OTL.Txt

Cliquez pour partager vos propres fichiers

Format du document : text/plain

Prévisualisation

ÿþOTL logfile created on: 05/06/2018 16:39:37 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\firef\Downloads
64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.11.16299.0)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

3,86 Gb Total Physical Memory | 0,94 Gb Available Physical Memory | 24,28% Memory free
7,86 Gb Paging File | 4,22 Gb Available in Paging File | 53,74% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 465,21 Gb Total Space | 276,52 Gb Free Space | 59,44% Space Free | Partition Type: NTFS

Computer Name: DESKTOP-65CAO8M | User Name: firef | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 60 Days

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - File not found --
PRC - [2018/06/05 16:35:51 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\firef\Downloads\OTL.exe
PRC - [2018/06/05 16:31:10 | 015,835,744 | ---- | M] (Piriform Ltd) -- C:\Users\firef\Downloads\ccsetup543pro.exe
PRC - [2018/05/22 22:01:00 | 000,764,896 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
PRC - [2018/05/20 19:36:47 | 000,630,240 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
PRC - [2018/05/20 19:36:37 | 015,997,920 | ---- | M] (Node.js) -- C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
PRC - [2018/05/03 11:54:02 | 010,700,184 | ---- | M] (ROCCAT) -- C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\ROCCAT_Swarm_Monitor.exe
PRC - [2018/05/02 13:58:14 | 005,599,520 | ---- | M] (Privax Limited) -- C:\Program Files (x86)\HMA! Pro VPN\VpnSvc.exe
PRC - [2018/04/29 15:04:36 | 001,624,224 | ---- | M] (Microsoft Corporation) -- C:\Users\firef\AppData\Local\Microsoft\OneDrive\OneDrive.exe
PRC - [2018/04/20 10:52:40 | 006,944,304 | ---- | M] (Safer-Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
PRC - [2018/04/20 10:51:12 | 003,892,256 | ---- | M] (Safer-Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
PRC - [2018/04/16 11:08:17 | 000,346,008 | ---- | M] (ROCCAT GmbH) -- C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\data\SWARM_CONNECT\SwarmHW_Service.exe
PRC - [2018/04/15 22:47:33 | 000,649,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\fontdrvhost.exe
PRC - [2018/03/09 20:17:56 | 000,328,344 | ---- | M] (Sandboxie Holdings, LLC) -- C:\Program Files\Sandboxie\SbieSvc.exe
PRC - [2018/02/06 17:50:32 | 000,233,712 | ---- | M] (Safer-Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
PRC - [2017/05/23 14:59:48 | 000,478,208 | ---- | M] (Skillbrains) -- C:\Program Files (x86)\Skillbrains\lightshot\5.4.0.35\Lightshot.exe
PRC - [2014/03/19 09:51:14 | 000,316,120 | ---- | M] () -- C:\Program Files (x86)\NETGEAR\WNA1100\WifiSvc.exe
PRC - [2014/01/02 13:13:24 | 008,266,456 | ---- | M] () -- C:\Program Files (x86)\NETGEAR\WNA1100\WNA1100.exe
PRC - [2012/03/26 01:12:18 | 000,241,664 | ---- | M] (Atheros Communications, Inc.) -- C:\Program Files (x86)\NETGEAR\WNA1100\jswpbapi.exe

[color=#E56717]========== Modules (No Company Name) ==========[/color]

MOD - [2018/06/05 16:34:32 | 000,009,728 | ---- | M] () -- C:\Users\firef\AppData\Local\Temp\nsn7E3A.tmp\nsDialogs.dll
MOD - [2018/06/05 16:34:05 | 000,011,264 | ---- | M] () -- C:\Users\firef\AppData\Local\Temp\nsn7E3A.tmp\System.dll
MOD - [2018/05/03 11:20:41 | 000,556,032 | ---- | M] () -- C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\aimo.dll
MOD - [2015/12/29 00:25:50 | 001,540,622 | ---- | M] () -- C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\libstdc++-6.dll
MOD - [2014/10/23 12:27:14 | 000,119,822 | ---- | M] () -- C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\libgcc_s_dw2-1.dll
MOD - [2014/03/18 11:51:04 | 000,278,528 | ---- | M] () -- C:\Program Files (x86)\NETGEAR\WNA1100\WifiSvcLib.dll
MOD - [2014/01/02 13:13:24 | 008,266,456 | ---- | M] () -- C:\Program Files (x86)\NETGEAR\WNA1100\WNA1100.exe

[color=#E56717]========== Services (SafeList) ==========[/color]

SRV:[b]64bit:[/b] - [2018/05/22 22:01:00 | 000,764,896 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe -- (NVDisplay.ContainerLocalSystem)
SRV:[b]64bit:[/b] - [2018/05/20 19:36:43 | 000,764,896 | ---- | M] (NVIDIA Corporation) [On_Demand | Stopped] -- C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -- (NvContainerNetworkService)
SRV:[b]64bit:[/b] - [2018/05/20 19:36:43 | 000,764,896 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -- (NvContainerLocalSystem)
SRV:[b]64bit:[/b] - [2018/05/03 08:19:51 | 001,300,992 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\usocore.dll -- (UsoSvc)
SRV:[b]64bit:[/b] - [2018/05/03 08:16:27 | 000,086,016 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe -- (diagnosticshub.standardcollector.service)
SRV:[b]64bit:[/b] - [2018/05/03 08:09:31 | 001,344,000 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\dosvc.dll -- (DoSvc)
SRV:[b]64bit:[/b] - [2018/04/15 22:07:05 | 000,702,464 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\Windows.Internal.Management.dll -- (DmEnrollmentSvc)
SRV:[b]64bit:[/b] - [2018/04/15 22:06:33 | 000,820,224 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon)
SRV:[b]64bit:[/b] - [2018/04/15 22:04:27 | 001,236,480 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TokenBroker.dll -- (TokenBroker)
SRV:[b]64bit:[/b] - [2018/04/15 22:03:54 | 002,628,608 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\diagtrack.dll -- (DiagTrack)
SRV:[b]64bit:[/b] - [2018/04/15 22:03:44 | 003,177,472 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppXDeploymentServer.dll -- (AppXSvc)
SRV:[b]64bit:[/b] - [2018/04/15 22:00:57 | 002,223,616 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc)
SRV:[b]64bit:[/b] - [2018/03/30 14:34:45 | 000,956,416 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\Spectrum.exe -- (spectrum)
SRV:[b]64bit:[/b] - [2018/03/30 07:05:17 | 000,059,808 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\hvhostsvc.dll -- (HvHost)
SRV:[b]64bit:[/b] - [2018/03/30 06:58:44 | 000,898,216 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\CoreMessaging.dll -- (CoreMessagingRegistrar)
SRV:[b]64bit:[/b] - [2018/03/30 05:32:57 | 000,048,640 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\LicenseManagerSvc.dll -- (LicenseManager)
SRV:[b]64bit:[/b] - [2018/03/30 05:32:56 | 000,057,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS)
SRV:[b]64bit:[/b] - [2018/03/30 05:32:04 | 000,198,144 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ScDeviceEnum.dll -- (ScDeviceEnum)
SRV:[b]64bit:[/b] - [2018/03/30 05:31:39 | 000,334,848 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\dusmsvc.dll -- (DusmSvc)
SRV:[b]64bit:[/b] - [2018/03/30 05:31:30 | 000,175,616 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBrokerSvc)
SRV:[b]64bit:[/b] - [2018/03/30 05:31:30 | 000,090,112 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso)
SRV:[b]64bit:[/b] - [2018/03/30 05:31:27 | 000,151,552 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dssvc.dll -- (DsSvc)
SRV:[b]64bit:[/b] - [2018/03/30 05:31:23 | 000,286,208 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvmsession)
SRV:[b]64bit:[/b] - [2018/03/30 05:31:23 | 000,286,208 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync)
SRV:[b]64bit:[/b] - [2018/03/30 05:31:23 | 000,286,208 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown)
SRV:[b]64bit:[/b] - [2018/03/30 05:31:23 | 000,286,208 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange)
SRV:[b]64bit:[/b] - [2018/03/30 05:31:23 | 000,286,208 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat)
SRV:[b]64bit:[/b] - [2018/03/30 05:31:23 | 000,286,208 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicguestinterface)
SRV:[b]64bit:[/b] - [2018/03/30 05:31:05 | 000,795,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NaturalAuth.dll -- (NaturalAuthentication)
SRV:[b]64bit:[/b] - [2018/03/30 05:30:48 | 000,208,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\tetheringservice.dll -- (icssvc)
SRV:[b]64bit:[/b] - [2018/03/30 05:30:40 | 000,588,800 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SmsRouterSvc.dll -- (SmsRouter)
SRV:[b]64bit:[/b] - [2018/03/30 05:30:35 | 000,369,664 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\APHostService.dll -- (OneSyncSvc)
SRV:[b]64bit:[/b] - [2018/03/30 05:30:32 | 000,309,760 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvcext.dll -- (vmicvss)
SRV:[b]64bit:[/b] - [2018/03/30 05:30:32 | 000,309,760 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvcext.dll -- (vmicrdv)
SRV:[b]64bit:[/b] - [2018/03/30 05:30:08 | 000,284,672 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker)
SRV:[b]64bit:[/b] - [2018/03/30 05:29:55 | 000,555,520 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SensorService.dll -- (SensorService)
SRV:[b]64bit:[/b] - [2018/03/30 05:29:41 | 000,791,552 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\PhoneService.dll -- (PhoneSvc)
SRV:[b]64bit:[/b] - [2018/03/30 05:28:03 | 001,245,184 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\Unistore.dll -- (UnistoreSvc)
SRV:[b]64bit:[/b] - [2018/03/30 05:28:01 | 000,951,808 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\usermgr.dll -- (UserManager)
SRV:[b]64bit:[/b] - [2018/03/30 05:27:55 | 000,813,568 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure)
SRV:[b]64bit:[/b] - [2018/03/30 05:27:51 | 000,889,856 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc)
SRV:[b]64bit:[/b] - [2018/03/30 05:26:27 | 001,573,376 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\UserDataService.dll -- (UserDataSvc)
SRV:[b]64bit:[/b] - [2018/03/30 05:25:51 | 000,374,272 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ncbservice.dll -- (NcbService)
SRV:[b]64bit:[/b] - [2018/03/13 08:51:24 | 002,896,896 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
SRV:[b]64bit:[/b] - [2018/03/09 20:17:56 | 000,328,344 | ---- | M] (Sandboxie Holdings, LLC) [Auto | Running] -- C:\Program Files\Sandboxie\SbieSvc.exe -- (SbieSvc)
SRV:[b]64bit:[/b] - [2018/03/01 09:17:39 | 000,519,152 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SecurityHealthService.exe -- (SecurityHealthService)
SRV:[b]64bit:[/b] - [2018/03/01 07:47:13 | 000,484,352 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\cdpusersvc.dll -- (CDPUserSvc)
SRV:[b]64bit:[/b] - [2018/02/10 08:06:57 | 000,824,896 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ClipSVC.dll -- (ClipSVC)
SRV:[b]64bit:[/b] - [2018/02/10 08:06:48 | 004,486,904 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\Windows.StateRepository.dll -- (StateRepository)
SRV:[b]64bit:[/b] - [2018/02/10 06:50:14 | 001,313,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\InstallService.dll -- (InstallService)
SRV:[b]64bit:[/b] - [2018/02/10 06:44:07 | 000,302,592 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\EnterpriseAppMgmtSvc.dll -- (EntAppSvc)
SRV:[b]64bit:[/b] - [2018/02/10 06:40:58 | 001,234,432 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SEMgrSvc.dll -- (SEMgrSvc)
SRV:[b]64bit:[/b] - [2018/02/10 06:38:09 | 000,699,904 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM)
SRV:[b]64bit:[/b] - [2018/02/10 06:37:32 | 000,308,224 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NetSetupSvc.dll -- (NetSetupSvc)
SRV:[b]64bit:[/b] - [2018/02/10 06:36:01 | 000,685,056 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
SRV:[b]64bit:[/b] - [2018/02/10 06:35:01 | 000,667,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\FrameServer.dll -- (FrameServer)
SRV:[b]64bit:[/b] - [2018/01/01 13:19:13 | 000,188,416 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\PimIndexMaintenance.dll -- (PimIndexMaintenanceSvc)
SRV:[b]64bit:[/b] - [2017/12/14 03:38:57 | 000,254,976 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\PushToInstall.dll -- (PushToInstall)
SRV:[b]64bit:[/b] - [2017/12/14 03:38:57 | 000,238,080 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc)
SRV:[b]64bit:[/b] - [2017/12/14 03:38:56 | 000,654,848 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\RDXService.dll -- (RetailDemo)
SRV:[b]64bit:[/b] - [2017/12/14 03:38:56 | 000,227,328 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\CapabilityAccessManager.dll -- (camsvc)
SRV:[b]64bit:[/b] - [2017/09/29 15:43:11 | 000,636,416 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppReadiness.dll -- (AppReadiness)
SRV:[b]64bit:[/b] - [2017/09/29 15:43:11 | 000,431,104 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WalletService.dll -- (WalletService)
SRV:[b]64bit:[/b] - [2017/09/29 15:42:08 | 001,346,560 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\lpasvc.dll -- (wlpasvc)
SRV:[b]64bit:[/b] - [2017/09/29 15:42:07 | 000,622,080 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WFDSConMgrSvc.dll -- (WFDSConMgrSvc)
SRV:[b]64bit:[/b] - [2017/09/29 15:42:07 | 000,421,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SharedRealitySvc.dll -- (SharedRealitySvc)
SRV:[b]64bit:[/b] - [2017/09/29 15:42:07 | 000,122,368 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc)
SRV:[b]64bit:[/b] - [2017/09/29 15:42:06 | 000,088,064 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup)
SRV:[b]64bit:[/b] - [2017/09/29 15:42:05 | 000,013,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc)
SRV:[b]64bit:[/b] - [2017/09/29 15:42:03 | 000,213,504 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DiagSvc.dll -- (diagsvc)
SRV:[b]64bit:[/b] - [2017/09/29 15:42:01 | 000,302,592 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\TieringEngineService.exe -- (TieringEngineService)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:58 | 001,288,704 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\SensorDataService.exe -- (SensorDataService)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:57 | 000,167,936 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\PrintWorkflowService.dll -- (PrintWorkflowUserSvc)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:57 | 000,151,552 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\RMapi.dll -- (RmSvc)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:56 | 000,542,208 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:45 | 000,081,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:45 | 000,027,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wephostsvc.dll -- (WEPHOSTSVC)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:44 | 000,170,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:43 | 000,779,264 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\FlightSettings.dll -- (wisvc)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:43 | 000,048,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\svchost.exe -- (WpnUserService_1fb6e2)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:43 | 000,048,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (UserDataSvc_1fb6e2)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:43 | 000,048,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (UnistoreSvc_1fb6e2)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:43 | 000,048,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (PrintWorkflowUserSvc_1fb6e2)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:43 | 000,048,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (PimIndexMaintenanceSvc_1fb6e2)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:43 | 000,048,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\svchost.exe -- (OneSyncSvc_1fb6e2)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:43 | 000,048,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (MessagingService_1fb6e2)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:43 | 000,048,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (DevicesFlowUserSvc_1fb6e2)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:43 | 000,048,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\svchost.exe -- (CDPUserSvc_1fb6e2)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:38 | 000,696,320 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\DevicesFlowBroker.dll -- (DevicesFlowUserSvc)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:38 | 000,194,560 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\Windows.SharedPC.AccountManager.dll -- (shpamsvc)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:35 | 000,023,552 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\smphost.dll -- (smphost)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:33 | 000,456,192 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:33 | 000,057,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\xboxgipsvc.dll -- (XboxGipSvc)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:33 | 000,057,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\dmwappushsvc.dll -- (dmwappushservice)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:31 | 001,082,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ngcsvc.dll -- (NgcSvc)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:31 | 000,533,504 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NgcCtnrSvc.dll -- (NgcCtnrSvc)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:31 | 000,363,520 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:31 | 000,284,672 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wpnservice.dll -- (WpnService)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:31 | 000,086,016 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\SysNative\moshost.dll -- (MapsBroker)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:31 | 000,072,704 | ---- | M] (Microsoft Corporation) [Auto | Unknown] -- C:\Windows\SysNative\WpnUserService.dll -- (WpnUserService)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:31 | 000,046,080 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\lfsvc.dll -- (lfsvc)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:31 | 000,033,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DevQueryBroker.dll -- (DevQueryBroker)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:30 | 000,561,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\tileobjserver.dll -- (tiledatamodelsvc)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:28 | 000,030,720 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\Windows.WARP.JITService.dll -- (WarpJITSvc)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:27 | 001,272,320 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XblGameSave.dll -- (XblGameSave)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:27 | 000,070,144 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\GraphicsPerfSvc.dll -- (GraphicsPerfSvc)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:27 | 000,059,512 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\xbgmsvc.exe -- (xbgm)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:26 | 001,107,968 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XblAuthManager.dll -- (XblAuthManager)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:26 | 000,696,832 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cdpsvc.dll -- (CDPSvc)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:26 | 000,096,256 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\tzautoupdate.dll -- (tzautoupdate)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:26 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AJRouter.dll -- (AJRouter)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:25 | 001,143,808 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\XboxNetApiSvc.dll -- (XboxNetApiSvc)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:25 | 000,165,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\embeddedmodesvc.dll -- (embeddedmode)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:23 | 000,063,488 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ipxlatcfg.dll -- (IpxlatCfgSvc)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:23 | 000,052,224 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysNative\MessagingService.dll -- (MessagingService)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:19 | 000,355,304 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\NisSrv.exe -- (WdNisSvc)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:19 | 000,105,944 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:14 | 001,827,328 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\workfolderssvc.dll -- (workfolderssvc)
SRV:[b]64bit:[/b] - [2017/09/29 15:41:08 | 000,456,704 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\BthHFSrv.dll -- (BthHFSrv)
SRV:[b]64bit:[/b] - [2017/02/07 21:47:32 | 000,488,944 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\IntelCpHDCPSvc.exe -- (cplspcon)
SRV:[b]64bit:[/b] - [2017/02/07 21:47:32 | 000,310,256 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\IntelCpHeciSvc.exe -- (cphs)
SRV:[b]64bit:[/b] - [2017/02/07 21:47:30 | 000,350,704 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\igfxCUIService.exe -- (igfxCUIService2.0.0.0)
SRV - [2018/06/01 21:02:10 | 001,672,992 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2018/05/20 19:36:47 | 000,630,240 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe -- (NvTelemetryContainer)
SRV - [2018/05/16 08:22:10 | 000,194,512 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2018/05/02 13:58:14 | 005,599,520 | ---- | M] (Privax Limited) [Auto | Running] -- C:\Program Files (x86)\HMA! Pro VPN\VpnSvc.exe -- (HmaProVpn)
SRV - [2018/04/29 20:21:46 | 000,775,296 | ---- | M] (EasyAntiCheat Ltd) [On_Demand | Stopped] -- C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe -- (EasyAntiCheat)
SRV - [2018/04/29 20:21:45 | 005,745,672 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\BattlEye\BEService.exe -- (BEService)
SRV - [2018/04/15 22:05:42 | 000,516,608 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Windows.Internal.Management.dll -- (DmEnrollmentSvc)
SRV - [2018/04/15 22:03:31 | 000,920,064 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\TokenBroker.dll -- (TokenBroker)
SRV - [2018/03/30 06:23:56 | 000,566,664 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\CoreMessaging.dll -- (CoreMessagingRegistrar)
SRV - [2018/03/30 05:38:47 | 000,966,656 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysWOW64\Unistore.dll -- (UnistoreSvc)
SRV - [2018/03/13 08:51:24 | 002,896,896 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
SRV - [2018/02/10 07:08:02 | 003,980,720 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\Windows.StateRepository.dll -- (StateRepository)
SRV - [2018/02/10 06:46:37 | 001,008,640 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\InstallService.dll -- (InstallService)
SRV - [2017/09/29 15:42:22 | 000,136,192 | ---- | M] (Microsoft Corporation) [On_Demand | Unknown] -- C:\Windows\SysWOW64\PrintWorkflowService.dll -- (PrintWorkflowUserSvc)
SRV - [2017/09/29 15:42:08 | 000,020,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\smphost.dll -- (smphost)
SRV - [2017/02/07 21:47:32 | 000,488,944 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\IntelCpHDCPSvc.exe -- (cplspcon)
SRV - [2017/02/07 21:47:32 | 000,310,256 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\IntelCpHeciSvc.exe -- (cphs)
SRV - [2017/02/07 21:47:30 | 000,350,704 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\igfxCUIService.exe -- (igfxCUIService2.0.0.0)
SRV - [2014/03/19 09:51:14 | 000,316,120 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\NETGEAR\WNA1100\WifiSvc.exe -- (WSWNA1100)
SRV - [2012/03/26 01:12:18 | 000,241,664 | ---- | M] (Atheros Communications, Inc.) [Auto | Running] -- C:\Program Files (x86)\NETGEAR\WNA1100\jswpbapi.exe -- (jswpbapi)
SRV - [2012/03/26 01:11:20 | 001,102,848 | ---- | M] (Atheros Communications, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\NETGEAR\WNA1100\jswpsapi.exe -- (jswpsapi)

[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV:[b]64bit:[/b] - [2018/05/23 20:21:54 | 017,194,584 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\nvaci.inf_amd64_a44eb777bbc730b8\nvlddmkm.sys -- (nvlddmkm)
DRV:[b]64bit:[/b] - [2018/05/20 19:36:27 | 000,031,200 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys -- (NvStreamKms)
DRV:[b]64bit:[/b] - [2018/05/09 20:25:49 | 000,073,112 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hvservice.sys -- (hvservice)
DRV:[b]64bit:[/b] - [2018/05/03 09:43:08 | 000,373,664 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\clfs.sys -- (CLFS)
DRV:[b]64bit:[/b] - [2018/05/03 09:36:57 | 000,437,664 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBXHCI.SYS -- (USBXHCI)
DRV:[b]64bit:[/b] - [2018/04/28 02:25:24 | 000,068,112 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvvhci.sys -- (nvvhci)
DRV:[b]64bit:[/b] - [2018/04/27 06:27:58 | 000,222,848 | ---- | M] (Oracle Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\VBoxNetLwf.sys -- (VBoxNetLwf)
DRV:[b]64bit:[/b] - [2018/04/27 06:27:58 | 000,212,552 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VBoxNetAdp6.sys -- (VBoxNetAdp)
DRV:[b]64bit:[/b] - [2018/03/30 07:12:57 | 000,075,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpci.sys -- (vpci)
DRV:[b]64bit:[/b] - [2018/03/30 07:03:57 | 000,059,808 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\bam.sys -- (bam)
DRV:[b]64bit:[/b] - [2018/03/30 07:01:29 | 000,571,288 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\spaceport.sys -- (spaceport)
DRV:[b]64bit:[/b] - [2018/03/30 07:01:02 | 000,034,208 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\WINDOWS\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2018/03/30 06:53:04 | 000,163,744 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\wfplwfs.sys -- (WFPLWFS)
DRV:[b]64bit:[/b] - [2018/03/30 06:51:43 | 000,071,208 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\WindowsTrustedRT.sys -- (WindowsTrustedRT)
DRV:[b]64bit:[/b] - [2018/03/30 06:51:27 | 000,147,872 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\wcifs.sys -- (wcifs)
DRV:[b]64bit:[/b] - [2018/03/30 05:33:54 | 000,013,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgencounter.sys -- (gencounter)
DRV:[b]64bit:[/b] - [2018/03/30 05:33:54 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgid.sys -- (vmgid)
DRV:[b]64bit:[/b] - [2018/03/30 05:33:52 | 000,028,160 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HyperVideo.sys -- (HyperVideo)
DRV:[b]64bit:[/b] - [2018/03/30 05:33:51 | 000,016,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hyperkbd.sys -- (hyperkbd)
DRV:[b]64bit:[/b] - [2018/03/30 05:33:32 | 000,119,808 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\irda.sys -- (irda)
DRV:[b]64bit:[/b] - [2018/03/30 05:33:09 | 000,079,872 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\storqosflt.sys -- (storqosflt)
DRV:[b]64bit:[/b] - [2018/03/30 05:33:04 | 000,046,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
DRV:[b]64bit:[/b] - [2018/03/30 05:32:56 | 000,064,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc)
DRV:[b]64bit:[/b] - [2018/03/30 05:32:55 | 000,075,264 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wcnfs.sys -- (wcnfs)
DRV:[b]64bit:[/b] - [2018/03/30 05:32:53 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\gpuenergydrv.sys -- (GpuEnergyDrv)
DRV:[b]64bit:[/b] - [2018/03/30 05:32:48 | 000,192,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netvsc.sys -- (netvsc)
DRV:[b]64bit:[/b] - [2018/03/30 05:32:40 | 000,225,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winnat.sys -- (WinNat)
DRV:[b]64bit:[/b] - [2018/03/30 05:20:39 | 000,240,640 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ahcache.sys -- (ahcache)
DRV:[b]64bit:[/b] - [2018/03/15 10:47:24 | 000,067,432 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvvad64v.sys -- (nvvad_WaveExtensible)
DRV:[b]64bit:[/b] - [2018/03/13 08:54:16 | 000,555,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBHUB3.SYS -- (USBHUB3)
DRV:[b]64bit:[/b] - [2018/03/13 07:38:31 | 000,071,680 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)
DRV:[b]64bit:[/b] - [2018/03/09 06:24:36 | 000,228,208 | ---- | M] (Sandboxie Holdings, LLC) [Kernel | On_Demand | Running] -- C:\Program Files\Sandboxie\SbieDrv.sys -- (SbieDrv)
DRV:[b]64bit:[/b] - [2018/03/01 07:51:55 | 000,034,816 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicRender.sys -- (BasicRender)
DRV:[b]64bit:[/b] - [2018/03/01 07:46:03 | 000,770,048 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WdiWiFi.sys -- (wdiwifi)
DRV:[b]64bit:[/b] - [2018/02/22 04:10:34 | 000,285,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:[b]64bit:[/b] - [2018/02/22 04:02:49 | 000,149,400 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\storahci.sys -- (storahci)
DRV:[b]64bit:[/b] - [2018/02/22 03:52:26 | 000,103,328 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stornvme.sys -- (stornvme)
DRV:[b]64bit:[/b] - [2018/02/22 03:51:38 | 000,045,472 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\storufs.sys -- (storufs)
DRV:[b]64bit:[/b] - [2018/02/22 03:51:00 | 000,097,176 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdstor.sys -- (sdstor)
DRV:[b]64bit:[/b] - [2018/02/22 03:50:42 | 000,229,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM)
DRV:[b]64bit:[/b] - [2018/02/22 02:31:14 | 000,057,344 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmUcsi.sys -- (UcmUcsi)
DRV:[b]64bit:[/b] - [2018/02/10 06:49:33 | 000,385,536 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\cldflt.sys -- (CldFlt)
DRV:[b]64bit:[/b] - [2017/12/14 03:38:57 | 000,114,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmCx.sys -- (UcmCx0101)
DRV:[b]64bit:[/b] - [2017/12/14 03:38:57 | 000,060,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urscx01000.sys -- (UrsCx01000)
DRV:[b]64bit:[/b] - [2017/09/30 16:41:31 | 000,037,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
DRV:[b]64bit:[/b] - [2017/09/30 16:41:29 | 000,056,216 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SpatialGraphFilter.sys -- (SpatialGraphFilter)
DRV:[b]64bit:[/b] - [2017/09/30 16:41:27 | 000,030,616 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:[b]64bit:[/b] - [2017/09/29 15:42:05 | 000,081,304 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\dam.sys -- (dam)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:56 | 000,128,000 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NdisImPlatform.sys -- (NdisImPlatform)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:56 | 000,084,480 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\mslldp.sys -- (MsLldp)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:56 | 000,021,504 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys -- (NdisVirtualBus)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:47 | 000,087,960 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\EhStorClass.sys -- (EhStorClass)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:43 | 000,225,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VerifierExt.sys -- (VerifierExt)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:43 | 000,132,608 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NetAdapterCx.sys -- (NetAdapterCx)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:43 | 000,055,704 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\condrv.sys -- (condrv)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:41 | 001,849,752 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\refs.sys -- (ReFS)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:41 | 000,209,304 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\WINDOWS\SysNative\drivers\wof.sys -- (Wof)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:41 | 000,033,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wdnsfltr.sys -- (wdnsfltr)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:41 | 000,018,432 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\applockerfltr.sys -- (applockerfltr)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:40 | 000,936,856 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\refsv1.sys -- (ReFSv1)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:33 | 000,266,648 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ufx01000.sys -- (Ufx01000)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:33 | 000,154,520 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx2.sys -- (SerCx2)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:33 | 000,146,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UcmTcpciCx.sys -- (UcmTcpciCx0101)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:33 | 000,081,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SpbCx.sys -- (SpbCx)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:33 | 000,074,784 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx.sys -- (SerCx)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:33 | 000,039,424 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IndirectKmd.sys -- (IndirectKmd)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:33 | 000,039,320 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\cnghwassist.sys -- (cnghwassist)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:33 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mshidumdf.sys -- (mshidumdf)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:31 | 000,169,880 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpioclx.sys -- (GPIOClx0101)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:31 | 000,027,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mshwnclx.sys -- (HwNClx0101)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:25 | 000,124,416 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\Ndu.sys -- (Ndu)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:23 | 000,056,728 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iorate.sys -- (iorate)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:23 | 000,043,520 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\mmcss.sys -- (MMCSS)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:19 | 000,309,144 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdFilter.sys -- (WdFilter)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:19 | 000,119,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdNisDrv.sys -- (WdNisDrv)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:19 | 000,044,608 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WdBoot.sys -- (WdBoot)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:17 | 000,030,104 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WpdUpFltr.sys -- (WpdUpFltr)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:14 | 000,227,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Ucx01000.sys -- (Ucx01000)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:14 | 000,127,896 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\acpiex.sys -- (acpiex)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:14 | 000,123,288 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pdc.sys -- (pdc)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:14 | 000,062,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (tsusbflt)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:14 | 000,055,808 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\SysNative\drivers\filecrypt.sys -- (FileCrypt)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:14 | 000,045,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Udecx.sys -- (UdeCx)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:14 | 000,039,832 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\ramdisk.sys -- (Ramdisk)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:14 | 000,034,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vhf.sys -- (vhf)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:14 | 000,026,112 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ipt.sys -- (IPT)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:08 | 000,281,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xboxgip.sys -- (xboxgip)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:08 | 000,191,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BthA2DP.sys -- (BthA2DP)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:08 | 000,140,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ufxsynopsys.sys -- (ufxsynopsys)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:08 | 000,107,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\bthhfenum.sys -- (BthHFEnum)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:08 | 000,097,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UfxChipidea.sys -- (UfxChipidea)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:08 | 000,083,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\bthl2cap.sys -- (bthl2cap)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:08 | 000,078,848 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys -- (BthLEEnum)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:08 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hidi2c.sys -- (hidi2c)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:08 | 000,050,584 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidinterrupt.sys -- (hidinterrupt)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:08 | 000,049,048 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpiowin32.sys -- (msgpiowin32)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:08 | 000,046,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xinputhid.sys -- (xinputhid)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:08 | 000,046,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BthHfAud.sys -- (BthHFAud)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:08 | 000,045,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BthAvrcpTg.sys -- (BthAvrcpTg)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:08 | 000,039,424 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\buttonconverter.sys -- (buttonconverter)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:08 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BthhfHid.sys -- (bthhfhid)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:08 | 000,028,568 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urschipidea.sys -- (UrsChipidea)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:08 | 000,027,544 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\urssynopsys.sys -- (UrsSynopsys)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:08 | 000,026,112 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\npsvctrig.sys -- (npsvctrig)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:08 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kdnic.sys -- (kdnic)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:08 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\genericusbfn.sys -- (genericusbfn)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:08 | 000,018,000 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\WindowsTrustedRTProxy.sys -- (WindowsTrustedRTProxy)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:04 | 000,035,328 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:04 | 000,033,176 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SDFRd.sys -- (SDFRd)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:03 | 000,674,200 | ---- | M] (Intel Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\iaStorAV.sys -- (iaStorAV)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:03 | 000,604,160 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rt640x64.sys -- (rt640x64)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:03 | 000,505,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mausbhost.sys -- (mausbhost)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:03 | 000,118,168 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\scmbus.sys -- (scmbus)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:03 | 000,100,352 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pmem.sys -- (pmem)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:03 | 000,088,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvdimmn.sys -- (nvdimmn)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:03 | 000,079,256 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uaspstor.sys -- (UASPStor)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:03 | 000,058,880 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicDisplay.sys -- (BasicDisplay)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:03 | 000,055,840 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mausbip.sys -- (mausbip)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:03 | 000,043,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vnvdimm.sys -- (vnvdimm)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:03 | 000,038,912 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\invdimm.sys -- (invdimm)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:03 | 000,037,784 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\bttflt.sys -- (bttflt)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:03 | 000,028,568 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\uefi.sys -- (UEFI)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:03 | 000,015,392 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\volume.sys -- (volume)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:03 | 000,013,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpitime.sys -- (acpitime)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:03 | 000,012,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\acpipagr.sys -- (acpipagr)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:02 | 001,723,288 | ---- | M] (Chelsio Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\cht4vx64.sys -- (cht4vbd)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:02 | 001,135,512 | ---- | M] (PMC-Sierra) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\adp80xx.sys -- (ADP80XX)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:02 | 000,842,648 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mlx4_bus.sys -- (mlx4_bus)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:02 | 000,526,232 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ibbus.sys -- (ibbus)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:02 | 000,357,272 | ---- | M] (Chelsio Communications) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\cht4sx64.sys -- (cht4iscsi)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:02 | 000,305,560 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\VSTXRAID.SYS -- (VSTXRAID)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:02 | 000,258,592 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:02 | 000,123,800 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2i.sys -- (LSI_SAS2i)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:02 | 000,122,368 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\capimg.sys -- (CapImg)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:02 | 000,108,952 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ndfltr.sys -- (ndfltr)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:02 | 000,107,416 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\3ware.sys -- (3ware)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:02 | 000,103,320 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas3i.sys -- (LSI_SAS3i)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:02 | 000,083,352 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:02 | 000,082,840 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sss.sys -- (LSI_SSS)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:02 | 000,064,920 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winverbs.sys -- (WinVerbs)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:02 | 000,063,896 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\mvumis.sys -- (mvumis)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:02 | 000,063,520 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:02 | 000,063,520 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\MegaSas2i.sys -- (megasas2i)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:02 | 000,061,848 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\percsas3i.sys -- (percsas3i)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:02 | 000,058,776 | ---- | M] (Avago Technologies) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\percsas2i.sys -- (percsas2i)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:02 | 000,032,152 | ---- | M] (Mellanox) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\winmad.sys -- (WinMad)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:02 | 000,031,128 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:02 | 000,027,032 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:02 | 000,020,480 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AcpiDev.sys -- (AcpiDev)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:02 | 000,009,728 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmfn2.sys -- (bcmfn2)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:01 | 003,419,032 | ---- | M] (QLogic Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:01 | 000,533,912 | ---- | M] (QLogic Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:01 | 000,130,640 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\intelpep.sys -- (intelpep)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:01 | 000,103,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rhproxy.sys -- (rhproxy)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:01 | 000,038,128 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys -- (iaLPSSi_GPIO)
DRV:[b]64bit:[/b] - [2017/09/29 15:41:01 | 000,016,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pnpmem.sys -- (PNPMEM)
DRV:[b]64bit:[/b] - [2017/09/29 15:40:59 | 002,344,448 | ---- | M] (Qualcomm Atheros, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Qcamain10x64.sys -- (Qcamain10x64)
DRV:[b]64bit:[/b] - [2017/09/29 15:40:59 | 000,174,592 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSS2i_I2C_BXT_P.sys -- (iaLPSS2i_I2C_BXT_P)
DRV:[b]64bit:[/b] - [2017/09/29 15:40:59 | 000,171,520 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iaLPSS2i_I2C.sys -- (iaLPSS2i_I2C)
DRV:[b]64bit:[/b] - [2017/09/29 15:40:59 | 000,118,680 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)
DRV:[b]64bit:[/b] - [2017/09/29 15:40:59 | 000,113,152 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys -- (iaLPSSi_I2C)
DRV:[b]64bit:[/b] - [2017/09/29 15:40:59 | 000,091,648 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iai2c.sys -- (iai2c)
DRV:[b]64bit:[/b] - [2017/09/29 15:40:59 | 000,088,576 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSS2i_GPIO2_BXT_P.sys -- (iaLPSS2i_GPIO2_BXT_P)
DRV:[b]64bit:[/b] - [2017/09/29 15:40:59 | 000,079,360 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSS2i_GPIO2.sys -- (iaLPSS2i_GPIO2)
DRV:[b]64bit:[/b] - [2017/09/29 15:40:59 | 000,060,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CAD.sys -- (CAD)
DRV:[b]64bit:[/b] - [2017/09/29 15:40:59 | 000,040,448 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\compositebus.inf_amd64_9c1fb8f4db31c348\CompositeBus.sys -- (CompositeBus)
DRV:[b]64bit:[/b] - [2017/09/29 15:40:59 | 000,036,864 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iagpio.sys -- (iagpio)
DRV:[b]64bit:[/b] - [2017/02/07 21:47:28 | 011,041,776 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\igdkmd64.sys -- (igfx)
DRV:[b]64bit:[/b] - [2016/09/16 11:08:56 | 000,821,224 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
DRV:[b]64bit:[/b] - [2015/10/07 20:16:48 | 000,050,304 | ---- | M] (Daiyuu Nobori, University of Tsukuba, Japan) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\Win10Pcap.sys -- (Win10Pcap)
DRV:[b]64bit:[/b] - [2015/09/04 13:29:06 | 000,195,336 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\TeeDriverW8x64.sys -- (MEIx64)
DRV:[b]64bit:[/b] - [2015/09/02 21:53:18 | 000,602,736 | ---- | M] (Qualcomm Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btfilter.sys -- (BtFilter)
DRV:[b]64bit:[/b] - [2015/08/19 01:15:36 | 000,410,880 | ---- | M] (Realsil Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtsUer.sys -- (RTSUER)
DRV:[b]64bit:[/b] - [2013/11/20 11:43:50 | 002,702,336 | ---- | M] (Qualcomm Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\athuwbx.sys -- (athur)
DRV:[b]64bit:[/b] - [2008/05/15 02:28:00 | 000,026,624 | ---- | M] (Atheros Communications, Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\jswpslwfx.sys -- (JSWPSLWF)
DRV - [2018/05/23 20:21:54 | 017,194,584 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\DriverStore\FileRepository\nvaci.inf_amd64_a44eb777bbc730b8\nvlddmkm.sys -- (nvlddmkm)
DRV - [2018/05/01 21:01:47 | 000,043,840 | ---- | M] (CPUID) [Kernel | On_Demand | Running] -- C:\Users\firef\AppData\Local\Temp\cpuz140\cpuz140_x64.sys -- (cpuz140)
DRV - [2017/09/29 15:40:59 | 000,040,448 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_9c1fb8f4db31c348\CompositeBus.sys -- (CompositeBus)
DRV - [2017/02/07 21:47:28 | 011,041,776 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_82119d956c80af5a\igdkmd64.sys -- (igfx)

[color=#E56717]========== Standard Registry (SafeList) ==========[/color]

[color=#E56717]========== Internet Explorer ==========[/color]

IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm

IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm

IE - HKU\S-1-5-21-3661491001-3977891655-3078464167-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
IE - HKU\S-1-5-21-3661491001-3977891655-3078464167-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

[color=#E56717]========== FireFox ==========[/color]

FF - prefs.js..browser.search.countryCode: "FR"
FF - prefs.js..browser.search.region: "FR"
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll (Google Inc.)

