Mystify.scr
2020-12-10 08:09 - 2020-12-10 08:09 - 000173602 _____ C:\WINDOWS\system32\C_10008.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000162850 _____ C:\WINDOWS\system32\C_10001.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000160544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VBICodec.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000160032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Kswdmcap.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000146944 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\ivfsrc.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000145622 _____ C:\WINDOWS\SysWOW64\devmgmt.msc
2020-12-10 08:09 - 2020-12-10 08:09 - 000145519 _____ C:\WINDOWS\SysWOW64\perfmon.msc
2020-12-10 08:09 - 2020-12-10 08:09 - 000145519 _____ C:\WINDOWS\system32\perfmon.msc
2020-12-10 08:09 - 2020-12-10 08:09 - 000145127 _____ C:\WINDOWS\SysWOW64\eventvwr.msc
2020-12-10 08:09 - 2020-12-10 08:09 - 000145127 _____ C:\WINDOWS\system32\eventvwr.msc
2020-12-10 08:09 - 2020-12-10 08:09 - 000144909 _____ C:\WINDOWS\SysWOW64\fsmgmt.msc
2020-12-10 08:09 - 2020-12-10 08:09 - 000143872 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\SysWOW64\DscCoreConfProv.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000135456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Mpeg2Data.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000135168 _____ C:\WINDOWS\system32\ResBParser.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000131360 _____ (Microsoft Corporation) C:\WINDOWS\system32\psisrndr.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000131360 _____ (Microsoft Corporation) C:\WINDOWS\system32\kstvtune.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000127264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSTPager.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000127264 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdaplgin.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\telephon.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000124118 _____ C:\WINDOWS\SysWOW64\comexp.msc
2020-12-10 08:09 - 2020-12-10 08:09 - 000122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\remotesp.tsp
2020-12-10 08:09 - 2020-12-10 08:09 - 000122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\joy.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000121632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Kswdmcap.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000120320 _____ (Intel Corporation.) C:\WINDOWS\SysWOW64\ir41_qcoriginal.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000115109 _____ C:\WINDOWS\SysWOW64\WF.msc
2020-12-10 08:09 - 2020-12-10 08:09 - 000113256 _____ C:\WINDOWS\SysWOW64\compmgmt.msc
2020-12-10 08:09 - 2020-12-10 08:09 - 000113256 _____ C:\WINDOWS\system32\compmgmt.msc
2020-12-10 08:09 - 2020-12-10 08:09 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\activeds.tlb
2020-12-10 08:09 - 2020-12-10 08:09 - 000110880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSDvbNP.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000110080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshom.ocx
2020-12-10 08:09 - 2020-12-10 08:09 - 000107520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\telephon.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2020-12-10 08:09 - 2020-12-10 08:09 - 000104960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000103936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscript.ocx
2020-12-10 08:09 - 2020-12-10 08:09 - 000102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqlsrv32.rll
2020-12-10 08:09 - 2020-12-10 08:09 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncpa.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\joy.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000096544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kstvtune.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000094496 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksxbar.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqlsrv32.rll
2020-12-10 08:09 - 2020-12-10 08:09 - 000093702 _____ C:\WINDOWS\SysWOW64\SubRange.uce
2020-12-10 08:09 - 2020-12-10 08:09 - 000093702 _____ C:\WINDOWS\system32\SubRange.uce
2020-12-10 08:09 - 2020-12-10 08:09 - 000092746 _____ C:\WINDOWS\SysWOW64\services.msc
2020-12-10 08:09 - 2020-12-10 08:09 - 000092746 _____ C:\WINDOWS\system32\services.msc
2020-12-10 08:09 - 2020-12-10 08:09 - 000092448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Mpeg2Data.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000090912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\psisrndr.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000090704 _____ C:\WINDOWS\system32\gatherNetworkInfo.vbs
2020-12-10 08:09 - 2020-12-10 08:09 - 000089888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bdaplgin.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000088064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remotesp.tsp
2020-12-10 08:09 - 2020-12-10 08:09 - 000086528 _____ (Radius Inc.) C:\WINDOWS\SysWOW64\iccvid.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000086016 _____ C:\WINDOWS\system32\BWContextHandler.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000084768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSTPager.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\g711codc.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2020-12-10 08:09 - 2020-12-10 08:09 - 000074016 _____ C:\WINDOWS\system32\Drivers\NDKPerf.sys
2020-12-10 08:09 - 2020-12-10 08:09 - 000071968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSDvbNP.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000069920 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbisurf.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000068608 _____ (Twain Working Group) C:\WINDOWS\twain_32.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_875.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_870.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_500.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_21027.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_21025.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20924.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20905.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20880.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20871.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20838.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20833.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20424.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20423.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20420.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20297.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20290.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20285.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20284.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20280.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20278.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20277.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20273.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20269.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20108.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20107.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20106.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20105.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_1149.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_1148.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_1147.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_1146.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_1145.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_1144.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_1143.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_1142.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_1141.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_1140.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_1047.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_1026.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_10082.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_10081.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_10079.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_10029.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_10021.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_10017.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_10010.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_10007.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_10006.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_10005.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_10004.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_10000.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_037.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000065024 _____ C:\WINDOWS\SysWOW64\sstpcfg.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000063081 _____ C:\WINDOWS\SysWOW64\certlm.msc
2020-12-10 08:09 - 2020-12-10 08:09 - 000063081 _____ C:\WINDOWS\system32\certlm.msc
2020-12-10 08:09 - 2020-12-10 08:09 - 000063070 _____ C:\WINDOWS\SysWOW64\certmgr.msc
2020-12-10 08:09 - 2020-12-10 08:09 - 000063070 _____ C:\WINDOWS\system32\certmgr.msc
2020-12-10 08:09 - 2020-12-10 08:09 - 000061728 _____ C:\WINDOWS\system32\HvSocket.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000061728 _____ (Microsoft Corporation) C:\WINDOWS\system32\vidcap.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000061440 _____ C:\WINDOWS\system32\SpectrumSyncClient.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\irprops.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\hidphone.tsp
2020-12-10 08:09 - 2020-12-10 08:09 - 000060458 _____ C:\WINDOWS\SysWOW64\ideograf.uce
2020-12-10 08:09 - 2020-12-10 08:09 - 000060458 _____ C:\WINDOWS\system32\ideograf.uce
2020-12-10 08:09 - 2020-12-10 08:09 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\main.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000059680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksxbar.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000059554 _____ C:\WINDOWS\system32\srms.dat
2020-12-10 08:09 - 2020-12-10 08:09 - 000057344 _____ C:\WINDOWS\SysWOW64\BWContextHandler.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000055376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmmvrortc.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\g711codc.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000051712 _____ C:\WINDOWS\SysWOW64\CredProvCommonCore.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\more.com
2020-12-10 08:09 - 2020-12-10 08:09 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mode.com
2020-12-10 08:09 - 2020-12-10 08:09 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\format.com
2020-12-10 08:09 - 2020-12-10 08:09 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\cliconfg.rll
2020-12-10 08:09 - 2020-12-10 08:09 - 000043808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbisurf.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000041587 _____ C:\WINDOWS\SysWOW64\azman.msc
2020-12-10 08:09 - 2020-12-10 08:09 - 000041587 _____ C:\WINDOWS\system32\azman.msc
2020-12-10 08:09 - 2020-12-10 08:09 - 000041472 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\tree.com
2020-12-10 08:09 - 2020-12-10 08:09 - 000039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kmddsp.tsp
2020-12-10 08:09 - 2020-12-10 08:09 - 000037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cliconfg.rll
2020-12-10 08:09 - 2020-12-10 08:09 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\chcp.com
2020-12-10 08:09 - 2020-12-10 08:09 - 000033568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vidcap.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hidphone.tsp
2020-12-10 08:09 - 2020-12-10 08:09 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\irprops.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Firewall.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mode.com
2020-12-10 08:09 - 2020-12-10 08:09 - 000024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\more.com
2020-12-10 08:09 - 2020-12-10 08:09 - 000024114 _____ C:\WINDOWS\SysWOW64\lcptr.tbl
2020-12-10 08:09 - 2020-12-10 08:09 - 000024114 _____ C:\WINDOWS\system32\lcptr.tbl
2020-12-10 08:09 - 2020-12-10 08:09 - 000024006 _____ C:\WINDOWS\SysWOW64\gb2312.uce
2020-12-10 08:09 - 2020-12-10 08:09 - 000024006 _____ C:\WINDOWS\system32\gb2312.uce
2020-12-10 08:09 - 2020-12-10 08:09 - 000022984 _____ C:\WINDOWS\SysWOW64\bopomofo.uce
2020-12-10 08:09 - 2020-12-10 08:09 - 000022984 _____ C:\WINDOWS\system32\bopomofo.uce
2020-12-10 08:09 - 2020-12-10 08:09 - 000021656 _____ C:\WINDOWS\system32\NetTrace.PLA.Diagnostics.xml
2020-12-10 08:09 - 2020-12-10 08:09 - 000020268 _____ C:\WINDOWS\system32\DeliveryOptimizationMIProv.mof
2020-12-10 08:09 - 2020-12-10 08:09 - 000019485 _____ C:\WINDOWS\SysWOW64\srms-apr.dat
2020-12-10 08:09 - 2020-12-10 08:09 - 000019485 _____ C:\WINDOWS\system32\srms-apr.dat
2020-12-10 08:09 - 2020-12-10 08:09 - 000019456 _____ C:\WINDOWS\SysWOW64\WsdProviderUtil.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000017935 _____ C:\WINDOWS\SysWOW64\EventViewer_EventDetails.xsl
2020-12-10 08:09 - 2020-12-10 08:09 - 000017935 _____ C:\WINDOWS\system32\EventViewer_EventDetails.xsl
2020-12-10 08:09 - 2020-12-10 08:09 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tree.com
2020-12-10 08:09 - 2020-12-10 08:09 - 000016740 _____ C:\WINDOWS\SysWOW64\ShiftJIS.uce
2020-12-10 08:09 - 2020-12-10 08:09 - 000016740 _____ C:\WINDOWS\system32\ShiftJIS.uce
2020-12-10 08:09 - 2020-12-10 08:09 - 000016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\simpdata.tlb
2020-12-10 08:09 - 2020-12-10 08:09 - 000013824 _____ C:\WINDOWS\SysWOW64\prxyqry.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000012876 _____ C:\WINDOWS\SysWOW64\korean.uce
2020-12-10 08:09 - 2020-12-10 08:09 - 000012876 _____ C:\WINDOWS\system32\korean.uce
2020-12-10 08:09 - 2020-12-10 08:09 - 000012826 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2020-12-10 08:09 - 2020-12-10 08:09 - 000012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\chcp.com
2020-12-10 08:09 - 2020-12-10 08:09 - 000012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdatsrc.tlb
2020-12-10 08:09 - 2020-12-10 08:09 - 000011292 _____ C:\WINDOWS\SysWOW64\srms-apr-v.dat
2020-12-10 08:09 - 2020-12-10 08:09 - 000011292 _____ C:\WINDOWS\system32\srms-apr-v.dat
2020-12-10 08:09 - 2020-12-10 08:09 - 000009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ir41_32.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000009432 _____ C:\WINDOWS\system32\ResPriUHMImageList
2020-12-10 08:09 - 2020-12-10 08:09 - 000009432 _____ C:\WINDOWS\system32\ResPriHMImageList
2020-12-10 08:09 - 2020-12-10 08:09 - 000009427 _____ C:\WINDOWS\system32\ResPriImageList
2020-12-10 08:09 - 2020-12-10 08:09 - 000009196 _____ C:\WINDOWS\system32\ResPriHMImageListLowCost
2020-12-10 08:09 - 2020-12-10 08:09 - 000008945 _____ C:\WINDOWS\system32\ResPriLMImageList
2020-12-10 08:09 - 2020-12-10 08:09 - 000008690 _____ C:\WINDOWS\system32\ResPriImageListLowCost
2020-12-10 08:09 - 2020-12-10 08:09 - 000008484 _____ C:\WINDOWS\SysWOW64\kanji_2.uce
2020-12-10 08:09 - 2020-12-10 08:09 - 000008484 _____ C:\WINDOWS\system32\kanji_2.uce
2020-12-10 08:09 - 2020-12-10 08:09 - 000008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\simpdata.tlb
2020-12-10 08:09 - 2020-12-10 08:09 - 000007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stdole32.tlb
2020-12-10 08:09 - 2020-12-10 08:09 - 000006948 _____ C:\WINDOWS\SysWOW64\kanji_1.uce
2020-12-10 08:09 - 2020-12-10 08:09 - 000006948 _____ C:\WINDOWS\system32\kanji_1.uce
2020-12-10 08:09 - 2020-12-10 08:09 - 000006656 _____ C:\WINDOWS\SysWOW64\nrtapi.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdatsrc.tlb
2020-12-10 08:09 - 2020-12-10 08:09 - 000004453 _____ C:\WINDOWS\SysWOW64\odbcconf.rsp
2020-12-10 08:09 - 2020-12-10 08:09 - 000004014 _____ C:\WINDOWS\SysWOW64\xwizard.dtd
2020-12-10 08:09 - 2020-12-10 08:09 - 000004014 _____ C:\WINDOWS\system32\xwizard.dtd
2020-12-10 08:09 - 2020-12-10 08:09 - 000003666 _____ C:\WINDOWS\SysWOW64\sysprtj.sep
2020-12-10 08:09 - 2020-12-10 08:09 - 000003660 _____ C:\WINDOWS\system32\WwanFeatureTests.xml
2020-12-10 08:09 - 2020-12-10 08:09 - 000003317 _____ C:\WINDOWS\SysWOW64\sysprint.sep
2020-12-10 08:09 - 2020-12-10 08:09 - 000002404 _____ C:\WINDOWS\SysWOW64\WimBootCompress.ini
2020-12-10 08:09 - 2020-12-10 08:09 - 000002233 _____ C:\WINDOWS\SysWOW64\12520850.cpx
2020-12-10 08:09 - 2020-12-10 08:09 - 000002151 _____ C:\WINDOWS\SysWOW64\12520437.cpx
2020-12-10 08:09 - 2020-12-10 08:09 - 000002044 _____ C:\WINDOWS\system32\DeliveryOptimizationMIProvUninstall.mof
2020-12-10 08:09 - 2020-12-10 08:09 - 000001820 _____ C:\WINDOWS\SysWOW64\rasctrnm.h
2020-12-10 08:09 - 2020-12-10 08:09 - 000001673 _____ C:\WINDOWS\SysWOW64\tcpbidi.xml
2020-12-10 08:09 - 2020-12-10 08:09 - 000000714 _____ C:\WINDOWS\SysWOW64\RestartManager.mof
2020-12-10 08:09 - 2020-12-10 08:09 - 000000565 _____ C:\WINDOWS\SysWOW64\NdfEventView.xml
2020-12-10 08:09 - 2020-12-10 08:09 - 000000565 _____ C:\WINDOWS\system32\NdfEventView.xml
2020-12-10 08:09 - 2020-12-10 08:09 - 000000263 _____ C:\WINDOWS\system32\odbcconf.rsp
2020-12-10 08:09 - 2020-12-10 08:09 - 000000176 _____ C:\WINDOWS\SysWOW64\RestartManagerUninstall.mof
2020-12-10 08:09 - 2020-12-10 08:09 - 000000150 _____ C:\WINDOWS\SysWOW64\pcl.sep
2020-12-10 08:09 - 2020-12-10 08:09 - 000000051 _____ C:\WINDOWS\SysWOW64\pscript.sep
2020-12-10 08:08 - 2020-12-10 08:08 - 004898144 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmpltfm.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 003602432 _____ C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.Analysis.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 003440660 _____ C:\WINDOWS\SysWOW64\Drivers\gm.dls
