cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

~ ZHPDiag v2020.5.31.201 Par Nicolas Coolman (2020/05/31)
~ Démarré par kasper (Administrator) (2020/05/31 17:38:26)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Certificate ZHPDiag: Legal
~ Etat de la version: Version OK
~ Mode: Scanner
~ Rapport: C:\Users\kasper.kasper-PC\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\kasper.kasper-PC\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ Démarrage du système: Normal (Normal boot)
Windows 10 Pro, 32-bit (Build 18362) =>.Microsoft Corporation

---\\ NAVIGATEURS INTERNET (2) - 0s
~ GCIE: Google Chrome v83.0.4103.61
~ MSIE: Internet Explorer v11.836.18362.0

---\\ INFORMATIONS SUR LES PRODUITS WINDOWS (8) - 0s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
~ Windows(R) Operating System, RETAIL channel
Windows ID Activation : OK
~ Windows Partial Key : 3V66T
Windows License : OK
~ Windows Remaining Initializations Number : 1001
Windows Automatic Updates : OK

---\\ LOGICIELS DE PROTECTION (1) - 2s
Windows Defender W10 (Activate) (Protection)

---\\ LOGICIELS ANTI-MALWARE (1) - 2s
~ RogueKiller version 13.1.4.0 v13.1.4.0 (Anti-Malware)

---\\ SURVEILLANCE LOGICIEL (1) - 2s
~ Adobe Acrobat Reader DC - Français (Surveillance)

---\\ LOGICIELS D'OPTIMISATION (1) - 2s
~ CCleaner v5.63 (Optimisation)

---\\ INFORMATIONS SUR LE SYSTÈME (6) - 0s
~ Operating System: x86 Family 6 Model 15 Stepping 11, GenuineIntel
~ Operating System: 32-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 3669.108 MB (12% free) : OK =>.RAM Value
System Restore: Activé (Enable)
System drive C: has 100 GB (43%) free of 228 GB : OK =>.Disk Space

---\\ MODE DE CONNEXION AU SYSTÈME (3) - 0s
~ Computer Name: KASPER-PC
~ User Name: kasper
~ Logged in as Administrator

---\\ ÉNUMÉRATION DES UNITÉS DE STOCKAGE (4) - 0s
~ Drive C: has 100 GB free of 228 GB (System)
~ Drive D: has 132 GB free of 141 GB
~ Drive F: has 87 GB free of 96 GB
~ Drive W: has 23 GB free of 30 GB

---\\ ÉTAT DU CENTRE DE SÉCURITÉ WINDOWS (7) - 0s
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK

---\\ RECHERCHE PARTICULIÈRE DE FICHIERS GÉNÉRIQUES (25) - 2s
[MD5.B8744AC6493A5126DA7E2349D3DCAA9A] - 13/05/2020 - (.Microsoft Corporation - Explorateur Windows.) -- C:\WINDOWS\Explorer.exe [3974376] =>.Microsoft®
[MD5.D0432468FA4B7F66166C430E1334DBDA] - 19/03/2019 - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\WINDOWS\System32\rundll32.exe [61952] [Unsigned] =>.Microsoft Corporation
[MD5.62CAAC112386ABF50F635D05F0C67CC8] - 09/10/2019 - (.Microsoft Corporation - Application de démarrage de Windows.) -- C:\WINDOWS\System32\Wininit.exe [298536] =>.Microsoft®
[MD5.C1B23BFDBD87F77B0D8FCA38CAE608CC] - 15/04/2020 - (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\WINDOWS\System32\wininet.dll [4538880] [Unsigned] =>.Microsoft Corporation
[MD5.FAE691B2AF31F988A6761D80AEBF8A90] - 12/03/2020 - (.Microsoft Corporation - Application d’ouverture de session Windows.) -- C:\WINDOWS\System32\Winlogon.exe [685056] [Unsigned] =>.Microsoft Corporation
[MD5.BEA2A49EB58E46A8392D5F0A7751E2D0] - 12/03/2020 - (.Microsoft Corporation - Bibliothèque de licences.) -- C:\WINDOWS\System32\sppcomapi.dll [287232] [Unsigned] =>.Microsoft Corporation
[MD5.23F45825244CFCB11CC6355690F3FFAB] - 13/05/2020 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\WINDOWS\System32\dnsapi.dll [592944] =>.Microsoft®
[MD5.4C84E3886C0DFBD41B6932647B9F62A4] - 13/05/2020 - (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\WINDOWS\System32\wuaueng.dll [2377216] [Unsigned] =>.Microsoft Corporation
[MD5.4BB305AEED92BB280760B127548E1DC2] - 19/03/2019 - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\WINDOWS\System32\fr-FR\user32.dll.mui [19968] [Unsigned] =>.Microsoft Corporation
[MD5.317107B64DD5099326BF34A7F4F2F7DA] - 13/05/2020 - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) -- C:\WINDOWS\System32\drivers\AFD.sys [513336] =>.Microsoft®
[MD5.006C7CDB3050BF9020E8CC05EAE49452] - 12/03/2020 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\WINDOWS\System32\drivers\atapi.sys [22840] =>.Microsoft®
[MD5.07ABEA108AD82B38B37A08FA2CD048ED] - 19/03/2019 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS\System32\drivers\Cdfs.sys [74752] [Unsigned] =>.Microsoft Corporation
[MD5.C0705BA4CBFA86BE41DA3B37BA1239B3] - 19/03/2019 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS\System32\drivers\Cdrom.sys [125952] [Unsigned] =>.Microsoft Corporation
[MD5.C37ECB5AC2CFECE6B439C57F13E4A3F8] - 19/03/2019 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\WINDOWS\System32\drivers\DfsC.sys [114176] [Unsigned] =>.Microsoft Corporation
[MD5.5B30FDAD97C7B9BEA0B18E73BB954AAB] - 12/03/2020 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\WINDOWS\System32\drivers\HDAudBus.sys [92160] [Unsigned] =>.Microsoft Corporation
[MD5.19E04AC22DA35C44050878077D497CB9] - 19/03/2019 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\WINDOWS\System32\drivers\i8042prt.sys [99328] [Unsigned] =>.Microsoft Corporation
[MD5.163B48681978DC53BAF0518DA1C63188] - 19/03/2019 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\drivers\IpNat.sys [187392] [Unsigned] =>.Microsoft Corporation
[MD5.B98171C83A46E9748731CB53A2BAEE5F] - 15/04/2020 - (.Microsoft Corporation - Minirdr SMB Windows NT.) -- C:\WINDOWS\System32\drivers\MRxSmb.sys [462864] =>.Microsoft®
[MD5.8C06E89C711952AB8DA4F64E76CF0F78] - 04/09/2019 - (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS\System32\drivers\netBT.sys [247808] [Unsigned] =>.Microsoft Corporation
[MD5.BE9AB91E2483FBFAC4768BA33E3A685F] - 12/03/2020 - (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\WINDOWS\System32\drivers\ntfs.sys [2203664] =>.Microsoft®
[MD5.DD3C8E703762361BE2BB7DD002B82B3D] - 19/03/2019 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\WINDOWS\System32\drivers\Parport.sys [82944] [Unsigned] =>.Microsoft Corporation
[MD5.6A5EFB03BCBFD104E0613E954E14AA8F] - 19/03/2019 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\Rasl2tp.sys [79872] [Unsigned] =>.Microsoft Corporation
[MD5.43078298266DE794C8A3B58FC86C37D7] - 04/09/2019 - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RD.) -- C:\WINDOWS\System32\drivers\rdpdr.sys [131072] [Unsigned] =>.Microsoft Corporation
[MD5.A95F668D4DB65A080BFC574D5954D550] - 19/03/2019 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\WINDOWS\System32\drivers\tdx.sys [95544] =>.Microsoft Windows®
[MD5.3114CEB6A1426D3051A1164971B6220E] - 12/03/2020 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\WINDOWS\System32\drivers\volsnap.sys [356368] =>.Microsoft®

---\\ LISTE DES SERVICES (Non désactivés) (65) - 4s
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems - Adobe Acrobat Update Service.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe =>.Adobe Inc.®
O23 - Service: C:\Windows\System32\AudioEndpointBuilder.dll (AudioEndpointBuilder) . (.Microsoft Corporation - Générateur de points de terminaison du serv.) - C:\Windows\System32\AudioEndpointBuilder.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\audiosrv.dll (Audiosrv) . (.Microsoft Corporation - Service Audio Windows.) - C:\Windows\System32\audiosrv.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\BFE.DLL (BFE) . (.Microsoft Corporation - Moteur de filtrage de base.) - C:\Windows\System32\BFE.DLL [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\bisrv.dll (BrokerInfrastructure) . (.Microsoft Corporation - Process State Manager (PSM) Service.) - C:\Windows\System32\psmsrv.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\cdpusersvc.dll (CDPUserSvc) . (.Microsoft Corporation - Composants utilisateur Microsoft (R) CDP.) - C:\Windows\System32\CDPUserSvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: Service pour utilisateur de plateforme d’appareils connecté (CDPUserSvc_45d13) . (.Microsoft Corporation - Processus hôte pour les services Windows.) - C:\Windows\System32\svchost.exe =>.Microsoft Windows Publisher®
O23 - Service: C:\Windows\System32\coremessaging.dll (CoreMessagingRegistrar) . (.Microsoft Corporation - Microsoft CoreMessaging Dll.) - C:\Windows\System32\coremessaging.dll =>.Microsoft®
O23 - Service: C:\Windows\System32\cryptsvc.dll (CryptSvc) . (.Microsoft Corporation - Services de chiffrement.) - C:\Windows\System32\cryptsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\das.dll (DeviceAssociationService) . (.Microsoft Corporation - Service d’association de périphérique.) - C:\Windows\System32\das.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\dhcpcore.dll (Dhcp) . (.Microsoft Corporation - Service client DHCP.) - C:\Windows\System32\dhcpcore.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\diagtrack.dll (DiagTrack) . (.Microsoft Corporation - Suivi des diagnostics Microsoft Windows.) - C:\Windows\System32\diagtrack.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\dispbroker.desktop.dll (DispBrokerDesktopSvc) . (.Microsoft Corporation - Courtier d'affichage du bureau.) - C:\Windows\System32\DispBroker.Desktop.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\dnsapi.dll (Dnscache) . (.Microsoft Corporation - Service de résolution du cache DNS.) - C:\Windows\System32\dnsrslvr.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\dusmsvc.dll (DusmSvc) . (.Microsoft Corporation - Service Consommation des données.) - C:\Windows\System32\dusmsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\wevtsvc.dll (EventLog) . (.Microsoft Corporation - Service journal des événements.) - C:\Windows\System32\wevtsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: @comres.dll,-2450 (EventSystem) . (.Microsoft Corporation - COM+.) - C:\Windows\System32\es.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\fhsvc.dll (fhsvc) . (.Microsoft Corporation - Service d’historique des fichiers.) - C:\Windows\System32\fhsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\FntCache.dll (FontCache) . (.Microsoft Corporation - Service de cache de police Windows.) - C:\Windows\System32\FntCache.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) . (.NVIDIA Corporation - NVIDIA GeForce ExperienceService.) - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe =>.NVIDIA Corporation®
O23 - Service: @gpapi.dll,-112 (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) - C:\Windows\System32\gpsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc®
O23 - Service: ICEsound Service (ICEsoundService) . (.ICEpower a/s - ICEpower ICEsound APO service.) - C:\Windows\System32\ICEsoundService.exe =>.ICEpower a/s®
O23 - Service: C:\Windows\System32\IKEEXT.DLL (IKEEXT) . (.Microsoft Corporation - Extension IKE.) - C:\Windows\System32\IKEEXT.DLL [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\iphlpsvc.dll (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) - C:\Windows\System32\iphlpsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: (KMSEmulator) . (.MDL Forum, mod by Ratiborus - KMS Server Emulator Service (XP).) - C:\Windows\Temp\KMSAuto\bin\KMSSS.exe {08A8E826950F1A9940262589FCAF0B8F}.
O23 - Service: C:\Windows\System32\srvsvc.dll (LanmanServer) . (.Microsoft Corporation - DLL du service Serveur.) - C:\Windows\System32\srvsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\wkssvc.dll (LanmanWorkstation) . (.Microsoft Corporation - DLL du service Station de travail.) - C:\Windows\System32\wkssvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\lsm.dll (LSM) . (.Microsoft Corporation - Service du gestionnaire de session locale.) - C:\Windows\System32\lsm.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\moshost.dll (MapsBroker) . (.Microsoft Corporation - Gestionnaire des cartes téléchargées.) - C:\Windows\System32\moshost.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\FirewallAPI.dll (mpssvc) . (.Microsoft Corporation - Service de protection Microsoft.) - C:\Windows\System32\MPSSVC.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\nlasvc.dll (NlaSvc) . (.Microsoft Corporation - Connaissance des emplacements réseau 2.) - C:\Windows\System32\nlasvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\nsisvc.dll (nsi) . (.Microsoft Corporation - Serveur RPC de l’interface du magasin résea.) - C:\Windows\System32\nsisvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: NVIDIA Network Service (NvNetworkService) . (.NVIDIA Corporation - NVIDIA Network Service.) - C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe =>.NVIDIA Corporation®
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) . (.NVIDIA Corporation - NVIDIA Streamer Service.) - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe =>.NVIDIA Corporation®
O23 - Service: NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 342.0.) - C:\Windows\System32\nvvsvc.exe =>.NVIDIA Corporation®
O23 - Service: C:\Windows\System32\APHostRes.dll (OneSyncSvc) . (.Microsoft Corporation - Accounts Host Service.) - C:\Windows\System32\APHostService.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: Hôte de synchronisation_45d13 (OneSyncSvc_45d13) . (.Microsoft Corporation - Processus hôte pour les services Windows.) - C:\Windows\System32\svchost.exe =>.Microsoft Windows Publisher®
O23 - Service: C:\Windows\System32\umpo.dll (Power) . (.Microsoft Corporation - Service d’alimentation en mode utilisateur.) - C:\Windows\System32\umpo.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\profsvc.dll (ProfSvc) . (.Microsoft Corporation - ProfSvc.) - C:\Windows\System32\profsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\rasmans.dll (RasMan) . (.Microsoft Corporation - Gestionnaire des connexions d’accès à dista.) - C:\Windows\System32\rasmans.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\RpcEpMap.dll (RpcEptMapper) . (.Microsoft Corporation - Mappeur de point de terminaison RPC.) - C:\Windows\System32\RpcEpMap.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: @combase.dll,-5010 (RpcSs) . (.Microsoft Corporation - Distributed COM Services.) - C:\Windows\System32\rpcss.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: SAntivirusSvc (SAntivirusSvc) . (.Digital Com. Incorporated - Antivirus Service.) - C:\Program Files\SAntivirus\SAntivirusService.exe =>SUP.Optional.Segurazo
O23 - Service: C:\Windows\System32\schedsvc.dll (Schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) - C:\Windows\System32\schedsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\Sens.dll (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) - C:\Windows\System32\Sens.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\shsvcs.dll (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) - C:\Windows\System32\shsvcs.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\spoolsv.exe,-1 (Spooler) . (.Microsoft Corporation - Application sous-système spouleur.) - C:\Windows\System32\spoolsv.exe [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\sppsvc.exe,-101 (sppsvc) . (.Microsoft Corporation - Service de la plateforme de protection logi.) - C:\Windows\System32\sppsvc.exe =>.Microsoft®
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) . (.NVIDIA Corporation - Stereo Vision Control Panel API Server.) - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe =>.NVIDIA Corporation®
O23 - Service: C:\Windows\System32\wiaservc.dll (StiSvc) . (.Microsoft Corporation - Service de périphériques d’images fixes.) - C:\Windows\System32\wiaservc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\sysmain.dll (SysMain) . (.Microsoft Corporation - Hôte de Service SysMain.) - C:\Windows\System32\sysmain.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\SystemEventsBrokerServer.dll (SystemEventsBroker) . (.Microsoft Corporation - Service Broker pour les événements système.) - C:\Windows\System32\SystemEventsBrokerServer.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\themeservice.dll (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) - C:\Windows\System32\themeservice.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\usermgr.dll (UserManager) . (.Microsoft Corporation - UserMgr.) - C:\Windows\System32\usermgr.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\usosvc.dll (UsoSvc) . (.Microsoft Corporation - Mettre à jour la session du service Orchest.) - C:\Windows\System32\usosvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\wcmsvc.dll (Wcmsvc) . (.Microsoft Corporation - DLL du service de gestion des connexions Wi.) - C:\Windows\System32\wcmsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) . (.Microsoft Corporation - Antimalware Service Executable.) - C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2004.6-0\MsMpEng.exe =>.Microsoft®
O23 - Service: C:\Windows\System32\wbem\WMIsvc.dll (winmgmt) . (.Microsoft Corporation - WMI.) - C:\Windows\System32\wbem\WMIsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\wlansvc.dll (Wlansvc) . (.Microsoft Corporation - DLL du service de configuration automatique.) - C:\Windows\System32\wlansvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\wpnservice.dll (WpnService) . (.Microsoft Corporation - Service du système de notifications Push Wi.) - C:\Windows\System32\WpnService.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\WpnUserService.dll (WpnUserService) . (.Microsoft Corporation - Service utilisateur de notifications Push W.) - C:\Windows\System32\WpnUserService.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: Service utilisateur de notifications Push Windows_45d13 (WpnUserService_45d13) . (.Microsoft Corporation - Processus hôte pour les services Windows.) - C:\Windows\System32\svchost.exe =>.Microsoft Windows Publisher®
O23 - Service: C:\Windows\System32\wscsvc.dll (wscsvc) . (.Microsoft Corporation - Service Centre de sécurité de Windows.) - C:\Windows\System32\wscsvc.dll =>.Microsoft®
O23 - Service: C:\WINDOWS\System32\SearchIndexer.exe,-103 (WSearch) . (.Microsoft Corporation - Indexeur Microsoft Windows Search.) - C:\Windows\System32\SearchIndexer.exe [Unsigned] =>.Microsoft Corporation

---\\ SERVICES NON MICROSOFT (SR=Démarré,SS=Stoppé) (70) - 9s
SR - Boot [19/03/2019] [ 85816] (3ware) . (.LSI.) - C:\Windows\System32\drivers\3ware.sys =>.Microsoft Windows®
SR - Auto [25/02/2020] [ 88648] Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe =>.Adobe Inc.®
SR - Boot [19/03/2019] [ 1038352] (ADP80XX) . (.PMC-Sierra.) - C:\Windows\System32\drivers\adp80xx.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 75280] (amdsata) . (.Advanced Micro Devices.) - C:\Windows\System32\drivers\amdsata.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 215560] (amdsbs) . (.AMD Technologies Inc..) - C:\Windows\System32\drivers\amdsbs.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 23080] (amdxata) . (.Advanced Micro Devices.) - C:\Windows\System32\drivers\amdxata.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 116752] Adaptec SAS/SATA-II RAID S (arcsas) . (.PMC-Sierra, Inc..) - C:\Windows\System32\drivers\arcsas.sys =>.Microsoft Windows®
SR - Demand [07/10/2015] [ 33048] AsusVBus (AsusVBus) . (.ASUSTeK Computer Inc..) - C:\Windows\System32\drivers\AsusVBus.sys =>.ASUSTeK Computer Inc.®
SR - Demand [19/03/2019] [ 8192] bcmfn2 Service (bcmfn2) . (...) - C:\Windows\System32\drivers\bcmfn2.sys [Unsigned] =>.Broadcom Corporation
SR - Demand [24/03/2018] [ 26168] DAEMON Tools Lite Virtual SCSI Bus (dtlitescsibus) . (.Disc Soft Ltd.) - C:\Windows\System32\drivers\dtlitescsibus.sys =>.Disc Soft Ltd®
SR - Demand [24/03/2018] [ 40504] DAEMON Tools Lite Virtual USB Bus (dtliteusbbus) . (.Disc Soft Ltd.) - C:\Windows\System32\drivers\dtliteusbbus.sys =>.Disc Soft Ltd®
SR - Auto [14/11/2016] [ 930240] NVIDIA GeForce Experience Service (GfExperienceService) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe =>.NVIDIA Corporation®
SR - Demand [04/04/2017] [ 13528] SOMC USB Flash Driver Filter (ggflt) . (.Sony Mobile Communications.) - C:\Windows\System32\drivers\ggflt.sys =>.Sony Mobile Communications AB®
SR - Demand [04/04/2017] [ 26328] SOMC USB Flash Driver (ggsomc) . (.Sony Mobile Communications.) - C:\Windows\System32\drivers\ggsomc.sys =>.Sony Mobile Communications AB®
SS - Demand [16/05/2020] [ 1052656] Google Chrome Elevation Service (GoogleChromeElevationService) . (.Google LLC.) - C:\Program Files\Google\Chrome\Application\83.0.4103.61\elevation_service.exe =>.Google LLC®
SR - Demand [19/03/2019] [ 22016] Intel SoC GPIO Controller Driv (GPIO) . (.Intel Corporation.) - C:\Windows\System32\drivers\iaiogpio.sys [Unsigned] =>.Intel Corporation
SR - Auto [03/02/2019] [ 156968] Service Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc®
SS - Demand [03/02/2019] [ 156968] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc®
SR - Boot [19/03/2019] [ 56848] (HpSAMD) . (.Hewlett-Packard Company.) - C:\Windows\System32\drivers\HpSAMD.sys =>.Microsoft Windows®
SR - Demand [19/03/2019] [ 28672] Intel Serial IO GPIO Controlle (iagpio) . (.Intel(R) Corporation.) - C:\Windows\System32\drivers\iagpio.sys [Unsigned] =>.Intel(R) Corporation
SR - Demand [19/03/2019] [ 73728] Intel(R) Serial IO I2C Host Cont (iai2c) . (.Intel(R) Corporation.) - C:\Windows\System32\drivers\iai2c.sys [Unsigned] =>.Intel(R) Corporation
SR - Demand [19/03/2019] [ 57856] Intel(R) Atom(TM) Proces (iaioi2c) . (.Intel Corporation.) - C:\Windows\System32\drivers\iaioi2c.sys [Unsigned] =>.Intel Corporation
SR - Boot [19/03/2019] [ 693048] Intel Chipset SATA RAI (iaStorAVC) . (.Intel Corporation.) - C:\Windows\System32\drivers\iaStorAVC.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 333624] Intel RAID Controller Wi (iaStorV) . (.Intel Corporation.) - C:\Windows\System32\drivers\iaStorV.sys =>.Microsoft Windows®
SR - Auto [25/04/2018] [ 512992] ICEsound Service (ICEsoundService) . (.ICEpower a/s.) - C:\Windows\System32\ICEsoundService.exe =>.ICEpower a/s®
SR - Demand [23/03/2012] [ 9036288] (igfx) . (.Intel Corporation.) - C:\Windows\System32\drivers\igdkmd32.sys [Unsigned] =>.Intel Corporation
SR - Demand [25/04/2018] [ 4762568] Service for Realtek HD Audio (WDM) (IntcAzAudAddService) . (.Realtek Semiconductor Corp..) - C:\Windows\System32\drivers\RTKVHDA.sys =>.Realtek Semiconductor Corp.®
SR - Boot [19/03/2019] [ 121144] (ItSas35i) . (.Avago Technologies.) - C:\Windows\System32\drivers\ItSas35i.sys =>.Microsoft Windows®
SR - Auto [24/05/2020] [ 304760] (KMSEmulator) . (.MDL Forum, mod by Ratiborus.) - C:\Windows\Temp\KMSAuto\bin\KMSSS.exe {08A8E826950F1A9940262589FCAF0B8F}.
SR - Demand [29/04/2009] [ 25088] HIDServiceDesc (KMWDFILTERx86) . (.Windows (R) Codename Longhorn DDK provider.) - C:\Windows\System32\drivers\KMWDFILTER.sys =>.MLK Technologies Limited®
SR - Demand [29/11/2018] [ 131400] NDIS Miniport Driver for (L1C) . (.Qualcomm Atheros, Inc..) - C:\Windows\System32\drivers\L1C63x86.sys =>.Rivet Networks LLC®
SR - Boot [19/03/2019] [ 94008] (LSI_SAS) . (.LSI Corporation.) - C:\Windows\System32\drivers\lsi_sas.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 103224] (LSI_SAS2i) . (.LSI Corporation.) - C:\Windows\System32\drivers\lsi_sas2i.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 106296] (LSI_SAS3i) . (.Avago Technologies.) - C:\Windows\System32\drivers\lsi_sas3i.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 69432] (LSI_SSS) . (.LSI Corporation.) - C:\Windows\System32\drivers\lsi_sss.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 52024] (megasas) . (.Avago Technologies.) - C:\Windows\System32\drivers\megasas.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 64312] (megasas2i) . (.Avago Technologies.) - C:\Windows\System32\drivers\MegaSas2i.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 79160] (megasas35i) . (.Avago Technologies.) - C:\Windows\System32\drivers\megasas35i.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 464696] (megasr) . (.LSI Corporation, Inc..) - C:\Windows\System32\drivers\megasr.sys =>.Microsoft Windows®
SR - Demand [16/07/2009] [ 13216] ATK0110 ACPI UTILITY (MTsensor) . (.ASUSTeK Computer Inc..) - C:\Windows\System32\drivers\ASACPI.sys =>.ASUSTeK Computer Inc.®
SR - Boot [19/03/2019] [ 58376] (mvumis) . (.Marvell Semiconductor, Inc..) - C:\Windows\System32\drivers\mvumis.sys =>.Microsoft Windows®
SR - Demand [27/08/2012] [ 86408] Renesas Electronics USB 3.0 H (nusb3hub) . (.Renesas Electronics Corporation.) - C:\Windows\System32\drivers\nusb3hub.sys =>.Renesas Electronics Corporation®
SR - Demand [27/08/2012] [ 178568] Renesas Electronics USB 3.0 H (nusb3xhc) . (.Renesas Electronics Corporation.) - C:\Windows\System32\drivers\nusb3xhc.sys =>.Renesas Electronics Corporation®
SR - Demand [14/11/2016] [10711488] (nvlddmkm) . (.NVIDIA Corporation.) - C:\Windows\System32\drivers\nvlddmkm.sys =>.NVIDIA Corporation®
SR - Auto [14/11/2016] [ 1879488] NVIDIA Network Service (NvNetworkService) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe =>.NVIDIA Corporation®
SR - Boot [19/03/2019] [ 119312] (nvraid) . (.NVIDIA Corporation.) - C:\Windows\System32\drivers\nvraid.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 142352] (nvstor) . (.NVIDIA Corporation.) - C:\Windows\System32\drivers\nvstor.sys =>.Microsoft Windows®
SS - Demand [14/11/2016] [ 2904000] NVIDIA Streamer Network Service (NvStreamNetworkSvc) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe =>.NVIDIA Corporation®
SR - Auto [14/11/2016] [ 2016704] NVIDIA Streamer Service (NvStreamSvc) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe =>.NVIDIA Corporation®
SR - Demand [09/12/2016] [ 444784] NVIDIA Stereoscopic 3D USB driver (NvStUSB) . (.NVIDIA Corporation.) - C:\Windows\System32\drivers\nvstusb.sys =>.NVIDIA Corporation®
SR - Auto [14/11/2016] [ 677312] NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\System32\nvvsvc.exe =>.NVIDIA Corporation®
SR - Demand [14/11/2016] [ 50744] NVIDIA Virtual Au (nvvad_WaveExtensible) . (.NVIDIA Corporation.) - C:\Windows\System32\drivers\nvvad32v.sys =>.NVIDIA Corporation®
SS - Demand [24/11/2016] [ 24064] OpenVPN Service (OpenVPNService) . (.The OpenVPN Project.) - C:\Program Files\OpenVPN\bin\openvpnserv.exe [Unsigned] =>.The OpenVPN Project
SR - Boot [19/03/2019] [ 51512] (percsas2i) . (.Avago Technologies.) - C:\Windows\System32\drivers\percsas2i.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 59192] (percsas3i) . (.Avago Technologies.) - C:\Windows\System32\drivers\percsas3i.sys =>.Microsoft Windows®
SR - Demand [15/03/2017] [ 216632] Qualcomm USB Device for Legacy Serial Communication (qcusbser) . (.QUALCOMM Incorporated.) - C:\Windows\System32\drivers\qcusbser.sys =>.Microsoft Windows Hardware Compatibility Publisher®
SR - Demand [14/05/2007] [ 22656] Téléphone intelligent BlackBerry (RimUsb) . (.Research In Motion Limited.) - C:\Windows\System32\drivers\RimUsb.sys [Unsigned] =>.Research In Motion Limited
SR - Demand [10/12/2012] [ 35840] RIM Virtual Serial Port v2 (RimVSerPort) . (.Research in Motion Ltd.) - C:\Windows\System32\drivers\RimSerial.sys [Unsigned] =>.Research in Motion Ltd
SR - Demand [19/03/2019] [ 6854144] Realtek Wire (RtlWlanu) . (.Realtek Semiconductor Corporation.) - C:\Windows\System32\drivers\rtwlanu.sys [Unsigned] =>.Realtek Semiconductor Corporation
SR - System [16/02/2020] [ 81184] SAntivirus Kernel Driver (SANTIVIRUSKD) . (.Digital Comm. Inc.) - C:\Program Files\SAntivirus\SAntivirusKD.sys =>SUP.Optional.Segurazo =>SUP.Optional.Segurazo
SR - Auto [16/02/2020] [ 163312] SAntivirusSvc (SAntivirusSvc) . (.Digital Com. Incorporated.) - C:\Program Files\SAntivirus\SAntivirusService.exe =>SUP.Optional.Segurazo =>SUP.Optional.Segurazo
SR - Boot [19/03/2019] [ 41488] (SiSRaid2) . (.Silicon Integrated Systems Corp..) - C:\Windows\System32\drivers\sisraid2.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 79368] (SiSRaid4) . (.Silicon Integrated Systems.) - C:\Windows\System32\drivers\sisraid4.sys =>.Microsoft Windows®
SR - Auto [14/11/2016] [ 426040] NVIDIA Stereoscopic 3D Driver Service (Stereo Service) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe =>.NVIDIA Corporation®
SR - Boot [19/03/2019] [ 27152] (stexstor) . (.Promise Technology, Inc..) - C:\Windows\System32\drivers\stexstor.sys =>.Microsoft Windows®
SR - Demand [21/04/2016] [ 23040] TAP-Windows Adapter V9 (tap0901) . (.The OpenVPN Project.) - C:\Windows\System32\drivers\tap0901.sys [Unsigned] =>.The OpenVPN Project
SR - Demand [21/12/2016] [ 45056] Apple Mobile USB Driver (USBAAPL) . (.Apple, Inc..) - C:\Windows\System32\drivers\usbaapl.sys [Unsigned] =>.Apple, Inc.
SR - Demand [27/06/2012] [ 18560] SAMSUNG ETS Driver (VIA_USB_ETS_SS) . (.Via Telecom, Inc..) - C:\Windows\System32\drivers\VIA_USB_ETS_SS.sys [Unsigned] =>.Via Telecom, Inc.
SR - Boot [19/03/2019] [ 150056] (vsmraid) . (.VIA Technologies Inc.,Ltd.) - C:\Windows\System32\drivers\vsmraid.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 277008] VIA StorX Storage RAID Co (VSTXRAID) . (.VIA Corporation.) - C:\Windows\System32\drivers\VSTXRAID.SYS =>.Microsoft Windows®

---\\ TÂCHES PLANIFIÉES EN AUTOMATIQUE (Registre) (16) - 15s
O38 - TASK: {07E700B3-000F-4A40-85B0-1FF9603D43B7}[\WinZip Update Notifier 1] - (.Corel Corporation - WinZip Update Notifier.) -- C:\Program Files\WinZip\WZUpdateNotifier.exe [2268624] =>.Corel Corporation
O38 - TASK: {0FEF0488-A0B9-41DA-9F32-6C1B66164603}[\WinZip Update Notifier 3] - (.Corel Corporation - WinZip Update Notifier.) -- C:\Program Files\WinZip\WZUpdateNotifier.exe [2268624] =>.Corel Corporation
O38 - TASK: {10A80A40-E642-4F71-99C2-9D6C6F4F8D10}[\CCleanerSkipUAC] - (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe [18458752] =>.Piriform Ltd
O38 - TASK: {21E51D93-0110-4F94-8C2E-34A20665DCFF}[\Adobe Acrobat Update Task] - (.Adobe Systems - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1242704] =>.Adobe Systems
O38 - TASK: {632E0E61-50C5-4681-BC83-5B9918D5D185}[\WinZip Update Notifier 2] - (.Corel Corporation - WinZip Update Notifier.) -- C:\Program Files\WinZip\WZUpdateNotifier.exe [2268624] =>.Corel Corporation
O38 - TASK: {7CFF055D-2C35-4C2E-9835-DAE778FA025C}[\GoogleUpdateTaskMachineCore] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files\Google\Update\GoogleUpdate.exe [156968] =>.Google Inc.
O38 - TASK: {8565A4F7-1BC1-4E85-B973-4F629A61F3A9}[\CCleaner Update] - (.Piriform Software Ltd - CCleaner emergency updater.) -- C:\Program Files\CCleaner\CCUpdate.exe [608384] =>.Piriform Software Ltd
O38 - TASK: {B106A0A1-ED55-46BC-BE96-6D73F0BCCC2C}[\GoogleUpdateTaskMachineUA] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files\Google\Update\GoogleUpdate.exe [156968] =>.Google Inc.
C:\WINDOWS\System32\Tasks\WinZip Update Notifier 1 - (.Corel Corporation.) -- C:\Program Files\WinZip\WZUpdateNotifier.exe [-checkType="scheduled_9AM" -show.-checkType="sched] =>.Corel Corporation
C:\WINDOWS\System32\Tasks\WinZip Update Notifier 3 - (.Corel Corporation.) -- C:\Program Files\WinZip\WZUpdateNotifier.exe [-checkType="scheduled_3PM" -show.-checkType="sched] =>.Corel Corporation
C:\WINDOWS\System32\Tasks\CCleanerSkipUAC - (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [$(Arg0)] =>.Piriform Ltd
C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task - (.Adobe Systems.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [] =>.Adobe Systems
C:\WINDOWS\System32\Tasks\WinZip Update Notifier 2 - (.Corel Corporation.) -- C:\Program Files\WinZip\WZUpdateNotifier.exe [-checkType="scheduled_12PM" -show.-checkType="sche] =>.Corel Corporation
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [/c] =>.Google Inc.
C:\WINDOWS\System32\Tasks\CCleaner Update - (.Piriform Software Ltd.) -- C:\Program Files\CCleaner\CCUpdate.exe [] =>.Piriform Software Ltd
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [/ua ./ua] =>.Google Inc.

---\\ APPLICATIONS LANCÉES AU DÉMARRAGE DU SYSTÈME (21) - 2s
O4 - HKLM\..\Run: [SecurityHealth] . (.Microsoft Corporation - Windows Security notification icon.) -- C:\Windows\System32\SecurityHealthSystray.exe [Unsigned] =>.Microsoft Corporation
O4 - HKLM\..\Run: [WinZip UN] . (.Corel Corporation - WinZip Update Notifier.) -- C:\Program Files\WinZip\WZUpdateNotifier.exe =>.Corel Corporation®
O4 - HKLM\..\Run: [WinZip PreLoader] . (.WinZip Computing - WinZip Preloader.) -- C:\Program Files\WinZip\WzPreloader.exe =>.Corel Corporation®
O4 - HKLM\..\Run: [Logitech Download Assistant] . (.Logitech, Inc. - Logitech Download Assistant.) -- C:\Windows\System32\LogiLDA.DLL =>.Logitech Inc®
O4 - HKLM\..\Run: [NvBackend] . (.NVIDIA Corporation - NVIDIA Backend.) -- C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe =>.NVIDIA Corporation®
O4 - HKLM\..\Run: [NUSB3MON] . (.Renesas Electronics Corporation - USB 3.0 Monitor.) -- C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe =>.Renesas Electronics Corporation®
O4 - HKLM\..\Run: [ShadowPlay] . (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe [Unsigned] =>.Microsoft Corporation
O4 - HKCU\..\Run: [OneDrive] . (.Microsoft Corporation - Microsoft OneDrive.) -- C:\Users\kasper.kasper-PC\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation®
O4 - HKCU\..\Run: [CCleaner Smart Cleaning] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe =>.Piriform Software Ltd®
O4 - HKCU\..\Run: [utweb] . (.BitTorrent Inc. - µTorrent Web.) -- C:\Users\kasper.kasper-PC\AppData\Roaming\uTorrent Web\utweb.exe [Unsigned] =>BitTorrent (P2P)
O4 - HKCU\..\Run: [ShuameDaemon] . (. - .) -- C:\Program Files\Shuame\3.5.2.187\ShuameDaemon.exe (.Not File.) =>.SUP.Orphan
O4 - HKCU\..\Run: [Chromium] . (.The Chromium Authors - Chromium.) -- c:\Users\kasper.kasper-pc\AppData\Local\chromium\application\chrome.exe [Unsigned] =>.The Chromium Authors
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\System32\OneDriveSetup.exe =>.Microsoft Corporation®
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\System32\OneDriveSetup.exe =>.Microsoft Corporation®
O4 - HKUS\S-1-5-19\..\RunOnce: [WAB Migrate] . (.Microsoft Corporation - Windows Contacts.) -- C:\Program Files\Windows Mail\wab.exe [Unsigned] =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\RunOnce: [WAB Migrate] . (.Microsoft Corporation - Windows Contacts.) -- C:\Program Files\Windows Mail\wab.exe [Unsigned] =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-2049537270-2770977086-2453291920-1000\..\Run: [OneDrive] . (.Microsoft Corporation - Microsoft OneDrive.) -- C:\Users\kasper.kasper-PC\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation®
O4 - HKUS\S-1-5-21-2049537270-2770977086-2453291920-1000\..\Run: [CCleaner Smart Cleaning] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe =>.Piriform Software Ltd®
O4 - HKUS\S-1-5-21-2049537270-2770977086-2453291920-1000\..\Run: [utweb] . (.BitTorrent Inc. - µTorrent Web.) -- C:\Users\kasper.kasper-PC\AppData\Roaming\uTorrent Web\utweb.exe [Unsigned] =>BitTorrent (P2P)
O4 - HKUS\S-1-5-21-2049537270-2770977086-2453291920-1000\..\Run: [ShuameDaemon] . (. - .) -- C:\Program Files\Shuame\3.5.2.187\ShuameDaemon.exe (.Not File.) =>.SUP.Orphan
O4 - HKUS\S-1-5-21-2049537270-2770977086-2453291920-1000\..\Run: [Chromium] . (.The Chromium Authors - Chromium.) -- c:\Users\kasper.kasper-pc\AppData\Local\chromium\application\chrome.exe [Unsigned] =>.The Chromium Authors

---\\ PROCESSUS LANCÉS (31) - 14s
[MD5.9910AA3A3CDD29AA542ABEE305F7A072] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 342.0.) -- C:\Windows\System32\nvvsvc.exe [677312] [PID.1672] =>.NVIDIA Corporation®
[MD5.843F16D234D03756B9EB6054B5C62FAA] - (.NVIDIA Corporation - Stereo Vision Control Panel API Server.) -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [426040] [PID.1680] =>.NVIDIA Corporation®
[MD5.89FAC2D528A321A52B5CDF04CCBA754E] - (.NVIDIA Corporation - NVIDIA User Experience Driver Component.) -- C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe [946112] [PID.2016] =>.NVIDIA Corporation®
[MD5.9910AA3A3CDD29AA542ABEE305F7A072] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 342.0.) -- C:\Windows\System32\nvvsvc.exe [677312] [PID.2028] =>.NVIDIA Corporation®
[MD5.878A26B96FA0E4821601E570C3BCEDD2] - (.Adobe Systems - Adobe Acrobat Update Service.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [88648] [PID.2780] =>.Adobe Inc.®
[MD5.2598AA400B27E4DB64BF3EFD08340B1F] - (.ICEpower a/s - ICEpower ICEsound APO service.) -- C:\Windows\System32\ICEsoundService.exe [512992] [PID.2848] =>.ICEpower a/s®
[MD5.22FC15F2C2E2A77BC5A1186E5F55D7D3] - (.MDL Forum, mod by Ratiborus - KMS Server Emulator Service (XP).) -- C:\Windows\Temp\KMSAuto\bin\KMSSS.exe [304760] [PID.2920] {08A8E826950F1A9940262589FCAF0B8F}. =>Heuristic.Suspect
[MD5.BCC0A10AF241A8414FF8E5AB43151950] - (.NVIDIA Corporation - NVIDIA GeForce ExperienceService.) -- C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [930240] [PID.2928] =>.NVIDIA Corporation®
[MD5.1EBB1F0442CF41B1A419AB423614CE32] - (.Digital Com. Incorporated - Antivirus Service.) -- C:\Program Files\SAntivirus\SAntivirusService.exe [163312] [PID.2972] =>SUP.Optional.Segurazo
[MD5.AA43994E0FB156274BC157CC7E25EA99] - (.Digital Com. Inc - SAntivirus IC.) -- C:\Program Files\SAntivirus\SAntivirusIC.exe [4846064] [PID.2988] =>SUP.Optional.Segurazo
[MD5.D57DF995F80AEE373CDE2D9B6D02A777] - (.NVIDIA Corporation - NVIDIA Network Service.) -- C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488] [PID.3048] =>.NVIDIA Corporation®
[MD5.E00C3009A3EF6E01DF15CACBEF8F53DE] - (...) -- C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe [487464] [PID.5076] =>.Microsoft®
[MD5.F48F27EA3D6A65A6CD3D4C1BDBB5A218] - (...) -- C:\Program Files\WindowsApps\Microsoft.YourPhone_1.20041.91.0_x86__8wekyb3d8bbwe\YourPhone.exe [20512768] [PID.4156] [Unsigned] =>.Microsoft Corporation
[MD5.CDC247199F600D0CB3235164BEDC7662] - (.NVIDIA Corporation - NVIDIA Settings.) -- C:\Program Files\NVIDIA Corporation\Display\nvtray.exe [1827384] [PID.2984] =>.NVIDIA Corporation®
[MD5.B8A09B9A70A40BC044CE4F3AC15BDAC5] - (.NVIDIA Corporation - NVIDIA Backend.) -- C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2397120] [PID.5432] =>.NVIDIA Corporation®
[MD5.74CDA8051136B80DC3AE4BF86623003C] - (.Google LLC - Google Crash Handler.) -- C:\Program Files\Google\Update\1.3.35.452\GoogleCrashHandler.exe [295368] [PID.6956] =>.Google LLC®
[MD5.FEBBCF7945E4493C28D8948FC40C9D60] - (.Digital Com. Incorporated - Antivirus Client.) -- C:\Program Files\SAntivirus\santivirusclient.exe [1817072] [PID.7832] =>SUP.Optional.Segurazo
[MD5.30FD3FA43DCAA081124E071980BC4F61] - (.Google LLC - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [1622000] [PID.6712] =>.Google LLC®
[MD5.30FD3FA43DCAA081124E071980BC4F61] - (.Google LLC - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [1622000] [PID.6160] =>.Google LLC®
[MD5.30FD3FA43DCAA081124E071980BC4F61] - (.Google LLC - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [1622000] [PID.9992] =>.Google LLC®
[MD5.30FD3FA43DCAA081124E071980BC4F61] - (.Google LLC - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [1622000] [PID.4884] =>.Google LLC®
[MD5.30FD3FA43DCAA081124E071980BC4F61] - (.Google LLC - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [1622000] [PID.5932] =>.Google LLC®
[MD5.30FD3FA43DCAA081124E071980BC4F61] - (.Google LLC - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [1622000] [PID.9224] =>.Google LLC®
[MD5.30FD3FA43DCAA081124E071980BC4F61] - (.Google LLC - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [1622000] [PID.9112] =>.Google LLC®
[MD5.30FD3FA43DCAA081124E071980BC4F61] - (.Google LLC - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [1622000] [PID.6296] =>.Google LLC®
[MD5.30FD3FA43DCAA081124E071980BC4F61] - (.Google LLC - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [1622000] [PID.7656] =>.Google LLC®
[MD5.30FD3FA43DCAA081124E071980BC4F61] - (.Google LLC - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [1622000] [PID.8748] =>.Google LLC®
[MD5.30FD3FA43DCAA081124E071980BC4F61] - (.Google LLC - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [1622000] [PID.9596] =>.Google LLC®
[MD5.30FD3FA43DCAA081124E071980BC4F61] - (.Google LLC - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [1622000] [PID.4308] =>.Google LLC®
[MD5.30FD3FA43DCAA081124E071980BC4F61] - (.Google LLC - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [1622000] [PID.4228] =>.Google LLC®
[MD5.B72485A9FEE455ECBAA9D1C17E1A33CD] - (.Nicolas Coolman - ZHPSuite.) -- C:\Users\kasper.kasper-PC\Desktop\ZHPSuite.exe [3438976] [PID.1544] [Unsigned] =>.Nicolas Coolman