64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 60.0.1\extensions\\Components: C:\PROGRAM FILES\MOZILLA FIREFOX\COMPONENTS
64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 60.0.1\extensions\\Plugins: C:\PROGRAM FILES\MOZILLA FIREFOX\PLUGINS

[2018/06/02 17:48:13 | 000,000,000 | ---D | M] (No name found) -- C:\Users\firef\AppData\Roaming\mozilla\Extensions
[2018/06/02 17:48:15 | 000,000,000 | ---D | M] (No name found) -- C:\Users\firef\AppData\Roaming\mozilla\SystemExtensionsDev
[2018/06/03 15:45:29 | 000,006,255 | ---- | M] () (No name found) -- C:\Users\firef\AppData\Roaming\mozilla\firefox\profiles\4qs30f4g.default\features\{f91f1cd1-716d-4e17-abb6-fd15e1eac062}\tls13-version-fallback-rollout-bug1462099@mozilla.org.xpi

[color=#E56717]========== Chrome ==========[/color]

CHR - Extension: No name found = C:\Users\firef\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.10_0\
CHR - Extension: No name found = C:\Users\firef\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.10_0\
CHR - Extension: No name found = C:\Users\firef\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\
CHR - Extension: No name found = C:\Users\firef\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\
CHR - Extension: No name found = C:\Users\firef\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgbimgjoijjemhdamicmljbncacfndmp\0.1.4_0\
CHR - Extension: No name found = C:\Users\firef\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.2_0\
CHR - Extension: No name found = C:\Users\firef\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.4_2\
CHR - Extension: No name found = C:\Users\firef\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\3.30.1_0\
CHR - Extension: No name found = C:\Users\firef\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.4_0\
CHR - Extension: No name found = C:\Users\firef\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\
CHR - Extension: No name found = C:\Users\firef\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\6618.312.0.2_0\

O1 HOSTS File: ([2017/09/29 15:44:25 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVBg_Dolby] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor)
O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4:[b]64bit:[/b] - HKLM..\Run: [SecurityHealth] C:\Program Files\Windows Defender\MSASCuiL.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Discord] C:\ProgramData\SquirrelMachineInstalls\Discord.exe (Discord Inc.)
O4 - HKLM..\Run: [jswtrayutil] "C:\Program Files (x86)\NETGEAR\WNA1100\jswtrayutil.exe" File not found
O4 - HKLM..\Run: [Lightshot] C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe ()
O4 - HKLM..\Run: [SDTray] C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (Safer-Networking Ltd.)
O4 - HKU\S-1-5-19..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-3661491001-3977891655-3078464167-1001..\Run: [Discord] C:\Users\firef\AppData\Local\Discord\app-0.0.301\Discord.exe (Discord Inc.)
O4 - HKU\S-1-5-21-3661491001-3977891655-3078464167-1001..\Run: [f.lux] C:\Users\firef\AppData\Local\FluxSoftware\Flux\flux.exe (f.lux Software LLC)
O4 - HKU\S-1-5-21-3661491001-3977891655-3078464167-1001..\Run: [OneDrive] C:\Users\firef\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-3661491001-3977891655-3078464167-1001..\Run: [SandboxieControl] C:\Program Files\Sandboxie\SbieCtrl.exe (Sandboxie Holdings, LLC)
O4 - HKU\S-1-5-21-3661491001-3977891655-3078464167-1001..\Run: [Steam] C:\Program Files (x86)\Steam\steam.exe (Valve Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DSCAutomationHostEnabled = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableFullTrustStartupTasks = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUwpStartupTasks = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SupportFullTrustStartupTasks = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SupportUwpStartupTasks = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 1
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0abe8f25-fcd6-4148-a5aa-e60cd826c014}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9227f5f6-257c-428e-87cb-bae84d289d53}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{94c5dc18-5f1b-48c5-af1e-5477b123d9f4}: DhcpNameServer = 192.168.1.1
O18:[b]64bit:[/b] - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysNative\tbauth.dll (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Handler\windows.tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysNative\tbauth.dll (Microsoft Corporation)
O18 - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll (Microsoft Corporation)
O18 - Protocol\Handler\windows.tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\SDWinLogon: DllName - (SDWinLogon.dll) - File not found
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

NetSvcs:[b]64bit:[/b] PushToInstall - C:\Windows\SysNative\PushToInstall.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] shpamsvc - C:\Windows\SysNative\Windows.SharedPC.AccountManager.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] XblGameSave - C:\Windows\SysNative\XblGameSave.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] NaturalAuthentication - C:\Windows\SysNative\NaturalAuth.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] TokenBroker - C:\Windows\SysNative\TokenBroker.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] lfsvc - C:\Windows\SysNative\lfsvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] XblAuthManager - C:\Windows\SysNative\XblAuthManager.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] DmEnrollmentSvc - C:\Windows\SysNative\Windows.Internal.Management.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] dmwappushservice - C:\Windows\SysNative\dmwappushsvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] wisvc - C:\Windows\SysNative\FlightSettings.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] WpnService - C:\Windows\SysNative\wpnservice.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] XboxNetApiSvc - C:\Windows\SysNative\XboxNetApiSvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] UsoSvc - C:\Windows\SysNative\usocore.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] UserManager - C:\Windows\SysNative\usermgr.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] InstallService - C:\Windows\SysNative\InstallService.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] DsmSvc - C:\Windows\SysNative\DeviceSetupManager.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] NetSetupSvc - C:\Windows\SysNative\NetSetupSvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] NcaSvc - C:\Windows\SysNative\NcaSvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] wlidsvc - C:\Windows\SysNative\wlidsvc.dll (Microsoft Corporation)
NetSvcs:[b]64bit:[/b] XboxGipSvc - C:\Windows\SysNative\xboxgipsvc.dll (Microsoft Corporation)
NetSvcs: TokenBroker - C:\Windows\SysWOW64\TokenBroker.dll (Microsoft Corporation)

SafeBootMin:[b]64bit:[/b] Ahcache.sys - C:\Windows\SysNative\drivers\ahcache.sys (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] AppMgmt - Service
SafeBootMin:[b]64bit:[/b] Base - Driver Group
SafeBootMin:[b]64bit:[/b] BasicDisplay.sys - C:\Windows\SysNative\drivers\BasicDisplay.sys (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] BasicRender.sys - C:\Windows\SysNative\drivers\BasicRender.sys (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group
SafeBootMin:[b]64bit:[/b] BrokerInfrastructure - C:\Windows\SysNative\bisrv.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] CoreMessagingRegistrar - C:\Windows\SysNative\CoreMessaging.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] EFS - C:\Windows\SysNative\efssvc.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] File system - Driver Group
SafeBootMin:[b]64bit:[/b] Filter - Driver Group
SafeBootMin:[b]64bit:[/b] HelpSvc - Service
SafeBootMin:[b]64bit:[/b] iai2c.sys - C:\Windows\SysNative\drivers\iai2c.sys (Intel(R) Corporation)
SafeBootMin:[b]64bit:[/b] KeyIso - C:\Windows\SysNative\keyiso.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] LSM - C:\Windows\SysNative\lsm.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] MBAMService - Service
SafeBootMin:[b]64bit:[/b] Netlogon - C:\Windows\SysNative\netlogon.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group
SafeBootMin:[b]64bit:[/b] sacsvr - Service
SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootMin:[b]64bit:[/b] SerCx2.sys - C:\Windows\SysNative\drivers\SerCx2.sys (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] SpbCx.sys - C:\Windows\SysNative\drivers\SpbCx.sys (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] StateRepository - C:\Windows\SysNative\Windows.StateRepository.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] SystemEventsBroker - C:\Windows\SysNative\SystemEventsBrokerServer.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] TBS - Service
SafeBootMin:[b]64bit:[/b] TileDataModelSvc - C:\Windows\SysNative\tileobjserver.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] uefi.sys - C:\Windows\SysNative\drivers\uefi.sys (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] UserManager - C:\Windows\SysNative\usermgr.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] vmms - Service
SafeBootMin:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin:[b]64bit:[/b] {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices
SafeBootMin:[b]64bit:[/b] {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller
SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin:[b]64bit:[/b] {F2E7DD72-6468-4E36-B6F1-6488F42C1B52} - Firmware
SafeBootMin: AppMgmt - Service
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: CoreMessagingRegistrar - C:\Windows\SysWOW64\CoreMessaging.dll (Microsoft Corporation)
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: MBAMService - Service
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: StateRepository - C:\Windows\SysWOW64\Windows.StateRepository.dll (Microsoft Corporation)
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: TBS - Service
SafeBootMin: vmms - Service
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices
SafeBootMin: {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin: {F2E7DD72-6468-4E36-B6F1-6488F42C1B52} - Firmware

SafeBootNet:[b]64bit:[/b] Ahcache.sys - C:\Windows\SysNative\drivers\ahcache.sys (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] AppMgmt - Service
SafeBootNet:[b]64bit:[/b] Base - Driver Group
SafeBootNet:[b]64bit:[/b] BasicDisplay.sys - C:\Windows\SysNative\drivers\BasicDisplay.sys (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] BasicRender.sys - C:\Windows\SysNative\drivers\BasicRender.sys (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group
SafeBootNet:[b]64bit:[/b] BrokerInfrastructure - C:\Windows\SysNative\bisrv.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] Browser - Service
SafeBootNet:[b]64bit:[/b] CoreMessagingRegistrar - C:\Windows\SysNative\CoreMessaging.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] EFS - C:\Windows\SysNative\efssvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] File system - Driver Group
SafeBootNet:[b]64bit:[/b] Filter - Driver Group
SafeBootNet:[b]64bit:[/b] HelpSvc - Service
SafeBootNet:[b]64bit:[/b] KeyIso - C:\Windows\SysNative\keyiso.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] LSM - C:\Windows\SysNative\lsm.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] MBAMService - Service
SafeBootNet:[b]64bit:[/b] Messenger - Service
SafeBootNet:[b]64bit:[/b] mrxsmb10 - Driver
SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group
SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group
SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group
SafeBootNet:[b]64bit:[/b] Netlogon - C:\Windows\SysNative\netlogon.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] netprofm - C:\Windows\SysNative\netprofmsvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] NetSetupSvc - C:\Windows\SysNative\NetSetupSvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] Network - Driver Group
SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group
SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group
SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group
SafeBootNet:[b]64bit:[/b] rdpencdd.sys - Driver
SafeBootNet:[b]64bit:[/b] rdsessmgr - Service
SafeBootNet:[b]64bit:[/b] sacsvr - Service
SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootNet:[b]64bit:[/b] SerCx2.sys - C:\Windows\SysNative\drivers\SerCx2.sys (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] SmartcardSimulator - Driver
SafeBootNet:[b]64bit:[/b] SpbCx.sys - C:\Windows\SysNative\drivers\SpbCx.sys (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] StateRepository - C:\Windows\SysNative\Windows.StateRepository.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group
SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootNet:[b]64bit:[/b] SystemEventsBroker - C:\Windows\SysNative\SystemEventsBrokerServer.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] TBS - Service
SafeBootNet:[b]64bit:[/b] TDI - Driver Group
SafeBootNet:[b]64bit:[/b] TileDataModelSvc - C:\Windows\SysNative\tileobjserver.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] uefi.sys - C:\Windows\SysNative\drivers\uefi.sys (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] UserManager - C:\Windows\SysNative\usermgr.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] VaultSvc - C:\Windows\SysNative\vaultsvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] VirtualSmartcardReader - Driver
SafeBootNet:[b]64bit:[/b] vmms - Service
SafeBootNet:[b]64bit:[/b] Wcmsvc - C:\Windows\SysNative\wcmsvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] WudfUsbccidDriver - Driver
SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet:[b]64bit:[/b] {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices
SafeBootNet:[b]64bit:[/b] {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller
SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet:[b]64bit:[/b] {F2E7DD72-6468-4E36-B6F1-6488F42C1B52} - Firmware
SafeBootNet: AppMgmt - Service
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: Browser - Service
SafeBootNet: CoreMessagingRegistrar - C:\Windows\SysWOW64\CoreMessaging.dll (Microsoft Corporation)
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: MBAMService - Service
SafeBootNet: Messenger - Service
SafeBootNet: mrxsmb10 - Driver
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdpencdd.sys - Driver
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: SmartcardSimulator - Driver
SafeBootNet: StateRepository - C:\Windows\SysWOW64\Windows.StateRepository.dll (Microsoft Corporation)
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TBS - Service
SafeBootNet: TDI - Driver Group
SafeBootNet: VirtualSmartcardReader - Driver
SafeBootNet: vmms - Service
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {9DA2B80F-F89F-4A49-A5C2-511B085B9E8A} - Enhanced Storage Devices
SafeBootNet: {A0A588A4-C46F-4B37-B7EA-C82FE89870C6} - SDA Standard Compliant SD Host Controller
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: {F2E7DD72-6468-4E36-B6F1-6488F42C1B52} - Firmware

ActiveX:[b]64bit:[/b] {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:[b]64bit:[/b] {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - /UserInstall
ActiveX:[b]64bit:[/b] {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:[b]64bit:[/b] {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:[b]64bit:[/b] {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:[b]64bit:[/b] {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:[b]64bit:[/b] {4FC4FAB8-DD2C-3F8B-B378-F6EF65C0EC05} - .NET Framework
ActiveX:[b]64bit:[/b] {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:[b]64bit:[/b] {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:[b]64bit:[/b] {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:[b]64bit:[/b] {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:[b]64bit:[/b] {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4340} - U
ActiveX:[b]64bit:[/b] {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -UserConfig
ActiveX:[b]64bit:[/b] {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\System32\Rundll32.exe C:\Windows\System32\mscories.dll,Install
ActiveX:[b]64bit:[/b] {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\66.0.3359.181\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
ActiveX:[b]64bit:[/b] {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:[b]64bit:[/b] {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:[b]64bit:[/b] {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:[b]64bit:[/b] {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:[b]64bit:[/b] {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:[b]64bit:[/b] >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {54BDBDCB-ED26-30CA-BFFC-5B5E414C3793} - .NET Framework
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} -
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET Framework
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP

Drivers32:[b]64bit:[/b] msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\WINDOWS\SysWow64\iccvid.dll (Radius Inc.)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

[color=#E56717]========== Files/Folders - Created Within 60 Days ==========[/color]