2020-12-10 08:08 - 2020-12-10 08:08 - 003170304 _____ C:\WINDOWS\SysWOW64\boot.sdi
2020-12-10 08:08 - 2020-12-10 08:08 - 003170304 _____ C:\WINDOWS\system32\boot.sdi
2020-12-10 08:08 - 2020-12-10 08:08 - 002470000 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2020-12-10 08:08 - 2020-12-10 08:08 - 002142208 _____ C:\WINDOWS\system32\dwmscene.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 002030400 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2020-12-10 08:08 - 2020-12-10 08:08 - 001989992 ____R (The ICU Project) C:\WINDOWS\SysWOW64\icu.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 001989120 _____ (Digimarc) C:\WINDOWS\SysWOW64\DMRCDecoder.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 001528832 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 001354080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmpal.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 001263312 _____ C:\WINDOWS\SysWOW64\WindowManagementAPI.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 001091936 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmcodecs.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 001032544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ortcengine.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000897584 _____ (SQLite Development Team) C:\WINDOWS\system32\winsqlite3.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000819512 _____ C:\WINDOWS\SysWOW64\locale.nls
2020-12-10 08:08 - 2020-12-10 08:08 - 000819512 _____ C:\WINDOWS\system32\locale.nls
2020-12-10 08:08 - 2020-12-10 08:08 - 000673088 _____ C:\WINDOWS\SysWOW64\mlang.dat
2020-12-10 08:08 - 2020-12-10 08:08 - 000673088 _____ C:\WINDOWS\system32\mlang.dat
2020-12-10 08:08 - 2020-12-10 08:08 - 000613016 _____ C:\WINDOWS\SysWOW64\TextShaping.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000461824 _____ C:\WINDOWS\SysWOW64\SettingSyncDownloadHelper.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000447488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2020-12-10 08:08 - 2020-12-10 08:08 - 000405504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl
2020-12-10 08:08 - 2020-12-10 08:08 - 000405504 _____ (Microsoft Corporation) C:\WINDOWS\system32\hdwwiz.cpl
2020-12-10 08:08 - 2020-12-10 08:08 - 000364544 _____ C:\WINDOWS\system32\Windows.Internal.UI.Shell.WindowTabManager.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000345088 _____ C:\WINDOWS\SysWOW64\ssdm.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000323584 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2020-12-10 08:08 - 2020-12-10 08:08 - 000294912 _____ C:\WINDOWS\system32\pnpdiag.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthprops.cpl
2020-12-10 08:08 - 2020-12-10 08:08 - 000262656 _____ C:\WINDOWS\SysWOW64\HeatCore.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\intl.cpl
2020-12-10 08:08 - 2020-12-10 08:08 - 000246048 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000233984 _____ C:\WINDOWS\SysWOW64\CoreMas.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000221184 _____ C:\WINDOWS\system32\AggregatorHost.exe
2020-12-10 08:08 - 2020-12-10 08:08 - 000217600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdmaud.drv
2020-12-10 08:08 - 2020-12-10 08:08 - 000208896 _____ C:\WINDOWS\system32\BthpanContextHandler.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000204074 _____ C:\WINDOWS\SysWOW64\winrm.vbs
2020-12-10 08:08 - 2020-12-10 08:08 - 000204074 _____ C:\WINDOWS\system32\winrm.vbs
2020-12-10 08:08 - 2020-12-10 08:08 - 000196642 _____ C:\WINDOWS\system32\C_950.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000196642 _____ C:\WINDOWS\system32\C_949.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000196642 _____ C:\WINDOWS\system32\C_936.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000189986 _____ C:\WINDOWS\system32\C_1361.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000187938 _____ C:\WINDOWS\system32\C_20005.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000186402 _____ C:\WINDOWS\system32\C_20001.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000185378 _____ C:\WINDOWS\system32\C_20003.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000180770 _____ C:\WINDOWS\system32\C_20932.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000180258 _____ C:\WINDOWS\system32\C_20004.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000180258 _____ C:\WINDOWS\system32\C_20000.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000177698 _____ C:\WINDOWS\system32\C_20949.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000175104 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2020-12-10 08:08 - 2020-12-10 08:08 - 000174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\timedate.cpl
2020-12-10 08:08 - 2020-12-10 08:08 - 000173602 _____ C:\WINDOWS\system32\C_20936.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000173602 _____ C:\WINDOWS\system32\C_20002.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysdm.cpl
2020-12-10 08:08 - 2020-12-10 08:08 - 000167640 _____ C:\WINDOWS\SysWOW64\chs_singlechar_pinyin.dat
2020-12-10 08:08 - 2020-12-10 08:08 - 000162850 _____ C:\WINDOWS\system32\C_932.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmview.ocx
2020-12-10 08:08 - 2020-12-10 08:08 - 000151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx
2020-12-10 08:08 - 2020-12-10 08:08 - 000147744 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2020-12-10 08:08 - 2020-12-10 08:08 - 000145622 _____ C:\WINDOWS\system32\devmgmt.msc
2020-12-10 08:08 - 2020-12-10 08:08 - 000145059 _____ C:\WINDOWS\SysWOW64\taskschd.msc
2020-12-10 08:08 - 2020-12-10 08:08 - 000145059 _____ C:\WINDOWS\system32\taskschd.msc
2020-12-10 08:08 - 2020-12-10 08:08 - 000144998 _____ C:\WINDOWS\SysWOW64\lusrmgr.msc
2020-12-10 08:08 - 2020-12-10 08:08 - 000144998 _____ C:\WINDOWS\system32\lusrmgr.msc
2020-12-10 08:08 - 2020-12-10 08:08 - 000144909 _____ C:\WINDOWS\system32\fsmgmt.msc
2020-12-10 08:08 - 2020-12-10 08:08 - 000144862 _____ C:\WINDOWS\SysWOW64\tpm.msc
2020-12-10 08:08 - 2020-12-10 08:08 - 000142904 _____ C:\WINDOWS\SysWOW64\slmgr.vbs
2020-12-10 08:08 - 2020-12-10 08:08 - 000142904 _____ C:\WINDOWS\system32\slmgr.vbs
2020-12-10 08:08 - 2020-12-10 08:08 - 000139810 _____ C:\WINDOWS\system32\C_20261.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000124118 _____ C:\WINDOWS\system32\comexp.msc
2020-12-10 08:08 - 2020-12-10 08:08 - 000122880 _____ C:\WINDOWS\system32\UpdatePolicyScenarioReliabilityAggregator.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncpa.cpl
2020-12-10 08:08 - 2020-12-10 08:08 - 000122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\activeds.tlb
2020-12-10 08:08 - 2020-12-10 08:08 - 000121344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sysdm.cpl
2020-12-10 08:08 - 2020-12-10 08:08 - 000118272 _____ C:\WINDOWS\SysWOW64\WindowsDefaultHeatProcessor.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000115109 _____ C:\WINDOWS\system32\WF.msc
2020-12-10 08:08 - 2020-12-10 08:08 - 000113664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmview.ocx
2020-12-10 08:08 - 2020-12-10 08:08 - 000110592 _____ C:\WINDOWS\system32\UpdateHeartbeatScan.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\main.cpl
2020-12-10 08:08 - 2020-12-10 08:08 - 000094208 _____ C:\WINDOWS\system32\sstpcfg.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000094208 _____ C:\WINDOWS\system32\runexehelper.exe
2020-12-10 08:08 - 2020-12-10 08:08 - 000086016 _____ C:\WINDOWS\system32\printticketvalidation.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000086016 _____ C:\WINDOWS\system32\Drivers\UsbPmApi.sys
2020-12-10 08:08 - 2020-12-10 08:08 - 000086016 _____ C:\WINDOWS\system32\CredProvCommonCore.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000084948 _____ C:\WINDOWS\system32\DiskSnapshot.conf
2020-12-10 08:08 - 2020-12-10 08:08 - 000081870 _____ C:\WINDOWS\system32\normidna.nls
2020-12-10 08:08 - 2020-12-10 08:08 - 000079348 _____ C:\WINDOWS\system32\normnfkc.nls
2020-12-10 08:08 - 2020-12-10 08:08 - 000076288 _____ C:\WINDOWS\SysWOW64\xboxgipsynthetic.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000073114 _____ C:\WINDOWS\system32\normnfkd.nls
2020-12-10 08:08 - 2020-12-10 08:08 - 000069632 _____ C:\WINDOWS\system32\UsbPmApi.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\kmddsp.tsp
2020-12-10 08:08 - 2020-12-10 08:08 - 000069632 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000066594 _____ C:\WINDOWS\system32\C_874.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066594 _____ C:\WINDOWS\system32\C_869.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066594 _____ C:\WINDOWS\system32\C_866.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066594 _____ C:\WINDOWS\system32\C_865.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066594 _____ C:\WINDOWS\system32\C_864.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066594 _____ C:\WINDOWS\system32\C_863.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066594 _____ C:\WINDOWS\system32\C_862.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066594 _____ C:\WINDOWS\system32\C_861.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066594 _____ C:\WINDOWS\system32\C_860.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066594 _____ C:\WINDOWS\system32\C_858.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066594 _____ C:\WINDOWS\system32\C_857.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066594 _____ C:\WINDOWS\system32\C_855.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066594 _____ C:\WINDOWS\system32\C_852.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066594 _____ C:\WINDOWS\system32\C_850.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066594 _____ C:\WINDOWS\system32\C_775.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066594 _____ C:\WINDOWS\system32\C_737.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066594 _____ C:\WINDOWS\system32\C_720.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066594 _____ C:\WINDOWS\system32\C_437.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_708.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_28605.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\c_28603.nls
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_28599.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_28598.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_28597.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_28596.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_28595.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_28594.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_28593.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_28592.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_28591.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_21866.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_20866.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_20127.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_1258.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_1257.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_1256.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_1255.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_1254.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_1253.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_1252.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_1251.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_1250.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\format.com
2020-12-10 08:08 - 2020-12-10 08:08 - 000061440 _____ C:\WINDOWS\SysWOW64\WwanPrfl.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000060124 _____ C:\WINDOWS\system32\tcpmon.ini
2020-12-10 08:08 - 2020-12-10 08:08 - 000057136 _____ C:\WINDOWS\system32\normnfc.nls
2020-12-10 08:08 - 2020-12-10 08:08 - 000056672 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmmvrortc.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000053248 _____ C:\WINDOWS\system32\usocoreps.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000053248 _____ C:\WINDOWS\system32\deploymentcsphelper.exe
2020-12-10 08:08 - 2020-12-10 08:08 - 000050442 _____ C:\WINDOWS\system32\normnfd.nls
2020-12-10 08:08 - 2020-12-10 08:08 - 000050176 _____ C:\WINDOWS\SysWOW64\windows.applicationmodel.conversationalagent.proxystub.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000047682 _____ C:\WINDOWS\SysWOW64\diskmgmt.msc
2020-12-10 08:08 - 2020-12-10 08:08 - 000047682 _____ C:\WINDOWS\system32\diskmgmt.msc
2020-12-10 08:08 - 2020-12-10 08:08 - 000045568 _____ (Microsoft) C:\WINDOWS\SysWOW64\oflc-nz.rs
2020-12-10 08:08 - 2020-12-10 08:08 - 000043520 _____ (Microsoft) C:\WINDOWS\SysWOW64\csrr.rs
2020-12-10 08:08 - 2020-12-10 08:08 - 000043131 _____ C:\WINDOWS\mib.bin
2020-12-10 08:08 - 2020-12-10 08:08 - 000041472 _____ (Microsoft) C:\WINDOWS\SysWOW64\fpb.rs
2020-12-10 08:08 - 2020-12-10 08:08 - 000040960 _____ C:\WINDOWS\system32\WsdProviderUtil.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000040960 _____ C:\WINDOWS\system32\prxyqry.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000040448 _____ C:\WINDOWS\SysWOW64\windows.applicationmodel.conversationalagent.internal.proxystub.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000036864 _____ C:\WINDOWS\system32\umpodev.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000034816 _____ (Microsoft) C:\WINDOWS\SysWOW64\cero.rs
2020-12-10 08:08 - 2020-12-10 08:08 - 000033792 _____ (Microsoft) C:\WINDOWS\SysWOW64\esrb.rs
2020-12-10 08:08 - 2020-12-10 08:08 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrnsave.scr
2020-12-10 08:08 - 2020-12-10 08:08 - 000031232 _____ (Microsoft) C:\WINDOWS\SysWOW64\usk.rs
2020-12-10 08:08 - 2020-12-10 08:08 - 000030984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msgsm32.acm
2020-12-10 08:08 - 2020-12-10 08:08 - 000030720 _____ (Microsoft) C:\WINDOWS\SysWOW64\cob-au.rs
2020-12-10 08:08 - 2020-12-10 08:08 - 000030664 _____ C:\WINDOWS\system32\NarratorControlTemplates.xml
2020-12-10 08:08 - 2020-12-10 08:08 - 000029184 ____R (The ICU Project) C:\WINDOWS\SysWOW64\icuuc.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctfime.ime
2020-12-10 08:08 - 2020-12-10 08:08 - 000026344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imaadp32.acm
2020-12-10 08:08 - 2020-12-10 08:08 - 000026304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msadp32.acm
2020-12-10 08:08 - 2020-12-10 08:08 - 000024576 ____R (The ICU Project) C:\WINDOWS\SysWOW64\icuin.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000024576 _____ C:\WINDOWS\system32\nrtapi.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msacm32.drv
2020-12-10 08:08 - 2020-12-10 08:08 - 000020992 _____ (Microsoft) C:\WINDOWS\SysWOW64\pegi-pt.rs
2020-12-10 08:08 - 2020-12-10 08:08 - 000020480 _____ (Microsoft) C:\WINDOWS\SysWOW64\pegi.rs
2020-12-10 08:08 - 2020-12-10 08:08 - 000019456 _____ (Microsoft) C:\WINDOWS\SysWOW64\grb.rs
2020-12-10 08:08 - 2020-12-10 08:08 - 000019104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msg711.acm
2020-12-10 08:08 - 2020-12-10 08:08 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stdole2.tlb
2020-12-10 08:08 - 2020-12-10 08:08 - 000015360 _____ (Microsoft) C:\WINDOWS\SysWOW64\pcbp.rs
2020-12-10 08:08 - 2020-12-10 08:08 - 000015360 _____ (Microsoft) C:\WINDOWS\SysWOW64\djctq.rs
2020-12-10 08:08 - 2020-12-10 08:08 - 000013091 _____ C:\WINDOWS\system32\DevModeRunAsUserConfig.msc
2020-12-10 08:08 - 2020-12-10 08:08 - 000011776 _____ C:\WINDOWS\SysWOW64\agentactivationruntimestarter.exe
2020-12-10 08:08 - 2020-12-10 08:08 - 000009926 _____ C:\WINDOWS\SysWOW64\l_intl.nls
2020-12-10 08:08 - 2020-12-10 08:08 - 000009926 _____ C:\WINDOWS\system32\l_intl.nls
2020-12-10 08:08 - 2020-12-10 08:08 - 000009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctfime.ime
2020-12-10 08:08 - 2020-12-10 08:08 - 000007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\stdole32.tlb
2020-12-10 08:08 - 2020-12-10 08:08 - 000004675 _____ C:\WINDOWS\SysWOW64\wsmanconfig_schema.xml
2020-12-10 08:08 - 2020-12-10 08:08 - 000004675 _____ C:\WINDOWS\system32\wsmanconfig_schema.xml
2020-12-10 08:08 - 2020-12-10 08:08 - 000004608 _____ (Microsoft) C:\WINDOWS\SysWOW64\WEB.rs
2020-12-10 08:08 - 2020-12-10 08:08 - 000004148 _____ C:\WINDOWS\system32\psmodulediscoveryprovider.mof
2020-12-10 08:08 - 2020-12-10 08:08 - 000003944 _____ C:\WINDOWS\system32\DetailedReading-Default.xml
2020-12-10 08:08 - 2020-12-10 08:08 - 000003666 _____ C:\WINDOWS\system32\sysprtj.sep
2020-12-10 08:08 - 2020-12-10 08:08 - 000003317 _____ C:\WINDOWS\system32\sysprint.sep
2020-12-10 08:08 - 2020-12-10 08:08 - 000003164 _____ C:\WINDOWS\SysWOW64\AppxProvisioning.xml
2020-12-10 08:08 - 2020-12-10 08:08 - 000002426 _____ C:\WINDOWS\SysWOW64\WsmTxt.xsl
2020-12-10 08:08 - 2020-12-10 08:08 - 000002426 _____ C:\WINDOWS\system32\WsmTxt.xsl
2020-12-10 08:08 - 2020-12-10 08:08 - 000002404 _____ C:\WINDOWS\system32\WimBootCompress.ini
2020-12-10 08:08 - 2020-12-10 08:08 - 000001820 _____ C:\WINDOWS\system32\rasctrnm.h
2020-12-10 08:08 - 2020-12-10 08:08 - 000001673 _____ C:\WINDOWS\system32\tcpbidi.xml
2020-12-10 08:08 - 2020-12-10 08:08 - 000001559 _____ C:\WINDOWS\SysWOW64\WsmPty.xsl
2020-12-10 08:08 - 2020-12-10 08:08 - 000001559 _____ C:\WINDOWS\system32\WsmPty.xsl
2020-12-10 08:08 - 2020-12-10 08:08 - 000000724 _____ C:\WINDOWS\system32\wpr.config.xml
2020-12-10 08:08 - 2020-12-10 08:08 - 000000714 _____ C:\WINDOWS\system32\RestartManager.mof
2020-12-10 08:08 - 2020-12-10 08:08 - 000000670 ___RH C:\WINDOWS\WindowsShell.Manifest
2020-12-10 08:08 - 2020-12-10 08:08 - 000000646 _____ C:\WINDOWS\SysWOW64\Drivers\gmreadme.txt
2020-12-10 08:08 - 2020-12-10 08:08 - 000000614 _____ C:\WINDOWS\system32\WdsUnattendTemplate.xml
2020-12-10 08:08 - 2020-12-10 08:08 - 000000176 _____ C:\WINDOWS\system32\RestartManagerUninstall.mof
2020-12-10 08:08 - 2020-12-10 08:08 - 000000150 _____ C:\WINDOWS\system32\pcl.sep
2020-12-10 08:08 - 2020-12-10 08:08 - 000000051 _____ C:\WINDOWS\system32\pscript.sep
2020-12-10 08:08 - 2020-12-10 08:08 - 000000033 _____ C:\WINDOWS\SysWOW64\winrm.cmd