---\\ CHROME, Démarrage, Recherche, Extensions (16) - 1s
G2 - GCE: Preference [kasper][User Data\Default\Extensions] [aapocclcgogkmnckokdopfmhonfmgoek] =>.Google Inc. {Slides}
G2 - GCE: Preference [kasper][User Data\Default\Extensions] [aohghmighlieiainnegkcijnfilokake] =>.Google Inc. {Docs}
G2 - GCE: Preference [kasper][User Data\Default\Extensions] [apdfllckaahabafndbhieahigkjlhalf] http://drive.google.com/ =>.Google Inc. {Drive}
G2 - GCE: Preference [kasper][User Data\Default\Extensions] [blpcfgokakmgnkcojhhkbfbldkacnbeo] http://www.youtube.com =>.Youtube {Youtube}
G2 - GCE: Preference [kasper][User Data\Default\Extensions] [cfhdojbkjhnklbpkdaibdccddilifddb] eyeo GmbH =>.eyeo GmbH {AdBlock Plus}
G2 - GCE: Preference [kasper][User Data\Default\Extensions] [felcaaldnbdncclmgdcncolpebgiejap] =>.Google Inc. {Sheets}
G2 - GCE: Preference [kasper][User Data\Default\Extensions] [ghbmnnjooekpmoecnnnilnnbdlolhkhi] =>.Google Inc. {Docs hors connexion}
G2 - GCE: Preference [kasper][User Data\Default\Extensions] [hnlkiofnhhoahaiimdicppgemmmomijo] Qwant =>.Qwant
G2 - GCE: Preference [kasper][User Data\Default\Extensions] [nmmhkkegccagdldgiimedpiccmgmieda] =>.Google Inc. {Wallet}
G2 - GCE: Preference [kasper][User Data\Default\Extensions] [onhiacboedfinnofagfgoaanfedhmfab] Reverso Context =>.Reverso.net
G2 - GCE: Preference [kasper][User Data\Default\Extensions] [pjkljhegncpnkpknbcohdijeoejaedia] http://mail.google.com/ =>.Google Inc. {Gmail}
G2 - GCE: Preference [kasper][User Data\Default\Extensions] [pkedcjkdefgpdelpbcmbmeomcjbeemfm] Chrome Media Router =>.Google Inc.
G2 - GCE: Preference [kasper][User Data\Default\Local Extension Settings] [cfhdojbkjhnklbpkdaibdccddilifddb] =>.eyeo GmbH {AdBlock Plus}
G2 - GCE: Preference [kasper][User Data\Default\Local Extension Settings] [ghbmnnjooekpmoecnnnilnnbdlolhkhi] =>.Google Inc. {Docs hors connexion}
G2 - GCE: Preference [kasper][User Data\Default\Managed Extension Settings] [cfhdojbkjhnklbpkdaibdccddilifddb] =>.eyeo GmbH {AdBlock Plus}
G2 - GCE: Preference [kasper][User Data\Default\Sync Extension Settings] [pkedcjkdefgpdelpbcmbmeomcjbeemfm] =>.Google Inc. {Chrome Media Router}

---\\ FIREFOX, Plugins,Démarrage,Recherche,Extensions (1) - 1s
P2 - EXT FILE: (.Microsoft Corporation - The plugin allows you to have a better expe.) -- C:\Program Files\Mozilla Firefox\Plugins\npMeetingJoinPluginOC.dll =>.Microsoft Corporation®

---\\ INTERNET EXPLORER,Démarrage,Recherche,URLSearchHook (10) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.search.yahoo.com/ =>.Yahoo! Inc.
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R3 - URLSearchHook: (no name)[HKCU] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (11.00.18362.836 (WinBuild.160101.0800)) -- C:\Windows\System32\ieframe.dll =>.Microsoft Corporation
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 0

---\\ INTERNET EXPLORER, Site de confiance et site sensible (1) - 0s
~ Microsoft Internet Explorer Restricted Site(s) Domains: 0(Good) / 0(Bad)

---\\ INTERNET EXPLORER,Proxy Management (3) - 0s
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 =>.Default.Value
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 =>.Default.Value
R5 - HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet\ManualProxies [] =>.Microsoft

---\\ INTERNET EXPLORER,IniFiles, Autoloading Programs (3) - 0s
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: VMApplet=C:\WINDOWS\system32\SystemPropertiesPerformance.exe (.Microsoft Corporation.) =>.Microsoft Corporation

---\\ ÉTUDE DU FICHIER HOSTS (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (21)

---\\ BROWSER HELPER OBJECT DE NAVIGATEUR (BHO) (2) - 0s
O2 - BHO: Skype for Business Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} . (.Microsoft Corporation - Skype for Business.) -- C:\Program Files\Microsoft Office\Office16\OCHelper.dll =>.Microsoft®
O2 - BHO: Microsoft OneDrive for Business Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} . (.Microsoft Corporation - Microsoft OneDrive for Business Extensions.) -- C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL =>.Microsoft Corporation®

---\\ RACCOURCIS GLOBAL STARTUP (45) - 9s
O4 - GS\Desktop [kasper]: uTorrent Web.lnk . (.BitTorrent Inc. - µTorrent Web.) C:\Users\kasper.kasper-PC\AppData\Roaming\uTorrent Web\utweb.exe [Unsigned] =>BitTorrent (P2P)
O4 - GS\Desktop [kasper]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\kasper.kasper-PC\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Desktop [kasper]: ZHPSuite.lnk . (.Nicolas Coolman - ZHPSuite.) C:\Users\kasper.kasper-PC\AppData\Roaming\ZHP\ZHPSuite.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [kasper]: Google Chrome.lnk . (.Google LLC - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google LLC®
O4 - GS\sendTo [kasper]: Destinataire de télécopie.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\System32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [kasper]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [kasper]: Transfert de fichiers Bluetooth.LNK . (.Microsoft Corporation - Transfère les fichiers entre l.) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation
O4 - GS\TaskBar [kasper]: Google Chrome.lnk . (.Google LLC - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google LLC®
O4 - GS\TaskBar [kasper]: Windows Fax and Scan.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe =>.Microsoft Corporation
O4 - GS\Startup [kasper]: Canon IJ Status Monitor Canon MG6200 series Printer.lnk . (.Microsoft Corporation - Processus hôte Windows (Rundll32).) C:\WINDOWS\system32\rundll32.exe C:\Users\KASPER~1.KAS\CNMSSC~1.DLL,SMStarterEntryPoint USB001;Canon MG6200 series Printer;cnmss Canon MG6200 series Printer (Local).dll;Canon IJ Status Monitor Canon MG6200 series Printer.lnk =>..Microsoft Corporation
O4 - GS\Programs [kasper]: OneDrive.lnk . (.Microsoft Corporation - Microsoft OneDrive.) C:\Users\kasper.kasper-PC\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation®
O4 - GS\Programs [kasper]: uTorrent Web.lnk . (.BitTorrent Inc. - µTorrent Web.) C:\Users\kasper.kasper-PC\AppData\Roaming\uTorrent Web\utweb.exe [Unsigned] =>BitTorrent (P2P)
O4 - GS\CommonDesktop [Public]: CCleaner.lnk . (.Piriform Ltd - CCleaner.) C:\Program Files\CCleaner\CCleaner.exe =>.Piriform Software Ltd®
O4 - GS\CommonDesktop [Public]: OpenVPN GUI.lnk . (...) C:\Program Files\OpenVPN\bin\openvpn-gui.exe [Unsigned]
O4 - GS\CommonDesktop [Public]: Revo Uninstaller.lnk . (.VS Revo Group - Revo Uninstaller.) C:\Program Files\VS Revo Group\Revo Uninstaller\RevoUnin.exe =>.VS Revo Group®
O4 - GS\Programs [Public]: OneDrive.lnk . (.Microsoft Corporation - Microsoft OneDrive.) C:\Users\kasper.kasper-PC\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation®
O4 - GS\Programs [Public]: uTorrent Web.lnk . (.BitTorrent Inc. - µTorrent Web.) C:\Users\kasper.kasper-PC\AppData\Roaming\uTorrent Web\utweb.exe [Unsigned] =>BitTorrent (P2P)
O4 - GS\Accessories [Public]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft®
O4 - GS\Accessories [Public]: Notepad.lnk . (.Microsoft Corporation - Bloc-notes.) C:\WINDOWS\system32\notepad.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Math Input Panel.lnk . (.Microsoft Corporation - Math Input Panel Accessory.) C:\Program Files\Common Files\Microsoft Shared\Ink\mip.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Mobility Center.lnk . (.Microsoft Corporation - Centre de mobilité Windows.) C:\WINDOWS\system32\mblctr.exe /open =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Paint.lnk . (.Microsoft Corporation - Paint.) C:\WINDOWS\system32\mspaint.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Quick Assist.lnk . (.Microsoft Corporation - Quick Assist.) C:\WINDOWS\system32\quickassist.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Remote Desktop Connection.lnk . (.Microsoft Corporation - Connexion Bureau à distance.) C:\WINDOWS\system32\mstsc.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Snipping Tool.lnk . (.Microsoft Corporation - Outil Capture d’écran.) C:\WINDOWS\system32\SnippingTool.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Steps Recorder.lnk . (.Microsoft Corporation - Enregistreur d’actions.) C:\WINDOWS\system32\psr.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Windows Fax and Scan.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Wordpad.lnk . (.Microsoft Corporation - Application Windows Wordpad.) C:\Program Files\Windows NT\Accessories\wordpad.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: XPS Viewer.lnk . (.Microsoft Corporation - Visionneuse XPS.) C:\WINDOWS\system32\xpsrchvw.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Character Map.lnk . (.Microsoft Corporation - Table des caractères.) C:\WINDOWS\system32\charmap.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Access 2016.lnk . (...) C:\WINDOWS\Installer\{90160000-0011-0000-0000-0000000FF1CE}\accicons.exe =>.Microsoft®
O4 - GS\ProgramsCommon [Public]: Acrobat Reader DC.lnk . (.Adobe Systems Incorporated - Adobe Acrobat Reader DC.) C:\Program Files\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe =>.Adobe Inc.®
O4 - GS\ProgramsCommon [Public]: Acrobat Reader DC.lnk . (.Flexera Software LLC - InstallShield.) C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-AC0F074E4100}\SC_Reader.ico [Unsigned] =>.Flexera Software LLC
O4 - GS\ProgramsCommon [Public]: Excel 2016.lnk . (...) C:\WINDOWS\Installer\{90160000-0011-0000-0000-0000000FF1CE}\xlicons.exe =>.Microsoft®
O4 - GS\ProgramsCommon [Public]: Google Chrome.lnk . (.Google LLC - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google LLC®
O4 - GS\ProgramsCommon [Public]: Immersive Control Panel.lnk . (.Microsoft Corporation - Windows Control Panel.) C:\WINDOWS\System32\Control.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: OneDrive Entreprise.lnk . (...) C:\WINDOWS\Installer\{90160000-0011-0000-0000-0000000FF1CE}\grv_icons.exe =>.Microsoft®
O4 - GS\ProgramsCommon [Public]: OneNote 2016.lnk . (...) C:\WINDOWS\Installer\{90160000-0011-0000-0000-0000000FF1CE}\joticon.exe =>.Microsoft®
O4 - GS\ProgramsCommon [Public]: Outlook 2016.lnk . (...) C:\WINDOWS\Installer\{90160000-0011-0000-0000-0000000FF1CE}\outicon.exe =>.Microsoft®
O4 - GS\ProgramsCommon [Public]: PowerPoint 2016.lnk . (...) C:\WINDOWS\Installer\{90160000-0011-0000-0000-0000000FF1CE}\pptico.exe =>.Microsoft®
O4 - GS\ProgramsCommon [Public]: Publisher 2016.lnk . (...) C:\WINDOWS\Installer\{90160000-0011-0000-0000-0000000FF1CE}\pubs.exe =>.Microsoft®
O4 - GS\ProgramsCommon [Public]: Skype Entreprise 2016.lnk . (...) C:\WINDOWS\Installer\{90160000-0011-0000-0000-0000000FF1CE}\lyncicon.exe =>.Microsoft®
O4 - GS\ProgramsCommon [Public]: WinZip.lnk . (.WinZip Computing - WinZip.) C:\Program Files\WinZip\winzip32.exe =>.Corel Corporation®
O4 - GS\ProgramsCommon [Public]: Word 2016.lnk . (...) C:\WINDOWS\Installer\{90160000-0011-0000-0000-0000000FF1CE}\wordicon.exe =>.Microsoft®

---\\ MODIFICATION DOMAINE/ADRESSES (DNS) (7) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpDomain = lan =>.Local Domain
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{57adb54d-d5e9-4dd6-afb2-1d6f433d8a05}: DhcpNameServer = 192.168.1.254 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{b7fe54c0-cf99-4c5e-8888-ee1a79e5ca95}: DhcpNameServer = 193.183.98.154 185.83.217.248 =>.Sweden Stockholm Iperweb Ltd
O17 - HKLM\System\CCS\Services\Tcpip\..\{e88873ef-58cc-4ec6-8145-5bd7e5cd7336}: DhcpNameServer = 192.168.1.254 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{57adb54d-d5e9-4dd6-afb2-1d6f433d8a05}: DhcpDomain = lan =>.Local Domain
O17 - HKLM\System\CCS\Services\Tcpip\..\{e88873ef-58cc-4ec6-8145-5bd7e5cd7336}: DhcpDomain = lan =>.Local Domain

---\\ PROTOCOLE ADDITIONNEL (26) - 1s
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll =>.Microsoft®
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} . (.Microsoft Corporation - Microsoft Office 2016 component.) -- C:\Program Files\Microsoft Office\Office16\MSOSB.DLL =>.Microsoft Corporation®
O18 - Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} . (.Microsoft Corporation - Microsoft Office 2016 component.) -- C:\Program Files\Microsoft Office\Office16\MSOSB.DLL =>.Microsoft Corporation®
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: tbauth - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\System32\tbauth.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\System32\tbauth.dll [Unsigned] =>.Microsoft Corporation
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll [Unsigned] =>.Microsoft Corporation
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll [Unsigned] =>.Microsoft Corporation
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll [Unsigned] =>.Microsoft Corporation
O18 - Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE16\MSOXMLMF.DLL =>.Microsoft®

---\\ REGISTRE AppInit_DLLs et Winlogon Notify (1) - 0s
O20 - Winlogon : UserInit . (.Microsoft Corporation - Application d’ouverture de session Userinit.) - C:\WINDOWS\system32\userinit.exe =>.Microsoft Corporation

---\\ CLÉ DE REGISTRE EXPLORER StartupApproved (20) - 1s
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:CCleaner Smart Cleaning =>.Piriform Ltd
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:OneDrive =>.Microsoft Corporation
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:utweb
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Chromium =>.Chromium Team
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:ShuameDaemon
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\StartupFolder]:Canon IJ Status Monitor Canon MG6200 series Printer.lnk
[HKEY_USERS\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:CCleaner Smart Cleaning =>.Piriform Ltd
[HKEY_USERS\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:OneDrive =>.Microsoft Corporation
[HKEY_USERS\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:utweb
[HKEY_USERS\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Chromium =>.Chromium Team
[HKEY_USERS\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:ShuameDaemon
[HKEY_USERS\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\StartupFolder]:Canon IJ Status Monitor Canon MG6200 series Printer.lnk
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:SecurityHealth =>.Microsoft Corporation
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Logitech Download Assistant =>.Logitech Inc.
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:RTHDVCPL =>.Realtek Semiconductor Corp.
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:WinZip PreLoader =>.WinZip Computing
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:WinZip UN =>.Corel Corporation
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:NvBackend =>.nVidia Corporation
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:ShadowPlay =>.nVidia Corporation
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:NUSB3MON

---\\ COMPOSANTS ACTIVESETUP INSTALLÉS (ASIC) (5) - 1s
O40 - ASIC: Microsoft Windows Media Player 12.0 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\System32\wmpdxm.dll [Unsigned] =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Utilitaire d’installation du Lecteur Window.) -- C:\Windows\System32\unregmp2.exe [Unsigned] =>.Microsoft Corporation
O40 - ASIC: Web Platform Customizations - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe [Unsigned] =>.Microsoft Corporation
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\System32\mscories.dll =>.Microsoft Corporation®
O40 - ASIC: Google Chrome - {8A69D345-D564-463c-AFF1-A69D9E530F96} . (.Google LLC - Google Chrome Installer.) -- C:\Program Files\Google\Chrome\Application\83.0.4103.61\Installer\chrmstp.exe =>.Google LLC®

---\\ LOGICIELS INSTALLÉS (164) - 40s
O42 - Logiciel: 7-Zip 16.04 - (.Igor Pavlov.) [HKLM] -- 7-Zip [Unsigned] =>.Igor Pavlov
O42 - Logiciel: Adobe Acrobat Reader DC - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AC0F074E4100} [Unsigned] =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-0804-1033-1959-001824369436} [Unsigned] =>.Adobe Systems Incorporated (Hidden)
O42 - Logiciel: Canon MG6200 series MP Drivers - (.Canon Inc..) [HKLM] -- {1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG6200_series =>.Canon Inc.®
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner =>.Piriform Software Ltd®
O42 - Logiciel: Definition Update for Microsoft Office 2016 (KB3115407) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{63E25EBC-99BA-45E7-A0D6-F69D2A55FFDD} =>.Microsoft®
O42 - Logiciel: Diag version 1.1.1.0 - (.Adlice Software.) [HKLM] -- 10DBD048-433A-4BC3-951F-055296F077B3_is1 =>.Adlice®
O42 - Logiciel: Google Chrome - (.Google LLC.) [HKLM] -- Google Chrome =>.Google LLC®
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} [Unsigned] =>.Google Inc. (Hidden)
O42 - Logiciel: Google Update Helper - (.Google LLC.) [HKLM] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} [Unsigned] =>.Google LLC (Hidden)
O42 - Logiciel: Hard Disk Sentinel PRO - (.Janos Mathe.) [HKLM] -- Hard Disk Sentinel_is1 =>.Janos Mathe®
O42 - Logiciel: Herramientas de corrección de Microsoft Office 2016: español - (.Microsoft Corporation.) [HKLM] -- {90160000-001F-0C0A-0000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Kodi - (.XBMC Foundation.) [HKCU] -- Kodi [Unsigned] =>.XBMC Foundation
O42 - Logiciel: Microsoft Access MUI (French) 2016 - (.Microsoft Corporation.) [HKLM] -- {90160000-0015-040C-0000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft ASP.NET MVC 4 Runtime - (.Microsoft Corporation.) [HKLM] -- {3FE312D5-B862-40CE-8E4E-A6D8ABF62736} [Unsigned] =>.Microsoft Corporation
O42 - Logiciel: Microsoft DCF MUI (French) 2016 - (.Microsoft Corporation.) [HKLM] -- {90160000-0090-040C-0000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Excel MUI (French) 2016 - (.Microsoft Corporation.) [HKLM] -- {90160000-0016-040C-0000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Groove MUI (French) 2016 - (.Microsoft Corporation.) [HKLM] -- {90160000-00BA-040C-0000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft InfoPath MUI (French) 2016 - (.Microsoft Corporation.) [HKLM] -- {90160000-0044-040C-0000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office Korrekturhilfen 2016 – Deutsch - (.Microsoft Corporation.) [HKLM] -- {90160000-001F-0407-0000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office OSM MUI (French) 2016 - (.Microsoft Corporation.) [HKLM] -- {90160000-00E1-040C-0000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office OSM UX MUI (French) 2016 - (.Microsoft Corporation.) [HKLM] -- {90160000-00E2-040C-0000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office Professional Plus 2016 - (.Microsoft Corporation.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office Professionnel Plus 2016 - (.Microsoft Corporation.) [HKLM] -- Office16.PROPLUS =>.Microsoft Corporation®
O42 - Logiciel: Microsoft Office Proofing (French) 2016 - (.Microsoft Corporation.) [HKLM] -- {90160000-002C-040C-0000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office Proofing Tools 2016 - English - (.Microsoft Corporation.) [HKLM] -- {90160000-001F-0409-0000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office Proofing Tools 2016 - اللغة العربية - (.Microsoft Corporation.) [HKLM] -- {90160000-001F-0401-0000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office Shared MUI (French) 2016 - (.Microsoft Corporation.) [HKLM] -- {90160000-006E-040C-0000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft OneDrive - (.Microsoft Corporation.) [HKCU] -- OneDriveSetup.exe =>.Microsoft Corporation®
O42 - Logiciel: Microsoft OneNote MUI (French) 2016 - (.Microsoft Corporation.) [HKLM] -- {90160000-00A1-040C-0000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Outlook MUI (French) 2016 - (.Microsoft Corporation.) [HKLM] -- {90160000-001A-040C-0000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft PowerPoint MUI (French) 2016 - (.Microsoft Corporation.) [HKLM] -- {90160000-0018-040C-0000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Publisher MUI (French) 2016 - (.Microsoft Corporation.) [HKLM] -- {90160000-0019-040C-0000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Skype for Business MUI (French) 2016 - (.Microsoft Corporation.) [HKLM] -- {90160000-012B-040C-0000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 - (.Microsoft Corporation.) [HKLM] -- {F0C3E5D1-1ADE-321E-8167-68EF0DE699A5} [Unsigned] =>.Microsoft Corporation
O42 - Logiciel: Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 - (.Microsoft Corporation.) [HKLM] -- {ce085a78-074e-4823-8dc1-8a721b94b76d} =>.Microsoft®
O42 - Logiciel: Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 - (.Microsoft Corporation.) [HKLM] -- {F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 - (.Microsoft Corporation.) [HKLM] -- {13A4EE12-23EA-3371-91EE-EFB36DDFFF3E} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual C++ 2017 Redistributable (x86) - 14.16.27012 - (.Microsoft Corporation.) [HKLM] -- {67f67547-9693-4937-aa13-56e296bd40f6} =>.Microsoft Corporation®
O42 - Logiciel: Microsoft Visual C++ 2017 X86 Additional Runtime - 14.16.27012 - (.Microsoft Corporation.) [HKLM] -- {DD6BC8D7-4582-4677-BAAC-4AB933E6C315} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual C++ 2017 X86 Minimum Runtime - 14.16.27012 - (.Microsoft Corporation.) [HKLM] -- {7B77DE7F-5219-435E-9CE1-FC77F1D4CCAD} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Word MUI (French) 2016 - (.Microsoft Corporation.) [HKLM] -- {90160000-001B-040C-0000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Mises à jour NVIDIA 2.11.4.125 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update [Unsigned] =>.NVIDIA Corporation (Hidden)
O42 - Logiciel: Mp3tag v2.95 - (.Florian Heidenreich.) [HKLM] -- Mp3tag [Unsigned] =>.Florian Heidenreich
O42 - Logiciel: NVIDIA GeForce Experience 2.11.4.125 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience [Unsigned] =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA GeForce Experience Service - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GfExperienceService [Unsigned] =>.NVIDIA Corporation (Hidden)
O42 - Logiciel: NVIDIA Install Application - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer [Unsigned] =>.NVIDIA Corporation (Hidden)
O42 - Logiciel: NVIDIA LED Visualizer 1.0 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.LEDVisualizer [Unsigned] =>.NVIDIA Corporation (Hidden)
O42 - Logiciel: NVIDIA Logiciel système PhysX 9.13.1220 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX [Unsigned] =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA Network Service - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Network.Service [Unsigned] =>.NVIDIA Corporation (Hidden)
O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM] -- {80407BA7-7763-4395-AB98-5233F1B34E65} [Unsigned] =>.NVIDIA Corporation (Hidden)
O42 - Logiciel: NVIDIA Pilote 3D Vision 342.01 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision [Unsigned] =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA Pilote du contrôleur 3D Vision 340.50 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB [Unsigned] =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA Pilote graphique 342.01 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver [Unsigned] =>.NVIDIA Corporation
O42 - Logiciel: NVIDIA ShadowPlay 2.11.4.125 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShadowPlay [Unsigned] =>.NVIDIA Corporation (Hidden)
O42 - Logiciel: NVIDIA Stereoscopic 3D Driver - (.NVIDIA Corporation.) [HKLM] -- NVIDIAStereo =>.NVIDIA Corporation® (Hidden)
O42 - Logiciel: NVIDIA Update Core - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Update.Core [Unsigned] =>.NVIDIA Corporation (Hidden)
O42 - Logiciel: NVIDIA Virtual Audio 1.2.41 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver [Unsigned] =>.NVIDIA Corporation (Hidden)
O42 - Logiciel: OnePlus USB Drivers 1.00 - (.OnePlus, Inc.) [HKLM] -- OnePlus USB Drivers 1.00 [Unsigned] =>.OnePlus, Inc
O42 - Logiciel: Outils de vérification linguistique 2016 de Microsoft Office - Français - (.Microsoft Corporation.) [HKLM] -- {90160000-001F-040C-0000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Package de pilotes Windows - OnePlus, Inc. (WinUSB) AndroidUsbDeviceClass - (.OnePlus, Inc..) [HKLM] -- 59AFF6524BE5C0983F2711DEB8D25D511D4F4924 =>.Microsoft Windows®
O42 - Logiciel: Panneau de configuration NVIDIA 342.01 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel [Unsigned] =>.NVIDIA Corporation (Hidden)
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} =>.Realtek Semiconductor Corp.®
O42 - Logiciel: Renee Undeleter 2016.8.5.209 - (.Rene.E Laboratory.) [HKLM] -- {EE1F41BE-6DBD-44AE-9F97-4D7F9227329D}_is1 [Unsigned] =>.Rene.E Laboratory
O42 - Logiciel: Renesas Electronics USB 3.0 Host Controller Driver - (.Renesas Electronics Corporation.) [HKLM] -- {5442DAB8-7177-49E1-8B22-09A049EA5996} [Unsigned] =>.Renesas Electronics Corporation (Hidden)
O42 - Logiciel: Renesas Electronics USB 3.0 Host Controller Driver - (.Renesas Electronics Corporation.) [HKLM] -- InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996} [Unsigned] =>.Renesas Electronics Corporation
O42 - Logiciel: Revo Uninstaller 2.0.0 - (.VS Revo Group, Ltd..) [HKLM] -- {A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1 [Unsigned] =>.VS Revo Group, Ltd.
O42 - Logiciel: RogueKiller version 13.1.4.0 - (.Adlice Software.) [HKLM] -- 8B3D7924-ED89-486B-8322-E8594065D5CB_is1 =>.Adlice®
O42 - Logiciel: Security Update for Microsoft Access 2016 (KB4484167) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{C754D47E-7927-4A07-AAD2-93794C745001} =>.Microsoft®
O42 - Logiciel: Security Update for Microsoft Access 2016 (KB4484167) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0015-040C-0000-0000000FF1CE}_Office16.PROPLUS_{C754D47E-7927-4A07-AAD2-93794C745001} =>.Microsoft®
O42 - Logiciel: Security Update for Microsoft Excel 2016 (KB4484338) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{213E4EFC-A23A-4104-9BEC-D8D1FB6056EA} =>.Microsoft®
O42 - Logiciel: Security Update for Microsoft Excel 2016 (KB4484338) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0016-040C-0000-0000000FF1CE}_Office16.PROPLUS_{213E4EFC-A23A-4104-9BEC-D8D1FB6056EA} =>.Microsoft®
O42 - Logiciel: Security Update for Microsoft Excel 2016 (KB4484338) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0018-040C-0000-0000000FF1CE}_Office16.PROPLUS_{213E4EFC-A23A-4104-9BEC-D8D1FB6056EA} =>.Microsoft®
O42 - Logiciel: Security Update for Microsoft Excel 2016 (KB4484338) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-001B-040C-0000-0000000FF1CE}_Office16.PROPLUS_{213E4EFC-A23A-4104-9BEC-D8D1FB6056EA} =>.Microsoft®
O42 - Logiciel: Security Update for Microsoft Office 2016 (KB2920727) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{ADA643B8-91E7-42FD-8339-3FDC73A3ABE4} =>.Microsoft®
O42 - Logiciel: Security Update for Microsoft Office 2016 (KB3085538) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{57F91827-505E-4313-A3DF-EE6BD0B41A26} =>.Microsoft®
O42 - Logiciel: Security Update for Microsoft Office 2016 (KB3114690) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{0431DE35-1781-4633-B69D-D547BB412C65} =>.Microsoft®
O42 - Logiciel: Security Update for Microsoft Office 2016 (KB3128012) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{20E47D64-5B4C-4B6A-999F-800947E8B0FF} =>.Microsoft®
O42 - Logiciel: Security Update for Microsoft Office 2016 (KB3213551) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{EE3EE85E-5775-4931-8033-39507E587EB9} =>.Microsoft®
O42 - Logiciel: Security Update for Microsoft Office 2016 (KB3213551) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-006E-040C-0000-0000000FF1CE}_Office16.PROPLUS_{EE3EE85E-5775-4931-8033-39507E587EB9} =>.Microsoft®
O42 - Logiciel: Security Update for Microsoft Office 2016 (KB4011574) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{3DA49786-67D8-4AF8-99C8-3FB85422706B} =>.Microsoft®
O42 - Logiciel: Security Update for Microsoft Office 2016 (KB4011574) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-006E-040C-0000-0000000FF1CE}_Office16.PROPLUS_{3DA49786-67D8-4AF8-99C8-3FB85422706B} =>.Microsoft®
O42 - Logiciel: Security Update for Microsoft Office 2016 (KB4022162) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{5D895D3E-C2CC-4094-A562-D7E0F270BA8F} =>.Microsoft®
O42 - Logiciel: Security Update for Microsoft Office 2016 (KB4022176) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{2899A276-2580-4D03-B981-4F7187CCE052} =>.Microsoft®
O42 - Logiciel: Security Update for Microsoft Office 2016 (KB4022176) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-006E-040C-0000-0000000FF1CE}_Office16.PROPLUS_{2899A276-2580-4D03-B981-4F7187CCE052} =>.Microsoft®
O42 - Logiciel: Security Update for Microsoft Office 2016 (KB4484214) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{3C75EE79-9C9C-4304-9DEE-21451AD96759} =>.Microsoft®
O42 - Logiciel: Security Update for Microsoft Office 2016 (KB4484214) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-006E-040C-0000-0000000FF1CE}_Office16.PROPLUS_{3C75EE79-9C9C-4304-9DEE-21451AD96759} =>.Microsoft®
O42 - Logiciel: Security Update for Microsoft Office 2016 (KB4484258) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{DFE61922-AEB0-4907-8705-1882D03ED0C8} =>.Microsoft®
O42 - Logiciel: Security Update for Microsoft Publisher 2016 (KB4011097) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{8615D87B-5EA1-45A9-B3AB-EFA0B21725BD} =>.Microsoft®
O42 - Logiciel: Security Update for Microsoft Publisher 2016 (KB4011097) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0019-040C-0000-0000000FF1CE}_Office16.PROPLUS_{8615D87B-5EA1-45A9-B3AB-EFA0B21725BD} =>.Microsoft®
O42 - Logiciel: Security Update for Microsoft Visio 2016 (KB4484244) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{359DC6CC-0409-474C-9980-87890763CCAE} =>.Microsoft®
O42 - Logiciel: SHIELD Streaming - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv [Unsigned] =>.NVIDIA Corporation (Hidden)
O42 - Logiciel: SHIELD Wireless Controller Driver - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController [Unsigned] =>.NVIDIA Corporation (Hidden)
O42 - Logiciel: Taalprogramma's voor Microsoft Office 2016 - Nederlands - (.Microsoft Corporation.) [HKLM] -- {90160000-001F-0413-0000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: TAP-Windows 9.21.2 - (.OpenVPN Technologie.) [HKLM] -- TAP-Windows [Unsigned] =>.OpenVPN Technologie
O42 - Logiciel: Telegram Desktop version 1.8.4 - (.Telegram FZ-LLC.) [HKCU] -- {53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1 [Unsigned] =>.Telegram FZ-LLC
O42 - Logiciel: Update for Microsoft Office 2016 (KB2920678) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{659F8DC4-0FD7-4C3C-9011-19B9FB400154} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB2920712) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{0471C03C-B563-4F44-83E9-4D9AF243E1D3} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB2920717) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{0AEF1C21-E6A9-464F-B038-E28DB69B6DCF} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB2920720) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{1471A699-A87C-454C-B227-00B48E5BA75B} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB2920724) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{B5FD5FBF-150F-4BD7-A2D2-F015D1069FC5} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB3114528) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{2ED36335-0C97-4193-9B6F-2144FE7F4641} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB3114852) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{0B8698CD-3C5C-4D40-93F5-0E04F3A43568} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB3114903) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{B557BEA1-7AB8-4CA4-B9EB-7011EB0EEB4B} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB3115081) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{093F65D6-3F74-4E83-87EC-F423D90A8037} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB3115276) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{FEAC1D0D-7908-457B-A000-ED3E6CCBD7A8} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB3118262) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{3BA490D9-062E-4F6A-BEAF-8F052D1353F9} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB3118263) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{26C2A3F8-CDE2-4AEC-9821-91BC7BACAD72} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB3118264) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{BEDCC8A6-C1B2-4BE8-AE25-9D658C01D7B2} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB3141456) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{05A8733C-10A6-4859-ACE1-95BFD2D14759} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB3178666) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{E1849F24-F29F-4AAA-AAFE-7469BD68F24F} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB3191929) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{A07FCC06-F05F-4072-8DCD-123EC4CE45A4} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB3213650) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{435911D8-F21C-43AB-873B-83351C5F68C0} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB4011035) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{863D8900-6BE5-4E0D-8711-AB97431E579D} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB4011225) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{CDC7136D-F6B1-4CDD-B4B6-BF05AA41C126} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB4011259) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{A664A3EC-D7BF-4FED-808B-4A6C749A731C} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB4011629) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{C6A85697-D6F3-4300-A024-60B1A9181727} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB4011629) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0016-040C-0000-0000000FF1CE}_Office16.PROPLUS_{C6A85697-D6F3-4300-A024-60B1A9181727} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB4011634) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{DC92C858-FE17-4371-8934-E6989005DCB9} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB4011669) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{E46E9D00-0EF3-4A5A-91D6-D579BDE7E73F} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB4022161) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{1C7D5A6C-965E-44E8-BBFA-6E177584D284} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB4022193) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{D28C9F0B-8F57-4FAD-9587-07B50F2F18E6} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB4032254) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{CDB13E57-DC07-4DD1-99A6-1F1B89F3671F} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB4461435) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{9B6086AF-9606-4037-98E0-88549FEB0AE9} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB4461435) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0090-040C-0000-0000000FF1CE}_Office16.PROPLUS_{9B6086AF-9606-4037-98E0-88549FEB0AE9} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB4462119) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{449408A3-4F98-4C4A-BE7B-7F7411BC22B3} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB4464535) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{A8ECEDB7-89A3-4D5F-850C-32476AC57CB6} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB4464538) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{8F664455-D2A4-48E3-AD8B-CC27112A89CB} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB4464538) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-001F-0401-0000-0000000FF1CE}_Office16.PROPLUS_{8F664455-D2A4-48E3-AD8B-CC27112A89CB} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB4464538) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-001F-0407-0000-0000000FF1CE}_Office16.PROPLUS_{8F664455-D2A4-48E3-AD8B-CC27112A89CB} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB4464538) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-001F-0409-0000-0000000FF1CE}_Office16.PROPLUS_{8F664455-D2A4-48E3-AD8B-CC27112A89CB} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB4464538) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-001F-040C-0000-0000000FF1CE}_Office16.PROPLUS_{8F664455-D2A4-48E3-AD8B-CC27112A89CB} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB4464538) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-001F-0413-0000-0000000FF1CE}_Office16.PROPLUS_{8F664455-D2A4-48E3-AD8B-CC27112A89CB} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB4464538) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-001F-0C0A-0000-0000000FF1CE}_Office16.PROPLUS_{8F664455-D2A4-48E3-AD8B-CC27112A89CB} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB4464586) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{8E793696-A1D0-4150-AE59-D6FDDFCDBDED} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB4475580) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{72D2A732-152C-4549-B4B3-33E77C9B496E} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB4475580) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-006E-040C-0000-0000000FF1CE}_Office16.PROPLUS_{72D2A732-152C-4549-B4B3-33E77C9B496E} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB4475588) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{E7942232-6E32-4746-BFFB-1C3E582D9EB8} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB4484138) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{5A33CE8E-DDE6-417B-A6B3-3299C8EA27D2} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB4484145) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{FB8176F8-4EDB-49B7-8147-4207782CCC14} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB4484325) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{3B72A045-826A-4BB2-9867-7787B5F689F0} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB4484327) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{0B26B1AC-736C-47A2-9940-0A1580A09609} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB4484328) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{F43ECBC2-425A-4F63-BFB4-16D30A6BDC3C} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Office 2016 (KB4484339) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{1A992105-9A4E-428F-9BED-4B3E73FFC398} =>.Microsoft®
O42 - Logiciel: Update for Microsoft OneDrive for Business (KB4022219) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{CC525E12-08E1-41AD-9638-02A079D48DF9} =>.Microsoft®
O42 - Logiciel: Update for Microsoft OneDrive for Business (KB4022219) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-00BA-040C-0000-0000000FF1CE}_Office16.PROPLUS_{CC525E12-08E1-41AD-9638-02A079D48DF9} =>.Microsoft®
O42 - Logiciel: Update for Microsoft OneNote 2016 (KB4475586) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{E88D2044-2824-4703-BD1B-358243192A26} =>.Microsoft®
O42 - Logiciel: Update for Microsoft OneNote 2016 (KB4475586) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-00A1-040C-0000-0000000FF1CE}_Office16.PROPLUS_{E88D2044-2824-4703-BD1B-358243192A26} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Outlook 2016 (KB4484343) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{4F408583-AE70-47E4-A06F-9914FAF92BAE} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Outlook 2016 (KB4484343) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-001A-040C-0000-0000000FF1CE}_Office16.PROPLUS_{4F408583-AE70-47E4-A06F-9914FAF92BAE} =>.Microsoft®
O42 - Logiciel: Update for Microsoft PowerPoint 2016 (KB4484337) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{FDA8355F-187D-4DF2-9F3E-DD9EBA6F6A1A} =>.Microsoft®
O42 - Logiciel: Update for Microsoft PowerPoint 2016 (KB4484337) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0018-040C-0000-0000000FF1CE}_Office16.PROPLUS_{FDA8355F-187D-4DF2-9F3E-DD9EBA6F6A1A} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Project 2016 (KB4484345) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{08A5B3F3-3C48-47B8-BB7E-E78E3F31C45B} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Visio Viewer 2016 (KB2920709) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{3936C875-7AE3-443C-8944-9884970398D2} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Word 2016 (KB4484341) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{F5C46B34-4B55-46CA-A844-A8814150C2F9} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Word 2016 (KB4484341) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-001A-040C-0000-0000000FF1CE}_Office16.PROPLUS_{F5C46B34-4B55-46CA-A844-A8814150C2F9} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Word 2016 (KB4484341) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-001B-040C-0000-0000000FF1CE}_Office16.PROPLUS_{F5C46B34-4B55-46CA-A844-A8814150C2F9} =>.Microsoft®
O42 - Logiciel: Update for Microsoft Word 2016 (KB4484341) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-012B-040C-0000-0000000FF1CE}_Office16.PROPLUS_{F5C46B34-4B55-46CA-A844-A8814150C2F9} =>.Microsoft®
O42 - Logiciel: Update for Skype for Business 2016 (KB4484286) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{3C07D08B-47AC-414D-B49F-FCBB383425EB} =>.Microsoft®
O42 - Logiciel: Update for Skype for Business 2016 (KB4484286) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90160000-012B-040C-0000-0000000FF1CE}_Office16.PROPLUS_{3C07D08B-47AC-414D-B49F-FCBB383425EB} =>.Microsoft®
O42 - Logiciel: Update for Windows 10 (KB4023057) - (.Microsoft Corporation.) [HKLM] -- {5F01BF33-E873-4B83-B2CC-E4DEF494073E} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: uTorrent Web - (.BitTorrent, Inc..) [HKCU] -- utweb =>BitTorrent (P2P)
O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM] -- VLC media player [Unsigned] =>.VideoLAN
O42 - Logiciel: WinZip 23.0 - (.Corel Corporation.) [HKLM] -- {CD95F661-A5C4-44F5-A6AA-ECDD91C2411C} [Unsigned] =>.Corel Corporation

---\\ CLÉ DE REGISTRE SOFTWARE HKCU & HKLM (140) - 40s
HKCU\Software\undefined =>.SUP.Downloader
HKLM\SOFTWARE\Wow6432Node\SAntivirus =>SUP.Optional.Segurazo
HKLM\SOFTWARE\SAntivirus =>SUP.Optional.Segurazo
HKLM\SOFTWARE\SegOption =>SUP.Optional.Segurazo
HKLM\SOFTWARE\7-Zip =>.Igor Pavlov
HKLM\SOFTWARE\Adobe =>.Adobe
HKLM\SOFTWARE\AGEIA Technologies =>.AGEIA Technologies
HKLM\SOFTWARE\ASUS =>.ASUS
HKLM\SOFTWARE\BlueStacksInstaller
HKLM\SOFTWARE\BottleTech =>.Bottle Tech Inc
HKLM\SOFTWARE\Canon =>.Canon
HKLM\SOFTWARE\Chromium =>.Chromium
HKLM\SOFTWARE\CVSM =>.Legitimate
HKLM\SOFTWARE\DefaultUserEnvironment =>.Microsoft Corporation
HKLM\SOFTWARE\Dolby =>.Dolby
HKLM\SOFTWARE\DRWNewTrial
HKLM\SOFTWARE\DTS =>.Creative Technology
HKLM\SOFTWARE\EASEUS =>.EaseUS Software
HKLM\SOFTWARE\Florian Heidenreich =>.Florian Heidenreich
HKLM\SOFTWARE\Fortemedia =>.Lugert Europe
HKLM\SOFTWARE\Google =>.Google
HKLM\SOFTWARE\HD Sentinel =>.HD Sentinel
HKLM\SOFTWARE\ICEpower =>.ICEpower
HKLM\SOFTWARE\IM Providers =>.IM Providers
HKLM\SOFTWARE\Intel =>.Intel
HKLM\SOFTWARE\Khronos =>.Khronos
HKLM\SOFTWARE\Knowles =>.Knowles Electronics
HKLM\SOFTWARE\Logishrd =>.LogiShrd
HKLM\SOFTWARE\Macrium =>.Macrium
HKLM\SOFTWARE\Macromedia =>.Macromedia
HKLM\SOFTWARE\Malwarebytes =>.Malwarebytes
HKLM\SOFTWARE\McAfee =>.McAfee Inc.
HKLM\SOFTWARE\MozillaPlugins =>.MozillaPlugins
HKLM\SOFTWARE\Nico Mak Computing =>.Nico Mak Computing
HKLM\SOFTWARE\Nuance =>.Nuance
HKLM\SOFTWARE\NVIDIA Corporation =>.nVidia Corporation
HKLM\SOFTWARE\ODBC =>.DB Connectivity Solutions
HKLM\SOFTWARE\OEM =>.OEM
HKLM\SOFTWARE\OmahaCompanyName =>.Omaha Company
HKLM\SOFTWARE\OpenVPN =>.OpenVPN Technologie
HKLM\SOFTWARE\OpenVPN-GUI =>.OpenVPN Technologie
HKLM\SOFTWARE\Partner =>.Google Inc.
HKLM\SOFTWARE\Piriform =>.Piriform
HKLM\SOFTWARE\Realtek =>.Realtek Semiconductor Corp.
HKLM\SOFTWARE\RegisteredApplications =>.Microsoft Corporation
HKLM\SOFTWARE\Rene.E Laboratory =>.Rene.E Laboratory
HKLM\SOFTWARE\SonicFocus =>.Sonic Focus
HKLM\SOFTWARE\SoundResearch =>.Sound Research
HKLM\SOFTWARE\SRS Labs =>.SRS Labs
HKLM\SOFTWARE\TAP-Windows =>.OpenVPN Technologie
HKLM\SOFTWARE\VideoLAN =>.VideoLan Team
HKLM\SOFTWARE\Volatile =>.Microsoft Corporation
HKLM\SOFTWARE\Windows =>.Microsoft Corporation
HKLM\SOFTWARE\Wizet
HKLM\SOFTWARE\wow6432node =>.Microsoft Corporation
HKLM\SOFTWARE\WOW6432Node\Rene.E Laboratory =>.Rene.E Laboratory
HKCU\SOFTWARE\7-Zip =>.Igor Pavlov
HKCU\SOFTWARE\Adobe =>.Adobe
HKCU\SOFTWARE\Akeo Consulting =>.Akeo Consulting
HKCU\SOFTWARE\AppDataLow =>.Microsoft Corporation
HKCU\SOFTWARE\AvastAdSDK =>.Avast Software s.r.o
HKCU\SOFTWARE\BlueStacksInstaller
HKCU\SOFTWARE\BottleTech =>.Bottle Tech Inc
HKCU\SOFTWARE\Canon =>.Canon
HKCU\SOFTWARE\Chromium =>.Chromium
HKCU\SOFTWARE\Google =>.Google
HKCU\SOFTWARE\IM Providers =>.IM Providers
HKCU\SOFTWARE\JEDI-VCL =>.JEDI Project
HKCU\SOFTWARE\Kodi =>.XBMC Foundation
HKCU\SOFTWARE\Local AppWizard-Generated Applications =>.ZWCAD
HKCU\SOFTWARE\LogiShrd =>.LogiShrd
HKCU\SOFTWARE\Macrium =>.Macrium
HKCU\SOFTWARE\Netscape =>.Netscape
HKCU\SOFTWARE\Nexon =>.Nexon
HKCU\SOFTWARE\Nico Mak Computing =>.Nico Mak Computing
HKCU\SOFTWARE\Nilings =>.Nilings
HKCU\SOFTWARE\NVIDIA Corporation =>.nVidia Corporation
HKCU\SOFTWARE\ODBC =>.DB Connectivity Solutions
HKCU\SOFTWARE\Opera Stable Offer =>.Opera Software
HKCU\SOFTWARE\Phrozen =>.Phrozen
HKCU\SOFTWARE\Piriform =>.Piriform
HKCU\SOFTWARE\QtProject =>.QtProject
HKCU\SOFTWARE\Realtek =>.Realtek Semiconductor Corp.
HKCU\SOFTWARE\Reason =>.Propellerhead
HKCU\SOFTWARE\RegisteredApplications =>.Microsoft Corporation
HKCU\SOFTWARE\RootGenius =>.RootGenius
HKCU\SOFTWARE\TelegramDesktop =>.TelegramDesktop
HKCU\SOFTWARE\Tencent =>.Tencent
HKCU\SOFTWARE\Trolltech =>.Trolltech
HKCU\SOFTWARE\VB and VBA Program Settings =>.Microsoft Corporation
HKCU\SOFTWARE\VS Revo Group =>.VS Revo Group
HKCU\SOFTWARE\WinZip Computing =>.WinZip Computing
HKCU\SOFTWARE\WOW6432Node =>.Microsoft Corporation
HKCU\SOFTWARE\ZHP =>.Nicolas Coolman
HKCU\SOFTWARE\AppDataLow\Software =>.Microsoft Corporation
HKU\.DEFAULT\SOFTWARE\Canon =>.Canon
HKU\.DEFAULT\SOFTWARE\Netscape =>.Netscape
HKU\.DEFAULT\SOFTWARE\Nico Mak Computing =>.Nico Mak Computing
HKU\.DEFAULT\SOFTWARE\NVIDIA Corporation =>.nVidia Corporation
HKU\.DEFAULT\SOFTWARE\Piriform =>.Piriform
HKU\.DEFAULT\SOFTWARE\WinZip Computing =>.WinZip Computing
HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\7-Zip =>.Igor Pavlov
HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\Adobe =>.Adobe
HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\Akeo Consulting =>.Akeo Consulting
HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\AppDataLow =>.Microsoft Corporation
HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\AvastAdSDK =>.Avast Software s.r.o
HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\BlueStacksInstaller
HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\BottleTech =>.Bottle Tech Inc
HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\Canon =>.Canon
HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\Chromium =>.Chromium
HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\Google =>.Google
HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\IM Providers =>.IM Providers
HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\JEDI-VCL =>.JEDI Project
HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\Kodi =>.XBMC Foundation
HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\Local AppWizard-Generated Applications =>.ZWCAD
HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\LogiShrd =>.LogiShrd
HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\Macrium =>.Macrium
HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\Netscape =>.Netscape
HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\Nexon =>.Nexon
HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\Nico Mak Computing =>.Nico Mak Computing
HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\Nilings =>.Nilings
HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\NVIDIA Corporation =>.nVidia Corporation
HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\ODBC =>.DB Connectivity Solutions
HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\Opera Stable Offer =>.Opera Software
HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\Phrozen =>.Phrozen
HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\Piriform =>.Piriform
HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\QtProject =>.QtProject
HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\Realtek =>.Realtek Semiconductor Corp.
HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\Reason =>.Propellerhead
HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\RegisteredApplications =>.Microsoft Corporation
HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\RootGenius =>.RootGenius
HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\TelegramDesktop =>.TelegramDesktop
HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\Tencent =>.Tencent
HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\Trolltech =>.Trolltech
HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\undefined =>.SUP.Downloader
HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\VB and VBA Program Settings =>.Microsoft Corporation
HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\VS Revo Group =>.VS Revo Group
HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\WinZip Computing =>.WinZip Computing
HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\WOW6432Node =>.Microsoft Corporation
HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\SOFTWARE\ZHP =>.Nicolas Coolman