[2018/06/05 16:43:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Quicksys
[2018/06/05 16:43:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Quicksys
[2018/06/05 16:38:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
[2018/06/05 16:37:46 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2018/06/04 00:42:47 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Roaming\OpenOffice
[2018/06/04 00:40:58 | 000,000,000 | --SD | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.5
[2018/06/04 00:40:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\OpenOffice 4
[2018/06/04 00:40:00 | 000,000,000 | ---D | C] -- C:\Users\firef\Desktop\OpenOffice 4.1.5 (fr) Installation Files
[2018/06/03 21:07:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VulkanRT
[2018/06/03 21:07:25 | 005,947,328 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcpl.dll
[2018/06/03 21:07:25 | 002,612,520 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvsvc64.dll
[2018/06/03 21:07:25 | 001,767,360 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvsvcr.dll
[2018/06/03 21:07:25 | 000,633,984 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nv3dappshext.dll
[2018/06/03 21:07:25 | 000,450,960 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvmctray.dll
[2018/06/03 21:07:25 | 000,124,200 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvshext.dll
[2018/06/03 21:07:25 | 000,083,240 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nv3dappshextr.dll
[2018/06/03 21:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\drivers\NVIDIA Corporation
[2018/06/03 21:06:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\drivers\NVIDIA Corporation\Drs
[2018/06/03 21:03:03 | 013,727,792 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvptxJitCompiler.dll
[2018/06/03 21:03:03 | 011,273,120 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvptxJitCompiler.dll
[2018/06/03 21:03:02 | 031,278,392 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvopencl.dll
[2018/06/03 21:03:02 | 025,991,448 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvopencl.dll
[2018/06/03 21:02:58 | 001,563,584 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\NvFBC64.dll
[2018/06/03 21:02:58 | 001,419,296 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\NvIFR64.dll
[2018/06/03 21:02:58 | 001,347,480 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvEncMFTH264.dll
[2018/06/03 21:02:58 | 001,216,952 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\NvFBC.dll
[2018/06/03 21:02:58 | 001,157,208 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvfatbinaryLoader.dll
[2018/06/03 21:02:58 | 001,092,184 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\NvIFR.dll
[2018/06/03 21:02:58 | 000,904,896 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvfatbinaryLoader.dll
[2018/06/03 21:02:58 | 000,814,424 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvEncodeAPI64.dll
[2018/06/03 21:02:58 | 000,652,344 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvEncodeAPI.dll
[2018/06/03 21:02:58 | 000,627,232 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\NvIFROpenGL.dll
[2018/06/03 21:02:58 | 000,518,072 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\NvIFROpenGL.dll
[2018/06/03 21:02:57 | 002,013,784 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispco6439793.dll
[2018/06/03 21:02:57 | 001,467,808 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispgenco6439793.dll
[2018/06/03 21:02:57 | 001,063,400 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvEncMFTH264.dll
[2018/06/03 21:02:55 | 004,350,392 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcuvid.dll
[2018/06/03 21:02:55 | 003,760,672 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcuvid.dll
[2018/06/03 21:02:54 | 017,784,432 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcuda.dll
[2018/06/03 21:02:54 | 015,195,248 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcuda.dll
[2018/06/03 21:02:50 | 040,347,168 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcompiler.dll
[2018/06/03 21:02:49 | 035,250,536 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcompiler.dll
[2018/06/03 21:02:49 | 004,855,208 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvapi64.dll
[2018/06/03 21:02:49 | 004,125,048 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvapi.dll
[2018/06/03 21:02:49 | 000,474,040 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\drivers\NVIDIA Corporation\Drs\dbInstaller.exe
[2018/06/03 20:44:01 | 001,312,224 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\NvRtmpStreamer64.dll
[2018/06/03 20:44:00 | 002,496,480 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvspcap64.dll
[2018/06/03 20:44:00 | 002,164,192 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvspcap.dll
[2018/06/03 20:43:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
[2018/06/03 20:41:53 | 000,067,432 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\drivers\nvvad64v.sys
[2018/06/03 19:42:39 | 000,000,000 | ---D | C] -- C:\ProgramData\RogueKiller
[2018/06/03 19:34:10 | 000,000,000 | R--D | C] -- C:\Sandbox
[2018/06/03 19:33:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
[2018/06/03 19:33:13 | 000,032,168 | ---- | C] (Safer-Networking Ltd.) -- C:\WINDOWS\SysNative\sdnclean64.exe
[2018/06/03 19:33:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy
[2018/06/03 19:33:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spybot - Search & Destroy 2
[2018/06/03 19:31:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sandboxie
[2018/06/03 19:31:37 | 000,000,000 | ---D | C] -- C:\Program Files\Sandboxie
[2018/06/03 19:13:58 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Local\SkinSoft
[2018/06/02 17:48:13 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Roaming\Mozilla
[2018/06/02 17:48:12 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Local\Mozilla
[2018/06/02 17:48:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service
[2018/06/02 17:48:03 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2018/06/02 12:14:38 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
[2018/05/31 22:33:02 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Local\FluxSoftware
[2018/05/31 19:40:47 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome
[2018/05/30 15:53:46 | 000,320,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\vcamp110.dll
[2018/05/30 15:53:46 | 000,125,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\vcomp110.dll
[2018/05/30 15:53:45 | 000,138,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vcomp110.dll
[2018/05/30 15:53:44 | 000,385,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vcamp110.dll
[2018/05/29 22:54:06 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Local\PlaceholderTileLogoFolder
[2018/05/21 14:41:22 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Python 3.6
[2018/05/21 14:41:12 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Local\Package Cache
[2018/05/21 14:39:51 | 000,000,000 | ---D | C] -- C:\Users\firef\Desktop\fern-wifi-cracker-master
[2018/05/21 14:39:45 | 000,000,000 | ---D | C] -- C:\Users\firef\Desktop\sqlmapproject-sqlmap-42b0edc
[2018/05/21 13:32:07 | 000,000,000 | ---D | C] -- C:\Users\firef\VirtualBox VMs
[2018/05/20 11:01:13 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Local\ElevatedDiagnostics
[2018/05/20 11:00:57 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Local\Diagnostics
[2018/05/20 10:57:09 | 000,370,424 | ---- | C] (Riverbed Technology, Inc.) -- C:\WINDOWS\SysNative\wpcap.dll
[2018/05/20 10:57:09 | 000,140,360 | ---- | C] (Daiyuu Nobori, University of Tsukuba, Japan) -- C:\WINDOWS\SysNative\Packet.dll
[2018/05/20 10:57:06 | 000,282,360 | ---- | C] (Riverbed Technology, Inc.) -- C:\WINDOWS\SysWow64\wpcap.dll
[2018/05/20 10:57:06 | 000,122,440 | ---- | C] (Daiyuu Nobori, University of Tsukuba, Japan) -- C:\WINDOWS\SysWow64\Packet.dll
[2018/05/20 10:57:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Win10Pcap
[2018/05/20 10:49:47 | 002,702,336 | ---- | C] (Qualcomm Atheros Communications, Inc.) -- C:\WINDOWS\SysNative\drivers\athuwbx.sys
[2018/05/20 10:49:47 | 000,026,624 | ---- | C] (Atheros Communications, Inc.) -- C:\WINDOWS\SysNative\drivers\jswpslwfx.sys
[2018/05/20 10:49:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NETGEAR WNA1100 Genie
[2018/05/20 10:49:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NETGEAR
[2018/05/20 10:48:44 | 000,000,000 | ---D | C] -- C:\temp
[2018/05/19 14:25:06 | 000,000,000 | ---D | C] -- C:\FS2Log
[2018/05/19 00:46:13 | 000,278,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Notifier.exe
[2018/05/10 21:39:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\Minidump
[2018/05/10 18:51:18 | 000,000,000 | ---D | C] -- C:\Users\firef\Desktop\Guru3D.com
[2018/05/10 18:50:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ParkControl
[2018/05/10 18:50:01 | 000,000,000 | ---D | C] -- C:\Program Files\ParkControl
[2018/05/09 20:22:56 | 002,628,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\diagtrack.dll
[2018/05/09 20:22:56 | 001,669,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Wpc.dll
[2018/05/09 20:22:56 | 001,430,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WpcMon.exe
[2018/05/09 20:22:56 | 001,342,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Wpc.dll
[2018/05/09 20:22:54 | 017,160,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.dll
[2018/05/09 20:22:54 | 005,195,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cdp.dll
[2018/05/09 20:22:54 | 003,181,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\cdp.dll
[2018/05/09 20:22:53 | 013,704,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.dll
[2018/05/09 20:22:53 | 000,473,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AcSpecfc.dll
[2018/05/09 20:22:53 | 000,365,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ieproxy.dll
[2018/05/09 20:22:53 | 000,328,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ninput.dll
[2018/05/09 20:22:53 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\IndexedDbLegacy.dll
[2018/05/09 20:22:53 | 000,155,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\EdgeManager.dll
[2018/05/09 20:22:52 | 018,924,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\edgehtml.dll
[2018/05/09 20:22:52 | 000,459,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\webplatstorageserver.dll
[2018/05/09 20:22:52 | 000,311,192 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\atmfd.dll
[2018/05/09 20:22:52 | 000,225,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SearchFilterHost.exe
[2018/05/09 20:22:51 | 002,677,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tquery.dll
[2018/05/09 20:22:51 | 000,664,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\jscript.dll
[2018/05/09 20:22:51 | 000,649,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\fontdrvhost.exe
[2018/05/09 20:22:51 | 000,408,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms1.sys
[2018/05/09 20:22:51 | 000,382,368 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\SysNative\atmfd.dll
[2018/05/09 20:22:51 | 000,377,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SearchProtocolHost.exe
[2018/05/09 20:22:51 | 000,331,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\browserexport.exe
[2018/05/09 20:22:51 | 000,143,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssprxy.dll
[2018/05/09 20:22:51 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\fontsub.dll
[2018/05/09 20:22:51 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Chakradiag.dll
[2018/05/09 20:22:51 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mshtmled.dll
[2018/05/09 20:22:51 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wups2.dll
[2018/05/09 20:22:50 | 002,413,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\gameux.dll
[2018/05/09 20:22:49 | 007,384,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Protection.PlayReady.dll
[2018/05/09 20:22:49 | 000,531,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\jscript9diag.dll
[2018/05/09 20:22:48 | 003,405,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tquery.dll
[2018/05/09 20:22:48 | 002,902,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\win32kfull.sys
[2018/05/09 20:22:48 | 001,123,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3D12.dll
[2018/05/09 20:22:48 | 000,816,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ieproxy.dll
[2018/05/09 20:22:48 | 000,779,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fontdrvhost.exe
[2018/05/09 20:22:48 | 000,749,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms2.sys
[2018/05/09 20:22:48 | 000,584,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIRibbonRes.dll
[2018/05/09 20:22:48 | 000,373,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\clfs.sys
[2018/05/09 20:22:48 | 000,246,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll
[2018/05/09 20:22:48 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\t2embed.dll
[2018/05/09 20:22:48 | 000,169,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuuhosdeployment.dll
[2018/05/09 20:22:48 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\t2embed.dll
[2018/05/09 20:22:47 | 002,523,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\gameux.dll
[2018/05/09 20:22:47 | 001,954,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntdll.dll
[2018/05/09 20:22:47 | 001,433,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\gdi32full.dll
[2018/05/09 20:22:47 | 000,599,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\securekernel.exe
[2018/05/09 20:22:46 | 006,060,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Chakra.dll
[2018/05/09 20:22:46 | 004,723,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9.dll
[2018/05/09 20:22:46 | 000,104,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Chakradiag.dll
[2018/05/09 20:22:45 | 006,576,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Data.Pdf.dll
[2018/05/09 20:22:45 | 006,482,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Protection.PlayReady.dll
[2018/05/09 20:22:45 | 001,490,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Store.dll
[2018/05/09 20:22:45 | 001,416,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3D12.dll
[2018/05/09 20:22:45 | 001,057,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msvproc.dll
[2018/05/09 20:22:45 | 000,820,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\netlogon.dll
[2018/05/09 20:22:45 | 000,595,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vbscript.dll
[2018/05/09 20:22:45 | 000,584,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIRibbonRes.dll
[2018/05/09 20:22:45 | 000,462,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuuhext.dll
[2018/05/09 20:22:45 | 000,437,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\USBXHCI.SYS
[2018/05/09 20:22:45 | 000,308,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Store.TestingFramework.dll
[2018/05/09 20:22:45 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fontsub.dll
[2018/05/09 20:22:44 | 003,490,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIRibbon.dll
[2018/05/09 20:22:44 | 002,741,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssrch.dll
[2018/05/09 20:22:44 | 002,464,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dwmcore.dll
[2018/05/09 20:22:44 | 002,086,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kbase.sys
[2018/05/09 20:22:44 | 001,498,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WebRuntimeManager.dll
[2018/05/09 20:22:44 | 000,128,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\tm.sys
[2018/05/09 20:22:43 | 008,600,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntoskrnl.exe
[2018/05/09 20:22:43 | 003,663,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kfull.sys
[2018/05/09 20:22:43 | 001,638,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\gdi32full.dll
[2018/05/09 20:22:43 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msisip.dll
[2018/05/09 20:22:42 | 008,068,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Chakra.dll
[2018/05/09 20:22:42 | 000,808,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript.dll
[2018/05/09 20:22:42 | 000,672,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9diag.dll
[2018/05/09 20:22:42 | 000,276,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dxtrans.dll
[2018/05/09 20:22:42 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mshtmled.dll
[2018/05/09 20:22:42 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\imgutil.dll
[2018/05/09 20:22:41 | 012,689,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wmp.dll
[2018/05/09 20:22:41 | 004,248,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MFMediaEngine.dll
[2018/05/09 20:22:41 | 001,548,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lsasrv.dll
[2018/05/09 20:22:41 | 001,524,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfplat.dll
[2018/05/09 20:22:41 | 001,474,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ieapfltr.dll
[2018/05/09 20:22:41 | 001,056,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvax64.exe
[2018/05/09 20:22:41 | 001,054,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msvproc.dll
[2018/05/09 20:22:41 | 000,403,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WpAXHolder.dll
[2018/05/09 20:22:41 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\IndexedDbLegacy.dll
[2018/05/09 20:22:41 | 000,077,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvloader.dll
[2018/05/09 20:22:40 | 008,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Data.Pdf.dll
[2018/05/09 20:22:40 | 003,995,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIRibbon.dll
[2018/05/09 20:22:40 | 001,925,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Store.dll
[2018/05/09 20:22:40 | 000,389,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ninput.dll
[2018/05/09 20:22:39 | 002,857,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dwmcore.dll
[2018/05/09 20:22:39 | 002,513,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\KernelBase.dll
[2018/05/09 20:22:39 | 000,250,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppxAllUserStore.dll
[2018/05/09 20:22:39 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AcSpecfc.dll
[2018/05/09 20:22:37 | 001,597,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ieapfltr.dll
[2018/05/09 20:22:37 | 000,675,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\webplatstorageserver.dll
[2018/05/09 20:22:36 | 025,254,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\edgehtml.dll
[2018/05/09 20:22:36 | 013,660,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmp.dll
[2018/05/09 20:22:36 | 004,814,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MFMediaEngine.dll
[2018/05/09 20:22:36 | 001,779,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfplat.dll
[2018/05/09 20:22:36 | 001,206,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvix64.exe
[2018/05/09 20:22:35 | 001,236,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TokenBroker.dll
[2018/05/09 20:22:35 | 000,979,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LicenseManager.dll
[2018/05/09 20:22:35 | 000,747,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LicenseManager.dll
[2018/05/09 20:22:35 | 000,598,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Security.Authentication.Web.Core.dll
[2018/05/09 20:22:35 | 000,508,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingSync.dll
[2018/05/09 20:22:35 | 000,363,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsEnvironment.Desktop.dll
[2018/05/09 20:22:35 | 000,197,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingMonitor.dll
[2018/05/09 20:22:35 | 000,169,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SettingMonitor.dll
[2018/05/09 20:22:35 | 000,153,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BrowserSettingSync.dll
[2018/05/09 20:22:33 | 004,385,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ExplorerFrame.dll
[2018/05/09 20:22:33 | 003,287,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SyncCenter.dll
[2018/05/09 20:22:33 | 002,890,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Resources.dll
[2018/05/09 20:22:33 | 000,920,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TokenBroker.dll
[2018/05/09 20:22:33 | 000,695,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Search.dll
[2018/05/09 20:22:33 | 000,576,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\hgcpl.dll
[2018/05/09 20:22:33 | 000,524,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\windows.immersiveshell.serviceprovider.dll
[2018/05/09 20:22:33 | 000,456,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LockAppBroker.dll
[2018/05/09 20:22:33 | 000,402,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SettingSync.dll
[2018/05/09 20:22:33 | 000,329,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\InputSwitch.dll
[2018/05/09 20:22:33 | 000,247,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\browserbroker.dll
[2018/05/09 20:22:33 | 000,158,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twext.dll
[2018/05/09 20:22:33 | 000,061,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wldp.dll
[2018/05/09 20:22:32 | 006,467,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinui.dll
[2018/05/09 20:22:32 | 005,859,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\StartTileData.dll
[2018/05/09 20:22:32 | 004,113,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_nt.dll
[2018/05/09 20:22:32 | 002,976,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinui.pcshell.dll
[2018/05/09 20:22:32 | 000,884,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Search.dll
[2018/05/09 20:22:32 | 000,556,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LockAppBroker.dll
[2018/05/09 20:22:32 | 000,421,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InputSwitch.dll
[2018/05/09 20:22:31 | 007,675,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\windows.storage.dll
[2018/05/09 20:22:31 | 004,772,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ExplorerFrame.dll
[2018/05/09 20:22:31 | 003,485,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\explorer.exe
[2018/05/09 20:22:31 | 001,509,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Immersive.dll
[2018/05/09 20:22:31 | 000,792,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssvp.dll
[2018/05/09 20:22:31 | 000,621,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hgcpl.dll
[2018/05/09 20:22:31 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\stobject.dll
[2018/05/09 20:22:31 | 000,358,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wintrust.dll
[2018/05/09 20:22:31 | 000,181,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twext.dll
[2018/05/09 20:22:31 | 000,070,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wldp.dll
[2018/05/09 20:22:31 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\pcalua.exe
[2018/05/09 20:22:30 | 007,545,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinui.dll
[2018/05/09 20:22:30 | 003,367,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SyncCenter.dll
[2018/05/09 20:22:30 | 002,002,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aitstatic.exe
[2018/05/09 20:22:30 | 001,463,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msctf.dll
[2018/05/09 20:22:30 | 001,057,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\comdlg32.dll
[2018/05/09 20:22:30 | 000,863,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntshrui.dll
[2018/05/09 20:22:30 | 000,859,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\appwiz.cpl
[2018/05/09 20:22:30 | 000,386,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\zipfldr.dll
[2018/05/09 20:22:29 | 003,904,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
[2018/05/09 20:22:29 | 001,739,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Immersive.dll
[2018/05/09 20:22:29 | 000,965,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fontext.dll
[2018/05/09 20:22:29 | 000,721,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LogonController.dll
[2018/05/09 20:22:29 | 000,371,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\daxexec.dll
[2018/05/09 20:22:28 | 006,092,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\windows.storage.dll
[2018/05/09 20:22:28 | 002,814,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\themeui.dll
[2018/05/09 20:22:21 | 003,177,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentServer.dll
[2018/05/09 20:22:21 | 002,711,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmp4srcsnk.dll
[2018/05/09 20:22:21 | 002,472,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UpdateAgent.dll
[2018/05/09 20:22:21 | 002,209,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentExtensions.onecore.dll
[2018/05/09 20:22:21 | 001,495,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentExtensions.desktop.dll
[2018/05/09 20:22:21 | 000,688,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentClient.dll
[2018/05/09 20:22:21 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppxSysprep.dll
[2018/05/09 20:22:21 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DeviceUpdateAgent.dll
[2018/05/09 20:22:20 | 002,462,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmp4srcsnk.dll
[2018/05/09 20:22:20 | 002,268,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfsrcsnk.dll
[2018/05/09 20:22:20 | 002,223,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlidsvc.dll
[2018/05/09 20:22:20 | 001,456,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfsrcsnk.dll
[2018/05/09 20:22:20 | 001,092,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.efi
[2018/05/09 20:22:20 | 001,017,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmpeg2srcsnk.dll
[2018/05/09 20:22:20 | 000,924,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.exe
[2018/05/09 20:22:19 | 001,425,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SystemSettings.Handlers.dll
[2018/05/09 20:22:19 | 001,415,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.efi
[2018/05/09 20:22:19 | 001,209,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.exe
[2018/05/09 20:22:19 | 000,711,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ci.dll
[2018/05/09 20:22:19 | 000,608,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\devinv.dll
[2018/05/09 20:22:19 | 000,461,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dcntel.dll
[2018/05/09 20:22:19 | 000,423,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\invagent.dll
[2018/05/09 20:22:19 | 000,300,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\acmigration.dll
[2018/05/09 20:22:19 | 000,272,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aepic.dll
[2018/05/09 20:22:19 | 000,137,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CompatTelRunner.exe
[2018/05/09 20:22:19 | 000,069,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32appinventorycsp.dll
[2018/05/09 20:22:19 | 000,035,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DeviceCensus.exe
[2018/05/09 20:22:18 | 002,490,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\themecpl.dll
[2018/05/09 20:22:18 | 002,462,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\themecpl.dll
[2018/05/09 20:22:18 | 001,568,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\appraiser.dll
[2018/05/09 20:22:18 | 001,506,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmpeg2srcsnk.dll
[2018/05/09 20:22:18 | 001,353,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usercpl.dll
[2018/05/09 20:22:18 | 001,300,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usocore.dll
[2018/05/09 20:22:18 | 001,230,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\usercpl.dll
[2018/05/09 20:22:18 | 000,748,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\generaltel.dll
[2018/05/09 20:22:18 | 000,664,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aeinv.dll
[2018/05/09 20:22:18 | 000,531,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\daxexec.dll
[2018/05/09 20:22:18 | 000,526,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\authui.dll
[2018/05/09 20:22:18 | 000,503,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_User.dll
[2018/05/09 20:22:18 | 000,496,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\updatehandlers.dll
[2018/05/09 20:22:18 | 000,400,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusNotification.exe
[2018/05/09 20:22:18 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\IdCtrls.dll
[2018/05/09 20:22:18 | 000,096,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\IdCtrls.dll
[2018/05/09 20:22:17 | 000,837,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Security.Authentication.Web.Core.dll
[2018/05/09 20:22:16 | 003,180,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\combase.dll
[2018/05/09 20:22:16 | 002,386,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\combase.dll
[2018/05/09 20:22:16 | 000,648,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserLanguagesCpl.dll
[2018/05/09 20:22:16 | 000,559,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserLanguagesCpl.dll
[2018/05/09 20:22:16 | 000,543,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppXDeploymentClient.dll
[2018/05/09 20:22:16 | 000,202,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppxAllUserStore.dll
[2018/05/09 20:22:15 | 008,432,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mstscax.dll
[2018/05/09 20:22:15 | 001,344,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dosvc.dll
[2018/05/09 20:22:15 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MicrosoftAccountWAMExtension.dll
[2018/05/09 20:22:15 | 000,212,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\aepic.dll
[2018/05/09 20:22:13 | 000,301,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MicrosoftAccountWAMExtension.dll
[2018/05/09 20:22:12 | 001,224,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ShareHost.dll
[2018/05/09 20:22:12 | 000,201,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EdgeManager.dll
[2018/05/09 20:22:12 | 000,124,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\BrowserSettingSync.dll
[2018/05/09 20:22:11 | 007,813,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mstscax.dll
[2018/05/09 20:22:11 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msisip.dll
[2018/05/09 20:22:10 | 001,717,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\comsvcs.dll
[2018/05/09 20:22:10 | 000,899,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SmartcardCredentialProvider.dll
[2018/05/09 20:22:10 | 000,583,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.CloudStore.Schema.Shell.dll
[2018/05/09 20:22:10 | 000,164,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dmcertinst.exe
[2018/05/09 20:22:09 | 000,793,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\oleaut32.dll
[2018/05/09 20:22:09 | 000,623,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aadcloudap.dll
[2018/05/09 20:22:09 | 000,496,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Geolocation.dll
[2018/05/09 20:22:09 | 000,077,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CloudNotifications.exe
[2018/05/09 20:22:08 | 001,873,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\crypt32.dll
[2018/05/09 20:22:08 | 001,269,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WinTypes.dll
[2018/05/09 20:22:08 | 000,997,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ShareHost.dll
[2018/05/09 20:22:08 | 000,682,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlidprov.dll
[2018/05/09 20:22:07 | 001,576,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\enterprisecsps.dll
[2018/05/09 20:22:07 | 001,353,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\comsvcs.dll
[2018/05/09 20:22:07 | 000,832,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WinTypes.dll
[2018/05/09 20:22:07 | 000,825,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinui.appcore.dll
[2018/05/09 20:22:07 | 000,626,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SmartcardCredentialProvider.dll
[2018/05/09 20:22:07 | 000,563,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppResolver.dll
[2018/05/09 20:22:07 | 000,366,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Geolocation.dll
[2018/05/09 20:22:07 | 000,358,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Wldap32.dll
[2018/05/09 20:22:06 | 000,703,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ngccredprov.dll
[2018/05/09 20:22:06 | 000,702,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\kernel32.dll
[2018/05/09 20:22:06 | 000,657,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hhctrl.ocx
[2018/05/09 20:22:06 | 000,531,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlidprov.dll
[2018/05/09 20:22:06 | 000,518,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dmenrollengine.dll
[2018/05/09 20:22:06 | 000,271,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DAFWSD.dll
[2018/05/09 20:22:06 | 000,253,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\domgmt.dll
[2018/05/09 20:22:06 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aadauthhelper.dll
[2018/05/09 20:22:04 | 000,661,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\comctl32.dll
[2018/05/09 20:22:02 | 003,630,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mstsc.exe
[2018/05/09 20:22:02 | 000,976,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\HelpPane.exe
[2018/05/09 20:22:02 | 000,674,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LockController.dll
[2018/05/09 20:22:02 | 000,627,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpcore.dll
[2018/05/09 20:22:02 | 000,444,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppResolver.dll
[2018/05/09 20:22:01 | 003,430,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mstsc.exe
[2018/05/09 20:22:01 | 000,702,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Internal.Management.dll
[2018/05/09 20:22:01 | 000,571,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ngccredprov.dll
[2018/05/09 20:22:01 | 000,535,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rdpcore.dll
[2018/05/09 20:22:01 | 000,483,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\catsrvut.dll
[2018/05/09 20:22:01 | 000,448,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LockHostingFramework.dll
[2018/05/09 20:22:01 | 000,262,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\credprovhost.dll
[2018/05/09 20:22:01 | 000,218,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\credprovhost.dll
[2018/05/09 20:22:01 | 000,198,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CloudStorageWizard.exe
[2018/05/09 20:22:01 | 000,166,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CloudStorageWizard.exe
[2018/05/09 20:22:01 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\aadauthhelper.dll
[2018/05/09 20:22:01 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CredProv2faHelper.dll
[2018/05/09 20:22:01 | 000,092,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CloudNotifications.exe
[2018/05/09 20:22:01 | 000,063,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\appidapi.dll
[2018/05/09 20:22:01 | 000,052,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\appidapi.dll
[2018/05/09 20:22:01 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LaunchWinApp.exe
[2018/05/09 20:22:00 | 001,472,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wsecedit.dll
[2018/05/09 20:22:00 | 000,540,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\hhctrl.ocx
[2018/05/09 20:22:00 | 000,490,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SystemSettings.UserAccountsHandlers.dll
[2018/05/09 20:22:00 | 000,440,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dmenrollengine.dll
[2018/05/09 20:22:00 | 000,392,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RDXTaskFactory.dll
[2018/05/09 20:22:00 | 000,327,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\shlwapi.dll
[2018/05/09 20:22:00 | 000,225,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\credprovs.dll
[2018/05/09 20:22:00 | 000,182,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BitLockerCsp.dll
[2018/05/09 20:22:00 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssph.dll
[2018/05/09 20:22:00 | 000,143,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srpapi.dll
[2018/05/09 20:22:00 | 000,113,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\BitLockerCsp.dll
[2018/05/09 20:22:00 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CredProv2faHelper.dll
[2018/05/09 20:21:59 | 001,332,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wsecedit.dll
[2018/05/09 20:21:59 | 000,971,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MCRecvSrc.dll
[2018/05/09 20:21:59 | 000,697,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinui.appcore.dll
[2018/05/09 20:21:59 | 000,669,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MCRecvSrc.dll
[2018/05/09 20:21:59 | 000,516,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Internal.Management.dll
[2018/05/09 20:21:59 | 000,408,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\catsrvut.dll
[2018/05/09 20:21:59 | 000,356,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DeviceEnroller.exe
[2018/05/09 20:21:59 | 000,312,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AboveLockAppHost.dll
[2018/05/09 20:21:59 | 000,252,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\coredpus.dll
[2018/05/09 20:21:59 | 000,194,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\itircl.dll
[2018/05/09 20:21:59 | 000,192,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\credprovs.dll
[2018/05/09 20:21:59 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\itircl.dll
[2018/05/09 20:21:59 | 000,145,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssph.dll
[2018/05/09 20:21:59 | 000,125,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srpapi.dll
[2018/05/09 20:21:59 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\eShims.dll
[2018/05/09 20:21:59 | 000,090,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingSyncPolicy.dll
[2018/05/09 20:21:59 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SettingSyncPolicy.dll
[2018/05/09 20:21:59 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ByteCodeGenerator.exe
[2018/05/09 20:21:57 | 000,436,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wincorlib.dll
[2018/05/09 20:21:57 | 000,252,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AboveLockAppHost.dll
[2018/05/09 20:21:57 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mdmregistration.dll
[2018/05/09 20:21:57 | 000,215,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\enrollmentapi.dll
[2018/05/09 20:21:57 | 000,194,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mdmregistration.dll
[2018/05/09 20:21:57 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mdmmigrator.dll
[2018/05/09 20:21:57 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssitlb.dll
[2018/05/09 20:21:57 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\pcadm.dll
[2018/05/09 20:21:57 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Shell.Search.UriHandler.dll
[2018/05/09 20:21:57 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ByteCodeGenerator.exe
[2018/05/09 20:21:57 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TokenBrokerUI.dll
[2018/05/09 20:21:57 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TokenBrokerUI.dll
[2018/05/09 20:21:57 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\pcaevts.dll
[2018/05/08 13:11:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Privax
[2018/05/08 13:11:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Privax
[2018/05/08 13:11:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HMA! Pro VPN
[2018/05/08 13:02:14 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Local\uGet
[2018/05/08 13:01:50 | 000,000,000 | ---D | C] -- C:\Users\firef\Desktop\uget
[2018/05/07 15:08:09 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Local\web_engine
[2018/05/07 15:08:09 | 000,000,000 | ---D | C] -- C:\Users\firef\.QtWebEngineProcess
[2018/05/07 15:08:08 | 000,000,000 | ---D | C] -- C:\Users\firef\.web_engine
[2018/05/07 15:06:53 | 000,000,000 | ---D | C] -- C:\Users\firef\Documents\ROCCAT
[2018/05/07 14:55:13 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information
[2018/05/07 14:55:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ROCCAT
[2018/05/07 14:54:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ROCCAT
[2018/05/05 22:04:58 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Local\osu!
[2018/05/04 18:50:24 | 000,000,000 | ---D | C] -- C:\Users\firef\.VirtualBox
[2018/05/04 18:47:55 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\DRVSTORE
[2018/05/04 18:47:47 | 000,000,000 | ---D | C] -- C:\Program Files\Oracle
[2018/05/03 20:33:26 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Local\CrashDumps
[2018/05/01 23:20:15 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Local\Adobe
[2018/05/01 23:08:55 | 000,000,000 | ---D | C] -- C:\Users\firef\Documents\League of Legends
[2018/05/01 23:04:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
[2018/05/01 23:04:07 | 001,493,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_39.dll
[2018/05/01 23:04:07 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_39.dll
[2018/05/01 23:04:06 | 003,851,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DX9_39.dll
[2018/05/01 21:01:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Easy
[2018/05/01 16:38:14 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Roaming\EasyAntiCheat
[2018/05/01 15:20:27 | 000,344,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\edgeIso.dll
[2018/05/01 15:20:26 | 002,393,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AcGenral.dll
[2018/05/01 15:20:26 | 000,369,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msIso.dll
[2018/05/01 15:20:24 | 000,662,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\evr.dll
[2018/05/01 15:20:23 | 000,471,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hal.dll
[2018/05/01 15:20:21 | 001,558,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\winmde.dll
[2018/05/01 15:20:21 | 001,149,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfsvr.dll
[2018/05/01 15:20:21 | 000,755,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\evr.dll
[2018/05/01 15:20:21 | 000,236,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\FSClient.dll
[2018/05/01 15:20:20 | 000,536,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\edgeIso.dll
[2018/05/01 15:20:18 | 006,014,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.dll
[2018/05/01 15:20:18 | 001,254,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfsvr.dll
[2018/05/01 15:20:18 | 000,588,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\actxprxy.dll
[2018/05/01 15:20:17 | 004,670,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfcore.dll
[2018/05/01 15:20:16 | 000,770,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\WdiWiFi.sys
[2018/05/01 15:20:16 | 000,461,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlansec.dll
[2018/05/01 15:20:16 | 000,431,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msIso.dll
[2018/05/01 15:20:13 | 006,791,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.dll
[2018/05/01 15:20:13 | 004,506,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfcore.dll
[2018/05/01 15:20:07 | 017,085,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\HologramCompositor.dll
[2018/05/01 15:20:07 | 000,956,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Spectrum.exe
[2018/05/01 15:19:49 | 003,578,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SRH.dll
[2018/05/01 15:19:48 | 002,859,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SRH.dll
[2018/05/01 15:19:43 | 002,338,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3d11.dll
[2018/05/01 15:19:40 | 000,340,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msexcl40.dll
[2018/05/01 15:19:39 | 004,050,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msi.dll
[2018/05/01 15:19:38 | 004,498,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xpsrchvw.exe
[2018/05/01 15:19:37 | 003,980,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.StateRepository.dll
[2018/05/01 15:19:37 | 002,184,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssrch.dll
[2018/05/01 15:19:37 | 000,451,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TileDataRepository.dll
[2018/05/01 15:19:36 | 002,983,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mmcndmgr.dll
[2018/05/01 15:19:13 | 006,722,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mspaint.exe
[2018/05/01 15:19:13 | 005,500,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aclui.dll
[2018/05/01 15:19:13 | 001,313,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Taskmgr.exe
[2018/05/01 15:19:13 | 000,800,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Magnify.exe
[2018/05/01 15:19:13 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rshx32.dll
[2018/05/01 15:19:12 | 003,756,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bootux.dll
[2018/05/01 15:19:12 | 001,574,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Cred.dll
[2018/05/01 15:19:12 | 001,336,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ole32.dll
[2018/05/01 15:19:12 | 000,849,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\uDWM.dll
[2018/05/01 15:19:12 | 000,826,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msdtcprx.dll
[2018/05/01 15:19:12 | 000,705,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wimgapi.dll
[2018/05/01 15:19:12 | 000,525,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wimserv.exe
[2018/05/01 15:19:12 | 000,404,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CloudExperienceHost.dll
[2018/05/01 15:19:12 | 000,385,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\cldflt.sys
[2018/05/01 15:19:12 | 000,336,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppLockerCSP.dll
[2018/05/01 15:19:12 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\shsetup.dll
[2018/05/01 15:19:12 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cldapi.dll
[2018/05/01 15:19:12 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\appidtel.exe
[2018/05/01 15:19:11 | 000,774,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetSetupEngine.dll
[2018/05/01 15:19:11 | 000,143,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetSetupApi.dll
[2018/05/01 15:19:11 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetDriverInstall.dll
[2018/05/01 15:19:10 | 001,173,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rpcrt4.dll
[2018/05/01 15:19:10 | 000,951,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usermgr.dll
[2018/05/01 15:19:10 | 000,716,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winlogon.exe
[2018/05/01 15:19:10 | 000,680,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sud.dll
[2018/05/01 15:19:10 | 000,566,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DevicePairing.dll
[2018/05/01 15:19:10 | 000,564,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\NetSetupEngine.dll
[2018/05/01 15:19:10 | 000,535,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\netio.sys
[2018/05/01 15:19:10 | 000,441,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\FWPKCLNT.SYS
[2018/05/01 15:19:10 | 000,308,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetSetupSvc.dll
[2018/05/01 15:19:10 | 000,276,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\shutdownux.dll
[2018/05/01 15:19:10 | 000,184,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sspicli.dll
[2018/05/01 15:19:10 | 000,034,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\fs_rec.sys
[2018/05/01 15:19:09 | 005,105,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AuthFWSnapin.dll
[2018/05/01 15:19:09 | 000,255,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\edputil.dll
[2018/05/01 15:19:09 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TtlsExt.dll
[2018/05/01 15:19:09 | 000,127,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\gpapi.dll
[2018/05/01 15:19:09 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\efslsaext.dll
[2018/05/01 15:19:09 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fdPnp.dll
[2018/05/01 15:19:09 | 000,047,104 | ---- | C] (Adobe Systems) -- C:\WINDOWS\SysNative\atmlib.dll
[2018/05/01 15:19:09 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\nshhttp.dll
[2018/05/01 15:19:09 | 000,038,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\Diskdump.sys
[2018/05/01 15:19:09 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fdWNet.dll
[2018/05/01 15:19:09 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\Dumpstorport.sys
[2018/05/01 15:19:08 | 001,664,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\GdiPlus.dll
[2018/05/01 15:19:08 | 001,029,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\efscore.dll
[2018/05/01 15:19:08 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\rmcast.sys
[2018/05/01 15:19:08 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msoert2.dll
[2018/05/01 15:19:08 | 000,099,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hlink.dll
[2018/05/01 15:19:08 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\efssvc.dll
[2018/05/01 15:19:08 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msrating.dll
[2018/05/01 15:19:07 | 001,343,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wifinetworkmanager.dll
[2018/05/01 15:19:07 | 000,889,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wcmsvc.dll
[2018/05/01 15:19:07 | 000,461,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wifitask.exe
[2018/05/01 15:19:07 | 000,240,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\ahcache.sys
[2018/05/01 15:19:07 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wificonnapi.dll
[2018/05/01 15:19:07 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\irda.sys
[2018/05/01 15:19:07 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\davclnt.dll
[2018/05/01 15:19:06 | 001,157,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\localspl.dll
[2018/05/01 15:19:06 | 000,836,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\printfilterpipelinesvc.exe
[2018/05/01 15:19:06 | 000,795,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NaturalAuth.dll
[2018/05/01 15:19:06 | 000,640,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\HeadTrackerStorage.dll
[2018/05/01 15:19:06 | 000,432,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provengine.dll
[2018/05/01 15:19:06 | 000,427,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provhandlers.dll
[2018/05/01 15:19:06 | 000,292,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wscapi.dll
[2018/05/01 15:19:06 | 000,240,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TtlsAuth.dll
[2018/05/01 15:19:06 | 000,219,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TtlsCfg.dll
[2018/05/01 15:19:06 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provisioningcsp.dll
[2018/05/01 15:19:06 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provdatastore.dll
[2018/05/01 15:19:06 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provtool.exe
[2018/05/01 15:19:06 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Management.Provisioning.ProxyStub.dll
[2018/05/01 15:19:06 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wscproxystub.dll
[2018/05/01 15:19:05 | 000,837,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32spl.dll
[2018/05/01 15:19:05 | 000,649,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\advapi32.dll
[2018/05/01 15:19:05 | 000,508,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\timedate.cpl
[2018/05/01 15:19:05 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\printfilterpipelineprxy.dll
[2018/05/01 15:19:04 | 000,588,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SmsRouterSvc.dll
[2018/05/01 15:19:04 | 000,519,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SecurityHealthService.exe
[2018/05/01 15:19:04 | 000,417,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlanapi.dll
[2018/05/01 15:19:04 | 000,309,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wifiprofilessettinghandler.dll
[2018/05/01 15:19:04 | 000,189,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SecurityHealthAgent.dll
[2018/05/01 15:19:04 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlgpclnt.dll
[2018/05/01 15:19:04 | 000,075,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SecurityHealthProxyStub.dll
[2018/05/01 15:19:04 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wfdprov.dll
[2018/05/01 15:19:03 | 000,549,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WWanAPI.dll
[2018/05/01 15:19:03 | 000,386,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AUDIOKSE.dll
[2018/05/01 15:19:03 | 000,233,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ksproxy.ax
[2018/05/01 15:19:03 | 000,201,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfksproxy.dll
[2018/05/01 15:19:03 | 000,193,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfsensorgroup.dll
[2018/05/01 15:19:03 | 000,160,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LockScreenContent.dll
[2018/05/01 15:19:03 | 000,140,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\RTWorkQ.dll
[2018/05/01 15:19:03 | 000,094,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wwapi.dll
[2018/05/01 15:19:03 | 000,074,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\remoteaudioendpoint.dll
[2018/05/01 15:19:02 | 002,349,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\InputService.dll
[2018/05/01 15:19:02 | 000,966,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Unistore.dll
[2018/05/01 15:19:02 | 000,464,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Core.TextInput.dll
[2018/05/01 15:19:02 | 000,430,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Internal.Bluetooth.dll
[2018/05/01 15:19:02 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PimIndexMaintenanceClient.dll
[2018/05/01 15:19:01 | 000,289,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Storage.ApplicationData.dll
[2018/05/01 15:19:01 | 000,160,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserDeviceRegistration.dll
[2018/05/01 15:19:01 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppCapture.dll
[2018/05/01 15:19:00 | 000,886,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\bcastdvr.exe
[2018/05/01 15:18:59 | 000,721,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssvp.dll
[2018/05/01 15:18:59 | 000,354,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CloudExperienceHostCommon.dll
[2018/05/01 15:18:59 | 000,288,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Search.ProtocolHandler.MAPI2.dll
[2018/05/01 15:18:59 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\container.dll
[2018/05/01 15:18:56 | 001,485,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rdpserverbase.dll
[2018/05/01 15:18:55 | 001,948,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MapGeocoder.dll
[2018/05/01 15:18:55 | 000,940,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.Vpn.dll
[2018/05/01 15:18:55 | 000,542,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.StateRepositoryPS.dll
[2018/05/01 15:18:55 | 000,527,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\StateRepository.Core.dll
[2018/05/01 15:18:55 | 000,405,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Payments.dll
[2018/05/01 15:18:55 | 000,147,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.StateRepositoryUpgrade.dll
[2018/05/01 15:18:55 | 000,123,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.StateRepositoryClient.dll
[2018/05/01 15:18:55 | 000,089,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.StateRepositoryBroker.dll
[2018/05/01 15:18:54 | 002,409,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MapRouter.dll
[2018/05/01 15:18:52 | 006,118,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mos.dll
[2018/05/01 15:18:52 | 000,706,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MapControlCore.dll
[2018/05/01 15:18:50 | 006,204,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\BingMaps.dll
[2018/05/01 15:18:49 | 001,008,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\InstallService.dll
[2018/05/01 15:18:49 | 000,981,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\JpMapControl.dll
[2018/05/01 15:18:49 | 000,956,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rdpbase.dll
[2018/05/01 15:18:49 | 000,099,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rmclient.dll
[2018/05/01 15:18:47 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\cldapi.dll
[2018/05/01 15:18:46 | 000,422,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\policymanager.dll
[2018/05/01 15:18:46 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PCShellCommonProxyStub.dll
[2018/05/01 15:18:45 | 000,981,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Cred.dll
[2018/05/01 15:18:43 | 000,731,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Magnify.exe
[2018/05/01 15:18:41 | 006,532,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mspaint.exe
[2018/05/01 15:18:38 | 000,233,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppLockerCSP.dll
[2018/05/01 15:18:38 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\EnterpriseAppMgmtClient.dll
[2018/05/01 15:18:36 | 000,707,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msdtcprx.dll
[2018/05/01 15:18:35 | 000,110,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\shsetup.dll
[2018/05/01 14:45:57 | 005,388,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\aclui.dll
[2018/05/01 14:45:56 | 001,250,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Taskmgr.exe
[2018/05/01 14:45:56 | 000,504,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\DevicePairing.dll
[2018/05/01 14:45:56 | 000,247,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\winsku.dll
[2018/05/01 14:45:56 | 000,083,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\winbrand.dll
[2018/05/01 14:45:56 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\virtdisk.dll
[2018/05/01 14:45:55 | 000,755,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\appwiz.cpl
[2018/05/01 14:45:55 | 000,653,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\sud.dll
[2018/05/01 14:45:54 | 005,105,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AuthFWSnapin.dll
[2018/05/01 14:45:54 | 000,232,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\edputil.dll
[2018/05/01 14:45:54 | 000,038,912 | ---- | C] (Adobe Systems) -- C:\WINDOWS\SysWow64\atmlib.dll
[2018/05/01 14:45:53 | 002,427,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mmcndmgr.dll
[2018/05/01 14:45:53 | 001,470,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\GdiPlus.dll
[2018/05/01 14:45:53 | 000,124,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\sendmail.dll
[2018/05/01 14:45:53 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\fdPnp.dll
[2018/05/01 14:45:53 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\nshhttp.dll
[2018/05/01 14:45:53 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wmiprop.dll
[2018/05/01 14:45:53 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msrating.dll
[2018/05/01 14:45:52 | 001,488,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mmc.exe
[2018/05/01 14:45:52 | 000,621,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.BackgroundMediaPlayback.dll
[2018/05/01 14:45:52 | 000,620,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Playback.BackgroundMediaPlayer.dll
[2018/05/01 14:45:52 | 000,604,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Playback.MediaPlayer.dll
[2018/05/01 14:45:52 | 000,301,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mmcbase.dll
[2018/05/01 14:45:52 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Playback.ProxyStub.dll
[2018/05/01 14:45:52 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\setup16.exe
[2018/05/01 14:45:52 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\user.exe
[2018/05/01 14:45:47 | 000,856,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rasgcw.dll
[2018/05/01 14:45:47 | 000,483,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\newdev.dll
[2018/05/01 14:45:45 | 000,718,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LicensingWinRT.dll
[2018/05/01 14:45:45 | 000,654,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\EditionUpgradeManagerObj.dll
[2018/05/01 14:45:45 | 000,079,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\DeviceReactivation.dll
[2018/05/01 14:45:44 | 000,713,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MsSpellCheckingFacility.dll
[2018/05/01 14:45:44 | 000,466,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\efswrt.dll
[2018/05/01 14:45:44 | 000,447,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rastls.dll
[2018/05/01 14:45:44 | 000,403,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\sppcomapi.dll
[2018/05/01 14:45:44 | 000,174,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\EditionUpgradeHelper.dll
[2018/05/01 14:45:44 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\offreg.dll
[2018/05/01 14:45:43 | 000,862,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rasdlg.dll
[2018/05/01 14:45:43 | 000,380,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\puiobj.dll
[2018/05/01 14:45:43 | 000,288,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\compstui.dll
[2018/05/01 14:45:43 | 000,235,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\scksp.dll
[2018/05/01 14:45:43 | 000,180,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\basecsp.dll
[2018/05/01 14:45:43 | 000,175,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\puiapi.dll
[2018/05/01 14:45:43 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\DafPrintProvider.dll
[2018/05/01 14:45:42 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wsnmp32.dll
[2018/05/01 14:45:41 | 000,699,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CPFilters.dll
[2018/05/01 14:45:41 | 000,433,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinapi.dll
[2018/05/01 14:45:41 | 000,380,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\EncDec.dll
[2018/05/01 14:45:41 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\netplwiz.dll
[2018/05/01 14:45:40 | 000,455,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\authui.dll
[2018/05/01 14:45:40 | 000,253,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\unimdm.tsp
[2018/05/01 14:45:40 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wudriver.dll
[2018/05/01 14:45:39 | 000,908,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\fontext.dll
[2018/05/01 14:45:39 | 000,463,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\timedate.cpl
[2018/05/01 14:45:39 | 000,450,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WWanAPI.dll
[2018/05/01 14:45:39 | 000,371,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\taskcomp.dll
[2018/05/01 14:45:39 | 000,258,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wscapi.dll
[2018/05/01 14:45:39 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TtlsCfg.dll
[2018/05/01 14:45:39 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlgpclnt.dll
[2018/05/01 14:45:39 | 000,073,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wwapi.dll
[2018/05/01 14:45:39 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wscproxystub.dll
[2018/05/01 14:45:32 | 000,543,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\HolographicExtensions.dll
[2018/05/01 14:45:32 | 000,329,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Internal.Feedback.Analog.dll
[2018/05/01 14:45:32 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\svf.dll
[2018/05/01 14:45:32 | 000,230,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\HoloShellRuntime.dll
[2018/05/01 14:45:32 | 000,181,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\HoloShellRuntime.dll
[2018/05/01 14:45:30 | 000,416,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\html.iec
[2018/05/01 14:45:30 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\licmgr10.dll
[2018/05/01 14:45:29 | 000,235,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\url.dll
[2018/05/01 14:45:29 | 000,229,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ie4uinit.exe
[2018/05/01 14:45:29 | 000,151,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ieUnatt.exe
[2018/05/01 14:45:29 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\occache.dll
[2018/05/01 14:45:29 | 000,143,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\IEAdvpack.dll