2020-12-10 08:08 - 2020-12-10 08:08 - 000000033 _____ C:\WINDOWS\system32\winrm.cmd
2020-12-10 08:07 - 2020-12-10 08:07 - 004523520 _____ C:\WINDOWS\system32\Windows.UI.Input.Inking.Analysis.dll
2020-12-10 08:07 - 2020-12-10 08:07 - 004227116 _____ C:\WINDOWS\system32\DefaultHrtfs.bin
2020-12-10 08:07 - 2020-12-10 08:07 - 003440660 _____ C:\WINDOWS\system32\Drivers\gm.dls
2020-12-10 08:07 - 2020-12-10 08:07 - 003414816 _____ (QLogic Corporation) C:\WINDOWS\system32\Drivers\evbda.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 002458888 ____R (The ICU Project) C:\WINDOWS\system32\icu.dll
2020-12-10 08:07 - 2020-12-10 08:07 - 002136064 _____ (Digimarc) C:\WINDOWS\system32\DMRCDecoder.dll
2020-12-10 08:07 - 2020-12-10 08:07 - 002101248 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2020-12-10 08:07 - 2020-12-10 08:07 - 001942384 _____ C:\WINDOWS\system32\WindowManagementAPI.dll
2020-12-10 08:07 - 2020-12-10 08:07 - 001849632 _____ (Chelsio Communications) C:\WINDOWS\system32\Drivers\cht4vx64.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 001222656 _____ (Realtek Semiconductor Corporation ) C:\WINDOWS\system32\Drivers\rtl8192se.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 001131296 _____ (PMC-Sierra) C:\WINDOWS\system32\Drivers\adp80xx.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 001127200 _____ (Mellanox) C:\WINDOWS\system32\Drivers\mlx4_bus.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000880416 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaStorAVC.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000745552 _____ C:\WINDOWS\system32\DynamicLong.bin
2020-12-10 08:07 - 2020-12-10 08:07 - 000657336 _____ C:\WINDOWS\system32\TextShaping.dll
2020-12-10 08:07 - 2020-12-10 08:07 - 000630784 _____ C:\WINDOWS\system32\SettingSyncDownloadHelper.dll
2020-12-10 08:07 - 2020-12-10 08:07 - 000610304 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2020-12-10 08:07 - 2020-12-10 08:07 - 000571680 _____ (LSI Corporation, Inc.) C:\WINDOWS\system32\Drivers\megasr.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000554784 _____ (Mellanox) C:\WINDOWS\system32\Drivers\ibbus.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000529696 _____ (QLogic Corporation) C:\WINDOWS\system32\Drivers\bxvbda.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000515152 _____ C:\WINDOWS\system32\DynamicMedium.bin
2020-12-10 08:07 - 2020-12-10 08:07 - 000483328 _____ C:\WINDOWS\system32\ssdm.dll
2020-12-10 08:07 - 2020-12-10 08:07 - 000407840 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaStorV.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000352256 _____ C:\WINDOWS\system32\HeatCore.dll
2020-12-10 08:07 - 2020-12-10 08:07 - 000323152 _____ C:\WINDOWS\system32\DynamicShort.bin
2020-12-10 08:07 - 2020-12-10 08:07 - 000315680 _____ (Chelsio Communications) C:\WINDOWS\system32\Drivers\cht4sx64.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000301344 _____ (VIA Corporation) C:\WINDOWS\system32\Drivers\VSTXRAID.SYS
2020-12-10 08:07 - 2020-12-10 08:07 - 000294912 _____ C:\WINDOWS\system32\CoreMas.dll
2020-12-10 08:07 - 2020-12-10 08:07 - 000278528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdmaud.drv
2020-12-10 08:07 - 2020-12-10 08:07 - 000255264 _____ (AMD Technologies Inc.) C:\WINDOWS\system32\Drivers\amdsbs.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\timedate.cpl
2020-12-10 08:07 - 2020-12-10 08:07 - 000246048 _____ C:\WINDOWS\system32\Drivers\Usb4HostRouter.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000229376 _____ C:\WINDOWS\system32\TpmTool.exe
2020-12-10 08:07 - 2020-12-10 08:07 - 000212992 _____ C:\WINDOWS\system32\IHDS.dll
2020-12-10 08:07 - 2020-12-10 08:07 - 000205600 _____ (Microsemi Corportation) C:\WINDOWS\system32\Drivers\SmartSAMD.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000180224 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2020-12-10 08:07 - 2020-12-10 08:07 - 000177664 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaLPSS2i_I2C_GLK.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000177152 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaLPSS2i_I2C_CNL.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000175104 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaLPSS2i_I2C_BXT_P.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000172832 _____ (Avago Technologies) C:\WINDOWS\system32\Drivers\ItSas35i.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000171520 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaLPSS2i_I2C.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000167640 _____ C:\WINDOWS\system32\chs_singlechar_pinyin.dat
2020-12-10 08:07 - 2020-12-10 08:07 - 000162592 _____ (VIA Technologies Inc.,Ltd) C:\WINDOWS\system32\Drivers\vsmraid.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000162080 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvstor.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000149056 _____ C:\WINDOWS\system32\LargeRoom.bin
2020-12-10 08:07 - 2020-12-10 08:07 - 000146208 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvraid.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000144862 _____ C:\WINDOWS\system32\tpm.msc
2020-12-10 08:07 - 2020-12-10 08:07 - 000144673 _____ C:\WINDOWS\system32\WmiMgmt.msc
2020-12-10 08:07 - 2020-12-10 08:07 - 000143360 _____ C:\WINDOWS\system32\WindowsDefaultHeatProcessor.dll
2020-12-10 08:07 - 2020-12-10 08:07 - 000142112 _____ (Mellanox) C:\WINDOWS\system32\Drivers\ndfltr.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000140064 _____ (Chelsio Communications) C:\WINDOWS\system32\Drivers\cht4dx64.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000138092 _____ C:\WINDOWS\system32\AverageRoom.bin
2020-12-10 08:07 - 2020-12-10 08:07 - 000133408 _____ (Avago Technologies) C:\WINDOWS\system32\Drivers\lsi_sas3i.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000127776 _____ (PMC-Sierra, Inc.) C:\WINDOWS\system32\Drivers\arcsas.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000121344 _____ (Qualcomm Atheros Co., Ltd.) C:\WINDOWS\system32\Drivers\L1C63x64.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000120096 _____ (LSI Corporation) C:\WINDOWS\system32\Drivers\lsi_sas2i.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000113152 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaLPSSi_I2C.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000112128 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaLPSS2i_GPIO2_CNL.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000110036 _____ C:\WINDOWS\system32\MediumRoom.bin
2020-12-10 08:07 - 2020-12-10 08:07 - 000108320 _____ (Apple Inc.) C:\WINDOWS\system32\Drivers\AppleSSD.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000106496 _____ C:\WINDOWS\system32\xboxgipsynthetic.dll
2020-12-10 08:07 - 2020-12-10 08:07 - 000104736 _____ (LSI Corporation) C:\WINDOWS\system32\Drivers\lsi_sas.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000103200 _____ (LSI) C:\WINDOWS\system32\Drivers\3ware.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000102400 _____ C:\WINDOWS\system32\windows.applicationmodel.conversationalagent.proxystub.dll
2020-12-10 08:07 - 2020-12-10 08:07 - 000096256 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaLPSS2i_GPIO2_GLK.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000095008 _____ (Broadcom Inc) C:\WINDOWS\system32\Drivers\megasas35i.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000093184 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaLPSS2i_GPIO2_BXT_P.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000091136 _____ (Intel(R) Corporation) C:\WINDOWS\system32\Drivers\iai2c.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000090112 _____ C:\WINDOWS\system32\WwanPrfl.dll
2020-12-10 08:07 - 2020-12-10 08:07 - 000090112 _____ C:\WINDOWS\system32\windows.applicationmodel.conversationalagent.internal.proxystub.dll
2020-12-10 08:07 - 2020-12-10 08:07 - 000081920 ____R (Realtek) C:\WINDOWS\system32\Drivers\rteth.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000079360 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaLPSS2i_GPIO2.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000079136 _____ (Advanced Micro Devices) C:\WINDOWS\system32\Drivers\amdsata.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000077600 _____ (Silicon Integrated Systems) C:\WINDOWS\system32\Drivers\sisraid4.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000076576 _____ (Avago Technologies) C:\WINDOWS\system32\Drivers\MegaSas2i.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000069788 _____ C:\WINDOWS\system32\SmallRoom.bin
2020-12-10 08:07 - 2020-12-10 08:07 - 000069632 _____ C:\WINDOWS\system32\Microsoft.Bluetooth.Audio.dll
2020-12-10 08:07 - 2020-12-10 08:07 - 000068896 _____ (Mellanox) C:\WINDOWS\system32\Drivers\winverbs.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000064288 _____ (Avago Technologies) C:\WINDOWS\system32\Drivers\percsas3i.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000062328 _____ (Microsoft Corporation) C:\WINDOWS\system32\msgsm32.acm
2020-12-10 08:07 - 2020-12-10 08:07 - 000061440 _____ C:\WINDOWS\system32\pospaymentsworker.exe
2020-12-10 08:07 - 2020-12-10 08:07 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrnsave.scr
2020-12-10 08:07 - 2020-12-10 08:07 - 000060192 _____ (Hewlett-Packard Company) C:\WINDOWS\system32\Drivers\HpSAMD.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000059680 _____ (Marvell Semiconductor, Inc.) C:\WINDOWS\system32\Drivers\mvumis.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000058192 _____ (Microsoft Corporation) C:\WINDOWS\system32\imaadp32.acm
2020-12-10 08:07 - 2020-12-10 08:07 - 000054560 _____ (Avago Technologies) C:\WINDOWS\system32\Drivers\percsas2i.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000053248 _____ C:\WINDOWS\system32\VhfUm.dll
2020-12-10 08:07 - 2020-12-10 08:07 - 000053248 _____ (Microsoft) C:\WINDOWS\system32\oflc-nz.rs
2020-12-10 08:07 - 2020-12-10 08:07 - 000053248 _____ (Microsoft) C:\WINDOWS\system32\csrr.rs
2020-12-10 08:07 - 2020-12-10 08:07 - 000053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msacm32.drv
2020-12-10 08:07 - 2020-12-10 08:07 - 000049928 _____ (Microsoft Corporation) C:\WINDOWS\system32\msadp32.acm
2020-12-10 08:07 - 2020-12-10 08:07 - 000049152 _____ (Microsoft) C:\WINDOWS\system32\fpb.rs
2020-12-10 08:07 - 2020-12-10 08:07 - 000046920 _____ C:\WINDOWS\system32\OutdoorAudioEnvironment.bin
2020-12-10 08:07 - 2020-12-10 08:07 - 000045568 _____ (Advanced Micro Devices, Inc) C:\WINDOWS\system32\Drivers\amdi2c.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000045056 _____ (Microsoft) C:\WINDOWS\system32\cero.rs
2020-12-10 08:07 - 2020-12-10 08:07 - 000041664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msg711.acm
2020-12-10 08:07 - 2020-12-10 08:07 - 000040960 _____ (Microsoft) C:\WINDOWS\system32\usk.rs
2020-12-10 08:07 - 2020-12-10 08:07 - 000040960 _____ (Microsoft) C:\WINDOWS\system32\esrb.rs
2020-12-10 08:07 - 2020-12-10 08:07 - 000040960 _____ (Microsoft) C:\WINDOWS\system32\cob-au.rs
2020-12-10 08:07 - 2020-12-10 08:07 - 000040736 _____ (Silicon Integrated Systems Corp.) C:\WINDOWS\system32\Drivers\sisraid2.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000038128 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaLPSSi_GPIO.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000036864 ____R (The ICU Project) C:\WINDOWS\system32\icuuc.dll
2020-12-10 08:07 - 2020-12-10 08:07 - 000036352 _____ (Intel(R) Corporation) C:\WINDOWS\system32\Drivers\iagpio.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000032768 ____R (The ICU Project) C:\WINDOWS\system32\icuin.dll
2020-12-10 08:07 - 2020-12-10 08:07 - 000032768 _____ C:\WINDOWS\system32\agentactivationruntimestarter.exe
2020-12-10 08:07 - 2020-12-10 08:07 - 000032032 _____ (Mellanox) C:\WINDOWS\system32\Drivers\winmad.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000028672 _____ (Microsoft) C:\WINDOWS\system32\pegi-pt.rs
2020-12-10 08:07 - 2020-12-10 08:07 - 000028672 _____ (Microsoft) C:\WINDOWS\system32\pegi.rs
2020-12-10 08:07 - 2020-12-10 08:07 - 000028672 _____ (Microsoft) C:\WINDOWS\system32\grb.rs
2020-12-10 08:07 - 2020-12-10 08:07 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\stdole2.tlb
2020-12-10 08:07 - 2020-12-10 08:07 - 000028672 _____ (Chelsio Communications) C:\WINDOWS\system32\Drivers\cht4vfx.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000026912 _____ (Promise Technology, Inc.) C:\WINDOWS\system32\Drivers\stexstor.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000024576 _____ (Microsoft) C:\WINDOWS\system32\pcbp.rs
2020-12-10 08:07 - 2020-12-10 08:07 - 000024576 _____ (Microsoft) C:\WINDOWS\system32\djctq.rs
2020-12-10 08:07 - 2020-12-10 08:07 - 000022816 _____ (Advanced Micro Devices) C:\WINDOWS\system32\Drivers\amdxata.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000018432 _____ (Advanced Micro Devices, Inc) C:\WINDOWS\system32\Drivers\amdgpio2.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000012288 _____ (Microsoft) C:\WINDOWS\system32\WEB.rs
2020-12-10 08:07 - 2020-12-10 08:07 - 000010576 _____ C:\WINDOWS\system32\TransformPPSToWlan.xslt
2020-12-10 08:07 - 2020-12-10 08:07 - 000009728 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\Drivers\bcmfn2.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000008192 _____ C:\WINDOWS\system32\settings.dat
2020-12-10 08:07 - 2020-12-10 08:07 - 000003164 _____ C:\WINDOWS\system32\AppxProvisioning.xml
2020-12-10 08:07 - 2020-12-10 08:07 - 000001688 _____ C:\WINDOWS\system32\TransformPPSToWlanCredentials.xslt
2020-12-10 08:07 - 2020-12-10 08:07 - 000001369 _____ C:\WINDOWS\system32\ThirdPartyNoticesBySHS.txt
2020-12-10 08:07 - 2020-12-10 08:07 - 000000646 _____ C:\WINDOWS\system32\Drivers\gmreadme.txt
2020-12-10 08:02 - 2021-01-03 15:01 - 078643200 _____ C:\WINDOWS\system32\config\SOFTWARE
2020-12-10 08:02 - 2021-01-03 15:01 - 017301504 _____ C:\WINDOWS\system32\config\SYSTEM
2020-12-10 08:02 - 2021-01-03 15:01 - 001310720 _____ C:\WINDOWS\system32\config\DEFAULT
2020-12-10 08:02 - 2021-01-03 15:01 - 000262144 _____ C:\WINDOWS\system32\config\BBI
2020-12-10 08:02 - 2021-01-03 15:01 - 000065536 _____ C:\WINDOWS\system32\config\SECURITY
2020-12-10 08:02 - 2021-01-03 15:01 - 000065536 _____ C:\WINDOWS\system32\config\SAM
2020-12-10 08:02 - 2020-12-18 13:01 - 000000000 ____D C:\WINDOWS\servicing
2020-12-10 08:02 - 2020-12-18 13:01 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-12-10 08:02 - 2020-12-18 12:55 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2020-12-10 08:02 - 2020-12-10 08:33 - 000000000 ____D C:\WINDOWS\system32\SMI
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2021-01-08 21:43 - 2016-11-18 17:20 - 000000000 ____D C:\Users\saullerist\AppData\Local\ConnectedDevicesPlatform
2021-01-08 21:41 - 2020-11-22 14:16 - 000000000 ____D C:\Program Files\CCleaner
2021-01-08 21:40 - 2020-10-06 12:16 - 000000000 ____D C:\Users\saullerist\AppData\LocalLow\Mozilla
2021-01-08 21:30 - 2019-01-30 16:22 - 000000000 ____D C:\ProgramData\Mozilla
2021-01-08 13:05 - 2018-06-23 15:09 - 000000000 ____D C:\Users\saullerist\AppData\Local\D3DSCache
2021-01-07 11:05 - 2020-10-13 21:40 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-01-07 11:04 - 2020-10-06 12:15 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2021-01-03 15:06 - 2016-11-28 17:10 - 006150574 _____ C:\WINDOWS\system32\perfh01B.dat
2021-01-03 15:06 - 2016-11-28 17:10 - 001828564 _____ C:\WINDOWS\system32\perfc01B.dat
2021-01-03 15:02 - 2020-02-21 11:41 - 000012288 ___SH C:\DumpStack.log.tmp
2021-01-03 14:52 - 2016-01-12 10:47 - 000000000 ___RD C:\Users\saullerist\Disk Google
2020-12-19 13:35 - 2020-05-06 19:08 - 000002451 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2020-12-18 12:58 - 2017-07-15 16:50 - 000000000 ___RD C:\Users\saullerist\3D Objects
2020-12-18 12:58 - 2016-01-05 16:03 - 000000000 __RHD C:\Users\Public\AccountPictures
2020-12-18 12:39 - 2017-10-18 09:41 - 000000000 ____D C:\Users\saullerist\AppData\Local\Packages
2020-12-18 12:37 - 2020-06-03 13:02 - 000000000 ____D C:\ProgramData\Package Cache
2020-12-18 12:37 - 2017-07-13 16:06 - 000000000 ____D C:\Program Files (x86)\ATI Technologies
2020-12-18 12:35 - 2016-01-06 00:47 - 000000000 ____D C:\AMD
2020-12-18 12:30 - 2020-09-26 17:15 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2020-12-18 12:29 - 2020-11-22 14:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2020-12-18 12:29 - 2020-08-01 09:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2020-12-18 12:29 - 2020-08-01 09:14 - 000000000 ____D C:\WINDOWS\system32\Macromed
2020-12-18 12:29 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2020-12-18 12:29 - 2017-07-07 14:16 - 000000000 ____D C:\Program Files\UNP
2020-12-18 12:29 - 2016-11-18 18:24 - 000000000 ____D C:\WINDOWS\system32\MRT
2020-12-18 11:51 - 2020-03-21 20:12 - 000000000 ___RD C:\WINDOWS\WebManagement
2020-12-18 11:50 - 2018-05-23 13:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FinalWire
2020-12-18 11:50 - 2017-07-13 16:05 - 000000000 ____D C:\Program Files\Synaptics
2020-12-18 11:50 - 2017-07-13 16:05 - 000000000 ____D C:\Program Files\Common Files\ATI Technologies
2020-12-18 11:50 - 2017-07-13 16:05 - 000000000 ____D C:\Program Files\AMD
2020-12-17 23:03 - 2016-11-28 16:54 - 133736600 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2020-12-17 20:59 - 2018-04-16 14:13 - 000000000 ____D C:\Users\saullerist\AppData\Local\ElevatedDiagnostics
2020-12-15 13:18 - 2018-06-04 18:58 - 000000000 ____D C:\Users\saullerist\AppData\Local\Google
==================== Files in the root of some directories ========
2020-02-26 20:13 - 2020-02-26 20:17 - 000000062 _____ () C:\Users\saullerist\AppData\Roaming\FalconX.cfg
2017-07-31 10:22 - 2017-07-31 10:22 - 000029696 _____ () C:\Users\saullerist\AppData\Local\MSGBOX.EXE
2017-10-18 09:16 - 2020-04-08 13:19 - 000007597 _____ () C:\Users\saullerist\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
prosím o kontrolu logu na keylogger a podobné veci.
AdwareCleaner nenašiel nič a FRST log som robil až po ňom.