---\\ PACKAGES (7) - 1s
C:\Program Files\WindowsApps\34791E63.CanonInkjetPrintUtility_2.9.0.1_neutral__6e5tt8cgb93ep - (.Canon Inc..) [09/03/2020][Canon Inkjet Print Utility] =>Canon Inc.
C:\Program Files\WindowsApps\CAF9E577.Plex_3.2.20.0_x86__aam28m9va5cke - (.Plex.) [03/02/2019][Plex] =>Plex
C:\Program Files\WindowsApps\Deezer.62021768415AF_4.19.30.0_x86__q7m17pa7q8kj0 - (.Deezer.) [29/05/2020][Deezer Music] =>Deezer
C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAccess_3.0.2204.0_x86__rz1tebttyb220 - (.Dolby Laboratories.) [15/11/2019][Dolby Access] =>Dolby Laboratories
C:\Program Files\WindowsApps\Fitbit.FitbitCoach_4.4.133.0_x86__6mqt6hf9g46tw - (.Fitbit.) [03/02/2019][Fitbit Coach] =>Fitbit
C:\Program Files\WindowsApps\HaukeGtze.7-ZipFileManagerUnofficial_1.1900.2.0_x86__6bk20wvc8rfx2 - (..) [10/04/2020][7-Zip File Manager (Unofficial)]
C:\Program Files\WindowsApps\ThumbmunkeysLtd.PhototasticCollage_3.10.1.0_x86__nfy108tqq3p12 - (.Thumbmunkeys Ltd.) [12/05/2020][Phototastic Collage]