[2018/05/01 14:45:29 | 000,117,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iesysprep.dll
[2018/05/01 14:45:29 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tdc.ocx
[2018/05/01 14:45:29 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iesetup.dll
[2018/05/01 14:45:29 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iernonce.dll
[2018/05/01 14:45:28 | 000,757,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msfeeds.dll
[2018/05/01 14:45:28 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msfeedssync.exe
[2018/05/01 14:45:27 | 002,083,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\inetcpl.cpl
[2018/05/01 14:45:27 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iexpress.exe
[2018/05/01 14:45:27 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wextract.exe
[2018/05/01 14:45:27 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\inseng.dll
[2018/05/01 14:45:27 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\JavaScriptCollectionAgent.dll
[2018/05/01 14:45:26 | 000,561,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ieui.dll
[2018/05/01 14:45:26 | 000,456,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dxtmsft.dll
[2018/05/01 14:45:26 | 000,340,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\html.iec
[2018/05/01 14:45:26 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iepeers.dll
[2018/05/01 14:45:26 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\IEAdvpack.dll
[2018/05/01 14:45:26 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MshtmlDac.dll
[2018/05/01 14:45:26 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\pngfilt.dll
[2018/05/01 14:45:26 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mshta.exe
[2018/05/01 14:45:25 | 000,126,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\occache.dll
[2018/05/01 14:45:25 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\licmgr10.dll
[2018/05/01 14:45:25 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msfeedssync.exe
[2018/05/01 14:45:24 | 000,233,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\url.dll
[2018/05/01 14:45:24 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tdc.ocx
[2018/05/01 14:45:24 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\JavaScriptCollectionAgent.dll
[2018/05/01 14:45:23 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iesetup.dll
[2018/05/01 14:45:23 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iernonce.dll
[2018/05/01 14:45:22 | 002,014,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\inetcpl.cpl
[2018/05/01 14:45:22 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iexpress.exe
[2018/05/01 14:45:22 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wextract.exe
[2018/05/01 14:45:22 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iepeers.dll
[2018/05/01 14:45:22 | 000,123,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ieUnatt.exe
[2018/05/01 14:45:22 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iesysprep.dll
[2018/05/01 14:45:22 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\inseng.dll
[2018/05/01 14:45:22 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MshtmlDac.dll
[2018/05/01 14:45:22 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\pngfilt.dll
[2018/05/01 14:45:21 | 000,475,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ieui.dll
[2018/05/01 14:45:16 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WcnEapPeerProxy.dll
[2018/05/01 14:45:16 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WcnEapAuthProxy.dll
[2018/05/01 14:45:15 | 000,210,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\P2P.dll
[2018/05/01 14:45:15 | 000,134,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WcnApi.dll
[2018/05/01 14:45:15 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WcnApi.dll
[2018/05/01 14:45:14 | 000,568,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msra.exe
[2018/05/01 14:45:14 | 000,365,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srchadmin.dll
[2018/05/01 14:45:14 | 000,174,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\P2P.dll
[2018/05/01 14:45:14 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\racpldlg.dll
[2018/05/01 14:45:14 | 000,091,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dumpfve.sys
[2018/05/01 14:45:13 | 004,959,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rtmpltfm.dll
[2018/05/01 14:45:12 | 001,234,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rtmpal.dll
[2018/05/01 14:45:12 | 001,002,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rtmcodecs.dll
[2018/05/01 14:45:12 | 000,892,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ortcengine.dll
[2018/05/01 14:45:12 | 000,065,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rtmmvrortc.dll
[2018/05/01 14:45:11 | 003,903,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rtmpltfm.dll
[2018/05/01 14:45:10 | 003,419,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xpsrchvw.exe
[2018/05/01 14:45:10 | 000,921,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rtmpal.dll
[2018/05/01 14:45:10 | 000,854,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rtmcodecs.dll
[2018/05/01 14:45:10 | 000,649,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ortcengine.dll
[2018/05/01 14:45:10 | 000,482,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srcore.dll
[2018/05/01 14:45:10 | 000,266,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rstrui.exe
[2018/05/01 14:45:10 | 000,054,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rtmmvrortc.dll
[2018/05/01 14:45:05 | 000,624,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WMVXENCD.DLL
[2018/05/01 14:45:05 | 000,624,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SyncController.dll
[2018/05/01 14:45:05 | 000,524,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SyncController.dll
[2018/05/01 14:45:05 | 000,433,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WMVSENCD.DLL
[2018/05/01 14:45:05 | 000,369,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\APHostService.dll
[2018/05/01 14:45:04 | 002,406,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msmpeg2vdec.dll
[2018/05/01 14:45:04 | 002,255,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msmpeg2vdec.dll
[2018/05/01 14:45:04 | 001,737,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSPhotography.dll
[2018/05/01 14:45:04 | 001,384,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSVP9DEC.dll
[2018/05/01 14:45:04 | 001,348,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSPhotography.dll
[2018/05/01 14:45:04 | 001,286,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSVPXENC.dll
[2018/05/01 14:45:04 | 001,282,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSVPXENC.dll
[2018/05/01 14:45:04 | 001,133,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSVP9DEC.dll
[2018/05/01 14:45:04 | 000,710,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MSVideoDSP.dll
[2018/05/01 14:45:04 | 000,574,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MSVideoDSP.dll
[2018/05/01 14:45:04 | 000,260,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfps.dll
[2018/05/01 14:45:04 | 000,129,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfps.dll
[2018/05/01 14:45:04 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\usoapi.dll
[2018/05/01 11:04:11 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Local\PAYDAY 2
[2018/04/30 23:03:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Riot Games
[2018/04/30 17:57:11 | 000,000,000 | ---D | C] -- C:\Users\firef\Documents\Lightshot
[2018/04/30 17:43:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lightshot
[2018/04/30 17:43:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Skillbrains
[2018/04/30 17:43:33 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Local\Programs
[2018/04/30 14:43:38 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Roaming\AnkamaCertificates
[2018/04/30 14:40:52 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Roaming\Reg
[2018/04/30 14:40:45 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Roaming\Macromedia
[2018/04/30 14:40:44 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Roaming\Dofus
[2018/04/30 14:28:21 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Local\Ankama
[2018/04/29 23:08:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\MRT
[2018/04/29 23:07:09 | 141,696,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MRT-KB890830.exe
[2018/04/29 22:13:18 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Local\CrashReportClient
[2018/04/29 22:07:03 | 000,555,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\USBHUB3.SYS
[2018/04/29 22:07:03 | 000,187,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dumpsd.sys
[2018/04/29 22:06:57 | 000,899,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\samsrv.dll
[2018/04/29 22:06:56 | 000,285,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\sdbus.sys
[2018/04/29 22:06:56 | 000,149,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\storahci.sys
[2018/04/29 22:06:55 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\BasicRender.sys
[2018/04/29 22:06:54 | 000,045,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\storufs.sys
[2018/04/29 22:06:53 | 000,147,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\wcifs.sys
[2018/04/29 22:06:48 | 000,685,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioEndpointBuilder.dll
[2018/04/29 22:06:48 | 000,603,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\audiodg.exe
[2018/04/29 22:06:48 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PCShellCommonProxyStub.dll
[2018/04/29 22:06:47 | 000,542,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\FirewallAPI.dll
[2018/04/29 22:06:47 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\UcmUcsi.sys
[2018/04/29 22:06:46 | 003,010,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3d11.dll
[2018/04/29 22:06:46 | 000,059,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\bam.sys
[2018/04/29 22:06:38 | 000,192,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\netvsc.sys
[2018/04/29 22:06:38 | 000,129,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\hvsocket.sys
[2018/04/29 22:06:37 | 001,426,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioEng.dll
[2018/04/29 22:06:28 | 000,739,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dnsapi.dll
[2018/04/29 22:06:28 | 000,571,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\spaceport.sys
[2018/04/29 22:06:26 | 000,559,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\storport.sys
[2018/04/29 22:06:23 | 001,170,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioSes.dll
[2018/04/29 22:06:22 | 007,831,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3d10warp.dll
[2018/04/29 22:06:21 | 000,813,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bisrv.dll
[2018/04/29 22:06:20 | 000,615,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\services.exe
[2018/04/29 22:06:20 | 000,329,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AcGenral.dll
[2018/04/29 22:06:06 | 001,694,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winmde.dll
[2018/04/29 22:05:56 | 001,167,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ISM.dll
[2018/04/29 22:05:56 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\updatepolicy.dll
[2018/04/29 22:05:54 | 000,825,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuapi.dll
[2018/04/29 22:05:51 | 000,264,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusNotifyIcon.exe
[2018/04/29 22:05:49 | 001,055,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuapi.dll
[2018/04/29 22:04:39 | 003,211,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetworkMobileSettings.dll
[2018/04/29 22:04:35 | 000,374,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vac.exe
[2018/04/29 22:04:16 | 000,570,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TileDataRepository.dll
[2018/04/29 22:04:06 | 004,592,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SystemSettingsThresholdAdminFlowUI.dll
[2018/04/29 22:03:55 | 003,121,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Microsoft.Bluetooth.Profiles.Gatt.dll
[2018/04/29 22:03:46 | 000,334,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dusmsvc.dll
[2018/04/29 22:03:21 | 002,511,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ResetEngine.dll
[2018/04/29 22:03:21 | 001,570,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RecoveryDrive.exe
[2018/04/29 22:03:21 | 001,160,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\reseteng.dll
[2018/04/29 22:03:12 | 004,486,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.StateRepository.dll
[2018/04/29 22:03:08 | 001,619,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sppobjs.dll
[2018/04/29 22:03:08 | 001,313,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InstallService.dll
[2018/04/29 22:03:07 | 005,833,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dbgeng.dll
[2018/04/29 22:03:00 | 001,145,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ucrtbase.dll
[2018/04/29 22:02:59 | 004,839,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dbgeng.dll
[2018/04/29 22:02:54 | 008,727,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BingMaps.dll
[2018/04/29 22:02:53 | 007,145,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mos.dll
[2018/04/29 22:02:51 | 001,002,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ucrtbase.dll
[2018/04/29 22:02:48 | 000,592,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wimgapi.dll
[2018/04/29 22:02:46 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\updatepolicy.dll
[2018/04/29 22:02:45 | 001,759,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpncore.dll
[2018/04/29 22:02:42 | 000,436,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CloudExperienceHostCommon.dll
[2018/04/29 22:02:41 | 001,936,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mmc.exe
[2018/04/29 22:02:40 | 000,614,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\StateRepository.Core.dll
[2018/04/29 22:02:37 | 002,035,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpcorets.dll
[2018/04/29 22:02:33 | 003,400,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapRouter.dll
[2018/04/29 22:02:32 | 003,160,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DWrite.dll
[2018/04/29 22:02:32 | 000,722,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sppwinob.dll
[2018/04/29 22:02:32 | 000,319,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wow64.dll
[2018/04/29 22:02:31 | 000,943,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.BackgroundMediaPlayback.dll
[2018/04/29 22:02:31 | 000,918,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Playback.MediaPlayer.dll
[2018/04/29 22:02:31 | 000,306,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\FSClient.dll
[2018/04/29 22:02:30 | 000,594,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mf.dll
[2018/04/29 22:02:28 | 000,699,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lsm.dll
[2018/04/29 22:02:27 | 000,687,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\StructuredQuery.dll
[2018/04/29 22:02:25 | 000,667,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\FrameServer.dll
[2018/04/29 22:02:24 | 000,824,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ClipSVC.dll
[2018/04/29 22:02:23 | 003,125,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InputService.dll
[2018/04/29 22:02:21 | 001,234,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SEMgrSvc.dll
[2018/04/29 22:02:21 | 000,939,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rasdlg.dll
[2018/04/29 22:02:19 | 001,193,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.StateRepositoryPS.dll
[2018/04/29 22:02:18 | 000,939,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rasapi32.dll
[2018/04/29 22:02:16 | 000,898,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CoreMessaging.dll
[2018/04/29 22:02:16 | 000,401,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ncsi.dll
[2018/04/29 22:02:16 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusNotificationUx.exe
[2018/04/29 22:02:15 | 001,216,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.Vpn.dll
[2018/04/29 22:02:15 | 001,002,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\modernexecserver.dll
[2018/04/29 22:02:15 | 000,579,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Payments.dll
[2018/04/29 22:02:14 | 000,580,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\webio.dll
[2018/04/29 22:02:13 | 000,459,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CredProvDataModel.dll
[2018/04/29 22:02:12 | 000,863,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MsSpellCheckingFacility.dll
[2018/04/29 22:02:11 | 000,870,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CPFilters.dll
[2018/04/29 22:02:10 | 000,886,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapControlCore.dll
[2018/04/29 22:02:10 | 000,858,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusUpdateHandlers.dll
[2018/04/29 22:02:10 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usoapi.dll
[2018/04/29 22:02:09 | 000,462,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\webio.dll
[2018/04/29 22:02:09 | 000,339,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetworkBindingEngineMigPlugin.dll
[2018/04/29 22:02:08 | 001,778,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\propsys.dll
[2018/04/29 22:02:08 | 001,173,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapsStore.dll
[2018/04/29 22:02:08 | 000,941,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Playback.BackgroundMediaPlayer.dll
[2018/04/29 22:02:08 | 000,634,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\efswrt.dll
[2018/04/29 22:02:04 | 001,263,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\JpMapControl.dll
[2018/04/29 22:02:04 | 001,113,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bcastdvr.exe
[2018/04/29 22:02:04 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CredProvDataModel.dll
[2018/04/29 22:02:03 | 000,950,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rasgcw.dll
[2018/04/29 22:02:03 | 000,628,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msvcp_win.dll
[2018/04/29 22:02:03 | 000,434,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EncDec.dll
[2018/04/29 22:02:01 | 000,681,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WMVXENCD.DLL
[2018/04/29 22:02:01 | 000,666,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DbgModel.dll
[2018/04/29 22:02:01 | 000,015,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iumdll.dll
[2018/04/29 22:02:00 | 000,706,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EditionUpgradeManagerObj.dll
[2018/04/29 22:02:00 | 000,484,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cdpusersvc.dll
[2018/04/29 22:01:58 | 000,551,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mf.dll
[2018/04/29 22:01:57 | 004,537,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\setupapi.dll
[2018/04/29 22:01:57 | 001,661,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vssapi.dll
[2018/04/29 22:01:57 | 000,849,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LicensingWinRT.dll
[2018/04/29 22:01:57 | 000,302,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EnterpriseAppMgmtSvc.dll
[2018/04/29 22:01:56 | 000,427,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\OneCoreCommonProxyStub.dll
[2018/04/29 22:01:54 | 000,616,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Internal.Bluetooth.dll
[2018/04/29 22:01:54 | 000,568,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.UX.EapRequestHandler.dll
[2018/04/29 22:01:53 | 000,491,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\policymanager.dll
[2018/04/29 22:01:53 | 000,388,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Search.ProtocolHandler.MAPI2.dll
[2018/04/29 22:01:53 | 000,096,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winbrand.dll
[2018/04/29 22:01:52 | 000,599,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Core.TextInput.dll
[2018/04/29 22:01:52 | 000,505,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msvcp_win.dll
[2018/04/29 22:01:52 | 000,479,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ucrtbase_enclave.dll
[2018/04/29 22:01:52 | 000,392,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WMVSENCD.DLL
[2018/04/29 22:01:46 | 000,250,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\offlinesam.dll
[2018/04/29 22:01:44 | 000,508,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\systemreset.exe
[2018/04/29 22:01:44 | 000,459,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\puiobj.dll
[2018/04/29 22:01:43 | 000,555,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorService.dll
[2018/04/29 22:01:43 | 000,398,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SystemSettingsAdminFlows.exe
[2018/04/29 22:01:43 | 000,297,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfksproxy.dll
[2018/04/29 22:01:43 | 000,243,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WinSCard.dll
[2018/04/29 22:01:43 | 000,097,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\sdstor.sys
[2018/04/29 22:01:42 | 000,689,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vpnike.dll
[2018/04/29 22:01:42 | 000,212,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfsensorgroup.dll
[2018/04/29 22:01:42 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\updatecsp.dll
[2018/04/29 22:01:40 | 000,417,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msvcp110_win.dll
[2018/04/29 22:01:40 | 000,221,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\offlinesam.dll
[2018/04/29 22:01:40 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\musdialoghandlers.dll
[2018/04/29 22:01:39 | 001,097,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpbase.dll
[2018/04/29 22:01:39 | 000,103,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\stornvme.sys
[2018/04/29 22:01:38 | 000,172,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RTWorkQ.dll
[2018/04/29 22:01:38 | 000,098,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\FsIso.exe
[2018/04/29 22:01:37 | 000,195,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\OneCoreCommonProxyStub.dll
[2018/04/29 22:01:35 | 000,413,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AUDIOKSE.dll
[2018/04/29 22:01:35 | 000,216,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fwpolicyiomgr.dll
[2018/04/29 22:01:34 | 000,506,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinapi.dll
[2018/04/29 22:01:33 | 000,566,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CoreMessaging.dll
[2018/04/29 22:01:33 | 000,499,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rastls.dll
[2018/04/29 22:01:33 | 000,191,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\skci.dll
[2018/04/29 22:01:33 | 000,154,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.StateRepositoryClient.dll
[2018/04/29 22:01:32 | 000,341,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mmcbase.dll
[2018/04/29 22:01:32 | 000,176,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\fwpolicyiomgr.dll
[2018/04/29 22:01:32 | 000,098,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DeviceReactivation.dll
[2018/04/29 22:01:32 | 000,087,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\remoteaudioendpoint.dll
[2018/04/29 22:01:32 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\hidparse.sys
[2018/04/29 22:01:29 | 001,657,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpserverbase.dll
[2018/04/29 22:01:29 | 000,513,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\newdev.dll
[2018/04/29 22:01:29 | 000,212,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\container.dll
[2018/04/29 22:01:29 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.StateRepositoryUpgrade.dll
[2018/04/29 22:01:29 | 000,100,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.StateRepositoryBroker.dll
[2018/04/29 22:01:28 | 000,204,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\basecsp.dll
[2018/04/29 22:01:28 | 000,163,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\wfplwfs.sys
[2018/04/29 22:01:27 | 000,758,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DolbyHrtfEnc.dll
[2018/04/29 22:01:27 | 000,128,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\offlinelsa.dll
[2018/04/29 22:01:26 | 000,617,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TextInputFramework.dll
[2018/04/29 22:01:26 | 000,240,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AboutSettingsHandlers.dll
[2018/04/29 22:01:25 | 001,573,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserDataService.dll
[2018/04/29 22:01:25 | 000,893,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NMAA.dll
[2018/04/29 22:01:25 | 000,229,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\tpm.sys
[2018/04/29 22:01:25 | 000,115,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\offlinelsa.dll
[2018/04/29 22:01:24 | 000,401,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rascustom.dll
[2018/04/29 22:01:24 | 000,201,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SharedPCCSP.dll
[2018/04/29 22:01:24 | 000,066,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iumcrypt.dll
[2018/04/29 22:01:23 | 000,367,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Storage.ApplicationData.dll
[2018/04/29 22:01:23 | 000,334,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\moshostcore.dll
[2018/04/29 22:01:23 | 000,270,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LsaIso.exe
[2018/04/29 22:01:23 | 000,194,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\ataport.sys
[2018/04/29 22:01:23 | 000,093,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpudd.dll
[2018/04/29 22:01:22 | 000,298,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\netplwiz.dll
[2018/04/29 22:01:22 | 000,081,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\vmbkmcl.sys
[2018/04/29 22:01:22 | 000,022,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\IumSdk.dll
[2018/04/29 22:01:21 | 000,071,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\WindowsTrustedRT.sys
[2018/04/29 22:01:21 | 000,031,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\winhv.sys
[2018/04/29 22:01:19 | 000,075,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\vpci.sys
[2018/04/29 22:01:18 | 000,586,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msvcp110_win.dll
[2018/04/29 22:01:17 | 000,247,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\logoncli.dll
[2018/04/29 22:01:17 | 000,186,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\logoncli.dll
[2018/04/29 22:01:17 | 000,157,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vertdll.dll
[2018/04/29 22:01:17 | 000,125,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rmclient.dll
[2018/04/29 22:01:17 | 000,113,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\icfupgd.dll
[2018/04/29 22:01:17 | 000,035,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SDFHost.dll
[2018/04/29 22:01:17 | 000,022,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iumbase.dll
[2018/04/29 22:01:16 | 000,059,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvhostsvc.dll
[2018/04/29 22:01:16 | 000,028,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vmbuspipe.dll
[2018/04/29 22:01:16 | 000,016,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wshhyperv.dll
[2018/04/29 22:01:15 | 000,245,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\icm32.dll
[2018/04/29 22:01:15 | 000,225,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\winnat.sys
[2018/04/29 22:01:15 | 000,208,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tetheringservice.dll
[2018/04/29 22:01:15 | 000,022,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wow64cpu.dll
[2018/04/29 22:01:14 | 002,873,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\themeui.dll
[2018/04/29 22:01:14 | 000,199,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserDeviceRegistration.dll
[2018/04/29 22:01:14 | 000,141,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\FontProvider.dll
[2018/04/29 22:01:14 | 000,018,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wshhyperv.dll
[2018/04/29 22:01:13 | 000,288,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\authz.dll
[2018/04/29 22:01:13 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wcimage.dll
[2018/04/29 22:01:12 | 000,791,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PhoneService.dll
[2018/04/29 22:01:12 | 000,596,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mscms.dll
[2018/04/29 22:01:12 | 000,311,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DeveloperOptionsSettingsHandlers.dll
[2018/04/29 22:01:12 | 000,256,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\scksp.dll
[2018/04/29 22:01:12 | 000,200,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\puiapi.dll
[2018/04/29 22:01:12 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\regsvr32.exe
[2018/04/29 22:01:11 | 000,505,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\taskcomp.dll
[2018/04/29 22:01:11 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SCardDlg.dll
[2018/04/29 22:01:11 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\wcnfs.sys
[2018/04/29 22:01:11 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\regsvr32.exe
[2018/04/29 22:01:10 | 000,278,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ksproxy.ax
[2018/04/29 22:01:10 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wudriver.dll
[2018/04/29 22:01:08 | 000,748,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PhoneProviders.dll
[2018/04/29 22:01:04 | 000,436,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PsmServiceExtHost.dll
[2018/04/29 22:01:04 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\adhsvc.dll
[2018/04/29 22:01:00 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EnterpriseAppMgmtClient.dll
[2018/04/29 22:00:53 | 000,234,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetworkDesktopSettings.dll
[2018/04/29 22:00:53 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wups.dll
[2018/04/29 22:00:46 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wups.dll
[2018/04/29 22:00:46 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wsnmp32.dll
[2018/04/29 22:00:45 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\vmbkmclr.sys
[2018/04/29 22:00:45 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\storqosflt.sys
[2018/04/29 22:00:42 | 000,217,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tcpmon.dll
[2018/04/29 22:00:41 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\winhvr.sys
[2018/04/29 22:00:37 | 000,425,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vmrdvcore.dll
[2018/04/29 22:00:36 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\RfxVmt.sys
[2018/04/29 22:00:34 | 000,232,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\convertvhd.exe
[2018/04/29 22:00:34 | 000,134,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InputLocaleManager.dll
[2018/04/29 22:00:34 | 000,119,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DafPrintProvider.dll
[2018/04/29 22:00:34 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dmvsc.sys
[2018/04/29 22:00:33 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\Synth3dVsc.sys
[2018/04/29 22:00:32 | 000,374,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ncbservice.dll
[2018/04/29 22:00:32 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ACPBackgroundManagerPolicy.dll
[2018/04/29 22:00:32 | 000,177,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EditionUpgradeHelper.dll
[2018/04/29 22:00:29 | 000,308,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\compstui.dll
[2018/04/29 22:00:29 | 000,188,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PimIndexMaintenance.dll
[2018/04/29 22:00:28 | 000,111,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Playback.ProxyStub.dll
[2018/04/29 22:00:27 | 000,198,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ScDeviceEnum.dll
[2018/04/29 22:00:24 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WordBreakers.dll
[2018/04/29 22:00:24 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\hyperkbd.sys
[2018/04/29 22:00:22 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\IcsEntitlementHost.exe
[2018/04/29 22:00:22 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\HyperVideo.sys
[2018/04/29 22:00:21 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EditBufferTestHook.dll
[2018/04/29 22:00:21 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\usbser.sys
[2018/04/29 22:00:19 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\VmApplicationHealthMonitorProxy.dll
[2018/04/29 22:00:18 | 000,691,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dsreg.dll
[2018/04/29 22:00:16 | 000,332,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srchadmin.dll
[2018/04/29 22:00:16 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UsoClient.exe
[2018/04/29 22:00:11 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\virtdisk.dll
[2018/04/29 22:00:11 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\vmgencounter.sys
[2018/04/29 22:00:10 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winsku.dll
[2018/04/29 22:00:06 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winsrv.dll
[2018/04/29 22:00:06 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\vmgid.sys
[2018/04/29 22:00:03 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\gpuenergydrv.sys
[2018/04/29 21:59:57 | 002,849,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapGeocoder.dll
[2018/04/29 21:59:57 | 001,245,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Unistore.dll
[2018/04/29 21:59:56 | 000,568,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WSDMon.dll
[2018/04/29 21:59:56 | 000,329,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usbmon.dll
[2018/04/29 21:59:56 | 000,309,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\icsvcext.dll
[2018/04/29 21:59:56 | 000,298,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dhcpcore6.dll
[2018/04/29 21:59:56 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\unimdm.tsp
[2018/04/29 21:59:56 | 000,284,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SystemEventsBrokerServer.dll
[2018/04/29 21:59:56 | 000,257,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dhcpcore6.dll
[2018/04/29 21:59:55 | 000,332,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ncryptprov.dll
[2018/04/29 21:59:55 | 000,306,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wc_storage.dll
[2018/04/29 21:59:55 | 000,286,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\icsvc.dll
[2018/04/29 21:59:55 | 000,276,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ncryptprov.dll
[2018/04/29 21:59:55 | 000,262,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BrokerLib.dll
[2018/04/29 21:59:55 | 000,233,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\psmsrv.dll
[2018/04/29 21:59:55 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TimeBrokerServer.dll
[2018/04/29 21:59:55 | 000,172,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WPTaskScheduler.dll
[2018/04/29 21:59:55 | 000,151,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dssvc.dll
[2018/04/29 21:59:55 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\offreg.dll
[2018/04/29 21:59:55 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PimIndexMaintenanceClient.dll
[2018/04/29 21:59:55 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LicenseManagerSvc.dll
[2018/04/29 21:59:54 | 000,125,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\httpprxm.dll
[2018/04/29 21:59:54 | 000,090,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\keyiso.dll
[2018/04/29 21:59:54 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vmictimeprovider.dll
[2018/04/29 21:59:54 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmiprop.dll
[2018/04/29 21:59:54 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sysntfy.dll
[2018/04/29 21:59:54 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\nrpsrv.dll
[2018/04/29 20:49:55 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Local\FortniteGame
[2018/04/29 20:49:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\BattlEye
[2018/04/29 20:49:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\EasyAntiCheat
[2018/04/29 20:36:38 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\XPSViewer
[2018/04/29 20:36:05 | 000,000,000 | ---D | C] -- C:\Program Files\Reference Assemblies
[2018/04/29 20:36:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Reference Assemblies
[2018/04/29 20:36:05 | 000,000,000 | ---D | C] -- C:\Program Files\MSBuild
[2018/04/29 20:36:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSBuild
[2018/04/29 20:21:02 | 000,000,000 | ---D | C] -- C:\Program Files\Epic Games
[2018/04/29 20:18:27 | 000,035,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TsWpfWrp.exe
[2018/04/29 20:18:26 | 000,778,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PresentationNative_v0300.dll
[2018/04/29 20:18:26 | 000,103,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PresentationCFFRasterizerNative_v0300.dll
[2018/04/29 20:17:37 | 001,166,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PresentationNative_v0300.dll
[2018/04/29 20:17:37 | 000,035,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TsWpfWrp.exe
[2018/04/29 20:17:36 | 000,124,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PresentationCFFRasterizerNative_v0300.dll
[2018/04/29 20:12:03 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Local\UnrealEngineLauncher
[2018/04/29 20:11:58 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Local\UnrealEngine
[2018/04/29 20:11:58 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Local\EpicGamesLauncher
[2018/04/29 20:11:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Epic Games
[2018/04/29 20:11:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Epic
[2018/04/29 19:17:31 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Local\speech
[2018/04/29 18:46:45 | 000,527,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAudio2_7.dll
[2018/04/29 18:46:45 | 000,518,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAudio2_7.dll
[2018/04/29 18:46:45 | 000,077,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAPOFX1_5.dll
[2018/04/29 18:46:45 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAPOFX1_5.dll
[2018/04/29 18:46:43 | 000,239,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine3_7.dll
[2018/04/29 18:46:43 | 000,176,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine3_7.dll
[2018/04/29 18:46:42 | 002,526,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_43.dll
[2018/04/29 18:46:42 | 002,106,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_43.dll
[2018/04/29 18:46:42 | 001,907,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dcsx_43.dll
[2018/04/29 18:46:42 | 001,868,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dcsx_43.dll
[2018/04/29 18:46:38 | 000,530,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAudio2_6.dll
[2018/04/29 18:46:38 | 000,528,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAudio2_6.dll
[2018/04/29 18:46:38 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine3_6.dll
[2018/04/29 18:46:38 | 000,176,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine3_6.dll
[2018/04/29 18:46:38 | 000,078,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAPOFX1_4.dll
[2018/04/29 18:46:38 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAPOFX1_4.dll
[2018/04/29 18:46:38 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\X3DAudio1_7.dll
[2018/04/29 18:46:38 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\X3DAudio1_7.dll
[2018/04/29 18:46:37 | 000,517,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAudio2_5.dll
[2018/04/29 18:46:37 | 000,515,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAudio2_5.dll
[2018/04/29 18:46:36 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine3_5.dll
[2018/04/29 18:46:36 | 000,176,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine3_5.dll
[2018/04/29 18:46:32 | 002,582,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_42.dll
[2018/04/29 18:46:32 | 001,974,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_42.dll
[2018/04/29 18:46:30 | 005,554,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dcsx_42.dll
[2018/04/29 18:46:30 | 005,501,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dcsx_42.dll
[2018/04/29 18:46:30 | 000,285,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx11_42.dll
[2018/04/29 18:46:30 | 000,235,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx11_42.dll
[2018/04/29 18:46:29 | 000,523,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_42.dll
[2018/04/29 18:46:29 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_42.dll
[2018/04/29 18:46:26 | 002,475,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DX9_42.dll
[2018/04/29 18:46:26 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DX9_42.dll
[2018/04/29 18:46:25 | 002,430,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_41.dll
[2018/04/29 18:46:25 | 001,846,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_41.dll
[2018/04/29 18:46:25 | 000,520,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_41.dll
[2018/04/29 18:46:25 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_41.dll
[2018/04/29 18:46:24 | 005,425,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DX9_41.dll
[2018/04/29 18:46:24 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DX9_41.dll
[2018/04/29 18:46:13 | 000,073,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAPOFX1_3.dll
[2018/04/29 18:46:13 | 000,069,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAPOFX1_3.dll
[2018/04/29 18:46:12 | 000,521,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAudio2_4.dll
[2018/04/29 18:46:12 | 000,517,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAudio2_4.dll
[2018/04/29 18:45:59 | 000,235,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine3_4.dll
[2018/04/29 18:45:59 | 000,174,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine3_4.dll
[2018/04/29 18:45:58 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\X3DAudio1_6.dll
[2018/04/29 18:45:58 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\X3DAudio1_6.dll
[2018/04/29 18:45:57 | 005,631,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DX9_40.dll
[2018/04/29 18:45:57 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DX9_40.dll
[2018/04/29 18:45:57 | 002,605,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_40.dll
[2018/04/29 18:45:57 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_40.dll
[2018/04/29 18:45:57 | 000,519,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_40.dll
[2018/04/29 18:45:57 | 000,452,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_40.dll
[2018/04/29 18:45:56 | 000,518,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAudio2_3.dll
[2018/04/29 18:45:56 | 000,514,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAudio2_3.dll
[2018/04/29 18:45:56 | 000,074,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAPOFX1_2.dll
[2018/04/29 18:45:56 | 000,070,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAPOFX1_2.dll
[2018/04/29 18:45:54 | 000,235,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine3_3.dll
[2018/04/29 18:45:54 | 000,175,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine3_3.dll
[2018/04/29 18:45:54 | 000,025,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\X3DAudio1_5.dll
[2018/04/29 18:45:54 | 000,023,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\X3DAudio1_5.dll
[2018/04/29 18:45:53 | 000,513,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAudio2_2.dll
[2018/04/29 18:45:53 | 000,509,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAudio2_2.dll
[2018/04/29 18:45:53 | 000,072,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAPOFX1_1.dll
[2018/04/29 18:45:53 | 000,068,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAPOFX1_1.dll
[2018/04/29 18:45:52 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine3_2.dll
[2018/04/29 18:45:52 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine3_2.dll
[2018/04/29 18:45:51 | 001,942,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_39.dll
[2018/04/29 18:45:51 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_39.dll
[2018/04/29 18:45:50 | 004,992,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DX9_39.dll
[2018/04/29 18:45:49 | 000,511,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAudio2_1.dll
[2018/04/29 18:45:49 | 000,507,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAudio2_1.dll
[2018/04/29 18:45:49 | 000,068,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAPOFX1_0.dll
[2018/04/29 18:45:49 | 000,065,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAPOFX1_0.dll
[2018/04/29 18:45:48 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine3_1.dll
[2018/04/29 18:45:48 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine3_1.dll
[2018/04/29 18:45:48 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\X3DAudio1_4.dll
[2018/04/29 18:45:48 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\X3DAudio1_4.dll
[2018/04/29 18:45:46 | 001,941,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_38.dll
[2018/04/29 18:45:46 | 001,491,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_38.dll
[2018/04/29 18:45:45 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_38.dll
[2018/04/29 18:45:45 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_38.dll
[2018/04/29 18:45:43 | 004,991,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DX9_38.dll
[2018/04/29 18:45:43 | 003,850,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DX9_38.dll
[2018/04/29 18:45:42 | 000,489,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\XAudio2_0.dll
[2018/04/29 18:45:42 | 000,479,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\XAudio2_0.dll
[2018/04/29 18:45:41 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine3_0.dll
[2018/04/29 18:45:41 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine3_0.dll
[2018/04/29 18:45:40 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\X3DAudio1_3.dll
[2018/04/29 18:45:40 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\X3DAudio1_3.dll
[2018/04/29 18:45:39 | 004,910,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DX9_37.dll
[2018/04/29 18:45:39 | 003,786,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DX9_37.dll
[2018/04/29 18:45:39 | 001,860,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_37.dll
[2018/04/29 18:45:39 | 001,420,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_37.dll
[2018/04/29 18:45:39 | 000,529,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_37.dll
[2018/04/29 18:45:39 | 000,462,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_37.dll
[2018/04/29 18:45:38 | 000,411,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_10.dll
[2018/04/29 18:45:38 | 000,267,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_10.dll
[2018/04/29 18:45:31 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_36.dll
[2018/04/29 18:45:31 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_36.dll
[2018/04/29 18:45:30 | 002,006,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_36.dll
[2018/04/29 18:45:30 | 001,374,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_36.dll
[2018/04/29 18:45:25 | 005,081,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_36.dll
[2018/04/29 18:45:25 | 003,734,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_36.dll
[2018/04/29 18:45:24 | 000,411,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_9.dll
[2018/04/29 18:45:24 | 000,267,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_9.dll
[2018/04/29 18:45:23 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_35.dll
[2018/04/29 18:45:23 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_35.dll
[2018/04/29 18:45:22 | 005,073,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_35.dll
[2018/04/29 18:45:22 | 003,727,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_35.dll
[2018/04/29 18:45:22 | 001,985,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_35.dll
[2018/04/29 18:45:22 | 001,358,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_35.dll
[2018/04/29 18:45:21 | 000,409,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_8.dll
[2018/04/29 18:45:21 | 000,266,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_8.dll
[2018/04/29 18:45:21 | 000,021,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\X3DAudio1_2.dll
[2018/04/29 18:45:21 | 000,017,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\X3DAudio1_2.dll
[2018/04/29 18:45:17 | 001,401,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_34.dll
[2018/04/29 18:45:17 | 001,124,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_34.dll
[2018/04/29 18:45:17 | 000,506,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_34.dll
[2018/04/29 18:45:17 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_34.dll
[2018/04/29 18:45:16 | 004,496,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_34.dll
[2018/04/29 18:45:16 | 003,497,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_34.dll
[2018/04/29 18:45:15 | 000,107,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xinput1_3.dll
[2018/04/29 18:45:15 | 000,081,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xinput1_3.dll
[2018/04/29 18:45:13 | 000,403,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_7.dll
[2018/04/29 18:45:13 | 000,261,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_7.dll
[2018/04/29 18:45:11 | 001,400,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DCompiler_33.dll
[2018/04/29 18:45:11 | 001,123,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DCompiler_33.dll
[2018/04/29 18:45:11 | 000,506,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_33.dll
[2018/04/29 18:45:11 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_33.dll
[2018/04/29 18:45:06 | 004,494,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_33.dll
[2018/04/29 18:45:06 | 003,495,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_33.dll
[2018/04/29 18:45:05 | 000,393,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_6.dll
[2018/04/29 18:45:05 | 000,255,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_6.dll
[2018/04/29 18:45:04 | 000,469,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10.dll
[2018/04/29 18:45:04 | 000,440,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10.dll
[2018/04/29 18:45:04 | 000,390,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_5.dll
[2018/04/29 18:45:04 | 000,251,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_5.dll
[2018/04/29 18:45:02 | 004,398,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_32.dll
[2018/04/29 18:45:02 | 003,426,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_32.dll
[2018/04/29 18:45:02 | 000,364,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_4.dll
[2018/04/29 18:45:02 | 000,237,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_4.dll
[2018/04/29 18:45:02 | 000,017,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\x3daudio1_1.dll
[2018/04/29 18:45:02 | 000,015,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\x3daudio1_1.dll
[2018/04/29 18:45:01 | 003,977,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_31.dll
[2018/04/29 18:45:01 | 002,414,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_31.dll
[2018/04/29 18:45:00 | 000,363,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_3.dll
[2018/04/29 18:45:00 | 000,236,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_3.dll
[2018/04/29 18:45:00 | 000,083,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xinput1_2.dll
[2018/04/29 18:45:00 | 000,062,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xinput1_2.dll
[2018/04/29 18:44:55 | 000,354,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_2.dll
[2018/04/29 18:44:55 | 000,230,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_2.dll
[2018/04/29 18:44:54 | 000,083,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xinput1_1.dll
[2018/04/29 18:44:54 | 000,062,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xinput1_1.dll
[2018/04/29 18:44:51 | 000,352,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_1.dll
[2018/04/29 18:44:51 | 000,229,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_1.dll
[2018/04/29 18:44:49 | 003,927,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_30.dll
[2018/04/29 18:44:49 | 002,388,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_30.dll
[2018/04/29 18:44:47 | 000,355,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\xactengine2_0.dll
[2018/04/29 18:44:47 | 000,230,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\xactengine2_0.dll
[2018/04/29 18:44:46 | 000,016,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\x3daudio1_0.dll
[2018/04/29 18:44:46 | 000,014,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\x3daudio1_0.dll
[2018/04/29 18:44:42 | 003,830,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_29.dll
[2018/04/29 18:44:42 | 002,332,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_29.dll
[2018/04/29 18:44:41 | 003,815,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_28.dll
[2018/04/29 18:44:41 | 002,323,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_28.dll
[2018/04/29 18:44:37 | 003,807,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_27.dll
[2018/04/29 18:44:37 | 002,319,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_27.dll
[2018/04/29 18:44:35 | 003,767,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_26.dll
[2018/04/29 18:44:35 | 002,297,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_26.dll
[2018/04/29 18:44:34 | 003,823,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_25.dll
[2018/04/29 18:44:34 | 002,337,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_25.dll
[2018/04/29 18:44:30 | 003,544,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx9_24.dll
[2018/04/29 18:44:30 | 002,222,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx9_24.dll
[2018/04/29 17:15:37 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Local\Steam
[2018/04/29 17:07:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Steam
[2018/04/29 17:07:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
[2018/04/29 17:07:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Steam
[2018/04/29 15:32:45 | 000,000,000 | ---D | C] -- C:\Users\firef\ansel
[2018/04/29 15:32:41 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Local\NVIDIA
[2018/04/29 15:32:00 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Local\CEF
[2018/04/29 15:31:59 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Local\NVIDIA Corporation
[2018/04/29 15:31:12 | 000,276,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx11_43.dll
[2018/04/29 15:31:12 | 000,248,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx11_43.dll
[2018/04/29 15:30:58 | 000,511,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3dx10_43.dll
[2018/04/29 15:30:58 | 000,470,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\d3dx10_43.dll
[2018/04/29 15:30:52 | 002,401,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3DX9_43.dll
[2018/04/29 15:30:52 | 001,998,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3DX9_43.dll
[2018/04/29 15:26:50 | 000,209,192 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvaudcap64v.dll
[2018/04/29 15:26:50 | 000,169,256 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvaudcap32v.dll
[2018/04/29 15:24:16 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA
[2018/04/29 15:23:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation
[2018/04/29 15:09:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Package Cache
[2018/04/29 15:06:42 | 000,068,112 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\drivers\nvvhci.sys
[2018/04/29 15:03:49 | 000,000,000 | R--D | C] -- C:\Users\firef\OneDrive
[2018/04/29 14:51:06 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Roaming\WinRAR
[2018/04/29 14:19:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2018/04/29 14:19:27 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2018/04/29 14:19:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WinRAR
[2018/04/29 14:06:54 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation
[2018/04/29 14:06:48 | 000,000,000 | ---D | C] -- C:\Program Files\NVIDIA Corporation
[2018/04/29 14:01:49 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Atheros
[2018/04/29 13:36:50 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
[2018/04/29 13:36:48 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Roaming\discord
[2018/04/29 13:36:11 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Local\Discord
[2018/04/29 13:35:55 | 000,000,000 | ---D | C] -- C:\ProgramData\SquirrelMachineInstalls
[2018/04/29 13:35:53 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Local\Comms
[2018/04/29 13:32:35 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Local\DBG
[2018/04/29 13:30:34 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Local\SquirrelTemp
[2018/04/29 13:30:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\sda
[2018/04/29 13:27:15 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\DAX2
[2018/04/29 13:26:34 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2018/04/29 13:26:33 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\RTCOM
[2018/04/29 13:24:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google
[2018/04/29 13:24:31 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Local\Google
[2018/04/29 13:21:21 | 000,000,000 | -HSD | C] -- C:\Users\firef\IntelGraphicsProfiles
[2018/04/29 13:21:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Intel
[2018/04/29 13:20:59 | 000,553,104 | ---- | C] (Khronos Group) -- C:\WINDOWS\SysNative\OpenCL.DLL
[2018/04/29 13:20:59 | 000,457,776 | ---- | C] (Khronos Group) -- C:\WINDOWS\SysWow64\OpenCL.DLL
[2018/04/29 13:20:17 | 000,000,000 | ---D | C] -- C:\Program Files\Intel
[2018/04/29 13:19:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Intel
[2018/04/29 13:14:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft OneDrive
[2018/04/29 13:13:33 | 000,000,000 | -H-D | C] -- C:\Users\firef\MicrosoftEdgeBackups
[2018/04/29 13:13:22 | 000,000,000 | -HSD | C] -- C:\Recovery
[2018/04/29 13:13:15 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Local\MicrosoftEdge
[2018/04/29 13:13:01 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Local\Publishers
[2018/04/29 13:12:24 | 000,000,000 | R--D | C] -- C:\Users\firef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2018/04/29 13:12:24 | 000,000,000 | R--D | C] -- C:\Users\firef\Searches
[2018/04/29 13:12:24 | 000,000,000 | R--D | C] -- C:\Users\firef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2018/04/29 13:12:23 | 000,000,000 | R--D | C] -- C:\Users\firef\Contacts
[2018/04/29 13:12:23 | 000,000,000 | R--D | C] -- C:\Users\firef\3D Objects
[2018/04/29 13:12:17 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Roaming\Adobe
[2018/04/29 13:12:07 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Local\VirtualStore
[2018/04/29 13:12:06 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Local\Packages
[2018/04/29 13:12:05 | 000,000,000 | -H-D | C] -- C:\Users\firef\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned
[2018/04/29 13:12:02 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Local\ConnectedDevicesPlatform
[2018/04/29 13:09:51 | 000,000,000 | -HSD | C] -- C:\Users\firef\Voisinage réseau
[2018/04/29 13:09:51 | 000,000,000 | -HSD | C] -- C:\Users\firef\Voisinage d'impression
[2018/04/29 13:09:51 | 000,000,000 | -HSD | C] -- C:\Users\firef\AppData\Local\Temporary Internet Files
[2018/04/29 13:09:51 | 000,000,000 | -HSD | C] -- C:\Users\firef\SendTo
[2018/04/29 13:09:51 | 000,000,000 | -HSD | C] -- C:\Users\firef\Recent
[2018/04/29 13:09:51 | 000,000,000 | -HSD | C] -- C:\Users\firef\Modèles
[2018/04/29 13:09:51 | 000,000,000 | -HSD | C] -- C:\Users\firef\Documents\Mes vidéos
[2018/04/29 13:09:51 | 000,000,000 | -HSD | C] -- C:\Users\firef\Documents\Mes images
[2018/04/29 13:09:51 | 000,000,000 | -HSD | C] -- C:\Users\firef\Mes documents
[2018/04/29 13:09:51 | 000,000,000 | -HSD | C] -- C:\Users\firef\Menu Démarrer
[2018/04/29 13:09:51 | 000,000,000 | -HSD | C] -- C:\Users\firef\Documents\Ma musique
[2018/04/29 13:09:51 | 000,000,000 | -HSD | C] -- C:\Users\firef\Local Settings
[2018/04/29 13:09:51 | 000,000,000 | -HSD | C] -- C:\Users\firef\AppData\Local\Historique
[2018/04/29 13:09:51 | 000,000,000 | -HSD | C] -- C:\Users\firef\Cookies
[2018/04/29 13:09:51 | 000,000,000 | -HSD | C] -- C:\Users\firef\Application Data
[2018/04/29 13:09:51 | 000,000,000 | -HSD | C] -- C:\Users\firef\AppData\Local\Application Data
[2018/04/29 13:09:43 | 000,000,000 | R--D | C] -- C:\Users\firef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
[2018/04/29 13:09:43 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Local\Temp
[2018/04/29 13:09:43 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Local\Microsoft
[2018/04/29 13:09:42 | 000,000,000 | --SD | C] -- C:\Users\firef\AppData\Roaming\Microsoft
[2018/04/29 13:09:42 | 000,000,000 | R--D | C] -- C:\Users\firef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
[2018/04/29 13:09:42 | 000,000,000 | R--D | C] -- C:\Users\firef\Videos
[2018/04/29 13:09:42 | 000,000,000 | R--D | C] -- C:\Users\firef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
[2018/04/29 13:09:42 | 000,000,000 | R--D | C] -- C:\Users\firef\Saved Games
[2018/04/29 13:09:42 | 000,000,000 | R--D | C] -- C:\Users\firef\Pictures
[2018/04/29 13:09:42 | 000,000,000 | R--D | C] -- C:\Users\firef\Music
[2018/04/29 13:09:42 | 000,000,000 | R--D | C] -- C:\Users\firef\Links
[2018/04/29 13:09:42 | 000,000,000 | R--D | C] -- C:\Users\firef\Favorites
[2018/04/29 13:09:42 | 000,000,000 | R--D | C] -- C:\Users\firef\Downloads
[2018/04/29 13:09:42 | 000,000,000 | R--D | C] -- C:\Users\firef\Documents
[2018/04/29 13:09:42 | 000,000,000 | R--D | C] -- C:\Users\firef\Desktop
[2018/04/29 13:09:42 | 000,000,000 | R--D | C] -- C:\Users\firef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2018/04/29 13:09:42 | 000,000,000 | -H-D | C] -- C:\Users\firef\AppData
[2018/04/29 13:09:42 | 000,000,000 | ---D | C] -- C:\Users\firef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2018/04/29 13:06:09 | 000,000,000 | ---D | C] -- C:\Windows.old
[2018/04/29 13:04:10 | 000,000,000 | ---D | C] -- C:\WINDOWS\SoftwareDistribution
[2018/04/29 13:01:04 | 002,241,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PrintConfig.dll
[2018/04/29 12:58:18 | 000,000,000 | -HSD | C] -- C:\ProgramData\Modèles
[2018/04/29 12:58:18 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Mes vidéos
[2018/04/29 12:58:18 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Mes images
[2018/04/29 12:58:18 | 000,000,000 | -HSD | C] -- C:\ProgramData\Menu Démarrer
[2018/04/29 12:58:18 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Ma musique
[2018/04/29 12:58:18 | 000,000,000 | -HSD | C] -- C:\Program Files\Fichiers communs
[2018/04/29 12:58:17 | 000,000,000 | -HSD | C] -- C:\ProgramData\Documents
[2018/04/29 12:58:17 | 000,000,000 | -HSD | C] -- C:\ProgramData\Bureau
[2018/04/29 12:58:17 | 000,000,000 | -HSD | C] -- C:\ProgramData\Application Data
[2018/04/29 12:44:45 | 000,000,000 | ---D | C] -- C:\ProgramData\USOShared
[2018/04/29 12:44:21 | 000,000,000 | -H-D | C] -- C:\Program Files\Uninstall Information
[2018/04/29 12:23:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch
[2018/04/29 12:18:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\SleepStudy
[2018/04/29 12:18:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\ServiceProfiles
[2018/04/29 12:17:31 | 000,000,000 | --SD | C] -- C:\WINDOWS\SysNative\Microsoft
[2018/04/29 10:38:14 | 000,000,000 | ---D | C] -- C:\WINDOWS\Panther
[2018/04/29 10:23:58 | 000,000,000 | ---D | C] -- C:\ESD
[2018/04/29 10:09:43 | 000,000,000 | -H-D | C] -- C:\$Windows.~WS
[2018/04/29 10:02:10 | 000,000,000 | -H-D | C] -- C:\$SysReset
[2018/04/27 06:27:58 | 000,222,848 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\SysNative\drivers\VBoxNetLwf.sys
[2018/04/27 06:27:58 | 000,212,552 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\SysNative\drivers\VBoxNetAdp6.sys
[2018/04/12 19:25:30 | 000,000,000 | -H-D | C] -- C:\$WINDOWS.~BT
[2018/04/08 16:47:46 | 000,000,000 | -H-D | C] -- C:\OneDriveTemp