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 05-01-2021
Ran by saullerist (administrator) on DESKTOP-3SMP07F (TOSHIBA Satellite L650) (08-01-2021 21:40:34)
Running from C:\Users\saullerist\Desktop
Loaded Profiles: saullerist
Platform: Windows 10 Home Version 2004 20279.1 (X64) Language: Slovenčina (Slovensko)
Default browser: FF
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Dynabook Inc. -> Dynabook Inc.) C:\Windows\System32\DriverStore\FileRepository\tossrvctl.inf_amd64_652655c5335c62da\DSDFunctionKeyCtlService.exe <2>
(Dynabook Inc. -> Dynabook Inc.) C:\Windows\System32\DriverStore\FileRepository\tossrvctl.inf_amd64_652655c5335c62da\dynabookSystemService.exe
(Dynabook Inc. -> Dynabook Inc.) C:\Windows\System32\DriverStore\FileRepository\tossrvctl.inf_amd64_652655c5335c62da\RMService.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.52\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.52\GoogleCrashHandler64.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe <55>
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12011.1001.1.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Windows -> ) C:\Windows\System32\AggregatorHost.exe
(Microsoft Windows -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Scans\MsMpEngCP.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\CredentialEnrollmentManager.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.20279.1_none_90c877b89342316e\TiWorker.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2011.6-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2011.6-0\NisSrv.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe <7>
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\steam.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
HKU\S-1-5-21-1796023744-1759536030-3900380101-1002\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [50010064 2020-11-03] (Google LLC -> )
HKU\S-1-5-21-1796023744-1759536030-3900380101-1002\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [32414392 2020-12-08] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-1796023744-1759536030-3900380101-1002\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3411232 2020-12-21] (Valve -> Valve Corporation)
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0348387B-4643-42E1-8829-2FEEBA6FAFAC} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [26896568 2020-12-08] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {06A812AE-5323-4342-B1EA-3DCF41D27001} - System32\Tasks\Agent Activation Runtime\S-1-5-21-1796023744-1759536030-3900380101-1002 => C:\WINDOWS\System32\AgentActivationRuntimeStarter.exe [32768 2020-12-10] (Microsoft Windows -> )
Task: {1047E825-BC15-4910-B698-64EB4CF7B260} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MpCmdRun.exe [545704 2020-11-20] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {4DA3F32C-CAE5-4618-95EA-A8743FEAA28E} - System32\Tasks\Microsoft\Windows\Shell\UpdateAgentTask_RemoveFOD => C:\WINDOWS\System32\ShellUpdateAgentTask.exe
Task: {592B68C5-94FA-4030-B47C-09892DA378AE} - System32\Tasks\Microsoft\Windows\Shell\ThemesSyncedImageDownload => {79F8E185-4E45-4B74-8182-02AA430661E4} C:\Windows\System32\Themes.SsfDownload.ScheduledTask.dll [245760 2020-12-10] (Microsoft Windows -> Microsoft Corporation)
Task: {6F87B0C7-EEA0-4F38-868A-D06BDBFBBD8A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MpCmdRun.exe [545704 2020-11-20] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {742A9E60-5AC3-467A-A1F5-3A9C9F5C2CB8} - System32\Tasks\Microsoft\Windows\Shell\UpdateAgentTask_SetCBSEndOfLife => C:\WINDOWS\System32\ShellUpdateAgentTask.exe
Task: {769BEB31-15CD-4B22-9149-9850590EE438} - System32\Tasks\Microsoft\Windows\Shell\UpdateAgentTask_AcquireFOD => C:\WINDOWS\System32\ShellUpdateAgentTask.exe
Task: {798DF91D-F240-419A-96F9-BE1CAE57BDA9} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MpCmdRun.exe [545704 2020-11-20] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {81C5BC77-FD07-42F3-81C8-99D9DD879647} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [693216 2021-01-07] (Mozilla Corporation -> Mozilla Foundation)
Task: {83CE6C76-3F28-489E-A7C6-794989F68298} - System32\Tasks\S-1-5-21-1796023744-1759536030-3900380101-1002\DataSenseLiveTileTask => C:\WINDOWS\System32\DataUsageLiveTileTask.exe
Task: {87876812-554A-47E6-A1CC-48BCC1406F56} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\UUS Failover Task => C:\WINDOWS\system32\failover.exe
Task: {B40F8511-B9B4-4F7B-9312-FC6DAA6B9F00} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155432 2019-11-01] (Google Inc -> Google LLC)
Task: {B91219DC-34E0-47A2-B494-6279369FA6B4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155432 2019-11-01] (Google Inc -> Google LLC)
Task: {CB0B6B17-3C30-4A50-AC4A-0D3442972629} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [686384 2020-12-08] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {CE4330EF-036E-4564-9532-A5CED048145E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MpCmdRun.exe [545704 2020-11-20] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {DCB6B88A-7EDE-48DD-80A7-832385E1711A} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\WINDOWS\System32\MbaeParserTask.exe
Task: {EFBE98E8-21EB-4BDB-BABF-3DCA57B3A10D} - System32\Tasks\Microsoft\Windows\Management\Provisioning\MdmDiagnosticsCleanup => C:\WINDOWS\system32\MdmDiagnosticsTool.exe [90112 2020-12-10] (Microsoft Windows -> Microsoft Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Winsock: Catalog5 04 C:\WINDOWS\SysWOW64\nlansp_c.dll [84480 2020-12-10] (Microsoft Windows -> Microsoft Corporation) ATTENTION: LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Winsock: Catalog5-x64 04 C:\Windows\system32\nlansp_c.dll [126976 2020-12-10] (Microsoft Windows -> Microsoft Corporation) ATTENTION: LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 195.146.128.62
Tcpip\..\Interfaces\{5c6459f7-5caf-472f-850f-576031683b95}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{5c6459f7-5caf-472f-850f-576031683b95}: [DhcpNameServer] 192.168.1.1 195.146.128.62
Tcpip\..\Interfaces\{6f775dc0-2278-405d-8f3d-3e457ae63af2}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{9dfcf0d8-e52f-4e05-8126-662ce4070db5}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{f8af2a01-6a97-4ec5-b189-b0d3323b1796}: [DhcpNameServer] 192.168.1.1 195.146.128.62
ManualProxies:
Edge:
======
DownloadDir: C:\Users\saullerist\Downloads
Edge DefaultProfile: Default
Edge Profile: C:\Users\saullerist\AppData\Local\Microsoft\Edge\User Data\Default [2021-01-08]
Edge DownloadDir: C:\Users\saullerist\Downloads
FireFox:
========
FF DefaultProfile: axn99qis.default
FF ProfilePath: C:\Users\saullerist\AppData\Roaming\Mozilla\Firefox\Profiles\axn99qis.default [2020-10-06]
FF ProfilePath: C:\Users\saullerist\AppData\Roaming\Mozilla\Firefox\Profiles\jtgg6ln9.default-release [2021-01-08]
FF DownloadDir: C:\Users\saullerist\Desktop
FF Homepage: Mozilla\Firefox\Profiles\jtgg6ln9.default-release -> www.google.sk
Chrome:
=======
CHR HKU\S-1-5-21-1796023744-1759536030-3900380101-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 DSDFunctionKeyCtlService; C:\WINDOWS\System32\DriverStore\FileRepository\tossrvctl.inf_amd64_652655c5335c62da\DSDFunctionKeyCtlService.exe [615768 2020-11-18] (Dynabook Inc. -> Dynabook Inc.)
S3 FrameServerMonitor; C:\WINDOWS\system32\FrameServerMonitor.dll [303104 2020-12-10] (Microsoft Windows -> Microsoft Corporation)
S3 McpManagementService; C:\WINDOWS\System32\McpManagementService.dll [290816 2020-12-10] (Microsoft Windows -> Microsoft Corporation)
R2 TSDSettingService; C:\WINDOWS\System32\DriverStore\FileRepository\tossrvctl.inf_amd64_652655c5335c62da\dynabookSystemService.exe [44767040 2020-11-18] (Dynabook Inc. -> Dynabook Inc.)
S2 TSDTabletControlService; C:\WINDOWS\System32\DriverStore\FileRepository\tossrvctl.inf_amd64_652655c5335c62da\TOSTABSYSSVC.exe [254792 2020-11-18] (Dynabook Inc. -> Dynabook Inc.)
R2 TSDWirelessLEDCtlService; C:\WINDOWS\System32\DriverStore\FileRepository\tossrvctl.inf_amd64_652655c5335c62da\RMService.exe [446240 2020-11-18] (Dynabook Inc. -> Dynabook Inc.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\NisSrv.exe [2491880 2020-11-20] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MsMpEng.exe [128376 2020-11-20] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 a016bus; C:\WINDOWS\System32\drivers\a016bus.sys [109096 2008-01-18] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 a016mgmt; C:\WINDOWS\System32\drivers\a016mgmt.sys [130600 2008-01-18] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 a016obex; C:\WINDOWS\System32\drivers\a016obex.sys [125480 2008-01-18] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
R3 FwLnk; C:\WINDOWS\System32\drivers\FwLnk.sys [9216 2009-07-07] (Microsoft Windows Hardware Compatibility Publisher -> TOSHIBA Corporation)
S3 HWHandSet; C:\WINDOWS\System32\drivers\hw_quusbmdm.sys [226560 2018-12-12] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
S3 hw_usbdev; C:\WINDOWS\System32\drivers\hw_usbdev.sys [116864 2018-12-12] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
R0 IntelPMT; C:\WINDOWS\System32\drivers\IntelPMT.sys [49472 2020-12-10] (Microsoft Windows Hardware Abstraction Layer Publisher -> Microsoft Corporation)
S3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [224408 2019-11-01] (Malwarebytes Corporation -> Malwarebytes)
S0 megasas35i; C:\WINDOWS\System32\drivers\megasas35i.sys [95008 2020-12-10] (Microsoft Windows -> Broadcom Inc)
S3 NDKPerf; C:\WINDOWS\System32\drivers\NDKPerf.sys [74016 2020-12-10] (Microsoft Windows -> )
S3 s0016bus; C:\WINDOWS\System32\drivers\s0016bus.sys [115240 2008-05-16] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s0016mgmt; C:\WINDOWS\System32\drivers\s0016mgmt.sys [137256 2008-05-16] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s0016obex; C:\WINDOWS\System32\drivers\s0016obex.sys [136744 2008-05-16] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s0016unic; C:\WINDOWS\System32\drivers\s0016unic.sys [151592 2008-05-16] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s0017bus; C:\WINDOWS\System32\drivers\s0017bus.sys [113704 2008-10-21] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s0017mgmt; C:\WINDOWS\System32\drivers\s0017mgmt.sys [133160 2008-10-21] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s0017obex; C:\WINDOWS\System32\drivers\s0017obex.sys [128552 2008-10-21] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s0017unic; C:\WINDOWS\System32\drivers\s0017unic.sys [145960 2008-10-21] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s1018bus; C:\WINDOWS\System32\drivers\s1018bus.sys [113704 2009-03-25] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s1018mgmt; C:\WINDOWS\System32\drivers\s1018mgmt.sys [133160 2009-03-25] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s1018obex; C:\WINDOWS\System32\drivers\s1018obex.sys [128552 2009-03-25] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s1018unic; C:\WINDOWS\System32\drivers\s1018unic.sys [146472 2009-03-25] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s1029bus; C:\WINDOWS\System32\drivers\s1029bus.sys [116264 2009-05-25] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s1029mgmt; C:\WINDOWS\System32\drivers\s1029mgmt.sys [139304 2009-05-25] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s1029obex; C:\WINDOWS\System32\drivers\s1029obex.sys [135208 2009-05-25] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s1029unic; C:\WINDOWS\System32\drivers\s1029unic.sys [151592 2009-05-25] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s1039mgmt; C:\WINDOWS\System32\drivers\s1039mgmt.sys [141424 2010-03-15] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s1039obex; C:\WINDOWS\System32\drivers\s1039obex.sys [137328 2010-03-15] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s1039unic; C:\WINDOWS\System32\drivers\s1039unic.sys [158320 2010-03-15] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s916bus; C:\WINDOWS\System32\drivers\s916bus.sys [108072 2007-11-02] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s916mgmt; C:\WINDOWS\System32\drivers\s916mgmt.sys [130088 2007-11-02] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 s916obex; C:\WINDOWS\System32\drivers\s916obex.sys [124968 2007-11-02] (Sony Ericsson Mobile Communications AB -> MCCI Corporation)
S3 se3ebus; C:\WINDOWS\System32\drivers\se3ebus.sys [107784 2007-04-10] (MCCI Corporation -> MCCI Corporation)
S3 se3emgmt; C:\WINDOWS\System32\drivers\se3emgmt.sys [126216 2007-04-10] (MCCI Corporation -> MCCI Corporation)
S3 se3eobex; C:\WINDOWS\System32\drivers\se3eobex.sys [123144 2007-04-10] (MCCI Corporation -> MCCI Corporation)
R3 Thotkey; C:\WINDOWS\System32\drivers\Thotkey.sys [47816 2020-07-21] (Dynabook Inc. -> Dynabook Inc.)
R1 TosSrvCtlDrv; C:\WINDOWS\System32\DriverStore\FileRepository\tossrvctl.inf_amd64_652655c5335c62da\TosSrvCtlDrv.sys [25832 2020-11-18] (Dynabook Inc. -> Dynabook Inc.)