---\\ CONTENU DES DOSSIERS PROGRAMMES (3701) - 665s
O43 - CFD: 23/06/2019 - [] D -- C:\Program Files\7-Zip =>.Igor Pavlov
O43 - CFD: 03/02/2019 - [] D -- C:\Program Files\Adobe =>.Adobe Inc.®
O43 - CFD: 15/03/2020 - [0] D -- C:\Program Files\AGEIA Technologies =>.AGEIA Technologies
O43 - CFD: 17/05/2019 - [] HD -- C:\Program Files\CanonBJ =>.Canon Inc.
O43 - CFD: 17/02/2019 - [] D -- C:\Program Files\CCleaner =>.Piriform Ltd
O43 - CFD: 24/02/2020 - [] D -- C:\Program Files\Chromium =>.Chromium
O43 - CFD: 13/02/2020 - [] D -- C:\Program Files\Common Files =>.Microsoft Corporation
O43 - CFD: 17/02/2019 - [] D -- C:\Program Files\Diag =>.Adlice®
O43 - CFD: 09/01/2020 - [] D -- C:\Program Files\DIFX =>.Microsoft Corporation
O43 - CFD: 01/03/2020 - [] D -- C:\Program Files\EaseUS =>.EaseUS Software
O43 - CFD: 03/02/2019 - [0] SHD -- C:\Program Files\Fichiers communs =>.Microsoft Corporation
O43 - CFD: 05/11/2019 - [] D -- C:\Program Files\Google =>.Google Inc®
O43 - CFD: 25/03/2020 - [] D -- C:\Program Files\Hard Disk Sentinel =>.H.D.S. Hungary
O43 - CFD: 15/03/2020 - [] D -- C:\Program Files\InstallShield Installation Information =>.InstallShield
O43 - CFD: 13/05/2020 - [] D -- C:\Program Files\Internet Explorer =>.Microsoft Corporation
O43 - CFD: 16/02/2020 - [] D -- C:\Program Files\Kodi =>.XBMC Foundation
O43 - CFD: 15/03/2020 - [] D -- C:\Program Files\McAfee =>.McAfee
O43 - CFD: 03/02/2019 - [] D -- C:\Program Files\Microsoft Analysis Services =>.Microsoft Corporation
O43 - CFD: 16/03/2020 - [] D -- C:\Program Files\Microsoft ASP.NET =>.Microsoft Corporation
O43 - CFD: 03/02/2019 - [] D -- C:\Program Files\Microsoft Office =>.Microsoft Corporation
O43 - CFD: 03/02/2019 - [] D -- C:\Program Files\Microsoft SQL Server =>.Microsoft Corporation
O43 - CFD: 05/09/2019 - [] D -- C:\Program Files\Microsoft.NET =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [0] D -- C:\Program Files\ModifiableWindowsApps
O43 - CFD: 05/02/2019 - [] D -- C:\Program Files\Mozilla Firefox =>.Mozilla
O43 - CFD: 08/05/2019 - [] D -- C:\Program Files\MP3Gain =>.Glen Sawyer
O43 - CFD: 08/05/2019 - [] D -- C:\Program Files\Mp3tag =>.Florian Heidenreich
O43 - CFD: 04/09/2019 - [] D -- C:\Program Files\MSBuild =>.Microsoft Corporation
O43 - CFD: 20/01/2020 - [0] D -- C:\Program Files\Nexon =>.Nexon
O43 - CFD: 15/03/2020 - [] D -- C:\Program Files\NVIDIA Corporation =>.nVidia Corporation
O43 - CFD: 09/01/2020 - [] D -- C:\Program Files\OnePlus USB Drivers [Unsigned]
O43 - CFD: 17/02/2020 - [] D -- C:\Program Files\OpenVPN =>.OpenVPN Technologie
O43 - CFD: 04/09/2019 - [] D -- C:\Program Files\Realtek =>.Realtek
O43 - CFD: 04/09/2019 - [] D -- C:\Program Files\Reference Assemblies =>.Microsoft Corporation
O43 - CFD: 05/09/2019 - [] D -- C:\Program Files\rempl =>.Microsoft Corporation
O43 - CFD: 01/03/2020 - [] D -- C:\Program Files\Rene.E Laboratory =>.Rene.E Laboratory
O43 - CFD: 15/03/2020 - [] D -- C:\Program Files\Renesas Electronics =>.Renesas Electronics Corporation®
O43 - CFD: 17/02/2019 - [] D -- C:\Program Files\RogueKiller =>.Adlice Software
O43 - CFD: 31/05/2020 - [] D -- C:\Program Files\SAntivirus =>.Reason Software Company Inc.® =>SUP.Optional.Segurazo
O43 - CFD: 15/03/2020 - [0] D -- C:\Program Files\stinger
O43 - CFD: 05/02/2019 - [] D -- C:\Program Files\TAP-Windows =>.OpenVPN Technologie
O43 - CFD: 03/02/2019 - [0] HD -- C:\Program Files\Uninstall Information =>.Microsoft Corporation
O43 - CFD: 29/05/2020 - [] D -- C:\Program Files\UNP =>.Microsoft Corporation
O43 - CFD: 16/02/2020 - [] D -- C:\Program Files\VideoLAN =>.VideoLan Team
O43 - CFD: 29/05/2020 - [] D -- C:\Program Files\VS Revo Group =>.VS Revo Group
O43 - CFD: 13/03/2020 - [] D -- C:\Program Files\Windows Defender =>.Microsoft Corporation
O43 - CFD: 15/04/2020 - [] D -- C:\Program Files\Windows Defender Advanced Threat Protection =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [] D -- C:\Program Files\Windows Mail =>.Microsoft Corporation
O43 - CFD: 15/11/2019 - [] D -- C:\Program Files\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [] D -- C:\Program Files\Windows Multimedia Platform =>.Microsoft Corporation
O43 - CFD: 05/09/2019 - [] D -- C:\Program Files\Windows NT =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [] D -- C:\Program Files\Windows Photo Viewer =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [] D -- C:\Program Files\Windows Portable Devices =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [] D -- C:\Program Files\Windows Security =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [] SHD -- C:\Program Files\Windows Sidebar =>.Microsoft Corporation
O43 - CFD: 29/05/2020 - [] HD -- C:\Program Files\WindowsApps =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [] D -- C:\Program Files\WindowsPowerShell =>.Microsoft Corporation
O43 - CFD: 12/05/2019 - [] D -- C:\Program Files\WinZip =>.Add-in Express®
O43 - CFD: 05/09/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip =>.Igor Pavlov
O43 - CFD: 19/03/2019 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility =>.Microsoft Corporation
O43 - CFD: 15/04/2020 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation
O43 - CFD: 14/02/2020 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools
O43 - CFD: 05/09/2019 - [] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AirSnare
O43 - CFD: 05/09/2019 - [] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Android Injector
O43 - CFD: 13/05/2018 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Android Studio =>.Google Inc.
O43 - CFD: 04/09/2019 - [] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AntiLogger =>.Zemana Ltd
O43 - CFD: 04/09/2019 - [] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS =>.ASUS
O43 - CFD: 04/09/2019 - [] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVS4YOU =>.AVS4YOU
O43 - CFD: 13/05/2018 - [0] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bit Che
O43 - CFD: 05/09/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG6200 series =>.Canon Inc.
O43 - CFD: 13/05/2018 - [0] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG6200 series Manual =>.Canon Inc.
O43 - CFD: 04/09/2019 - [] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities =>.Canon Inc.
O43 - CFD: 05/09/2019 - [] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner =>.Piriform Ltd
O43 - CFD: 05/09/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP =>.Stefan Haglund
O43 - CFD: 05/09/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diag
O43 - CFD: 21/01/2019 - [0] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Download Analyzer
O43 - CFD: 05/09/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriversCloud.com =>.Cybelsoft
O43 - CFD: 05/09/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Todo Backup 11.5 =>.EaseUS Software
O43 - CFD: 11/08/2015 - [0] RDC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games =>.Microsoft Corporation
O43 - CFD: 05/09/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5 =>.GlarySoft
O43 - CFD: 13/05/2018 - [0] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive =>.Google Inc.
O43 - CFD: 05/09/2019 - [] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth =>.Google Earth
O43 - CFD: 05/09/2019 - [] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter =>.Mike Matsnev
O43 - CFD: 13/03/2020 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hard Disk Sentinel =>.H.D.S. Hungary
O43 - CFD: 13/05/2018 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud =>.Apple Inc.
O43 - CFD: 13/05/2018 - [0] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn =>.Lightning UK
O43 - CFD: 13/05/2018 - [0] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Android Device USB driver =>.Intel Corporation
O43 - CFD: 13/05/2018 - [0] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IsoBuster =>.Peter Van Hove
O43 - CFD: 24/10/2018 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes =>.Apple Inc.
O43 - CFD: 05/09/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java =>.Oracle
O43 - CFD: 04/09/2019 - [] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack =>.KLite Inc
O43 - CFD: 16/02/2020 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kodi =>.XBMC Foundation
O43 - CFD: 04/09/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Macrium =>.Macrium
O43 - CFD: 19/03/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation
O43 - CFD: 25/01/2019 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes =>.Malwarebytes
O43 - CFD: 04/09/2019 - [] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office =>.Microsoft Corporation
O43 - CFD: 16/01/2019 - [0] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight =>.Microsoft Corporation
O43 - CFD: 05/09/2019 - [] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Multilizer PDF Translator
O43 - CFD: 13/05/2018 - [0] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyDefrag v4.3.1 =>.J.C. Kessels
O43 - CFD: 04/09/2019 - [] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero =>.Ahead Corporation
O43 - CFD: 13/05/2018 - [0] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Novicorp WinToFlash Lite =>.Novicorp
O43 - CFD: 15/03/2020 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation =>.nVidia Corporation
O43 - CFD: 13/05/2018 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nvu
O43 - CFD: 04/09/2019 - [] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\O&O Software =>.O&O Software
O43 - CFD: 05/09/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenVPN =>.OpenVPN Technologie
O43 - CFD: 05/09/2019 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outils Microsoft Office 2016 =>.Microsoft Corporation
O43 - CFD: 13/05/2018 - [0] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Pro 10 =>.Visagesoft
O43 - CFD: 04/09/2019 - [] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\pdf-convert
O43 - CFD: 13/05/2018 - [0] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF-XChange PDF Viewer =>.Tracker Software
O43 - CFD: 13/05/2018 - [0] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoScape =>.Mooii Tech Software
O43 - CFD: 13/05/2018 - [0] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pochette Express 2
O43 - CFD: 13/05/2018 - [0] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerISO =>.PowerISO Computing
O43 - CFD: 13/05/2018 - [0] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\qBittorrent
O43 - CFD: 01/03/2020 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rene.E Laboratory =>.Rene.E Laboratory
O43 - CFD: 04/09/2019 - [] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Renesas Electronics =>.Renesas Electronics
O43 - CFD: 29/05/2020 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller =>.VS Revo Group
O43 - CFD: 05/09/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller =>.Adlice Software
O43 - CFD: 16/02/2020 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SAntivirus =>SUP.Optional.Segurazo
O43 - CFD: 03/02/2019 - [0] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint =>.Microsoft Corporation
O43 - CFD: 13/05/2018 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype =>.Skype
O43 - CFD: 05/09/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag =>.IObit
O43 - CFD: 19/03/2019 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp =>.Microsoft Corporation
O43 - CFD: 13/03/2020 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools =>.Microsoft Corporation
O43 - CFD: 04/09/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TAP-Windows =>.OpenVPN Technologie
O43 - CFD: 13/05/2018 - [0] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TomTom =>.TomTom
O43 - CFD: 16/02/2020 - [] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN =>.VideoLan Team
O43 - CFD: 13/05/2018 - [0] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPassword
O43 - CFD: 05/09/2019 - [] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPcap =>.Riverbed Technology
O43 - CFD: 13/05/2018 - [0] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR =>.WinRAR
O43 - CFD: 05/09/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip =>.WinZip
O43 - CFD: 13/05/2018 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Data Recovery =>.WiseCleaner.com, Inc
O43 - CFD: 04/09/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare =>.Wondershare
O43 - CFD: 05/09/2019 - [] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XnView =>.Pierre-Emmanuel Gougelet
O43 - CFD: 13/05/2018 - [0] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\xTrade
O43 - CFD: 05/09/2019 - [] DC -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid =>.XviD
O43 - CFD: 17/02/2019 - [] D -- C:\ProgramData\ADiag =>.Adlice Software
O43 - CFD: 04/02/2019 - [] D -- C:\ProgramData\Adobe =>.Adobe
O43 - CFD: 05/09/2019 - [0] SHD -- C:\ProgramData\Application Data =>.Microsoft Corporation
O43 - CFD: 03/02/2019 - [0] SHD -- C:\ProgramData\Bureau =>.Microsoft Corporation
O43 - CFD: 06/03/2019 - [] HD -- C:\ProgramData\CanonBJ =>.Canon Inc.
O43 - CFD: 05/09/2019 - [0] SHD -- C:\ProgramData\Documents =>.Microsoft Corporation
O43 - CFD: 03/02/2019 - [0] SHD -- C:\ProgramData\Favoris =>.Microsoft Corporation
O43 - CFD: 16/02/2020 - [0] D -- C:\ProgramData\ijzja
O43 - CFD: 17/02/2019 - [] D -- C:\ProgramData\Macrium =>.Macrium
O43 - CFD: 03/02/2019 - [0] SHD -- C:\ProgramData\Menu Démarrer =>.Microsoft Corporation
O43 - CFD: 22/02/2020 - [] SD -- C:\ProgramData\Microsoft =>.Microsoft Corporation
O43 - CFD: 14/05/2020 - [] D -- C:\ProgramData\Microsoft Help =>.Microsoft Corporation
O43 - CFD: 05/09/2019 - [] D -- C:\ProgramData\Microsoft OneDrive =>.Microsoft Corporation
O43 - CFD: 03/02/2019 - [0] SHD -- C:\ProgramData\Modèles =>.Microsoft Corporation
O43 - CFD: 18/01/2020 - [] D -- C:\ProgramData\Nexon =>.Nexon
O43 - CFD: 31/05/2020 - [] D -- C:\ProgramData\NVIDIA =>.nVidia Corporation
O43 - CFD: 30/03/2020 - [] D -- C:\ProgramData\NVIDIA Corporation =>.nVidia Corporation
O43 - CFD: 15/03/2020 - [] D -- C:\ProgramData\Package Cache =>.Microsoft Corporation
O43 - CFD: 10/04/2020 - [] D -- C:\ProgramData\Packages =>.Microsoft Corporation
O43 - CFD: 31/05/2020 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft =>.Microsoft Corporation
O43 - CFD: 02/06/2019 - [] D -- C:\ProgramData\ReimageRepair =>SUP.Optional.ReimageRepair
O43 - CFD: 17/02/2019 - [] D -- C:\ProgramData\RogueKiller =>.Adlice Software
O43 - CFD: 16/02/2020 - [] D -- C:\ProgramData\SAntivirus =>SUP.Optional.Segurazo
O43 - CFD: 24/02/2020 - [] D -- C:\ProgramData\Shuame
O43 - CFD: 19/03/2019 - [0] D -- C:\ProgramData\SoftwareDistribution =>.Microsoft Corporation
O43 - CFD: 14/02/2020 - [0] D -- C:\ProgramData\ssh
O43 - CFD: 01/03/2020 - [] D -- C:\ProgramData\SystemAcCrux
O43 - CFD: 12/05/2019 - [] D -- C:\ProgramData\UniqueId =>.Microsoft Corporation
O43 - CFD: 05/09/2019 - [] D -- C:\ProgramData\USOPrivate =>.Microsoft Corporation
O43 - CFD: 05/09/2019 - [] D -- C:\ProgramData\USOShared =>.Microsoft Corporation
O43 - CFD: 12/05/2019 - [] D -- C:\ProgramData\WinZip =>.WinZip
O43 - CFD: 19/03/2020 - [] D -- C:\Program Files\Common Files\Adobe =>.Adobe
O43 - CFD: 03/02/2019 - [] D -- C:\Program Files\Common Files\DESIGNER =>.Designer
O43 - CFD: 17/01/2020 - [] D -- C:\Program Files\Common Files\Microsoft Shared =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [] D -- C:\Program Files\Common Files\Services =>.Microsoft Corporation
O43 - CFD: 05/09/2019 - [] D -- C:\Program Files\Common Files\System =>.Microsoft Corporation
O43 - CFD: 03/02/2019 - [] D -- C:\Users\kasper.kasper-PC\AppData\Roaming\Adobe =>.Adobe
O43 - CFD: 13/03/2020 - [] D -- C:\Users\kasper.kasper-PC\AppData\Roaming\Hard Disk Sentinel =>.H.D.S. Hungary
O43 - CFD: 01/03/2020 - [] D -- C:\Users\kasper.kasper-PC\AppData\Roaming\Kodi =>.XBMC Foundation
O43 - CFD: 12/05/2019 - [] D -- C:\Users\kasper.kasper-PC\AppData\Roaming\Macromedia =>.Macromedia
O43 - CFD: 26/04/2020 - [] SD -- C:\Users\kasper.kasper-PC\AppData\Roaming\Microsoft =>.Microsoft Corporation
O43 - CFD: 09/05/2019 - [] D -- C:\Users\kasper.kasper-PC\AppData\Roaming\Mp3tag =>.Florian Heidenreich
O43 - CFD: 17/01/2020 - [] D -- C:\Users\kasper.kasper-PC\AppData\Roaming\Nexon Launcher
O43 - CFD: 20/01/2020 - [] D -- C:\Users\kasper.kasper-PC\AppData\Roaming\NexonLauncher
O43 - CFD: 17/01/2020 - [] D -- C:\Users\kasper.kasper-PC\AppData\Roaming\NexonLauncherSwapApp
O43 - CFD: 01/03/2020 - [] D -- C:\Users\kasper.kasper-PC\AppData\Roaming\santivirusclient =>SUP.Optional.Segurazo
O43 - CFD: 22/08/2019 - [] D -- C:\Users\kasper.kasper-PC\AppData\Roaming\Shuame
O43 - CFD: 03/03/2020 - [] D -- C:\Users\kasper.kasper-PC\AppData\Roaming\Telegram Desktop =>.Telegram Messenger LLP
O43 - CFD: 03/05/2020 - [] D -- C:\Users\kasper.kasper-PC\AppData\Roaming\uTorrent Web
O43 - CFD: 10/04/2020 - [] D -- C:\Users\kasper.kasper-PC\AppData\Roaming\vlc =>.VideoLan Team
O43 - CFD: 31/05/2020 - [] D -- C:\Users\kasper.kasper-PC\AppData\Roaming\ZHP =>.Nicolas Coolman
O43 - CFD: 16/10/2019 - [] D -- C:\Users\kasper.kasper-PC\AppData\Local\Adobe =>.Adobe
O43 - CFD: 04/09/2019 - [0] SHD -- C:\Users\kasper.kasper-PC\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 06/09/2019 - [] D -- C:\Users\kasper.kasper-PC\AppData\Local\assembly =>.Assembly
O43 - CFD: 02/05/2020 - [] D -- C:\Users\kasper.kasper-PC\AppData\Local\BitTorrentHelper
O43 - CFD: 29/05/2020 - [] D -- C:\Users\kasper.kasper-PC\AppData\Local\BlueStacks =>.BlueStack Systems, Inc.
O43 - CFD: 18/01/2020 - [] D -- C:\Users\kasper.kasper-PC\AppData\Local\CEF =>.CEF
O43 - CFD: 24/02/2020 - [] D -- C:\Users\kasper.kasper-PC\AppData\Local\chromium =>.Chromium
O43 - CFD: 21/08/2019 - [] D -- C:\Users\kasper.kasper-PC\AppData\Local\Comms =>.Microsoft Corporation
O43 - CFD: 05/09/2019 - [] D -- C:\Users\kasper.kasper-PC\AppData\Local\ConnectedDevicesPlatform =>.Microsoft Corporation
O43 - CFD: 31/05/2020 - [] D -- C:\Users\kasper.kasper-PC\AppData\Local\CrashDumps =>.Microsoft Corporation
O43 - CFD: 19/01/2020 - [] D -- C:\Users\kasper.kasper-PC\AppData\Local\D3DSCache =>.Legitimate
O43 - CFD: 14/02/2019 - [0] D -- C:\Users\kasper.kasper-PC\AppData\Local\DBG =>.DBG
O43 - CFD: 30/03/2020 - [0] D -- C:\Users\kasper.kasper-PC\AppData\Local\Diagnostics =>.Microsoft Corporation
O43 - CFD: 06/04/2020 - [0] D -- C:\Users\kasper.kasper-PC\AppData\Local\ElevatedDiagnostics =>.Microsoft Corporation
O43 - CFD: 03/02/2019 - [] D -- C:\Users\kasper.kasper-PC\AppData\Local\Google =>.Google
O43 - CFD: 04/09/2019 - [0] SHD -- C:\Users\kasper.kasper-PC\AppData\Local\Historique =>.Microsoft Corporation
O43 - CFD: 26/04/2020 - [] D -- C:\Users\kasper.kasper-PC\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 03/02/2019 - [0] D -- C:\Users\kasper.kasper-PC\AppData\Local\Microsoft Help =>.Microsoft Corporation
O43 - CFD: 03/02/2019 - [] D -- C:\Users\kasper.kasper-PC\AppData\Local\MicrosoftEdge =>.Microsoft Corporation
O43 - CFD: 15/03/2020 - [] D -- C:\Users\kasper.kasper-PC\AppData\Local\NVIDIA =>.nVidia Corporation
O43 - CFD: 18/03/2020 - [] D -- C:\Users\kasper.kasper-PC\AppData\Local\NVIDIA Corporation =>.nVidia Corporation
O43 - CFD: 06/02/2019 - [] D -- C:\Users\kasper.kasper-PC\AppData\Local\OneDrive =>.Microsoft Corporation
O43 - CFD: 10/04/2020 - [] D -- C:\Users\kasper.kasper-PC\AppData\Local\Packages =>.Microsoft Corporation
O43 - CFD: 05/02/2019 - [0] D -- C:\Users\kasper.kasper-PC\AppData\Local\PeerDistRepub =>.Microsoft Corporation
O43 - CFD: 31/05/2020 - [] D -- C:\Users\kasper.kasper-PC\AppData\Local\PlaceholderTileLogoFolder =>.Microsoft Corporation
O43 - CFD: 17/02/2019 - [] D -- C:\Users\kasper.kasper-PC\AppData\Local\Programs =>.Microsoft Corporation
O43 - CFD: 03/02/2019 - [] D -- C:\Users\kasper.kasper-PC\AppData\Local\Publishers =>.Microsoft Corporation
O43 - CFD: 31/05/2020 - [] D -- C:\Users\kasper.kasper-PC\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 04/09/2019 - [0] SHD -- C:\Users\kasper.kasper-PC\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 12/05/2019 - [] D -- C:\Users\kasper.kasper-PC\AppData\Local\VirtualStore =>.Microsoft Corporation
O43 - CFD: 12/05/2019 - [] D -- C:\Users\kasper.kasper-PC\AppData\Local\WinZip =>.WinZip
O43 - CFD: 16/02/2020 - [] D -- C:\Users\kasper.kasper-PC\AppData\Local\XEInsPackFileder
O43 - CFD: 16/02/2020 - [] D -- C:\Users\kasper.kasper-PC\AppData\Local\XePlayer
O43 - CFD: 31/05/2020 - [] D -- C:\Users\kasper.kasper-PC\AppData\Local\ZHP =>.Nicolas Coolman
O43 - CFD: 16/02/2020 - [] D -- C:\Users\kasper.kasper-PC\AppData\Local\{6A5B5C07-4EF3-30BF-236B-15570703E9CF} =>PUP.Optional.WinYahoo
O43 - CFD: 17/02/2019 - [0] D -- C:\Users\kasper.kasper-PC\AppData\Local\Programs\Common =>.Microsoft Corporation
O43 - CFD: 13/10/2018 - [] D -- C:\Users\kasper.kasper-PC\AppData\LocalLow\Adobe =>.Adobe
O43 - CFD: 14/06/2018 - [] D -- C:\Users\kasper.kasper-PC\AppData\LocalLow\IObit =>.IObit
O43 - CFD: 22/10/2017 - [] SD -- C:\Users\kasper.kasper-PC\AppData\LocalLow\Microsoft =>.Microsoft Corporation
O43 - CFD: 03/03/2020 - [] D -- C:\Users\kasper.kasper-PC\Desktop\formation Sab Myl
O43 - CFD: 31/05/2020 - [] D -- C:\Users\kasper.kasper-PC\Desktop\FRST-OlderVersion
O43 - CFD: 01/05/2018 - [0] D -- C:\Users\kasper.kasper-PC\Desktop\GodMode.{ED7BA470-8E54-465E-825C-99712043E01C}
O43 - CFD: 31/05/2020 - [] D -- C:\Users\kasper.kasper-PC\Desktop\informatique
O43 - CFD: 04/09/2019 - [] RD -- C:\Users\kasper.kasper-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility =>.Microsoft Corporation
O43 - CFD: 05/09/2019 - [] RD -- C:\Users\kasper.kasper-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation
O43 - CFD: 13/05/2020 - [] RD -- C:\Users\kasper.kasper-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools
O43 - CFD: 19/03/2019 - [] D -- C:\Users\kasper.kasper-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation
O43 - CFD: 05/09/2019 - [] D -- C:\Users\kasper.kasper-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MP3Gain =>.Glen Sawyer
O43 - CFD: 20/01/2020 - [0] D -- C:\Users\kasper.kasper-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Nexon =>.Nexon
O43 - CFD: 13/05/2020 - [] RD -- C:\Users\kasper.kasper-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup =>.Microsoft Corporation
O43 - CFD: 05/09/2019 - [] HD -- C:\Users\kasper.kasper-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup-Disabled =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [] RD -- C:\Users\kasper.kasper-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools =>.Microsoft Corporation
O43 - CFD: 10/09/2019 - [] D -- C:\Users\kasper.kasper-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Telegram Desktop =>.Telegram Messenger LLP
O43 - CFD: 28/01/2019 - [0] D -- C:\Users\kasper.kasper-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tweak-10
O43 - CFD: 19/03/2019 - [] RD -- C:\Users\kasper.kasper-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell =>.Microsoft Corporation
O43 - CFD: 05/09/2019 - [0] SHD -- C:\Users\Default\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 03/02/2019 - [0] SHD -- C:\Users\Default\AppData\Local\Historique =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [] D -- C:\Users\Default\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 05/02/2019 - [0] D -- C:\Users\Default\AppData\Local\Microsoft Help =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [0] D -- C:\Users\Default\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 05/09/2019 - [0] SHD -- C:\Users\Default\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 05/09/2019 - [0] SHD -- C:\Users\Default User\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 03/02/2019 - [0] SHD -- C:\Users\Default User\AppData\Local\Historique =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [] D -- C:\Users\Default User\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 05/02/2019 - [0] D -- C:\Users\Default User\AppData\Local\Microsoft Help =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [0] D -- C:\Users\Default User\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 05/09/2019 - [0] SHD -- C:\Users\Default User\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 16/10/2019 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\Adobe =>.Adobe
O43 - CFD: 31/05/2020 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\CrashDumps =>.Microsoft Corporation
O43 - CFD: 05/09/2019 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\D3DSCache =>.Legitimate
O43 - CFD: 07/09/2019 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\DataSharing =>.DataSharing
O43 - CFD: 20/01/2020 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 15/03/2020 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\NVIDIA =>.nVidia Corporation
O43 - CFD: 06/05/2020 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\Packages =>.Microsoft Corporation
O43 - CFD: 16/02/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\PeerDistRepub =>.Microsoft Corporation
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1020-1cec-98138.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1020-1cec-98159.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1020-1cec-9816b.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1020-1cec-9817c.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1020-1cec-9817e.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1020-1cec-98190.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1020-1cec-981b1.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1020-1cec-981c3.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1020-1cec-981c5.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1020-1cec-981d6.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1020-1cec-981e8.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1020-1cec-981fa.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1020-1cec-9820b.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1020-1cec-9821d.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1020-1cec-9821f.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1020-1cec-98230.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1020-1cec-98242.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1020-1cec-98244.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1020-1cec-98256.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1044-1f70-276d036.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1044-1f70-276d0d4.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1044-1f70-276d115.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1044-1f70-276d174.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1044-1f70-276d1b5.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1044-1f70-276d205.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1044-1f70-276d284.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1044-1f70-276d2c4.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1044-1f70-276d2f5.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1044-1f70-276d345.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1044-1f70-276d386.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1044-1f70-276d3a7.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1044-1f70-276d3d8.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1044-1f70-276d428.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1044-1f70-276d449.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1044-1f70-276d48a.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1044-1f70-276d4ca.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1044-1f70-276d549.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1044-1f70-276d57a.tmp
O43 - CFD: 17/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10c4-730-1dfa56b.tmp
O43 - CFD: 17/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10c4-730-1dfa57d.tmp
O43 - CFD: 17/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10c4-730-1dfa58e.tmp
O43 - CFD: 17/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10c4-730-1dfa5a0.tmp
O43 - CFD: 17/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10c4-730-1dfa5b2.tmp
O43 - CFD: 17/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10c4-730-1dfa5b4.tmp
O43 - CFD: 17/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10c4-730-1dfa5c5.tmp
O43 - CFD: 17/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10c4-730-1dfa5d7.tmp
O43 - CFD: 17/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10c4-730-1dfa5d9.tmp
O43 - CFD: 17/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10c4-730-1dfa5eb.tmp
O43 - CFD: 17/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10c4-730-1dfa5fc.tmp
O43 - CFD: 17/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10c4-730-1dfa60e.tmp
O43 - CFD: 17/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10c4-730-1dfa610.tmp
O43 - CFD: 17/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10c4-730-1dfa621.tmp
O43 - CFD: 17/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10c4-730-1dfa633.tmp
O43 - CFD: 17/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10c4-730-1dfa635.tmp
O43 - CFD: 17/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10c4-730-1dfa647.tmp
O43 - CFD: 17/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10c4-730-1dfa658.tmp
O43 - CFD: 17/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10c4-730-1dfa66a.tmp
O43 - CFD: 09/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1124-de8-4a8e69f.tmp
O43 - CFD: 09/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1124-de8-4a8e6c0.tmp
O43 - CFD: 09/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1124-de8-4a8e6d1.tmp
O43 - CFD: 09/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1124-de8-4a8e6e3.tmp
O43 - CFD: 09/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1124-de8-4a8e6f5.tmp
O43 - CFD: 09/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1124-de8-4a8e706.tmp
O43 - CFD: 09/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1124-de8-4a8e718.tmp
O43 - CFD: 09/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1124-de8-4a8e72a.tmp
O43 - CFD: 09/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1124-de8-4a8e72c.tmp
O43 - CFD: 09/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1124-de8-4a8e74d.tmp
O43 - CFD: 09/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1124-de8-4a8e76e.tmp
O43 - CFD: 09/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1124-de8-4a8e780.tmp
O43 - CFD: 09/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1124-de8-4a8e791.tmp
O43 - CFD: 09/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1124-de8-4a8e7a3.tmp
O43 - CFD: 09/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1124-de8-4a8e7b5.tmp
O43 - CFD: 09/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1124-de8-4a8e7c6.tmp
O43 - CFD: 09/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1124-de8-4a8e7d8.tmp
O43 - CFD: 09/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1124-de8-4a8e7e9.tmp
O43 - CFD: 09/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1124-de8-4a8e7fb.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1150-2e4-ff6fd6.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1150-2e4-ff6fe8.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1150-2e4-ff6fea.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1150-2e4-ff6ffb.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1150-2e4-ff700d.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1150-2e4-ff700f.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1150-2e4-ff7020.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1150-2e4-ff7032.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1150-2e4-ff7034.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1150-2e4-ff7046.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1150-2e4-ff7057.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1150-2e4-ff7059.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1150-2e4-ff706b.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1150-2e4-ff707d.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1150-2e4-ff707f.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1150-2e4-ff7090.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1150-2e4-ff70a2.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1150-2e4-ff70b3.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1150-2e4-ff70b5.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1180-1344-97a33.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1180-1344-97a44.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1180-1344-97a56.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1180-1344-97a68.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1180-1344-97a6a.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1180-1344-97a8b.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1180-1344-97a9d.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1180-1344-97aae.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1180-1344-97ac0.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1180-1344-97ac2.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1180-1344-97ad3.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1180-1344-97af5.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1180-1344-97b06.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1180-1344-97b08.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1180-1344-97b1a.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1180-1344-97b2c.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1180-1344-97b3d.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1180-1344-97b5e.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1180-1344-97b60.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1244-1204-14b0a44.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1244-1204-14b0a56.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1244-1204-14b0a77.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1244-1204-14b0a89.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1244-1204-14b0a9a.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1244-1204-14b0aac.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1244-1204-14b0abe.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1244-1204-14b0acf.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1244-1204-14b0ae1.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1244-1204-14b0b02.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1244-1204-14b0b23.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1244-1204-14b0b35.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1244-1204-14b0b47.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1244-1204-14b0b58.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1244-1204-14b0b6a.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1244-1204-14b0b7c.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1244-1204-14b0b8d.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1244-1204-14b0b8f.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1244-1204-14b0ba1.tmp
O43 - CFD: 04/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1288-16b0-97cc3.tmp
O43 - CFD: 04/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1288-16b0-97ce4.tmp
O43 - CFD: 04/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1288-16b0-97ce6.tmp
O43 - CFD: 04/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1288-16b0-97cf8.tmp
O43 - CFD: 04/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1288-16b0-97d0a.tmp
O43 - CFD: 04/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1288-16b0-97d0c.tmp
O43 - CFD: 04/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1288-16b0-97d1d.tmp
O43 - CFD: 04/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1288-16b0-97d2f.tmp
O43 - CFD: 04/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1288-16b0-97d31.tmp
O43 - CFD: 04/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1288-16b0-97d42.tmp
O43 - CFD: 04/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1288-16b0-97d54.tmp
O43 - CFD: 04/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1288-16b0-97d56.tmp
O43 - CFD: 04/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1288-16b0-97d77.tmp
O43 - CFD: 04/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1288-16b0-97d89.tmp
O43 - CFD: 04/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1288-16b0-97d8b.tmp
O43 - CFD: 04/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1288-16b0-97d9d.tmp
O43 - CFD: 04/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1288-16b0-97dae.tmp
O43 - CFD: 04/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1288-16b0-97db0.tmp
O43 - CFD: 04/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1288-16b0-97dc2.tmp
O43 - CFD: 23/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-128c-22c8-3a1f3dc.tmp
O43 - CFD: 23/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-128c-22c8-3a1f40d.tmp
O43 - CFD: 23/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-128c-22c8-3a1f40f.tmp
O43 - CFD: 23/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-128c-22c8-3a1f421.tmp
O43 - CFD: 23/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-128c-22c8-3a1f442.tmp
O43 - CFD: 23/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-128c-22c8-3a1f454.tmp
O43 - CFD: 23/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-128c-22c8-3a1f465.tmp
O43 - CFD: 23/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-128c-22c8-3a1f467.tmp
O43 - CFD: 23/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-128c-22c8-3a1f479.tmp
O43 - CFD: 23/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-128c-22c8-3a1f48b.tmp
O43 - CFD: 23/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-128c-22c8-3a1f49c.tmp
O43 - CFD: 23/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-128c-22c8-3a1f49e.tmp
O43 - CFD: 23/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-128c-22c8-3a1f4b0.tmp
O43 - CFD: 23/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-128c-22c8-3a1f4c2.tmp
O43 - CFD: 23/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-128c-22c8-3a1f4c4.tmp
O43 - CFD: 23/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-128c-22c8-3a1f4d5.tmp
O43 - CFD: 23/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-128c-22c8-3a1f4e7.tmp
O43 - CFD: 23/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-128c-22c8-3a1f4e9.tmp
O43 - CFD: 23/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-128c-22c8-3a1f4fa.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1290-2454-320a032.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1290-2454-320a044.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1290-2454-320a055.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1290-2454-320a067.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1290-2454-320a078.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1290-2454-320a07a.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1290-2454-320a08c.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1290-2454-320a09e.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1290-2454-320a0a0.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1290-2454-320a0b1.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1290-2454-320a0b3.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1290-2454-320a0c5.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1290-2454-320a0d7.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1290-2454-320a0d9.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1290-2454-320a0ea.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1290-2454-320a0fc.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1290-2454-320a0fe.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1290-2454-320a11f.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1290-2454-320a131.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12bc-1428-10e8430.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12bc-1428-10e8451.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12bc-1428-10e8463.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12bc-1428-10e8465.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12bc-1428-10e8476.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12bc-1428-10e8488.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12bc-1428-10e849a.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12bc-1428-10e84ab.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12bc-1428-10e84ad.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12bc-1428-10e84cf.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12bc-1428-10e84d1.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12bc-1428-10e84e2.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12bc-1428-10e84f4.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12bc-1428-10e8505.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12bc-1428-10e8517.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12bc-1428-10e8519.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12bc-1428-10e852b.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12bc-1428-10e853c.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12bc-1428-10e854e.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12f0-1c78-104e4e.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12f0-1c78-104e60.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12f0-1c78-104e72.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12f0-1c78-104e83.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12f0-1c78-104ea5.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12f0-1c78-104eb6.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12f0-1c78-104ec8.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12f0-1c78-104ed9.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12f0-1c78-104eeb.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12f0-1c78-104efd.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12f0-1c78-104f0e.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12f0-1c78-104f20.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12f0-1c78-104f41.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12f0-1c78-104f53.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12f0-1c78-104f64.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12f0-1c78-104f76.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12f0-1c78-104f88.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12f0-1c78-104f99.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12f0-1c78-104fab.tmp
O43 - CFD: 26/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1304-21cc-94058b.tmp
O43 - CFD: 26/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1304-21cc-9405ad.tmp
O43 - CFD: 26/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1304-21cc-9405af.tmp
O43 - CFD: 26/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1304-21cc-9405c0.tmp
O43 - CFD: 26/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1304-21cc-9405d2.tmp
O43 - CFD: 26/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1304-21cc-9405e4.tmp
O43 - CFD: 26/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1304-21cc-9405e6.tmp
O43 - CFD: 26/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1304-21cc-9405f7.tmp
O43 - CFD: 26/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1304-21cc-940609.tmp
O43 - CFD: 26/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1304-21cc-94060b.tmp
O43 - CFD: 26/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1304-21cc-94061c.tmp
O43 - CFD: 26/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1304-21cc-94062e.tmp
O43 - CFD: 26/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1304-21cc-940630.tmp
O43 - CFD: 26/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1304-21cc-940642.tmp
O43 - CFD: 26/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1304-21cc-940653.tmp
O43 - CFD: 26/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1304-21cc-940655.tmp
O43 - CFD: 26/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1304-21cc-940667.tmp
O43 - CFD: 26/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1304-21cc-940679.tmp
O43 - CFD: 26/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1304-21cc-94067b.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1320-1608-336a43e.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1320-1608-336a450.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1320-1608-336a471.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1320-1608-336a473.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1320-1608-336a485.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1320-1608-336a487.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1320-1608-336a498.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1320-1608-336a4aa.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1320-1608-336a4bb.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1320-1608-336a4bd.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1320-1608-336a4cf.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1320-1608-336a4e1.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1320-1608-336a4f2.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1320-1608-336a504.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1320-1608-336a506.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1320-1608-336a518.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1320-1608-336a529.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1320-1608-336a52b.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1320-1608-336a53d.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13b0-1cb8-98399.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13b0-1cb8-983ba.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13b0-1cb8-983cc.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13b0-1cb8-983de.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13b0-1cb8-983e0.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13b0-1cb8-983f1.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13b0-1cb8-98403.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13b0-1cb8-98405.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13b0-1cb8-98416.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13b0-1cb8-98428.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13b0-1cb8-9842a.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13b0-1cb8-9843c.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13b0-1cb8-9844d.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13b0-1cb8-9844f.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13b0-1cb8-98461.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13b0-1cb8-98473.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13b0-1cb8-98475.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13b0-1cb8-98486.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13b0-1cb8-98488.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13b0-25b0-2cf52d7.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13b0-25b0-2cf52e9.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13b0-25b0-2cf52eb.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13b0-25b0-2cf52fc.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13b0-25b0-2cf530e.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13b0-25b0-2cf5310.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13b0-25b0-2cf5322.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13b0-25b0-2cf5333.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13b0-25b0-2cf5335.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13b0-25b0-2cf5347.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13b0-25b0-2cf5359.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13b0-25b0-2cf536a.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13b0-25b0-2cf536c.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13b0-25b0-2cf537e.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13b0-25b0-2cf538f.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13b0-25b0-2cf5391.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13b0-25b0-2cf53a3.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13b0-25b0-2cf53b5.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13b0-25b0-2cf53b7.tmp
O43 - CFD: 14/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13c8-13a8-9beae.tmp
O43 - CFD: 14/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13c8-13a8-9becf.tmp
O43 - CFD: 14/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13c8-13a8-9bee1.tmp
O43 - CFD: 14/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13c8-13a8-9bf02.tmp
O43 - CFD: 14/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13c8-13a8-9bf23.tmp
O43 - CFD: 14/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13c8-13a8-9bf35.tmp
O43 - CFD: 14/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13c8-13a8-9bf47.tmp
O43 - CFD: 14/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13c8-13a8-9bf49.tmp
O43 - CFD: 14/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13c8-13a8-9bf5a.tmp
O43 - CFD: 14/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13c8-13a8-9bf6c.tmp
O43 - CFD: 14/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13c8-13a8-9bf7e.tmp
O43 - CFD: 14/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13c8-13a8-9bf8f.tmp
O43 - CFD: 14/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13c8-13a8-9bfa1.tmp
O43 - CFD: 14/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13c8-13a8-9bfc2.tmp
O43 - CFD: 14/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13c8-13a8-9bfd4.tmp
O43 - CFD: 14/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13c8-13a8-9bff5.tmp
O43 - CFD: 14/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13c8-13a8-9c007.tmp
O43 - CFD: 14/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13c8-13a8-9c018.tmp
O43 - CFD: 14/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13c8-13a8-9c02a.tmp
O43 - CFD: 30/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13e4-2094-54fc1f4.tmp
O43 - CFD: 30/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13e4-2094-54fc205.tmp
O43 - CFD: 30/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13e4-2094-54fc217.tmp
O43 - CFD: 30/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13e4-2094-54fc228.tmp
O43 - CFD: 30/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13e4-2094-54fc22a.tmp
O43 - CFD: 30/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13e4-2094-54fc23c.tmp
O43 - CFD: 30/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13e4-2094-54fc24e.tmp
O43 - CFD: 30/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13e4-2094-54fc250.tmp
O43 - CFD: 30/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13e4-2094-54fc261.tmp
O43 - CFD: 30/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13e4-2094-54fc263.tmp
O43 - CFD: 30/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13e4-2094-54fc275.tmp
O43 - CFD: 30/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13e4-2094-54fc287.tmp
O43 - CFD: 30/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13e4-2094-54fc298.tmp
O43 - CFD: 30/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13e4-2094-54fc29a.tmp
O43 - CFD: 30/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13e4-2094-54fc2ac.tmp
O43 - CFD: 30/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13e4-2094-54fc2bd.tmp
O43 - CFD: 30/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13e4-2094-54fc2bf.tmp
O43 - CFD: 30/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13e4-2094-54fc2d1.tmp
O43 - CFD: 30/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13e4-2094-54fc2e3.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14b0-d24-97a91.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14b0-d24-97ab2.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14b0-d24-97ab4.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14b0-d24-97ac5.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14b0-d24-97ad7.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14b0-d24-97ae9.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14b0-d24-97aeb.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14b0-d24-97afc.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14b0-d24-97b0e.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14b0-d24-97b10.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14b0-d24-97b22.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14b0-d24-97b33.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14b0-d24-97b35.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14b0-d24-97b47.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14b0-d24-97b58.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14b0-d24-97b6a.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14b0-d24-97b6c.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14b0-d24-97b7e.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14b0-d24-97b8f.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14c8-14d4-27f647.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14c8-14d4-27f677.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14c8-14d4-27f689.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14c8-14d4-27f69b.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14c8-14d4-27f6ac.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14c8-14d4-27f6be.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14c8-14d4-27f6df.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14c8-14d4-27f6f1.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14c8-14d4-27f702.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14c8-14d4-27f714.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14c8-14d4-27f726.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14c8-14d4-27f747.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14c8-14d4-27f749.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14c8-14d4-27f75b.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14c8-14d4-27f75d.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14c8-14d4-27f76e.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14c8-14d4-27f78f.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14c8-14d4-27f7b1.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14c8-14d4-27f7c2.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14e4-20f0-967e3.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14e4-20f0-967f5.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14e4-20f0-96807.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14e4-20f0-96818.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14e4-20f0-9681a.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14e4-20f0-9682c.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14e4-20f0-9683d.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14e4-20f0-9683f.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14e4-20f0-96851.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14e4-20f0-96863.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14e4-20f0-96874.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14e4-20f0-96876.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14e4-20f0-96888.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14e4-20f0-9689a.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14e4-20f0-968ab.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14e4-20f0-968bd.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14e4-20f0-968bf.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14e4-20f0-968d0.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14e4-20f0-968f2.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14f4-154c-3bc9afb.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14f4-154c-3bc9b1c.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14f4-154c-3bc9b2e.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14f4-154c-3bc9b40.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14f4-154c-3bc9b51.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14f4-154c-3bc9b63.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14f4-154c-3bc9b65.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14f4-154c-3bc9b77.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14f4-154c-3bc9b88.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14f4-154c-3bc9b8a.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14f4-154c-3bc9b9c.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14f4-154c-3bc9bad.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14f4-154c-3bc9baf.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14f4-154c-3bc9bc1.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14f4-154c-3bc9bd3.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14f4-154c-3bc9bd5.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14f4-154c-3bc9be6.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14f4-154c-3bc9bf8.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14f4-154c-3bc9c19.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14f4-1fc0-98a5f.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14f4-1fc0-98a81.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14f4-1fc0-98a92.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14f4-1fc0-98aa4.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14f4-1fc0-98ab6.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14f4-1fc0-98ac7.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14f4-1fc0-98ad9.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14f4-1fc0-98aea.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14f4-1fc0-98afc.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14f4-1fc0-98b0e.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14f4-1fc0-98b1f.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14f4-1fc0-98b21.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14f4-1fc0-98b33.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14f4-1fc0-98b45.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14f4-1fc0-98b56.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14f4-1fc0-98b58.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14f4-1fc0-98b6a.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14f4-1fc0-98b7b.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14f4-1fc0-98b7d.tmp
O43 - CFD: 14/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-161c-1c4c-31d2890.tmp
O43 - CFD: 14/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-161c-1c4c-31d28b1.tmp
O43 - CFD: 14/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-161c-1c4c-31d28b3.tmp
O43 - CFD: 14/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-161c-1c4c-31d28c4.tmp
O43 - CFD: 14/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-161c-1c4c-31d28d6.tmp
O43 - CFD: 14/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-161c-1c4c-31d28d8.tmp
O43 - CFD: 14/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-161c-1c4c-31d28f9.tmp
O43 - CFD: 14/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-161c-1c4c-31d28fb.tmp
O43 - CFD: 14/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-161c-1c4c-31d290d.tmp
O43 - CFD: 14/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-161c-1c4c-31d290f.tmp
O43 - CFD: 14/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-161c-1c4c-31d2921.tmp
O43 - CFD: 14/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-161c-1c4c-31d2932.tmp
O43 - CFD: 14/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-161c-1c4c-31d2934.tmp
O43 - CFD: 14/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-161c-1c4c-31d2946.tmp
O43 - CFD: 14/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-161c-1c4c-31d2957.tmp
O43 - CFD: 14/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-161c-1c4c-31d2959.tmp
O43 - CFD: 14/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-161c-1c4c-31d296b.tmp
O43 - CFD: 14/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-161c-1c4c-31d296d.tmp
O43 - CFD: 14/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-161c-1c4c-31d297f.tmp
O43 - CFD: 19/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1674-148c-1486eaa.tmp
O43 - CFD: 19/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1674-148c-1486ebc.tmp
O43 - CFD: 19/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1674-148c-1486ecd.tmp
O43 - CFD: 19/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1674-148c-1486ecf.tmp
O43 - CFD: 19/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1674-148c-1486ee1.tmp
O43 - CFD: 19/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1674-148c-1486ef3.tmp
O43 - CFD: 19/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1674-148c-1486ef5.tmp
O43 - CFD: 19/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1674-148c-1486f06.tmp
O43 - CFD: 19/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1674-148c-1486f18.tmp
O43 - CFD: 19/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1674-148c-1486f1a.tmp
O43 - CFD: 19/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1674-148c-1486f2b.tmp
O43 - CFD: 19/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1674-148c-1486f3d.tmp
O43 - CFD: 19/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1674-148c-1486f4f.tmp
O43 - CFD: 19/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1674-148c-1486f51.tmp
O43 - CFD: 19/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1674-148c-1486f62.tmp
O43 - CFD: 19/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1674-148c-1486f74.tmp
O43 - CFD: 19/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1674-148c-1486f76.tmp
O43 - CFD: 19/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1674-148c-1486f88.tmp
O43 - CFD: 19/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1674-148c-1486f99.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16e4-1490-1af4a0.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16e4-1490-1af4c1.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16e4-1490-1af4d3.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16e4-1490-1af4e4.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16e4-1490-1af4f6.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16e4-1490-1af508.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16e4-1490-1af50a.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16e4-1490-1af51b.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16e4-1490-1af52d.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16e4-1490-1af53f.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16e4-1490-1af57f.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16e4-1490-1af591.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16e4-1490-1af5a2.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16e4-1490-1af5b4.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16e4-1490-1af5b6.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16e4-1490-1af5c8.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16e4-1490-1af5d9.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16e4-1490-1af5eb.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16e4-1490-1af5fc.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17d8-1934-22f67d1.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17d8-1934-22f67e2.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17d8-1934-22f6803.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17d8-1934-22f6805.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17d8-1934-22f6817.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17d8-1934-22f6829.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17d8-1934-22f683a.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17d8-1934-22f683c.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17d8-1934-22f684e.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17d8-1934-22f6860.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17d8-1934-22f6862.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17d8-1934-22f6873.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17d8-1934-22f6885.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17d8-1934-22f68a6.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17d8-1934-22f68c7.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17d8-1934-22f68c9.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17d8-1934-22f68db.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17d8-1934-22f68ed.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17d8-1934-22f68ef.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1814-1cec-ab6ba.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1814-1cec-ab6cc.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1814-1cec-ab6dd.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1814-1cec-ab6ef.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1814-1cec-ab6f1.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1814-1cec-ab703.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1814-1cec-ab705.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1814-1cec-ab716.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1814-1cec-ab728.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1814-1cec-ab72a.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1814-1cec-ab73b.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1814-1cec-ab73d.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1814-1cec-ab74f.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1814-1cec-ab761.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1814-1cec-ab763.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1814-1cec-ab774.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1814-1cec-ab786.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1814-1cec-ab798.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1814-1cec-ab7a9.tmp
O43 - CFD: 26/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1834-1004-bbba7.tmp
O43 - CFD: 26/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1834-1004-bbbb9.tmp
O43 - CFD: 26/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1834-1004-bbbca.tmp
O43 - CFD: 26/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1834-1004-bbbeb.tmp
O43 - CFD: 26/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1834-1004-bbbfd.tmp
O43 - CFD: 26/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1834-1004-bbc0f.tmp
O43 - CFD: 26/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1834-1004-bbc20.tmp
O43 - CFD: 26/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1834-1004-bbc32.tmp
O43 - CFD: 26/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1834-1004-bbc44.tmp
O43 - CFD: 26/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1834-1004-bbc46.tmp
O43 - CFD: 26/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1834-1004-bbc57.tmp
O43 - CFD: 26/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1834-1004-bbc69.tmp
O43 - CFD: 26/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1834-1004-bbc6b.tmp
O43 - CFD: 26/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1834-1004-bbc7c.tmp
O43 - CFD: 26/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1834-1004-bbc8e.tmp
O43 - CFD: 26/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1834-1004-bbca0.tmp
O43 - CFD: 26/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1834-1004-bbcc1.tmp
O43 - CFD: 26/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1834-1004-bbcd3.tmp
O43 - CFD: 26/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1834-1004-bbcd5.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1874-cf4-1bae249.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1874-cf4-1bae25b.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1874-cf4-1bae25d.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1874-cf4-1bae26e.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1874-cf4-1bae280.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1874-cf4-1bae282.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1874-cf4-1bae294.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1874-cf4-1bae2a5.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1874-cf4-1bae2b7.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1874-cf4-1bae2b9.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1874-cf4-1bae2cb.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1874-cf4-1bae2cd.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1874-cf4-1bae2de.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1874-cf4-1bae2f0.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1874-cf4-1bae2f2.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1874-cf4-1bae303.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1874-cf4-1bae305.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1874-cf4-1bae317.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1874-cf4-1bae329.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1880-a1c-c5a027.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1880-a1c-c5a048.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1880-a1c-c5a05a.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1880-a1c-c5a05c.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1880-a1c-c5a07d.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1880-a1c-c5a08f.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1880-a1c-c5a0a1.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1880-a1c-c5a0b2.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1880-a1c-c5a0c4.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1880-a1c-c5a0d5.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1880-a1c-c5a0d7.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1880-a1c-c5a0e9.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1880-a1c-c5a0fb.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1880-a1c-c5a10c.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1880-a1c-c5a10e.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1880-a1c-c5a120.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1880-a1c-c5a132.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1880-a1c-c5a134.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1880-a1c-c5a145.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-191c-269c-32cfde8.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-191c-269c-32cfdf9.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-191c-269c-32cfe0b.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-191c-269c-32cfe1d.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-191c-269c-32cfe1f.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-191c-269c-32cfe30.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-191c-269c-32cfe42.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-191c-269c-32cfe44.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-191c-269c-32cfe56.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-191c-269c-32cfe67.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-191c-269c-32cfe69.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-191c-269c-32cfe7b.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-191c-269c-32cfe8c.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-191c-269c-32cfe8e.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-191c-269c-32cfea0.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-191c-269c-32cfec1.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-191c-269c-32cfec3.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-191c-269c-32cfed5.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-191c-269c-32cfee7.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1934-1444-97cc3.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1934-1444-97d13.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1934-1444-97d73.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1934-1444-97d85.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1934-1444-97d96.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1934-1444-97d98.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1934-1444-97db9.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1934-1444-97dcb.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1934-1444-97dfc.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1934-1444-97e2d.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1934-1444-97e4e.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1934-1444-97e60.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1934-1444-97e71.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1934-1444-97e83.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1934-1444-97e95.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1934-1444-97ea6.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1934-1444-97eb8.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1934-1444-97ec9.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1934-1444-97ecb.tmp
O43 - CFD: 06/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1944-17b4-361c5fe.tmp
O43 - CFD: 06/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1944-17b4-361c62e.tmp
O43 - CFD: 06/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1944-17b4-361c640.tmp
O43 - CFD: 06/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1944-17b4-361c652.tmp
O43 - CFD: 06/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1944-17b4-361c654.tmp
O43 - CFD: 06/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1944-17b4-361c665.tmp
O43 - CFD: 06/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1944-17b4-361c677.tmp
O43 - CFD: 06/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1944-17b4-361c679.tmp
O43 - CFD: 06/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1944-17b4-361c68b.tmp
O43 - CFD: 06/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1944-17b4-361c69c.tmp
O43 - CFD: 06/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1944-17b4-361c6ae.tmp
O43 - CFD: 06/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1944-17b4-361c6bf.tmp
O43 - CFD: 06/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1944-17b4-361c6d1.tmp
O43 - CFD: 06/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1944-17b4-361c6e3.tmp
O43 - CFD: 06/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1944-17b4-361c6e5.tmp
O43 - CFD: 06/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1944-17b4-361c6f6.tmp
O43 - CFD: 06/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1944-17b4-361c708.tmp
O43 - CFD: 06/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1944-17b4-361c729.tmp
O43 - CFD: 06/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1944-17b4-361c73b.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-1960-1d426fa.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-1960-1d4271b.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-1960-1d4272c.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-1960-1d4273e.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-1960-1d42740.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-1960-1d42752.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-1960-1d42763.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-1960-1d42765.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-1960-1d42777.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-1960-1d42789.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-1960-1d4279a.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-1960-1d4279c.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-1960-1d427ae.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-1960-1d427bf.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-1960-1d427c1.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-1960-1d427d3.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-1960-1d427e5.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-1960-1d427f6.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-1960-1d42808.tmp
O43 - CFD: 31/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1960-19a4-c7514.tmp
O43 - CFD: 31/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1960-19a4-c7525.tmp
O43 - CFD: 31/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1960-19a4-c7537.tmp
O43 - CFD: 31/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1960-19a4-c7549.tmp
O43 - CFD: 31/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1960-19a4-c755a.tmp
O43 - CFD: 31/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1960-19a4-c756c.tmp
O43 - CFD: 31/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1960-19a4-c757d.tmp
O43 - CFD: 31/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1960-19a4-c758f.tmp
O43 - CFD: 31/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1960-19a4-c7591.tmp
O43 - CFD: 31/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1960-19a4-c75a3.tmp
O43 - CFD: 31/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1960-19a4-c75b4.tmp
O43 - CFD: 31/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1960-19a4-c75c6.tmp
O43 - CFD: 31/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1960-19a4-c75d8.tmp
O43 - CFD: 31/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1960-19a4-c75da.tmp
O43 - CFD: 31/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1960-19a4-c75eb.tmp
O43 - CFD: 31/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1960-19a4-c75fd.tmp
O43 - CFD: 31/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1960-19a4-c75ff.tmp
O43 - CFD: 31/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1960-19a4-c7610.tmp
O43 - CFD: 31/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1960-19a4-c7622.tmp
O43 - CFD: 23/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1960-2608-9e001.tmp
O43 - CFD: 23/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1960-2608-9e023.tmp
O43 - CFD: 23/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1960-2608-9e044.tmp
O43 - CFD: 23/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1960-2608-9e075.tmp
O43 - CFD: 23/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1960-2608-9e0c5.tmp
O43 - CFD: 23/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1960-2608-9e134.tmp
O43 - CFD: 23/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1960-2608-9e146.tmp
O43 - CFD: 23/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1960-2608-9e167.tmp
O43 - CFD: 23/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1960-2608-9e188.tmp
O43 - CFD: 23/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1960-2608-9e207.tmp
O43 - CFD: 23/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1960-2608-9e257.tmp
O43 - CFD: 23/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1960-2608-9e269.tmp
O43 - CFD: 23/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1960-2608-9e28a.tmp
O43 - CFD: 23/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1960-2608-9e29c.tmp
O43 - CFD: 23/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1960-2608-9e2bd.tmp
O43 - CFD: 23/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1960-2608-9e32d.tmp
O43 - CFD: 23/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1960-2608-9e33e.tmp
O43 - CFD: 23/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1960-2608-9e35f.tmp
O43 - CFD: 23/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1960-2608-9e371.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1968-272c-13905a.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1968-272c-13906c.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1968-272c-13907d.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1968-272c-13908f.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1968-272c-139091.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1968-272c-1390a3.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1968-272c-1390b4.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1968-272c-1390b6.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1968-272c-1390c8.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1968-272c-1390d9.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1968-272c-1390eb.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1968-272c-1390fd.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1968-272c-1390ff.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1968-272c-139110.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1968-272c-139122.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1968-272c-139134.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1968-272c-139136.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1968-272c-139147.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1968-272c-139159.tmp
O43 - CFD: 04/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1968-71c-9858d.tmp
O43 - CFD: 04/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1968-71c-985be.tmp
O43 - CFD: 04/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1968-71c-985d0.tmp
O43 - CFD: 04/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1968-71c-985e1.tmp
O43 - CFD: 04/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1968-71c-985f3.tmp
O43 - CFD: 04/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1968-71c-98604.tmp
O43 - CFD: 04/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1968-71c-98616.tmp
O43 - CFD: 04/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1968-71c-98628.tmp
O43 - CFD: 04/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1968-71c-98649.tmp
O43 - CFD: 04/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1968-71c-9865b.tmp
O43 - CFD: 04/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1968-71c-9866c.tmp
O43 - CFD: 04/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1968-71c-9868d.tmp
O43 - CFD: 04/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1968-71c-9869f.tmp
O43 - CFD: 04/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1968-71c-986b1.tmp
O43 - CFD: 04/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1968-71c-986c2.tmp
O43 - CFD: 04/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1968-71c-986d4.tmp
O43 - CFD: 04/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1968-71c-986f5.tmp
O43 - CFD: 04/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1968-71c-98707.tmp
O43 - CFD: 04/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1968-71c-98718.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1984-1a60-9737c.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1984-1a60-9738e.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1984-1a60-9739f.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1984-1a60-973b1.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1984-1a60-973b3.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1984-1a60-973c5.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1984-1a60-973c7.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1984-1a60-973d8.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1984-1a60-973ea.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1984-1a60-973ec.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1984-1a60-973fd.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1984-1a60-9740f.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1984-1a60-97411.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1984-1a60-97423.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1984-1a60-97425.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1984-1a60-97436.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1984-1a60-97448.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1984-1a60-9744a.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1984-1a60-9745c.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1984-378-17e9d1.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1984-378-17e9f2.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1984-378-17ea04.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1984-378-17ea15.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1984-378-17ea17.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1984-378-17ea29.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1984-378-17ea3b.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1984-378-17ea3d.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1984-378-17ea4e.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1984-378-17ea60.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1984-378-17ea72.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1984-378-17ea83.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1984-378-17ea95.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1984-378-17ea97.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1984-378-17eaa8.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1984-378-17eaba.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1984-378-17eabc.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1984-378-17eace.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1984-378-17eadf.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1998-1340-530ab75.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1998-1340-530ab96.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1998-1340-530aba7.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1998-1340-530abc9.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1998-1340-530abda.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1998-1340-530abec.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1998-1340-530abfe.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1998-1340-530ac00.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1998-1340-530ac21.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1998-1340-530ac42.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1998-1340-530ac54.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1998-1340-530ac56.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1998-1340-530ac67.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1998-1340-530ac79.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1998-1340-530ac8b.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1998-1340-530ac9c.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1998-1340-530accd.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1998-1340-530acdf.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1998-1340-530acf0.tmp
O43 - CFD: 15/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19b4-1f4-e966d.tmp
O43 - CFD: 15/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19b4-1f4-e967f.tmp
O43 - CFD: 15/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19b4-1f4-e9690.tmp
O43 - CFD: 15/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19b4-1f4-e96a2.tmp
O43 - CFD: 15/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19b4-1f4-e96c3.tmp
O43 - CFD: 15/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19b4-1f4-e96d5.tmp
O43 - CFD: 15/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19b4-1f4-e96e6.tmp
O43 - CFD: 15/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19b4-1f4-e96e8.tmp
O43 - CFD: 15/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19b4-1f4-e96fa.tmp
O43 - CFD: 15/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19b4-1f4-e970c.tmp
O43 - CFD: 15/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19b4-1f4-e971d.tmp
O43 - CFD: 15/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19b4-1f4-e972f.tmp
O43 - CFD: 15/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19b4-1f4-e9741.tmp
O43 - CFD: 15/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19b4-1f4-e9743.tmp
O43 - CFD: 15/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19b4-1f4-e9764.tmp
O43 - CFD: 15/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19b4-1f4-e9766.tmp
O43 - CFD: 15/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19b4-1f4-e9787.tmp
O43 - CFD: 15/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19b4-1f4-e9799.tmp
O43 - CFD: 15/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19b4-1f4-e97aa.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19cc-2508-146246c.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19cc-2508-146247e.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19cc-2508-146248f.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19cc-2508-14624a1.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19cc-2508-14624a3.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19cc-2508-14624c4.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19cc-2508-14624d6.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19cc-2508-14624e7.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19cc-2508-14624f9.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19cc-2508-146251a.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19cc-2508-146251c.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19cc-2508-146252e.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19cc-2508-146253f.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19cc-2508-1462541.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19cc-2508-1462553.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19cc-2508-1462565.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19cc-2508-1462567.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19cc-2508-1462578.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19cc-2508-146258a.tmp
O43 - CFD: 24/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19dc-80c-a058b.tmp
O43 - CFD: 24/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19dc-80c-a05bc.tmp
O43 - CFD: 24/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19dc-80c-a05cd.tmp
O43 - CFD: 24/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19dc-80c-a05df.tmp
O43 - CFD: 24/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19dc-80c-a061f.tmp
O43 - CFD: 24/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19dc-80c-a0650.tmp
O43 - CFD: 24/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19dc-80c-a0671.tmp
O43 - CFD: 24/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19dc-80c-a06a2.tmp
O43 - CFD: 24/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19dc-80c-a06d3.tmp
O43 - CFD: 24/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19dc-80c-a06e5.tmp
O43 - CFD: 24/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19dc-80c-a0706.tmp
O43 - CFD: 24/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19dc-80c-a0718.tmp
O43 - CFD: 24/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19dc-80c-a0729.tmp
O43 - CFD: 24/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19dc-80c-a074b.tmp
O43 - CFD: 24/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19dc-80c-a075c.tmp
O43 - CFD: 24/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19dc-80c-a077d.tmp
O43 - CFD: 24/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19dc-80c-a079f.tmp
O43 - CFD: 24/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19dc-80c-a07b0.tmp
O43 - CFD: 24/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19dc-80c-a0810.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19f8-c7c-96b10.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19f8-c7c-96b21.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19f8-c7c-96b33.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19f8-c7c-96b45.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19f8-c7c-96b56.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19f8-c7c-96b78.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19f8-c7c-96b99.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19f8-c7c-96bba.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19f8-c7c-96bcc.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19f8-c7c-96bfd.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19f8-c7c-96c2d.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19f8-c7c-96c4f.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19f8-c7c-96cdd.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19f8-c7c-96d5c.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19f8-c7c-96d8d.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19f8-c7c-96d9f.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19f8-c7c-96db0.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19f8-c7c-96dd2.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19f8-c7c-96df3.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a0c-1c58-19fbd5f.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a0c-1c58-19fbdcf.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a0c-1c58-19fbe3e.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a0c-1c58-19fbead.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a0c-1c58-19fbf1d.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a0c-1c58-19fbf7d.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a0c-1c58-19fbffc.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a0c-1c58-19fbffe.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a0c-1c58-19fc06d.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a0c-1c58-19fc0dc.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a0c-1c58-19fc13c.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a0c-1c58-19fc1ab.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a0c-1c58-19fc21b.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a0c-1c58-19fc28a.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a0c-1c58-19fc2ea.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a0c-1c58-19fc3b7.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a0c-1c58-19fc417.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a0c-1c58-19fc513.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a0c-1c58-19fc524.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-1244-46318bf.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-1244-46318e0.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-1244-46318f2.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-1244-4631904.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-1244-4631915.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-1244-4631917.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-1244-4631929.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-1244-463193a.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-1244-463194c.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-1244-463194e.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-1244-4631960.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-1244-4631971.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-1244-4631973.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-1244-4631985.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-1244-4631997.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-1244-46319a8.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-1244-46319aa.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-1244-46319cb.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-1244-46319dd.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-267c-9be41.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-267c-9be52.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-267c-9be64.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-267c-9be76.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-267c-9be97.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-267c-9beb8.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-267c-9beba.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-267c-9becc.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-267c-9bedd.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-267c-9bedf.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-267c-9bef1.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-267c-9bf03.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-267c-9bf05.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-267c-9bf16.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-267c-9bf28.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-267c-9bf2a.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-267c-9bf3b.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-267c-9bf4d.tmp
O43 - CFD: 16/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-267c-9bf4f.tmp
O43 - CFD: 03/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a50-14b8-2804e53.tmp
O43 - CFD: 03/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a50-14b8-2804e94.tmp
O43 - CFD: 03/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a50-14b8-2804eb5.tmp
O43 - CFD: 03/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a50-14b8-2804ec7.tmp
O43 - CFD: 03/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a50-14b8-2804ed8.tmp
O43 - CFD: 03/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a50-14b8-2804eea.tmp
O43 - CFD: 03/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a50-14b8-2804efb.tmp
O43 - CFD: 03/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a50-14b8-2804f0d.tmp
O43 - CFD: 03/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a50-14b8-2804f1f.tmp
O43 - CFD: 03/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a50-14b8-2804f30.tmp
O43 - CFD: 03/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a50-14b8-2804f32.tmp
O43 - CFD: 03/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a50-14b8-2804f54.tmp
O43 - CFD: 03/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a50-14b8-2804f65.tmp
O43 - CFD: 03/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a50-14b8-2804f77.tmp
O43 - CFD: 03/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a50-14b8-2804f79.tmp
O43 - CFD: 03/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a50-14b8-2804f8a.tmp
O43 - CFD: 03/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a50-14b8-2804f9c.tmp
O43 - CFD: 03/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a50-14b8-2804fae.tmp
O43 - CFD: 03/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a50-14b8-2804fb0.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1aa4-1a94-96f56.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1aa4-1a94-96f77.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1aa4-1a94-96f98.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1aa4-1a94-96faa.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1aa4-1a94-96fac.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1aa4-1a94-96fbd.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1aa4-1a94-96fcf.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1aa4-1a94-96fd1.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1aa4-1a94-96fe3.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1aa4-1a94-97004.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1aa4-1a94-97025.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1aa4-1a94-97037.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1aa4-1a94-97048.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1aa4-1a94-9706a.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1aa4-1a94-9707b.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1aa4-1a94-9707d.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1aa4-1a94-9708f.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1aa4-1a94-970a0.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1aa4-1a94-970b2.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b0c-f3c-96478.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b0c-f3c-9649a.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b0c-f3c-9649c.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b0c-f3c-964ad.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b0c-f3c-964bf.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b0c-f3c-964d0.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b0c-f3c-964e2.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b0c-f3c-964f4.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b0c-f3c-964f6.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b0c-f3c-96507.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b0c-f3c-96519.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b0c-f3c-9652b.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b0c-f3c-9652d.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b0c-f3c-9653e.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b0c-f3c-96540.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b0c-f3c-96552.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b0c-f3c-96563.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b0c-f3c-96575.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b0c-f3c-96577.tmp
O43 - CFD: 30/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b28-125c-1f2e1b.tmp
O43 - CFD: 30/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b28-125c-1f2e5c.tmp
O43 - CFD: 30/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b28-125c-1f2e6d.tmp
O43 - CFD: 30/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b28-125c-1f2e6f.tmp
O43 - CFD: 30/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b28-125c-1f2e91.tmp
O43 - CFD: 30/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b28-125c-1f2ed1.tmp
O43 - CFD: 30/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b28-125c-1f2f02.tmp
O43 - CFD: 30/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b28-125c-1f2f14.tmp
O43 - CFD: 30/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b28-125c-1f2f25.tmp
O43 - CFD: 30/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b28-125c-1f2f37.tmp
O43 - CFD: 30/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b28-125c-1f2f49.tmp
O43 - CFD: 30/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b28-125c-1f2f4b.tmp
O43 - CFD: 30/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b28-125c-1f2f5c.tmp
O43 - CFD: 30/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b28-125c-1f2f7d.tmp
O43 - CFD: 30/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b28-125c-1f2f8f.tmp
O43 - CFD: 30/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b28-125c-1f2fa1.tmp
O43 - CFD: 30/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b28-125c-1f2fb2.tmp
O43 - CFD: 30/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b28-125c-1f2fd4.tmp
O43 - CFD: 30/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b28-125c-1f2ff5.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b74-1bb0-b1bf1a.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b74-1bb0-b1bf4b.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b74-1bb0-b1bf5d.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b74-1bb0-b1bf5f.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b74-1bb0-b1bf70.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b74-1bb0-b1bf82.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b74-1bb0-b1bf94.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b74-1bb0-b1bfa5.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b74-1bb0-b1bfa7.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b74-1bb0-b1bfb9.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b74-1bb0-b1bfcb.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b74-1bb0-b1bfdc.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b74-1bb0-b1bfde.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b74-1bb0-b1bff0.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b74-1bb0-b1c001.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b74-1bb0-b1c003.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b74-1bb0-b1c015.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b74-1bb0-b1c027.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b74-1bb0-b1c029.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b88-2630-268d50.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b88-2630-268d72.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b88-2630-268d83.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b88-2630-268d95.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b88-2630-268da6.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b88-2630-268db8.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b88-2630-268dca.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b88-2630-268ddb.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b88-2630-268ded.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b88-2630-268def.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b88-2630-268e01.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b88-2630-268e12.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b88-2630-268e24.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b88-2630-268e35.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b88-2630-268e47.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b88-2630-268e59.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b88-2630-268e5b.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b88-2630-268e6c.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b88-2630-268e9d.tmp
O43 - CFD: 09/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc4-2310-9fdea.tmp
O43 - CFD: 09/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc4-2310-9fe1a.tmp
O43 - CFD: 09/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc4-2310-9fe1c.tmp
O43 - CFD: 09/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc4-2310-9fe2e.tmp
O43 - CFD: 09/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc4-2310-9fe40.tmp
O43 - CFD: 09/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc4-2310-9fe51.tmp
O43 - CFD: 09/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc4-2310-9fe63.tmp
O43 - CFD: 09/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc4-2310-9fe75.tmp
O43 - CFD: 09/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc4-2310-9fe77.tmp
O43 - CFD: 09/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc4-2310-9fe88.tmp
O43 - CFD: 09/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc4-2310-9fe9a.tmp
O43 - CFD: 09/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc4-2310-9feab.tmp
O43 - CFD: 09/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc4-2310-9febd.tmp
O43 - CFD: 09/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc4-2310-9febf.tmp
O43 - CFD: 09/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc4-2310-9fed1.tmp
O43 - CFD: 09/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc4-2310-9fee2.tmp
O43 - CFD: 09/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc4-2310-9fee4.tmp
O43 - CFD: 09/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc4-2310-9fef6.tmp
O43 - CFD: 09/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc4-2310-9ff08.tmp
O43 - CFD: 22/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c08-1ddc-9d62e.tmp
O43 - CFD: 22/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c08-1ddc-9d65f.tmp
O43 - CFD: 22/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c08-1ddc-9d670.tmp
O43 - CFD: 22/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c08-1ddc-9d682.tmp
O43 - CFD: 22/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c08-1ddc-9d6e2.tmp
O43 - CFD: 22/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c08-1ddc-9d770.tmp
O43 - CFD: 22/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c08-1ddc-9d7e0.tmp
O43 - CFD: 22/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c08-1ddc-9d86e.tmp
O43 - CFD: 22/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c08-1ddc-9d9d8.tmp
O43 - CFD: 22/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c08-1ddc-9d9f9.tmp
O43 - CFD: 22/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c08-1ddc-9dac6.tmp
O43 - CFD: 22/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c08-1ddc-9db16.tmp
O43 - CFD: 22/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c08-1ddc-9dbc4.tmp
O43 - CFD: 22/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c08-1ddc-9dbf5.tmp
O43 - CFD: 22/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c08-1ddc-9dea6.tmp
O43 - CFD: 22/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c08-1ddc-9dfa2.tmp
O43 - CFD: 22/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c08-1ddc-9e6e8.tmp
O43 - CFD: 22/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c08-1ddc-9e7b5.tmp
O43 - CFD: 22/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c08-1ddc-9e7c6.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-1b34-9c13e.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-1b34-9c16f.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-1b34-9c171.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-1b34-9c1c1.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-1b34-9c1f2.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-1b34-9c204.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-1b34-9c215.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-1b34-9c227.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-1b34-9c239.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-1b34-9c24a.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-1b34-9c25c.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-1b34-9c26e.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-1b34-9c27f.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-1b34-9c291.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-1b34-9c293.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-1b34-9c2b4.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-1b34-9c2d5.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-1b34-9c2e7.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-1b34-9c2f9.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c24-2334-bb713.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c24-2334-bb725.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c24-2334-bb736.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c24-2334-bb738.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c24-2334-bb74a.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c24-2334-bb75c.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c24-2334-bb76d.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c24-2334-bb76f.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c24-2334-bb781.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c24-2334-bb792.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c24-2334-bb794.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c24-2334-bb7a6.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c24-2334-bb7b8.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c24-2334-bb7ba.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c24-2334-bb7cb.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c24-2334-bb7dd.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c24-2334-bb7df.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c24-2334-bb7f1.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c24-2334-bb802.tmp
O43 - CFD: 27/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c3c-20fc-e2256.tmp
O43 - CFD: 27/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c3c-20fc-e2278.tmp
O43 - CFD: 27/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c3c-20fc-e2299.tmp
O43 - CFD: 27/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c3c-20fc-e22aa.tmp
O43 - CFD: 27/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c3c-20fc-e22bc.tmp
O43 - CFD: 27/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c3c-20fc-e22ce.tmp
O43 - CFD: 27/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c3c-20fc-e22df.tmp
O43 - CFD: 27/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c3c-20fc-e22f1.tmp
O43 - CFD: 27/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c3c-20fc-e2303.tmp
O43 - CFD: 27/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c3c-20fc-e2314.tmp
O43 - CFD: 27/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c3c-20fc-e2326.tmp
O43 - CFD: 27/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c3c-20fc-e2337.tmp
O43 - CFD: 27/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c3c-20fc-e2339.tmp
O43 - CFD: 27/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c3c-20fc-e235b.tmp
O43 - CFD: 27/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c3c-20fc-e236c.tmp
O43 - CFD: 27/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c3c-20fc-e236e.tmp
O43 - CFD: 27/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c3c-20fc-e2380.tmp
O43 - CFD: 27/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c3c-20fc-e2392.tmp
O43 - CFD: 27/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c3c-20fc-e2394.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c44-1980-2b1c00.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c44-1980-2b1c12.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c44-1980-2b1c23.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c44-1980-2b1c35.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c44-1980-2b1c37.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c44-1980-2b1c49.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c44-1980-2b1c5a.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c44-1980-2b1c6c.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c44-1980-2b1c6e.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c44-1980-2b1c80.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c44-1980-2b1c91.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c44-1980-2b1c93.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c44-1980-2b1cb4.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c44-1980-2b1cc6.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c44-1980-2b1cc8.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c44-1980-2b1cda.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c44-1980-2b1cfb.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c44-1980-2b1d0d.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c44-1980-2b1d1e.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c48-ea8-e7652.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c48-ea8-e7664.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c48-ea8-e7676.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c48-ea8-e7697.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c48-ea8-e76c8.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c48-ea8-e7747.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c48-ea8-e7797.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c48-ea8-e77d7.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c48-ea8-e77e9.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c48-ea8-e77fb.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c48-ea8-e780c.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c48-ea8-e781e.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c48-ea8-e782f.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c48-ea8-e7831.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c48-ea8-e7843.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c48-ea8-e7845.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c48-ea8-e7857.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c48-ea8-e7859.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c48-ea8-e787a.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc4-104c-83de3b.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc4-104c-83de6c.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc4-104c-83de7d.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc4-104c-83de9f.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc4-104c-83deb0.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc4-104c-83dec2.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc4-104c-83ded3.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc4-104c-83ded5.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc4-104c-83dee7.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc4-104c-83dee9.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc4-104c-83defb.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc4-104c-83df0c.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc4-104c-83df2e.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc4-104c-83df3f.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc4-104c-83df41.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc4-104c-83df62.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc4-104c-83df64.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc4-104c-83df76.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc4-104c-83df88.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc8-1140-f26b70.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc8-1140-f26b82.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc8-1140-f26b84.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc8-1140-f26b95.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc8-1140-f26ba7.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc8-1140-f26bb9.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc8-1140-f26bda.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc8-1140-f26bec.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc8-1140-f26bfd.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc8-1140-f26c0f.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc8-1140-f26c20.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc8-1140-f26c22.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc8-1140-f26c34.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc8-1140-f26c46.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc8-1140-f26c57.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc8-1140-f26c69.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc8-1140-f26c6b.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc8-1140-f26c7d.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc8-1140-f26c8e.tmp
O43 - CFD: 06/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ce8-7d4-abb6d.tmp
O43 - CFD: 06/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ce8-7d4-abb8e.tmp
O43 - CFD: 06/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ce8-7d4-abba0.tmp
O43 - CFD: 06/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ce8-7d4-abba2.tmp
O43 - CFD: 06/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ce8-7d4-abbb4.tmp
O43 - CFD: 06/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ce8-7d4-abbc5.tmp
O43 - CFD: 06/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ce8-7d4-abbd7.tmp
O43 - CFD: 06/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ce8-7d4-abbf8.tmp
O43 - CFD: 06/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ce8-7d4-abbfa.tmp
O43 - CFD: 06/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ce8-7d4-abc0c.tmp
O43 - CFD: 06/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ce8-7d4-abc2d.tmp
O43 - CFD: 06/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ce8-7d4-abc3f.tmp
O43 - CFD: 06/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ce8-7d4-abc41.tmp
O43 - CFD: 06/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ce8-7d4-abc62.tmp
O43 - CFD: 06/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ce8-7d4-abc74.tmp
O43 - CFD: 06/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ce8-7d4-abc85.tmp
O43 - CFD: 06/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ce8-7d4-abc97.tmp
O43 - CFD: 06/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ce8-7d4-abca8.tmp
O43 - CFD: 06/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ce8-7d4-abcba.tmp
O43 - CFD: 16/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d0-ab0-162722.tmp
O43 - CFD: 16/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d0-ab0-162743.tmp
O43 - CFD: 16/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d0-ab0-162745.tmp
O43 - CFD: 16/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d0-ab0-162766.tmp
O43 - CFD: 16/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d0-ab0-162778.tmp
O43 - CFD: 16/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d0-ab0-162799.tmp
O43 - CFD: 16/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d0-ab0-1627ab.tmp
O43 - CFD: 16/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d0-ab0-1627ad.tmp
O43 - CFD: 16/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d0-ab0-1627bf.tmp
O43 - CFD: 16/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d0-ab0-1627d0.tmp
O43 - CFD: 16/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d0-ab0-1627e2.tmp
O43 - CFD: 16/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d0-ab0-1627e4.tmp
O43 - CFD: 16/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d0-ab0-1627f5.tmp
O43 - CFD: 16/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d0-ab0-162807.tmp
O43 - CFD: 16/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d0-ab0-162809.tmp
O43 - CFD: 16/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d0-ab0-16284a.tmp
O43 - CFD: 16/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d0-ab0-16285b.tmp
O43 - CFD: 16/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d0-ab0-16285d.tmp
O43 - CFD: 16/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d0-ab0-16286f.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d4c-1c90-1ef25a.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d4c-1c90-1ef27c.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d4c-1c90-1ef28d.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d4c-1c90-1ef2be.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d4c-1c90-1ef2df.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d4c-1c90-1ef310.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d4c-1c90-1ef351.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d4c-1c90-1ef372.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d4c-1c90-1ef384.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d4c-1c90-1ef3a5.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d4c-1c90-1ef3b7.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d4c-1c90-1ef3d8.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d4c-1c90-1ef409.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d4c-1c90-1ef42a.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d4c-1c90-1ef43c.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d4c-1c90-1ef45d.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d4c-1c90-1ef47e.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d4c-1c90-1ef490.tmp
O43 - CFD: 17/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d4c-1c90-1ef4c1.tmp
O43 - CFD: 30/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d50-e98-9aae8.tmp
O43 - CFD: 30/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d50-e98-9ab28.tmp
O43 - CFD: 30/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d50-e98-9abd6.tmp
O43 - CFD: 30/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d50-e98-9abf7.tmp
O43 - CFD: 30/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d50-e98-9ac28.tmp
O43 - CFD: 30/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d50-e98-9ac49.tmp
O43 - CFD: 30/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d50-e98-9ac7a.tmp
O43 - CFD: 30/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d50-e98-9ac9b.tmp
O43 - CFD: 30/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d50-e98-9acbd.tmp
O43 - CFD: 30/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d50-e98-9acde.tmp
O43 - CFD: 30/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d50-e98-9acf0.tmp
O43 - CFD: 30/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d50-e98-9ad11.tmp
O43 - CFD: 30/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d50-e98-9ad9f.tmp
O43 - CFD: 30/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d50-e98-9ade0.tmp
O43 - CFD: 30/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d50-e98-9ae40.tmp
O43 - CFD: 30/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d50-e98-9af3c.tmp
O43 - CFD: 30/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d50-e98-9afda.tmp
O43 - CFD: 30/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d50-e98-9b01a.tmp
O43 - CFD: 30/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d50-e98-9b05b.tmp
O43 - CFD: 28/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d58-1e2c-1ad9b5.tmp
O43 - CFD: 28/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d58-1e2c-1ad9e6.tmp
O43 - CFD: 28/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d58-1e2c-1ada17.tmp
O43 - CFD: 28/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d58-1e2c-1ada48.tmp
O43 - CFD: 28/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d58-1e2c-1ada79.tmp
O43 - CFD: 28/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d58-1e2c-1ada9a.tmp
O43 - CFD: 28/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d58-1e2c-1ada9c.tmp
O43 - CFD: 28/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d58-1e2c-1adabd.tmp
O43 - CFD: 28/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d58-1e2c-1adacf.tmp
O43 - CFD: 28/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d58-1e2c-1adae1.tmp
O43 - CFD: 28/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d58-1e2c-1adaf2.tmp
O43 - CFD: 28/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d58-1e2c-1adb04.tmp
O43 - CFD: 28/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d58-1e2c-1adb15.tmp
O43 - CFD: 28/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d58-1e2c-1adb27.tmp
O43 - CFD: 28/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d58-1e2c-1adb39.tmp
O43 - CFD: 28/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d58-1e2c-1adb5a.tmp
O43 - CFD: 28/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d58-1e2c-1adb5c.tmp
O43 - CFD: 28/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d58-1e2c-1adb6e.tmp
O43 - CFD: 28/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d58-1e2c-1adb9e.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d5c-1e84-96b5e.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d5c-1e84-96b7f.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d5c-1e84-96b81.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d5c-1e84-96b93.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d5c-1e84-96ba4.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d5c-1e84-96bc6.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d5c-1e84-96bd7.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d5c-1e84-96be9.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d5c-1e84-96beb.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d5c-1e84-96c3b.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d5c-1e84-96c4d.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d5c-1e84-96c4f.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d5c-1e84-96c60.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d5c-1e84-96c72.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d5c-1e84-96c84.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d5c-1e84-96c86.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d5c-1e84-96c97.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d5c-1e84-96ca9.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d5c-1e84-96cab.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d6c-df4-ae4a85.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d6c-df4-ae4a97.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d6c-df4-ae4aa8.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d6c-df4-ae4aaa.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d6c-df4-ae4abc.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d6c-df4-ae4ace.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d6c-df4-ae4adf.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d6c-df4-ae4ae1.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d6c-df4-ae4af3.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d6c-df4-ae4b05.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d6c-df4-ae4b07.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d6c-df4-ae4b18.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d6c-df4-ae4b2a.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d6c-df4-ae4b3b.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d6c-df4-ae4b3d.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d6c-df4-ae4b4f.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d6c-df4-ae4b61.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d6c-df4-ae4b63.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d6c-df4-ae4b74.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d90-1b58-131f743.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d90-1b58-131f754.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d90-1b58-131f766.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d90-1b58-131f778.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d90-1b58-131f799.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d90-1b58-131f79b.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d90-1b58-131f7ac.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d90-1b58-131f7be.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d90-1b58-131f7d0.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d90-1b58-131f7d2.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d90-1b58-131f7e3.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d90-1b58-131f7f5.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d90-1b58-131f807.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d90-1b58-131f809.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d90-1b58-131f81a.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d90-1b58-131f82c.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d90-1b58-131f83d.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d90-1b58-131f83f.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d90-1b58-131f851.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dcc-1dc8-99462.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dcc-1dc8-99474.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dcc-1dc8-99485.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dcc-1dc8-99497.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dcc-1dc8-994a8.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dcc-1dc8-994aa.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dcc-1dc8-994cc.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dcc-1dc8-994ed.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dcc-1dc8-994ef.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dcc-1dc8-99501.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dcc-1dc8-99512.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dcc-1dc8-99524.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dcc-1dc8-99535.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dcc-1dc8-99547.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dcc-1dc8-99559.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dcc-1dc8-9955b.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dcc-1dc8-9958c.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dcc-1dc8-9958e.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dcc-1dc8-9959f.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1de0-1eb4-9a9de.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1de0-1eb4-9a9ff.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1de0-1eb4-9aa11.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1de0-1eb4-9aa22.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1de0-1eb4-9aa44.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1de0-1eb4-9aa65.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1de0-1eb4-9aa77.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1de0-1eb4-9aa98.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1de0-1eb4-9aad8.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1de0-1eb4-9aafa.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1de0-1eb4-9aafc.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1de0-1eb4-9ab2c.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1de0-1eb4-9ab4e.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1de0-1eb4-9ab6f.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1de0-1eb4-9aba0.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1de0-1eb4-9ac00.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1de0-1eb4-9ac5f.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1de0-1eb4-9ac90.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1de0-1eb4-9acf0.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e2c-1390-1fe7ba5.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e2c-1390-1fe7c14.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e2c-1390-1fe7c26.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e2c-1390-1fe7c38.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e2c-1390-1fe7c59.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e2c-1390-1fe7c6b.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e2c-1390-1fe7c8c.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e2c-1390-1fe7cad.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e2c-1390-1fe7d0d.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e2c-1390-1fe7d2e.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e2c-1390-1fe7d5f.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e2c-1390-1fe7d71.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e2c-1390-1fe7db1.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e2c-1390-1fe7de2.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e2c-1390-1fe7e13.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e2c-1390-1fe7e34.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e2c-1390-1fe7e65.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e2c-1390-1fe7e86.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e2c-1390-1fe7ea7.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e3c-22b4-3f9622f.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e3c-22b4-3f96241.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e3c-22b4-3f96253.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e3c-22b4-3f96264.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e3c-22b4-3f96276.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e3c-22b4-3f96288.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e3c-22b4-3f9628a.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e3c-22b4-3f9629b.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e3c-22b4-3f962ad.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e3c-22b4-3f962be.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e3c-22b4-3f962d0.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e3c-22b4-3f962e2.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e3c-22b4-3f962f3.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e3c-22b4-3f96305.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e3c-22b4-3f96317.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e3c-22b4-3f96319.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e3c-22b4-3f9632a.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e3c-22b4-3f9633c.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e3c-22b4-3f9634d.tmp
O43 - CFD: 27/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e50-1e48-a35a3.tmp
O43 - CFD: 27/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e50-1e48-a374b.tmp
O43 - CFD: 27/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e50-1e48-a376c.tmp
O43 - CFD: 27/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e50-1e48-a37ad.tmp
O43 - CFD: 27/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e50-1e48-a37ed.tmp
O43 - CFD: 27/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e50-1e48-a381e.tmp
O43 - CFD: 27/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e50-1e48-a386e.tmp
O43 - CFD: 27/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e50-1e48-a38ce.tmp
O43 - CFD: 27/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e50-1e48-a390f.tmp
O43 - CFD: 27/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e50-1e48-a393f.tmp
O43 - CFD: 27/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e50-1e48-a399f.tmp
O43 - CFD: 27/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e50-1e48-a39c0.tmp
O43 - CFD: 27/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e50-1e48-a39e2.tmp
O43 - CFD: 27/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e50-1e48-a39f3.tmp
O43 - CFD: 27/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e50-1e48-a3a15.tmp
O43 - CFD: 27/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e50-1e48-a3a55.tmp
O43 - CFD: 27/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e50-1e48-a3aa5.tmp
O43 - CFD: 27/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e50-1e48-a3ae6.tmp
O43 - CFD: 27/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e50-1e48-a3b45.tmp
O43 - CFD: 18/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e54-2490-35ec0dc.tmp
O43 - CFD: 18/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e54-2490-35ec0ed.tmp
O43 - CFD: 18/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e54-2490-35ec10f.tmp
O43 - CFD: 18/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e54-2490-35ec120.tmp
O43 - CFD: 18/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e54-2490-35ec122.tmp
O43 - CFD: 18/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e54-2490-35ec134.tmp
O43 - CFD: 18/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e54-2490-35ec145.tmp
O43 - CFD: 18/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e54-2490-35ec157.tmp
O43 - CFD: 18/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e54-2490-35ec159.tmp
O43 - CFD: 18/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e54-2490-35ec16b.tmp
O43 - CFD: 18/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e54-2490-35ec18c.tmp
O43 - CFD: 18/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e54-2490-35ec1ad.tmp
O43 - CFD: 18/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e54-2490-35ec1af.tmp
O43 - CFD: 18/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e54-2490-35ec1e0.tmp
O43 - CFD: 18/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e54-2490-35ec1e2.tmp
O43 - CFD: 18/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e54-2490-35ec1f4.tmp
O43 - CFD: 18/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e54-2490-35ec205.tmp
O43 - CFD: 18/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e54-2490-35ec217.tmp
O43 - CFD: 18/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e54-2490-35ec229.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e58-25f4-99e64.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e58-25f4-99e76.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e58-25f4-99e97.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e58-25f4-99e99.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e58-25f4-99ebb.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e58-25f4-99ebd.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e58-25f4-99ece.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e58-25f4-99ed0.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e58-25f4-99ee2.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e58-25f4-99ef3.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e58-25f4-99f05.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e58-25f4-99f07.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e58-25f4-99f28.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e58-25f4-99f2a.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e58-25f4-99f2c.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e58-25f4-99f3e.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e58-25f4-99f50.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e58-25f4-99f52.tmp
O43 - CFD: 25/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e58-25f4-99f63.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e68-1070-d005c.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e68-1070-d006e.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e68-1070-d007f.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e68-1070-d0091.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e68-1070-d00a2.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e68-1070-d00b4.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e68-1070-d00c6.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e68-1070-d00c8.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e68-1070-d00d9.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e68-1070-d00eb.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e68-1070-d011c.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e68-1070-d012d.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e68-1070-d013f.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e68-1070-d0151.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e68-1070-d0162.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e68-1070-d0174.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e68-1070-d0186.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e68-1070-d0188.tmp
O43 - CFD: 01/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e68-1070-d0199.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ecc-1304-98937.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ecc-1304-98958.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ecc-1304-98969.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ecc-1304-9896b.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ecc-1304-9897d.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ecc-1304-9898f.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ecc-1304-98991.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ecc-1304-989a2.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ecc-1304-989b4.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ecc-1304-989b6.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ecc-1304-989c8.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ecc-1304-989d9.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ecc-1304-989eb.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ecc-1304-989fc.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ecc-1304-98a0e.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ecc-1304-98a20.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ecc-1304-98a31.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ecc-1304-98a43.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ecc-1304-98a55.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f28-1bfc-116869.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f28-1bfc-11687b.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f28-1bfc-11688c.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f28-1bfc-11689e.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f28-1bfc-1168b0.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f28-1bfc-1168b2.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f28-1bfc-1168c3.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f28-1bfc-1168d5.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f28-1bfc-1168e7.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f28-1bfc-1168f8.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f28-1bfc-11690a.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f28-1bfc-11691b.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f28-1bfc-11692d.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f28-1bfc-11693f.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f28-1bfc-116950.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f28-1bfc-116962.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f28-1bfc-116964.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f28-1bfc-116976.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f28-1bfc-116987.tmp
O43 - CFD: 19/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f2c-20dc-a3d25.tmp
O43 - CFD: 19/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f2c-20dc-a3d46.tmp
O43 - CFD: 19/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f2c-20dc-a3d68.tmp
O43 - CFD: 19/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f2c-20dc-a3dc7.tmp
O43 - CFD: 19/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f2c-20dc-a3dd9.tmp
O43 - CFD: 19/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f2c-20dc-a3e0a.tmp
O43 - CFD: 19/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f2c-20dc-a3e1b.tmp
O43 - CFD: 19/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f2c-20dc-a3e3d.tmp
O43 - CFD: 19/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f2c-20dc-a3e4e.tmp
O43 - CFD: 19/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f2c-20dc-a3e70.tmp
O43 - CFD: 19/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f2c-20dc-a3ea0.tmp