[color=#E56717]========== Files - Modified Within 60 Days ==========[/color]

[2018/06/05 16:43:05 | 000,001,148 | ---- | M] () -- C:\Users\Public\Desktop\Quicksys RegDefrag.lnk
[2018/06/05 16:38:05 | 000,000,863 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2018/06/05 16:21:24 | 000,001,642 | ---- | M] () -- C:\WINDOWS\Sandboxie.ini
[2018/06/05 15:49:49 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2018/06/05 15:47:43 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
[2018/06/05 15:47:39 | 1658,675,200 | -HS- | M] () -- C:\hiberfil.sys
[2018/06/04 23:14:18 | 002,905,986 | ---- | M] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI
[2018/06/04 23:14:18 | 001,392,990 | ---- | M] () -- C:\WINDOWS\SysNative\perfh00C.dat
[2018/06/04 23:14:18 | 000,890,126 | ---- | M] () -- C:\WINDOWS\SysNative\perfh009.dat
[2018/06/04 23:14:18 | 000,320,616 | ---- | M] () -- C:\WINDOWS\SysNative\perfc00C.dat
[2018/06/04 23:14:18 | 000,284,584 | ---- | M] () -- C:\WINDOWS\SysNative\perfc009.dat
[2018/06/04 18:43:20 | 000,256,912 | ---- | M] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT
[2018/06/04 15:41:42 | 000,019,053 | ---- | M] () -- C:\WINDOWS\diagwrn.xml
[2018/06/04 15:41:41 | 000,019,053 | ---- | M] () -- C:\WINDOWS\diagerr.xml
[2018/06/04 07:09:46 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\SysNative\drivers\Msft_User_WpdFs_01_11_00.Wdf
[2018/06/04 00:40:59 | 000,001,092 | ---- | M] () -- C:\Users\Public\Desktop\OpenOffice 4.1.5.lnk
[2018/06/03 20:44:04 | 000,001,447 | ---- | M] () -- C:\Users\Public\Desktop\GeForce Experience.lnk
[2018/06/03 19:45:27 | 000,028,272 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\TrueSight.sys
[2018/06/03 19:33:18 | 000,001,452 | ---- | M] () -- C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
[2018/06/03 19:31:38 | 000,000,963 | ---- | M] () -- C:\Users\firef\Desktop\Lien Navigateur Internet Sandboxé
[2018/06/03 19:31:38 | 000,000,963 | ---- | M] () -- C:\Users\firef\Application Data\Microsoft\Internet Explorer\Quick Launch\Lien Navigateur Internet Sandboxé
[2018/06/02 17:57:32 | 000,028,973 | ---- | M] () -- C:\Users\firef\Desktop\Screenshot_4.png
[2018/06/02 17:48:10 | 000,000,993 | ---- | M] () -- C:\Users\Public\Desktop\Firefox.lnk
[2018/06/02 12:14:38 | 000,000,220 | ---- | M] () -- C:\Users\firef\Desktop\Garry's Mod.url
[2018/05/23 20:21:52 | 000,627,232 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\NvIFROpenGL.dll
[2018/05/23 20:21:50 | 001,419,296 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\NvIFR64.dll
[2018/05/23 20:21:50 | 001,092,184 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\NvIFR.dll
[2018/05/23 20:21:50 | 000,518,072 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\NvIFROpenGL.dll
[2018/05/23 20:21:40 | 001,563,584 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\NvFBC64.dll
[2018/05/23 20:21:40 | 001,467,808 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispgenco6439793.dll
[2018/05/23 20:21:40 | 001,216,952 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\NvFBC.dll
[2018/05/23 20:21:38 | 002,013,784 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispco6439793.dll
[2018/05/23 20:21:34 | 013,727,792 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvptxJitCompiler.dll
[2018/05/23 20:21:34 | 004,350,392 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcuvid.dll
[2018/05/23 20:21:32 | 011,273,120 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvptxJitCompiler.dll
[2018/05/23 20:21:32 | 003,760,672 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcuvid.dll
[2018/05/23 20:21:26 | 031,278,392 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvopencl.dll
[2018/05/23 20:21:24 | 040,347,168 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcompiler.dll
[2018/05/23 20:21:20 | 025,991,448 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvopencl.dll
[2018/05/23 20:21:16 | 035,250,536 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcompiler.dll
[2018/05/23 20:21:14 | 001,157,208 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvfatbinaryLoader.dll
[2018/05/23 20:21:12 | 000,904,896 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvfatbinaryLoader.dll
[2018/05/23 20:21:12 | 000,814,424 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvEncodeAPI64.dll
[2018/05/23 20:21:12 | 000,652,344 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvEncodeAPI.dll
[2018/05/23 20:21:08 | 001,347,480 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvEncMFTH264.dll
[2018/05/23 20:21:08 | 001,063,400 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvEncMFTH264.dll
[2018/05/23 20:20:58 | 000,474,040 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\drivers\NVIDIA Corporation\Drs\dbInstaller.exe
[2018/05/23 20:20:44 | 017,784,432 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcuda.dll
[2018/05/23 20:20:40 | 015,195,248 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcuda.dll
[2018/05/23 20:20:38 | 004,855,208 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvapi64.dll
[2018/05/23 20:20:36 | 004,125,048 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvapi.dll
[2018/05/23 00:00:54 | 001,512,680 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\NVIDIA Corporation\Drs\nvdrsdb.bin
[2018/05/23 00:00:54 | 000,044,277 | ---- | M] () -- C:\WINDOWS\SysNative\nvinfo.pb
[2018/05/22 21:58:00 | 002,612,520 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvsvc64.dll
[2018/05/22 21:57:59 | 005,947,328 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcpl.dll
[2018/05/22 21:57:29 | 001,767,360 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvsvcr.dll
[2018/05/22 21:57:28 | 000,450,960 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvmctray.dll
[2018/05/22 21:57:28 | 000,124,200 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvshext.dll
[2018/05/22 21:57:26 | 000,633,984 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nv3dappshext.dll
[2018/05/22 21:57:26 | 000,083,240 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nv3dappshextr.dll
[2018/05/22 08:43:13 | 008,186,102 | ---- | M] () -- C:\WINDOWS\SysNative\nvcoproc.bin
[2018/05/21 19:37:18 | 000,018,765 | ---- | M] () -- C:\Users\firef\Desktop\Screenshot_1.png
[2018/05/20 19:36:52 | 002,496,480 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvspcap64.dll
[2018/05/20 19:36:52 | 002,164,192 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvspcap.dll
[2018/05/20 19:36:52 | 001,312,224 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\NvRtmpStreamer64.dll
[2018/05/20 17:30:00 | 000,001,951 | ---- | M] () -- C:\WINDOWS\NvTelemetryContainerRecovery.bat
[2018/05/20 10:49:46 | 000,000,928 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NETGEAR WNA1100 Genie.lnk
[2018/05/20 10:49:46 | 000,000,910 | ---- | M] () -- C:\Users\Public\Desktop\NETGEAR WNA1100 Genie.lnk
[2018/05/19 01:00:52 | 000,002,258 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2018/05/14 18:01:56 | 000,001,951 | ---- | M] () -- C:\WINDOWS\NvContainerRecovery.bat
[2018/05/10 16:40:56 | 000,003,736 | R--- | M] () -- C:\Users\firef\Desktop\GameUserSettings.ini
[2018/05/09 20:40:05 | 141,696,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MRT-KB890830.exe
[2018/05/09 20:27:03 | 000,048,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuauclt.exe
[2018/05/09 20:25:49 | 000,073,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\hvservice.sys
[2018/05/09 20:25:49 | 000,020,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\kdhvcom.dll
[2018/05/08 13:11:35 | 000,001,109 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HMA! Pro VPN.lnk
[2018/05/08 13:11:35 | 000,001,077 | ---- | M] () -- C:\Users\Public\Desktop\HMA! Pro VPN.lnk
[2018/05/08 13:04:23 | 016,781,312 | ---- | M] () -- C:\Users\firef\kcore
[2018/05/08 13:04:23 | 000,000,061 | ---- | M] () -- C:\Users\firef\kcore.aria2
[2018/05/07 14:55:03 | 000,002,243 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ROCCAT Swarm Monitor.lnk
[2018/05/05 22:05:47 | 000,001,015 | ---- | M] () -- C:\Users\firef\Desktop\osu!.lnk
[2018/05/04 18:48:16 | 000,001,149 | ---- | M] () -- C:\Users\Public\Desktop\Oracle VM VirtualBox.lnk
[2018/05/04 11:37:32 | 000,278,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Notifier.exe
[2018/05/04 06:06:08 | 000,000,511 | ---- | M] () -- C:\WINDOWS\SysNative\@NotifierToastIcon.png
[2018/05/03 09:57:36 | 000,599,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\securekernel.exe
[2018/05/03 09:56:56 | 001,092,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.efi
[2018/05/03 09:56:24 | 000,924,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.exe
[2018/05/03 09:54:35 | 000,748,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\generaltel.dll
[2018/05/03 09:54:12 | 000,608,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\devinv.dll
[2018/05/03 09:53:33 | 000,461,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dcntel.dll
[2018/05/03 09:53:03 | 000,300,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\acmigration.dll
[2018/05/03 09:52:50 | 001,415,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.efi
[2018/05/03 09:52:27 | 000,137,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CompatTelRunner.exe
[2018/05/03 09:52:14 | 001,568,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\appraiser.dll
[2018/05/03 09:51:26 | 001,056,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvax64.exe
[2018/05/03 09:50:56 | 001,206,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvix64.exe
[2018/05/03 09:50:54 | 000,069,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32appinventorycsp.dll
[2018/05/03 09:50:38 | 000,664,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aeinv.dll
[2018/05/03 09:50:23 | 000,423,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\invagent.dll
[2018/05/03 09:49:04 | 000,035,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DeviceCensus.exe
[2018/05/03 09:48:50 | 002,002,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aitstatic.exe
[2018/05/03 09:48:42 | 000,793,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\oleaut32.dll
[2018/05/03 09:48:12 | 000,077,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hvloader.dll
[2018/05/03 09:48:01 | 000,272,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aepic.dll
[2018/05/03 09:47:49 | 008,600,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntoskrnl.exe
[2018/05/03 09:47:14 | 001,209,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.exe
[2018/05/03 09:45:25 | 000,711,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ci.dll
[2018/05/03 09:43:30 | 000,702,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\kernel32.dll
[2018/05/03 09:43:08 | 000,373,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\clfs.sys
[2018/05/03 09:37:10 | 000,749,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms2.sys
[2018/05/03 09:37:07 | 000,408,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms1.sys
[2018/05/03 09:36:57 | 000,437,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\USBXHCI.SYS
[2018/05/03 09:36:45 | 007,675,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\windows.storage.dll
[2018/05/03 09:36:21 | 000,247,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\browserbroker.dll
[2018/05/03 09:35:51 | 002,472,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UpdateAgent.dll
[2018/05/03 09:35:17 | 000,358,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wintrust.dll
[2018/05/03 09:34:14 | 000,070,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wldp.dll
[2018/05/03 09:32:56 | 001,054,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msvproc.dll
[2018/05/03 08:39:43 | 000,212,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\aepic.dll
[2018/05/03 08:36:58 | 025,254,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\edgehtml.dll
[2018/05/03 08:31:34 | 006,092,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\windows.storage.dll
[2018/05/03 08:28:10 | 000,061,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wldp.dll
[2018/05/03 08:26:54 | 001,057,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msvproc.dll
[2018/05/03 08:19:51 | 001,300,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usocore.dll
[2018/05/03 08:19:41 | 003,663,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kfull.sys
[2018/05/03 08:19:03 | 000,496,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\updatehandlers.dll
[2018/05/03 08:18:59 | 000,206,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\IndexedDbLegacy.dll
[2018/05/03 08:18:37 | 000,584,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIRibbonRes.dll
[2018/05/03 08:18:32 | 000,400,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusNotification.exe
[2018/05/03 08:18:28 | 000,064,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AcSpecfc.dll
[2018/05/03 08:17:07 | 007,545,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinui.dll
[2018/05/03 08:16:55 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LaunchWinApp.exe
[2018/05/03 08:16:48 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wups2.dll
[2018/05/03 08:16:44 | 000,143,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssprxy.dll
[2018/05/03 08:16:30 | 000,231,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aadauthhelper.dll
[2018/05/03 08:16:29 | 000,331,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\browserexport.exe
[2018/05/03 08:16:18 | 000,201,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EdgeManager.dll
[2018/05/03 08:16:12 | 000,104,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Chakradiag.dll
[2018/05/03 08:15:55 | 000,194,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\itircl.dll
[2018/05/03 08:15:07 | 000,055,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\imgutil.dll
[2018/05/03 08:14:49 | 000,675,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\webplatstorageserver.dll
[2018/05/03 08:14:30 | 000,093,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mshtmled.dll
[2018/05/03 08:14:05 | 000,623,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aadcloudap.dll
[2018/05/03 08:13:50 | 000,253,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\domgmt.dll
[2018/05/03 08:13:39 | 000,276,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dxtrans.dll
[2018/05/03 08:12:35 | 000,816,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ieproxy.dll
[2018/05/03 08:12:34 | 000,657,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hhctrl.ocx
[2018/05/03 08:12:18 | 000,403,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WpAXHolder.dll
[2018/05/03 08:12:15 | 000,672,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9diag.dll
[2018/05/03 08:11:46 | 000,595,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vbscript.dll
[2018/05/03 08:09:59 | 008,432,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mstscax.dll
[2018/05/03 08:09:43 | 003,405,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tquery.dll
[2018/05/03 08:09:40 | 008,068,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Chakra.dll
[2018/05/03 08:09:31 | 001,344,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dosvc.dll
[2018/05/03 08:09:30 | 002,086,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kbase.sys
[2018/05/03 08:09:16 | 001,548,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lsasrv.dll
[2018/05/03 08:09:15 | 004,723,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9.dll
[2018/05/03 08:08:40 | 000,808,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript.dll
[2018/05/03 08:08:26 | 001,597,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ieapfltr.dll
[2018/05/03 08:06:34 | 003,630,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mstsc.exe
[2018/05/03 08:05:27 | 000,389,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ninput.dll
[2018/05/03 08:05:20 | 001,717,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\comsvcs.dll
[2018/05/03 08:05:10 | 000,483,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\catsrvut.dll
[2018/05/03 08:04:24 | 000,030,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msisip.dll
[2018/05/03 08:03:43 | 000,050,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\pcalua.exe
[2018/05/03 08:03:39 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\pcaevts.dll
[2018/05/03 08:03:38 | 000,067,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\pcadm.dll
[2018/05/03 08:02:52 | 000,584,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIRibbonRes.dll
[2018/05/03 08:00:51 | 002,902,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\win32kfull.sys
[2018/05/03 08:00:07 | 000,473,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AcSpecfc.dll
[2018/05/03 08:00:00 | 000,162,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\IndexedDbLegacy.dll
[2018/05/03 07:59:49 | 018,924,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\edgehtml.dll
[2018/05/03 07:58:46 | 006,467,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinui.dll
[2018/05/03 07:58:02 | 000,155,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\EdgeManager.dll
[2018/05/03 07:57:49 | 000,155,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\aadauthhelper.dll
[2018/05/03 07:57:47 | 000,162,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\itircl.dll
[2018/05/03 07:57:34 | 000,079,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Chakradiag.dll
[2018/05/03 07:56:31 | 002,677,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tquery.dll
[2018/05/03 07:56:26 | 000,078,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mshtmled.dll
[2018/05/03 07:55:57 | 000,459,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\webplatstorageserver.dll
[2018/05/03 07:54:58 | 000,365,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ieproxy.dll
[2018/05/03 07:53:54 | 007,813,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mstscax.dll
[2018/05/03 07:53:54 | 000,531,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\jscript9diag.dll
[2018/05/03 07:53:46 | 000,540,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\hhctrl.ocx
[2018/05/03 07:53:23 | 006,060,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Chakra.dll
[2018/05/03 07:52:21 | 000,664,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\jscript.dll
[2018/05/03 07:50:54 | 001,474,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ieapfltr.dll
[2018/05/03 07:49:08 | 003,430,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mstsc.exe
[2018/05/03 07:48:21 | 000,328,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ninput.dll
[2018/05/03 07:48:12 | 001,353,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\comsvcs.dll
[2018/05/03 07:48:00 | 000,408,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\catsrvut.dll
[2018/05/03 07:47:24 | 000,026,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msisip.dll
[2018/05/01 23:25:24 | 000,835,064 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerApp.exe
[2018/05/01 23:25:24 | 000,179,704 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerCPLApp.cpl
[2018/05/01 23:04:20 | 000,000,975 | ---- | M] () -- C:\Users\Public\Desktop\League of Legends.lnk
[2018/05/01 21:22:17 | 000,000,420 | ---- | M] () -- C:\WINDOWS\tasks\update-sys.job
[2018/05/01 21:22:17 | 000,000,420 | ---- | M] () -- C:\WINDOWS\tasks\update-S-1-5-21-3661491001-3977891655-3078464167-1001.job
[2018/05/01 20:54:53 | 000,000,219 | ---- | M] () -- C:\Users\firef\Desktop\Counter-Strike Global Offensive.url
[2018/05/01 20:12:51 | 000,002,237 | ---- | M] () -- C:\Users\firef\Desktop\Discord.lnk
[2018/04/30 17:43:47 | 000,000,425 | ---- | M] () -- C:\Users\firef\AppData\Local\UserProducts.xml
[2018/04/30 15:16:10 | 000,000,008 | ---- | M] () -- C:\Users\firef\AppData\Roaming\DofusAppId0_1
[2018/04/30 14:40:44 | 000,000,113 | ---- | M] () -- C:\Users\firef\AppData\Roaming\D2Info0
[2018/04/30 14:31:48 | 000,411,372 | ---- | M] () -- C:\Users\firef\Documents\Screenshot_1.jpg
[2018/04/30 14:28:28 | 000,001,120 | ---- | M] () -- C:\Users\firef\Desktop\Dofus.lnk
[2018/04/29 20:11:34 | 000,001,258 | ---- | M] () -- C:\Users\Public\Desktop\Epic Games Launcher.lnk
[2018/04/29 17:07:15 | 000,001,036 | ---- | M] () -- C:\Users\Public\Desktop\Steam.lnk
[2018/04/29 13:59:31 | 000,002,358 | ---- | M] () -- C:\Users\firef\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2018/04/29 13:28:56 | 034,438,088 | ---- | M] () -- C:\WINDOWS\SysNative\drivers\rtkhdasetting.zip
[2018/04/29 13:28:09 | 000,000,000 | -H-- | M] () -- C:\ProgramData\DP45977C.lfl
[2018/04/29 13:21:13 | 000,000,000 | ---- | M] () -- C:\WINDOWS\SysNative\GfxValDisplayLog.bin
[2018/04/28 02:25:24 | 000,068,112 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\drivers\nvvhci.sys
[2018/04/27 18:32:38 | 000,209,192 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvaudcap64v.dll
[2018/04/27 18:32:32 | 000,169,256 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvaudcap32v.dll
[2018/04/27 06:27:58 | 000,222,848 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\SysNative\drivers\VBoxNetLwf.sys
[2018/04/27 06:27:58 | 000,212,552 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\SysNative\drivers\VBoxNetAdp6.sys
[2018/04/23 07:03:30 | 000,553,104 | ---- | M] (Khronos Group) -- C:\WINDOWS\SysNative\OpenCL.DLL
[2018/04/23 07:03:26 | 000,457,776 | ---- | M] (Khronos Group) -- C:\WINDOWS\SysWow64\OpenCL.DLL
[2018/04/20 17:30:40 | 000,828,728 | ---- | M] () -- C:\WINDOWS\SysWow64\vulkan-1-999-0-0-0.dll
[2018/04/20 17:30:40 | 000,828,728 | ---- | M] () -- C:\WINDOWS\SysWow64\vulkan-1.dll
[2018/04/20 17:30:24 | 000,591,160 | ---- | M] () -- C:\WINDOWS\SysWow64\vulkaninfo-1-999-0-0-0.exe
[2018/04/20 17:30:24 | 000,591,160 | ---- | M] () -- C:\WINDOWS\SysWow64\vulkaninfo.exe
[2018/04/20 17:30:06 | 000,961,336 | ---- | M] () -- C:\WINDOWS\SysNative\vulkan-1-999-0-0-0.dll
[2018/04/20 17:30:06 | 000,961,336 | ---- | M] () -- C:\WINDOWS\SysNative\vulkan-1.dll
[2018/04/20 17:29:52 | 000,700,728 | ---- | M] () -- C:\WINDOWS\SysNative\vulkaninfo-1-999-0-0-0.exe
[2018/04/20 17:29:52 | 000,700,728 | ---- | M] () -- C:\WINDOWS\SysNative\vulkaninfo.exe
[2018/04/16 00:07:45 | 001,463,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msctf.dll
[2018/04/16 00:04:08 | 000,779,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fontdrvhost.exe
[2018/04/16 00:03:05 | 000,128,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\tm.sys
[2018/04/15 23:51:08 | 002,513,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\KernelBase.dll
[2018/04/15 23:50:26 | 001,925,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Store.dll
[2018/04/15 23:49:39 | 000,563,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppResolver.dll
[2018/04/15 23:49:38 | 000,382,368 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysNative\atmfd.dll
[2018/04/15 23:49:20 | 001,954,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntdll.dll
[2018/04/15 23:48:18 | 005,859,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\StartTileData.dll
[2018/04/15 23:48:13 | 001,638,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\gdi32full.dll
[2018/04/15 23:38:56 | 000,979,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LicenseManager.dll
[2018/04/15 23:38:27 | 003,180,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\combase.dll
[2018/04/15 23:33:08 | 001,269,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WinTypes.dll
[2018/04/15 23:32:55 | 003,904,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
[2018/04/15 23:32:34 | 001,416,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\D3D12.dll
[2018/04/15 23:30:44 | 002,268,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfsrcsnk.dll
[2018/04/15 23:29:47 | 001,779,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfplat.dll
[2018/04/15 23:29:30 | 000,198,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CloudStorageWizard.exe
[2018/04/15 23:29:17 | 001,873,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\crypt32.dll
[2018/04/15 23:28:03 | 000,688,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentClient.dll
[2018/04/15 23:26:25 | 007,384,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Protection.PlayReady.dll
[2018/04/15 23:26:23 | 002,711,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmp4srcsnk.dll
[2018/04/15 23:26:17 | 001,506,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmpeg2srcsnk.dll
[2018/04/15 23:25:55 | 000,661,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\comctl32.dll
[2018/04/15 23:25:34 | 001,430,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WpcMon.exe
[2018/04/15 23:25:32 | 000,092,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CloudNotifications.exe
[2018/04/15 23:25:31 | 000,327,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\shlwapi.dll
[2018/04/15 23:24:57 | 000,063,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\appidapi.dll
[2018/04/15 22:47:43 | 001,433,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\gdi32full.dll
[2018/04/15 22:47:33 | 001,490,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Store.dll
[2018/04/15 22:47:33 | 000,649,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\fontdrvhost.exe
[2018/04/15 22:47:32 | 000,311,192 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\atmfd.dll
[2018/04/15 22:38:48 | 003,485,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\explorer.exe
[2018/04/15 22:38:36 | 000,444,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppResolver.dll
[2018/04/15 22:38:21 | 001,123,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\D3D12.dll
[2018/04/15 22:37:45 | 000,747,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LicenseManager.dll
[2018/04/15 22:36:27 | 000,832,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WinTypes.dll
[2018/04/15 22:36:17 | 002,386,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\combase.dll
[2018/04/15 22:36:17 | 000,543,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppXDeploymentClient.dll
[2018/04/15 22:35:01 | 002,462,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmp4srcsnk.dll
[2018/04/15 22:34:58 | 006,482,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Protection.PlayReady.dll
[2018/04/15 22:34:56 | 001,524,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfplat.dll
[2018/04/15 22:34:52 | 001,456,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfsrcsnk.dll
[2018/04/15 22:34:49 | 001,017,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmpeg2srcsnk.dll
[2018/04/15 22:34:18 | 000,166,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CloudStorageWizard.exe
[2018/04/15 22:34:17 | 000,077,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CloudNotifications.exe
[2018/04/15 22:34:01 | 000,052,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\appidapi.dll
[2018/04/15 22:16:11 | 003,995,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIRibbon.dll
[2018/04/15 22:15:31 | 003,490,816 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIRibbon.dll
[2018/04/15 22:15:06 | 000,674,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LockController.dll
[2018/04/15 22:14:52 | 000,101,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CredProv2faHelper.dll
[2018/04/15 22:14:50 | 000,084,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DeviceUpdateAgent.dll
[2018/04/15 22:14:48 | 000,250,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppxAllUserStore.dll
[2018/04/15 22:14:48 | 000,175,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\t2embed.dll
[2018/04/15 22:14:46 | 000,436,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wincorlib.dll
[2018/04/15 22:14:43 | 000,121,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fontsub.dll
[2018/04/15 22:14:36 | 000,133,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\t2embed.dll
[2018/04/15 22:14:35 | 000,078,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CredProv2faHelper.dll
[2018/04/15 22:14:29 | 000,202,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppxAllUserStore.dll
[2018/04/15 22:14:27 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\fontsub.dll
[2018/04/15 22:13:44 | 000,084,992 | ---- | M] () -- C:\WINDOWS\SysNative\DataStoreCacheDumpTool.exe
[2018/04/15 22:13:36 | 002,890,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.Resources.dll
[2018/04/15 22:12:56 | 000,126,976 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssitlb.dll
[2018/04/15 22:12:34 | 017,160,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.dll
[2018/04/15 22:12:30 | 013,704,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.dll
[2018/04/15 22:12:10 | 000,164,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dmcertinst.exe
[2018/04/15 22:12:04 | 000,169,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuuhosdeployment.dll
[2018/04/15 22:11:45 | 000,113,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\BitLockerCsp.dll
[2018/04/15 22:11:45 | 000,109,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\eShims.dll
[2018/04/15 22:11:42 | 000,143,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srpapi.dll
[2018/04/15 22:11:26 | 000,182,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BitLockerCsp.dll
[2018/04/15 22:11:23 | 000,125,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srpapi.dll
[2018/04/15 22:11:10 | 000,531,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\daxexec.dll
[2018/04/15 22:11:04 | 000,301,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MicrosoftAccountWAMExtension.dll
[2018/04/15 22:10:56 | 000,192,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\credprovs.dll
[2018/04/15 22:10:42 | 000,225,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\credprovs.dll
[2018/04/15 22:10:31 | 001,576,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\enterprisecsps.dll
[2018/04/15 22:10:22 | 000,363,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsEnvironment.Desktop.dll
[2018/04/15 22:10:21 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SettingSyncPolicy.dll
[2018/04/15 22:10:19 | 000,220,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MicrosoftAccountWAMExtension.dll
[2018/04/15 22:10:13 | 000,218,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\credprovhost.dll
[2018/04/15 22:10:07 | 000,371,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\daxexec.dll
[2018/04/15 22:10:03 | 000,271,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DAFWSD.dll
[2018/04/15 22:10:01 | 001,498,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WebRuntimeManager.dll
[2018/04/15 22:10:00 | 000,571,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ngccredprov.dll
[2018/04/15 22:09:45 | 000,145,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssph.dll
[2018/04/15 22:09:39 | 000,153,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BrowserSettingSync.dll
[2018/04/15 22:09:24 | 000,503,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_User.dll
[2018/04/15 22:09:12 | 000,090,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingSyncPolicy.dll
[2018/04/15 22:09:05 | 000,037,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TokenBrokerUI.dll
[2018/04/15 22:08:45 | 000,703,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ngccredprov.dll
[2018/04/15 22:08:42 | 000,181,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twext.dll
[2018/04/15 22:08:41 | 000,490,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SystemSettings.UserAccountsHandlers.dll
[2018/04/15 22:08:40 | 000,246,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll
[2018/04/15 22:08:38 | 000,448,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LockHostingFramework.dll
[2018/04/15 22:08:31 | 000,627,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdpcore.dll
[2018/04/15 22:08:30 | 000,262,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\credprovhost.dll
[2018/04/15 22:08:29 | 000,169,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SettingMonitor.dll
[2018/04/15 22:08:25 | 000,059,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Shell.Search.UriHandler.dll
[2018/04/15 22:08:17 | 003,181,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\cdp.dll
[2018/04/15 22:08:15 | 000,583,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.CloudStore.Schema.Shell.dll
[2018/04/15 22:08:08 | 000,358,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Wldap32.dll
[2018/04/15 22:08:04 | 006,576,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Data.Pdf.dll
[2018/04/15 22:08:00 | 000,859,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\appwiz.cpl
[2018/04/15 22:08:00 | 000,535,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rdpcore.dll
[2018/04/15 22:07:58 | 000,308,736 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Store.TestingFramework.dll
[2018/04/15 22:07:57 | 000,124,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\BrowserSettingSync.dll
[2018/04/15 22:07:52 | 000,792,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssvp.dll
[2018/04/15 22:07:51 | 001,425,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SystemSettings.Handlers.dll
[2018/04/15 22:07:51 | 000,837,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Security.Authentication.Web.Core.dll
[2018/04/15 22:07:49 | 000,158,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twext.dll
[2018/04/15 22:07:45 | 005,195,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cdp.dll
[2018/04/15 22:07:45 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssph.dll
[2018/04/15 22:07:36 | 000,312,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AboveLockAppHost.dll
[2018/04/15 22:07:32 | 003,367,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SyncCenter.dll
[2018/04/15 22:07:32 | 000,252,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AboveLockAppHost.dll
[2018/04/15 22:07:30 | 008,031,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Data.Pdf.dll
[2018/04/15 22:07:24 | 000,112,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\IdCtrls.dll
[2018/04/15 22:07:24 | 000,096,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\IdCtrls.dll
[2018/04/15 22:07:23 | 000,044,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TokenBrokerUI.dll
[2018/04/15 22:07:22 | 000,225,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SearchFilterHost.exe
[2018/04/15 22:07:12 | 012,689,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wmp.dll
[2018/04/15 22:07:12 | 001,495,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentExtensions.desktop.dll
[2018/04/15 22:07:08 | 000,598,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Security.Authentication.Web.Core.dll
[2018/04/15 22:07:07 | 000,386,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\zipfldr.dll
[2018/04/15 22:07:05 | 000,702,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Internal.Management.dll
[2018/04/15 22:06:45 | 000,139,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mdmmigrator.dll
[2018/04/15 22:06:38 | 000,721,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LogonController.dll
[2018/04/15 22:06:36 | 013,660,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmp.dll
[2018/04/15 22:06:36 | 000,421,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InputSwitch.dll
[2018/04/15 22:06:35 | 000,377,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SearchProtocolHost.exe
[2018/04/15 22:06:33 | 000,820,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\netlogon.dll
[2018/04/15 22:06:09 | 000,392,192 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RDXTaskFactory.dll
[2018/04/15 22:06:04 | 000,899,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SmartcardCredentialProvider.dll
[2018/04/15 22:05:55 | 000,626,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SmartcardCredentialProvider.dll
[2018/04/15 22:05:55 | 000,526,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\authui.dll
[2018/04/15 22:05:42 | 000,516,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Internal.Management.dll
[2018/04/15 22:05:25 | 004,113,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_nt.dll
[2018/04/15 22:05:14 | 000,863,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntshrui.dll
[2018/04/15 22:05:07 | 000,456,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LockAppBroker.dll
[2018/04/15 22:04:52 | 002,464,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dwmcore.dll
[2018/04/15 22:04:44 | 002,209,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentExtensions.onecore.dll
[2018/04/15 22:04:38 | 000,965,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fontext.dll
[2018/04/15 22:04:34 | 001,342,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Wpc.dll
[2018/04/15 22:04:33 | 000,648,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserLanguagesCpl.dll
[2018/04/15 22:04:33 | 000,621,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hgcpl.dll
[2018/04/15 22:04:28 | 001,230,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\usercpl.dll
[2018/04/15 22:04:28 | 001,057,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\comdlg32.dll
[2018/04/15 22:04:27 | 001,236,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TokenBroker.dll
[2018/04/15 22:04:23 | 000,576,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\hgcpl.dll
[2018/04/15 22:04:20 | 000,559,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserLanguagesCpl.dll
[2018/04/15 22:04:18 | 002,523,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\gameux.dll
[2018/04/15 22:04:13 | 000,884,736 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Search.dll
[2018/04/15 22:04:10 | 002,490,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\themecpl.dll
[2018/04/15 22:04:07 | 000,556,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LockAppBroker.dll
[2018/04/15 22:04:06 | 000,997,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ShareHost.dll
[2018/04/15 22:04:04 | 000,976,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\HelpPane.exe
[2018/04/15 22:04:03 | 000,524,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\windows.immersiveshell.serviceprovider.dll
[2018/04/15 22:03:58 | 002,857,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dwmcore.dll
[2018/04/15 22:03:54 | 002,628,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\diagtrack.dll
[2018/04/15 22:03:49 | 000,825,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinui.appcore.dll
[2018/04/15 22:03:48 | 002,976,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinui.pcshell.dll
[2018/04/15 22:03:45 | 002,462,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\themecpl.dll
[2018/04/15 22:03:45 | 000,508,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingSync.dll
[2018/04/15 22:03:44 | 003,177,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentServer.dll
[2018/04/15 22:03:41 | 004,385,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ExplorerFrame.dll
[2018/04/15 22:03:37 | 004,772,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ExplorerFrame.dll
[2018/04/15 22:03:34 | 004,248,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MFMediaEngine.dll
[2018/04/15 22:03:31 | 001,353,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usercpl.dll
[2018/04/15 22:03:31 | 000,920,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TokenBroker.dll
[2018/04/15 22:03:30 | 003,287,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SyncCenter.dll
[2018/04/15 22:03:30 | 000,197,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingMonitor.dll
[2018/04/15 22:03:25 | 000,695,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Search.dll
[2018/04/15 22:03:24 | 000,417,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\stobject.dll
[2018/04/15 22:03:14 | 000,697,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinui.appcore.dll
[2018/04/15 22:03:12 | 002,741,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssrch.dll
[2018/04/15 22:03:07 | 000,402,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SettingSync.dll
[2018/04/15 22:03:03 | 002,814,976 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\themeui.dll
[2018/04/15 22:03:03 | 000,329,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\InputSwitch.dll
[2018/04/15 22:03:02 | 002,413,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\gameux.dll
[2018/04/15 22:03:00 | 001,224,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ShareHost.dll
[2018/04/15 22:02:54 | 001,669,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Wpc.dll
[2018/04/15 22:02:38 | 000,462,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuuhext.dll
[2018/04/15 22:02:21 | 000,440,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dmenrollengine.dll
[2018/04/15 22:02:16 | 004,814,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MFMediaEngine.dll
[2018/04/15 22:01:52 | 000,366,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Geolocation.dll
[2018/04/15 22:01:51 | 000,194,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mdmregistration.dll
[2018/04/15 22:01:49 | 000,531,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wlidprov.dll
[2018/04/15 22:01:42 | 001,509,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Immersive.dll
[2018/04/15 22:01:22 | 000,518,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dmenrollengine.dll
[2018/04/15 22:01:12 | 000,048,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ByteCodeGenerator.exe
[2018/04/15 22:00:59 | 000,669,184 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MCRecvSrc.dll
[2018/04/15 22:00:57 | 002,223,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlidsvc.dll
[2018/04/15 22:00:51 | 000,356,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DeviceEnroller.exe
[2018/04/15 22:00:49 | 000,231,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mdmregistration.dll
[2018/04/15 22:00:48 | 000,252,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\coredpus.dll
[2018/04/15 22:00:47 | 000,215,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\enrollmentapi.dll
[2018/04/15 22:00:43 | 000,682,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlidprov.dll
[2018/04/15 22:00:43 | 000,496,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Geolocation.dll
[2018/04/15 22:00:37 | 001,739,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Immersive.dll
[2018/04/15 22:00:00 | 000,058,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ByteCodeGenerator.exe
[2018/04/15 21:59:50 | 001,332,736 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wsecedit.dll
[2018/04/15 21:59:46 | 000,971,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MCRecvSrc.dll
[2018/04/15 21:58:38 | 001,472,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wsecedit.dll
[2018/04/15 21:58:26 | 000,125,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppxSysprep.dll