R0 TVALZ_O; C:\WINDOWS\System32\drivers\TVALZ_O.SYS [46088 2019-04-30] (Dynabook Inc. -> Dynabook Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [48536 2020-11-20] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [429296 2020-11-20] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [70896 2020-11-20] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2021-01-08 21:40 - 2021-01-08 21:42 - 000018053 _____ C:\Users\saullerist\Desktop\FRST.txt
2021-01-08 21:39 - 2021-01-08 21:41 - 000000000 ____D C:\FRST
2021-01-08 21:33 - 2021-01-08 21:34 - 000000000 ____D C:\AdwCleaner
2021-01-08 21:32 - 2021-01-08 21:32 - 008447152 _____ (Malwarebytes) C:\Users\saullerist\Desktop\AdwCleaner.exe
2021-01-08 21:28 - 2021-01-08 21:28 - 002282496 _____ (Farbar) C:\Users\saullerist\Desktop\FRST64.exe
2021-01-08 21:28 - 2021-01-08 21:28 - 002086424 _____ (Malwarebytes) C:\Users\saullerist\Desktop\MBSetup.exe
2021-01-08 10:57 - 2021-01-08 10:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 7.0
2021-01-08 10:56 - 2021-01-08 10:57 - 000000000 ____D C:\Program Files\LibreOffice
2021-01-07 11:49 - 2021-01-07 11:49 - 000000000 ___HD C:\$WINDOWS.~BT
2021-01-07 11:05 - 2021-01-07 11:05 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-01-07 09:24 - 2021-01-07 11:04 - 000000000 ____D C:\Program Files\Mozilla Firefox
2021-01-05 19:03 - 2021-01-05 19:03 - 000000000 ____D C:\Users\saullerist\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2021-01-05 19:01 - 2021-01-05 19:01 - 000000000 ____D C:\Users\saullerist\AppData\Local\Steam
2021-01-05 18:58 - 2021-01-08 19:09 - 000000000 ____D C:\Program Files (x86)\Steam
2021-01-05 18:58 - 2021-01-05 18:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2020-12-18 13:04 - 2020-12-18 13:04 - 000000000 ____D C:\ProgramData\ATI
2020-12-18 13:02 - 2020-12-18 13:02 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2020-12-18 12:58 - 2020-12-18 12:58 - 000000020 ___SH C:\Users\saullerist\ntuser.ini
2020-12-18 12:55 - 2021-01-03 15:02 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-12-18 12:55 - 2020-12-20 09:53 - 000004210 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2020-12-18 12:55 - 2020-12-18 12:55 - 000003504 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2020-12-18 12:55 - 2020-12-18 12:55 - 000003384 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2020-12-18 12:55 - 2020-12-18 12:55 - 000003280 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2020-12-18 12:55 - 2020-12-18 12:55 - 000003160 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2020-12-18 12:55 - 2020-12-18 12:55 - 000002238 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC
2020-12-18 12:55 - 2020-12-18 12:55 - 000000000 ____D C:\WINDOWS\system32\Tasks\S-1-5-21-1796023744-1759536030-3900380101-1002
2020-12-18 12:55 - 2020-12-18 12:55 - 000000000 ____D C:\WINDOWS\system32\Tasks\Agent Activation Runtime
2020-12-18 12:54 - 2020-12-18 12:55 - 000011433 _____ C:\WINDOWS\diagwrn.xml
2020-12-18 12:54 - 2020-12-18 12:55 - 000011433 _____ C:\WINDOWS\diagerr.xml
2020-12-18 12:47 - 2021-01-03 15:06 - 008957458 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-12-18 12:38 - 2020-12-18 12:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2020-12-18 12:37 - 2020-12-18 12:58 - 000000000 ____D C:\Users\saullerist
2020-12-18 12:37 - 2020-12-18 12:37 - 000000000 ____D C:\Program Files\ATI Technologies
2020-12-18 12:37 - 2020-12-18 12:36 - 000000000 ____D C:\Users\saullerist\AppData\Roaming\ATI
2020-12-18 12:37 - 2020-12-18 12:36 - 000000000 ____D C:\Users\saullerist\AppData\Local\ATI
2020-12-18 12:36 - 2020-12-18 12:36 - 000000000 ____D C:\Users\Default\AppData\Roaming\ATI
2020-12-18 12:36 - 2020-12-18 12:36 - 000000000 ____D C:\Users\Default\AppData\Local\ATI
2020-12-18 12:36 - 2020-12-18 12:36 - 000000000 ____D C:\Users\Default User\AppData\Roaming\ATI
2020-12-18 12:36 - 2020-12-18 12:36 - 000000000 ____D C:\Users\Default User\AppData\Local\ATI
2020-12-18 12:30 - 2020-12-18 12:32 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2020-12-18 12:30 - 2020-12-18 12:31 - 000644656 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-12-18 11:49 - 2020-12-18 12:29 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2020-12-18 11:44 - 2020-12-18 11:49 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2020-12-18 11:33 - 2020-06-29 00:16 - 000076060 _____ C:\WINDOWS\SysWOW64\xpsrchvw.xml
2020-12-18 11:33 - 2020-06-20 14:28 - 000076060 _____ C:\WINDOWS\system32\xpsrchvw.xml
2020-12-18 11:28 - 2020-12-18 11:28 - 000000000 ____D C:\Program Files\Reference Assemblies
2020-12-18 11:28 - 2020-12-18 11:28 - 000000000 ____D C:\Program Files\MSBuild
2020-12-18 11:28 - 2020-12-18 11:28 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2020-12-18 11:28 - 2020-12-18 11:28 - 000000000 ____D C:\Program Files (x86)\MSBuild
2020-12-18 11:00 - 2020-12-18 11:00 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2020-12-16 20:41 - 2021-01-07 11:50 - 000000000 ___DC C:\WINDOWS\Panther
2020-12-15 13:18 - 2020-12-18 12:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Backup and Sync from Google
2020-12-15 13:18 - 2020-12-15 13:18 - 000000000 ____D C:\Program Files\Google
2020-12-10 13:39 - 2020-12-10 13:39 - 000020303 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2020-12-10 13:39 - 2020-12-10 13:39 - 000000000 ____D C:\WINDOWS\SysWOW64\FxsTmp
2020-12-10 13:39 - 2020-12-10 13:39 - 000000000 ____D C:\WINDOWS\system32\Hydrogen
2020-12-10 13:39 - 2020-12-10 13:39 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2020-12-10 13:39 - 2020-12-10 13:39 - 000000000 ____D C:\WINDOWS\addins
2020-12-10 13:39 - 2020-12-10 13:39 - 000000000 ____D C:\ProgramData\WindowsHolographicDevices
2020-12-10 13:39 - 2020-12-10 13:39 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2020-12-10 13:39 - 2020-12-10 13:39 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2020-12-10 13:39 - 2020-12-10 08:10 - 000023461 _____ C:\WINDOWS\Core.xml
2020-12-10 13:38 - 2020-12-10 13:38 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2020-12-10 13:38 - 2020-12-10 13:38 - 000000000 ____D C:\ProgramData\ssh
2020-12-10 13:38 - 2020-11-16 17:13 - 001687040 _____ C:\WINDOWS\system32\libcrypto.dll
2020-12-10 13:37 - 2020-12-10 13:37 - 000000000 ____D C:\WINDOWS\SysWOW64\MailContactsCalendarSync
2020-12-10 13:37 - 2020-12-10 13:37 - 000000000 ____D C:\WINDOWS\system32\MailContactsCalendarSync
2020-12-10 13:37 - 2020-12-10 13:37 - 000000000 ____D C:\WINDOWS\OCR
2020-12-10 13:36 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\SysWOW64\winrm
2020-12-10 13:36 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN
2020-12-10 13:36 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\SysWOW64\sysprep
2020-12-10 13:36 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\SysWOW64\slmgr
2020-12-10 13:36 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2020-12-10 13:36 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\SysWOW64\0409
2020-12-10 13:36 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\system32\winrm
2020-12-10 13:36 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\system32\WCN
2020-12-10 13:36 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\system32\slmgr
2020-12-10 13:36 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\system32\sk
2020-12-10 13:36 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2020-12-10 13:36 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\system32\0409
2020-12-10 13:36 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\DigitalLocker
2020-12-10 08:33 - 2020-12-10 08:33 - 000000000 _SHDL C:\Users\Default User
2020-12-10 08:33 - 2020-12-10 08:33 - 000000000 _SHDL C:\Users\All Users
2020-12-10 08:19 - 2020-12-18 11:46 - 000000000 ____D C:\WINDOWS\Setup
2020-12-10 08:15 - 2021-01-08 21:32 - 000000000 ___RD C:\Program Files (x86)
2020-12-10 08:15 - 2021-01-08 18:35 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-12-10 08:15 - 2021-01-07 22:40 - 000000000 ____D C:\WINDOWS\SystemTemp
2020-12-10 08:15 - 2021-01-06 11:43 - 000000000 ____D C:\WINDOWS\AppReadiness
2020-12-10 08:15 - 2020-12-30 15:21 - 000000000 ___HD C:\Program Files\WindowsApps
2020-12-10 08:15 - 2020-12-28 09:52 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2020-12-10 08:15 - 2020-12-20 09:53 - 000000000 ____D C:\WINDOWS\system32\NDF
2020-12-10 08:15 - 2020-12-19 13:20 - 000000000 ____D C:\WINDOWS\appcompat
2020-12-10 08:15 - 2020-12-18 13:16 - 000000000 ___RD C:\WINDOWS\PrintDialog
2020-12-10 08:15 - 2020-12-18 12:59 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2020-12-10 08:15 - 2020-12-18 12:56 - 000000000 ____D C:\WINDOWS\system32\oobe
2020-12-10 08:15 - 2020-12-18 12:55 - 000000000 ____D C:\Program Files\Windows Defender
2020-12-10 08:15 - 2020-12-18 12:30 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2020-12-10 08:15 - 2020-12-18 12:30 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2020-12-10 08:15 - 2020-12-18 12:29 - 000000000 ____D C:\WINDOWS\system32\spool
2020-12-10 08:15 - 2020-12-18 12:29 - 000000000 ____D C:\WINDOWS\ServiceState
2020-12-10 08:15 - 2020-12-18 12:29 - 000000000 ____D C:\WINDOWS\Registration
2020-12-10 08:15 - 2020-12-18 12:29 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2020-12-10 08:15 - 2020-12-18 11:57 - 000000000 ____D C:\ProgramData\USOPrivate
2020-12-10 08:15 - 2020-12-18 11:54 - 000000000 __RHD C:\Users\Public\Libraries
2020-12-10 08:15 - 2020-12-18 11:50 - 000000000 ____D C:\WINDOWS\Resources
2020-12-10 08:15 - 2020-12-18 11:50 - 000000000 ____D C:\WINDOWS\Help
2020-12-10 08:15 - 2020-12-18 11:38 - 000000000 ____D C:\WINDOWS\SystemResources
2020-12-10 08:15 - 2020-12-18 11:38 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2020-12-10 08:15 - 2020-12-10 13:39 - 000000000 ____D C:\WINDOWS\SystemApps
2020-12-10 08:15 - 2020-12-10 13:39 - 000000000 ____D C:\WINDOWS\system32\setup
2020-12-10 08:15 - 2020-12-10 13:39 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2020-12-10 08:15 - 2020-12-10 13:39 - 000000000 ____D C:\WINDOWS\ShellComponents
2020-12-10 08:15 - 2020-12-10 13:38 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ___SD C:\WINDOWS\system32\F12
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ___SD C:\WINDOWS\system32\dsc
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\system32\MUI
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\system32\migwiz
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\system32\Dism
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\system32\Com
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\IME
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ____D C:\WINDOWS\BrowserCore
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ____D C:\Program Files\Windows NT
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ____D C:\Program Files\Common Files\System
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ____D C:\Program Files (x86)\Windows NT
2020-12-10 08:15 - 2020-12-10 13:36 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2020-12-10 08:15 - 2020-12-10 08:33 - 000000000 __SHD C:\Program Files\Windows Sidebar
2020-12-10 08:15 - 2020-12-10 08:33 - 000000000 __SHD C:\Program Files (x86)\Windows Sidebar
2020-12-10 08:15 - 2020-12-10 08:33 - 000000000 ___SD C:\WINDOWS\SysWOW64\Configuration
2020-12-10 08:15 - 2020-12-10 08:33 - 000000000 ___SD C:\WINDOWS\system32\Configuration
2020-12-10 08:15 - 2020-12-10 08:33 - 000000000 ____D C:\WINDOWS\Web
2020-12-10 08:15 - 2020-12-10 08:33 - 000000000 ____D C:\WINDOWS\SysWOW64\SMI
2020-12-10 08:15 - 2020-12-10 08:33 - 000000000 ____D C:\WINDOWS\system32\winevt
2020-12-10 08:15 - 2020-12-10 08:33 - 000000000 ____D C:\WINDOWS\system32\ras
2020-12-10 08:15 - 2020-12-10 08:33 - 000000000 ____D C:\WINDOWS\system32\PointOfService
2020-12-10 08:15 - 2020-12-10 08:33 - 000000000 ____D C:\WINDOWS\SKB
2020-12-10 08:15 - 2020-12-10 08:33 - 000000000 ____D C:\WINDOWS\schemas
2020-12-10 08:15 - 2020-12-10 08:33 - 000000000 ____D C:\WINDOWS\security
2020-12-10 08:15 - 2020-12-10 08:33 - 000000000 ____D C:\WINDOWS\Provisioning
2020-12-10 08:15 - 2020-12-10 08:33 - 000000000 ____D C:\WINDOWS\PLA
2020-12-10 08:15 - 2020-12-10 08:33 - 000000000 ____D C:\WINDOWS\Media
2020-12-10 08:15 - 2020-12-10 08:33 - 000000000 ____D C:\WINDOWS\InputMethod
2020-12-10 08:15 - 2020-12-10 08:33 - 000000000 ____D C:\WINDOWS\IdentityCRL
2020-12-10 08:15 - 2020-12-10 08:33 - 000000000 ____D C:\WINDOWS\Globalization
2020-12-10 08:15 - 2020-12-10 08:33 - 000000000 ____D C:\WINDOWS\DiagTrack
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ___SD C:\WINDOWS\SysWOW64\Nui
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ___SD C:\WINDOWS\system32\UNP
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ___SD C:\WINDOWS\system32\Nui
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ___SD C:\WINDOWS\Downloaded Program Files
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ___RD C:\WINDOWS\Offline Web Pages
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ___HD C:\WINDOWS\LanguageOverlayCache
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\WUModels
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\WaaS
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\Vss
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\tracing
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\TAPI
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\SysWOW64\ras
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\SysWOW64\NDF
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\SysWOW64\Msdtc
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\SysWOW64\Keywords
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\SysWOW64\Ipmi
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\SysWOW64\InputMethod
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\SysWOW64\IME
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\SysWOW64\icsxml
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicyUsers
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\SysWOW64\downlevel
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\SysWOW64\Bthprops
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\SysWOW64\AppLocker
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\Sgrm
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\ProximityToast
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\Keywords
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\Ipmi
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\InputMethod
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\inetsrv
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\IME
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\icsxml
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\ias
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\DriverState
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\Drivers\DriverData
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\downlevel
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\DDFs
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\config\TxR
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\config\systemprofile
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\config\RegBack
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\config\Journal
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\Bthprops
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\appraiser
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\AppLocker
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\System
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\SchCache
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\ShellExperiences
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\rescache
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\Performance
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\ModemLogs
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\L2Schemas
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\GameBarPresenceWriter
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\Cursors
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\Containers
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\Branding
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\WINDOWS\bcastdvr
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\ProgramData\USOShared
2020-12-10 08:15 - 2020-12-10 08:15 - 000000000 ____D C:\Program Files\ModifiableWindowsApps
2020-12-10 08:15 - 2020-12-10 08:12 - 000215943 _____ C:\WINDOWS\SysWOW64\dssec.dat
2020-12-10 08:15 - 2020-12-10 08:12 - 000215943 _____ C:\WINDOWS\system32\dssec.dat
2020-12-10 08:15 - 2020-12-10 08:12 - 000003683 _____ C:\WINDOWS\system32\Drivers\etc\lmhosts.sam
2020-12-10 08:15 - 2020-12-10 08:12 - 000003103 _____ C:\WINDOWS\SysWOW64\mmc.exe.config
2020-12-10 08:15 - 2020-12-10 08:12 - 000003103 _____ C:\WINDOWS\system32\mmc.exe.config
2020-12-10 08:15 - 2020-12-10 08:12 - 000000858 _____ C:\WINDOWS\system32\DefaultQuestions.json
2020-12-10 08:15 - 2020-12-10 08:12 - 000000741 _____ C:\WINDOWS\SysWOW64\NOISE.DAT
2020-12-10 08:15 - 2020-12-10 08:12 - 000000741 _____ C:\WINDOWS\system32\NOISE.DAT
2020-12-10 08:13 - 2021-01-08 10:50 - 000000000 ____D C:\WINDOWS\INF
2020-12-10 08:10 - 2020-12-10 13:39 - 000557056 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr
2020-12-10 08:10 - 2020-12-10 13:39 - 000485376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr
2020-12-10 08:10 - 2020-12-10 13:39 - 000316640 _____ C:\WINDOWS\WMSysPr9.prx
2020-12-10 08:10 - 2020-12-10 13:39 - 000200704 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\WINDOWS\system32\l3codecp.acm
2020-12-10 08:10 - 2020-12-10 13:39 - 000192512 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\WINDOWS\SysWOW64\l3codecp.acm
2020-12-10 08:10 - 2020-12-10 13:39 - 000118784 _____ C:\WINDOWS\system32\VirtualMonitorManager.dll
2020-12-10 08:10 - 2020-12-10 13:39 - 000114688 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\WINDOWS\system32\l3codeca.acm
2020-12-10 08:10 - 2020-12-10 13:39 - 000070656 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\WINDOWS\SysWOW64\l3codeca.acm
2020-12-10 08:10 - 2020-12-10 08:10 - 000016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\rendezvousSession.tlb
2020-12-10 08:10 - 2020-12-10 08:10 - 000016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsraLegacy.tlb
2020-12-10 08:10 - 2020-12-10 08:10 - 000010429 _____ C:\WINDOWS\system32\ScavengeSpace.xml
2020-12-10 08:10 - 2020-12-10 08:10 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsraLegacy.tlb
2020-12-10 08:10 - 2020-12-10 08:10 - 000006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rendezvousSession.tlb
2020-12-10 08:10 - 2020-12-10 08:10 - 000002349 ___RS C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Immersive Control Panel.lnk
2020-12-10 08:10 - 2020-12-10 08:10 - 000001649 _____ C:\WINDOWS\SysWOW64\WindowsCodecsRaw.txt
2020-12-10 08:10 - 2020-12-10 08:10 - 000001649 _____ C:\WINDOWS\system32\WindowsCodecsRaw.txt
2020-12-10 08:10 - 2020-12-10 08:10 - 000001105 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-12-10 08:10 - 2020-12-10 08:10 - 000001105 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-12-10 08:10 - 2020-12-10 08:10 - 000000112 _____ C:\WINDOWS\SysWOW64\MixedRealityRuntime.json
2020-12-10 08:10 - 2020-12-10 08:10 - 000000112 _____ C:\WINDOWS\system32\MixedRealityRuntime.json
2020-12-10 08:09 - 2020-12-10 08:09 - 003860832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmpltfm.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 003408896 _____ C:\WINDOWS\system32\rdpnanoTransport.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 002764800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2020-12-10 08:09 - 2020-12-10 08:09 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2020-12-10 08:09 - 2020-12-10 08:09 - 001945888 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2020-12-10 08:09 - 2020-12-10 08:09 - 000980320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmpal.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000915296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmcodecs.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000839680 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\ir41_32original.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000831488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Bubbles.scr