O43 - CFD: 19/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f2c-20dc-a3eb2.tmp
O43 - CFD: 19/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f2c-20dc-a3ec4.tmp
O43 - CFD: 19/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f2c-20dc-a3ec6.tmp
O43 - CFD: 19/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f2c-20dc-a3ed7.tmp
O43 - CFD: 19/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f2c-20dc-a3ee9.tmp
O43 - CFD: 19/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f2c-20dc-a3efb.tmp
O43 - CFD: 19/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f2c-20dc-a3f4b.tmp
O43 - CFD: 19/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f2c-20dc-a3f6c.tmp
O43 - CFD: 14/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ffc-1d64-990a9.tmp
O43 - CFD: 14/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ffc-1d64-990ca.tmp
O43 - CFD: 14/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ffc-1d64-990dc.tmp
O43 - CFD: 14/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ffc-1d64-990ed.tmp
O43 - CFD: 14/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ffc-1d64-990ff.tmp
O43 - CFD: 14/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ffc-1d64-99101.tmp
O43 - CFD: 14/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ffc-1d64-99113.tmp
O43 - CFD: 14/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ffc-1d64-99134.tmp
O43 - CFD: 14/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ffc-1d64-992dc.tmp
O43 - CFD: 14/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ffc-1d64-9932c.tmp
O43 - CFD: 14/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ffc-1d64-9933d.tmp
O43 - CFD: 14/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ffc-1d64-9935f.tmp
O43 - CFD: 14/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ffc-1d64-99370.tmp
O43 - CFD: 14/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ffc-1d64-993a1.tmp
O43 - CFD: 14/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ffc-1d64-993f1.tmp
O43 - CFD: 14/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ffc-1d64-99403.tmp
O43 - CFD: 14/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ffc-1d64-99424.tmp
O43 - CFD: 14/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ffc-1d64-99436.tmp
O43 - CFD: 14/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ffc-1d64-99457.tmp
O43 - CFD: 21/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2024-2068-114d30.tmp
O43 - CFD: 21/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2024-2068-114d42.tmp
O43 - CFD: 21/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2024-2068-114d54.tmp
O43 - CFD: 21/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2024-2068-114d65.tmp
O43 - CFD: 21/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2024-2068-114d77.tmp
O43 - CFD: 21/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2024-2068-114d79.tmp
O43 - CFD: 21/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2024-2068-114d8b.tmp
O43 - CFD: 21/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2024-2068-114d9c.tmp
O43 - CFD: 21/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2024-2068-114d9e.tmp
O43 - CFD: 21/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2024-2068-114db0.tmp
O43 - CFD: 21/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2024-2068-114dc1.tmp
O43 - CFD: 21/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2024-2068-114dc3.tmp
O43 - CFD: 21/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2024-2068-114dd5.tmp
O43 - CFD: 21/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2024-2068-114de7.tmp
O43 - CFD: 21/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2024-2068-114de9.tmp
O43 - CFD: 21/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2024-2068-114dfa.tmp
O43 - CFD: 21/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2024-2068-114e0c.tmp
O43 - CFD: 21/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2024-2068-114e1e.tmp
O43 - CFD: 21/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2024-2068-114e20.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2054-25a4-1ac090.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2054-25a4-1ac0a1.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2054-25a4-1ac0b3.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2054-25a4-1ac0c5.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2054-25a4-1ac0c7.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2054-25a4-1ac0d8.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2054-25a4-1ac0ea.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2054-25a4-1ac0fc.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2054-25a4-1ac11d.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2054-25a4-1ac12e.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2054-25a4-1ac140.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2054-25a4-1ac142.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2054-25a4-1ac154.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2054-25a4-1ac165.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2054-25a4-1ac167.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2054-25a4-1ac179.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2054-25a4-1ac18b.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2054-25a4-1ac18d.tmp
O43 - CFD: 08/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2054-25a4-1ac19e.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2070-15cc-276d50.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2070-15cc-276d71.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2070-15cc-276d73.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2070-15cc-276d85.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2070-15cc-276d87.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2070-15cc-276d99.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2070-15cc-276daa.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2070-15cc-276dac.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2070-15cc-276dbe.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2070-15cc-276dcf.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2070-15cc-276dd1.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2070-15cc-276de3.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2070-15cc-276df5.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2070-15cc-276df7.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2070-15cc-276e08.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2070-15cc-276e0a.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2070-15cc-276e1c.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2070-15cc-276e2e.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2070-15cc-276e3f.tmp
O43 - CFD: 14/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2080-5d4-4307a5f.tmp
O43 - CFD: 14/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2080-5d4-4307a81.tmp
O43 - CFD: 14/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2080-5d4-4307ab1.tmp
O43 - CFD: 14/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2080-5d4-4307ac3.tmp
O43 - CFD: 14/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2080-5d4-4307ad5.tmp
O43 - CFD: 14/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2080-5d4-4307ae6.tmp
O43 - CFD: 14/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2080-5d4-4307b08.tmp
O43 - CFD: 14/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2080-5d4-4307b19.tmp
O43 - CFD: 14/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2080-5d4-4307b2b.tmp
O43 - CFD: 14/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2080-5d4-4307b3c.tmp
O43 - CFD: 14/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2080-5d4-4307b4e.tmp
O43 - CFD: 14/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2080-5d4-4307b60.tmp
O43 - CFD: 14/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2080-5d4-4307b71.tmp
O43 - CFD: 14/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2080-5d4-4307b83.tmp
O43 - CFD: 14/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2080-5d4-4307b95.tmp
O43 - CFD: 14/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2080-5d4-4307ba6.tmp
O43 - CFD: 14/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2080-5d4-4307ba8.tmp
O43 - CFD: 14/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2080-5d4-4307bba.tmp
O43 - CFD: 14/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2080-5d4-4307bdb.tmp
O43 - CFD: 28/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-20ac-e8-127904c.tmp
O43 - CFD: 28/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-20ac-e8-127906d.tmp
O43 - CFD: 28/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-20ac-e8-127906f.tmp
O43 - CFD: 28/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-20ac-e8-1279081.tmp
O43 - CFD: 28/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-20ac-e8-1279092.tmp
O43 - CFD: 28/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-20ac-e8-1279094.tmp
O43 - CFD: 28/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-20ac-e8-12790a6.tmp
O43 - CFD: 28/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-20ac-e8-12790b8.tmp
O43 - CFD: 28/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-20ac-e8-12790c9.tmp
O43 - CFD: 28/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-20ac-e8-12790db.tmp
O43 - CFD: 28/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-20ac-e8-12790dd.tmp
O43 - CFD: 28/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-20ac-e8-12790ef.tmp
O43 - CFD: 28/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-20ac-e8-12790f1.tmp
O43 - CFD: 28/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-20ac-e8-1279112.tmp
O43 - CFD: 28/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-20ac-e8-1279123.tmp
O43 - CFD: 28/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-20ac-e8-1279125.tmp
O43 - CFD: 28/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-20ac-e8-1279137.tmp
O43 - CFD: 28/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-20ac-e8-1279139.tmp
O43 - CFD: 28/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-20ac-e8-127914b.tmp
O43 - CFD: 29/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2118-b44-181ce7.tmp
O43 - CFD: 29/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2118-b44-181d08.tmp
O43 - CFD: 29/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2118-b44-181d1a.tmp
O43 - CFD: 29/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2118-b44-181d2c.tmp
O43 - CFD: 29/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2118-b44-181d3d.tmp
O43 - CFD: 29/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2118-b44-181d3f.tmp
O43 - CFD: 29/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2118-b44-181d51.tmp
O43 - CFD: 29/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2118-b44-181d62.tmp
O43 - CFD: 29/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2118-b44-181d74.tmp
O43 - CFD: 29/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2118-b44-181d86.tmp
O43 - CFD: 29/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2118-b44-181d88.tmp
O43 - CFD: 29/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2118-b44-181d99.tmp
O43 - CFD: 29/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2118-b44-181dab.tmp
O43 - CFD: 29/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2118-b44-181dad.tmp
O43 - CFD: 29/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2118-b44-181dbf.tmp
O43 - CFD: 29/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2118-b44-181dd0.tmp
O43 - CFD: 29/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2118-b44-181de2.tmp
O43 - CFD: 29/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2118-b44-181de4.tmp
O43 - CFD: 29/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2118-b44-181df5.tmp
O43 - CFD: 15/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-211c-275c-25dc523.tmp
O43 - CFD: 15/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-211c-275c-25dc535.tmp
O43 - CFD: 15/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-211c-275c-25dc537.tmp
O43 - CFD: 15/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-211c-275c-25dc549.tmp
O43 - CFD: 15/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-211c-275c-25dc55a.tmp
O43 - CFD: 15/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-211c-275c-25dc55c.tmp
O43 - CFD: 15/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-211c-275c-25dc56e.tmp
O43 - CFD: 15/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-211c-275c-25dc570.tmp
O43 - CFD: 15/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-211c-275c-25dc582.tmp
O43 - CFD: 15/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-211c-275c-25dc593.tmp
O43 - CFD: 15/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-211c-275c-25dc5a5.tmp
O43 - CFD: 15/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-211c-275c-25dc5b6.tmp
O43 - CFD: 15/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-211c-275c-25dc5c8.tmp
O43 - CFD: 15/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-211c-275c-25dc5ca.tmp
O43 - CFD: 15/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-211c-275c-25dc5dc.tmp
O43 - CFD: 15/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-211c-275c-25dc5ed.tmp
O43 - CFD: 15/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-211c-275c-25dc5ff.tmp
O43 - CFD: 15/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-211c-275c-25dc601.tmp
O43 - CFD: 15/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-211c-275c-25dc613.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2120-1dd8-5d60e6.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2120-1dd8-5d60f7.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2120-1dd8-5d6109.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2120-1dd8-5d610b.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2120-1dd8-5d611d.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2120-1dd8-5d612e.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2120-1dd8-5d6140.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2120-1dd8-5d6142.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2120-1dd8-5d6153.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2120-1dd8-5d6165.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2120-1dd8-5d6177.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2120-1dd8-5d6188.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2120-1dd8-5d618a.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2120-1dd8-5d618c.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2120-1dd8-5d619e.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2120-1dd8-5d61a0.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2120-1dd8-5d61b2.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2120-1dd8-5d61c3.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2120-1dd8-5d61c5.tmp
O43 - CFD: 04/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2178-5b0-167c4f1.tmp
O43 - CFD: 04/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2178-5b0-167c503.tmp
O43 - CFD: 04/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2178-5b0-167c514.tmp
O43 - CFD: 04/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2178-5b0-167c526.tmp
O43 - CFD: 04/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2178-5b0-167c528.tmp
O43 - CFD: 04/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2178-5b0-167c53a.tmp
O43 - CFD: 04/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2178-5b0-167c54b.tmp
O43 - CFD: 04/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2178-5b0-167c55d.tmp
O43 - CFD: 04/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2178-5b0-167c55f.tmp
O43 - CFD: 04/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2178-5b0-167c571.tmp
O43 - CFD: 04/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2178-5b0-167c582.tmp
O43 - CFD: 04/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2178-5b0-167c584.tmp
O43 - CFD: 04/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2178-5b0-167c596.tmp
O43 - CFD: 04/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2178-5b0-167c5a7.tmp
O43 - CFD: 04/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2178-5b0-167c5b9.tmp
O43 - CFD: 04/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2178-5b0-167c5cb.tmp
O43 - CFD: 04/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2178-5b0-167c5cd.tmp
O43 - CFD: 04/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2178-5b0-167c5de.tmp
O43 - CFD: 04/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2178-5b0-167c5f0.tmp
O43 - CFD: 12/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2184-201c-38c61c4.tmp
O43 - CFD: 12/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2184-201c-38c61e5.tmp
O43 - CFD: 12/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2184-201c-38c61e7.tmp
O43 - CFD: 12/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2184-201c-38c61f9.tmp
O43 - CFD: 12/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2184-201c-38c620b.tmp
O43 - CFD: 12/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2184-201c-38c620d.tmp
O43 - CFD: 12/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2184-201c-38c622e.tmp
O43 - CFD: 12/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2184-201c-38c6240.tmp
O43 - CFD: 12/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2184-201c-38c6242.tmp
O43 - CFD: 12/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2184-201c-38c6263.tmp
O43 - CFD: 12/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2184-201c-38c6274.tmp
O43 - CFD: 12/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2184-201c-38c6276.tmp
O43 - CFD: 12/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2184-201c-38c6288.tmp
O43 - CFD: 12/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2184-201c-38c629a.tmp
O43 - CFD: 12/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2184-201c-38c629c.tmp
O43 - CFD: 12/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2184-201c-38c62bd.tmp
O43 - CFD: 12/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2184-201c-38c62bf.tmp
O43 - CFD: 12/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2184-201c-38c62d1.tmp
O43 - CFD: 12/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2184-201c-38c62e2.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-218c-1cd0-709567.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-218c-1cd0-709588.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-218c-1cd0-70958a.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-218c-1cd0-70959c.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-218c-1cd0-7095ad.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-218c-1cd0-7095af.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-218c-1cd0-7095c1.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-218c-1cd0-7095d2.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-218c-1cd0-7095e4.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-218c-1cd0-7095e6.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-218c-1cd0-7095f8.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-218c-1cd0-709609.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-218c-1cd0-70960b.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-218c-1cd0-70961d.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-218c-1cd0-70962f.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-218c-1cd0-709631.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-218c-1cd0-709642.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-218c-1cd0-709654.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-218c-1cd0-709656.tmp
O43 - CFD: 08/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-219c-2620-9d72e06.tmp
O43 - CFD: 08/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-219c-2620-9d72e18.tmp
O43 - CFD: 08/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-219c-2620-9d72e29.tmp
O43 - CFD: 08/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-219c-2620-9d72e2b.tmp
O43 - CFD: 08/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-219c-2620-9d72e3d.tmp
O43 - CFD: 08/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-219c-2620-9d72e4f.tmp
O43 - CFD: 08/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-219c-2620-9d72e60.tmp
O43 - CFD: 08/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-219c-2620-9d72e72.tmp
O43 - CFD: 08/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-219c-2620-9d72e84.tmp
O43 - CFD: 08/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-219c-2620-9d72e95.tmp
O43 - CFD: 08/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-219c-2620-9d72e97.tmp
O43 - CFD: 08/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-219c-2620-9d72ea9.tmp
O43 - CFD: 08/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-219c-2620-9d72eba.tmp
O43 - CFD: 08/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-219c-2620-9d72ecc.tmp
O43 - CFD: 08/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-219c-2620-9d72ece.tmp
O43 - CFD: 08/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-219c-2620-9d72ee0.tmp
O43 - CFD: 08/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-219c-2620-9d72ef1.tmp
O43 - CFD: 08/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-219c-2620-9d72ef3.tmp
O43 - CFD: 08/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-219c-2620-9d72f05.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21c0-e28-3b6d9d.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21c0-e28-3b6e6a.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21c0-e28-3b6e8b.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21c0-e28-3b6ead.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21c0-e28-3b6edd.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21c0-e28-3b6f2e.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21c0-e28-3b6f5e.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21c0-e28-3b6f80.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21c0-e28-3b6fa1.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21c0-e28-3b7020.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21c0-e28-3b7060.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21c0-e28-3b7091.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21c0-e28-3b7101.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21c0-e28-3b7122.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21c0-e28-3b7134.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21c0-e28-3b7164.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21c0-e28-3b7232.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21c0-e28-3b7243.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21c0-e28-3b72d2.tmp
O43 - CFD: 29/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21ec-1ca4-b13ed.tmp
O43 - CFD: 29/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21ec-1ca4-b142e.tmp
O43 - CFD: 29/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21ec-1ca4-b1430.tmp
O43 - CFD: 29/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21ec-1ca4-b1442.tmp
O43 - CFD: 29/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21ec-1ca4-b1453.tmp
O43 - CFD: 29/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21ec-1ca4-b1465.tmp
O43 - CFD: 29/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21ec-1ca4-b1476.tmp
O43 - CFD: 29/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21ec-1ca4-b1478.tmp
O43 - CFD: 29/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21ec-1ca4-b148a.tmp
O43 - CFD: 29/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21ec-1ca4-b149c.tmp
O43 - CFD: 29/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21ec-1ca4-b14ad.tmp
O43 - CFD: 29/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21ec-1ca4-b14bf.tmp
O43 - CFD: 29/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21ec-1ca4-b14d1.tmp
O43 - CFD: 29/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21ec-1ca4-b14d3.tmp
O43 - CFD: 29/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21ec-1ca4-b14f4.tmp
O43 - CFD: 29/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21ec-1ca4-b14f6.tmp
O43 - CFD: 29/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21ec-1ca4-b1507.tmp
O43 - CFD: 29/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21ec-1ca4-b1519.tmp
O43 - CFD: 29/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21ec-1ca4-b151b.tmp
O43 - CFD: 15/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-221c-14c8-226b31e.tmp
O43 - CFD: 15/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-221c-14c8-226b34f.tmp
O43 - CFD: 15/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-221c-14c8-226b360.tmp
O43 - CFD: 15/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-221c-14c8-226b372.tmp
O43 - CFD: 15/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-221c-14c8-226b383.tmp
O43 - CFD: 15/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-221c-14c8-226b395.tmp
O43 - CFD: 15/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-221c-14c8-226b3a7.tmp
O43 - CFD: 15/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-221c-14c8-226b3b8.tmp
O43 - CFD: 15/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-221c-14c8-226b3ca.tmp
O43 - CFD: 15/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-221c-14c8-226b3dc.tmp
O43 - CFD: 15/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-221c-14c8-226b3de.tmp
O43 - CFD: 15/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-221c-14c8-226b3ef.tmp
O43 - CFD: 15/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-221c-14c8-226b401.tmp
O43 - CFD: 15/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-221c-14c8-226b412.tmp
O43 - CFD: 15/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-221c-14c8-226b414.tmp
O43 - CFD: 15/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-221c-14c8-226b426.tmp
O43 - CFD: 15/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-221c-14c8-226b438.tmp
O43 - CFD: 15/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-221c-14c8-226b449.tmp
O43 - CFD: 15/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-221c-14c8-226b45b.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-22d0-2154-10e36413.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-22d0-2154-10e36415.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-22d0-2154-10e36427.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-22d0-2154-10e36429.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-22d0-2154-10e3643b.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-22d0-2154-10e3644c.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-22d0-2154-10e3644e.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-22d0-2154-10e36460.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-22d0-2154-10e36462.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-22d0-2154-10e36474.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-22d0-2154-10e36476.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-22d0-2154-10e36487.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-22d0-2154-10e36489.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-22d0-2154-10e3649b.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-22d0-2154-10e3649d.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-22d0-2154-10e364ae.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-22d0-2154-10e364b0.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-22d0-2154-10e364c2.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-22d0-2154-10e364c4.tmp
O43 - CFD: 21/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2344-2468-127f96.tmp
O43 - CFD: 21/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2344-2468-127fa8.tmp
O43 - CFD: 21/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2344-2468-127fb9.tmp
O43 - CFD: 21/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2344-2468-127fcb.tmp
O43 - CFD: 21/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2344-2468-127fcd.tmp
O43 - CFD: 21/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2344-2468-127fde.tmp
O43 - CFD: 21/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2344-2468-127ff0.tmp
O43 - CFD: 21/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2344-2468-127ff2.tmp
O43 - CFD: 21/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2344-2468-128004.tmp
O43 - CFD: 21/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2344-2468-128015.tmp
O43 - CFD: 21/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2344-2468-128017.tmp
O43 - CFD: 21/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2344-2468-128029.tmp
O43 - CFD: 21/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2344-2468-12803b.tmp
O43 - CFD: 21/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2344-2468-12803d.tmp
O43 - CFD: 21/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2344-2468-12804e.tmp
O43 - CFD: 21/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2344-2468-128060.tmp
O43 - CFD: 21/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2344-2468-128062.tmp
O43 - CFD: 21/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2344-2468-128073.tmp
O43 - CFD: 21/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2344-2468-128085.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23a8-2340-c72b5b.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23a8-2340-c72b6d.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23a8-2340-c72b7e.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23a8-2340-c72b90.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23a8-2340-c72b92.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23a8-2340-c72ba4.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23a8-2340-c72bb5.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23a8-2340-c72bc7.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23a8-2340-c72bc9.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23a8-2340-c72bda.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23a8-2340-c72bec.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23a8-2340-c72bfe.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23a8-2340-c72c00.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23a8-2340-c72c11.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23a8-2340-c72c23.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23a8-2340-c72c35.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23a8-2340-c72c37.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23a8-2340-c72c48.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23a8-2340-c72c5a.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23bc-7ec-fe071.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23bc-7ec-fe083.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23bc-7ec-fe095.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23bc-7ec-fe097.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23bc-7ec-fe0a8.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23bc-7ec-fe0ba.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23bc-7ec-fe0cc.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23bc-7ec-fe0dd.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23bc-7ec-fe0df.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23bc-7ec-fe100.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23bc-7ec-fe112.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23bc-7ec-fe114.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23bc-7ec-fe126.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23bc-7ec-fe137.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23bc-7ec-fe149.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23bc-7ec-fe14b.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23bc-7ec-fe15d.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23bc-7ec-fe16e.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23bc-7ec-fe170.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23dc-2288-a1f1e.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23dc-2288-a1f3f.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23dc-2288-a1f60.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23dc-2288-a1f62.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23dc-2288-a1f74.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23dc-2288-a1f85.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23dc-2288-a1f97.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23dc-2288-a1f99.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23dc-2288-a1fab.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23dc-2288-a1fad.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23dc-2288-a1fbe.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23dc-2288-a1fd0.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23dc-2288-a1fe1.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23dc-2288-a1fe3.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23dc-2288-a1ff5.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23dc-2288-a2007.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23dc-2288-a2009.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23dc-2288-a201a.tmp
O43 - CFD: 20/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23dc-2288-a202c.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23f4-2488-1ed6f3.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23f4-2488-1ed743.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23f4-2488-1ed755.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23f4-2488-1ed785.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23f4-2488-1ed7a7.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23f4-2488-1ed7b8.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23f4-2488-1ed7ca.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23f4-2488-1ed7dc.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23f4-2488-1ed7ed.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23f4-2488-1ed7ff.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23f4-2488-1ed810.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23f4-2488-1ed841.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23f4-2488-1ed853.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23f4-2488-1ed865.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23f4-2488-1ed876.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23f4-2488-1ed888.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23f4-2488-1ed899.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23f4-2488-1ed89b.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-23f4-2488-1ed8bd.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2438-2160-27a5d25.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2438-2160-27a5d47.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2438-2160-27a5d58.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2438-2160-27a5d5a.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2438-2160-27a5d6c.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2438-2160-27a5d7d.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2438-2160-27a5d7f.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2438-2160-27a5d91.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2438-2160-27a5da3.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2438-2160-27a5db4.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2438-2160-27a5db6.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2438-2160-27a5dc8.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2438-2160-27a5dca.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2438-2160-27a5ddc.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2438-2160-27a5dde.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2438-2160-27a5def.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2438-2160-27a5e01.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2438-2160-27a5e12.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2438-2160-27a5e14.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2468-11f0-2c93bc.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2468-11f0-2c93dd.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2468-11f0-2c93ef.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2468-11f0-2c9400.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2468-11f0-2c9421.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2468-11f0-2c9433.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2468-11f0-2c9445.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2468-11f0-2c9466.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2468-11f0-2c9478.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2468-11f0-2c9489.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2468-11f0-2c94aa.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2468-11f0-2c94cc.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2468-11f0-2c94ce.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2468-11f0-2c94df.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2468-11f0-2c94f1.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2468-11f0-2c9503.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2468-11f0-2c9514.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2468-11f0-2c9516.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2468-11f0-2c9528.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-24c8-1c60-a853a.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-24c8-1c60-a855b.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-24c8-1c60-a856d.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-24c8-1c60-a857f.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-24c8-1c60-a8590.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-24c8-1c60-a8592.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-24c8-1c60-a85b4.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-24c8-1c60-a85c5.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-24c8-1c60-a85d7.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-24c8-1c60-a85e8.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-24c8-1c60-a85fa.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-24c8-1c60-a860c.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-24c8-1c60-a862d.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-24c8-1c60-a863f.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-24c8-1c60-a8650.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-24c8-1c60-a8652.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-24c8-1c60-a8664.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-24c8-1c60-a8675.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-24c8-1c60-a8687.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-251c-1d78-98f41.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-251c-1d78-98f63.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-251c-1d78-98f65.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-251c-1d78-98f76.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-251c-1d78-98f88.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-251c-1d78-98f8a.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-251c-1d78-98f9c.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-251c-1d78-98fad.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-251c-1d78-98faf.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-251c-1d78-98fc1.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-251c-1d78-98fc3.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-251c-1d78-98fd4.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-251c-1d78-98fe6.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-251c-1d78-98fe8.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-251c-1d78-98ffa.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-251c-1d78-9900b.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-251c-1d78-9900d.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-251c-1d78-9902f.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-251c-1d78-99031.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2520-2588-191188.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2520-2588-1911a9.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2520-2588-1911bb.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2520-2588-1911cd.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2520-2588-1911cf.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2520-2588-1911e0.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2520-2588-1911e2.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2520-2588-1911f4.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2520-2588-191215.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2520-2588-191217.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2520-2588-191229.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2520-2588-19122b.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2520-2588-19123c.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2520-2588-19124e.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2520-2588-191250.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2520-2588-191262.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2520-2588-191273.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2520-2588-191285.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2520-2588-191296.tmp
O43 - CFD: 19/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2528-2330-16cb51.tmp
O43 - CFD: 19/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2528-2330-16cb63.tmp
O43 - CFD: 19/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2528-2330-16cb74.tmp
O43 - CFD: 19/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2528-2330-16cb86.tmp
O43 - CFD: 19/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2528-2330-16cb88.tmp
O43 - CFD: 19/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2528-2330-16cb9a.tmp
O43 - CFD: 19/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2528-2330-16cb9c.tmp
O43 - CFD: 19/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2528-2330-16cbad.tmp
O43 - CFD: 19/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2528-2330-16cbbf.tmp
O43 - CFD: 19/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2528-2330-16cbc1.tmp
O43 - CFD: 19/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2528-2330-16cbd3.tmp
O43 - CFD: 19/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2528-2330-16cbe4.tmp
O43 - CFD: 19/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2528-2330-16cbe6.tmp
O43 - CFD: 19/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2528-2330-16cbf8.tmp
O43 - CFD: 19/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2528-2330-16cbfa.tmp
O43 - CFD: 19/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2528-2330-16cc1b.tmp
O43 - CFD: 19/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2528-2330-16cc1d.tmp
O43 - CFD: 19/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2528-2330-16cc2f.tmp
O43 - CFD: 19/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2528-2330-16cc31.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2538-253c-955b3.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2538-253c-955d4.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2538-253c-955d6.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2538-253c-955e8.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2538-253c-955fa.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2538-253c-955fc.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2538-253c-9560d.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2538-253c-9561f.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2538-253c-95621.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2538-253c-95632.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2538-253c-95654.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2538-253c-95656.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2538-253c-95667.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2538-253c-95679.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2538-253c-9568b.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2538-253c-9569c.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2538-253c-9569e.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2538-253c-956b0.tmp
O43 - CFD: 31/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2538-253c-956c1.tmp
O43 - CFD: 16/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2540-2204-c6dff.tmp
O43 - CFD: 16/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2540-2204-c6e7e.tmp
O43 - CFD: 16/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2540-2204-c6efd.tmp
O43 - CFD: 16/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2540-2204-c6f1e.tmp
O43 - CFD: 16/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2540-2204-c6f4f.tmp
O43 - CFD: 16/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2540-2204-c6f80.tmp
O43 - CFD: 16/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2540-2204-c6ff0.tmp
O43 - CFD: 16/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2540-2204-c7001.tmp
O43 - CFD: 16/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2540-2204-c7032.tmp
O43 - CFD: 16/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2540-2204-c70a1.tmp
O43 - CFD: 16/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2540-2204-c7101.tmp
O43 - CFD: 16/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2540-2204-c7113.tmp
O43 - CFD: 16/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2540-2204-c71a1.tmp
O43 - CFD: 16/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2540-2204-c71d2.tmp
O43 - CFD: 16/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2540-2204-c729f.tmp
O43 - CFD: 16/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2540-2204-c72b1.tmp
O43 - CFD: 16/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2540-2204-c72e2.tmp
O43 - CFD: 16/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2540-2204-c7361.tmp
O43 - CFD: 16/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2540-2204-c73f0.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2540-2544-998d7.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2540-2544-998e8.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2540-2544-998fa.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2540-2544-998fc.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2540-2544-9992d.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2540-2544-9992f.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2540-2544-99940.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2540-2544-99952.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2540-2544-99954.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2540-2544-99966.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2540-2544-99977.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2540-2544-99989.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2540-2544-9998b.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2540-2544-9999c.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2540-2544-999ae.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2540-2544-999c0.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2540-2544-999d1.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2540-2544-999d3.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2540-2544-999e5.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-254c-162c-142660.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-254c-162c-142682.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-254c-162c-142684.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-254c-162c-142695.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-254c-162c-1426a7.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-254c-162c-1426a9.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-254c-162c-1426ba.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-254c-162c-1426cc.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-254c-162c-1426ce.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-254c-162c-1426e0.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-254c-162c-1426f1.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-254c-162c-1426f3.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-254c-162c-142705.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-254c-162c-142717.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-254c-162c-142719.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-254c-162c-14272a.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-254c-162c-14272c.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-254c-162c-14273e.tmp
O43 - CFD: 20/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-254c-162c-14274f.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2554-2038-13ec16.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2554-2038-13ec47.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2554-2038-13ec59.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2554-2038-13ec6b.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2554-2038-13ec6d.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2554-2038-13ecad.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2554-2038-13ecbf.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2554-2038-13ecf0.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2554-2038-13ed01.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2554-2038-13ed22.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2554-2038-13ed44.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2554-2038-13ed55.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2554-2038-13ed67.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2554-2038-13ed79.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2554-2038-13ed9a.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2554-2038-13edab.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2554-2038-13eddc.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2554-2038-13edfe.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2554-2038-13ee1f.tmp
O43 - CFD: 21/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2564-2544-989e2.tmp
O43 - CFD: 21/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2564-2544-98a04.tmp
O43 - CFD: 21/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2564-2544-98a15.tmp
O43 - CFD: 21/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2564-2544-98a27.tmp
O43 - CFD: 21/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2564-2544-98a48.tmp
O43 - CFD: 21/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2564-2544-98a5a.tmp
O43 - CFD: 21/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2564-2544-98a6b.tmp
O43 - CFD: 21/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2564-2544-98a7d.tmp
O43 - CFD: 21/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2564-2544-98a8f.tmp
O43 - CFD: 21/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2564-2544-98ab0.tmp
O43 - CFD: 21/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2564-2544-98ac2.tmp
O43 - CFD: 21/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2564-2544-98ae3.tmp
O43 - CFD: 21/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2564-2544-98b14.tmp
O43 - CFD: 21/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2564-2544-98b25.tmp
O43 - CFD: 21/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2564-2544-98b37.tmp
O43 - CFD: 21/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2564-2544-98b49.tmp
O43 - CFD: 21/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2564-2544-98b6a.tmp
O43 - CFD: 21/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2564-2544-98b7b.tmp
O43 - CFD: 21/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2564-2544-98b9d.tmp
O43 - CFD: 12/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-25dc-2624-9ff8f.tmp
O43 - CFD: 12/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-25dc-2624-9ffb1.tmp
O43 - CFD: 12/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-25dc-2624-9ffc2.tmp
O43 - CFD: 12/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-25dc-2624-9ffd4.tmp
O43 - CFD: 12/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-25dc-2624-9ffd6.tmp
O43 - CFD: 12/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-25dc-2624-9ffe8.tmp
O43 - CFD: 12/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-25dc-2624-a0009.tmp
O43 - CFD: 12/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-25dc-2624-a000b.tmp
O43 - CFD: 12/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-25dc-2624-a002c.tmp
O43 - CFD: 12/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-25dc-2624-a006d.tmp
O43 - CFD: 12/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-25dc-2624-a007e.tmp
O43 - CFD: 12/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-25dc-2624-a0090.tmp
O43 - CFD: 12/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-25dc-2624-a0092.tmp
O43 - CFD: 12/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-25dc-2624-a00a3.tmp
O43 - CFD: 12/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-25dc-2624-a00b5.tmp
O43 - CFD: 12/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-25dc-2624-a00b7.tmp
O43 - CFD: 12/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-25dc-2624-a00c9.tmp
O43 - CFD: 12/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-25dc-2624-a0119.tmp
O43 - CFD: 12/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-25dc-2624-a013a.tmp
O43 - CFD: 26/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2620-728-500e2ba.tmp
O43 - CFD: 26/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2620-728-500e2cc.tmp
O43 - CFD: 26/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2620-728-500e2de.tmp
O43 - CFD: 26/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2620-728-500e2ef.tmp
O43 - CFD: 26/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2620-728-500e301.tmp
O43 - CFD: 26/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2620-728-500e303.tmp
O43 - CFD: 26/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2620-728-500e315.tmp
O43 - CFD: 26/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2620-728-500e326.tmp
O43 - CFD: 26/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2620-728-500e328.tmp
O43 - CFD: 26/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2620-728-500e33a.tmp
O43 - CFD: 26/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2620-728-500e34b.tmp
O43 - CFD: 26/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2620-728-500e35d.tmp
O43 - CFD: 26/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2620-728-500e35f.tmp
O43 - CFD: 26/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2620-728-500e371.tmp
O43 - CFD: 26/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2620-728-500e382.tmp
O43 - CFD: 26/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2620-728-500e384.tmp
O43 - CFD: 26/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2620-728-500e396.tmp
O43 - CFD: 26/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2620-728-500e3a8.tmp
O43 - CFD: 26/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2620-728-500e3b9.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-263c-2680-e4a70.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-263c-2680-e4a91.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-263c-2680-e4a93.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-263c-2680-e4aa5.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-263c-2680-e4ab6.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-263c-2680-e4ac8.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-263c-2680-e4aca.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-263c-2680-e4adc.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-263c-2680-e4aed.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-263c-2680-e4aef.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-263c-2680-e4b01.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-263c-2680-e4b13.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-263c-2680-e4b34.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-263c-2680-e4b55.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-263c-2680-e4b76.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-263c-2680-e4b88.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-263c-2680-e4b8a.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-263c-2680-e4b9c.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-263c-2680-e4bbd.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2680-1d28-1c08eec.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2680-1d28-1c08f0d.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2680-1d28-1c08f1f.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2680-1d28-1c08f21.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2680-1d28-1c08f33.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2680-1d28-1c08f44.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2680-1d28-1c08f56.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2680-1d28-1c08f58.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2680-1d28-1c08f6a.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2680-1d28-1c08f7b.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2680-1d28-1c08f7d.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2680-1d28-1c08f8f.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2680-1d28-1c08fa0.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2680-1d28-1c08fa2.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2680-1d28-1c08fb4.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2680-1d28-1c08fc6.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2680-1d28-1c08fd7.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2680-1d28-1c08fe9.tmp
O43 - CFD: 10/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2680-1d28-1c08ffb.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2694-2698-1fc1df.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2694-2698-1fc1f1.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2694-2698-1fc203.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2694-2698-1fc205.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2694-2698-1fc216.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2694-2698-1fc228.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2694-2698-1fc249.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2694-2698-1fc24b.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2694-2698-1fc25d.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2694-2698-1fc26e.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2694-2698-1fc270.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2694-2698-1fc282.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2694-2698-1fc294.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2694-2698-1fc2a5.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2694-2698-1fc2a7.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2694-2698-1fc2b9.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2694-2698-1fc2bb.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2694-2698-1fc2cd.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2694-2698-1fc2de.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-269c-2674-104507.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-269c-2674-104529.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-269c-2674-10452b.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-269c-2674-10453c.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-269c-2674-10454e.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-269c-2674-104550.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-269c-2674-104562.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-269c-2674-104564.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-269c-2674-104575.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-269c-2674-104587.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-269c-2674-104589.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-269c-2674-10459a.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-269c-2674-1045ac.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-269c-2674-1045ae.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-269c-2674-1045c0.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-269c-2674-1045d1.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-269c-2674-1045d3.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-269c-2674-1045e5.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-269c-2674-1045f7.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-26e4-26e8-ea4a6.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-26e4-26e8-ea4d7.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-26e4-26e8-ea4e8.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-26e4-26e8-ea4fa.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-26e4-26e8-ea50b.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-26e4-26e8-ea51d.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-26e4-26e8-ea52f.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-26e4-26e8-ea531.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-26e4-26e8-ea542.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-26e4-26e8-ea544.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-26e4-26e8-ea556.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-26e4-26e8-ea568.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-26e4-26e8-ea579.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-26e4-26e8-ea58b.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-26e4-26e8-ea59c.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-26e4-26e8-ea5ae.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-26e4-26e8-ea5c0.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-26e4-26e8-ea5d1.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-26e4-26e8-ea5e3.tmp
O43 - CFD: 30/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2750-2408-103bd0.tmp
O43 - CFD: 30/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2750-2408-103bf1.tmp
O43 - CFD: 30/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2750-2408-103c03.tmp
O43 - CFD: 30/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2750-2408-103c05.tmp
O43 - CFD: 30/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2750-2408-103c17.tmp
O43 - CFD: 30/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2750-2408-103c28.tmp
O43 - CFD: 30/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2750-2408-103c3a.tmp
O43 - CFD: 30/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2750-2408-103c4b.tmp
O43 - CFD: 30/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2750-2408-103c4d.tmp
O43 - CFD: 30/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2750-2408-103c6f.tmp
O43 - CFD: 30/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2750-2408-103c80.tmp
O43 - CFD: 30/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2750-2408-103c82.tmp
O43 - CFD: 30/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2750-2408-103c84.tmp
O43 - CFD: 30/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2750-2408-103c96.tmp
O43 - CFD: 30/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2750-2408-103cb7.tmp
O43 - CFD: 30/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2750-2408-103cb9.tmp
O43 - CFD: 30/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2750-2408-103cda.tmp
O43 - CFD: 30/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2750-2408-103cec.tmp
O43 - CFD: 30/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2750-2408-103cfe.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2768-2120-1f618f.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2768-2120-1f61b0.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2768-2120-1f61b2.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2768-2120-1f61c4.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2768-2120-1f61d6.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2768-2120-1f61e7.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2768-2120-1f61e9.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2768-2120-1f61fb.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2768-2120-1f620d.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2768-2120-1f621e.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2768-2120-1f6230.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2768-2120-1f6232.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2768-2120-1f6243.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2768-2120-1f6255.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2768-2120-1f6267.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2768-2120-1f6278.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2768-2120-1f628a.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2768-2120-1f629c.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2768-2120-1f62ad.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2778-2264-1db745c.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2778-2264-1db746e.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2778-2264-1db747f.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2778-2264-1db7481.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2778-2264-1db7493.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2778-2264-1db74a5.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2778-2264-1db74b6.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2778-2264-1db74c8.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2778-2264-1db74ca.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2778-2264-1db74eb.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2778-2264-1db74fd.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2778-2264-1db750e.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2778-2264-1db7510.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2778-2264-1db7522.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2778-2264-1db7553.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2778-2264-1db7564.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2778-2264-1db7566.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2778-2264-1db7578.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2778-2264-1db758a.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2778-e78-75e4d6c.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2778-e78-75e4d7e.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2778-e78-75e4d80.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2778-e78-75e4d91.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2778-e78-75e4da3.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2778-e78-75e4db5.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2778-e78-75e4db7.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2778-e78-75e4dc8.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2778-e78-75e4dca.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2778-e78-75e4dec.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2778-e78-75e4dee.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2778-e78-75e4dff.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2778-e78-75e4e11.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2778-e78-75e4e22.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2778-e78-75e4e24.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2778-e78-75e4e36.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2778-e78-75e4e48.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2778-e78-75e4e59.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2778-e78-75e4e5b.tmp
O43 - CFD: 04/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-279c-27a0-d1645.tmp
O43 - CFD: 04/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-279c-27a0-d1667.tmp
O43 - CFD: 04/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-279c-27a0-d1678.tmp
O43 - CFD: 04/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-279c-27a0-d168a.tmp
O43 - CFD: 04/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-279c-27a0-d168c.tmp
O43 - CFD: 04/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-279c-27a0-d16ad.tmp
O43 - CFD: 04/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-279c-27a0-d16bf.tmp
O43 - CFD: 04/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-279c-27a0-d16d0.tmp
O43 - CFD: 04/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-279c-27a0-d16e2.tmp
O43 - CFD: 04/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-279c-27a0-d1703.tmp
O43 - CFD: 04/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-279c-27a0-d1715.tmp
O43 - CFD: 04/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-279c-27a0-d1717.tmp
O43 - CFD: 04/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-279c-27a0-d1728.tmp
O43 - CFD: 04/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-279c-27a0-d173a.tmp
O43 - CFD: 04/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-279c-27a0-d174c.tmp
O43 - CFD: 04/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-279c-27a0-d175d.tmp
O43 - CFD: 04/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-279c-27a0-d176f.tmp
O43 - CFD: 04/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-279c-27a0-d1781.tmp
O43 - CFD: 04/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-279c-27a0-d1792.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27bc-510-19c19db.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27bc-510-19c19ec.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27bc-510-19c19fe.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27bc-510-19c1a0f.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27bc-510-19c1a11.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27bc-510-19c1a23.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27bc-510-19c1a35.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27bc-510-19c1a46.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27bc-510-19c1a58.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27bc-510-19c1a5a.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27bc-510-19c1a6c.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27bc-510-19c1a7d.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27bc-510-19c1a8f.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27bc-510-19c1aa0.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27bc-510-19c1ab2.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27bc-510-19c1ac4.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27bc-510-19c1ac6.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27bc-510-19c1ad7.tmp
O43 - CFD: 12/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27bc-510-19c1ae9.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27d8-27e0-cb0c5.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27d8-27e0-cb0e6.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27d8-27e0-cb0e8.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27d8-27e0-cb0fa.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27d8-27e0-cb10b.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27d8-27e0-cb11d.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27d8-27e0-cb11f.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27d8-27e0-cb131.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27d8-27e0-cb142.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27d8-27e0-cb144.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27d8-27e0-cb156.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27d8-27e0-cb168.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27d8-27e0-cb179.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27d8-27e0-cb17b.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27d8-27e0-cb18d.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27d8-27e0-cb19e.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27d8-27e0-cb1b0.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27d8-27e0-cb1b2.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27d8-27e0-cb1c4.tmp
O43 - CFD: 26/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27e0-2778-d9180.tmp
O43 - CFD: 26/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27e0-2778-d91a1.tmp
O43 - CFD: 26/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27e0-2778-d91b3.tmp
O43 - CFD: 26/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27e0-2778-d91b5.tmp
O43 - CFD: 26/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27e0-2778-d91c7.tmp
O43 - CFD: 26/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27e0-2778-d91d8.tmp
O43 - CFD: 26/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27e0-2778-d91fa.tmp
O43 - CFD: 26/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27e0-2778-d920b.tmp
O43 - CFD: 26/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27e0-2778-d921d.tmp
O43 - CFD: 26/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27e0-2778-d921f.tmp
O43 - CFD: 26/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27e0-2778-d9230.tmp
O43 - CFD: 26/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27e0-2778-d9290.tmp
O43 - CFD: 26/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27e0-2778-d9292.tmp
O43 - CFD: 26/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27e0-2778-d92a4.tmp
O43 - CFD: 26/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27e0-2778-d92b5.tmp
O43 - CFD: 26/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27e0-2778-d92c7.tmp
O43 - CFD: 26/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27e0-2778-d92d9.tmp
O43 - CFD: 26/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27e0-2778-d92ea.tmp
O43 - CFD: 26/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27e0-2778-d92ec.tmp
O43 - CFD: 19/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2924-630-3598e0.tmp
O43 - CFD: 19/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2924-630-3598f2.tmp
O43 - CFD: 19/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2924-630-359904.tmp
O43 - CFD: 19/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2924-630-359915.tmp
O43 - CFD: 19/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2924-630-359927.tmp
O43 - CFD: 19/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2924-630-359938.tmp
O43 - CFD: 19/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2924-630-35994a.tmp
O43 - CFD: 19/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2924-630-35995c.tmp
O43 - CFD: 19/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2924-630-35996d.tmp
O43 - CFD: 19/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2924-630-35997f.tmp
O43 - CFD: 19/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2924-630-359981.tmp
O43 - CFD: 19/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2924-630-3599a2.tmp
O43 - CFD: 19/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2924-630-3599a4.tmp
O43 - CFD: 19/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2924-630-3599b6.tmp
O43 - CFD: 19/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2924-630-3599c7.tmp
O43 - CFD: 19/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2924-630-3599c9.tmp
O43 - CFD: 19/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2924-630-3599db.tmp
O43 - CFD: 19/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2924-630-3599ed.tmp
O43 - CFD: 19/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2924-630-3599fe.tmp
O43 - CFD: 14/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-3ac-1cf0-13f454.tmp
O43 - CFD: 14/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-3ac-1cf0-13f485.tmp
O43 - CFD: 14/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-3ac-1cf0-13f496.tmp
O43 - CFD: 14/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-3ac-1cf0-13f498.tmp
O43 - CFD: 14/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-3ac-1cf0-13f4ba.tmp
O43 - CFD: 14/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-3ac-1cf0-13f4cb.tmp
O43 - CFD: 14/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-3ac-1cf0-13f4dd.tmp
O43 - CFD: 14/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-3ac-1cf0-13f4fe.tmp
O43 - CFD: 14/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-3ac-1cf0-13f510.tmp
O43 - CFD: 14/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-3ac-1cf0-13f531.tmp
O43 - CFD: 14/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-3ac-1cf0-13f533.tmp
O43 - CFD: 14/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-3ac-1cf0-13f554.tmp
O43 - CFD: 14/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-3ac-1cf0-13f566.tmp
O43 - CFD: 14/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-3ac-1cf0-13f587.tmp
O43 - CFD: 14/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-3ac-1cf0-13f599.tmp
O43 - CFD: 14/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-3ac-1cf0-13f5aa.tmp
O43 - CFD: 14/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-3ac-1cf0-13f5cc.tmp
O43 - CFD: 14/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-3ac-1cf0-13f63b.tmp
O43 - CFD: 14/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-3ac-1cf0-13f64d.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-490-1648-1b2ae3.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-490-1648-1b2b04.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-490-1648-1b2b15.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-490-1648-1b2b27.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-490-1648-1b2b29.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-490-1648-1b2b3b.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-490-1648-1b2b4c.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-490-1648-1b2b5e.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-490-1648-1b2b60.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-490-1648-1b2b72.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-490-1648-1b2b83.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-490-1648-1b2b95.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-490-1648-1b2ba6.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-490-1648-1b2ba8.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-490-1648-1b2bba.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-490-1648-1b2bcc.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-490-1648-1b2bdd.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-490-1648-1b2bef.tmp
O43 - CFD: 05/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-490-1648-1b2c01.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c-1594-3e1c478.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c-1594-3e1c4a9.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c-1594-3e1c4ca.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c-1594-3e1c4dc.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c-1594-3e1c4ee.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c-1594-3e1c54d.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c-1594-3e1c58e.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c-1594-3e1c5a0.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c-1594-3e1c5c1.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c-1594-3e1c5d2.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c-1594-3e1c5e4.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c-1594-3e1c5e6.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c-1594-3e1c5f8.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c-1594-3e1c609.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c-1594-3e1c61b.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c-1594-3e1c65b.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c-1594-3e1c66d.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c-1594-3e1c68e.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c-1594-3e1c6b0.tmp
O43 - CFD: 17/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c-bec-3751913.tmp
O43 - CFD: 17/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c-bec-3751934.tmp
O43 - CFD: 17/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c-bec-3751946.tmp
O43 - CFD: 17/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c-bec-3751957.tmp
O43 - CFD: 17/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c-bec-3751959.tmp
O43 - CFD: 17/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c-bec-375196b.tmp
O43 - CFD: 17/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c-bec-375197c.tmp
O43 - CFD: 17/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c-bec-375198e.tmp
O43 - CFD: 17/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c-bec-3751990.tmp
O43 - CFD: 17/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c-bec-37519a2.tmp
O43 - CFD: 17/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c-bec-37519b3.tmp
O43 - CFD: 17/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c-bec-37519b5.tmp
O43 - CFD: 17/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c-bec-37519c7.tmp
O43 - CFD: 17/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c-bec-37519d9.tmp
O43 - CFD: 17/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c-bec-37519ea.tmp
O43 - CFD: 17/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c-bec-37519fc.tmp
O43 - CFD: 17/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c-bec-3751a0d.tmp
O43 - CFD: 17/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c-bec-3751a1f.tmp
O43 - CFD: 17/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c-bec-3751a31.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-504-1efc-979c5.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-504-1efc-979d7.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-504-1efc-979e9.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-504-1efc-979fa.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-504-1efc-97a0c.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-504-1efc-97a0e.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-504-1efc-97a20.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-504-1efc-97a31.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-504-1efc-97a33.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-504-1efc-97a45.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-504-1efc-97a56.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-504-1efc-97a68.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-504-1efc-97a7a.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-504-1efc-97a8b.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-504-1efc-97a8d.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-504-1efc-97abe.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-504-1efc-97ad0.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-504-1efc-97ae1.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-504-1efc-97af3.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-544-a50-3543601.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-544-a50-3543613.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-544-a50-3543625.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-544-a50-3543636.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-544-a50-3543648.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-544-a50-354365a.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-544-a50-354366b.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-544-a50-354368c.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-544-a50-354369e.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-544-a50-35436bf.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-544-a50-35436c1.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-544-a50-35436d3.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-544-a50-35436e5.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-544-a50-35436e7.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-544-a50-35436f8.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-544-a50-354370a.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-544-a50-354371b.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-544-a50-354371d.tmp
O43 - CFD: 22/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-544-a50-354372f.tmp
O43 - CFD: 27/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-5bc-6ec-97997.tmp
O43 - CFD: 27/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-5bc-6ec-979b8.tmp
O43 - CFD: 27/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-5bc-6ec-979ba.tmp
O43 - CFD: 27/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-5bc-6ec-979cb.tmp
O43 - CFD: 27/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-5bc-6ec-979dd.tmp
O43 - CFD: 27/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-5bc-6ec-979df.tmp
O43 - CFD: 27/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-5bc-6ec-979f1.tmp
O43 - CFD: 27/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-5bc-6ec-97a02.tmp
O43 - CFD: 27/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-5bc-6ec-97a14.tmp
O43 - CFD: 27/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-5bc-6ec-97a16.tmp
O43 - CFD: 27/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-5bc-6ec-97a28.tmp
O43 - CFD: 27/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-5bc-6ec-97a2a.tmp
O43 - CFD: 27/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-5bc-6ec-97a3b.tmp
O43 - CFD: 27/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-5bc-6ec-97a4d.tmp
O43 - CFD: 27/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-5bc-6ec-97a4f.tmp
O43 - CFD: 27/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-5bc-6ec-97a60.tmp
O43 - CFD: 27/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-5bc-6ec-97a72.tmp
O43 - CFD: 27/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-5bc-6ec-97a84.tmp
O43 - CFD: 27/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-5bc-6ec-97a86.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-60c-1d00-1b7f776.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-60c-1d00-1b7f787.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-60c-1d00-1b7f799.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-60c-1d00-1b7f7ab.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-60c-1d00-1b7f7ad.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-60c-1d00-1b7f7be.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-60c-1d00-1b7f7d0.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-60c-1d00-1b7f7d2.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-60c-1d00-1b7f7e3.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-60c-1d00-1b7f7f5.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-60c-1d00-1b7f7f7.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-60c-1d00-1b7f809.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-60c-1d00-1b7f81a.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-60c-1d00-1b7f81c.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-60c-1d00-1b7f82e.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-60c-1d00-1b7f840.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-60c-1d00-1b7f842.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-60c-1d00-1b7f853.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-60c-1d00-1b7f865.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-630-1b24-9b269.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-630-1b24-9b28b.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-630-1b24-9b28d.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-630-1b24-9b29e.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-630-1b24-9b2c0.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-630-1b24-9b2d1.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-630-1b24-9b2e3.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-630-1b24-9b2f4.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-630-1b24-9b2f6.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-630-1b24-9b318.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-630-1b24-9b329.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-630-1b24-9b32b.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-630-1b24-9b33d.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-630-1b24-9b34f.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-630-1b24-9b360.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-630-1b24-9b372.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-630-1b24-9b374.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-630-1b24-9b385.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-630-1b24-9b3a7.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-630-b54-c4a1c.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-630-b54-c4a4d.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-630-b54-c4a5e.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-630-b54-c4a70.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-630-b54-c4a91.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-630-b54-c4aa3.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-630-b54-c4aa5.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-630-b54-c4aa7.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-630-b54-c4ab8.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-630-b54-c4aca.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-630-b54-c4adc.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-630-b54-c4aed.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-630-b54-c4aff.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-630-b54-c4b20.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-630-b54-c4b32.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-630-b54-c4b43.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-630-b54-c4b55.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-630-b54-c4b67.tmp
O43 - CFD: 11/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-630-b54-c4b78.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-654-1e8-11784a1.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-654-1e8-11784c3.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-654-1e8-11784d4.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-654-1e8-11784e6.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-654-1e8-11784e8.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-654-1e8-11784fa.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-654-1e8-117850b.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-654-1e8-117850d.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-654-1e8-117851f.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-654-1e8-1178530.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-654-1e8-1178532.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-654-1e8-1178544.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-654-1e8-1178556.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-654-1e8-1178558.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-654-1e8-1178569.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-654-1e8-117857b.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-654-1e8-117857d.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-654-1e8-117858f.tmp
O43 - CFD: 29/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-654-1e8-11785a0.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-66c-418-f3628.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-66c-418-f3639.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-66c-418-f364b.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-66c-418-f364d.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-66c-418-f365f.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-66c-418-f3670.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-66c-418-f3672.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-66c-418-f3684.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-66c-418-f3695.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-66c-418-f3697.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-66c-418-f36a9.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-66c-418-f36bb.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-66c-418-f36bd.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-66c-418-f36ce.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-66c-418-f36e0.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-66c-418-f36f2.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-66c-418-f36f4.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-66c-418-f3705.tmp
O43 - CFD: 11/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-66c-418-f3717.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-680-1f3c-44ab641.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-680-1f3c-44ab643.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-680-1f3c-44ab655.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-680-1f3c-44ab666.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-680-1f3c-44ab678.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-680-1f3c-44ab67a.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-680-1f3c-44ab68b.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-680-1f3c-44ab69d.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-680-1f3c-44ab69f.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-680-1f3c-44ab6c0.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-680-1f3c-44ab6c2.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-680-1f3c-44ab6d4.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-680-1f3c-44ab6e6.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-680-1f3c-44ab6e8.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-680-1f3c-44ab6f9.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-680-1f3c-44ab70b.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-680-1f3c-44ab70d.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-680-1f3c-44ab71e.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-680-1f3c-44ab730.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7a0-880-33678b9.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7a0-880-33678cb.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7a0-880-33678dd.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7a0-880-33678ee.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7a0-880-3367900.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7a0-880-3367912.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7a0-880-3367933.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7a0-880-3367935.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7a0-880-3367946.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7a0-880-3367968.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7a0-880-3367979.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7a0-880-336798b.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7a0-880-336798d.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7a0-880-33679be.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7a0-880-33679cf.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7a0-880-33679e1.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7a0-880-33679f3.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7a0-880-3367a04.tmp
O43 - CFD: 02/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7a0-880-3367a16.tmp
O43 - CFD: 20/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7dc-7ec-11d01c.tmp
O43 - CFD: 20/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7dc-7ec-11d02e.tmp
O43 - CFD: 20/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7dc-7ec-11d03f.tmp
O43 - CFD: 20/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7dc-7ec-11d051.tmp
O43 - CFD: 20/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7dc-7ec-11d063.tmp
O43 - CFD: 20/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7dc-7ec-11d074.tmp
O43 - CFD: 20/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7dc-7ec-11d076.tmp
O43 - CFD: 20/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7dc-7ec-11d088.tmp
O43 - CFD: 20/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7dc-7ec-11d0a9.tmp
O43 - CFD: 20/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7dc-7ec-11d0bb.tmp
O43 - CFD: 20/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7dc-7ec-11d0cc.tmp
O43 - CFD: 20/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7dc-7ec-11d0ee.tmp
O43 - CFD: 20/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7dc-7ec-11d0ff.tmp
O43 - CFD: 20/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7dc-7ec-11d111.tmp
O43 - CFD: 20/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7dc-7ec-11d122.tmp
O43 - CFD: 20/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7dc-7ec-11d134.tmp
O43 - CFD: 20/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7dc-7ec-11d146.tmp
O43 - CFD: 20/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7dc-7ec-11d167.tmp
O43 - CFD: 20/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7dc-7ec-11d179.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7e8-129c-19c3e0.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7e8-129c-19c402.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7e8-129c-19c413.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7e8-129c-19c425.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7e8-129c-19c436.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7e8-129c-19c448.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7e8-129c-19c44a.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7e8-129c-19c45c.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7e8-129c-19c46d.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7e8-129c-19c46f.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7e8-129c-19c481.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7e8-129c-19c493.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7e8-129c-19c4a4.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7e8-129c-19c4b6.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7e8-129c-19c4c7.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7e8-129c-19c4d9.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7e8-129c-19c4eb.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7e8-129c-19c4fc.tmp
O43 - CFD: 02/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-7e8-129c-19c4fe.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-808-d0-965ff.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-808-d0-96620.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-808-d0-96632.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-808-d0-96643.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-808-d0-96645.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-808-d0-96657.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-808-d0-96669.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-808-d0-9666b.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-808-d0-9667c.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-808-d0-9668e.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-808-d0-966a0.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-808-d0-966a2.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-808-d0-966b3.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-808-d0-966c5.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-808-d0-966c7.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-808-d0-966d8.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-808-d0-966ea.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-808-d0-966fc.tmp
O43 - CFD: 25/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-808-d0-966fe.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-810-4d0-bce83.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-810-4d0-bce95.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-810-4d0-bcea6.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-810-4d0-bceb8.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-810-4d0-bceba.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-810-4d0-bcecc.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-810-4d0-bcedd.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-810-4d0-bceef.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-810-4d0-bcef1.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-810-4d0-bcf02.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-810-4d0-bcf14.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-810-4d0-bcf16.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-810-4d0-bcf28.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-810-4d0-bcf39.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-810-4d0-bcf4b.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-810-4d0-bcf4d.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-810-4d0-bcf5f.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-810-4d0-bcf70.tmp
O43 - CFD: 24/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-810-4d0-bcf82.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-818-f0c-5cb29a0.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-818-f0c-5cb29b2.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-818-f0c-5cb29c4.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-818-f0c-5cb29d5.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-818-f0c-5cb29d7.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-818-f0c-5cb29e9.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-818-f0c-5cb29eb.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-818-f0c-5cb29fc.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-818-f0c-5cb2a0e.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-818-f0c-5cb2a20.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-818-f0c-5cb2a22.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-818-f0c-5cb2a33.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-818-f0c-5cb2a45.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-818-f0c-5cb2a57.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-818-f0c-5cb2a59.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-818-f0c-5cb2a6a.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-818-f0c-5cb2a7c.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-818-f0c-5cb2a7e.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-818-f0c-5cb2a8f.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-81c-1d1c-97ea7.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-81c-1d1c-97ec9.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-81c-1d1c-97eda.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-81c-1d1c-97eec.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-81c-1d1c-97eee.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-81c-1d1c-97f00.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-81c-1d1c-97f11.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-81c-1d1c-97f23.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-81c-1d1c-97f25.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-81c-1d1c-97f36.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-81c-1d1c-97f48.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-81c-1d1c-97f4a.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-81c-1d1c-97f5c.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-81c-1d1c-97f6d.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-81c-1d1c-97f6f.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-81c-1d1c-97f81.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-81c-1d1c-97f93.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-81c-1d1c-97fb4.tmp
O43 - CFD: 21/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-81c-1d1c-97fc5.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-840-209c-bc607.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-840-209c-bc619.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-840-209c-bc62a.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-840-209c-bc63c.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-840-209c-bc64e.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-840-209c-bc65f.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-840-209c-bc671.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-840-209c-bc683.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-840-209c-bc694.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-840-209c-bc6a6.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-840-209c-bc6a8.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-840-209c-bc6b9.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-840-209c-bc6cb.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-840-209c-bc6cd.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-840-209c-bc6df.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-840-209c-bc6f0.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-840-209c-bc6f2.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-840-209c-bc704.tmp
O43 - CFD: 29/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-840-209c-bc716.tmp
O43 - CFD: 03/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-858-854-c0d03.tmp
O43 - CFD: 03/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-858-854-c0d15.tmp
O43 - CFD: 03/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-858-854-c0d26.tmp
O43 - CFD: 03/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-858-854-c0d38.tmp
O43 - CFD: 03/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-858-854-c0d4a.tmp
O43 - CFD: 03/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-858-854-c0d5b.tmp
O43 - CFD: 03/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-858-854-c0d6d.tmp
O43 - CFD: 03/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-858-854-c0d8e.tmp
O43 - CFD: 03/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-858-854-c0da0.tmp
O43 - CFD: 03/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-858-854-c0db1.tmp
O43 - CFD: 03/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-858-854-c0db3.tmp
O43 - CFD: 03/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-858-854-c0dd5.tmp
O43 - CFD: 03/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-858-854-c0de6.tmp
O43 - CFD: 03/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-858-854-c0de8.tmp
O43 - CFD: 03/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-858-854-c0dfa.tmp
O43 - CFD: 03/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-858-854-c0e0b.tmp
O43 - CFD: 03/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-858-854-c0e0d.tmp
O43 - CFD: 03/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-858-854-c0e1f.tmp
O43 - CFD: 03/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-858-854-c0e31.tmp
O43 - CFD: 18/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-894-f40-b3a23.tmp
O43 - CFD: 18/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-894-f40-b3a54.tmp
O43 - CFD: 18/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-894-f40-b3a75.tmp
O43 - CFD: 18/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-894-f40-b3a96.tmp
O43 - CFD: 18/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-894-f40-b3ab7.tmp
O43 - CFD: 18/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-894-f40-b3ad9.tmp
O43 - CFD: 18/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-894-f40-b3afa.tmp
O43 - CFD: 18/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-894-f40-b3b1b.tmp
O43 - CFD: 18/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-894-f40-b3b2d.tmp
O43 - CFD: 18/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-894-f40-b3b3e.tmp
O43 - CFD: 18/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-894-f40-b3b50.tmp
O43 - CFD: 18/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-894-f40-b3b62.tmp
O43 - CFD: 18/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-894-f40-b3b73.tmp
O43 - CFD: 18/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-894-f40-b3b85.tmp
O43 - CFD: 18/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-894-f40-b3ba6.tmp
O43 - CFD: 18/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-894-f40-b3bb8.tmp
O43 - CFD: 18/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-894-f40-b3be9.tmp
O43 - CFD: 18/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-894-f40-b3bfa.tmp
O43 - CFD: 18/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-894-f40-b3bfc.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8b0-1b7c-9979e.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8b0-1b7c-997b0.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8b0-1b7c-997c1.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8b0-1b7c-997d3.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8b0-1b7c-997d5.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8b0-1b7c-997e7.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8b0-1b7c-997e9.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8b0-1b7c-997fa.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8b0-1b7c-9980c.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8b0-1b7c-9981d.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8b0-1b7c-9983f.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8b0-1b7c-99850.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8b0-1b7c-99862.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8b0-1b7c-99874.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8b0-1b7c-99885.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8b0-1b7c-99897.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8b0-1b7c-99899.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8b0-1b7c-998aa.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8b0-1b7c-998ac.tmp
O43 - CFD: 18/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-908-18ec-1749a9.tmp
O43 - CFD: 18/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-908-18ec-1749ca.tmp
O43 - CFD: 18/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-908-18ec-1749fb.tmp
O43 - CFD: 18/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-908-18ec-174a0d.tmp
O43 - CFD: 18/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-908-18ec-174a1e.tmp
O43 - CFD: 18/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-908-18ec-174a20.tmp
O43 - CFD: 18/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-908-18ec-174a32.tmp
O43 - CFD: 18/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-908-18ec-174a53.tmp
O43 - CFD: 18/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-908-18ec-174a65.tmp
O43 - CFD: 18/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-908-18ec-174a76.tmp
O43 - CFD: 18/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-908-18ec-174a88.tmp
O43 - CFD: 18/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-908-18ec-174aa9.tmp
O43 - CFD: 18/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-908-18ec-174abb.tmp
O43 - CFD: 18/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-908-18ec-174acd.tmp
O43 - CFD: 18/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-908-18ec-174ade.tmp
O43 - CFD: 18/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-908-18ec-174af0.tmp
O43 - CFD: 18/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-908-18ec-174b01.tmp
O43 - CFD: 18/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-908-18ec-174b13.tmp
O43 - CFD: 18/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-908-18ec-174b25.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-944-1608-fc8706.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-944-1608-fc8727.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-944-1608-fc8729.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-944-1608-fc873b.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-944-1608-fc874d.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-944-1608-fc875e.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-944-1608-fc8760.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-944-1608-fc8772.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-944-1608-fc8783.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-944-1608-fc8785.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-944-1608-fc8797.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-944-1608-fc87a9.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-944-1608-fc87ba.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-944-1608-fc87bc.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-944-1608-fc87ce.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-944-1608-fc87e0.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-944-1608-fc87e2.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-944-1608-fc87f3.tmp
O43 - CFD: 01/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-944-1608-fc8805.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-954-1310-8dc8af.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-954-1310-8dc8ef.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-954-1310-8dc920.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-954-1310-8dc951.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-954-1310-8dc991.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-954-1310-8dca10.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-954-1310-8dca32.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-954-1310-8dca82.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-954-1310-8dcac2.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-954-1310-8dcae3.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-954-1310-8dcb05.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-954-1310-8dcb93.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-954-1310-8dcbb5.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-954-1310-8dcbe5.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-954-1310-8dcc26.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-954-1310-8dcc66.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-954-1310-8dcc88.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-954-1310-8dcd45.tmp
O43 - CFD: 13/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-954-1310-8dcd57.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b8-1d14-1b11fef.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b8-1d14-1b12001.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b8-1d14-1b12012.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b8-1d14-1b12014.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b8-1d14-1b12026.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b8-1d14-1b12038.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b8-1d14-1b1203a.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b8-1d14-1b1204b.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b8-1d14-1b1204d.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b8-1d14-1b1205f.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b8-1d14-1b12070.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b8-1d14-1b12072.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b8-1d14-1b12084.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b8-1d14-1b12096.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b8-1d14-1b120a7.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b8-1d14-1b120a9.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b8-1d14-1b120bb.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b8-1d14-1b120cd.tmp
O43 - CFD: 06/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b8-1d14-1b120cf.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9d0-2114-fd844.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9d0-2114-fd865.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9d0-2114-fd867.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9d0-2114-fd879.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9d0-2114-fd88a.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9d0-2114-fd88c.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9d0-2114-fd89e.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9d0-2114-fd8af.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9d0-2114-fd8b1.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9d0-2114-fd8c3.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9d0-2114-fd8d5.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9d0-2114-fd8d7.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9d0-2114-fd8e8.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9d0-2114-fd8fa.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9d0-2114-fd90c.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9d0-2114-fd90e.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9d0-2114-fd91f.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9d0-2114-fd931.tmp
O43 - CFD: 17/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9d0-2114-fd942.tmp
O43 - CFD: 22/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9d4-2478-30a711.tmp
O43 - CFD: 22/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9d4-2478-30a733.tmp
O43 - CFD: 22/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9d4-2478-30a744.tmp
O43 - CFD: 22/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9d4-2478-30a746.tmp
O43 - CFD: 22/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9d4-2478-30a758.tmp
O43 - CFD: 22/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9d4-2478-30a76a.tmp
O43 - CFD: 22/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9d4-2478-30a77b.tmp
O43 - CFD: 22/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9d4-2478-30a78d.tmp
O43 - CFD: 22/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9d4-2478-30a79e.tmp
O43 - CFD: 22/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9d4-2478-30a7b0.tmp
O43 - CFD: 22/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9d4-2478-30a7b2.tmp
O43 - CFD: 22/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9d4-2478-30a7c4.tmp
O43 - CFD: 22/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9d4-2478-30a7d5.tmp
O43 - CFD: 22/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9d4-2478-30a7e7.tmp
O43 - CFD: 22/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9d4-2478-30a7f9.tmp
O43 - CFD: 22/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9d4-2478-30a80a.tmp
O43 - CFD: 22/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9d4-2478-30a81c.tmp
O43 - CFD: 22/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9d4-2478-30a81e.tmp
O43 - CFD: 22/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9d4-2478-30a82f.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a2c-12a4-9d320.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a2c-12a4-9d342.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a2c-12a4-9d353.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a2c-12a4-9d355.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a2c-12a4-9d367.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a2c-12a4-9d379.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a2c-12a4-9d37b.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a2c-12a4-9d38c.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a2c-12a4-9d39e.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a2c-12a4-9d3af.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a2c-12a4-9d3b1.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a2c-12a4-9d3c3.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a2c-12a4-9d3d5.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a2c-12a4-9d3d7.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a2c-12a4-9d3e8.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a2c-12a4-9d3fa.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a2c-12a4-9d3fc.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a2c-12a4-9d41d.tmp
O43 - CFD: 15/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a2c-12a4-9d42f.tmp
O43 - CFD: 15/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a58-3d4-c769a.tmp
O43 - CFD: 15/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a58-3d4-c76cb.tmp
O43 - CFD: 15/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a58-3d4-c76dd.tmp
O43 - CFD: 15/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a58-3d4-c76df.tmp
O43 - CFD: 15/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a58-3d4-c76f0.tmp
O43 - CFD: 15/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a58-3d4-c7702.tmp
O43 - CFD: 15/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a58-3d4-c7714.tmp
O43 - CFD: 15/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a58-3d4-c7725.tmp
O43 - CFD: 15/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a58-3d4-c7737.tmp
O43 - CFD: 15/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a58-3d4-c7749.tmp
O43 - CFD: 15/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a58-3d4-c775a.tmp
O43 - CFD: 15/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a58-3d4-c775c.tmp
O43 - CFD: 15/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a58-3d4-c776e.tmp
O43 - CFD: 15/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a58-3d4-c777f.tmp
O43 - CFD: 15/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a58-3d4-c7781.tmp
O43 - CFD: 15/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a58-3d4-c7793.tmp
O43 - CFD: 15/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a58-3d4-c77a5.tmp
O43 - CFD: 15/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a58-3d4-c77a7.tmp
O43 - CFD: 15/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a58-3d4-c77b8.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ae4-720-99de7.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ae4-720-99e09.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ae4-720-99e0b.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ae4-720-99e1c.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ae4-720-99e2e.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ae4-720-99e40.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ae4-720-99e51.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ae4-720-99e72.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ae4-720-99e84.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ae4-720-99e86.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ae4-720-99e98.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ae4-720-99ea9.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ae4-720-99ebb.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ae4-720-99ecd.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ae4-720-99eee.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ae4-720-99ef0.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ae4-720-99f01.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ae4-720-99f13.tmp
O43 - CFD: 10/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ae4-720-99f25.tmp
O43 - CFD: 07/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b18-1a4-8f014e.tmp
O43 - CFD: 07/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b18-1a4-8f01ae.tmp
O43 - CFD: 07/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b18-1a4-8f024c.tmp
O43 - CFD: 07/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b18-1a4-8f028c.tmp
O43 - CFD: 07/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b18-1a4-8f02cd.tmp
O43 - CFD: 07/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b18-1a4-8f035b.tmp
O43 - CFD: 07/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b18-1a4-8f037d.tmp
O43 - CFD: 07/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b18-1a4-8f0498.tmp
O43 - CFD: 07/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b18-1a4-8f0565.tmp
O43 - CFD: 07/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b18-1a4-8f05d4.tmp
O43 - CFD: 07/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b18-1a4-8f075d.tmp
O43 - CFD: 07/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b18-1a4-8f076f.tmp
O43 - CFD: 07/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b18-1a4-8f07a0.tmp
O43 - CFD: 07/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b18-1a4-8f082e.tmp
O43 - CFD: 07/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b18-1a4-8f084f.tmp
O43 - CFD: 07/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b18-1a4-8f0890.tmp
O43 - CFD: 07/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b18-1a4-8f092e.tmp
O43 - CFD: 07/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b18-1a4-8f094f.tmp
O43 - CFD: 07/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b18-1a4-8f0971.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b50-1290-980f9.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b50-1290-9811a.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b50-1290-9812c.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b50-1290-9812e.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b50-1290-98140.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b50-1290-98151.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b50-1290-98163.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b50-1290-98175.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b50-1290-98177.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b50-1290-98188.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b50-1290-9819a.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b50-1290-981ab.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b50-1290-981ad.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b50-1290-981bf.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b50-1290-981d1.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b50-1290-981d3.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b50-1290-981e4.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b50-1290-981f6.tmp
O43 - CFD: 13/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b50-1290-981f8.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b64-19b4-96c29.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b64-19b4-96c3b.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b64-19b4-96c4c.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b64-19b4-96c5e.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b64-19b4-96c70.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b64-19b4-96c72.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b64-19b4-96c83.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b64-19b4-96c95.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b64-19b4-96ca6.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b64-19b4-96cb8.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b64-19b4-96cba.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b64-19b4-96ccc.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b64-19b4-96cdd.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b64-19b4-96cef.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b64-19b4-96d01.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b64-19b4-96d12.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b64-19b4-96d24.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b64-19b4-96d35.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b64-19b4-96d47.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c28-1cf4-149f0b.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c28-1cf4-149f1d.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c28-1cf4-149f2e.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c28-1cf4-149f40.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c28-1cf4-149f42.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c28-1cf4-149f53.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c28-1cf4-149f65.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c28-1cf4-149f77.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c28-1cf4-149f79.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c28-1cf4-149f8a.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c28-1cf4-149f9c.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c28-1cf4-149f9e.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c28-1cf4-149fb0.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c28-1cf4-149fc1.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c28-1cf4-149fc3.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c28-1cf4-149fd5.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c28-1cf4-149fe6.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c28-1cf4-149fe8.tmp
O43 - CFD: 24/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c28-1cf4-149ffa.tmp
O43 - CFD: 22/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c2c-1020-1321a2.tmp
O43 - CFD: 22/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c2c-1020-1321c4.tmp
O43 - CFD: 22/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c2c-1020-1321d5.tmp
O43 - CFD: 22/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c2c-1020-1321d7.tmp
O43 - CFD: 22/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c2c-1020-1321e9.tmp
O43 - CFD: 22/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c2c-1020-1321fa.tmp
O43 - CFD: 22/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c2c-1020-1321fc.tmp
O43 - CFD: 22/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c2c-1020-13220e.tmp
O43 - CFD: 22/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c2c-1020-132220.tmp
O43 - CFD: 22/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c2c-1020-132231.tmp
O43 - CFD: 22/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c2c-1020-132233.tmp
O43 - CFD: 22/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c2c-1020-132245.tmp
O43 - CFD: 22/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c2c-1020-132257.tmp
O43 - CFD: 22/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c2c-1020-132268.tmp
O43 - CFD: 22/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c2c-1020-13227a.tmp
O43 - CFD: 22/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c2c-1020-13228b.tmp
O43 - CFD: 22/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c2c-1020-13228d.tmp
O43 - CFD: 22/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c2c-1020-1322af.tmp
O43 - CFD: 22/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c2c-1020-1322b1.tmp
O43 - CFD: 23/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d0-7bc-ff59f.tmp
O43 - CFD: 23/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d0-7bc-ff5e0.tmp
O43 - CFD: 23/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d0-7bc-ff601.tmp
O43 - CFD: 23/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d0-7bc-ff622.tmp
O43 - CFD: 23/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d0-7bc-ff672.tmp
O43 - CFD: 23/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d0-7bc-ff694.tmp
O43 - CFD: 23/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d0-7bc-ff6b5.tmp
O43 - CFD: 23/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d0-7bc-ff724.tmp
O43 - CFD: 23/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d0-7bc-ff736.tmp
O43 - CFD: 23/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d0-7bc-ff748.tmp
O43 - CFD: 23/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d0-7bc-ff798.tmp
O43 - CFD: 23/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d0-7bc-ff7e8.tmp
O43 - CFD: 23/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d0-7bc-ff809.tmp
O43 - CFD: 23/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d0-7bc-ff859.tmp
O43 - CFD: 23/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d0-7bc-ff86b.tmp
O43 - CFD: 23/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d0-7bc-ff8bb.tmp
O43 - CFD: 23/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d0-7bc-ff8dc.tmp
O43 - CFD: 23/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d0-7bc-ff8fd.tmp
O43 - CFD: 23/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d0-7bc-ff96d.tmp
O43 - CFD: 30/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e08-e38-456d95f.tmp
O43 - CFD: 30/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e08-e38-456d970.tmp
O43 - CFD: 30/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e08-e38-456d982.tmp
O43 - CFD: 30/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e08-e38-456d994.tmp
O43 - CFD: 30/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e08-e38-456d996.tmp
O43 - CFD: 30/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e08-e38-456d9a7.tmp
O43 - CFD: 30/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e08-e38-456d9a9.tmp
O43 - CFD: 30/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e08-e38-456d9bb.tmp
O43 - CFD: 30/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e08-e38-456d9cd.tmp
O43 - CFD: 30/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e08-e38-456d9de.tmp
O43 - CFD: 30/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e08-e38-456d9e0.tmp
O43 - CFD: 30/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e08-e38-456d9f2.tmp
O43 - CFD: 30/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e08-e38-456da03.tmp
O43 - CFD: 30/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e08-e38-456da05.tmp
O43 - CFD: 30/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e08-e38-456da17.tmp
O43 - CFD: 30/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e08-e38-456da19.tmp
O43 - CFD: 30/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e08-e38-456da4a.tmp
O43 - CFD: 30/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e08-e38-456da4c.tmp
O43 - CFD: 30/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e08-e38-456da4e.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e5c-ac4-5afd78c.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e5c-ac4-5afd79e.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e5c-ac4-5afd7a0.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e5c-ac4-5afd7b1.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e5c-ac4-5afd7c3.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e5c-ac4-5afd7d4.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e5c-ac4-5afd7d6.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e5c-ac4-5afd7e8.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e5c-ac4-5afd7fa.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e5c-ac4-5afd80b.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e5c-ac4-5afd80d.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e5c-ac4-5afd81f.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e5c-ac4-5afd831.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e5c-ac4-5afd842.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e5c-ac4-5afd854.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e5c-ac4-5afd865.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e5c-ac4-5afd867.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e5c-ac4-5afd879.tmp
O43 - CFD: 05/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e5c-ac4-5afd88b.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e6c-e08-125068.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e6c-e08-125089.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e6c-e08-12508b.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e6c-e08-12509d.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e6c-e08-1250ae.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e6c-e08-1250c0.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e6c-e08-1250c2.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e6c-e08-1250d4.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e6c-e08-1250e5.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e6c-e08-1250e7.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e6c-e08-1250f9.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e6c-e08-12510a.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e6c-e08-12510c.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e6c-e08-12511e.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e6c-e08-125130.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e6c-e08-125132.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e6c-e08-125143.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e6c-e08-125145.tmp
O43 - CFD: 27/03/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e6c-e08-125157.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e90-fe4-9c2a6.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e90-fe4-9c2b7.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e90-fe4-9c2c9.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e90-fe4-9c2db.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e90-fe4-9c2ec.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e90-fe4-9c2fe.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e90-fe4-9c30f.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e90-fe4-9c321.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e90-fe4-9c362.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e90-fe4-9c383.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e90-fe4-9c394.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e90-fe4-9c396.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e90-fe4-9c3a8.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e90-fe4-9c3ba.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e90-fe4-9c3cb.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e90-fe4-9c3dd.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e90-fe4-9c3ef.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e90-fe4-9c400.tmp
O43 - CFD: 18/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e90-fe4-9c421.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f18-2798-1f9e42b.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f18-2798-1f9e44c.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f18-2798-1f9e45e.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f18-2798-1f9e460.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f18-2798-1f9e472.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f18-2798-1f9e483.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f18-2798-1f9e485.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f18-2798-1f9e497.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f18-2798-1f9e499.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f18-2798-1f9e4ab.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f18-2798-1f9e4bc.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f18-2798-1f9e4be.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f18-2798-1f9e4d0.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f18-2798-1f9e4d2.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f18-2798-1f9e4e3.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f18-2798-1f9e4f5.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f18-2798-1f9e4f7.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f18-2798-1f9e509.tmp
O43 - CFD: 28/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f18-2798-1f9e51a.tmp
O43 - CFD: 30/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f74-b50-ae125.tmp
O43 - CFD: 30/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f74-b50-ae2cd.tmp
O43 - CFD: 30/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f74-b50-ae36c.tmp
O43 - CFD: 30/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f74-b50-ae3bc.tmp
O43 - CFD: 30/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f74-b50-ae525.tmp
O43 - CFD: 30/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f74-b50-ae537.tmp
O43 - CFD: 30/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f74-b50-ae5e5.tmp
O43 - CFD: 30/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f74-b50-ae615.tmp
O43 - CFD: 30/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f74-b50-ae627.tmp
O43 - CFD: 30/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f74-b50-ae658.tmp
O43 - CFD: 30/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f74-b50-ae66a.tmp
O43 - CFD: 30/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f74-b50-ae68b.tmp
O43 - CFD: 30/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f74-b50-ae69c.tmp
O43 - CFD: 30/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f74-b50-ae6ae.tmp
O43 - CFD: 30/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f74-b50-ae6c0.tmp
O43 - CFD: 30/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f74-b50-ae6d1.tmp
O43 - CFD: 30/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f74-b50-ae6e3.tmp
O43 - CFD: 30/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f74-b50-ae704.tmp
O43 - CFD: 30/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f74-b50-ae754.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f98-50c-cb1bf.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f98-50c-cb1d1.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f98-50c-cb1e2.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f98-50c-cb1f4.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f98-50c-cb205.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f98-50c-cb207.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f98-50c-cb229.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f98-50c-cb23a.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f98-50c-cb23c.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f98-50c-cb25e.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f98-50c-cb260.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f98-50c-cb281.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f98-50c-cb34e.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f98-50c-cb3bd.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f98-50c-cb41d.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f98-50c-cb48c.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f98-50c-cb4fc.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f98-50c-cb55c.tmp
O43 - CFD: 13/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f98-50c-cb56d.tmp
O43 - CFD: 19/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f98-bd0-9baa7.tmp
O43 - CFD: 19/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f98-bd0-9bab8.tmp
O43 - CFD: 19/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f98-bd0-9bada.tmp
O43 - CFD: 19/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f98-bd0-9badc.tmp
O43 - CFD: 19/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f98-bd0-9baed.tmp
O43 - CFD: 19/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f98-bd0-9baff.tmp
O43 - CFD: 19/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f98-bd0-9bb01.tmp
O43 - CFD: 19/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f98-bd0-9bb13.tmp
O43 - CFD: 19/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f98-bd0-9bb24.tmp
O43 - CFD: 19/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f98-bd0-9bb36.tmp
O43 - CFD: 19/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f98-bd0-9bb38.tmp
O43 - CFD: 19/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f98-bd0-9bb59.tmp
O43 - CFD: 19/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f98-bd0-9bb6b.tmp
O43 - CFD: 19/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f98-bd0-9bb7c.tmp
O43 - CFD: 19/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f98-bd0-9bb8e.tmp
O43 - CFD: 19/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f98-bd0-9bba0.tmp
O43 - CFD: 19/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f98-bd0-9bbb1.tmp
O43 - CFD: 19/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f98-bd0-9bbc3.tmp
O43 - CFD: 19/04/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f98-bd0-9bbd4.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-fb0-1e3c-f425d.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-fb0-1e3c-f426e.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-fb0-1e3c-f4280.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-fb0-1e3c-f4282.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-fb0-1e3c-f4294.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-fb0-1e3c-f42b5.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-fb0-1e3c-f42b7.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-fb0-1e3c-f42c8.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-fb0-1e3c-f42da.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-fb0-1e3c-f42ec.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-fb0-1e3c-f42fd.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-fb0-1e3c-f42ff.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-fb0-1e3c-f4321.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-fb0-1e3c-f4332.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-fb0-1e3c-f4334.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-fb0-1e3c-f4346.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-fb0-1e3c-f4357.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-fb0-1e3c-f4369.tmp
O43 - CFD: 03/05/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-fb0-1e3c-f437b.tmp
O43 - CFD: 05/09/2019 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Roaming\Adobe =>.Adobe
O43 - CFD: 23/02/2020 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Roaming\Microsoft =>.Microsoft Corporation