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2018/06/05 16:43:05 | 000,001,148 | ---- | C] () -- C:\Users\Public\Desktop\Quicksys RegDefrag.lnk
[2018/06/05 16:38:03 | 000,000,863 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2018/06/04 18:42:07 | 268,435,456 | -HS- | C] () -- C:\swapfile.sys
[2018/06/04 18:42:06 | 1658,675,200 | -HS- | C] () -- C:\hiberfil.sys
[2018/06/04 07:09:46 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\SysNative\drivers\Msft_User_WpdFs_01_11_00.Wdf
[2018/06/04 00:40:59 | 000,001,092 | ---- | C] () -- C:\Users\Public\Desktop\OpenOffice 4.1.5.lnk
[2018/06/03 21:07:25 | 008,186,102 | ---- | C] () -- C:\WINDOWS\SysNative\nvcoproc.bin
[2018/06/03 21:06:58 | 000,001,951 | ---- | C] () -- C:\WINDOWS\NvContainerRecovery.bat
[2018/06/03 21:02:58 | 000,044,277 | ---- | C] () -- C:\WINDOWS\SysNative\nvinfo.pb
[2018/06/03 21:02:57 | 001,512,680 | ---- | C] () -- C:\WINDOWS\SysNative\drivers\NVIDIA Corporation\Drs\nvdrsdb.bin
[2018/06/03 19:45:27 | 000,028,272 | ---- | C] () -- C:\WINDOWS\SysNative\drivers\TrueSight.sys
[2018/06/03 19:33:18 | 000,001,464 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
[2018/06/03 19:33:18 | 000,001,452 | ---- | C] () -- C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
[2018/06/03 19:32:37 | 000,000,963 | ---- | C] () -- C:\Users\firef\Desktop\Lien Navigateur Internet Sandboxé
[2018/06/03 19:32:37 | 000,000,963 | ---- | C] () -- C:\Users\firef\Application Data\Microsoft\Internet Explorer\Quick Launch\Lien Navigateur Internet Sandboxé
[2018/06/03 19:32:32 | 000,001,642 | ---- | C] () -- C:\WINDOWS\Sandboxie.ini
[2018/06/02 17:57:31 | 000,028,973 | ---- | C] () -- C:\Users\firef\Desktop\Screenshot_4.png
[2018/06/02 17:48:10 | 000,001,005 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
[2018/06/02 17:48:10 | 000,000,993 | ---- | C] () -- C:\Users\Public\Desktop\Firefox.lnk
[2018/06/02 12:14:38 | 000,000,220 | ---- | C] () -- C:\Users\firef\Desktop\Garry's Mod.url
[2018/05/31 22:33:05 | 000,002,160 | ---- | C] () -- C:\Users\firef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\f.lux.lnk
[2018/05/29 23:27:04 | 000,019,053 | ---- | C] () -- C:\WINDOWS\diagwrn.xml
[2018/05/29 23:27:04 | 000,019,053 | ---- | C] () -- C:\WINDOWS\diagerr.xml
[2018/05/21 19:37:18 | 000,018,765 | ---- | C] () -- C:\Users\firef\Desktop\Screenshot_1.png
[2018/05/20 10:49:46 | 000,000,928 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NETGEAR WNA1100 Genie.lnk
[2018/05/20 10:49:46 | 000,000,910 | ---- | C] () -- C:\Users\Public\Desktop\NETGEAR WNA1100 Genie.lnk
[2018/05/19 00:46:13 | 000,000,511 | ---- | C] () -- C:\WINDOWS\SysNative\@NotifierToastIcon.png
[2018/05/09 20:21:57 | 000,084,992 | ---- | C] () -- C:\WINDOWS\SysNative\DataStoreCacheDumpTool.exe
[2018/05/08 13:11:35 | 000,001,109 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HMA! Pro VPN.lnk
[2018/05/08 13:11:35 | 000,001,077 | ---- | C] () -- C:\Users\Public\Desktop\HMA! Pro VPN.lnk
[2018/05/08 13:02:40 | 016,781,312 | ---- | C] () -- C:\Users\firef\kcore
[2018/05/08 13:02:40 | 000,000,061 | ---- | C] () -- C:\Users\firef\kcore.aria2
[2018/05/07 14:55:03 | 000,002,243 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ROCCAT Swarm Monitor.lnk
[2018/05/05 22:05:47 | 000,001,023 | ---- | C] () -- C:\Users\firef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\osu!.lnk
[2018/05/05 22:05:47 | 000,001,015 | ---- | C] () -- C:\Users\firef\Desktop\osu!.lnk
[2018/05/04 18:48:16 | 000,001,149 | ---- | C] () -- C:\Users\Public\Desktop\Oracle VM VirtualBox.lnk
[2018/05/01 23:04:20 | 000,000,975 | ---- | C] () -- C:\Users\Public\Desktop\League of Legends.lnk
[2018/05/01 20:54:53 | 000,000,219 | ---- | C] () -- C:\Users\firef\Desktop\Counter-Strike Global Offensive.url
[2018/05/01 15:19:06 | 000,037,888 | ---- | C] () -- C:\WINDOWS\SysNative\SpectrumSyncClient.dll
[2018/05/01 14:45:24 | 000,003,329 | ---- | C] () -- C:\WINDOWS\SysWow64\ieuinit.inf
[2018/05/01 14:45:24 | 000,003,329 | ---- | C] () -- C:\WINDOWS\SysNative\ieuinit.inf
[2018/04/30 17:43:47 | 000,000,425 | ---- | C] () -- C:\Users\firef\AppData\Local\UserProducts.xml
[2018/04/30 17:43:47 | 000,000,420 | ---- | C] () -- C:\WINDOWS\tasks\update-S-1-5-21-3661491001-3977891655-3078464167-1001.job
[2018/04/30 17:43:45 | 000,000,420 | ---- | C] () -- C:\WINDOWS\tasks\update-sys.job
[2018/04/30 14:40:44 | 000,000,113 | ---- | C] () -- C:\Users\firef\AppData\Roaming\D2Info0
[2018/04/30 14:40:44 | 000,000,008 | ---- | C] () -- C:\Users\firef\AppData\Roaming\DofusAppId0_1
[2018/04/30 14:31:46 | 000,411,372 | ---- | C] () -- C:\Users\firef\Documents\Screenshot_1.jpg
[2018/04/30 14:28:28 | 000,001,120 | ---- | C] () -- C:\Users\firef\Desktop\Dofus.lnk
[2018/04/29 22:03:45 | 000,098,304 | ---- | C] () -- C:\WINDOWS\SysNative\runexehelper.exe
[2018/04/29 22:02:21 | 000,074,716 | ---- | C] () -- C:\WINDOWS\SysNative\FeatureToastHeroImg.jpg
[2018/04/29 20:49:55 | 000,003,736 | R--- | C] () -- C:\Users\firef\Desktop\GameUserSettings.ini
[2018/04/29 20:11:34 | 000,001,270 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk
[2018/04/29 20:11:34 | 000,001,258 | ---- | C] () -- C:\Users\Public\Desktop\Epic Games Launcher.lnk
[2018/04/29 17:07:15 | 000,001,036 | ---- | C] () -- C:\Users\Public\Desktop\Steam.lnk
[2018/04/29 15:31:41 | 000,001,447 | ---- | C] () -- C:\Users\Public\Desktop\GeForce Experience.lnk
[2018/04/29 15:26:43 | 000,001,951 | ---- | C] () -- C:\WINDOWS\NvTelemetryContainerRecovery.bat
[2018/04/29 15:03:53 | 000,002,411 | ---- | C] () -- C:\Users\firef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
[2018/04/29 14:00:37 | 000,001,333 | ---- | C] () -- C:\Users\firef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gestionnaire audio HD.lnk
[2018/04/29 13:36:51 | 000,002,237 | ---- | C] () -- C:\Users\firef\Desktop\Discord.lnk
[2018/04/29 13:28:55 | 034,438,088 | ---- | C] () -- C:\WINDOWS\SysNative\drivers\rtkhdasetting.zip
[2018/04/29 13:28:09 | 000,000,000 | -H-- | C] () -- C:\ProgramData\DP45977C.lfl
[2018/04/29 13:25:46 | 000,002,358 | ---- | C] () -- C:\Users\firef\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2018/04/29 13:25:46 | 000,002,299 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
[2018/04/29 13:25:46 | 000,002,258 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2018/04/29 13:21:13 | 000,000,000 | ---- | C] () -- C:\WINDOWS\SysNative\GfxValDisplayLog.bin
[2018/04/29 13:09:43 | 000,000,352 | ---- | C] () -- C:\Users\firef\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2018/04/29 13:09:43 | 000,000,334 | ---- | C] () -- C:\Users\firef\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2018/04/29 13:02:55 | 002,905,986 | ---- | C] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI
[2018/04/29 12:38:25 | 000,067,584 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2018/04/29 12:16:40 | 000,256,912 | ---- | C] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT
[2018/04/29 11:33:06 | 000,058,398 | ---- | C] () -- C:\WINDOWS\SysWow64\license.rtf
[2018/04/29 11:33:06 | 000,058,398 | ---- | C] () -- C:\WINDOWS\SysNative\license.rtf
[2018/04/20 17:30:40 | 000,828,728 | ---- | C] () -- C:\WINDOWS\SysWow64\vulkan-1-999-0-0-0.dll
[2018/04/20 17:30:40 | 000,828,728 | ---- | C] () -- C:\WINDOWS\SysWow64\vulkan-1.dll
[2018/04/20 17:30:24 | 000,591,160 | ---- | C] () -- C:\WINDOWS\SysWow64\vulkaninfo-1-999-0-0-0.exe
[2018/04/20 17:30:24 | 000,591,160 | ---- | C] () -- C:\WINDOWS\SysWow64\vulkaninfo.exe
[2018/04/20 17:30:06 | 000,961,336 | ---- | C] () -- C:\WINDOWS\SysNative\vulkan-1-999-0-0-0.dll
[2018/04/20 17:30:06 | 000,961,336 | ---- | C] () -- C:\WINDOWS\SysNative\vulkan-1.dll
[2018/04/20 17:29:52 | 000,700,728 | ---- | C] () -- C:\WINDOWS\SysNative\vulkaninfo-1-999-0-0-0.exe
[2018/04/20 17:29:52 | 000,700,728 | ---- | C] () -- C:\WINDOWS\SysNative\vulkaninfo.exe
[2017/12/14 03:39:08 | 002,491,112 | ---- | C] () -- C:\WINDOWS\SysWow64\Windows.Mirage.dll
[2017/09/29 15:46:50 | 000,000,741 | ---- | C] () -- C:\WINDOWS\SysWow64\NOISE.DAT
[2017/09/29 15:46:49 | 000,215,943 | ---- | C] () -- C:\WINDOWS\SysWow64\dssec.dat
[2017/09/29 15:42:27 | 000,017,143 | ---- | C] () -- C:\WINDOWS\SysWow64\srms-apr.dat
[2017/09/29 15:42:18 | 000,518,144 | ---- | C] () -- C:\WINDOWS\SysWow64\msjetoledb40.dll
[2017/09/29 15:42:14 | 000,054,272 | ---- | C] () -- C:\WINDOWS\SysWow64\BWContextHandler.dll
[2017/09/29 15:42:13 | 000,002,307 | ---- | C] () -- C:\WINDOWS\SysWow64\WimBootCompress.ini
[2017/09/29 15:42:11 | 000,149,840 | ---- | C] () -- C:\WINDOWS\SysWow64\InputHost.dll
[2017/09/29 15:42:09 | 003,383,296 | ---- | C] () -- C:\WINDOWS\SysWow64\Windows.UI.Input.Inking.Analysis.dll
[2017/09/29 15:42:09 | 000,309,248 | ---- | C] () -- C:\WINDOWS\SysWow64\ssdm.dll
[2017/09/29 15:42:09 | 000,193,024 | ---- | C] () -- C:\WINDOWS\SysWow64\HeatCore.dll
[2017/09/29 15:42:09 | 000,092,160 | ---- | C] () -- C:\WINDOWS\SysWow64\WindowsDefaultHeatProcessor.dll
[2017/09/29 15:42:09 | 000,055,808 | ---- | C] () -- C:\WINDOWS\SysWow64\xboxgipsynthetic.dll
[2017/09/29 15:42:09 | 000,025,088 | ---- | C] () -- C:\WINDOWS\SysWow64\Windows.WARP.JITService.exe
[2017/09/29 15:42:08 | 000,167,640 | ---- | C] () -- C:\WINDOWS\SysWow64\chs_singlechar_pinyin.dat
[2017/09/29 15:42:00 | 000,043,131 | ---- | C] () -- C:\WINDOWS\mib.bin
[2017/09/29 15:41:54 | 000,673,088 | ---- | C] () -- C:\WINDOWS\SysWow64\mlang.dat
[2017/02/07 21:47:32 | 000,150,040 | ---- | C] () -- C:\WINDOWS\SysWow64\libEGL.dll
[2017/02/07 21:47:32 | 000,120,856 | ---- | C] () -- C:\WINDOWS\SysWow64\libGLESv2.dll
[2017/02/07 21:47:32 | 000,110,096 | ---- | C] () -- C:\WINDOWS\SysWow64\libGLESv1_CM.dll

[color=#E56717]========== ZeroAccess Check ==========[/color]

[2018/05/01 11:02:40 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\windows.storage.dll -- [2018/05/03 09:36:45 | 007,675,792 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\windows.storage.dll -- [2018/05/03 08:31:34 | 006,092,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2017/09/29 15:42:05 | 000,964,096 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2017/09/29 15:42:18 | 000,769,536 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2018/02/10 06:35:43 | 000,506,368 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

[color=#E56717]========== LOP Check ==========[/color]

[2018/04/30 14:43:38 | 000,000,000 | ---D | M] -- C:\Users\firef\AppData\Roaming\AnkamaCertificates
[2018/06/02 16:42:56 | 000,000,000 | ---D | M] -- C:\Users\firef\AppData\Roaming\discord
[2018/04/30 15:16:20 | 000,000,000 | ---D | M] -- C:\Users\firef\AppData\Roaming\Dofus
[2018/05/01 16:38:15 | 000,000,000 | ---D | M] -- C:\Users\firef\AppData\Roaming\EasyAntiCheat
[2018/06/04 00:42:47 | 000,000,000 | ---D | M] -- C:\Users\firef\AppData\Roaming\OpenOffice
[2018/04/30 14:40:55 | 000,000,000 | ---D | M] -- C:\Users\firef\AppData\Roaming\Reg

[color=#E56717]========== Purity Check ==========[/color]

[color=#E56717]========== Custom Scans ==========[/color]

[color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*. >[/color]

[color=#A23BEC]< %ALLUSERSPROFILE%\Application Data\*.exe /s >[/color]

[color=#A23BEC]< %APPDATA%\*. >[/color]
[2018/04/29 13:12:17 | 000,000,000 | ---D | M] -- C:\Users\firef\AppData\Roaming\Adobe
[2018/04/30 14:43:38 | 000,000,000 | ---D | M] -- C:\Users\firef\AppData\Roaming\AnkamaCertificates
[2018/06/02 16:42:56 | 000,000,000 | ---D | M] -- C:\Users\firef\AppData\Roaming\discord
[2018/04/30 15:16:20 | 000,000,000 | ---D | M] -- C:\Users\firef\AppData\Roaming\Dofus
[2018/05/01 16:38:15 | 000,000,000 | ---D | M] -- C:\Users\firef\AppData\Roaming\EasyAntiCheat
[2018/04/30 14:40:45 | 000,000,000 | ---D | M] -- C:\Users\firef\AppData\Roaming\Macromedia
[2018/06/03 21:16:46 | 000,000,000 | --SD | M] -- C:\Users\firef\AppData\Roaming\Microsoft
[2018/06/02 17:48:15 | 000,000,000 | ---D | M] -- C:\Users\firef\AppData\Roaming\Mozilla
[2018/06/04 00:42:47 | 000,000,000 | ---D | M] -- C:\Users\firef\AppData\Roaming\OpenOffice
[2018/04/30 14:40:55 | 000,000,000 | ---D | M] -- C:\Users\firef\AppData\Roaming\Reg
[2018/04/29 14:51:07 | 000,000,000 | ---D | M] -- C:\Users\firef\AppData\Roaming\WinRAR

[color=#A23BEC]< %APPDATA%\*.exe /s >[/color]
[2018/05/23 14:30:04 | 001,244,504 | ---- | M] () -- C:\Users\firef\AppData\Roaming\discord\0.0.301\modules\discord_hook\4\DiscordHookHelper.exe
[2018/05/23 14:30:04 | 001,672,536 | ---- | M] () -- C:\Users\firef\AppData\Roaming\discord\0.0.301\modules\discord_hook\4\DiscordHookHelper64.exe
[2018/05/01 20:13:10 | 001,626,968 | ---- | M] () -- C:\Users\firef\AppData\Roaming\discord\0.0.301\modules\discord_vigilante\1\DiscordSidekick_x64.exe
[2018/05/01 20:13:10 | 001,258,840 | ---- | M] () -- C:\Users\firef\AppData\Roaming\discord\0.0.301\modules\discord_vigilante\1\DiscordSidekick_x86.exe
[2018/05/21 14:42:02 | 000,019,790 | R--- | M] () -- C:\Users\firef\AppData\Roaming\Microsoft\Installer\{052FD2FB-034D-4CDD-864E-798DE45C742A}\idle.exe

[color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color]

[color=#A23BEC]< MD5 for: ALG.EXE >[/color]
[2017/09/29 15:41:33 | 000,092,672 | ---- | M] (Microsoft Corporation) MD5=084101AB03969D8ED00D5FFBE5F4C3DF -- C:\WINDOWS\SysNative\alg.exe
[2017/09/29 15:41:33 | 000,092,672 | ---- | M] (Microsoft Corporation) MD5=084101AB03969D8ED00D5FFBE5F4C3DF -- C:\Windows\WinSxS\amd64_microsoft-windows-alg_31bf3856ad364e35_10.0.16299.15_none_cbd57e12cc42fc66\alg.exe
[2018/04/12 01:34:14 | 000,091,136 | ---- | M] (Microsoft Corporation) MD5=9E9D78D1C179EB2E3E2282A1DC409D93 -- C:\$WINDOWS.~BT\NewOS\Windows\System32\alg.exe
[2018/04/12 01:34:14 | 000,091,136 | ---- | M] (Microsoft Corporation) MD5=9E9D78D1C179EB2E3E2282A1DC409D93 -- C:\$WINDOWS.~BT\NewOS\Windows\WinSxS\amd64_microsoft-windows-alg_31bf3856ad364e35_10.0.17134.1_none_8e69de77c448ef26\alg.exe
[2018/04/11 06:07:22 | 000,091,136 | ---- | M] (Microsoft Corporation) MD5=9E9D78D1C179EB2E3E2282A1DC409D93 -- C:\Windows\SoftwareDistribution\Download\248aee40972828407d8f7cd0ecfd59e6\amd64_Microsoft-Windows-Client-Features-Package~~AMD64~~10.0.17134.1\amd64_microsoft-windows-alg_31bf3856ad364e35_10.0.17134.1_none_8e69de77c448ef26\alg.exe

[color=#A23BEC]< MD5 for: ATAPI.SYS >[/color]
[2017/09/29 15:41:03 | 000,028,568 | ---- | M] (Microsoft Corporation) MD5=6191B9B2EE0E8CB957C683B9B341CC86 -- C:\WINDOWS\SysNative\drivers\atapi.sys
[2017/09/29 15:41:03 | 000,028,568 | ---- | M] (Microsoft Corporation) MD5=6191B9B2EE0E8CB957C683B9B341CC86 -- C:\WINDOWS\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_d0125efb9153d084\atapi.sys
[2017/09/29 15:41:03 | 000,028,568 | ---- | M] (Microsoft Corporation) MD5=6191B9B2EE0E8CB957C683B9B341CC86 -- C:\Windows\WinSxS\amd64_mshdc.inf_31bf3856ad364e35_10.0.16299.251_none_eab613538c5db104\atapi.sys
[2018/04/12 01:33:49 | 000,028,568 | ---- | M] (Microsoft Corporation) MD5=90AB4ED8EBD72A1C096A40CC35404B91 -- C:\$WINDOWS.~BT\NewOS\Windows\System32\drivers\atapi.sys
[2018/04/12 01:33:49 | 000,028,568 | ---- | M] (Microsoft Corporation) MD5=90AB4ED8EBD72A1C096A40CC35404B91 -- C:\$WINDOWS.~BT\NewOS\Windows\System32\DriverStore\FileRepository\mshdc.inf_amd64_662ca788abd83e42\atapi.sys
[2018/04/12 01:33:49 | 000,028,568 | ---- | M] (Microsoft Corporation) MD5=90AB4ED8EBD72A1C096A40CC35404B91 -- C:\$WINDOWS.~BT\NewOS\Windows\WinSxS\amd64_dual_mshdc.inf_31bf3856ad364e35_10.0.17134.1_none_00f83e1b38aa06a9\atapi.sys
[2018/04/11 06:40:18 | 000,028,568 | ---- | M] (Microsoft Corporation) MD5=90AB4ED8EBD72A1C096A40CC35404B91 -- C:\Windows\SoftwareDistribution\Download\248aee40972828407d8f7cd0ecfd59e6\amd64_Microsoft-Windows-EditionPack-Core-Package~~AMD64~~10.0.17134.1\amd64_dual_mshdc.inf_31bf3856ad364e35_10.0.17134.1_none_00f83e1b38aa06a9\atapi.sys
[2017/12/14 03:56:05 | 000,000,012 | ---- | M] () MD5=9BB7486452CE8DEAAA9E3BD67DB4F35C -- C:\Windows\WinSxS\amd64_mshdc.inf_31bf3856ad364e35_10.0.16299.15_none_0024540c92ae41c6\atapi.sys
[2018/05/06 18:21:56 | 000,000,012 | ---- | M] () MD5=EE363E744D3889221B2BD4F6F30843FD -- C:\Windows\WinSxS\amd64_mshdc.inf_31bf3856ad364e35_10.0.16299.98_none_0003f37892c67ed1\atapi.sys

[color=#A23BEC]< MD5 for: CDROM.SYS >[/color]
[2017/09/29 15:41:02 | 000,159,744 | ---- | M] (Microsoft Corporation) MD5=6D83565C1652E80447EDEA6947FA89D7 -- C:\WINDOWS\SysNative\drivers\cdrom.sys
[2017/09/29 15:41:02 | 000,159,744 | ---- | M] (Microsoft Corporation) MD5=6D83565C1652E80447EDEA6947FA89D7 -- C:\WINDOWS\SysNative\DriverStore\FileRepository\cdrom.inf_amd64_21e18060f597c313\cdrom.sys
[2017/09/29 15:41:02 | 000,159,744 | ---- | M] (Microsoft Corporation) MD5=6D83565C1652E80447EDEA6947FA89D7 -- C:\Windows\WinSxS\amd64_cdrom.inf_31bf3856ad364e35_10.0.16299.15_none_829587d514ebdd74\cdrom.sys
[2018/04/12 01:33:48 | 000,159,744 | ---- | M] (Microsoft Corporation) MD5=AD4D24434C058AFAFD5AB319B4BF5B66 -- C:\$WINDOWS.~BT\NewOS\Windows\System32\drivers\cdrom.sys
[2018/04/12 01:33:48 | 000,159,744 | ---- | M] (Microsoft Corporation) MD5=AD4D24434C058AFAFD5AB319B4BF5B66 -- C:\$WINDOWS.~BT\NewOS\Windows\System32\DriverStore\FileRepository\cdrom.inf_amd64_a105bc614ee68fa0\cdrom.sys
[2018/04/12 01:33:48 | 000,159,744 | ---- | M] (Microsoft Corporation) MD5=AD4D24434C058AFAFD5AB319B4BF5B66 -- C:\$WINDOWS.~BT\NewOS\Windows\WinSxS\amd64_dual_cdrom.inf_31bf3856ad364e35_10.0.17134.1_none_68549b4008ff2b0b\cdrom.sys
[2018/04/11 05:59:54 | 000,159,744 | ---- | M] (Microsoft Corporation) MD5=AD4D24434C058AFAFD5AB319B4BF5B66 -- C:\Windows\SoftwareDistribution\Download\248aee40972828407d8f7cd0ecfd59e6\amd64_Microsoft-Windows-EditionPack-Core-Package~~AMD64~~10.0.17134.1\amd64_dual_cdrom.inf_31bf3856ad364e35_10.0.17134.1_none_68549b4008ff2b0b\cdrom.sys