2020-12-10 08:09 - 2020-12-10 08:09 - 000774144 _____ C:\WINDOWS\system32\FsNVSDeviceSource.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000749568 _____ (Microsoft Corporation) C:\WINDOWS\system32\TabletPC.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000746496 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\ir50_32original.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000745472 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhctrl.ocx
2020-12-10 08:09 - 2020-12-10 08:09 - 000732000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ortcengine.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000678112 _____ (SQLite Development Team) C:\WINDOWS\SysWOW64\winsqlite3.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000634880 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000581120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhctrl.ocx
2020-12-10 08:09 - 2020-12-10 08:09 - 000561152 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000518144 _____ C:\WINDOWS\SysWOW64\msjetoledb40.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000482816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000442368 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2020-12-10 08:09 - 2020-12-10 08:09 - 000434176 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmon.ocx
2020-12-10 08:09 - 2020-12-10 08:09 - 000429056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000421376 _____ (curl, hxxps://curl.haxx.se/) C:\WINDOWS\system32\curl.exe
2020-12-10 08:09 - 2020-12-10 08:09 - 000386560 _____ (curl, hxxps://curl.haxx.se/) C:\WINDOWS\SysWOW64\curl.exe
2020-12-10 08:09 - 2020-12-10 08:09 - 000374272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hdwwiz.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000352544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sysmon.ocx
2020-12-10 08:09 - 2020-12-10 08:09 - 000341504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2020-12-10 08:09 - 2020-12-10 08:09 - 000338432 _____ (Intel Corporation.) C:\WINDOWS\SysWOW64\ir41_qcxoriginal.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000327968 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpg2splt.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\unimdm.tsp
2020-12-10 08:09 - 2020-12-10 08:09 - 000302080 _____ C:\WINDOWS\SysWOW64\Windows.Internal.UI.Shell.WindowTabManager.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000300544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000282912 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSNP.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000254976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unimdm.tsp
2020-12-10 08:09 - 2020-12-10 08:09 - 000253952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ssText3d.scr
2020-12-10 08:09 - 2020-12-10 08:09 - 000251168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000245760 _____ (Microsoft Corporation) C:\WINDOWS\system32\powercfg.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000238880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mpg2splt.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\desk.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000214816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSNP.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000212992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bthprops.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000211938 _____ C:\WINDOWS\SysWOW64\lcphrase.tbl
2020-12-10 08:09 - 2020-12-10 08:09 - 000211938 _____ C:\WINDOWS\system32\lcphrase.tbl
2020-12-10 08:09 - 2020-12-10 08:09 - 000208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\powercfg.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000205088 _____ (Microsoft Corporation) C:\WINDOWS\system32\VBICodec.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000200192 _____ (Intel Corporation.) C:\WINDOWS\SysWOW64\ir50_qcoriginal.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000197632 _____ (Intel(R) Corporation) C:\WINDOWS\SysWOW64\ir32_32original.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000197632 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iac25_32.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000196608 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\DscCoreConfProv.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000195618 _____ C:\WINDOWS\system32\C_10002.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000188928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\intl.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000185344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\desk.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000183808 _____ (Intel Corporation.) C:\WINDOWS\SysWOW64\ir50_qcxoriginal.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000177698 _____ C:\WINDOWS\system32\C_10003.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Ribbons.scr
2020-12-10 08:09 - 2020-12-10 08:09 - 000176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Mystify.scr
2020-12-10 08:09 - 2020-12-10 08:09 - 000173602 _____ C:\WINDOWS\system32\C_10008.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000162850 _____ C:\WINDOWS\system32\C_10001.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000160544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VBICodec.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000160032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Kswdmcap.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000146944 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\ivfsrc.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000145622 _____ C:\WINDOWS\SysWOW64\devmgmt.msc
2020-12-10 08:09 - 2020-12-10 08:09 - 000145519 _____ C:\WINDOWS\SysWOW64\perfmon.msc
2020-12-10 08:09 - 2020-12-10 08:09 - 000145519 _____ C:\WINDOWS\system32\perfmon.msc
2020-12-10 08:09 - 2020-12-10 08:09 - 000145127 _____ C:\WINDOWS\SysWOW64\eventvwr.msc
2020-12-10 08:09 - 2020-12-10 08:09 - 000145127 _____ C:\WINDOWS\system32\eventvwr.msc
2020-12-10 08:09 - 2020-12-10 08:09 - 000144909 _____ C:\WINDOWS\SysWOW64\fsmgmt.msc
2020-12-10 08:09 - 2020-12-10 08:09 - 000143872 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\SysWOW64\DscCoreConfProv.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000135456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Mpeg2Data.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000135168 _____ C:\WINDOWS\system32\ResBParser.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000131360 _____ (Microsoft Corporation) C:\WINDOWS\system32\psisrndr.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000131360 _____ (Microsoft Corporation) C:\WINDOWS\system32\kstvtune.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000127264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSTPager.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000127264 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdaplgin.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\telephon.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000124118 _____ C:\WINDOWS\SysWOW64\comexp.msc
2020-12-10 08:09 - 2020-12-10 08:09 - 000122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\remotesp.tsp
2020-12-10 08:09 - 2020-12-10 08:09 - 000122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\joy.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000121632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Kswdmcap.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000120320 _____ (Intel Corporation.) C:\WINDOWS\SysWOW64\ir41_qcoriginal.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000115109 _____ C:\WINDOWS\SysWOW64\WF.msc
2020-12-10 08:09 - 2020-12-10 08:09 - 000113256 _____ C:\WINDOWS\SysWOW64\compmgmt.msc
2020-12-10 08:09 - 2020-12-10 08:09 - 000113256 _____ C:\WINDOWS\system32\compmgmt.msc
2020-12-10 08:09 - 2020-12-10 08:09 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\activeds.tlb
2020-12-10 08:09 - 2020-12-10 08:09 - 000110880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSDvbNP.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000110080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshom.ocx
2020-12-10 08:09 - 2020-12-10 08:09 - 000107520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\telephon.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2020-12-10 08:09 - 2020-12-10 08:09 - 000104960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000103936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscript.ocx
2020-12-10 08:09 - 2020-12-10 08:09 - 000102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqlsrv32.rll
2020-12-10 08:09 - 2020-12-10 08:09 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncpa.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\joy.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000096544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kstvtune.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000094496 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksxbar.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqlsrv32.rll
2020-12-10 08:09 - 2020-12-10 08:09 - 000093702 _____ C:\WINDOWS\SysWOW64\SubRange.uce
2020-12-10 08:09 - 2020-12-10 08:09 - 000093702 _____ C:\WINDOWS\system32\SubRange.uce
2020-12-10 08:09 - 2020-12-10 08:09 - 000092746 _____ C:\WINDOWS\SysWOW64\services.msc
2020-12-10 08:09 - 2020-12-10 08:09 - 000092746 _____ C:\WINDOWS\system32\services.msc
2020-12-10 08:09 - 2020-12-10 08:09 - 000092448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Mpeg2Data.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000090912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\psisrndr.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000090704 _____ C:\WINDOWS\system32\gatherNetworkInfo.vbs
2020-12-10 08:09 - 2020-12-10 08:09 - 000089888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bdaplgin.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000088064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remotesp.tsp
2020-12-10 08:09 - 2020-12-10 08:09 - 000086528 _____ (Radius Inc.) C:\WINDOWS\SysWOW64\iccvid.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000086016 _____ C:\WINDOWS\system32\BWContextHandler.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000084768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSTPager.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\g711codc.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2020-12-10 08:09 - 2020-12-10 08:09 - 000074016 _____ C:\WINDOWS\system32\Drivers\NDKPerf.sys
2020-12-10 08:09 - 2020-12-10 08:09 - 000071968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSDvbNP.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000069920 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbisurf.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000068608 _____ (Twain Working Group) C:\WINDOWS\twain_32.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_875.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_870.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_500.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_21027.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_21025.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20924.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20905.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20880.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20871.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20838.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20833.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20424.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20423.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20420.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20297.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20290.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20285.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20284.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20280.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20278.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20277.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20273.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20269.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20108.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20107.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20106.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_20105.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_1149.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_1148.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_1147.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_1146.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_1145.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_1144.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_1143.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_1142.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_1141.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_1140.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_1047.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_1026.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_10082.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_10081.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_10079.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_10029.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_10021.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_10017.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_10010.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_10007.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_10006.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_10005.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_10004.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_10000.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000066082 _____ C:\WINDOWS\system32\C_037.NLS
2020-12-10 08:09 - 2020-12-10 08:09 - 000065024 _____ C:\WINDOWS\SysWOW64\sstpcfg.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000063081 _____ C:\WINDOWS\SysWOW64\certlm.msc
2020-12-10 08:09 - 2020-12-10 08:09 - 000063081 _____ C:\WINDOWS\system32\certlm.msc
2020-12-10 08:09 - 2020-12-10 08:09 - 000063070 _____ C:\WINDOWS\SysWOW64\certmgr.msc
2020-12-10 08:09 - 2020-12-10 08:09 - 000063070 _____ C:\WINDOWS\system32\certmgr.msc
2020-12-10 08:09 - 2020-12-10 08:09 - 000061728 _____ C:\WINDOWS\system32\HvSocket.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000061728 _____ (Microsoft Corporation) C:\WINDOWS\system32\vidcap.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000061440 _____ C:\WINDOWS\system32\SpectrumSyncClient.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\irprops.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\hidphone.tsp
2020-12-10 08:09 - 2020-12-10 08:09 - 000060458 _____ C:\WINDOWS\SysWOW64\ideograf.uce
2020-12-10 08:09 - 2020-12-10 08:09 - 000060458 _____ C:\WINDOWS\system32\ideograf.uce
2020-12-10 08:09 - 2020-12-10 08:09 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\main.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000059680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksxbar.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000059554 _____ C:\WINDOWS\system32\srms.dat
2020-12-10 08:09 - 2020-12-10 08:09 - 000057344 _____ C:\WINDOWS\SysWOW64\BWContextHandler.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000055376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmmvrortc.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\g711codc.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000051712 _____ C:\WINDOWS\SysWOW64\CredProvCommonCore.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\more.com
2020-12-10 08:09 - 2020-12-10 08:09 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mode.com
2020-12-10 08:09 - 2020-12-10 08:09 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\format.com
2020-12-10 08:09 - 2020-12-10 08:09 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\cliconfg.rll
2020-12-10 08:09 - 2020-12-10 08:09 - 000043808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbisurf.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000041587 _____ C:\WINDOWS\SysWOW64\azman.msc
2020-12-10 08:09 - 2020-12-10 08:09 - 000041587 _____ C:\WINDOWS\system32\azman.msc
2020-12-10 08:09 - 2020-12-10 08:09 - 000041472 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\tree.com
2020-12-10 08:09 - 2020-12-10 08:09 - 000039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kmddsp.tsp
2020-12-10 08:09 - 2020-12-10 08:09 - 000037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cliconfg.rll
2020-12-10 08:09 - 2020-12-10 08:09 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\chcp.com
2020-12-10 08:09 - 2020-12-10 08:09 - 000033568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vidcap.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hidphone.tsp
2020-12-10 08:09 - 2020-12-10 08:09 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\irprops.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Firewall.cpl
2020-12-10 08:09 - 2020-12-10 08:09 - 000027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mode.com
2020-12-10 08:09 - 2020-12-10 08:09 - 000024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\more.com
2020-12-10 08:09 - 2020-12-10 08:09 - 000024114 _____ C:\WINDOWS\SysWOW64\lcptr.tbl
2020-12-10 08:09 - 2020-12-10 08:09 - 000024114 _____ C:\WINDOWS\system32\lcptr.tbl
2020-12-10 08:09 - 2020-12-10 08:09 - 000024006 _____ C:\WINDOWS\SysWOW64\gb2312.uce
2020-12-10 08:09 - 2020-12-10 08:09 - 000024006 _____ C:\WINDOWS\system32\gb2312.uce
2020-12-10 08:09 - 2020-12-10 08:09 - 000022984 _____ C:\WINDOWS\SysWOW64\bopomofo.uce
2020-12-10 08:09 - 2020-12-10 08:09 - 000022984 _____ C:\WINDOWS\system32\bopomofo.uce
2020-12-10 08:09 - 2020-12-10 08:09 - 000021656 _____ C:\WINDOWS\system32\NetTrace.PLA.Diagnostics.xml
2020-12-10 08:09 - 2020-12-10 08:09 - 000020268 _____ C:\WINDOWS\system32\DeliveryOptimizationMIProv.mof
2020-12-10 08:09 - 2020-12-10 08:09 - 000019485 _____ C:\WINDOWS\SysWOW64\srms-apr.dat
2020-12-10 08:09 - 2020-12-10 08:09 - 000019485 _____ C:\WINDOWS\system32\srms-apr.dat
2020-12-10 08:09 - 2020-12-10 08:09 - 000019456 _____ C:\WINDOWS\SysWOW64\WsdProviderUtil.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000017935 _____ C:\WINDOWS\SysWOW64\EventViewer_EventDetails.xsl
2020-12-10 08:09 - 2020-12-10 08:09 - 000017935 _____ C:\WINDOWS\system32\EventViewer_EventDetails.xsl
2020-12-10 08:09 - 2020-12-10 08:09 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tree.com
2020-12-10 08:09 - 2020-12-10 08:09 - 000016740 _____ C:\WINDOWS\SysWOW64\ShiftJIS.uce
2020-12-10 08:09 - 2020-12-10 08:09 - 000016740 _____ C:\WINDOWS\system32\ShiftJIS.uce
2020-12-10 08:09 - 2020-12-10 08:09 - 000016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\simpdata.tlb
2020-12-10 08:09 - 2020-12-10 08:09 - 000013824 _____ C:\WINDOWS\SysWOW64\prxyqry.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000012876 _____ C:\WINDOWS\SysWOW64\korean.uce
2020-12-10 08:09 - 2020-12-10 08:09 - 000012876 _____ C:\WINDOWS\system32\korean.uce
2020-12-10 08:09 - 2020-12-10 08:09 - 000012826 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2020-12-10 08:09 - 2020-12-10 08:09 - 000012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\chcp.com
2020-12-10 08:09 - 2020-12-10 08:09 - 000012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdatsrc.tlb