---\\ DERNIERS FICHIERS CRÉÉS DANS WINDOWS Prefetcher (2) - 20s
O45 - LFCP:[MD5.C7669267B5298D16B5B559A03006C234] 24/05/2020 A -- C:\WINDOWS\Prefetch\KMSAUTO.EXE-4C1E1D46.pf =>HackTool.WinActivator
O45 - LFCP:[MD5.B2E81D93729C151E47BB1CA641D99EFC] 30/05/2020 A -- C:\WINDOWS\Prefetch\SEGURAZOKILLER.EXE-F60DC848.pf =>SUP.Optional.Segurazo

---\\ ShellIconOverlayIdentifiers (SIOI) (5) - 1s
O106 - SIOI: Microsoft SkyDrive Pro Icon Overlay 1 (ErrorConflict) [ SkyDrivePro1 (ErrorConflict)] - {8BA85C75-763B-4103-94EB-9470F12FE0F7}. (.Microsoft Corporation - Microsoft OneDrive for Business Extensions.) -- C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL =>.Microsoft Corporation®
O106 - SIOI: Microsoft SkyDrive Pro Icon Overlay 2 (SyncInProgress) [ SkyDrivePro2 (SyncInProgress)] - {CD55129A-B1A1-438E-A425-CEBC7DC684EE}. (.Microsoft Corporation - Microsoft OneDrive for Business Extensions.) -- C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL =>.Microsoft Corporation®
O106 - SIOI: Microsoft SkyDrive Pro Icon Overlay 3 (InSync) [ SkyDrivePro3 (InSync)] - {E768CD3B-BDDC-436D-9C13-E1B39CA257B1}. (.Microsoft Corporation - Microsoft OneDrive for Business Extensions.) -- C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL =>.Microsoft Corporation®
O106 - SIOI: Enhanced Storage Icon Overlay Handler Class [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - DLL d’extension d’environnement de stockage.) -- C:\Windows\System32\EhStorShell.dll [Unsigned] =>.Microsoft Corporation
O106 - SIOI: [Offline Files] - {4E77131D-3629-431c-9818-C5679DC83E81}. (.Microsoft Corporation - IU de cache côté client.) -- C:\Windows\System32\cscui.dll [Unsigned] =>.Microsoft Corporation