[color=#A23BEC]< MD5 for: CSRSS.EXE >[/color]
[2017/09/29 15:41:43 | 000,017,688 | ---- | M] (Microsoft Corporation) MD5=4E043FE41901F1EA1B0FCCEF3C077C56 -- C:\WINDOWS\SysNative\csrss.exe
[2017/09/29 15:41:43 | 000,017,688 | ---- | M] (Microsoft Corporation) MD5=4E043FE41901F1EA1B0FCCEF3C077C56 -- C:\Windows\WinSxS\amd64_microsoft-windows-csrss_31bf3856ad364e35_10.0.16299.15_none_7bd00fca553a2176\csrss.exe
[2018/04/12 01:34:22 | 000,017,696 | ---- | M] (Microsoft Corporation) MD5=DA224D4C138A3ECA95C6C7976AC5D9F1 -- C:\$WINDOWS.~BT\NewOS\Windows\System32\csrss.exe
[2018/04/12 01:34:22 | 000,017,696 | ---- | M] (Microsoft Corporation) MD5=DA224D4C138A3ECA95C6C7976AC5D9F1 -- C:\$WINDOWS.~BT\NewOS\Windows\WinSxS\amd64_microsoft-windows-csrss_31bf3856ad364e35_10.0.17134.1_none_3e64702f4d401436\csrss.exe
[2018/04/11 06:36:03 | 000,017,696 | ---- | M] (Microsoft Corporation) MD5=DA224D4C138A3ECA95C6C7976AC5D9F1 -- C:\Windows\SoftwareDistribution\Download\248aee40972828407d8f7cd0ecfd59e6\amd64_Microsoft-Windows-Client-Features-Package~~AMD64~~10.0.17134.1\amd64_microsoft-windows-csrss_31bf3856ad364e35_10.0.17134.1_none_3e64702f4d401436\csrss.exe

[color=#A23BEC]< MD5 for: CTFMON.EXE >[/color]
[2017/09/29 15:42:00 | 000,010,752 | ---- | M] (Microsoft Corporation) MD5=0736280C07AC05FBFEBC24D893ACF0D7 -- C:\WINDOWS\SysNative\ctfmon.exe
[2017/09/29 15:42:00 | 000,010,752 | ---- | M] (Microsoft Corporation) MD5=0736280C07AC05FBFEBC24D893ACF0D7 -- C:\Windows\WinSxS\amd64_microsoft-windows-t..cesframework-ctfmon_31bf3856ad364e35_10.0.16299.15_none_c01cb8c601b5fd51\ctfmon.exe
[2018/04/12 01:35:00 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=12764C4EC54842D1790BD8FA91033268 -- C:\$WINDOWS.~BT\NewOS\Windows\SysWOW64\ctfmon.exe
[2018/04/12 01:35:00 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=12764C4EC54842D1790BD8FA91033268 -- C:\$WINDOWS.~BT\NewOS\Windows\WinSxS\wow64_microsoft-windows-t..cesframework-ctfmon_31bf3856ad364e35_10.0.17134.1_none_8d05c37d2e1cb20c\ctfmon.exe
[2018/04/11 14:14:10 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=12764C4EC54842D1790BD8FA91033268 -- C:\Windows\SoftwareDistribution\Download\248aee40972828407d8f7cd0ecfd59e6\amd64_Microsoft-Windows-Client-Features-WOW64-Package~~AMD64~~10.0.17134.1\wow64_microsoft-windows-t..cesframework-ctfmon_31bf3856ad364e35_10.0.17134.1_none_8d05c37d2e1cb20c\ctfmon.exe
[2017/09/29 15:42:25 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=C0BF9642414909DAFD72F3F2F5DC1A7D -- C:\Windows\SysWOW64\ctfmon.exe
[2017/09/29 15:42:25 | 000,009,728 | ---- | M] (Microsoft Corporation) MD5=C0BF9642414909DAFD72F3F2F5DC1A7D -- C:\Windows\WinSxS\wow64_microsoft-windows-t..cesframework-ctfmon_31bf3856ad364e35_10.0.16299.15_none_ca7163183616bf4c\ctfmon.exe
[2018/04/12 01:34:37 | 000,010,752 | ---- | M] (Microsoft Corporation) MD5=D4DAF47FBF707B23B874DE6F139CB0C7 -- C:\$WINDOWS.~BT\NewOS\Windows\System32\ctfmon.exe
[2018/04/12 01:34:37 | 000,010,752 | ---- | M] (Microsoft Corporation) MD5=D4DAF47FBF707B23B874DE6F139CB0C7 -- C:\$WINDOWS.~BT\NewOS\Windows\WinSxS\amd64_microsoft-windows-t..cesframework-ctfmon_31bf3856ad364e35_10.0.17134.1_none_82b1192af9bbf011\ctfmon.exe
[2018/04/11 15:46:37 | 000,010,752 | ---- | M] (Microsoft Corporation) MD5=D4DAF47FBF707B23B874DE6F139CB0C7 -- C:\Windows\SoftwareDistribution\Download\248aee40972828407d8f7cd0ecfd59e6\amd64_Microsoft-Windows-Client-Features-Package~~AMD64~~10.0.17134.1\amd64_microsoft-windows-t..cesframework-ctfmon_31bf3856ad364e35_10.0.17134.1_none_82b1192af9bbf011\ctfmon.exe

[color=#A23BEC]< MD5 for: DISK.SYS >[/color]
[2018/05/06 17:32:48 | 000,002,745 | ---- | M] () MD5=672662D8652EF8415896C6625305B4E4 -- C:\Windows\WinSxS\amd64_dual_disk.inf_31bf3856ad364e35_10.0.16299.15_none_d042400b35f4f0e1\disk.sys
[2018/03/30 07:00:30 | 000,094,104 | ---- | M] (Microsoft Corporation) MD5=8C7FF86607E367E6319F7F637115D665 -- C:\WINDOWS\SysNative\drivers\disk.sys
[2018/03/30 07:00:30 | 000,094,104 | ---- | M] (Microsoft Corporation) MD5=8C7FF86607E367E6319F7F637115D665 -- C:\WINDOWS\SysNative\DriverStore\FileRepository\disk.inf_amd64_c587de47c2e4231c\disk.sys
[2018/03/30 07:00:30 | 000,094,104 | ---- | M] (Microsoft Corporation) MD5=8C7FF86607E367E6319F7F637115D665 -- C:\Windows\WinSxS\amd64_dual_disk.inf_31bf3856ad364e35_10.0.16299.371_none_babe61602fb49528\disk.sys
[2018/04/12 01:33:49 | 000,094,112 | ---- | M] (Microsoft Corporation) MD5=A79FCB89805FA9EA9F48B671A4591D4E -- C:\$WINDOWS.~BT\NewOS\Windows\System32\drivers\disk.sys
[2018/04/12 01:33:49 | 000,094,112 | ---- | M] (Microsoft Corporation) MD5=A79FCB89805FA9EA9F48B671A4591D4E -- C:\$WINDOWS.~BT\NewOS\Windows\System32\DriverStore\FileRepository\disk.inf_amd64_22d3a9d945ba3114\disk.sys
[2018/04/12 01:33:49 | 000,094,112 | ---- | M] (Microsoft Corporation) MD5=A79FCB89805FA9EA9F48B671A4591D4E -- C:\$WINDOWS.~BT\NewOS\Windows\WinSxS\amd64_dual_disk.inf_31bf3856ad364e35_10.0.17134.1_none_92d6a0702dfae3a1\disk.sys
[2018/04/11 07:56:28 | 000,094,112 | ---- | M] (Microsoft Corporation) MD5=A79FCB89805FA9EA9F48B671A4591D4E -- C:\Windows\SoftwareDistribution\Download\248aee40972828407d8f7cd0ecfd59e6\amd64_Microsoft-Windows-EditionPack-Core-Package~~AMD64~~10.0.17134.1\amd64_dual_disk.inf_31bf3856ad364e35_10.0.17134.1_none_92d6a0702dfae3a1\disk.sys

[color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color]
[2017/12/14 04:01:41 | 000,321,916 | ---- | M] () MD5=0EC762EF1A08C85522AB9077D8FDF11D -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_10.0.16299.15_none_7ef57d571f41a3e4\explorer.exe
[2018/04/12 01:35:01 | 003,611,360 | ---- | M] (Microsoft Corporation) MD5=166AB1B9462E5C1D6D18EC5EC0B6A5F7 -- C:\$WINDOWS.~BT\NewOS\Windows\SysWOW64\explorer.exe
[2018/04/12 01:35:01 | 003,611,360 | ---- | M] (Microsoft Corporation) MD5=166AB1B9462E5C1D6D18EC5EC0B6A5F7 -- C:\$WINDOWS.~BT\NewOS\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_10.0.17134.1_none_4189ddbc174796a4\explorer.exe
[2018/04/11 14:25:31 | 003,611,360 | ---- | M] (Microsoft Corporation) MD5=166AB1B9462E5C1D6D18EC5EC0B6A5F7 -- C:\Windows\SoftwareDistribution\Download\248aee40972828407d8f7cd0ecfd59e6\amd64_Microsoft-Windows-Client-Features-WOW64-Package~~AMD64~~10.0.17134.1\wow64_microsoft-windows-explorer_31bf3856ad364e35_10.0.17134.1_none_4189ddbc174796a4\explorer.exe
[2018/04/15 23:32:55 | 003,904,296 | ---- | M] (Microsoft Corporation) MD5=28A9316147DF6223D0AB7774706B55EC -- C:\Windows\explorer.exe
[2018/04/15 23:32:55 | 003,904,296 | ---- | M] (Microsoft Corporation) MD5=28A9316147DF6223D0AB7774706B55EC -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_10.0.16299.402_none_5f69a5fde466d917\explorer.exe
[2018/05/13 22:46:08 | 000,254,411 | ---- | M] () MD5=411EC85DFA14C71C30CDEB220FCDDA27 -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_10.0.16299.248_none_69990e9018e2a892\explorer.exe
[2018/05/06 18:32:57 | 000,274,721 | ---- | M] () MD5=6A325D3143962BFC8F03889FB3C8667F -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_10.0.16299.125_none_69ababa418d52784\explorer.exe
[2018/04/20 10:46:50 | 007,651,984 | ---- | M] (Safer-Networking Ltd.) MD5=93C039905E587E60842D0C8FF2E8988E -- C:\Program Files (x86)\Spybot - Search & Destroy 2\explorer.exe
[2017/12/14 03:46:53 | 000,410,752 | ---- | M] () MD5=99C932992A3556E3A13F112785D871AC -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_10.0.16299.15_none_74a0d304eae0e1e9\explorer.exe
[2018/05/13 22:30:49 | 000,307,774 | ---- | M] () MD5=A676CEC9C6CBE75AC20EF8B161E37140 -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_10.0.16299.248_none_5f44643de481e697\explorer.exe
[2018/02/10 08:09:53 | 003,904,296 | ---- | M] (Microsoft Corporation) MD5=A77D56422C38C1F8A00D95D2D5B1675E -- C:\Windows\CbsTemp\30662645_3366007289\amd64_microsoft-windows-explorer_31bf3856ad364e35_10.0.16299.248_none_5f44643de481e697\explorer.exe
[2018/04/12 01:34:44 | 003,933,184 | ---- | M] (Microsoft Corporation) MD5=AD5296B280E8F522A8A897C96BAB0E1D -- C:\$WINDOWS.~BT\NewOS\Windows\explorer.exe
[2018/04/12 01:34:44 | 003,933,184 | ---- | M] (Microsoft Corporation) MD5=AD5296B280E8F522A8A897C96BAB0E1D -- C:\$WINDOWS.~BT\NewOS\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_10.0.17134.1_none_37353369e2e6d4a9\explorer.exe
[2018/04/11 16:15:54 | 003,933,184 | ---- | M] (Microsoft Corporation) MD5=AD5296B280E8F522A8A897C96BAB0E1D -- C:\Windows\SoftwareDistribution\Download\248aee40972828407d8f7cd0ecfd59e6\amd64_Microsoft-Windows-Client-Features-Package~~AMD64~~10.0.17134.1\amd64_microsoft-windows-explorer_31bf3856ad364e35_10.0.17134.1_none_37353369e2e6d4a9\explorer.exe
[2018/05/06 17:39:08 | 000,417,678 | ---- | M] () MD5=B191A4CFCD3C5CEE04EF239988B6A4CC -- C:\Windows\WinSxS\amd64_microsoft-windows-explorer_31bf3856ad364e35_10.0.16299.125_none_5f570151e4746589\explorer.exe
[2018/02/10 07:09:56 | 003,485,392 | ---- | M] (Microsoft Corporation) MD5=E79CC4B9A9EAA1E5D801742C093043A9 -- C:\Windows\CbsTemp\30662645_3366007289\wow64_microsoft-windows-explorer_31bf3856ad364e35_10.0.16299.248_none_69990e9018e2a892\explorer.exe
[2018/04/15 22:38:48 | 003,485,392 | ---- | M] (Microsoft Corporation) MD5=F173C38E9BAA09191312B3E706C1DFD5 -- C:\Windows\SysWOW64\explorer.exe
[2018/04/15 22:38:48 | 003,485,392 | ---- | M] (Microsoft Corporation) MD5=F173C38E9BAA09191312B3E706C1DFD5 -- C:\Windows\WinSxS\wow64_microsoft-windows-explorer_31bf3856ad364e35_10.0.16299.402_none_69be505018c79b12\explorer.exe

[color=#A23BEC]< MD5 for: I8042PRT.SYS >[/color]
[2017/09/29 15:41:08 | 000,105,984 | ---- | M] (Microsoft Corporation) MD5=56FF074E50F9042FD2856AB3418F4B18 -- C:\WINDOWS\SysNative\drivers\i8042prt.sys
[2017/09/29 15:41:08 | 000,105,984 | ---- | M] (Microsoft Corporation) MD5=56FF074E50F9042FD2856AB3418F4B18 -- C:\WINDOWS\SysNative\DriverStore\FileRepository\keyboard.inf_amd64_604ef8d09f87f339\i8042prt.sys
[2017/09/29 15:41:08 | 000,105,984 | ---- | M] (Microsoft Corporation) MD5=56FF074E50F9042FD2856AB3418F4B18 -- C:\Windows\WinSxS\amd64_dual_keyboard.inf_31bf3856ad364e35_10.0.16299.15_none_2f13b274aac1f357\i8042prt.sys
[2018/04/12 01:33:52 | 000,105,984 | ---- | M] (Microsoft Corporation) MD5=DA179667B8CEC22E4ECBBF4210DC0E35 -- C:\$WINDOWS.~BT\NewOS\Windows\System32\drivers\i8042prt.sys
[2018/04/12 01:33:52 | 000,105,984 | ---- | M] (Microsoft Corporation) MD5=DA179667B8CEC22E4ECBBF4210DC0E35 -- C:\$WINDOWS.~BT\NewOS\Windows\System32\DriverStore\FileRepository\keyboard.inf_amd64_e085085e52ff47cf\i8042prt.sys
[2018/04/12 01:33:52 | 000,105,984 | ---- | M] (Microsoft Corporation) MD5=DA179667B8CEC22E4ECBBF4210DC0E35 -- C:\$WINDOWS.~BT\NewOS\Windows\WinSxS\amd64_dual_keyboard.inf_31bf3856ad364e35_10.0.17134.1_none_f1a812d9a2c7e617\i8042prt.sys
[2018/04/11 06:07:37 | 000,105,984 | ---- | M] (Microsoft Corporation) MD5=DA179667B8CEC22E4ECBBF4210DC0E35 -- C:\Windows\SoftwareDistribution\Download\248aee40972828407d8f7cd0ecfd59e6\amd64_Microsoft-Windows-Client-Features-Package~~AMD64~~10.0.17134.1\amd64_dual_keyboard.inf_31bf3856ad364e35_10.0.17134.1_none_f1a812d9a2c7e617\i8042prt.sys

[color=#A23BEC]< MD5 for: IASTORV.SYS >[/color]
[2018/04/12 01:33:49 | 000,412,064 | ---- | M] (Intel Corporation) MD5=11AC0355FE52CC8813EE6864DE7531E4 -- C:\$WINDOWS.~BT\NewOS\Windows\System32\drivers\iaStorV.sys
[2018/04/12 01:33:49 | 000,412,064 | ---- | M] (Intel Corporation) MD5=11AC0355FE52CC8813EE6864DE7531E4 -- C:\$WINDOWS.~BT\NewOS\Windows\System32\DriverStore\FileRepository\iastorv.inf_amd64_9c09bd1df352f065\iaStorV.sys
[2018/04/12 01:33:49 | 000,412,064 | ---- | M] (Intel Corporation) MD5=11AC0355FE52CC8813EE6864DE7531E4 -- C:\$WINDOWS.~BT\NewOS\Windows\WinSxS\amd64_dual_iastorv.inf_31bf3856ad364e35_10.0.17134.1_none_0c282eae9355a9c4\iaStorV.sys
[2018/04/11 07:56:29 | 000,412,064 | ---- | M] (Intel Corporation) MD5=11AC0355FE52CC8813EE6864DE7531E4 -- C:\Windows\SoftwareDistribution\Download\248aee40972828407d8f7cd0ecfd59e6\amd64_Microsoft-Windows-EditionPack-Core-Package~~AMD64~~10.0.17134.1\amd64_dual_iastorv.inf_31bf3856ad364e35_10.0.17134.1_none_0c282eae9355a9c4\iastorv.sys
[2017/09/29 15:41:03 | 000,412,056 | ---- | M] (Intel Corporation) MD5=7118E4390C4ACDE61E280CE52BCAF44E -- C:\WINDOWS\SysNative\drivers\iaStorV.sys
[2017/09/29 15:41:03 | 000,412,056 | ---- | M] (Intel Corporation) MD5=7118E4390C4ACDE61E280CE52BCAF44E -- C:\WINDOWS\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_9c09bd1df352f065\iaStorV.sys
[2017/09/29 15:41:03 | 000,412,056 | ---- | M] (Intel Corporation) MD5=7118E4390C4ACDE61E280CE52BCAF44E -- C:\Windows\WinSxS\amd64_iastorv.inf_31bf3856ad364e35_10.0.16299.15_none_d1fd7e6af8ec6db9\iaStorV.sys

[color=#A23BEC]< MD5 for: INTELIDE.SYS >[/color]
[2017/09/29 15:41:03 | 000,019,352 | ---- | M] (Microsoft Corporation) MD5=40943C1CD031ACE06A8374AD56B9E5EA -- C:\WINDOWS\SysNative\drivers\intelide.sys
[2017/09/29 15:41:03 | 000,019,352 | ---- | M] (Microsoft Corporation) MD5=40943C1CD031ACE06A8374AD56B9E5EA -- C:\WINDOWS\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_d0125efb9153d084\intelide.sys
[2017/09/29 15:41:03 | 000,019,352 | ---- | M] (Microsoft Corporation) MD5=40943C1CD031ACE06A8374AD56B9E5EA -- C:\Windows\WinSxS\amd64_mshdc.inf_31bf3856ad364e35_10.0.16299.251_none_eab613538c5db104\intelide.sys
[2017/12/14 03:56:05 | 000,000,012 | ---- | M] () MD5=9BB7486452CE8DEAAA9E3BD67DB4F35C -- C:\Windows\WinSxS\amd64_mshdc.inf_31bf3856ad364e35_10.0.16299.15_none_0024540c92ae41c6\intelide.sys
[2018/05/06 18:21:55 | 000,000,012 | ---- | M] () MD5=EE363E744D3889221B2BD4F6F30843FD -- C:\Windows\WinSxS\amd64_mshdc.inf_31bf3856ad364e35_10.0.16299.98_none_0003f37892c67ed1\intelide.sys
[2018/04/12 01:33:49 | 000,019,360 | ---- | M] (Microsoft Corporation) MD5=F1B552F7ACDF6E3E4DDDB76118CAFDE3 -- C:\$WINDOWS.~BT\NewOS\Windows\System32\drivers\intelide.sys
[2018/04/12 01:33:49 | 000,019,360 | ---- | M] (Microsoft Corporation) MD5=F1B552F7ACDF6E3E4DDDB76118CAFDE3 -- C:\$WINDOWS.~BT\NewOS\Windows\System32\DriverStore\FileRepository\mshdc.inf_amd64_662ca788abd83e42\intelide.sys
[2018/04/12 01:33:49 | 000,019,360 | ---- | M] (Microsoft Corporation) MD5=F1B552F7ACDF6E3E4DDDB76118CAFDE3 -- C:\$WINDOWS.~BT\NewOS\Windows\WinSxS\amd64_dual_mshdc.inf_31bf3856ad364e35_10.0.17134.1_none_00f83e1b38aa06a9\intelide.sys
[2018/04/11 06:36:15 | 000,019,360 | ---- | M] (Microsoft Corporation) MD5=F1B552F7ACDF6E3E4DDDB76118CAFDE3 -- C:\Windows\SoftwareDistribution\Download\248aee40972828407d8f7cd0ecfd59e6\amd64_Microsoft-Windows-EditionPack-Core-Package~~AMD64~~10.0.17134.1\amd64_dual_mshdc.inf_31bf3856ad364e35_10.0.17134.1_none_00f83e1b38aa06a9\intelide.sys

[color=#A23BEC]< MD5 for: MOUNTMGR.SYS >[/color]
[2018/05/06 17:57:56 | 000,002,850 | ---- | M] () MD5=28266C70ADFB666CD4F258829A643DFE -- C:\Windows\WinSxS\amd64_microsoft-windows-m..pointmanager-minwin_31bf3856ad364e35_10.0.16299.15_none_f347bcad3e668ac1\mountmgr.sys
[2018/04/12 01:34:22 | 000,104,352 | ---- | M] (Microsoft Corporation) MD5=2CFB54C638F75E39FBB22723401A8A56 -- C:\$WINDOWS.~BT\NewOS\Windows\System32\drivers\mountmgr.sys
[2018/04/12 01:34:22 | 000,104,352 | ---- | M] (Microsoft Corporation) MD5=2CFB54C638F75E39FBB22723401A8A56 -- C:\$WINDOWS.~BT\NewOS\Windows\WinSxS\amd64_microsoft-windows-m..pointmanager-minwin_31bf3856ad364e35_10.0.17134.1_none_b5dc1d12366c7d81\mountmgr.sys
[2018/04/11 06:37:33 | 000,104,352 | ---- | M] (Microsoft Corporation) MD5=2CFB54C638F75E39FBB22723401A8A56 -- C:\Windows\SoftwareDistribution\Download\248aee40972828407d8f7cd0ecfd59e6\amd64_Microsoft-Windows-Client-Features-Package~~AMD64~~10.0.17134.1\amd64_microsoft-windows-m..pointmanager-minwin_31bf3856ad364e35_10.0.17134.1_none_b5dc1d12366c7d81\mountmgr.sys
[2018/03/30 07:00:10 | 000,103,320 | ---- | M] (Microsoft Corporation) MD5=8209AC7D3F8AF41E3A14D022CD1F2040 -- C:\Windows\CbsTemp\30662645_3366007289\amd64_microsoft-windows-m..pointmanager-minwin_31bf3856ad364e35_10.0.16299.371_none_ddc3de0238262f08\mountmgr.sys
[2018/03/30 07:00:10 | 000,103,320 | ---- | M] (Microsoft Corporation) MD5=8209AC7D3F8AF41E3A14D022CD1F2040 -- C:\WINDOWS\SysNative\drivers\mountmgr.sys
[2018/03/30 07:00:10 | 000,103,320 | ---- | M] (Microsoft Corporation) MD5=8209AC7D3F8AF41E3A14D022CD1F2040 -- C:\Windows\WinSxS\amd64_microsoft-windows-m..pointmanager-minwin_31bf3856ad364e35_10.0.16299.371_none_ddc3de0238262f08\mountmgr.sys

[color=#A23BEC]< MD5 for: MRXSMB.SYS >[/color]
[2018/05/06 18:16:51 | 000,023,224 | ---- | M] () MD5=24EEE6F364F86A708B452500B70932C7 -- C:\Windows\WinSxS\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_10.0.16299.98_none_a25d3893c25a1f58\mrxsmb.sys
[2018/04/12 01:34:24 | 000,500,632 | ---- | M] (Microsoft Corporation) MD5=3C0FA2ED75875481D00F3D77B1A3E336 -- C:\$WINDOWS.~BT\NewOS\Windows\System32\drivers\mrxsmb.sys
[2018/04/12 01:34:24 | 000,500,632 | ---- | M] (Microsoft Corporation) MD5=3C0FA2ED75875481D00F3D77B1A3E336 -- C:\$WINDOWS.~BT\NewOS\Windows\WinSxS\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_10.0.17134.1_none_6511f98cba47d50d\mrxsmb.sys
[2018/04/11 06:41:11 | 000,500,632 | ---- | M] (Microsoft Corporation) MD5=3C0FA2ED75875481D00F3D77B1A3E336 -- C:\Windows\SoftwareDistribution\Download\248aee40972828407d8f7cd0ecfd59e6\amd64_Microsoft-Windows-Client-Features-Package~~AMD64~~10.0.17134.1\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_10.0.17134.1_none_6511f98cba47d50d\mrxsmb.sys
[2017/12/14 03:54:06 | 000,043,131 | ---- | M] () MD5=6FB30A358576C4326522888C4E26FC4C -- C:\Windows\WinSxS\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_10.0.16299.15_none_a27d9927c241e24d\mrxsmb.sys
[2018/02/10 08:06:33 | 000,494,488 | ---- | M] (Microsoft Corporation) MD5=71729B1EE949E1B092CB5CB75CC63715 -- C:\Windows\CbsTemp\30662645_3366007289\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_10.0.16299.248_none_8d212a60bbe2e6fb\mrxsmb.sys
[2018/02/10 08:06:33 | 000,494,488 | ---- | M] (Microsoft Corporation) MD5=71729B1EE949E1B092CB5CB75CC63715 -- C:\WINDOWS\SysNative\drivers\mrxsmb.sys
[2018/02/10 08:06:33 | 000,494,488 | ---- | M] (Microsoft Corporation) MD5=71729B1EE949E1B092CB5CB75CC63715 -- C:\Windows\WinSxS\amd64_microsoft-windows-smbminirdr_31bf3856ad364e35_10.0.16299.248_none_8d212a60bbe2e6fb\mrxsmb.sys

[color=#A23BEC]< MD5 for: MRXSMB10.SYS >[/color]
[2017/12/14 03:39:15 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=6537678DEEA2A5B079052D75E21E46DA -- C:\Windows\WinSxS\amd64_microsoft-windows-smb10-minirdr_31bf3856ad364e35_10.0.16299.19_none_ab6577cbbcb39073\mrxsmb10.sys
[2018/04/12 18:23:17 | 000,287,232 | ---- | M] (Microsoft Corporation) MD5=7A6A9916C19A21B34D20F0CC05EED433 -- C:\$WINDOWS.~BT\NewOS\Windows\System32\drivers\mrxsmb10.sys
[2018/04/12 18:23:17 | 000,287,232 | ---- | M] (Microsoft Corporation) MD5=7A6A9916C19A21B34D20F0CC05EED433 -- C:\$WINDOWS.~BT\NewOS\Windows\WinSxS\amd64_microsoft-windows-smb10-minirdr_31bf3856ad364e35_10.0.17134.1_none_6e2517e0b499136f\mrxsmb10.sys
[2018/04/11 06:07:32 | 000,287,232 | ---- | M] (Microsoft Corporation) MD5=7A6A9916C19A21B34D20F0CC05EED433 -- C:\Windows\SoftwareDistribution\Download\248aee40972828407d8f7cd0ecfd59e6\amd64_Microsoft-Windows-EditionPack-Core-Package~~AMD64~~10.0.17134.1\amd64_microsoft-windows-smb10-minirdr_31bf3856ad364e35_10.0.17134.1_none_6e2517e0b499136f\mrxsmb10.sys
[2017/12/14 03:54:05 | 000,013,146 | ---- | M] () MD5=8AAB9BB84B872C69ADE546AC7E520792 -- C:\Windows\WinSxS\amd64_microsoft-windows-smb10-minirdr_31bf3856ad364e35_10.0.16299.15_none_ab90b77bbc9320af\mrxsmb10.sys

[color=#A23BEC]< MD5 for: MRXSMB20.SYS >[/color]
[2018/04/12 01:34:24 | 000,226,208 | ---- | M] (Microsoft Corporation) MD5=42FE3D84EFE835443151DC2A50D05643 -- C:\$WINDOWS.~BT\NewOS\Windows\System32\drivers\mrxsmb20.sys
[2018/04/12 01:34:24 | 000,226,208 | ---- | M] (Microsoft Corporation) MD5=42FE3D84EFE835443151DC2A50D05643 -- C:\$WINDOWS.~BT\NewOS\Windows\WinSxS\amd64_microsoft-windows-smb20-minirdr_31bf3856ad364e35_10.0.17134.1_none_705b81f2f2f046e0\mrxsmb20.sys
[2018/04/11 06:40:06 | 000,226,208 | ---- | M] (Microsoft Corporation) MD5=42FE3D84EFE835443151DC2A50D05643 -- C:\Windows\SoftwareDistribution\Download\248aee40972828407d8f7cd0ecfd59e6\amd64_Microsoft-Windows-Client-Features-Package~~AMD64~~10.0.17134.1\amd64_microsoft-windows-smb20-minirdr_31bf3856ad364e35_10.0.17134.1_none_705b81f2f2f046e0\mrxsmb20.sys
[2017/12/14 03:54:05 | 000,028,440 | ---- | M] () MD5=80DFFB53388D088ABB792E58C78AD272 -- C:\Windows\WinSxS\amd64_microsoft-windows-smb20-minirdr_31bf3856ad364e35_10.0.16299.15_none_adc7218dfaea5420\mrxsmb20.sys
[2018/05/13 22:38:37 | 000,003,014 | ---- | M] () MD5=D2116F4DA070235E2A797C3D11C97152 -- C:\Windows\WinSxS\amd64_microsoft-windows-smb20-minirdr_31bf3856ad364e35_10.0.16299.98_none_ada6c0f9fb02912b\mrxsmb20.sys
[2018/04/15 23:34:17 | 000,230,304 | ---- | M] (Microsoft Corporation) MD5=EC70CED325D4DF908F265A9526016254 -- C:\WINDOWS\SysNative\drivers\mrxsmb20.sys
[2018/04/15 23:34:17 | 000,230,304 | ---- | M] (Microsoft Corporation) MD5=EC70CED325D4DF908F265A9526016254 -- C:\Windows\WinSxS\amd64_microsoft-windows-smb20-minirdr_31bf3856ad364e35_10.0.16299.402_none_988ff486f4704b4e\mrxsmb20.sys

[color=#A23BEC]< MD5 for: NDIS.SYS >[/color]
[2018/03/30 07:03:41 | 001,277,856 | ---- | M] (Microsoft Corporation) MD5=25D126EFFEC0B117DA4C81F7AE6C99FC -- C:\Windows\CbsTemp\30662645_3366007289\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_10.0.16299.371_none_66bdcb7c92f0232e\ndis.sys
[2018/03/30 07:03:41 | 001,277,856 | ---- | M] (Microsoft Corporation) MD5=25D126EFFEC0B117DA4C81F7AE6C99FC -- C:\WINDOWS\SysNative\drivers\ndis.sys
[2018/03/30 07:03:41 | 001,277,856 | ---- | M] (Microsoft Corporation) MD5=25D126EFFEC0B117DA4C81F7AE6C99FC -- C:\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_10.0.16299.371_none_66bdcb7c92f0232e\ndis.sys
[2018/04/12 01:34:22 | 001,285,536 | ---- | M] (Microsoft Corporation) MD5=5269DDC879DF5FEA2B7DB91AA4726CCA -- C:\$WINDOWS.~BT\NewOS\Windows\System32\drivers\ndis.sys
[2018/04/12 01:34:22 | 001,285,536 | ---- | M] (Microsoft Corporation) MD5=5269DDC879DF5FEA2B7DB91AA4726CCA -- C:\$WINDOWS.~BT\NewOS\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_10.0.17134.1_none_3ed60a8c913671a7\ndis.sys
[2018/04/11 06:39:49 | 001,285,536 | ---- | M] (Microsoft Corporation) MD5=5269DDC879DF5FEA2B7DB91AA4726CCA -- C:\Windows\SoftwareDistribution\Download\248aee40972828407d8f7cd0ecfd59e6\amd64_Microsoft-Windows-Client-Features-Package~~AMD64~~10.0.17134.1\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_10.0.17134.1_none_3ed60a8c913671a7\ndis.sys
[2017/12/14 03:51:49 | 000,074,613 | ---- | M] () MD5=61CCE23473535C7E76908066D4D2A69D -- C:\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_10.0.16299.15_none_7c41aa2799307ee7\ndis.sys
[2018/05/06 18:09:55 | 000,003,366 | ---- | M] () MD5=C8F9FA395157F2158CCA6478554E8775 -- C:\Windows\WinSxS\amd64_microsoft-windows-ndis-minwin_31bf3856ad364e35_10.0.16299.98_none_7c2149939948bbf2\ndis.sys

[color=#A23BEC]< MD5 for: NETLOGON.DLL >[/color]
[2018/05/06 18:40:41 | 000,023,041 | ---- | M] () MD5=0CCCC243F91A14CC640CBE4A81C65A9E -- C:\Windows\WinSxS\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_10.0.16299.15_none_2af88d87dd7f1d7c\netlogon.dll
[2018/04/12 01:34:51 | 000,659,456 | ---- | M] (Microsoft Corporation) MD5=399E95704B7850F1B7BB5D5D42DB0505 -- C:\$WINDOWS.~BT\NewOS\Windows\SysWOW64\netlogon.dll
[2018/04/12 01:34:51 | 000,659,456 | ---- | M] (Microsoft Corporation) MD5=399E95704B7850F1B7BB5D5D42DB0505 -- C:\$WINDOWS.~BT\NewOS\Windows\WinSxS\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_10.0.17134.1_none_ed8cedecd585103c\netlogon.dll
[2018/04/11 06:08:03 | 000,659,456 | ---- | M] (Microsoft Corporation) MD5=399E95704B7850F1B7BB5D5D42DB0505 -- C:\Windows\SoftwareDistribution\Download\248aee40972828407d8f7cd0ecfd59e6\amd64_Microsoft-Windows-Client-Features-WOW64-Package~~AMD64~~10.0.17134.1\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_10.0.17134.1_none_ed8cedecd585103c\netlogon.dll
[2018/04/15 22:07:25 | 000,658,432 | ---- | M] (Microsoft Corporation) MD5=453191DC1804BEA45BEB335D2675A03E -- C:\Windows\SysWOW64\netlogon.dll
[2018/04/15 22:07:25 | 000,658,432 | ---- | M] (Microsoft Corporation) MD5=453191DC1804BEA45BEB335D2675A03E -- C:\Windows\WinSxS\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_10.0.16299.402_none_15c16080d70514aa\netlogon.dll
[2018/05/13 22:37:24 | 000,037,597 | ---- | M] () MD5=598DB9C1E7DAFFE3238A57A6BCBF9326 -- C:\Windows\WinSxS\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_10.0.16299.248_none_0b47746ea2bf602f\netlogon.dll
[2018/04/12 01:34:22 | 000,773,632 | ---- | M] (Microsoft Corporation) MD5=5EA9C4AE211AE1EB1D4A375C612E0AC4 -- C:\$WINDOWS.~BT\NewOS\Windows\System32\netlogon.dll
[2018/04/12 01:34:22 | 000,773,632 | ---- | M] (Microsoft Corporation) MD5=5EA9C4AE211AE1EB1D4A375C612E0AC4 -- C:\$WINDOWS.~BT\NewOS\Windows\WinSxS\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_10.0.17134.1_none_e338439aa1244e41\netlogon.dll
[2018/04/11 06:04:30 | 000,773,632 | ---- | M] (Microsoft Corporation) MD5=5EA9C4AE211AE1EB1D4A375C612E0AC4 -- C:\Windows\SoftwareDistribution\Download\248aee40972828407d8f7cd0ecfd59e6\amd64_Microsoft-Windows-Client-Features-Package~~AMD64~~10.0.17134.1\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_10.0.17134.1_none_e338439aa1244e41\netlogon.dll
[2018/04/15 22:06:33 | 000,820,224 | ---- | M] (Microsoft Corporation) MD5=7DBEADC144F91284718ADE81820398B0 -- C:\WINDOWS\SysNative\netlogon.dll
[2018/04/15 22:06:33 | 000,820,224 | ---- | M] (Microsoft Corporation) MD5=7DBEADC144F91284718ADE81820398B0 -- C:\Windows\WinSxS\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_10.0.16299.402_none_0b6cb62ea2a452af\netlogon.dll
[2018/05/13 22:52:06 | 000,014,319 | ---- | M] () MD5=CF7230EF1EB88809574D59DF0D08A02C -- C:\Windows\WinSxS\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_10.0.16299.248_none_159c1ec0d720222a\netlogon.dll
[2018/05/06 18:14:43 | 000,018,261 | ---- | M] () MD5=F95962B1F51012CE2EB74154BEC9CA66 -- C:\Windows\WinSxS\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_10.0.16299.15_none_20a3e335a91e5b81\netlogon.dll