2020-12-10 08:09 - 2020-12-10 08:09 - 000011292 _____ C:\WINDOWS\SysWOW64\srms-apr-v.dat
2020-12-10 08:09 - 2020-12-10 08:09 - 000011292 _____ C:\WINDOWS\system32\srms-apr-v.dat
2020-12-10 08:09 - 2020-12-10 08:09 - 000009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ir41_32.ax
2020-12-10 08:09 - 2020-12-10 08:09 - 000009432 _____ C:\WINDOWS\system32\ResPriUHMImageList
2020-12-10 08:09 - 2020-12-10 08:09 - 000009432 _____ C:\WINDOWS\system32\ResPriHMImageList
2020-12-10 08:09 - 2020-12-10 08:09 - 000009427 _____ C:\WINDOWS\system32\ResPriImageList
2020-12-10 08:09 - 2020-12-10 08:09 - 000009196 _____ C:\WINDOWS\system32\ResPriHMImageListLowCost
2020-12-10 08:09 - 2020-12-10 08:09 - 000008945 _____ C:\WINDOWS\system32\ResPriLMImageList
2020-12-10 08:09 - 2020-12-10 08:09 - 000008690 _____ C:\WINDOWS\system32\ResPriImageListLowCost
2020-12-10 08:09 - 2020-12-10 08:09 - 000008484 _____ C:\WINDOWS\SysWOW64\kanji_2.uce
2020-12-10 08:09 - 2020-12-10 08:09 - 000008484 _____ C:\WINDOWS\system32\kanji_2.uce
2020-12-10 08:09 - 2020-12-10 08:09 - 000008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\simpdata.tlb
2020-12-10 08:09 - 2020-12-10 08:09 - 000007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stdole32.tlb
2020-12-10 08:09 - 2020-12-10 08:09 - 000006948 _____ C:\WINDOWS\SysWOW64\kanji_1.uce
2020-12-10 08:09 - 2020-12-10 08:09 - 000006948 _____ C:\WINDOWS\system32\kanji_1.uce
2020-12-10 08:09 - 2020-12-10 08:09 - 000006656 _____ C:\WINDOWS\SysWOW64\nrtapi.dll
2020-12-10 08:09 - 2020-12-10 08:09 - 000005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdatsrc.tlb
2020-12-10 08:09 - 2020-12-10 08:09 - 000004453 _____ C:\WINDOWS\SysWOW64\odbcconf.rsp
2020-12-10 08:09 - 2020-12-10 08:09 - 000004014 _____ C:\WINDOWS\SysWOW64\xwizard.dtd
2020-12-10 08:09 - 2020-12-10 08:09 - 000004014 _____ C:\WINDOWS\system32\xwizard.dtd
2020-12-10 08:09 - 2020-12-10 08:09 - 000003666 _____ C:\WINDOWS\SysWOW64\sysprtj.sep
2020-12-10 08:09 - 2020-12-10 08:09 - 000003660 _____ C:\WINDOWS\system32\WwanFeatureTests.xml
2020-12-10 08:09 - 2020-12-10 08:09 - 000003317 _____ C:\WINDOWS\SysWOW64\sysprint.sep
2020-12-10 08:09 - 2020-12-10 08:09 - 000002404 _____ C:\WINDOWS\SysWOW64\WimBootCompress.ini
2020-12-10 08:09 - 2020-12-10 08:09 - 000002233 _____ C:\WINDOWS\SysWOW64\12520850.cpx
2020-12-10 08:09 - 2020-12-10 08:09 - 000002151 _____ C:\WINDOWS\SysWOW64\12520437.cpx
2020-12-10 08:09 - 2020-12-10 08:09 - 000002044 _____ C:\WINDOWS\system32\DeliveryOptimizationMIProvUninstall.mof
2020-12-10 08:09 - 2020-12-10 08:09 - 000001820 _____ C:\WINDOWS\SysWOW64\rasctrnm.h
2020-12-10 08:09 - 2020-12-10 08:09 - 000001673 _____ C:\WINDOWS\SysWOW64\tcpbidi.xml
2020-12-10 08:09 - 2020-12-10 08:09 - 000000714 _____ C:\WINDOWS\SysWOW64\RestartManager.mof
2020-12-10 08:09 - 2020-12-10 08:09 - 000000565 _____ C:\WINDOWS\SysWOW64\NdfEventView.xml
2020-12-10 08:09 - 2020-12-10 08:09 - 000000565 _____ C:\WINDOWS\system32\NdfEventView.xml
2020-12-10 08:09 - 2020-12-10 08:09 - 000000263 _____ C:\WINDOWS\system32\odbcconf.rsp
2020-12-10 08:09 - 2020-12-10 08:09 - 000000176 _____ C:\WINDOWS\SysWOW64\RestartManagerUninstall.mof
2020-12-10 08:09 - 2020-12-10 08:09 - 000000150 _____ C:\WINDOWS\SysWOW64\pcl.sep
2020-12-10 08:09 - 2020-12-10 08:09 - 000000051 _____ C:\WINDOWS\SysWOW64\pscript.sep
2020-12-10 08:08 - 2020-12-10 08:08 - 004898144 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmpltfm.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 003602432 _____ C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.Analysis.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 003440660 _____ C:\WINDOWS\SysWOW64\Drivers\gm.dls
2020-12-10 08:08 - 2020-12-10 08:08 - 003170304 _____ C:\WINDOWS\SysWOW64\boot.sdi
2020-12-10 08:08 - 2020-12-10 08:08 - 003170304 _____ C:\WINDOWS\system32\boot.sdi
2020-12-10 08:08 - 2020-12-10 08:08 - 002470000 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2020-12-10 08:08 - 2020-12-10 08:08 - 002142208 _____ C:\WINDOWS\system32\dwmscene.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 002030400 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2020-12-10 08:08 - 2020-12-10 08:08 - 001989992 ____R (The ICU Project) C:\WINDOWS\SysWOW64\icu.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 001989120 _____ (Digimarc) C:\WINDOWS\SysWOW64\DMRCDecoder.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 001528832 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 001354080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmpal.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 001263312 _____ C:\WINDOWS\SysWOW64\WindowManagementAPI.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 001091936 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmcodecs.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 001032544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ortcengine.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000897584 _____ (SQLite Development Team) C:\WINDOWS\system32\winsqlite3.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000819512 _____ C:\WINDOWS\SysWOW64\locale.nls
2020-12-10 08:08 - 2020-12-10 08:08 - 000819512 _____ C:\WINDOWS\system32\locale.nls
2020-12-10 08:08 - 2020-12-10 08:08 - 000673088 _____ C:\WINDOWS\SysWOW64\mlang.dat
2020-12-10 08:08 - 2020-12-10 08:08 - 000673088 _____ C:\WINDOWS\system32\mlang.dat
2020-12-10 08:08 - 2020-12-10 08:08 - 000613016 _____ C:\WINDOWS\SysWOW64\TextShaping.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000461824 _____ C:\WINDOWS\SysWOW64\SettingSyncDownloadHelper.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000447488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2020-12-10 08:08 - 2020-12-10 08:08 - 000405504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl
2020-12-10 08:08 - 2020-12-10 08:08 - 000405504 _____ (Microsoft Corporation) C:\WINDOWS\system32\hdwwiz.cpl
2020-12-10 08:08 - 2020-12-10 08:08 - 000364544 _____ C:\WINDOWS\system32\Windows.Internal.UI.Shell.WindowTabManager.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000345088 _____ C:\WINDOWS\SysWOW64\ssdm.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000323584 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2020-12-10 08:08 - 2020-12-10 08:08 - 000294912 _____ C:\WINDOWS\system32\pnpdiag.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthprops.cpl
2020-12-10 08:08 - 2020-12-10 08:08 - 000262656 _____ C:\WINDOWS\SysWOW64\HeatCore.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\intl.cpl
2020-12-10 08:08 - 2020-12-10 08:08 - 000246048 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000233984 _____ C:\WINDOWS\SysWOW64\CoreMas.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000221184 _____ C:\WINDOWS\system32\AggregatorHost.exe
2020-12-10 08:08 - 2020-12-10 08:08 - 000217600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdmaud.drv
2020-12-10 08:08 - 2020-12-10 08:08 - 000208896 _____ C:\WINDOWS\system32\BthpanContextHandler.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000204074 _____ C:\WINDOWS\SysWOW64\winrm.vbs
2020-12-10 08:08 - 2020-12-10 08:08 - 000204074 _____ C:\WINDOWS\system32\winrm.vbs
2020-12-10 08:08 - 2020-12-10 08:08 - 000196642 _____ C:\WINDOWS\system32\C_950.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000196642 _____ C:\WINDOWS\system32\C_949.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000196642 _____ C:\WINDOWS\system32\C_936.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000189986 _____ C:\WINDOWS\system32\C_1361.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000187938 _____ C:\WINDOWS\system32\C_20005.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000186402 _____ C:\WINDOWS\system32\C_20001.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000185378 _____ C:\WINDOWS\system32\C_20003.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000180770 _____ C:\WINDOWS\system32\C_20932.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000180258 _____ C:\WINDOWS\system32\C_20004.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000180258 _____ C:\WINDOWS\system32\C_20000.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000177698 _____ C:\WINDOWS\system32\C_20949.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000175104 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2020-12-10 08:08 - 2020-12-10 08:08 - 000174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\timedate.cpl
2020-12-10 08:08 - 2020-12-10 08:08 - 000173602 _____ C:\WINDOWS\system32\C_20936.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000173602 _____ C:\WINDOWS\system32\C_20002.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysdm.cpl
2020-12-10 08:08 - 2020-12-10 08:08 - 000167640 _____ C:\WINDOWS\SysWOW64\chs_singlechar_pinyin.dat
2020-12-10 08:08 - 2020-12-10 08:08 - 000162850 _____ C:\WINDOWS\system32\C_932.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmview.ocx
2020-12-10 08:08 - 2020-12-10 08:08 - 000151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx
2020-12-10 08:08 - 2020-12-10 08:08 - 000147744 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2020-12-10 08:08 - 2020-12-10 08:08 - 000145622 _____ C:\WINDOWS\system32\devmgmt.msc
2020-12-10 08:08 - 2020-12-10 08:08 - 000145059 _____ C:\WINDOWS\SysWOW64\taskschd.msc
2020-12-10 08:08 - 2020-12-10 08:08 - 000145059 _____ C:\WINDOWS\system32\taskschd.msc
2020-12-10 08:08 - 2020-12-10 08:08 - 000144998 _____ C:\WINDOWS\SysWOW64\lusrmgr.msc
2020-12-10 08:08 - 2020-12-10 08:08 - 000144998 _____ C:\WINDOWS\system32\lusrmgr.msc
2020-12-10 08:08 - 2020-12-10 08:08 - 000144909 _____ C:\WINDOWS\system32\fsmgmt.msc
2020-12-10 08:08 - 2020-12-10 08:08 - 000144862 _____ C:\WINDOWS\SysWOW64\tpm.msc
2020-12-10 08:08 - 2020-12-10 08:08 - 000142904 _____ C:\WINDOWS\SysWOW64\slmgr.vbs
2020-12-10 08:08 - 2020-12-10 08:08 - 000142904 _____ C:\WINDOWS\system32\slmgr.vbs
2020-12-10 08:08 - 2020-12-10 08:08 - 000139810 _____ C:\WINDOWS\system32\C_20261.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000124118 _____ C:\WINDOWS\system32\comexp.msc
2020-12-10 08:08 - 2020-12-10 08:08 - 000122880 _____ C:\WINDOWS\system32\UpdatePolicyScenarioReliabilityAggregator.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncpa.cpl
2020-12-10 08:08 - 2020-12-10 08:08 - 000122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\activeds.tlb
2020-12-10 08:08 - 2020-12-10 08:08 - 000121344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sysdm.cpl
2020-12-10 08:08 - 2020-12-10 08:08 - 000118272 _____ C:\WINDOWS\SysWOW64\WindowsDefaultHeatProcessor.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000115109 _____ C:\WINDOWS\system32\WF.msc
2020-12-10 08:08 - 2020-12-10 08:08 - 000113664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmview.ocx
2020-12-10 08:08 - 2020-12-10 08:08 - 000110592 _____ C:\WINDOWS\system32\UpdateHeartbeatScan.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\main.cpl
2020-12-10 08:08 - 2020-12-10 08:08 - 000094208 _____ C:\WINDOWS\system32\sstpcfg.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000094208 _____ C:\WINDOWS\system32\runexehelper.exe
2020-12-10 08:08 - 2020-12-10 08:08 - 000086016 _____ C:\WINDOWS\system32\printticketvalidation.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000086016 _____ C:\WINDOWS\system32\Drivers\UsbPmApi.sys
2020-12-10 08:08 - 2020-12-10 08:08 - 000086016 _____ C:\WINDOWS\system32\CredProvCommonCore.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000084948 _____ C:\WINDOWS\system32\DiskSnapshot.conf
2020-12-10 08:08 - 2020-12-10 08:08 - 000081870 _____ C:\WINDOWS\system32\normidna.nls
2020-12-10 08:08 - 2020-12-10 08:08 - 000079348 _____ C:\WINDOWS\system32\normnfkc.nls
2020-12-10 08:08 - 2020-12-10 08:08 - 000076288 _____ C:\WINDOWS\SysWOW64\xboxgipsynthetic.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000073114 _____ C:\WINDOWS\system32\normnfkd.nls
2020-12-10 08:08 - 2020-12-10 08:08 - 000069632 _____ C:\WINDOWS\system32\UsbPmApi.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\kmddsp.tsp
2020-12-10 08:08 - 2020-12-10 08:08 - 000069632 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000066594 _____ C:\WINDOWS\system32\C_874.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066594 _____ C:\WINDOWS\system32\C_869.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066594 _____ C:\WINDOWS\system32\C_866.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066594 _____ C:\WINDOWS\system32\C_865.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066594 _____ C:\WINDOWS\system32\C_864.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066594 _____ C:\WINDOWS\system32\C_863.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066594 _____ C:\WINDOWS\system32\C_862.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066594 _____ C:\WINDOWS\system32\C_861.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066594 _____ C:\WINDOWS\system32\C_860.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066594 _____ C:\WINDOWS\system32\C_858.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066594 _____ C:\WINDOWS\system32\C_857.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066594 _____ C:\WINDOWS\system32\C_855.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066594 _____ C:\WINDOWS\system32\C_852.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066594 _____ C:\WINDOWS\system32\C_850.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066594 _____ C:\WINDOWS\system32\C_775.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066594 _____ C:\WINDOWS\system32\C_737.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066594 _____ C:\WINDOWS\system32\C_720.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066594 _____ C:\WINDOWS\system32\C_437.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_708.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_28605.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\c_28603.nls
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_28599.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_28598.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_28597.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_28596.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_28595.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_28594.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_28593.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_28592.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_28591.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_21866.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_20866.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_20127.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_1258.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_1257.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_1256.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_1255.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_1254.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_1253.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_1252.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_1251.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000066082 _____ C:\WINDOWS\system32\C_1250.NLS
2020-12-10 08:08 - 2020-12-10 08:08 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\format.com
2020-12-10 08:08 - 2020-12-10 08:08 - 000061440 _____ C:\WINDOWS\SysWOW64\WwanPrfl.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000060124 _____ C:\WINDOWS\system32\tcpmon.ini
2020-12-10 08:08 - 2020-12-10 08:08 - 000057136 _____ C:\WINDOWS\system32\normnfc.nls
2020-12-10 08:08 - 2020-12-10 08:08 - 000056672 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmmvrortc.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000053248 _____ C:\WINDOWS\system32\usocoreps.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000053248 _____ C:\WINDOWS\system32\deploymentcsphelper.exe
2020-12-10 08:08 - 2020-12-10 08:08 - 000050442 _____ C:\WINDOWS\system32\normnfd.nls
2020-12-10 08:08 - 2020-12-10 08:08 - 000050176 _____ C:\WINDOWS\SysWOW64\windows.applicationmodel.conversationalagent.proxystub.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000047682 _____ C:\WINDOWS\SysWOW64\diskmgmt.msc
2020-12-10 08:08 - 2020-12-10 08:08 - 000047682 _____ C:\WINDOWS\system32\diskmgmt.msc
2020-12-10 08:08 - 2020-12-10 08:08 - 000045568 _____ (Microsoft) C:\WINDOWS\SysWOW64\oflc-nz.rs
2020-12-10 08:08 - 2020-12-10 08:08 - 000043520 _____ (Microsoft) C:\WINDOWS\SysWOW64\csrr.rs
2020-12-10 08:08 - 2020-12-10 08:08 - 000043131 _____ C:\WINDOWS\mib.bin
2020-12-10 08:08 - 2020-12-10 08:08 - 000041472 _____ (Microsoft) C:\WINDOWS\SysWOW64\fpb.rs
2020-12-10 08:08 - 2020-12-10 08:08 - 000040960 _____ C:\WINDOWS\system32\WsdProviderUtil.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000040960 _____ C:\WINDOWS\system32\prxyqry.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000040448 _____ C:\WINDOWS\SysWOW64\windows.applicationmodel.conversationalagent.internal.proxystub.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000036864 _____ C:\WINDOWS\system32\umpodev.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000034816 _____ (Microsoft) C:\WINDOWS\SysWOW64\cero.rs
2020-12-10 08:08 - 2020-12-10 08:08 - 000033792 _____ (Microsoft) C:\WINDOWS\SysWOW64\esrb.rs
2020-12-10 08:08 - 2020-12-10 08:08 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrnsave.scr
2020-12-10 08:08 - 2020-12-10 08:08 - 000031232 _____ (Microsoft) C:\WINDOWS\SysWOW64\usk.rs
2020-12-10 08:08 - 2020-12-10 08:08 - 000030984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msgsm32.acm
2020-12-10 08:08 - 2020-12-10 08:08 - 000030720 _____ (Microsoft) C:\WINDOWS\SysWOW64\cob-au.rs
2020-12-10 08:08 - 2020-12-10 08:08 - 000030664 _____ C:\WINDOWS\system32\NarratorControlTemplates.xml
2020-12-10 08:08 - 2020-12-10 08:08 - 000029184 ____R (The ICU Project) C:\WINDOWS\SysWOW64\icuuc.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctfime.ime
2020-12-10 08:08 - 2020-12-10 08:08 - 000026344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imaadp32.acm
2020-12-10 08:08 - 2020-12-10 08:08 - 000026304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msadp32.acm
2020-12-10 08:08 - 2020-12-10 08:08 - 000024576 ____R (The ICU Project) C:\WINDOWS\SysWOW64\icuin.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000024576 _____ C:\WINDOWS\system32\nrtapi.dll
2020-12-10 08:08 - 2020-12-10 08:08 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msacm32.drv
2020-12-10 08:08 - 2020-12-10 08:08 - 000020992 _____ (Microsoft) C:\WINDOWS\SysWOW64\pegi-pt.rs
2020-12-10 08:08 - 2020-12-10 08:08 - 000020480 _____ (Microsoft) C:\WINDOWS\SysWOW64\pegi.rs
2020-12-10 08:08 - 2020-12-10 08:08 - 000019456 _____ (Microsoft) C:\WINDOWS\SysWOW64\grb.rs
2020-12-10 08:08 - 2020-12-10 08:08 - 000019104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msg711.acm
2020-12-10 08:08 - 2020-12-10 08:08 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stdole2.tlb
2020-12-10 08:08 - 2020-12-10 08:08 - 000015360 _____ (Microsoft) C:\WINDOWS\SysWOW64\pcbp.rs
2020-12-10 08:08 - 2020-12-10 08:08 - 000015360 _____ (Microsoft) C:\WINDOWS\SysWOW64\djctq.rs
2020-12-10 08:08 - 2020-12-10 08:08 - 000013091 _____ C:\WINDOWS\system32\DevModeRunAsUserConfig.msc
2020-12-10 08:08 - 2020-12-10 08:08 - 000011776 _____ C:\WINDOWS\SysWOW64\agentactivationruntimestarter.exe
2020-12-10 08:08 - 2020-12-10 08:08 - 000009926 _____ C:\WINDOWS\SysWOW64\l_intl.nls
2020-12-10 08:08 - 2020-12-10 08:08 - 000009926 _____ C:\WINDOWS\system32\l_intl.nls
2020-12-10 08:08 - 2020-12-10 08:08 - 000009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctfime.ime
2020-12-10 08:08 - 2020-12-10 08:08 - 000007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\stdole32.tlb
2020-12-10 08:08 - 2020-12-10 08:08 - 000004675 _____ C:\WINDOWS\SysWOW64\wsmanconfig_schema.xml
2020-12-10 08:08 - 2020-12-10 08:08 - 000004675 _____ C:\WINDOWS\system32\wsmanconfig_schema.xml
2020-12-10 08:08 - 2020-12-10 08:08 - 000004608 _____ (Microsoft) C:\WINDOWS\SysWOW64\WEB.rs