---\\ RACCOURCIS DES MENUS CONTEXTUELS (SCMH) (34) - 2s
O108 - CMH1: 7-Zip - {23170F69-40C1-278A-1000-000100020000} . (.Igor Pavlov - 7-Zip Shell Extension.) -- C:\Program Files\7-Zip\7-zip.dll [Unsigned] =>.Igor Pavlov
O108 - CMH1: EPP - {09A47860-11B0-4DA5-AFA5-26D86198A780} . (.Microsoft Corporation - Extension Microsoft Security Client Shell.) -- C:\Program Files\Windows Defender\shellext.dll =>.Microsoft Windows®
O108 - CMH1: ModernSharing - {e2bf9676-5f8f-435c-97eb-11607a5bedf7} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH1: Mp3tagShell - {6351E20C-35FA-4BE3-98FB-4CABF1363E12} . (.Florian Heidenreich - Shell Extension Mp3tag - the universal Tag.) -- C:\Program Files\Mp3tag\Mp3tagShell32.dll [Unsigned] =>.Florian Heidenreich
O108 - CMH1: Open With - {09799AFB-AD67-11d1-ABCD-00C04FC30936} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft®
O108 - CMH1: Open With EncryptionMenu - {A470F8CF-A1E8-4f65-8335-227475AA5C46} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft®
O108 - CMH1: Sharing - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH1: WinZip - {E0D79304-84BE-11CE-9641-444553540000} . (.WinZip Computing - WinZip Shell Extension DLL.) -- C:\Program Files\WinZip\wzshlstb.dll =>.Corel Corporation®
O108 - CMH1: WorkFolders - {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} . (.Microsoft Corporation - Extension d’environnement de Dossiers de tr.) -- C:\Windows\System32\WorkfoldersShell.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH2: OpenContainingFolderMenu - {37ea3a21-7493-4208-a011-7f9ea79ce9f5} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft®
O108 - CMH2: WinZip - {E0D79304-84BE-11CE-9641-444553540000} . (.WinZip Computing - WinZip Shell Extension DLL.) -- C:\Program Files\WinZip\wzshlstb.dll =>.Corel Corporation®
O108 - CMH3: CopyAsPathMenu - {f3d06e7c-1e45-4a26-847e-f9fcdee59be0} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft®
O108 - CMH3: SendTo - {7BA4C740-9E81-11CF-99D3-00AA004AE837} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft®
O108 - CMH4: 7-Zip - {23170F69-40C1-278A-1000-000100020000} . (.Igor Pavlov - 7-Zip Shell Extension.) -- C:\Program Files\7-Zip\7-zip.dll [Unsigned] =>.Igor Pavlov
O108 - CMH4: EncryptionMenu - {A470F8CF-A1E8-4f65-8335-227475AA5C46} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft®
O108 - CMH4: EPP - {09A47860-11B0-4DA5-AFA5-26D86198A780} . (.Microsoft Corporation - Extension Microsoft Security Client Shell.) -- C:\Program Files\Windows Defender\shellext.dll =>.Microsoft Windows®
O108 - CMH4: Mp3tagShell - {6351E20C-35FA-4BE3-98FB-4CABF1363E12} . (.Florian Heidenreich - Shell Extension Mp3tag - the universal Tag.) -- C:\Program Files\Mp3tag\Mp3tagShell32.dll [Unsigned] =>.Florian Heidenreich
O108 - CMH4: Offline Files - {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} . (.Microsoft Corporation - IU de cache côté client.) -- C:\Windows\System32\cscui.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH4: Sharing - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH4: WinZip - {E0D79304-84BE-11CE-9641-444553540000} . (.WinZip Computing - WinZip Shell Extension DLL.) -- C:\Program Files\WinZip\wzshlstb.dll =>.Corel Corporation®
O108 - CMH4: WorkFolders - {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} . (.Microsoft Corporation - Extension d’environnement de Dossiers de tr.) -- C:\Windows\System32\WorkfoldersShell.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH5: New - {D969A300-E7FF-11d0-A93B-00A0C90F2719} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft®
O108 - CMH5: NvCplDesktopContext - {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} . (.NVIDIA Corporation - NVIDIA Display Shell Extension.) -- C:\Windows\System32\nvshext.dll =>.NVIDIA Corporation®
O108 - CMH5: Sharing - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH5: WorkFolders - {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} . (.Microsoft Corporation - Extension d’environnement de Dossiers de tr.) -- C:\Windows\System32\WorkfoldersShell.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH6: 7-Zip - {23170F69-40C1-278A-1000-000100020000} . (.Igor Pavlov - 7-Zip Shell Extension.) -- C:\Program Files\7-Zip\7-zip.dll [Unsigned] =>.Igor Pavlov
O108 - CMH6: Library Location - {3dad6c5d-2167-4cae-9914-f99e41c12cfa} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft®
O108 - CMH6: Offline Files - {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} . (.Microsoft Corporation - IU de cache côté client.) -- C:\Windows\System32\cscui.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH6: PintoStartScreen - {470C0EBD-5D73-4d58-9CED-E91E22E23282} . (.Microsoft Corporation - Programme de résolution d’applications.) -- C:\Windows\System32\appresolver.dll =>.Microsoft®
O108 - CMH6: WinZip - {E0D79304-84BE-11CE-9641-444553540000} . (.WinZip Computing - WinZip Shell Extension DLL.) -- C:\Program Files\WinZip\wzshlstb.dll =>.Corel Corporation®
O108 - CMH7: EnhancedStorageShell - {2854F705-3548-414C-A113-93E27C808C85} . (.Microsoft Corporation - DLL d’extension d’environnement de stockage.) -- C:\Windows\System32\EhStorShell.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH7: EPP - {09A47860-11B0-4DA5-AFA5-26D86198A780} . (.Microsoft Corporation - Extension Microsoft Security Client Shell.) -- C:\Program Files\Windows Defender\shellext.dll =>.Microsoft Windows®
O108 - CMH7: Mp3tagShell - {6351E20C-35FA-4BE3-98FB-4CABF1363E12} . (.Florian Heidenreich - Shell Extension Mp3tag - the universal Tag.) -- C:\Program Files\Mp3tag\Mp3tagShell32.dll [Unsigned] =>.Florian Heidenreich
O108 - CMH7: Sharing - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll [Unsigned] =>.Microsoft Corporation

---\\ IMAGE FILE EXECUTION OPTIONS (IFEO) (17) - 3s
O50 - IFEO:C:\Windows\System32\cscript.exe - (.Microsoft Corporation - Microsoft ® Console Based Script Host.) [DisableExceptionChainValidation\\3] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\dllhost.exe - (.Microsoft Corporation - COM Surrogate.) [DisableExceptionChainValidation\\3] =>.Microsoft Windows®
O50 - IFEO:C:\Windows\System32\drvinst.exe - (.Microsoft Corporation - Module d’installation de pilotes.) [DisableExceptionChainValidation\\3] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\ie4uinit.exe - (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) [MitigationOptions\\256] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\ieUnatt.exe - (.Microsoft Corporation - Outil d’installation sans assistance d’IE 7.) [MitigationOptions\\256] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\mmc.exe - (.Microsoft Corporation - Microsoft Management Console.) [DisableExceptionChainValidation\\3] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\MRT.exe - (.Microsoft Corporation - Outil de suppression de logiciels malveilla.) [CFGOptions\\1] =>.Microsoft®
O50 - IFEO:C:\Windows\System32\msfeedssync.exe - (.Microsoft Corporation - Microsoft Feeds Synchronization.) [MitigationOptions\\256] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\mshta.exe - (.Microsoft Corporation - Hôte des applications HTML de Microsoft(R).) [MitigationOptions\\256] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\PresentationHost.exe - (.Microsoft Corporation - Windows Presentation Foundation Host.) [MitigationOptions\\1118481] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\PrintIsolationHost.exe - (.Microsoft Corporation - PrintIsolationHost.) [MitigationOptions\\2097152] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\runtimebroker.exe - (.Microsoft Corporation - Runtime Broker.) [MitigationOptions\\4294967296] =>.Microsoft Windows®
O50 - IFEO:C:\Windows\System32\searchprotocolhost.exe - (.Microsoft Corporation - Microsoft Windows Search Protocol Host.) [DisableExceptionChainValidation\\3] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\spoolsv.exe - (.Microsoft Corporation - Application sous-système spouleur.) [DisableExceptionChainValidation\\3] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\spoolsv.exe - (.Microsoft Corporation - Application sous-système spouleur.) [MitigationOptions\\2097152] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\svchost.exe - (.Microsoft Corporation - Processus hôte pour les services Windows.) [MinimumStackCommitInBytes\\32768] =>.Microsoft Windows Publisher®
O50 - IFEO:C:\Windows\System32\wscript.exe - (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) [DisableExceptionChainValidation\\3] [Unsigned] =>.Microsoft Corporation