[color=#A23BEC]< MD5 for: NVSTOR.SYS >[/color]
[2017/09/29 15:41:02 | 000,166,296 | ---- | M] (NVIDIA Corporation) MD5=880B3E874914DAEF97119876543AE117 -- C:\WINDOWS\SysNative\drivers\nvstor.sys
[2017/09/29 15:41:02 | 000,166,296 | ---- | M] (NVIDIA Corporation) MD5=880B3E874914DAEF97119876543AE117 -- C:\WINDOWS\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_144351277838b429\nvstor.sys
[2017/09/29 15:41:02 | 000,166,296 | ---- | M] (NVIDIA Corporation) MD5=880B3E874914DAEF97119876543AE117 -- C:\Windows\WinSxS\amd64_nvraid.inf_31bf3856ad364e35_10.0.16299.15_none_5cc6ef1a30231791\nvstor.sys
[2018/04/12 01:33:48 | 000,166,304 | ---- | M] (NVIDIA Corporation) MD5=D6C14906B78F235461EEF96A886830D4 -- C:\$WINDOWS.~BT\NewOS\Windows\System32\drivers\nvstor.sys
[2018/04/12 01:33:48 | 000,166,304 | ---- | M] (NVIDIA Corporation) MD5=D6C14906B78F235461EEF96A886830D4 -- C:\$WINDOWS.~BT\NewOS\Windows\System32\DriverStore\FileRepository\nvraid.inf_amd64_144351277838b429\nvstor.sys
[2018/04/12 01:33:48 | 000,166,304 | ---- | M] (NVIDIA Corporation) MD5=D6C14906B78F235461EEF96A886830D4 -- C:\$WINDOWS.~BT\NewOS\Windows\WinSxS\amd64_dual_nvraid.inf_31bf3856ad364e35_10.0.17134.1_none_e1b603aa37da97d4\nvstor.sys
[2018/04/11 16:02:03 | 000,166,304 | ---- | M] (NVIDIA Corporation) MD5=D6C14906B78F235461EEF96A886830D4 -- C:\Windows\SoftwareDistribution\Download\248aee40972828407d8f7cd0ecfd59e6\amd64_Microsoft-Windows-EditionPack-Core-Package~~AMD64~~10.0.17134.1\amd64_dual_nvraid.inf_31bf3856ad364e35_10.0.17134.1_none_e1b603aa37da97d4\nvstor.sys

[color=#A23BEC]< MD5 for: RASACD.SYS >[/color]
[2018/04/12 01:34:33 | 000,017,408 | ---- | M] (Microsoft Corporation) MD5=B834761352403111D0113284D8736025 -- C:\$WINDOWS.~BT\NewOS\Windows\System32\drivers\rasacd.sys
[2018/04/12 01:34:33 | 000,017,408 | ---- | M] (Microsoft Corporation) MD5=B834761352403111D0113284D8736025 -- C:\$WINDOWS.~BT\NewOS\Windows\WinSxS\amd64_microsoft-windows-rasautodial_31bf3856ad364e35_10.0.17134.1_none_f55a8b0dce7d854d\rasacd.sys
[2018/04/11 15:48:43 | 000,017,408 | ---- | M] (Microsoft Corporation) MD5=B834761352403111D0113284D8736025 -- C:\Windows\SoftwareDistribution\Download\248aee40972828407d8f7cd0ecfd59e6\amd64_Microsoft-Windows-Client-Features-Package~~AMD64~~10.0.17134.1\amd64_microsoft-windows-rasautodial_31bf3856ad364e35_10.0.17134.1_none_f55a8b0dce7d854d\rasacd.sys
[2018/03/30 05:33:52 | 000,017,920 | ---- | M] (Microsoft Corporation) MD5=BD6EF1748DC3DBACEC97B87B6252AAC7 -- C:\WINDOWS\SysNative\drivers\rasacd.sys
[2018/03/30 05:33:52 | 000,017,920 | ---- | M] (Microsoft Corporation) MD5=BD6EF1748DC3DBACEC97B87B6252AAC7 -- C:\Windows\WinSxS\amd64_microsoft-windows-rasautodial_31bf3856ad364e35_10.0.16299.371_none_1d424bfdd03736d4\rasacd.sys
[2018/05/06 18:11:46 | 000,000,266 | ---- | M] () MD5=C87F82DA4DE2100ADFFC26CB13314F3B -- C:\Windows\WinSxS\amd64_microsoft-windows-rasautodial_31bf3856ad364e35_10.0.16299.15_none_32c62aa8d677928d\rasacd.sys

[color=#A23BEC]< MD5 for: SCECLI.DLL >[/color]
[2017/09/29 15:42:24 | 000,209,920 | ---- | M] (Microsoft Corporation) MD5=33920AB4B3FA9A5E3FA42E5F1C7B08B9 -- C:\Windows\SysWOW64\scecli.dll
[2017/09/29 15:42:24 | 000,209,920 | ---- | M] (Microsoft Corporation) MD5=33920AB4B3FA9A5E3FA42E5F1C7B08B9 -- C:\Windows\WinSxS\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_10.0.16299.15_none_654eb8a07ea0a437\scecli.dll
[2018/04/12 01:34:59 | 000,214,528 | ---- | M] (Microsoft Corporation) MD5=34CF7893D97CE447F642CF59995AA407 -- C:\$WINDOWS.~BT\NewOS\Windows\SysWOW64\scecli.dll
[2018/04/12 01:34:59 | 000,214,528 | ---- | M] (Microsoft Corporation) MD5=34CF7893D97CE447F642CF59995AA407 -- C:\$WINDOWS.~BT\NewOS\Windows\WinSxS\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_10.0.17134.1_none_27e3190576a696f7\scecli.dll
[2018/04/11 06:10:13 | 000,214,528 | ---- | M] (Microsoft Corporation) MD5=34CF7893D97CE447F642CF59995AA407 -- C:\Windows\SoftwareDistribution\Download\248aee40972828407d8f7cd0ecfd59e6\amd64_Microsoft-Windows-Client-Features-WOW64-Package~~AMD64~~10.0.17134.1\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_10.0.17134.1_none_27e3190576a696f7\scecli.dll
[2018/04/12 01:34:33 | 000,275,456 | ---- | M] (Microsoft Corporation) MD5=85C7E6554469AE7E185DEB3E56225D3E -- C:\$WINDOWS.~BT\NewOS\Windows\System32\scecli.dll
[2018/04/12 01:34:33 | 000,275,456 | ---- | M] (Microsoft Corporation) MD5=85C7E6554469AE7E185DEB3E56225D3E -- C:\$WINDOWS.~BT\NewOS\Windows\WinSxS\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_10.0.17134.1_none_1d8e6eb34245d4fc\scecli.dll
[2018/04/11 06:06:33 | 000,275,456 | ---- | M] (Microsoft Corporation) MD5=85C7E6554469AE7E185DEB3E56225D3E -- C:\Windows\SoftwareDistribution\Download\248aee40972828407d8f7cd0ecfd59e6\amd64_Microsoft-Windows-Client-Features-Package~~AMD64~~10.0.17134.1\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_10.0.17134.1_none_1d8e6eb34245d4fc\scecli.dll
[2017/09/29 15:41:58 | 000,271,360 | ---- | M] (Microsoft Corporation) MD5=93F305EE25C3A8DA5796C4FCEA107B1B -- C:\WINDOWS\SysNative\scecli.dll
[2017/09/29 15:41:58 | 000,271,360 | ---- | M] (Microsoft Corporation) MD5=93F305EE25C3A8DA5796C4FCEA107B1B -- C:\Windows\WinSxS\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_10.0.16299.15_none_5afa0e4e4a3fe23c\scecli.dll

[color=#A23BEC]< MD5 for: SERVICES.EXE >[/color]
[2018/01/01 14:25:26 | 000,615,768 | ---- | M] (Microsoft Corporation) MD5=AB75687641C9ADBE22336EC3C496909C -- C:\WINDOWS\SysNative\services.exe
[2018/01/01 14:25:26 | 000,615,768 | ---- | M] (Microsoft Corporation) MD5=AB75687641C9ADBE22336EC3C496909C -- C:\Windows\WinSxS\amd64_microsoft-windows-s..cecontroller-minwin_31bf3856ad364e35_10.0.16299.192_none_4c6c6f5c6796add1\services.exe
[2017/12/14 03:52:37 | 000,070,721 | ---- | M] () MD5=D37B64722A3003BC6156E756C2E733C5 -- C:\Windows\WinSxS\amd64_microsoft-windows-s..cecontroller-minwin_31bf3856ad364e35_10.0.16299.15_none_6204f1616dc7b29f\services.exe
[2018/04/12 01:34:22 | 000,636,944 | ---- | M] (Microsoft Corporation) MD5=E2F4C75AFA20E742DE1B70372F15DCD7 -- C:\$WINDOWS.~BT\NewOS\Windows\System32\services.exe
[2018/04/12 01:34:22 | 000,636,944 | ---- | M] (Microsoft Corporation) MD5=E2F4C75AFA20E742DE1B70372F15DCD7 -- C:\$WINDOWS.~BT\NewOS\Windows\WinSxS\amd64_microsoft-windows-s..cecontroller-minwin_31bf3856ad364e35_10.0.17134.1_none_249951c665cda55f\services.exe
[2018/04/11 06:40:04 | 000,636,944 | ---- | M] (Microsoft Corporation) MD5=E2F4C75AFA20E742DE1B70372F15DCD7 -- C:\Windows\SoftwareDistribution\Download\248aee40972828407d8f7cd0ecfd59e6\amd64_Microsoft-Windows-Client-Features-Package~~AMD64~~10.0.17134.1\amd64_microsoft-windows-s..cecontroller-minwin_31bf3856ad364e35_10.0.17134.1_none_249951c665cda55f\services.exe
[2018/05/06 18:12:40 | 000,079,476 | ---- | M] () MD5=E6C1D8DE417742BF202C5C4F6DFD7A59 -- C:\Windows\WinSxS\amd64_microsoft-windows-s..cecontroller-minwin_31bf3856ad364e35_10.0.16299.98_none_61e490cd6ddfefaa\services.exe

[color=#A23BEC]< MD5 for: SMSS.EXE >[/color]
[2018/04/12 01:34:22 | 000,144,168 | ---- | M] (Microsoft Corporation) MD5=C2C989B9EC32183A7BAF5C0D59A57042 -- C:\$WINDOWS.~BT\NewOS\Windows\System32\smss.exe
[2018/04/12 01:34:22 | 000,144,168 | ---- | M] (Microsoft Corporation) MD5=C2C989B9EC32183A7BAF5C0D59A57042 -- C:\$WINDOWS.~BT\NewOS\Windows\WinSxS\amd64_microsoft-windows-smss-minwin_31bf3856ad364e35_10.0.17134.1_none_63e1629a51f5d349\smss.exe
[2018/04/11 06:37:04 | 000,144,168 | ---- | M] (Microsoft Corporation) MD5=C2C989B9EC32183A7BAF5C0D59A57042 -- C:\Windows\SoftwareDistribution\Download\248aee40972828407d8f7cd0ecfd59e6\amd64_Microsoft-Windows-Client-Features-Package~~AMD64~~10.0.17134.1\amd64_microsoft-windows-smss-minwin_31bf3856ad364e35_10.0.17134.1_none_63e1629a51f5d349\smss.exe
[2017/09/29 15:41:43 | 000,143,664 | ---- | M] (Microsoft Corporation) MD5=F3DC4781C85BF8CB5716D5086511802B -- C:\WINDOWS\SysNative\smss.exe
[2017/09/29 15:41:43 | 000,143,664 | ---- | M] (Microsoft Corporation) MD5=F3DC4781C85BF8CB5716D5086511802B -- C:\Windows\WinSxS\amd64_microsoft-windows-smss-minwin_31bf3856ad364e35_10.0.16299.15_none_a14d023559efe089\smss.exe

[color=#A23BEC]< MD5 for: SPOOLSV.EXE >[/color]
[2018/03/30 05:26:11 | 000,765,952 | ---- | M] (Microsoft Corporation) MD5=153F12DE99760ACC89F53848DED45679 -- C:\Windows\CbsTemp\30662645_3366007289\amd64_microsoft-windows-printing-spooler-core_31bf3856ad364e35_10.0.16299.371_none_e3b3f0692c6cdc87\spoolsv.exe
[2018/03/30 05:26:11 | 000,765,952 | ---- | M] (Microsoft Corporation) MD5=153F12DE99760ACC89F53848DED45679 -- C:\WINDOWS\SysNative\spoolsv.exe
[2018/03/30 05:26:11 | 000,765,952 | ---- | M] (Microsoft Corporation) MD5=153F12DE99760ACC89F53848DED45679 -- C:\Windows\WinSxS\amd64_microsoft-windows-printing-spooler-core_31bf3856ad364e35_10.0.16299.371_none_e3b3f0692c6cdc87\spoolsv.exe
[2018/05/06 18:11:22 | 000,071,527 | ---- | M] () MD5=23930572DB8AB6A50F97FF56B5B0EEC6 -- C:\Windows\WinSxS\amd64_microsoft-windows-printing-spooler-core_31bf3856ad364e35_10.0.16299.15_none_f937cf1432ad3840\spoolsv.exe
[2018/04/12 01:34:41 | 000,768,512 | ---- | M] (Microsoft Corporation) MD5=C05A19A38D7D203B738771FD1854656F -- C:\$WINDOWS.~BT\NewOS\Windows\System32\spoolsv.exe
[2018/04/12 01:34:41 | 000,768,512 | ---- | M] (Microsoft Corporation) MD5=C05A19A38D7D203B738771FD1854656F -- C:\$WINDOWS.~BT\NewOS\Windows\WinSxS\amd64_microsoft-windows-printing-spooler-core_31bf3856ad364e35_10.0.17134.1_none_bbcc2f792ab32b00\spoolsv.exe
[2018/04/11 15:40:34 | 000,768,512 | ---- | M] (Microsoft Corporation) MD5=C05A19A38D7D203B738771FD1854656F -- C:\Windows\SoftwareDistribution\Download\248aee40972828407d8f7cd0ecfd59e6\amd64_Microsoft-Windows-Client-Features-Package~~AMD64~~10.0.17134.1\amd64_microsoft-windows-printing-spooler-core_31bf3856ad364e35_10.0.17134.1_none_bbcc2f792ab32b00\spoolsv.exe

[color=#A23BEC]< MD5 for: STORPORT.SYS >[/color]
[2018/05/06 18:17:21 | 000,020,608 | ---- | M] () MD5=391E146D39AE0B023EA3F465EFFECC5A -- C:\Windows\WinSxS\amd64_microsoft-windows-storport_31bf3856ad364e35_10.0.16299.64_none_4a735405a14b2ecf\storport.sys
[2018/01/01 14:41:24 | 000,559,512 | ---- | M] (Microsoft Corporation) MD5=7030B8CD2760FA3163D8D6C9EFA8940B -- C:\WINDOWS\SysNative\drivers\storport.sys
[2018/01/01 14:41:24 | 000,559,512 | ---- | M] (Microsoft Corporation) MD5=7030B8CD2760FA3163D8D6C9EFA8940B -- C:\Windows\WinSxS\amd64_microsoft-windows-storport_31bf3856ad364e35_10.0.16299.192_none_34cff8969b22542f\storport.sys
[2018/04/12 01:33:54 | 000,562,080 | ---- | M] (Microsoft Corporation) MD5=CB6399B4DC36E72E98F9D7CA3A0325DF -- C:\$WINDOWS.~BT\NewOS\Windows\System32\drivers\storport.sys
[2018/04/12 01:33:54 | 000,562,080 | ---- | M] (Microsoft Corporation) MD5=CB6399B4DC36E72E98F9D7CA3A0325DF -- C:\$WINDOWS.~BT\NewOS\Windows\WinSxS\amd64_microsoft-windows-storport_31bf3856ad364e35_10.0.17134.1_none_0cfcdb0099594bbd\storport.sys
[2018/04/11 06:39:46 | 000,562,080 | ---- | M] (Microsoft Corporation) MD5=CB6399B4DC36E72E98F9D7CA3A0325DF -- C:\Windows\SoftwareDistribution\Download\248aee40972828407d8f7cd0ecfd59e6\amd64_Microsoft-Windows-EditionPack-Core-Package~~AMD64~~10.0.17134.1\amd64_microsoft-windows-storport_31bf3856ad364e35_10.0.17134.1_none_0cfcdb0099594bbd\storport.sys
[2017/12/14 03:54:36 | 000,033,171 | ---- | M] () MD5=F30E79EFE4B8E0CEE2AD305597A0480F -- C:\Windows\WinSxS\amd64_microsoft-windows-storport_31bf3856ad364e35_10.0.16299.15_none_4a687a9ba15358fd\storport.sys

[color=#A23BEC]< MD5 for: SVCHOST.EXE >[/color]
[2017/09/29 15:42:14 | 000,044,520 | ---- | M] (Microsoft Corporation) MD5=15556928CB0E9F74F4036411D8CC111E -- C:\Windows\SysWOW64\svchost.exe
[2017/09/29 15:42:14 | 000,044,520 | ---- | M] (Microsoft Corporation) MD5=15556928CB0E9F74F4036411D8CC111E -- C:\Windows\WinSxS\wow64_microsoft-windows-services-svchost_31bf3856ad364e35_10.0.16299.15_none_e2fc2fe5aad2f30a\svchost.exe
[2018/04/12 01:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) MD5=32569E403279B3FD2EDB7EBD036273FA -- C:\$WINDOWS.~BT\NewOS\Windows\System32\svchost.exe
[2018/04/12 01:34:22 | 000,051,288 | ---- | M] (Microsoft Corporation) MD5=32569E403279B3FD2EDB7EBD036273FA -- C:\$WINDOWS.~BT\NewOS\Windows\WinSxS\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_10.0.17134.1_none_9b3be5f86e7823cf\svchost.exe
[2018/04/11 06:38:08 | 000,051,288 | ---- | M] (Microsoft Corporation) MD5=32569E403279B3FD2EDB7EBD036273FA -- C:\Windows\SoftwareDistribution\Download\248aee40972828407d8f7cd0ecfd59e6\amd64_Microsoft-Windows-Client-Features-Package~~AMD64~~10.0.17134.1\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_10.0.17134.1_none_9b3be5f86e7823cf\svchost.exe
[2017/09/29 15:41:43 | 000,048,688 | ---- | M] (Microsoft Corporation) MD5=440684C4F823AAE2CC587363F9C477A6 -- C:\WINDOWS\SysNative\svchost.exe
[2017/09/29 15:41:43 | 000,048,688 | ---- | M] (Microsoft Corporation) MD5=440684C4F823AAE2CC587363F9C477A6 -- C:\Windows\WinSxS\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_10.0.16299.15_none_d8a785937672310f\svchost.exe
[2018/04/12 01:34:51 | 000,044,520 | ---- | M] (Microsoft Corporation) MD5=FA6C268A5B5BDA067A901764D203D433 -- C:\$WINDOWS.~BT\NewOS\Windows\SysWOW64\svchost.exe
[2018/04/12 01:34:51 | 000,044,520 | ---- | M] (Microsoft Corporation) MD5=FA6C268A5B5BDA067A901764D203D433 -- C:\$WINDOWS.~BT\NewOS\Windows\WinSxS\wow64_microsoft-windows-services-svchost_31bf3856ad364e35_10.0.17134.1_none_a590904aa2d8e5ca\svchost.exe
[2018/04/11 06:26:00 | 000,044,520 | ---- | M] (Microsoft Corporation) MD5=FA6C268A5B5BDA067A901764D203D433 -- C:\Windows\SoftwareDistribution\Download\248aee40972828407d8f7cd0ecfd59e6\amd64_Microsoft-Windows-Client-Features-WOW64-Package~~AMD64~~10.0.17134.1\wow64_microsoft-windows-services-svchost_31bf3856ad364e35_10.0.17134.1_none_a590904aa2d8e5ca\svchost.exe

[color=#A23BEC]< MD5 for: TCPIP.SYS >[/color]
[2018/05/06 18:17:55 | 000,189,103 | ---- | M] () MD5=2AE0F6E0EDEF43AA4387CEFF93361C2B -- C:\Windows\WinSxS\amd64_microsoft-windows-tcpip-driver_31bf3856ad364e35_10.0.16299.15_none_fae4b1a428530d41\tcpip.sys
[2018/03/13 08:51:14 | 002,773,408 | ---- | M] (Microsoft Corporation) MD5=AE5CA8D3D81DCC76C5FFF1CD60E48606 -- C:\Windows\CbsTemp\30662645_3366007289\amd64_microsoft-windows-tcpip-driver_31bf3856ad364e35_10.0.16299.334_none_e58f138721ef8dc9\tcpip.sys
[2018/03/13 08:51:14 | 002,773,408 | ---- | M] (Microsoft Corporation) MD5=AE5CA8D3D81DCC76C5FFF1CD60E48606 -- C:\WINDOWS\SysNative\drivers\tcpip.sys
[2018/03/13 08:51:14 | 002,773,408 | ---- | M] (Microsoft Corporation) MD5=AE5CA8D3D81DCC76C5FFF1CD60E48606 -- C:\Windows\WinSxS\amd64_microsoft-windows-tcpip-driver_31bf3856ad364e35_10.0.16299.334_none_e58f138721ef8dc9\tcpip.sys
[2018/04/12 01:34:20 | 002,718,104 | ---- | M] (Microsoft Corporation) MD5=BFCBA5F57D278720718B8CB39C50A8EC -- C:\$WINDOWS.~BT\NewOS\Windows\System32\drivers\tcpip.sys
[2018/04/12 01:34:20 | 002,718,104 | ---- | M] (Microsoft Corporation) MD5=BFCBA5F57D278720718B8CB39C50A8EC -- C:\$WINDOWS.~BT\NewOS\Windows\WinSxS\amd64_microsoft-windows-tcpip-driver_31bf3856ad364e35_10.0.17134.1_none_bd79120920590001\tcpip.sys
[2018/04/11 06:41:18 | 002,718,104 | ---- | M] (Microsoft Corporation) MD5=BFCBA5F57D278720718B8CB39C50A8EC -- C:\Windows\SoftwareDistribution\Download\248aee40972828407d8f7cd0ecfd59e6\amd64_Microsoft-Windows-Client-Features-Package~~AMD64~~10.0.17134.1\amd64_microsoft-windows-tcpip-driver_31bf3856ad364e35_10.0.17134.1_none_bd79120920590001\tcpip.sys

[color=#A23BEC]< MD5 for: USERINIT.EXE >[/color]
[2017/09/29 15:42:14 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=5495BEE081B682FADE7B79C331711D2B -- C:\Windows\SysWOW64\userinit.exe
[2017/09/29 15:42:14 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=5495BEE081B682FADE7B79C331711D2B -- C:\Windows\WinSxS\wow64_microsoft-windows-userinit_31bf3856ad364e35_10.0.16299.15_none_0969905a77352d30\userinit.exe
[2017/09/29 15:41:43 | 000,032,256 | ---- | M] (Microsoft Corporation) MD5=755ED4FDBD7D6C3980610E26E527E2F5 -- C:\WINDOWS\SysNative\userinit.exe
[2017/09/29 15:41:43 | 000,032,256 | ---- | M] (Microsoft Corporation) MD5=755ED4FDBD7D6C3980610E26E527E2F5 -- C:\Windows\WinSxS\amd64_microsoft-windows-userinit_31bf3856ad364e35_10.0.16299.15_none_ff14e60842d46b35\userinit.exe
[2018/04/12 01:34:22 | 000,032,256 | ---- | M] (Microsoft Corporation) MD5=7866C803DDD8D626D760A313B6D92F16 -- C:\$WINDOWS.~BT\NewOS\Windows\System32\userinit.exe
[2018/04/12 01:34:22 | 000,032,256 | ---- | M] (Microsoft Corporation) MD5=7866C803DDD8D626D760A313B6D92F16 -- C:\$WINDOWS.~BT\NewOS\Windows\WinSxS\amd64_microsoft-windows-userinit_31bf3856ad364e35_10.0.17134.1_none_c1a9466d3ada5df5\userinit.exe
[2018/04/11 06:07:16 | 000,032,256 | ---- | M] (Microsoft Corporation) MD5=7866C803DDD8D626D760A313B6D92F16 -- C:\Windows\SoftwareDistribution\Download\248aee40972828407d8f7cd0ecfd59e6\amd64_Microsoft-Windows-Client-Features-Package~~AMD64~~10.0.17134.1\amd64_microsoft-windows-userinit_31bf3856ad364e35_10.0.17134.1_none_c1a9466d3ada5df5\userinit.exe
[2018/04/12 01:34:50 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=B01FC72D5368EFED56F253D5A9D4CB60 -- C:\$WINDOWS.~BT\NewOS\Windows\SysWOW64\userinit.exe
[2018/04/12 01:34:50 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=B01FC72D5368EFED56F253D5A9D4CB60 -- C:\$WINDOWS.~BT\NewOS\Windows\WinSxS\wow64_microsoft-windows-userinit_31bf3856ad364e35_10.0.17134.1_none_cbfdf0bf6f3b1ff0\userinit.exe
[2018/04/11 06:10:20 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=B01FC72D5368EFED56F253D5A9D4CB60 -- C:\Windows\SoftwareDistribution\Download\248aee40972828407d8f7cd0ecfd59e6\amd64_Microsoft-Windows-Client-Features-WOW64-Package~~AMD64~~10.0.17134.1\wow64_microsoft-windows-userinit_31bf3856ad364e35_10.0.17134.1_none_cbfdf0bf6f3b1ff0\userinit.exe

[color=#A23BEC]< MD5 for: WIN32K.SYS >[/color]
[2018/05/13 22:40:15 | 000,000,012 | ---- | M] () MD5=05AAD967289953297F8943254F003572 -- C:\Windows\WinSxS\amd64_microsoft-windows-win32k_31bf3856ad364e35_10.0.16299.371_none_c65bc702056ae131\win32k.sys
[2018/05/13 22:54:00 | 000,000,012 | ---- | M] () MD5=05AAD967289953297F8943254F003572 -- C:\Windows\WinSxS\wow64_microsoft-windows-win32k_31bf3856ad364e35_10.0.16299.371_none_d0b0715439cba32c\win32k.sys
[2018/05/06 18:20:55 | 000,000,012 | ---- | M] () MD5=17688FDE0EDD39B773431576D8E6D2B1 -- C:\Windows\WinSxS\amd64_microsoft-windows-win32k_31bf3856ad364e35_10.0.16299.125_none_c695d3fa053ec08a\win32k.sys
[2018/05/06 18:43:27 | 000,000,012 | ---- | M] () MD5=17688FDE0EDD39B773431576D8E6D2B1 -- C:\Windows\WinSxS\wow64_microsoft-windows-win32k_31bf3856ad364e35_10.0.16299.125_none_d0ea7e4c399f8285\win32k.sys
[2017/12/14 03:55:42 | 000,000,012 | ---- | M] () MD5=195B933307987D9C2B4415809BA7F528 -- C:\Windows\WinSxS\amd64_microsoft-windows-win32k_31bf3856ad364e35_10.0.16299.15_none_dbdfa5ad0bab3cea\win32k.sys
[2017/12/14 04:08:51 | 000,000,012 | ---- | M] () MD5=195B933307987D9C2B4415809BA7F528 -- C:\Windows\WinSxS\wow64_microsoft-windows-win32k_31bf3856ad364e35_10.0.16299.15_none_e6344fff400bfee5\win32k.sys
[2017/09/29 15:41:31 | 000,463,360 | ---- | M] (Microsoft Corporation) MD5=1CF7E15D22BCAAD2C63C5D1A5E07780B -- C:\WINDOWS\SysNative\win32k.sys
[2017/09/29 15:41:31 | 000,463,360 | ---- | M] (Microsoft Corporation) MD5=1CF7E15D22BCAAD2C63C5D1A5E07780B -- C:\Windows\WinSxS\amd64_microsoft-windows-win32k_31bf3856ad364e35_10.0.16299.431_none_c6870898054a6e94\win32k.sys
[2018/04/12 01:34:48 | 000,315,904 | ---- | M] (Microsoft Corporation) MD5=63CF7651F7D18828CA184673F1045D0C -- C:\$WINDOWS.~BT\NewOS\Windows\SysWOW64\win32k.sys
[2018/04/12 01:34:48 | 000,315,904 | ---- | M] (Microsoft Corporation) MD5=63CF7651F7D18828CA184673F1045D0C -- C:\$WINDOWS.~BT\NewOS\Windows\WinSxS\wow64_microsoft-windows-win32k_31bf3856ad364e35_10.0.17134.1_none_a8c8b0643811f1a5\win32k.sys
[2018/04/11 14:13:24 | 000,315,904 | ---- | M] (Microsoft Corporation) MD5=63CF7651F7D18828CA184673F1045D0C -- C:\Windows\SoftwareDistribution\Download\248aee40972828407d8f7cd0ecfd59e6\amd64_Microsoft-Windows-Client-Features-WOW64-Package~~AMD64~~10.0.17134.1\wow64_microsoft-windows-win32k_31bf3856ad364e35_10.0.17134.1_none_a8c8b0643811f1a5\win32k.sys
[2017/09/29 15:42:09 | 000,303,104 | ---- | M] (Microsoft Corporation) MD5=A5FDB08A7F576E8E29C16EAD28B7F45E -- C:\Windows\SysWOW64\win32k.sys
[2017/09/29 15:42:09 | 000,303,104 | ---- | M] (Microsoft Corporation) MD5=A5FDB08A7F576E8E29C16EAD28B7F45E -- C:\Windows\WinSxS\wow64_microsoft-windows-win32k_31bf3856ad364e35_10.0.16299.431_none_d0dbb2ea39ab308f\win32k.sys
[2018/04/12 01:34:12 | 000,482,304 | ---- | M] (Microsoft Corporation) MD5=B9FDA7CF5F22FF887076246C40FB6230 -- C:\$WINDOWS.~BT\NewOS\Windows\System32\win32k.sys
[2018/04/12 01:34:12 | 000,482,304 | ---- | M] (Microsoft Corporation) MD5=B9FDA7CF5F22FF887076246C40FB6230 -- C:\$WINDOWS.~BT\NewOS\Windows\WinSxS\amd64_microsoft-windows-win32k_31bf3856ad364e35_10.0.17134.1_none_9e74061203b12faa\win32k.sys
[2018/04/11 15:45:47 | 000,482,304 | ---- | M] (Microsoft Corporation) MD5=B9FDA7CF5F22FF887076246C40FB6230 -- C:\Windows\SoftwareDistribution\Download\248aee40972828407d8f7cd0ecfd59e6\amd64_Microsoft-Windows-Client-Features-Package~~AMD64~~10.0.17134.1\amd64_microsoft-windows-win32k_31bf3856ad364e35_10.0.17134.1_none_9e74061203b12faa\win32k.sys

[color=#A23BEC]< MD5 for: WININIT.EXE >[/color]
[2018/04/12 01:34:22 | 000,366,792 | ---- | M] (Microsoft Corporation) MD5=A58B0CB069DA7840B935872ADCD7F0C2 -- C:\$WINDOWS.~BT\NewOS\Windows\System32\wininit.exe
[2018/04/12 01:34:22 | 000,366,792 | ---- | M] (Microsoft Corporation) MD5=A58B0CB069DA7840B935872ADCD7F0C2 -- C:\$WINDOWS.~BT\NewOS\Windows\WinSxS\amd64_microsoft-windows-wininit_31bf3856ad364e35_10.0.17134.1_none_167345266d7b0c8c\wininit.exe
[2018/04/11 06:37:36 | 000,366,792 | ---- | M] (Microsoft Corporation) MD5=A58B0CB069DA7840B935872ADCD7F0C2 -- C:\Windows\SoftwareDistribution\Download\248aee40972828407d8f7cd0ecfd59e6\amd64_Microsoft-Windows-Client-Features-Package~~AMD64~~10.0.17134.1\amd64_microsoft-windows-wininit_31bf3856ad364e35_10.0.17134.1_none_167345266d7b0c8c\wininit.exe
[2017/09/29 15:41:43 | 000,359,584 | ---- | M] (Microsoft Corporation) MD5=BF3E1D9B2360C6BE4CC3094CD2DDC617 -- C:\WINDOWS\SysNative\wininit.exe
[2017/09/29 15:41:43 | 000,359,584 | ---- | M] (Microsoft Corporation) MD5=BF3E1D9B2360C6BE4CC3094CD2DDC617 -- C:\Windows\WinSxS\amd64_microsoft-windows-wininit_31bf3856ad364e35_10.0.16299.15_none_53dee4c1757519cc\wininit.exe

[color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
[2018/05/06 18:21:05 | 000,079,769 | ---- | M] () MD5=3786F522FC133B9DC9FD9C8D0607B439 -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_10.0.16299.15_none_92af2d094615ef1f\winlogon.exe
[2018/03/30 05:26:04 | 000,716,288 | ---- | M] (Microsoft Corporation) MD5=C67E7F605A830AA96A204ECCDC678FBC -- C:\Windows\CbsTemp\30662645_3366007289\amd64_microsoft-windows-winlogon_31bf3856ad364e35_10.0.16299.371_none_7d2b4e5e3fd59366\winlogon.exe
[2018/03/30 05:26:04 | 000,716,288 | ---- | M] (Microsoft Corporation) MD5=C67E7F605A830AA96A204ECCDC678FBC -- C:\WINDOWS\SysNative\winlogon.exe
[2018/03/30 05:26:04 | 000,716,288 | ---- | M] (Microsoft Corporation) MD5=C67E7F605A830AA96A204ECCDC678FBC -- C:\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_10.0.16299.371_none_7d2b4e5e3fd59366\winlogon.exe
[2018/04/12 01:34:23 | 000,677,376 | ---- | M] (Microsoft Corporation) MD5=F9017F2DC455AD373DF036F5817A8870 -- C:\$WINDOWS.~BT\NewOS\Windows\System32\winlogon.exe
[2018/04/12 01:34:23 | 000,677,376 | ---- | M] (Microsoft Corporation) MD5=F9017F2DC455AD373DF036F5817A8870 -- C:\$WINDOWS.~BT\NewOS\Windows\WinSxS\amd64_microsoft-windows-winlogon_31bf3856ad364e35_10.0.17134.1_none_55438d6e3e1be1df\winlogon.exe
[2018/04/11 15:43:08 | 000,677,376 | ---- | M] (Microsoft Corporation) MD5=F9017F2DC455AD373DF036F5817A8870 -- C:\Windows\SoftwareDistribution\Download\248aee40972828407d8f7cd0ecfd59e6\amd64_Microsoft-Windows-Client-Features-Package~~AMD64~~10.0.17134.1\amd64_microsoft-windows-winlogon_31bf3856ad364e35_10.0.17134.1_none_55438d6e3e1be1df\winlogon.exe

[color=#A23BEC]< %systemroot%\*. /mp /s >[/color]

[color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]
[2018/04/15 22:06:47 | 011,924,480 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\WINDOWS\system32\ieframe.dll

[color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\system32\drivers\*.sys /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\System32\config\*.sav >[/color]

< End of report >

Signaler le contenu de ce document