2020-12-10 08:08 - 2020-12-10 08:08 - 000004148 _____ C:\WINDOWS\system32\psmodulediscoveryprovider.mof
2020-12-10 08:08 - 2020-12-10 08:08 - 000003944 _____ C:\WINDOWS\system32\DetailedReading-Default.xml
2020-12-10 08:08 - 2020-12-10 08:08 - 000003666 _____ C:\WINDOWS\system32\sysprtj.sep
2020-12-10 08:08 - 2020-12-10 08:08 - 000003317 _____ C:\WINDOWS\system32\sysprint.sep
2020-12-10 08:08 - 2020-12-10 08:08 - 000003164 _____ C:\WINDOWS\SysWOW64\AppxProvisioning.xml
2020-12-10 08:08 - 2020-12-10 08:08 - 000002426 _____ C:\WINDOWS\SysWOW64\WsmTxt.xsl
2020-12-10 08:08 - 2020-12-10 08:08 - 000002426 _____ C:\WINDOWS\system32\WsmTxt.xsl
2020-12-10 08:08 - 2020-12-10 08:08 - 000002404 _____ C:\WINDOWS\system32\WimBootCompress.ini
2020-12-10 08:08 - 2020-12-10 08:08 - 000001820 _____ C:\WINDOWS\system32\rasctrnm.h
2020-12-10 08:08 - 2020-12-10 08:08 - 000001673 _____ C:\WINDOWS\system32\tcpbidi.xml
2020-12-10 08:08 - 2020-12-10 08:08 - 000001559 _____ C:\WINDOWS\SysWOW64\WsmPty.xsl
2020-12-10 08:08 - 2020-12-10 08:08 - 000001559 _____ C:\WINDOWS\system32\WsmPty.xsl
2020-12-10 08:08 - 2020-12-10 08:08 - 000000724 _____ C:\WINDOWS\system32\wpr.config.xml
2020-12-10 08:08 - 2020-12-10 08:08 - 000000714 _____ C:\WINDOWS\system32\RestartManager.mof
2020-12-10 08:08 - 2020-12-10 08:08 - 000000670 ___RH C:\WINDOWS\WindowsShell.Manifest
2020-12-10 08:08 - 2020-12-10 08:08 - 000000646 _____ C:\WINDOWS\SysWOW64\Drivers\gmreadme.txt
2020-12-10 08:08 - 2020-12-10 08:08 - 000000614 _____ C:\WINDOWS\system32\WdsUnattendTemplate.xml
2020-12-10 08:08 - 2020-12-10 08:08 - 000000176 _____ C:\WINDOWS\system32\RestartManagerUninstall.mof
2020-12-10 08:08 - 2020-12-10 08:08 - 000000150 _____ C:\WINDOWS\system32\pcl.sep
2020-12-10 08:08 - 2020-12-10 08:08 - 000000051 _____ C:\WINDOWS\system32\pscript.sep
2020-12-10 08:08 - 2020-12-10 08:08 - 000000033 _____ C:\WINDOWS\SysWOW64\winrm.cmd
2020-12-10 08:08 - 2020-12-10 08:08 - 000000033 _____ C:\WINDOWS\system32\winrm.cmd
2020-12-10 08:07 - 2020-12-10 08:07 - 004523520 _____ C:\WINDOWS\system32\Windows.UI.Input.Inking.Analysis.dll
2020-12-10 08:07 - 2020-12-10 08:07 - 004227116 _____ C:\WINDOWS\system32\DefaultHrtfs.bin
2020-12-10 08:07 - 2020-12-10 08:07 - 003440660 _____ C:\WINDOWS\system32\Drivers\gm.dls
2020-12-10 08:07 - 2020-12-10 08:07 - 003414816 _____ (QLogic Corporation) C:\WINDOWS\system32\Drivers\evbda.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 002458888 ____R (The ICU Project) C:\WINDOWS\system32\icu.dll
2020-12-10 08:07 - 2020-12-10 08:07 - 002136064 _____ (Digimarc) C:\WINDOWS\system32\DMRCDecoder.dll
2020-12-10 08:07 - 2020-12-10 08:07 - 002101248 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2020-12-10 08:07 - 2020-12-10 08:07 - 001942384 _____ C:\WINDOWS\system32\WindowManagementAPI.dll
2020-12-10 08:07 - 2020-12-10 08:07 - 001849632 _____ (Chelsio Communications) C:\WINDOWS\system32\Drivers\cht4vx64.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 001222656 _____ (Realtek Semiconductor Corporation ) C:\WINDOWS\system32\Drivers\rtl8192se.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 001131296 _____ (PMC-Sierra) C:\WINDOWS\system32\Drivers\adp80xx.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 001127200 _____ (Mellanox) C:\WINDOWS\system32\Drivers\mlx4_bus.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000880416 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaStorAVC.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000745552 _____ C:\WINDOWS\system32\DynamicLong.bin
2020-12-10 08:07 - 2020-12-10 08:07 - 000657336 _____ C:\WINDOWS\system32\TextShaping.dll
2020-12-10 08:07 - 2020-12-10 08:07 - 000630784 _____ C:\WINDOWS\system32\SettingSyncDownloadHelper.dll
2020-12-10 08:07 - 2020-12-10 08:07 - 000610304 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2020-12-10 08:07 - 2020-12-10 08:07 - 000571680 _____ (LSI Corporation, Inc.) C:\WINDOWS\system32\Drivers\megasr.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000554784 _____ (Mellanox) C:\WINDOWS\system32\Drivers\ibbus.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000529696 _____ (QLogic Corporation) C:\WINDOWS\system32\Drivers\bxvbda.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000515152 _____ C:\WINDOWS\system32\DynamicMedium.bin
2020-12-10 08:07 - 2020-12-10 08:07 - 000483328 _____ C:\WINDOWS\system32\ssdm.dll
2020-12-10 08:07 - 2020-12-10 08:07 - 000407840 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaStorV.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000352256 _____ C:\WINDOWS\system32\HeatCore.dll
2020-12-10 08:07 - 2020-12-10 08:07 - 000323152 _____ C:\WINDOWS\system32\DynamicShort.bin
2020-12-10 08:07 - 2020-12-10 08:07 - 000315680 _____ (Chelsio Communications) C:\WINDOWS\system32\Drivers\cht4sx64.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000301344 _____ (VIA Corporation) C:\WINDOWS\system32\Drivers\VSTXRAID.SYS
2020-12-10 08:07 - 2020-12-10 08:07 - 000294912 _____ C:\WINDOWS\system32\CoreMas.dll
2020-12-10 08:07 - 2020-12-10 08:07 - 000278528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdmaud.drv
2020-12-10 08:07 - 2020-12-10 08:07 - 000255264 _____ (AMD Technologies Inc.) C:\WINDOWS\system32\Drivers\amdsbs.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\timedate.cpl
2020-12-10 08:07 - 2020-12-10 08:07 - 000246048 _____ C:\WINDOWS\system32\Drivers\Usb4HostRouter.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000229376 _____ C:\WINDOWS\system32\TpmTool.exe
2020-12-10 08:07 - 2020-12-10 08:07 - 000212992 _____ C:\WINDOWS\system32\IHDS.dll
2020-12-10 08:07 - 2020-12-10 08:07 - 000205600 _____ (Microsemi Corportation) C:\WINDOWS\system32\Drivers\SmartSAMD.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000180224 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2020-12-10 08:07 - 2020-12-10 08:07 - 000177664 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaLPSS2i_I2C_GLK.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000177152 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaLPSS2i_I2C_CNL.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000175104 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaLPSS2i_I2C_BXT_P.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000172832 _____ (Avago Technologies) C:\WINDOWS\system32\Drivers\ItSas35i.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000171520 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaLPSS2i_I2C.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000167640 _____ C:\WINDOWS\system32\chs_singlechar_pinyin.dat
2020-12-10 08:07 - 2020-12-10 08:07 - 000162592 _____ (VIA Technologies Inc.,Ltd) C:\WINDOWS\system32\Drivers\vsmraid.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000162080 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvstor.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000149056 _____ C:\WINDOWS\system32\LargeRoom.bin
2020-12-10 08:07 - 2020-12-10 08:07 - 000146208 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvraid.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000144862 _____ C:\WINDOWS\system32\tpm.msc
2020-12-10 08:07 - 2020-12-10 08:07 - 000144673 _____ C:\WINDOWS\system32\WmiMgmt.msc
2020-12-10 08:07 - 2020-12-10 08:07 - 000143360 _____ C:\WINDOWS\system32\WindowsDefaultHeatProcessor.dll
2020-12-10 08:07 - 2020-12-10 08:07 - 000142112 _____ (Mellanox) C:\WINDOWS\system32\Drivers\ndfltr.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000140064 _____ (Chelsio Communications) C:\WINDOWS\system32\Drivers\cht4dx64.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000138092 _____ C:\WINDOWS\system32\AverageRoom.bin
2020-12-10 08:07 - 2020-12-10 08:07 - 000133408 _____ (Avago Technologies) C:\WINDOWS\system32\Drivers\lsi_sas3i.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000127776 _____ (PMC-Sierra, Inc.) C:\WINDOWS\system32\Drivers\arcsas.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000121344 _____ (Qualcomm Atheros Co., Ltd.) C:\WINDOWS\system32\Drivers\L1C63x64.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000120096 _____ (LSI Corporation) C:\WINDOWS\system32\Drivers\lsi_sas2i.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000113152 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaLPSSi_I2C.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000112128 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaLPSS2i_GPIO2_CNL.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000110036 _____ C:\WINDOWS\system32\MediumRoom.bin
2020-12-10 08:07 - 2020-12-10 08:07 - 000108320 _____ (Apple Inc.) C:\WINDOWS\system32\Drivers\AppleSSD.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000106496 _____ C:\WINDOWS\system32\xboxgipsynthetic.dll
2020-12-10 08:07 - 2020-12-10 08:07 - 000104736 _____ (LSI Corporation) C:\WINDOWS\system32\Drivers\lsi_sas.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000103200 _____ (LSI) C:\WINDOWS\system32\Drivers\3ware.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000102400 _____ C:\WINDOWS\system32\windows.applicationmodel.conversationalagent.proxystub.dll
2020-12-10 08:07 - 2020-12-10 08:07 - 000096256 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaLPSS2i_GPIO2_GLK.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000095008 _____ (Broadcom Inc) C:\WINDOWS\system32\Drivers\megasas35i.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000093184 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaLPSS2i_GPIO2_BXT_P.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000091136 _____ (Intel(R) Corporation) C:\WINDOWS\system32\Drivers\iai2c.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000090112 _____ C:\WINDOWS\system32\WwanPrfl.dll
2020-12-10 08:07 - 2020-12-10 08:07 - 000090112 _____ C:\WINDOWS\system32\windows.applicationmodel.conversationalagent.internal.proxystub.dll
2020-12-10 08:07 - 2020-12-10 08:07 - 000081920 ____R (Realtek) C:\WINDOWS\system32\Drivers\rteth.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000079360 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaLPSS2i_GPIO2.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000079136 _____ (Advanced Micro Devices) C:\WINDOWS\system32\Drivers\amdsata.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000077600 _____ (Silicon Integrated Systems) C:\WINDOWS\system32\Drivers\sisraid4.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000076576 _____ (Avago Technologies) C:\WINDOWS\system32\Drivers\MegaSas2i.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000069788 _____ C:\WINDOWS\system32\SmallRoom.bin
2020-12-10 08:07 - 2020-12-10 08:07 - 000069632 _____ C:\WINDOWS\system32\Microsoft.Bluetooth.Audio.dll
2020-12-10 08:07 - 2020-12-10 08:07 - 000068896 _____ (Mellanox) C:\WINDOWS\system32\Drivers\winverbs.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000064288 _____ (Avago Technologies) C:\WINDOWS\system32\Drivers\percsas3i.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000062328 _____ (Microsoft Corporation) C:\WINDOWS\system32\msgsm32.acm
2020-12-10 08:07 - 2020-12-10 08:07 - 000061440 _____ C:\WINDOWS\system32\pospaymentsworker.exe
2020-12-10 08:07 - 2020-12-10 08:07 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrnsave.scr
2020-12-10 08:07 - 2020-12-10 08:07 - 000060192 _____ (Hewlett-Packard Company) C:\WINDOWS\system32\Drivers\HpSAMD.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000059680 _____ (Marvell Semiconductor, Inc.) C:\WINDOWS\system32\Drivers\mvumis.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000058192 _____ (Microsoft Corporation) C:\WINDOWS\system32\imaadp32.acm
2020-12-10 08:07 - 2020-12-10 08:07 - 000054560 _____ (Avago Technologies) C:\WINDOWS\system32\Drivers\percsas2i.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000053248 _____ C:\WINDOWS\system32\VhfUm.dll
2020-12-10 08:07 - 2020-12-10 08:07 - 000053248 _____ (Microsoft) C:\WINDOWS\system32\oflc-nz.rs
2020-12-10 08:07 - 2020-12-10 08:07 - 000053248 _____ (Microsoft) C:\WINDOWS\system32\csrr.rs
2020-12-10 08:07 - 2020-12-10 08:07 - 000053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msacm32.drv
2020-12-10 08:07 - 2020-12-10 08:07 - 000049928 _____ (Microsoft Corporation) C:\WINDOWS\system32\msadp32.acm
2020-12-10 08:07 - 2020-12-10 08:07 - 000049152 _____ (Microsoft) C:\WINDOWS\system32\fpb.rs
2020-12-10 08:07 - 2020-12-10 08:07 - 000046920 _____ C:\WINDOWS\system32\OutdoorAudioEnvironment.bin
2020-12-10 08:07 - 2020-12-10 08:07 - 000045568 _____ (Advanced Micro Devices, Inc) C:\WINDOWS\system32\Drivers\amdi2c.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000045056 _____ (Microsoft) C:\WINDOWS\system32\cero.rs
2020-12-10 08:07 - 2020-12-10 08:07 - 000041664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msg711.acm
2020-12-10 08:07 - 2020-12-10 08:07 - 000040960 _____ (Microsoft) C:\WINDOWS\system32\usk.rs
2020-12-10 08:07 - 2020-12-10 08:07 - 000040960 _____ (Microsoft) C:\WINDOWS\system32\esrb.rs
2020-12-10 08:07 - 2020-12-10 08:07 - 000040960 _____ (Microsoft) C:\WINDOWS\system32\cob-au.rs
2020-12-10 08:07 - 2020-12-10 08:07 - 000040736 _____ (Silicon Integrated Systems Corp.) C:\WINDOWS\system32\Drivers\sisraid2.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000038128 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaLPSSi_GPIO.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000036864 ____R (The ICU Project) C:\WINDOWS\system32\icuuc.dll
2020-12-10 08:07 - 2020-12-10 08:07 - 000036352 _____ (Intel(R) Corporation) C:\WINDOWS\system32\Drivers\iagpio.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000032768 ____R (The ICU Project) C:\WINDOWS\system32\icuin.dll
2020-12-10 08:07 - 2020-12-10 08:07 - 000032768 _____ C:\WINDOWS\system32\agentactivationruntimestarter.exe
2020-12-10 08:07 - 2020-12-10 08:07 - 000032032 _____ (Mellanox) C:\WINDOWS\system32\Drivers\winmad.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000028672 _____ (Microsoft) C:\WINDOWS\system32\pegi-pt.rs
2020-12-10 08:07 - 2020-12-10 08:07 - 000028672 _____ (Microsoft) C:\WINDOWS\system32\pegi.rs
2020-12-10 08:07 - 2020-12-10 08:07 - 000028672 _____ (Microsoft) C:\WINDOWS\system32\grb.rs
2020-12-10 08:07 - 2020-12-10 08:07 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\stdole2.tlb
2020-12-10 08:07 - 2020-12-10 08:07 - 000028672 _____ (Chelsio Communications) C:\WINDOWS\system32\Drivers\cht4vfx.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000026912 _____ (Promise Technology, Inc.) C:\WINDOWS\system32\Drivers\stexstor.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000024576 _____ (Microsoft) C:\WINDOWS\system32\pcbp.rs
2020-12-10 08:07 - 2020-12-10 08:07 - 000024576 _____ (Microsoft) C:\WINDOWS\system32\djctq.rs
2020-12-10 08:07 - 2020-12-10 08:07 - 000022816 _____ (Advanced Micro Devices) C:\WINDOWS\system32\Drivers\amdxata.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000018432 _____ (Advanced Micro Devices, Inc) C:\WINDOWS\system32\Drivers\amdgpio2.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000012288 _____ (Microsoft) C:\WINDOWS\system32\WEB.rs
2020-12-10 08:07 - 2020-12-10 08:07 - 000010576 _____ C:\WINDOWS\system32\TransformPPSToWlan.xslt
2020-12-10 08:07 - 2020-12-10 08:07 - 000009728 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\Drivers\bcmfn2.sys
2020-12-10 08:07 - 2020-12-10 08:07 - 000008192 _____ C:\WINDOWS\system32\settings.dat
2020-12-10 08:07 - 2020-12-10 08:07 - 000003164 _____ C:\WINDOWS\system32\AppxProvisioning.xml
2020-12-10 08:07 - 2020-12-10 08:07 - 000001688 _____ C:\WINDOWS\system32\TransformPPSToWlanCredentials.xslt
2020-12-10 08:07 - 2020-12-10 08:07 - 000001369 _____ C:\WINDOWS\system32\ThirdPartyNoticesBySHS.txt
2020-12-10 08:07 - 2020-12-10 08:07 - 000000646 _____ C:\WINDOWS\system32\Drivers\gmreadme.txt
2020-12-10 08:02 - 2021-01-03 15:01 - 078643200 _____ C:\WINDOWS\system32\config\SOFTWARE
2020-12-10 08:02 - 2021-01-03 15:01 - 017301504 _____ C:\WINDOWS\system32\config\SYSTEM
2020-12-10 08:02 - 2021-01-03 15:01 - 001310720 _____ C:\WINDOWS\system32\config\DEFAULT
2020-12-10 08:02 - 2021-01-03 15:01 - 000262144 _____ C:\WINDOWS\system32\config\BBI
2020-12-10 08:02 - 2021-01-03 15:01 - 000065536 _____ C:\WINDOWS\system32\config\SECURITY
2020-12-10 08:02 - 2021-01-03 15:01 - 000065536 _____ C:\WINDOWS\system32\config\SAM
2020-12-10 08:02 - 2020-12-18 13:01 - 000000000 ____D C:\WINDOWS\servicing
2020-12-10 08:02 - 2020-12-18 13:01 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-12-10 08:02 - 2020-12-18 12:55 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2020-12-10 08:02 - 2020-12-10 08:33 - 000000000 ____D C:\WINDOWS\system32\SMI
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2021-01-08 21:43 - 2016-11-18 17:20 - 000000000 ____D C:\Users\saullerist\AppData\Local\ConnectedDevicesPlatform
2021-01-08 21:41 - 2020-11-22 14:16 - 000000000 ____D C:\Program Files\CCleaner
2021-01-08 21:40 - 2020-10-06 12:16 - 000000000 ____D C:\Users\saullerist\AppData\LocalLow\Mozilla
2021-01-08 21:30 - 2019-01-30 16:22 - 000000000 ____D C:\ProgramData\Mozilla
2021-01-08 13:05 - 2018-06-23 15:09 - 000000000 ____D C:\Users\saullerist\AppData\Local\D3DSCache
2021-01-07 11:05 - 2020-10-13 21:40 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-01-07 11:04 - 2020-10-06 12:15 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2021-01-03 15:06 - 2016-11-28 17:10 - 006150574 _____ C:\WINDOWS\system32\perfh01B.dat
2021-01-03 15:06 - 2016-11-28 17:10 - 001828564 _____ C:\WINDOWS\system32\perfc01B.dat
2021-01-03 15:02 - 2020-02-21 11:41 - 000012288 ___SH C:\DumpStack.log.tmp
2021-01-03 14:52 - 2016-01-12 10:47 - 000000000 ___RD C:\Users\saullerist\Disk Google
2020-12-19 13:35 - 2020-05-06 19:08 - 000002451 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2020-12-18 12:58 - 2017-07-15 16:50 - 000000000 ___RD C:\Users\saullerist\3D Objects
2020-12-18 12:58 - 2016-01-05 16:03 - 000000000 __RHD C:\Users\Public\AccountPictures
2020-12-18 12:39 - 2017-10-18 09:41 - 000000000 ____D C:\Users\saullerist\AppData\Local\Packages
2020-12-18 12:37 - 2020-06-03 13:02 - 000000000 ____D C:\ProgramData\Package Cache
2020-12-18 12:37 - 2017-07-13 16:06 - 000000000 ____D C:\Program Files (x86)\ATI Technologies
2020-12-18 12:35 - 2016-01-06 00:47 - 000000000 ____D C:\AMD
2020-12-18 12:30 - 2020-09-26 17:15 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2020-12-18 12:29 - 2020-11-22 14:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2020-12-18 12:29 - 2020-08-01 09:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2020-12-18 12:29 - 2020-08-01 09:14 - 000000000 ____D C:\WINDOWS\system32\Macromed
2020-12-18 12:29 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2020-12-18 12:29 - 2017-07-07 14:16 - 000000000 ____D C:\Program Files\UNP
2020-12-18 12:29 - 2016-11-18 18:24 - 000000000 ____D C:\WINDOWS\system32\MRT
2020-12-18 11:51 - 2020-03-21 20:12 - 000000000 ___RD C:\WINDOWS\WebManagement
2020-12-18 11:50 - 2018-05-23 13:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FinalWire
2020-12-18 11:50 - 2017-07-13 16:05 - 000000000 ____D C:\Program Files\Synaptics
2020-12-18 11:50 - 2017-07-13 16:05 - 000000000 ____D C:\Program Files\Common Files\ATI Technologies
2020-12-18 11:50 - 2017-07-13 16:05 - 000000000 ____D C:\Program Files\AMD
2020-12-17 23:03 - 2016-11-28 16:54 - 133736600 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2020-12-17 20:59 - 2018-04-16 14:13 - 000000000 ____D C:\Users\saullerist\AppData\Local\ElevatedDiagnostics
2020-12-15 13:18 - 2018-06-04 18:58 - 000000000 ____D C:\Users\saullerist\AppData\Local\Google
==================== Files in the root of some directories ========
2020-02-26 20:13 - 2020-02-26 20:17 - 000000062 _____ () C:\Users\saullerist\AppData\Roaming\FalconX.cfg
2017-07-31 10:22 - 2017-07-31 10:22 - 000029696 _____ () C:\Users\saullerist\AppData\Local\MSGBOX.EXE
2017-10-18 09:16 - 2020-04-08 13:19 - 000007597 _____ () C:\Users\saullerist\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Stiahni TDSSKiller: 
(a nie nič to neurobí so systémom)