---\\ LISTE DES PILOTES DU SYSTÈME (415) - 24s
O58 - SDL:2019/03/19 04:39:26 A . (.Microsoft Corporation - 1394 OpenHCI Driver.) -- C:\WINDOWS\System32\drivers\1394ohci.sys [190464] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:26 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\WINDOWS\System32\drivers\3ware.sys [85816] =>.Microsoft Windows®
O58 - SDL:2019/09/04 22:03:07 A . (.Microsoft Corporation - Pilote ACPI pour NT.) -- C:\WINDOWS\System32\drivers\acpi.sys [603960] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:26 A . (.Microsoft Corporation - ACPI Devices Driver.) -- C:\WINDOWS\System32\drivers\AcpiDev.sys [14336] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:36 A . (.Microsoft Corporation - ACPIEx Driver.) -- C:\WINDOWS\System32\drivers\acpiex.sys [96272] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:26 A . (.Microsoft Corporation - ACPI Processor Aggregator Device Driver.) -- C:\WINDOWS\System32\drivers\acpipagr.sys [9216] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:24 A . (.Microsoft Corporation - ACPI Power Metering Driver.) -- C:\WINDOWS\System32\drivers\acpipmi.sys [11264] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:26 A . (.Microsoft Corporation - ACPI Wake Alarm.) -- C:\WINDOWS\System32\drivers\acpitime.sys [9216] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/03/12 20:49:16 A . (.Microsoft Corporation - Audio KMDF Class Extension.) -- C:\WINDOWS\System32\drivers\Acx01000.sys [241664] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:26 A . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS.) -- C:\WINDOWS\System32\drivers\adp80xx.sys [1038352] =>.Microsoft Windows®
O58 - SDL:2020/05/13 16:53:12 A . (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) -- C:\WINDOWS\System32\drivers\afd.sys [513336] =>.Microsoft®
O58 - SDL:2020/03/12 20:49:46 A . (.Microsoft Corporation - AF_UNIX socket provider.) -- C:\WINDOWS\System32\drivers\afunix.sys [29696] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/03/12 20:49:46 A . (.Microsoft Corporation - Gestionnaire d'appels RAS Agile Vpn Minipor.) -- C:\WINDOWS\System32\drivers\agilevpn.sys [93696] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/03/12 20:49:45 A . (.Microsoft Corporation - Application Compatibility Cache.) -- C:\WINDOWS\System32\drivers\ahcache.sys [231936] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/03/12 20:49:08 A . (.Microsoft Corporation - Processor Device Driver.) -- C:\WINDOWS\System32\drivers\amdk8.sys [156984] =>.Microsoft®
O58 - SDL:2020/03/12 20:49:08 A . (.Microsoft Corporation - Processor Device Driver.) -- C:\WINDOWS\System32\drivers\amdppm.sys [160568] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:26 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\WINDOWS\System32\drivers\amdsata.sys [75280] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:26 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\WINDOWS\System32\drivers\amdsbs.sys [215560] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:26 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\WINDOWS\System32\drivers\amdxata.sys [23080] =>.Microsoft Windows®
O58 - SDL:2019/11/14 15:27:14 A . (.Microsoft Corporation - AppID Driver.) -- C:\WINDOWS\System32\drivers\appid.sys [162856] =>.Microsoft®
O58 - SDL:2019/11/14 15:27:14 A . (.Microsoft Corporation - Applocker Filter.) -- C:\WINDOWS\System32\drivers\applockerfltr.sys [13312] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/02/13 21:03:29 A . (.Microsoft Corporation - Microsoft Application Virtualization Stream.) -- C:\WINDOWS\System32\drivers\AppVStrm.sys [92688] =>.Microsoft®
O58 - SDL:2020/02/13 21:03:29 A . (.Microsoft Corporation - Microsoft Application Virtualization VE Man.) -- C:\WINDOWS\System32\drivers\AppvVemgr.sys [118584] =>.Microsoft®
O58 - SDL:2020/02/13 21:03:29 A . (.Microsoft Corporation - Microsoft Application Virtualization VFS Fi.) -- C:\WINDOWS\System32\drivers\AppvVfs.sys [111632] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:26 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\WINDOWS\System32\drivers\arcsas.sys [116752] =>.Microsoft Windows®
O58 - SDL:2009/07/16 05:36:30 A . (. - ATK0110 ACPI Utility.) -- C:\WINDOWS\System32\drivers\ASACPI.sys [13216] =>.ASUSTeK Computer Inc.®
O58 - SDL:2015/10/07 12:47:28 A . (. - ASUS Virtual Bus.) -- C:\WINDOWS\System32\drivers\AsusVBus.sys [33048] =>.ASUSTeK Computer Inc.®
O58 - SDL:2019/03/19 04:40:48 A . (.Microsoft Corporation - MS Remote Access serial network driver.) -- C:\WINDOWS\System32\drivers\asyncmac.sys [20480] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/03/12 20:49:08 A . (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\WINDOWS\System32\drivers\atapi.sys [22840] =>.Microsoft®
O58 - SDL:2020/03/12 20:49:08 A . (.Microsoft Corporation - ATAPI Driver Extension.) -- C:\WINDOWS\System32\drivers\ataport.sys [156984] =>.Microsoft®
O58 - SDL:2019/03/19 04:40:21 A . (.Microsoft Corporation - BAM Kernel Driver.) -- C:\WINDOWS\System32\drivers\bam.sys [57144] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:26 A . (.Microsoft Corporation - Battery Class Driver.) -- C:\WINDOWS\System32\drivers\battc.sys [35128] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:20 A . (. - BCM Function 2 Device Driver.) -- C:\WINDOWS\System32\drivers\bcmfn2.sys [8192] [Unsigned] =>.Broadcom Corporation
O58 - SDL:2019/03/19 04:39:46 A . (.Microsoft Corporation - BEEP Driver.) -- C:\WINDOWS\System32\drivers\beep.sys [7168] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/02/13 21:03:03 A . (.Microsoft Corporation - Windows Bind Filter Driver.) -- C:\WINDOWS\System32\drivers\bindflt.sys [89912] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:40 A . (.Microsoft Corporation - NT Lan Manager Datagram Receiver Driver.) -- C:\WINDOWS\System32\drivers\bowser.sys [76800] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:59 A . (.Microsoft Corporation - MAC Bridge Driver.) -- C:\WINDOWS\System32\drivers\bridge.sys [96256] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:20 A . (.Microsoft Corporation - Microsoft Bluetooth Audio Multiprofile Mana.) -- C:\WINDOWS\System32\drivers\BtaMPM.sys [27648] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/09/11 17:58:56 A . (.Microsoft Corporation - Bluetooth A2DP Driver.) -- C:\WINDOWS\System32\drivers\BthA2dp.sys [165376] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/03/12 20:49:08 A . (.Microsoft Corporation - Extension de bus Bluetooth.) -- C:\WINDOWS\System32\drivers\bthenum.sys [92672] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:20 A . (.Microsoft Corporation - Bluetooth Hands-Free Audio and Call Control.) -- C:\WINDOWS\System32\drivers\BthHfEnum.sys [94720] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/03/12 20:49:08 A . (.Microsoft Corporation - Bluetooth Transport Extensibility Miniport.) -- C:\WINDOWS\System32\drivers\BthMini.SYS [25600] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:23 A . (.Microsoft Corporation - Bluetooth Communications Driver.) -- C:\WINDOWS\System32\drivers\bthmodem.sys [52736] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/03/12 20:49:08 A . (.Microsoft Corporation - Pilote de bus Bluetooth.) -- C:\WINDOWS\System32\drivers\bthport.sys [1091584] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/03/12 20:49:08 A . (.Microsoft Corporation - Pilote de Miniport Bluetooth.) -- C:\WINDOWS\System32\drivers\BTHUSB.SYS [71168] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - Button Converter Driver.) -- C:\WINDOWS\System32\drivers\buttonconverter.sys [29696] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:21 A . (.Microsoft Corporation - Charge Arbiration Driver.) -- C:\WINDOWS\System32\drivers\CAD.sys [53560] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:56 A . (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS\System32\drivers\cdfs.sys [74752] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:26 A . (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS\System32\drivers\cdrom.sys [125952] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:02 A . (.Microsoft Corporation - Event Aggregation Kernel Mode Library.) -- C:\WINDOWS\System32\drivers\CEA.sys [61752] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:21 A . (.Microsoft Corporation - Consumer IR Class Driver for eHome.) -- C:\WINDOWS\System32\drivers\circlass.sys [39424] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/02/13 21:03:09 A . (.Microsoft Corporation - SCSI Class System Dll.) -- C:\WINDOWS\System32\drivers\Classpnp.sys [353080] =>.Microsoft®
O58 - SDL:2020/05/13 16:53:07 A . (.Microsoft Corporation - Cloud Files Mini Filter Driver.) -- C:\WINDOWS\System32\drivers\cldflt.sys [351232] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/05/13 16:53:12 A . (.Microsoft Corporation - Common Log File System Driver.) -- C:\WINDOWS\System32\drivers\clfs.sys [277304] =>.Microsoft®
O58 - SDL:2019/10/09 20:20:47 A . (.Microsoft Corporation - CLIP Service.) -- C:\WINDOWS\System32\drivers\ClipSp.sys [824120] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:26 A . (.Microsoft Corporation - Control Method Battery Driver.) -- C:\WINDOWS\System32\drivers\CmBatt.sys [26624] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:36 A . (.Microsoft Corporation - Noyau Gestionnaire de configuration Configu.) -- C:\WINDOWS\System32\drivers\cmimcext.sys [25616] =>.Microsoft Windows®
O58 - SDL:2020/05/13 16:53:10 A . (.Microsoft Corporation - Kernel Cryptography, Next Generation.) -- C:\WINDOWS\System32\drivers\cng.sys [553656] =>.Microsoft®
O58 - SDL:2019/03/19 04:40:03 A . (.Microsoft Corporation - CNG Hardware Assist algorithm provider.) -- C:\WINDOWS\System32\drivers\cnghwassist.sys [32568] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:02 A . (.Microsoft Corporation - Console Driver.) -- C:\WINDOWS\System32\drivers\condrv.sys [44560] =>.Microsoft Windows®
O58 - SDL:2020/03/12 20:49:36 A . (.Microsoft Corporation - Crash Dump Driver.) -- C:\WINDOWS\System32\drivers\crashdmp.sys [80912] =>.Microsoft®
O58 - SDL:2020/03/12 20:50:00 A . (.Microsoft Corporation - Windows Client Side Caching Driver.) -- C:\WINDOWS\System32\drivers\csc.sys [431616] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:21 A . (.Microsoft Corporation - DAM Kernel Driver.) -- C:\WINDOWS\System32\drivers\dam.sys [81208] =>.Microsoft Windows®
O58 - SDL:2019/09/04 22:03:02 A . (.Microsoft Corporation - Xbox Device Authentication Driver.) -- C:\WINDOWS\System32\drivers\devauthe.sys [36352] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:19 A . (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\WINDOWS\System32\drivers\dfsc.sys [114176] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:26 A . (.Microsoft Corporation - PnP Disk Driver.) -- C:\WINDOWS\System32\drivers\disk.sys [77624] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:29 A . (.Microsoft Corporation - Crash Dump Disk Driver.) -- C:\WINDOWS\System32\drivers\Diskdump.sys [31032] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:29 A . (.Microsoft Corporation - Boot Over USB Dump Driver.) -- C:\WINDOWS\System32\drivers\Dmpusbstor.sys [11264] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:30 A . (.Microsoft Corporation - Mémoire dynamique.) -- C:\WINDOWS\System32\drivers\dmvsc.sys [49464] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:23 A . (.Microsoft Corporation - Microsoft Trusted Audio Drivers.) -- C:\WINDOWS\System32\drivers\drmk.sys [70144] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:23 A . (.Microsoft Corporation - Microsoft Trusted Audio Drivers.) -- C:\WINDOWS\System32\drivers\drmkaud.sys [14696] =>.Microsoft Windows®
O58 - SDL:2018/03/24 14:33:47 A . (.Disc Soft Ltd - DAEMON Tools Lite Virtual SCSI Bus Driver.) -- C:\WINDOWS\System32\drivers\dtlitescsibus.sys [26168] =>.Disc Soft Ltd®
O58 - SDL:2018/03/24 14:33:51 A . (.Disc Soft Ltd - DAEMON Tools Lite Virtual USB Bus Driver.) -- C:\WINDOWS\System32\drivers\dtliteusbbus.sys [40504] =>.Disc Soft Ltd®
O58 - SDL:2019/03/19 04:40:14 A . (.Microsoft Corporation - ATAPI Dump Driver.) -- C:\WINDOWS\System32\drivers\Dumpata.sys [30736] =>.Microsoft Windows®
O58 - SDL:2019/09/04 22:08:21 A . (.Microsoft Corporation - Bitlocker Drive Encryption Crashdump Filter.) -- C:\WINDOWS\System32\drivers\dumpfve.sys [75696] =>.Microsoft®
O58 - SDL:2020/04/15 20:47:17 A . (.Microsoft Corporation - SD Crashdump Port Driver.) -- C:\WINDOWS\System32\drivers\dumpsd.sys [158736] =>.Microsoft®
O58 - SDL:2019/03/19 04:40:03 A . (.Microsoft Corporation - SD Host Controller Crashdump Port Driver.) -- C:\WINDOWS\System32\drivers\dumpsdport.sys [23040] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:29 A . (.Microsoft Corporation - Storport Dump Driver.) -- C:\WINDOWS\System32\drivers\Dumpstorport.sys [28680] =>.Microsoft Windows®
O58 - SDL:2020/05/13 16:52:34 A . (.Microsoft Corporation - DirectX Graphics Kernel.) -- C:\WINDOWS\System32\drivers\dxgkrnl.sys [2755384] =>.Microsoft®
O58 - SDL:2020/05/13 16:52:34 A . (.Microsoft Corporation - DirectX Graphics MMS.) -- C:\WINDOWS\System32\drivers\dxgmms1.sys [344376] =>.Microsoft®
O58 - SDL:2020/05/13 16:52:35 A . (.Microsoft Corporation - DirectX Graphics MMS.) -- C:\WINDOWS\System32\drivers\dxgmms2.sys [689464] =>.Microsoft®
O58 - SDL:2019/03/19 04:40:59 A . (.Microsoft Corporation - Enhanced Storage Class driver for IEEE 1667.) -- C:\WINDOWS\System32\drivers\EhStorClass.sys [69944] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:21 A . (.Microsoft Corporation - Microsoft driver for storage devices suppor.) -- C:\WINDOWS\System32\drivers\EhStorTcgDrv.sys [97808] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:26 A . (.Microsoft Corporation - Error Device Driver.) -- C:\WINDOWS\System32\drivers\errdev.sys [9728] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/11 23:59:01 A . (.Microsoft Corporation - Microsoft Extended FAT File System.) -- C:\WINDOWS\System32\drivers\exfat.sys [306176] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/12/11 23:59:01 A . (.Microsoft Corporation - Fast FAT File System Driver.) -- C:\WINDOWS\System32\drivers\fastfat.sys [320016] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:26 A . (.Microsoft Corporation - Floppy Disk Controller Driver.) -- C:\WINDOWS\System32\drivers\fdc.sys [26112] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:36 A . (.Microsoft Corporation - Windows sandboxing and encryption filter.) -- C:\WINDOWS\System32\drivers\filecrypt.sys [45568] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:14 A . (.Microsoft Corporation - FileInfo Filter Driver.) -- C:\WINDOWS\System32\drivers\fileinfo.sys [69944] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:14 A . (.Microsoft Corporation - File Trace Filter Driver.) -- C:\WINDOWS\System32\drivers\filetrace.sys [29184] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/04/15 20:47:17 A . (.Microsoft Corporation - Floppy Driver.) -- C:\WINDOWS\System32\drivers\flpydisk.sys [20992] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/09/04 22:05:46 A . (.Microsoft Corporation - Gestionnaire de filtres de système de fichi.) -- C:\WINDOWS\System32\drivers\fltMgr.sys [309048] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:36 A . (.Microsoft Corporation - File System Dependency Manager Mini Filter.) -- C:\WINDOWS\System32\drivers\fsdepends.sys [53048] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:17 A . (.Microsoft Corporation - File System Recognizer Driver.) -- C:\WINDOWS\System32\drivers\fs_rec.sys [28168] =>.Microsoft Windows®
O58 - SDL:2019/09/04 22:08:21 A . (.Microsoft Corporation - BitLocker Drive Encryption Driver.) -- C:\WINDOWS\System32\drivers\fvevol.sys [650552] =>.Microsoft®
O58 - SDL:2020/05/13 16:53:12 A . (.Microsoft Corporation - FWP/IPsec Kernel-Mode API.) -- C:\WINDOWS\System32\drivers\FWPKCLNT.SYS [331064] =>.Microsoft®
O58 - SDL:2017/04/04 18:08:48 A . (.Sony Mobile Communications - SOMC USB Flash Driver Filter.) -- C:\WINDOWS\System32\drivers\ggflt.sys [13528] =>.Sony Mobile Communications AB®
O58 - SDL:2017/04/04 18:08:48 A . (.Sony Mobile Communications - SOMC USB Flash Driver.) -- C:\WINDOWS\System32\drivers\ggsomc.sys [26328] =>.Sony Mobile Communications AB®
O58 - SDL:2019/03/19 04:39:32 A . (.Microsoft Corporation - GPU Energy Kernel Driver.) -- C:\WINDOWS\System32\drivers\gpuenergydrv.sys [8192] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/03/12 20:49:07 A . (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\WINDOWS\System32\drivers\hdaudbus.sys [92160] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/09/11 17:58:57 A . (.Microsoft Corporation - High Definition Audio Function Driver.) -- C:\WINDOWS\System32\drivers\HdAudio.sys [357376] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:26 A . (.Microsoft Corporation - Hid Battery Driver.) -- C:\WINDOWS\System32\drivers\hidbatt.sys [30008] =>.Microsoft Windows®
O58 - SDL:2020/05/13 16:52:14 A . (.Microsoft Corporation - Pilote de miniport Bluetooth pour les périp.) -- C:\WINDOWS\System32\drivers\hidbth.sys [99840] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/09/04 22:03:11 A . (.Microsoft Corporation - Bibliothèque Hid Class.) -- C:\WINDOWS\System32\drivers\hidclass.sys [142336] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - I2C HID Miniport Driver.) -- C:\WINDOWS\System32\drivers\hidi2c.sys [39424] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - HID Button over Interrupt Driver.) -- C:\WINDOWS\System32\drivers\hidinterrupt.sys [40248] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:23 A . (.Microsoft Corporation - Infrared Miniport Driver for Input Devices.) -- C:\WINDOWS\System32\drivers\hidir.sys [38912] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/09/04 22:03:11 A . (.Microsoft Corporation - Hid Parsing Library.) -- C:\WINDOWS\System32\drivers\hidparse.sys [31232] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/10/09 20:20:30 A . (.Microsoft Corporation - SPI HID Miniport Driver.) -- C:\WINDOWS\System32\drivers\hidspi.sys [43520] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/09/04 22:03:11 A . (.Microsoft Corporation - USB Miniport Driver for Input Devices.) -- C:\WINDOWS\System32\drivers\hidusb.sys [31232] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:26 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\WINDOWS\System32\drivers\HpSAMD.sys [56848] =>.Microsoft Windows®
O58 - SDL:2020/04/15 20:48:01 A . (.Microsoft Corporation - HTTP Pile du protocole.) -- C:\WINDOWS\System32\drivers\http.sys [880952] =>.Microsoft®
O58 - SDL:2019/03/19 04:41:17 A . (.Microsoft Corporation - Microsoft Hyper-V Socket Provider.) -- C:\WINDOWS\System32\drivers\hvsocket.sys [105784] =>.Microsoft Windows®
O58 - SDL:2020/04/15 20:48:01 A . (.Microsoft Corporation - Hardware Policy Driver.) -- C:\WINDOWS\System32\drivers\hwpolicy.sys [31544] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:30 A . (.Microsoft Corporation - Microsoft VMBus Synthetic Keyboard Driver.) -- C:\WINDOWS\System32\drivers\hyperkbd.sys [21304] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:30 A . (.Microsoft Corporation - Microsoft VMBus Video Device Miniport Drive.) -- C:\WINDOWS\System32\drivers\HyperVideo.sys [33808] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - Pilote de port i8042.) -- C:\WINDOWS\System32\drivers\i8042prt.sys [99328] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:20 A . (.Intel(R) Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\iagpio.sys [28672] [Unsigned] =>.Intel(R) Corporation
O58 - SDL:2019/03/19 04:39:20 A . (.Intel(R) Corporation - Intel(R) Serial IO I2C Driver.) -- C:\WINDOWS\System32\drivers\iai2c.sys [73728] [Unsigned] =>.Intel(R) Corporation
O58 - SDL:2019/03/19 04:39:26 A . (.Intel Corporation - Intel(R) Atom(TM) Processor GPIO Controller.) -- C:\WINDOWS\System32\drivers\iaiogpio.sys [22016] [Unsigned] =>.Intel Corporation
O58 - SDL:2019/03/19 04:39:26 A . (.Intel Corporation - Intel(R) Atom(TM) Processor I2C Controller.) -- C:\WINDOWS\System32\drivers\iaioi2c.sys [57856] [Unsigned] =>.Intel Corporation
O58 - SDL:2019/03/19 04:39:27 A . (.Intel Corporation - Intel(R) Rapid Storage Technology driver (i.) -- C:\WINDOWS\System32\drivers\iaStorAVC.sys [693048] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:27 A . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\WINDOWS\System32\drivers\iaStorV.sys [333624] =>.Microsoft Windows®
O58 - SDL:2012/03/23 18:09:38 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\WINDOWS\System32\drivers\igdkmd32.sys [9036288] [Unsigned] =>.Intel Corporation
O58 - SDL:2019/03/19 04:40:02 A . (.Microsoft Corporation - Indirect displays kernel-mode filter driver.) -- C:\WINDOWS\System32\drivers\IndirectKmd.sys [32768] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/03/12 20:49:08 A . (.Microsoft Corporation - Intel PCI IDE Driver.) -- C:\WINDOWS\System32\drivers\intelide.sys [17208] =>.Microsoft®
O58 - SDL:2020/03/12 20:49:08 A . (.Microsoft Corporation - Intel Power Engine Plugin.) -- C:\WINDOWS\System32\drivers\intelpep.sys [319976] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:20 A . (.Microsoft Corporation - Intel Power Limit Driver.) -- C:\WINDOWS\System32\drivers\intelpmax.sys [19456] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/03/12 20:49:08 A . (.Microsoft Corporation - Processor Device Driver.) -- C:\WINDOWS\System32\drivers\intelppm.sys [173880] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:30 A . (.Microsoft Corporation - Filtre de contrôle de taux d’E/S.) -- C:\WINDOWS\System32\drivers\iorate.sys [45064] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:48 A . (.Microsoft Corporation - IP FILTER DRIVER.) -- C:\WINDOWS\System32\drivers\ipfltdrv.sys [63488] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:27 A . (.Microsoft Corporation - PILOT IPMI WMI.) -- C:\WINDOWS\System32\drivers\IPMIDrv.sys [90936] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:02 A . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\drivers\ipnat.sys [187392] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:34 A . (.Microsoft Corporation - IPT Driver.) -- C:\WINDOWS\System32\drivers\ipt.sys [39944] =>.Microsoft Windows®
O58 - SDL:2019/09/04 22:03:08 A . (.Microsoft Corporation - Pilote de bus PNP ISA.) -- C:\WINDOWS\System32\drivers\isapnp.sys [47928] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:26 A . (.Avago Technologies - Avago SAS Gen3.5 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\ItSas35i.sys [121144] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - Pilote de la classe Clavier.) -- C:\WINDOWS\System32\drivers\kbdclass.sys [51000] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - Pilote de filtre clavier HID.) -- C:\WINDOWS\System32\drivers\kbdhid.sys [33280] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:30 A . (.Microsoft Corporation - Microsoft Kernel Debugger Network Miniport.) -- C:\WINDOWS\System32\drivers\kdnic.sys [26424] =>.Microsoft Windows®
O58 - SDL:2009/04/29 15:37:26 A . (.Windows (R) Codename Longhorn DDK provider - KMWDFilter Driver from UASSOFT.COM.) -- C:\WINDOWS\System32\drivers\KMWDFILTER.sys [25088] =>.MLK Technologies Limited®
O58 - SDL:2020/05/13 16:52:22 A . (.Microsoft Corporation - Network Power Dependency Broker.) -- C:\WINDOWS\System32\drivers\KNetPwrDepBroker.sys [23040] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/09/04 22:06:37 A . (.Microsoft Corporation - Kernel CSA Library.) -- C:\WINDOWS\System32\drivers\ks.sys [314368] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/09/04 22:05:48 A . (.Microsoft Corporation - Kernel Security Support Provider Interface.) -- C:\WINDOWS\System32\drivers\ksecdd.sys [108048] =>.Microsoft Windows®
O58 - SDL:2020/02/13 21:03:08 A . (.Microsoft Corporation - Kernel Security Support Provider Interface.) -- C:\WINDOWS\System32\drivers\ksecpkg.sys [142648] =>.Microsoft®
O58 - SDL:2018/11/29 23:50:04 A . (.Qualcomm Atheros, Inc. - Killer e2200 PCI-E Gigabit Ethernet Control.) -- C:\WINDOWS\System32\drivers\L1C63x86.sys [131400] =>.Rivet Networks LLC®
O58 - SDL:2019/03/19 04:40:32 A . (.Microsoft Corporation - Link-Layer Topology Mapper I/O Driver.) -- C:\WINDOWS\System32\drivers\lltdio.sys [49664] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:26 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas.sys [94008] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:26 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas2i.sys [103224] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:26 A . (.Avago Technologies - Avago SAS Gen3 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas3i.sys [106296] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:26 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sss.sys [69432] =>.Microsoft Windows®
O58 - SDL:2019/09/04 22:06:37 A . (.Microsoft Corporation - Pilote de filtre de virtualisation de fichi.) -- C:\WINDOWS\System32\drivers\luafv.sys [103424] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:27 A . (.Microsoft Corporation - MA-USB Host Controller Driver.) -- C:\WINDOWS\System32\drivers\mausbhost.sys [425784] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:27 A . (.Microsoft Corporation - MA-USB IP Driver.) -- C:\WINDOWS\System32\drivers\mausbip.sys [46392] =>.Microsoft Windows®
O58 - SDL:2019/11/14 15:26:35 A . (.Microsoft Corporation - Windows Mobile Broadband Class Extension.) -- C:\WINDOWS\System32\drivers\MbbCx.sys [274432] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:46 A . (.Microsoft Corporation - Medium changer class driver.) -- C:\WINDOWS\System32\drivers\mcd.sys [17408] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:26 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\megasas.sys [52024] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:26 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\MegaSas2i.sys [64312] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:26 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\megasas35i.sys [79160] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:26 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\WINDOWS\System32\drivers\megasr.sys [464696] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:20 A . (.Microsoft Corporation - Pilote de transport Microsoft Bluetooth Avr.) -- C:\WINDOWS\System32\drivers\Microsoft.Bluetooth.AvrcpTransport.sys [46080] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - Legacy Bluetooth LE Bus Enumerator.) -- C:\WINDOWS\System32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys [73216] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:34 A . (.Microsoft Corporation - MMCSS Driver.) -- C:\WINDOWS\System32\drivers\mmcss.sys [37888] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:41:15 A . (.Microsoft Corporation - Pilote de périphérique modem.) -- C:\WINDOWS\System32\drivers\modem.sys [32256] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/03/12 20:49:08 A . (.Microsoft Corporation - Monitor Driver.) -- C:\WINDOWS\System32\drivers\monitor.sys [53760] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - Pilote de la classe Souris.) -- C:\WINDOWS\System32\drivers\mouclass.sys [48440] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - Pilote de filtre souris HID.) -- C:\WINDOWS\System32\drivers\mouhid.sys [24576] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/11/14 15:27:16 A . (.Microsoft Corporation - Gestionnaire des points de montage.) -- C:\WINDOWS\System32\drivers\mountmgr.sys [86056] =>.Microsoft®
O58 - SDL:2019/03/19 04:40:00 A . (.Microsoft Corporation - Microsoft Protection Service Driver.) -- C:\WINDOWS\System32\drivers\mpsdrv.sys [56832] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/10/09 20:21:30 A . (.Microsoft Corporation - Windows NT WebDav Minirdr.) -- C:\WINDOWS\System32\drivers\mrxdav.sys [122880] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/04/15 20:48:03 A . (.Microsoft Corporation - Minirdr SMB Windows NT.) -- C:\WINDOWS\System32\drivers\mrxsmb.sys [462864] =>.Microsoft®
O58 - SDL:2020/03/12 20:49:36 A . (.Microsoft Corporation - Longhorn SMB 2.0 Redirector.) -- C:\WINDOWS\System32\drivers\mrxsmb20.sys [205840] =>.Microsoft®
O58 - SDL:2019/09/04 22:05:46 A . (.Microsoft Corporation - Mailslot driver.) -- C:\WINDOWS\System32\drivers\msfs.sys [33592] =>.Microsoft®
O58 - SDL:2019/09/04 22:04:23 A . (.Microsoft Corporation - GPIO Class Extension Driver.) -- C:\WINDOWS\System32\drivers\msgpioclx.sys [139576] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:30 A . (.Microsoft Corporation - GPIO Button Driver.) -- C:\WINDOWS\System32\drivers\msgpiowin32.sys [40248] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:03 A . (.Microsoft Corporation - Pass-through HID to KMDF Filter Driver.) -- C:\WINDOWS\System32\drivers\mshidkmdf.sys [6144] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:48 A . (.Microsoft Corporation - Pilote direct pour interface HID-UMDF.) -- C:\WINDOWS\System32\drivers\mshidumdf.sys [9216] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:02 A . (.Microsoft Corporation - Hardware Notification Class Extension Drive.) -- C:\WINDOWS\System32\drivers\mshwnclx.sys [19968] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/09/04 22:03:08 A . (.Microsoft Corporation - ISA Driver.) -- C:\WINDOWS\System32\drivers\msisadrv.sys [16696] =>.Microsoft®
O58 - SDL:2019/11/14 15:26:29 A . (.Microsoft Corporation - Microsoft iSCSI Initiator Driver.) -- C:\WINDOWS\System32\drivers\msiscsi.sys [239928] =>.Microsoft®
O58 - SDL:2019/09/04 22:06:37 A . (.Microsoft Corporation - MS KS Server.) -- C:\WINDOWS\System32\drivers\mskssrv.sys [25600] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:45 A . (.Microsoft Corporation - Pilote de protocole LLDP (Link Layer Discov.) -- C:\WINDOWS\System32\drivers\mslldp.sys [60928] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:35 A . (.Microsoft Corporation - MS Proxy Clock.) -- C:\WINDOWS\System32\drivers\mspclock.sys [8192] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:35 A . (.Microsoft Corporation - MS Proxy Quality Manager.) -- C:\WINDOWS\System32\drivers\mspqm.sys [8192] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/11/14 15:27:17 A . (.Microsoft Corporation - Kernel Remote Procedure Call Provider.) -- C:\WINDOWS\System32\drivers\msrpc.sys [193552] =>.Microsoft®
O58 - SDL:2020/03/12 20:49:14 A . (.Microsoft Corporation - Pilote du filtre de système de fichiers du.) -- C:\WINDOWS\System32\drivers\mssecflt.sys [199992] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:27 A . (.Microsoft Corporation - System Management BIOS Driver.) -- C:\WINDOWS\System32\drivers\mssmbios.sys [35128] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:35 A . (.Microsoft Corporation - WDM Tee/Communication Transform Filter.) -- C:\WINDOWS\System32\drivers\mstee.sys [9216] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:26 A . (.Microsoft Corporation - Pilote HID multipoint Microsoft.) -- C:\WINDOWS\System32\drivers\MTConfig.sys [11776] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/09/04 22:05:51 A . (.Microsoft Corporation - Pilote de fournisseur UNC multiples.) -- C:\WINDOWS\System32\drivers\mup.sys [104976] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:26 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\WINDOWS\System32\drivers\mvumis.sys [58376] =>.Microsoft Windows®
O58 - SDL:2020/03/12 20:49:35 A . (.Microsoft Corporation - NDIS (Network Driver Interface Specificatio.) -- C:\WINDOWS\System32\drivers\ndis.sys [1071120] =>.Microsoft®
O58 - SDL:2019/03/19 04:41:11 A . (.Microsoft Corporation - Microsoft NDIS Packet Capture Filter Driver.) -- C:\WINDOWS\System32\drivers\ndiscap.sys [35328] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/03/12 20:49:46 A . (.Microsoft Corporation - Microsoft Network Adapter Multiplexor.) -- C:\WINDOWS\System32\drivers\NdisImPlatform.sys [109568] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/10/09 20:21:16 A . (.Microsoft Corporation - NDIS 3.0 connection wrapper driver.) -- C:\WINDOWS\System32\drivers\ndistapi.sys [20992] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:17 A . (.Microsoft Corporation - Pilote d’E/S du mode utilisateur NDIS.) -- C:\WINDOWS\System32\drivers\ndisuio.sys [50688] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:45 A . (.Microsoft Corporation - Énumérateur de cartes réseau virtuelles Mic.) -- C:\WINDOWS\System32\drivers\NdisVirtualBus.sys [15872] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/03/12 20:49:46 A . (.Microsoft Corporation - MS PPP Framing Driver (Strong Encryption).) -- C:\WINDOWS\System32\drivers\ndiswan.sys [166912] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/10/09 20:21:16 A . (.Microsoft Corporation - NDIS Proxy.) -- C:\WINDOWS\System32\drivers\ndproxy.sys [207872] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:53 A . (.Microsoft Corporation - Windows Network Data Usage Monitoring Drive.) -- C:\WINDOWS\System32\drivers\Ndu.sys [105984] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:17 A . (.Microsoft Corporation - Network Adapter Class Extension for WDF.) -- C:\WINDOWS\System32\drivers\NetAdapterCx.sys [130560] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:43 A . (.Microsoft Corporation - NetBIOS interface driver.) -- C:\WINDOWS\System32\drivers\netbios.sys [47928] =>.Microsoft Windows®
O58 - SDL:2019/09/04 22:06:54 A . (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS\System32\drivers\netbt.sys [247808] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/11/14 15:27:17 A . (.Microsoft Corporation - Network I/O Subsystem.) -- C:\WINDOWS\System32\drivers\netio.sys [398864] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:30 A . (.Microsoft Corporation - Miniport NDIS virtuel.) -- C:\WINDOWS\System32\drivers\netvsc.sys [166712] =>.Microsoft Windows®
O58 - SDL:2019/09/04 22:05:46 A . (.Microsoft Corporation - NPFS Driver.) -- C:\WINDOWS\System32\drivers\npfs.sys [66872] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:30 A . (.Microsoft Corporation - Named pipe service triggers.) -- C:\WINDOWS\System32\drivers\npsvctrig.sys [19968] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/11/14 15:27:17 A . (.Microsoft Corporation - NSI Proxy.) -- C:\WINDOWS\System32\drivers\nsiproxy.sys [29696] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/03/12 20:49:34 A . (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\WINDOWS\System32\drivers\ntfs.sys [2203664] =>.Microsoft®
O58 - SDL:2019/03/19 04:40:36 A . (.Microsoft Corporation - NTOS extension host driver.) -- C:\WINDOWS\System32\drivers\ntosext.sys [17448] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:17 A . (.Microsoft Corporation - NULL Driver.) -- C:\WINDOWS\System32\drivers\null.sys [5120] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2012/08/27 20:40:42 A . (.Renesas Electronics Corporation - USB 3.0 Hub Driver.) -- C:\WINDOWS\System32\drivers\nusb3hub.sys [86408] =>.Renesas Electronics Corporation®
O58 - SDL:2012/08/27 20:40:44 A . (.Renesas Electronics Corporation - USB 3.0 Host Controller Driver.) -- C:\WINDOWS\System32\drivers\nusb3xhc.sys [178568] =>.Renesas Electronics Corporation®
O58 - SDL:2016/11/14 14:35:19 A . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version.) -- C:\WINDOWS\System32\drivers\nvlddmkm.sys [10711488] =>.NVIDIA Corporation®
O58 - SDL:2019/03/19 04:39:26 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\WINDOWS\System32\drivers\nvraid.sys [119312] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:26 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\WINDOWS\System32\drivers\nvstor.sys [142352] =>.Microsoft Windows®
O58 - SDL:2016/12/09 12:37:28 A . (.NVIDIA Corporation - Stereoscopic 3D USB controller driver.) -- C:\WINDOWS\System32\drivers\nvstusb.sys [444784] =>.NVIDIA Corporation®
O58 - SDL:2016/11/14 14:35:19 A . (.NVIDIA Corporation - NVIDIA Virtual Audio Driver.) -- C:\WINDOWS\System32\drivers\nvvad32v.sys [50744] =>.NVIDIA Corporation®
O58 - SDL:2019/10/09 20:20:42 A . (.Microsoft Corporation - Pilote de miniport WiFi natif.) -- C:\WINDOWS\System32\drivers\nwifi.sys [498688] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:02 A . (.Microsoft Corporation - Planificateur de paquets QoS.) -- C:\WINDOWS\System32\drivers\pacer.sys [133136] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:27 A . (.Microsoft Corporation - Pilote de port parallèle.) -- C:\WINDOWS\System32\drivers\parport.sys [82944] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/04/15 20:48:02 A . (.Microsoft Corporation - Partition driver.) -- C:\WINDOWS\System32\drivers\partmgr.sys [136504] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:27 A . (.Microsoft Corporation - Pilote parallèle VDM.) -- C:\WINDOWS\System32\drivers\parvdm.sys [9216] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/04/15 20:47:17 A . (.Microsoft Corporation - Énumérateur Plug-and-Play PCI pour NT.) -- C:\WINDOWS\System32\drivers\pci.sys [325136] =>.Microsoft®
O58 - SDL:2020/03/12 20:49:08 A . (.Microsoft Corporation - Generic PCI IDE Bus Driver.) -- C:\WINDOWS\System32\drivers\pciide.sys [14648] =>.Microsoft®
O58 - SDL:2020/03/12 20:49:08 A . (.Microsoft Corporation - PCI IDE Bus Driver Extension.) -- C:\WINDOWS\System32\drivers\pciidex.sys [41784] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:21 A . (.Microsoft Corporation - Pilote de bus PCMCIA.) -- C:\WINDOWS\System32\drivers\pcmcia.sys [98320] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:16 A . (.Microsoft Corporation - Performance Counters for Windows Driver.) -- C:\WINDOWS\System32\drivers\pcw.sys [43536] =>.Microsoft Windows®
O58 - SDL:2020/03/12 20:49:16 A . (.Microsoft Corporation - Power Dependency Coordinator Driver.) -- C:\WINDOWS\System32\drivers\pdc.sys [142648] =>.Microsoft®
O58 - SDL:2019/09/04 22:03:39 A . (.Microsoft Corporation - Protected Environment Authentication and Au.) -- C:\WINDOWS\System32\drivers\PEAuth.sys [693248] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:26 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas2i.sys [51512] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:26 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas3i.sys [59192] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:41:11 A . (.Microsoft Corporation - Pilote du moniteur de paquets.) -- C:\WINDOWS\System32\drivers\PktMon.sys [79888] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:24 A . (.Microsoft Corporation - Pilote mémoire Plug and Play.) -- C:\WINDOWS\System32\drivers\pnpmem.sys [13312] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:03 A . (.Microsoft Corporation - Port Device Class Configuration Filter Driv.) -- C:\WINDOWS\System32\drivers\portcfg.sys [18944] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:23 A . (.Microsoft Corporation - Port Class (Class Driver for Port/Miniport.) -- C:\WINDOWS\System32\drivers\portcls.sys [279552] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/03/12 20:49:08 A . (.Microsoft Corporation - Processor Device Driver.) -- C:\WINDOWS\System32\drivers\processr.sys [167224] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:59 A . (.Microsoft Corporation - Process Launch Monitor driver.) -- C:\WINDOWS\System32\drivers\ProcLaunchMon.sys [26888] =>.Microsoft Windows®
O58 - SDL:2017/03/15 06:12:10 A . (.QUALCOMM Incorporated - USB Modem/Serial Device Driver.) -- C:\WINDOWS\System32\drivers\qcusbser.sys [216632] =>.Microsoft Windows Hardware Compatibility Publisher®
O58 - SDL:2019/03/19 04:40:45 A . (.Microsoft Corporation - Pilote du support de Microsoft Quality Wind.) -- C:\WINDOWS\System32\drivers\qwavedrv.sys [32768] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:36 A . (.Microsoft Corporation - RAM Disk Driver.) -- C:\WINDOWS\System32\drivers\ramdisk.sys [33592] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:48 A . (.Microsoft Corporation - RAS Automatic Connection Driver.) -- C:\WINDOWS\System32\drivers\rasacd.sys [12288] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:48 A . (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\rasl2tp.sys [79872] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:48 A . (.Microsoft Corporation - RAS PPPoE mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\raspppoe.sys [67584] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:48 A . (.Microsoft Corporation - Peer-to-Peer Tunneling Protocol.) -- C:\WINDOWS\System32\drivers\raspptp.sys [73728] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:48 A . (.Microsoft Corporation - RAS SSTP Miniport Call Manager.) -- C:\WINDOWS\System32\drivers\rassstp.sys [65536] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/04/15 20:48:03 A . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) -- C:\WINDOWS\System32\drivers\rdbss.sys [361784] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:30 A . (.Microsoft Corporation - Microsoft RDP Bus Device driver.) -- C:\WINDOWS\System32\drivers\rdpbus.sys [21504] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/09/04 22:07:36 A . (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RD.) -- C:\WINDOWS\System32\drivers\rdpdr.sys [131072] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/03/12 20:49:59 A . (.Microsoft Corporation - Microsoft RDP Video Miniport driver.) -- C:\WINDOWS\System32\drivers\rdpvideominiport.sys [23864] =>.Microsoft®
O58 - SDL:2019/03/19 04:41:18 A . (.Microsoft Corporation - ReadyBoost Driver.) -- C:\WINDOWS\System32\drivers\rdyboost.sys [218936] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - Bluetooth RFCOMM Driver.) -- C:\WINDOWS\System32\drivers\rfcomm.sys [160256] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:30 A . (.Microsoft Corporation - Transport d’ordinateur virtuel Microsoft Re.) -- C:\WINDOWS\System32\drivers\RfxVmt.sys [31744] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:24 A . (.Microsoft Corporation - ResourceHub Proxy Driver.) -- C:\WINDOWS\System32\drivers\rhproxy.sys [76800] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2012/12/10 15:48:12 A . (.Research in Motion Ltd - RIM Virtual Serial Driver.) -- C:\WINDOWS\System32\drivers\RimSerial.sys [35840] [Unsigned] =>.Research in Motion Ltd
O58 - SDL:2007/05/14 16:17:16 A . (.Research In Motion Limited - BlackBerry Device Driver.) -- C:\WINDOWS\System32\drivers\RimUsb.sys [22656] [Unsigned] =>.Research In Motion Limited
O58 - SDL:2019/03/19 04:41:02 A . (.Microsoft Corporation - Reliable Multicast Transport.) -- C:\WINDOWS\System32\drivers\rmcast.sys [122368] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:48 A . (.Microsoft Corporation - Remote NDIS Miniport.) -- C:\WINDOWS\System32\drivers\RNDISMP.sys [25600] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:41:15 A . (.Microsoft Corporation - Legacy Non-Pnp Modem Device Driver.) -- C:\WINDOWS\System32\drivers\rootmdm.sys [8704] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:33 A . (.Microsoft Corporation - Link-Layer Topology Responder Driver for ND.) -- C:\WINDOWS\System32\drivers\rspndr.sys [64000] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:34 RA . (.Realtek - Realtek PCIe GBE Family Controller Flight.) -- C:\WINDOWS\System32\drivers\rteth.sys [45568] [Unsigned] =>.Realtek
O58 - SDL:2018/04/25 19:40:52 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\WINDOWS\System32\drivers\RTKVHDA.sys [4762568] =>.Realtek Semiconductor Corp.®
O58 - SDL:2019/03/19 04:39:21 A . (.Realtek Semiconductor Corporation - Realtek WLAN USB NDIS Driver 28199.) -- C:\WINDOWS\System32\drivers\rtwlanu.sys [6854144] [Unsigned] =>.Realtek Semiconductor Corporation
O58 - SDL:2019/03/19 04:39:26 A . (.Microsoft Corporation - SBP-2 Protocol Driver.) -- C:\WINDOWS\System32\drivers\sbp2port.sys [88072] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:53 A . (.Microsoft Corporation - Pilote de filtre de lecteur de carte à puce.) -- C:\WINDOWS\System32\drivers\scfilter.sys [35840] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:46 A . (.Microsoft Corporation - SCSI Port Driver.) -- C:\WINDOWS\System32\drivers\scsiport.sys [144696] =>.Microsoft Windows®
O58 - SDL:2020/04/15 20:47:17 A . (.Microsoft Corporation - Pilote du bus numérique sécurisé (SD).) -- C:\WINDOWS\System32\drivers\sdbus.sys [235320] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:36 A . (.Microsoft Corporation - SD Host Controller Port Driver.) -- C:\WINDOWS\System32\drivers\sdport.sys [78136] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - Pilote de classe de stockage SD.) -- C:\WINDOWS\System32\drivers\sdstor.sys [76088] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:03 A . (.Microsoft Corporation - Serial Class Extension.) -- C:\WINDOWS\System32\drivers\SerCx.sys [65336] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:03 A . (.Microsoft Corporation - Serial Class Extension V2.) -- C:\WINDOWS\System32\drivers\SerCx2.sys [129336] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:27 A . (.Microsoft Corporation - Serial Port Enumerator.) -- C:\WINDOWS\System32\drivers\serenum.sys [17920] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:27 A . (.Microsoft Corporation - Pilote de périphérique série.) -- C:\WINDOWS\System32\drivers\serial.sys [76800] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\WINDOWS\System32\drivers\sermouse.sys [20992] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/04/15 20:47:17 A . (.Microsoft Corporation - SCSI Floppy Driver.) -- C:\WINDOWS\System32\drivers\sfloppy.sys [13312] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:26 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid2.sys [41488] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:26 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid4.sys [79368] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:17 A . (.Microsoft Corporation - Sleep Study Helper.) -- C:\WINDOWS\System32\drivers\SleepStudyHelper.sys [30008] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:53 A . (.Microsoft Corporation - Smart Card Driver Library.) -- C:\WINDOWS\System32\drivers\smclib.sys [17920] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/11/14 15:26:29 A . (.Microsoft Corporation - Storage Spaces Dump Driver.) -- C:\WINDOWS\System32\drivers\spacedump.sys [162320] =>.Microsoft®
O58 - SDL:2019/11/14 15:26:29 A . (.Microsoft Corporation - Storage Spaces Driver.) -- C:\WINDOWS\System32\drivers\spaceport.sys [504848] =>.Microsoft®
O58 - SDL:2019/03/19 04:40:03 A . (.Microsoft Corporation - SPB Class Extension.) -- C:\WINDOWS\System32\drivers\SpbCx.sys [64312] =>.Microsoft Windows®
O58 - SDL:2020/04/15 20:48:03 A . (.Microsoft Corporation - Pilote de serveur SMB 2.0.) -- C:\WINDOWS\System32\drivers\srv2.sys [660480] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/03/12 20:49:36 A . (.Microsoft Corporation - Server Network driver.) -- C:\WINDOWS\System32\drivers\srvnet.sys [224768] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:26 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\WINDOWS\System32\drivers\stexstor.sys [27152] =>.Microsoft Windows®
O58 - SDL:2020/03/12 20:49:08 A . (.Microsoft Corporation - MS AHCI Storport Miniport Driver.) -- C:\WINDOWS\System32\drivers\storahci.sys [144400] =>.Microsoft®
O58 - SDL:2020/03/12 20:49:08 A . (.Microsoft Corporation - Microsoft NVM Express Storport Miniport Dri.) -- C:\WINDOWS\System32\drivers\stornvme.sys [105272] =>.Microsoft®
O58 - SDL:2020/05/13 16:52:23 A . (.Microsoft Corporation - Microsoft Storage Port Driver.) -- C:\WINDOWS\System32\drivers\storport.sys [537920] =>.Microsoft®
O58 - SDL:2019/03/19 04:40:03 A . (.Microsoft Corporation - Filtre de qualité de service de stockage.) -- C:\WINDOWS\System32\drivers\storqosflt.sys [73744] =>.Microsoft Windows®
O58 - SDL:2020/05/13 16:52:14 A . (.Microsoft Corporation - MS UFS Storport Miniport Driver.) -- C:\WINDOWS\System32\drivers\storufs.sys [47416] =>.Microsoft®
O58 - SDL:2019/10/09 20:20:30 A . (.Microsoft Corporation - Storage VSC Driver.) -- C:\WINDOWS\System32\drivers\storvsc.sys [29712] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:46 A . (.Microsoft Corporation - WDM CODEC Class Device Driver 2.0.) -- C:\WINDOWS\System32\drivers\stream.sys [54784] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:30 A . (.Microsoft Corporation - VSC vidéo Synth3D RemoteFX Microsoft.) -- C:\WINDOWS\System32\drivers\Synth3dVsc.sys [50688] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2016/04/21 11:05:12 A . (.The OpenVPN Project - TAP-Windows Virtual Network Driver (NDIS 6..) -- C:\WINDOWS\System32\drivers\tap0901.sys [23040] [Unsigned] =>.The OpenVPN Project
O58 - SDL:2019/03/19 04:39:46 A . (.Microsoft Corporation - SCSI Tape Class Driver.) -- C:\WINDOWS\System32\drivers\tape.sys [23552] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/03/12 20:49:16 A . (.Microsoft Corporation - Export driver for kernel mode TPM API.) -- C:\WINDOWS\System32\drivers\tbs.sys [23864] =>.Microsoft®
O58 - SDL:2020/05/13 16:53:12 A . (.Microsoft Corporation - Pilote TCP/IP.) -- C:\WINDOWS\System32\drivers\tcpip.sys [2235192] =>.Microsoft®
O58 - SDL:2019/03/19 04:40:43 A . (.Microsoft Corporation - TCP/IP Registry Compatibility Driver.) -- C:\WINDOWS\System32\drivers\tcpipreg.sys [41984] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:17 A . (.Microsoft Corporation - TDI Wrapper.) -- C:\WINDOWS\System32\drivers\tdi.sys [32784] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:53 A . (.Microsoft Corporation - TDI Translation Driver.) -- C:\WINDOWS\System32\drivers\tdx.sys [95544] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:30 A . (.Microsoft Corporation - Terminal Server Input Driver.) -- C:\WINDOWS\System32\drivers\terminpt.sys [33832] =>.Microsoft Windows®
O58 - SDL:2019/09/11 17:59:06 A . (.Microsoft Corporation - Kernel Transaction Manager Driver.) -- C:\WINDOWS\System32\drivers\tm.sys [100152] =>.Microsoft®
O58 - SDL:2020/05/13 16:52:14 A . (.Microsoft Corporation - Pilote de périphérique TPM.) -- C:\WINDOWS\System32\drivers\tpm.sys [192328] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:36 A . (.Microsoft Corporation - Pilote de filtre pour concentrateur USB du.) -- C:\WINDOWS\System32\drivers\TsUsbFlt.sys [50688] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/05/13 16:52:14 A . (.Microsoft Corporation - Remote Desktop Generic USB Driver.) -- C:\WINDOWS\System32\drivers\TsUsbGD.sys [27136] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/01/15 19:05:43 A . (.Microsoft Corporation - Concentrateur USB du Bureau à distance.) -- C:\WINDOWS\System32\drivers\tsusbhub.sys [90112] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/11/14 15:27:46 A . (.Microsoft Corporation - Pilote d’interface de tunnel Microsoft.) -- C:\WINDOWS\System32\drivers\tunnel.sys [100864] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/10/09 20:20:30 A . (.Microsoft Corporation - Microsoft Uasp Driver.) -- C:\WINDOWS\System32\drivers\uaspstor.sys [57656] =>.Microsoft®
O58 - SDL:2019/03/19 04:40:03 A . (.Microsoft Corporation - USB Connector Manager KMDF Class Extension.) -- C:\WINDOWS\System32\drivers\UcmCx.sys [112128] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:03 A . (.Microsoft Corporation - UCM-TCPCI KMDF Class Extension.) -- C:\WINDOWS\System32\drivers\UcmTcpciCx.sys [129024] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - UCM-UCSI ACPI Client Driver.) -- C:\WINDOWS\System32\drivers\UcmUcsiAcpiClient.sys [23552] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:03 A . (.Microsoft Corporation - UCM-UCSI KMDF Class Extension.) -- C:\WINDOWS\System32\drivers\UcmUcsiCx.sys [78848] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:36 A . (.Microsoft Corporation - USB Controller Extension.) -- C:\WINDOWS\System32\drivers\Ucx01000.sys [196408] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:36 A . (.Microsoft Corporation - "udecx.DRIVER".) -- C:\WINDOWS\System32\drivers\Udecx.sys [35328] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:41:15 A . (.Microsoft Corporation - UDF File System Driver.) -- C:\WINDOWS\System32\drivers\udfs.sys [262144] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 09:18:50 A . (.Microsoft Corporation - Microsoft User Experience Virtualization Ag.) -- C:\WINDOWS\System32\drivers\UevAgentDriver.sys [35640] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:03 A . (.Microsoft Corporation - USB Function Driver Class Extension.) -- C:\WINDOWS\System32\drivers\ufx01000.sys [239928] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - UFX Synopsys Client Driver.) -- C:\WINDOWS\System32\drivers\ufxsynopsys.sys [140600] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - Generic pass-through driver.) -- C:\WINDOWS\System32\drivers\umpass.sys [9216] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:03 A . (.Microsoft Corporation - USB Role-Switch Class Extension.) -- C:\WINDOWS\System32\drivers\urscx01000.sys [54072] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:48 A . (.Microsoft Corporation - Remote NDIS USB Driver.) -- C:\WINDOWS\System32\drivers\usb8023.sys [15872] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2016/12/21 14:20:26 A . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\WINDOWS\System32\drivers\usbaapl.sys [45056] [Unsigned] =>.Apple, Inc.
O58 - SDL:2019/03/19 04:39:23 A . (.Microsoft Corporation - USB Audio Class Driver.) -- C:\WINDOWS\System32\drivers\USBAUDIO.sys [134144] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/09/04 22:03:02 A . (.Microsoft Corporation - Microsoft USB Audio Class 2.0 Driver.) -- C:\WINDOWS\System32\drivers\usbaudio2.sys [177152] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:36 A . (.Microsoft Corporation - Universal Serial Bus Camera Driver.) -- C:\WINDOWS\System32\drivers\USBCAMD.sys [27136] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:36 A . (.Microsoft Corporation - Universal Serial Bus Camera Driver.) -- C:\WINDOWS\System32\drivers\USBCAMD2.sys [27136] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/03/12 20:49:09 A . (.Microsoft Corporation - USB Common Class Generic Parent Driver.) -- C:\WINDOWS\System32\drivers\usbccgp.sys [133432] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:23 A . (.Microsoft Corporation - USB Consumer IR Driver for eHome.) -- C:\WINDOWS\System32\drivers\usbcir.sys [89088] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - Universal Serial Bus Driver.) -- C:\WINDOWS\System32\drivers\usbd.sys [25400] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - EHCI eUSB Miniport Driver.) -- C:\WINDOWS\System32\drivers\usbehci.sys [73016] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - Pilote de concentrateur USB par défaut.) -- C:\WINDOWS\System32\drivers\usbhub.sys [384824] =>.Microsoft Windows®
O58 - SDL:2020/05/13 16:52:14 A . (.Microsoft Corporation - Pilote de concentrateur USB3.) -- C:\WINDOWS\System32\drivers\USBHUB3.SYS [496440] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - OHCI USB Miniport Driver.) -- C:\WINDOWS\System32\drivers\usbohci.sys [21504] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/10/09 20:20:53 A . (...) -- C:\WINDOWS\System32\drivers\UsbPmApi.sys [33792] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - Pilote de port USB 1.1 & 2.0.) -- C:\WINDOWS\System32\drivers\usbport.sys [381240] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:24 A . (.Microsoft Corporation - USB Printer driver.) -- C:\WINDOWS\System32\drivers\usbprint.sys [23040] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/01/15 19:05:43 A . (.Microsoft Corporation - USB Scanner Driver.) -- C:\WINDOWS\System32\drivers\usbscan.sys [38912] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:27 A . (.Microsoft Corporation - USB Serial Driver.) -- C:\WINDOWS\System32\drivers\usbser.sys [58880] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - Pilote de classe de stockage de masse USB.) -- C:\WINDOWS\System32\drivers\USBSTOR.SYS [105784] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - UHCI USB Miniport Driver.) -- C:\WINDOWS\System32\drivers\usbuhci.sys [24576] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/03/12 20:49:09 A . (.Microsoft Corporation - Pilote XHCI USB.) -- C:\WINDOWS\System32\drivers\USBXHCI.SYS [425272] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:27 A . (.Microsoft Corporation - Virtual Drive Root Enumerator.) -- C:\WINDOWS\System32\drivers\vdrvroot.sys [55608] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:17 A . (.Microsoft Corporation - Extension du vérificateur de pilotes.) -- C:\WINDOWS\System32\drivers\VerifierExt.sys [235024] =>.Microsoft Windows®
O58 - SDL:2020/02/13 21:02:38 A . (.Microsoft Corporation - VHD Miniport Driver.) -- C:\WINDOWS\System32\drivers\vhdmp.sys [564536] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:26 A . (.Microsoft Corporation - Virtual HID Framework (VHF) Driver.) -- C:\WINDOWS\System32\drivers\vhf.sys [28672] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/03/12 20:49:08 A . (.Microsoft Corporation - Processor Device Driver.) -- C:\WINDOWS\System32\drivers\viac7.sys [145920] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2012/06/27 10:37:56 A . (.Via Telecom, Inc. - viausbets driver.) -- C:\WINDOWS\System32\drivers\VIA_USB_ETS_SS.sys [18560] [Unsigned] =>.Via Telecom, Inc.
O58 - SDL:2019/03/19 04:40:19 A . (.Microsoft Corporation - Video Port Driver.) -- C:\WINDOWS\System32\drivers\videoprt.sys [35840] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/10/09 20:21:30 A . (.Microsoft Corporation - Hyper-V VMBus KMCL.) -- C:\WINDOWS\System32\drivers\vmbkmcl.sys [71992] =>.Microsoft®
O58 - SDL:2020/03/12 20:49:09 A . (.Microsoft Corporation - Pilote enfant de bus VMBus sous Microsoft H.) -- C:\WINDOWS\System32\drivers\vmbus.sys [109072] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:30 A . (.Microsoft Corporation - Microsoft VMBus HID Miniport.) -- C:\WINDOWS\System32\drivers\VMBusHID.sys [28472] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:30 A . (.Microsoft Corporation - Virtual Machine Generation Counter.) -- C:\WINDOWS\System32\drivers\vmgencounter.sys [18744] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:30 A . (.Microsoft Corporation - Virtual Machine Guest Infrastructure Driver.) -- C:\WINDOWS\System32\drivers\vmgid.sys [17208] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:30 A . (.Microsoft Corporation - Microsoft S3 Emulated Device Cap Driver.) -- C:\WINDOWS\System32\drivers\vms3cap.sys [15160] =>.Microsoft Windows®
O58 - SDL:2019/10/09 20:20:30 A . (.Microsoft Corporation - Pilote de filtre de stockage virtuel.) -- C:\WINDOWS\System32\drivers\vmstorfl.sys [42808] =>.Microsoft®
O58 - SDL:2020/04/15 20:47:17 A . (.Microsoft Corporation - Pilote du gestionnaire de volumes.) -- C:\WINDOWS\System32\drivers\volmgr.sys [66872] =>.Microsoft®
O58 - SDL:2019/03/19 04:40:56 A . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volum.) -- C:\WINDOWS\System32\drivers\volmgrx.sys [308752] =>.Microsoft Windows®
O58 - SDL:2020/03/12 20:49:36 A . (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\WINDOWS\System32\drivers\volsnap.sys [356368] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:26 A . (.Microsoft Corporation - Volume driver.) -- C:\WINDOWS\System32\drivers\volume.sys [14136] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:26 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR X86-32.) -- C:\WINDOWS\System32\drivers\vsmraid.sys [150056] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:26 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\WINDOWS\System32\drivers\VSTXRAID.SYS [277008] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:42 A . (.Microsoft Corporation - Virtual Wireless Bus Driver.) -- C:\WINDOWS\System32\drivers\vwifibus.sys [20992] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:42 A . (.Microsoft Corporation - Virtual WiFi Filter Driver.) -- C:\WINDOWS\System32\drivers\vwififlt.sys [61952] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:42 A . (.Microsoft Corporation - Virtual WiFi Miniport Driver.) -- C:\WINDOWS\System32\drivers\vwifimp.sys [34816] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:26 A . (.Microsoft Corporation - Pilote de tablette Wacom à stylet série.) -- C:\WINDOWS\System32\drivers\wacompen.sys [21504] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/10/09 20:21:16 A . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) -- C:\WINDOWS\System32\drivers\wanarp.sys [65024] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:52 A . (.Microsoft Corporation - Watchdog Driver.) -- C:\WINDOWS\System32\drivers\watchdog.sys [47104] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/03/12 20:49:27 A . (.Microsoft Corporation - Windows Container Isolation FS Filter Drive.) -- C:\WINDOWS\System32\drivers\wcifs.sys [152080] =>.Microsoft®
O58 - SDL:2019/03/19 04:40:02 A . (.Microsoft Corporation - Windows Container Name Virtualization FS Fi.) -- C:\WINDOWS\System32\drivers\wcnfs.sys [70656] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:43 A . (.Microsoft Corporation - Microsoft antimalware boot driver.) -- C:\WINDOWS\System32\drivers\WdBoot.sys [38280] =>.Microsoft®
O58 - SDL:2020/05/13 16:53:12 A . (.Microsoft Corporation - Runtime de l’infrastructure de pilotes en m.) -- C:\WINDOWS\System32\drivers\Wdf01000.sys [606520] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:43 A . (.Microsoft Corporation - Microsoft antimalware file system filter dr.) -- C:\WINDOWS\System32\drivers\WdFilter.sys [268768] =>.Microsoft®
O58 - SDL:2020/05/13 16:53:12 A . (.Microsoft Corporation - Kernel Mode Driver Framework Loader.) -- C:\WINDOWS\System32\drivers\WdfLdr.sys [47632] =>.Microsoft®
O58 - SDL:2019/10/09 20:20:42 A . (.Microsoft Corporation - WDI Driver Framework Driver.) -- C:\WINDOWS\System32\drivers\WdiWiFi.sys [654848] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:07 A . (.Microsoft Corporation - WDM Companion Filter.) -- C:\WINDOWS\System32\drivers\WdmCompanionFilter.sys [17720] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:43 A . (.Microsoft Corporation - Windows Defender Network Stream Filter.) -- C:\WINDOWS\System32\drivers\WdNisDrv.sys [47584] =>.Microsoft®
O58 - SDL:2019/03/19 04:40:17 A . (.Microsoft Corporation - Windows Error Reporting Kernel Driver.) -- C:\WINDOWS\System32\drivers\werkernel.sys [41272] =>.Microsoft Windows®
O58 - SDL:2019/09/04 22:04:55 A . (.Microsoft Corporation - WFP NDIS 6.30 Lightweight Filter Driver.) -- C:\WINDOWS\System32\drivers\wfplwfs.sys [91664] =>.Microsoft Windows®
O58 - SDL:2020/02/13 21:03:07 A . (.Microsoft Corporation - Wim file system Driver.) -- C:\WINDOWS\System32\drivers\wimmount.sys [31032] =>.Microsoft®
O58 - SDL:2019/03/19 04:40:03 A . (.Microsoft Corporation - Windows Trusted Runtime Interface Driver.) -- C:\WINDOWS\System32\drivers\WindowsTrustedRT.sys [55784] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:30 A . (.Microsoft Corporation - Windows Trusted Runtime Service Proxy Drive.) -- C:\WINDOWS\System32\drivers\WindowsTrustedRTProxy.sys [15336] =>.Microsoft®
O58 - SDL:2019/03/19 04:41:16 A . (.Microsoft Corporation - Windows Hypervisor Interface Driver.) -- C:\WINDOWS\System32\drivers\winhv.sys [26936] =>.Microsoft Windows®
O58 - SDL:2020/05/13 16:52:23 A . (.Microsoft Corporation - Pilote NAT Windows.) -- C:\WINDOWS\System32\drivers\winnat.sys [196608] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/09/04 22:05:37 A . (.Microsoft Corporation - Windows QUIC Driver.) -- C:\WINDOWS\System32\drivers\winquic.sys [164664] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - Windows WinUSB Class Driver.) -- C:\WINDOWS\System32\drivers\winusb.sys [78848] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:27 A . (.Microsoft Corporation - Windows Management Interface for ACPI.) -- C:\WINDOWS\System32\drivers\wmiacpi.sys [12288] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:17 A . (.Microsoft Corporation - WMILIB WMI support library Dll.) -- C:\WINDOWS\System32\drivers\wmilib.sys [17424] =>.Microsoft Windows®
O58 - SDL:2019/10/09 20:20:59 A . (.Microsoft Corporation - Filtre de superposition Windows.) -- C:\WINDOWS\System32\drivers\wof.sys [177976] =>.Microsoft®
O58 - SDL:2019/03/19 09:18:51 A . (.Microsoft Corporation - Windows Portable Device Upper Class Filter.) -- C:\WINDOWS\System32\drivers\WpdUpFltr.sys [24376] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:17 A . (.Microsoft Corporation - WPP Trace Recorder.) -- C:\WINDOWS\System32\drivers\WppRecorder.sys [32776] =>.Microsoft Windows®
O58 - SDL:2019/09/11 17:59:06 A . (.Microsoft Corporation - Couche IFS Winsock2.) -- C:\WINDOWS\System32\drivers\ws2ifsl.sys [16896] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:24 A . (.Microsoft Corporation - Web Services Print Device Driver.) -- C:\WINDOWS\System32\drivers\WSDPrint.sys [16384] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/01/15 19:05:43 A . (.Microsoft Corporation - Web Service Based Scan Device Driver.) -- C:\WINDOWS\System32\drivers\WSDScan.sys [17920] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:36 A . (.Microsoft Corporation - Windows Driver Foundation - User-mode Drive.) -- C:\WINDOWS\System32\drivers\WUDFPf.sys [87552] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:36 A . (.Microsoft Corporation - Windows Driver Foundation - User-mode Drive.) -- C:\WINDOWS\System32\drivers\WUDFRd.sys [207360] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/09/04 22:03:02 A . (.Microsoft Corporation - Game Input Protocol Driver.) -- C:\WINDOWS\System32\drivers\xboxgip.sys [254976] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:20 A . (.Microsoft Corporation - XINPUT filter driver for HID.) -- C:\WINDOWS\System32\drivers\xinputhid.sys [36864] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:45 A . (.Microsoft Corporation - Windows Win16 Application Launcher.) -- C:\WINDOWS\System32\ANSI.SYS [8960] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:45 A . (.Microsoft Corporation - Windows Win16 Application Launcher.) -- C:\WINDOWS\System32\country.sys [8960] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:45 A . (.Microsoft Corporation - Windows Win16 Application Launcher.) -- C:\WINDOWS\System32\HIMEM.SYS [8960] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:45 A . (.Microsoft Corporation - Windows Win16 Application Launcher.) -- C:\WINDOWS\System32\KEY01.SYS [8960] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:45 A . (.Microsoft Corporation - Windows Win16 Application Launcher.) -- C:\WINDOWS\System32\KEYBOARD.SYS [8960] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:46 A . (.Microsoft Corporation - Windows Win16 Application Launcher.) -- C:\WINDOWS\System32\NTDOS.SYS [8960] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:46 A . (.Microsoft Corporation - Windows Win16 Application Launcher.) -- C:\WINDOWS\System32\NTDOS404.SYS [8960] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:46 A . (.Microsoft Corporation - Windows Win16 Application Launcher.) -- C:\WINDOWS\System32\NTDOS411.SYS [8960] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:46 A . (.Microsoft Corporation - Windows Win16 Application Launcher.) -- C:\WINDOWS\System32\NTDOS412.SYS [8960] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:46 A . (.Microsoft Corporation - Windows Win16 Application Launcher.) -- C:\WINDOWS\System32\NTDOS804.SYS [8960] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:46 A . (.Microsoft Corporation - Windows Win16 Application Launcher.) -- C:\WINDOWS\System32\NTIO.SYS [8960] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:46 A . (.Microsoft Corporation - Windows Win16 Application Launcher.) -- C:\WINDOWS\System32\NTIO404.SYS [8960] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:46 A . (.Microsoft Corporation - Windows Win16 Application Launcher.) -- C:\WINDOWS\System32\NTIO411.SYS [8960] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:46 A . (.Microsoft Corporation - Windows Win16 Application Launcher.) -- C:\WINDOWS\System32\NTIO412.SYS [8960] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:46 A . (.Microsoft Corporation - Windows Win16 Application Launcher.) -- C:\WINDOWS\System32\NTIO804.SYS [8960] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/05/13 16:52:59 A . (.Microsoft Corporation - Full/Desktop Multi-User Win32 Driver.) -- C:\WINDOWS\System32\win32k.sys [324096] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/05/13 16:52:35 A . (.Microsoft Corporation - Pilote du noyau Base Win32k.) -- C:\WINDOWS\System32\win32kbase.sys [2058752] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/05/13 16:52:59 A . (.Microsoft Corporation - Full/Desktop Win32k Kernel Driver.) -- C:\WINDOWS\System32\win32kfull.sys [2798592] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:02 A . (.Microsoft Corporation - Win32k non session driver.) -- C:\WINDOWS\System32\win32kns.sys [20480] [Unsigned] =>.Microsoft Corporation

---\\ DERNIERS FICHIERS MODIFIÉS OU CRÉÉS (Utilisateur) (1) - 15s
O61 - LFC: 2020/05/02 18:31:17 A . (.BitTorrent Inc..) -- C:\Users\kasper.kasper-PC\AppData\Roaming\uTorrent Web\helper\helper.exe [4531432] =>BitTorrent (P2P)

---\\ ASSOCIATION Shell Spawning (10) - 0s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe [Unsigned] =>.Microsoft Corporation
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe [Unsigned] =>.Microsoft Corporation
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft®
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (...) -- C:\Windows\System32\WScript.exe "%1" %* =>.Default.Value
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe [Unsigned] =>.Microsoft Corporation
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S =>.Default.Value

---\\ MENU DE DÉMARRAGE INTERNET (8) - 0s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google LLC - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google LLC®
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft®
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google LLC - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google LLC
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - IE Per-User Show IE Icon Utility.) -- C:\Windows\System32\ie4ushowIE.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google LLC - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google LLC
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google LLC - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google LLC
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - IE Per-User Show IE Icon Utility.) -- C:\Windows\System32\ie4ushowIE.exe =>.Microsoft Corporation

---\\ RECHERCHE D'INFECTION SUR NAVIGATEURS (3) - 0s
O69 - SBI: SearchScopes [HKCU]{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com/ =>.Bing.com
O69 - SBI: SearchScopes [HKCU]{2f23ab71-4ac6-41f2-a955-ea576e553146} [DefaultScope] - (Search Powered by Yahoo!) - http://fr.search.yahoo.com/ =>.Yahoo! Inc.
O69 - SBI: SearchScopes [HKLM]{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (@ieframe.dll,-12512) - http://www.bing.com/ =>.Bing.com

---\\ ÉNUMÈRE LES FICHIERS Crack et Keygen (1) - 273s
O82 - LFC: 2016/05/07 11:24:55 A . (...) -- C:\Users\kasper.kasper-PC\Desktop\informatique\Systéme d'exploiyation\Production Clé Windows\Windows.Loader.v2.2.2\Windows Loader.exe [4021049] =>.Crack,Keygen

---\\ ÉNUMÈRE LES SERVICES DÉMARRÉS PAR Svchost (50) - 3s
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [183296] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [183296] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [210944] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [1120256] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\IKEEXT.DLL [738304] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [706048] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\System32\seclogon.dll [24064] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [114176] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [90624] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [657408] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [189952] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [348160] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [417280] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [90624] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: XblGameSave (XblGameSave) . (.Microsoft Corporation - Xbox Live Game Save Service.) -- C:\Windows\System32\XblGameSave.dll [788992] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: DmEnrollmentSvc (DmEnrollmentSvc) . (.Microsoft Corporation - DLL Windows Management Service.) -- C:\Windows\System32\Windows.Internal.Management.dll [649728] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: InstallService (InstallService) . (.Microsoft Corporation - InstallService.) -- C:\Windows\System32\InstallService.dll [1737216] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: shpamsvc (shpamsvc) . (.Microsoft Corporation - SharedPC.AccountManager.) -- C:\Windows\System32\Windows.SharedPC.AccountManager.dll [169984] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: LxpSvc (LxpSvc) . (.Microsoft Corporation - Fournit une prise en charge de l'infrastruc.) -- C:\Windows\System32\LanguageOverlayServer.dll [223744] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: TroubleshootingSvc (TroubleshootingSvc) . (.Microsoft Corporation - MitigationClient.) -- C:\Windows\System32\MitigationClient.dll [306688] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: PushToInstall (PushToInstall) . (.Microsoft Corporation - PushToInstall.) -- C:\Windows\System32\PushToInstall.dll [193536] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: XboxGipSvc (XboxGipSvc) . (.Microsoft Corporation - Xbox Gip Management Service.) -- C:\Windows\System32\XboxGipSvc.dll [55296] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [142848] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: NetSetupSvc (NetSetupSvc) . (.Microsoft Corporation - Service Configuration du réseau.) -- C:\Windows\System32\NetSetupSvc.dll [230912] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Gestionnaire d’installation de périphérique.) -- C:\Windows\System32\DeviceSetupManager.dll [207360] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: WManSvc (WManSvc) . (.Microsoft Corporation - DLL du Service de gestion de Windows.) -- C:\Windows\System32\Windows.Management.Service.dll [646656] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Service Assistant Connectivité réseau Micro.) -- C:\Windows\System32\NcaSvc.dll [140288] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: XblAuthManager (XblAuthManager) . (.Microsoft Corporation - Xbox Live Auth Manager.) -- C:\Windows\System32\XblAuthManager.dll [673280] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: NaturalAuthentication (NaturalAuthentication) . (.Microsoft Corporation - Service d’authentification naturelle.) -- C:\Windows\System32\NaturalAuth.dll [307712] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: WpnService (WpnService) . (.Microsoft Corporation - Service du système de notifications Push Wi.) -- C:\Windows\System32\WpnService.dll [233472] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [90112] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire des connexions d’accès à dista.) -- C:\Windows\System32\rasmans.dll [798720] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [403456] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [57344] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [531456] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [252928] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\System32\wuaueng.dll [2377216] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [1004544] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [197120] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Service de géolocalisation.) -- C:\Windows\System32\lfsvc.dll [38912] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Service de compte Microsoft®.) -- C:\Windows\System32\wlidsvc.dll [1661952] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: UsoSvc (UsoSvc) . (.Microsoft Corporation - Mettre à jour la session du service Orchest.) -- C:\Windows\System32\usosvc.dll [419840] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: UserManager (UserManager) . (.Microsoft Corporation - UserMgr.) -- C:\Windows\System32\usermgr.dll [1069056] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: XboxNetApiSvc (XboxNetApiSvc) . (.Microsoft Corporation - Xbox Live Networking Service.) -- C:\Windows\System32\XboxNetApiSvc.dll [1004032] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: TokenBroker (TokenBroker) . (.Microsoft Corporation - Broker à jetons.) -- C:\Windows\System32\TokenBroker.dll [1245696] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [53248] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: wisvc (wisvc) . (.Microsoft Corporation - Paramètres de vol.) -- C:\Windows\System32\flightsettings.dll [729600] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: dmwappushservice (dmwappushservice) . (.Microsoft Corporation - dmwappushsvc.) -- C:\Windows\System32\dmwappushsvc.dll [48128] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\Windows\System32\appmgmts.dll [160768] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [443392] [Unsigned] =>.Microsoft Corporation

---\\ LISTE DES EXCEPTIONS PAREFEU WINDOWS (11) - 3s
O87 - FAEL: "TCP Query User{B43779DB-E45E-4491-8D60-9D88E10097ED}C:\program files\google\chrome\application\chrome.exe" [In-None-P6-TRUE] .(.Google LLC - Google Chrome.) -- C:\program files\google\chrome\application\chrome.exe =>.Google LLC®
O87 - FAEL: "UDP Query User{2607B5C7-9843-4323-873E-BADF5A20876E}C:\program files\google\chrome\application\chrome.exe" [In-None-P17-TRUE] .(.Google LLC - Google Chrome.) -- C:\program files\google\chrome\application\chrome.exe =>.Google LLC®
O87 - FAEL: "TCP Query User{21A22B15-4203-4ED5-8D4F-344FDA548169}C:\users\kasper.kasper-pc\appdata\roaming\utorrent web\utweb.exe" [In-None-P6-TRUE] .(.BitTorrent Inc. - µTorrent Web.) -- C:\users\kasper.kasper-pc\appdata\roaming\utorrent web\utweb.exe [Unsigned] =>BitTorrent (P2P)
O87 - FAEL: "UDP Query User{5A1B761B-9D18-45B9-8F14-086252963D63}C:\users\kasper.kasper-pc\appdata\roaming\utorrent web\utweb.exe" [In-None-P17-TRUE] .(.BitTorrent Inc. - µTorrent Web.) -- C:\users\kasper.kasper-pc\appdata\roaming\utorrent web\utweb.exe [Unsigned] =>BitTorrent (P2P)
O87 - FAEL: "{E5E99050-7097-444E-996C-DFECAFD65565}" [In-None-P17-TRUE] .(.BitTorrent Inc. - µTorrent Web.) -- C:\users\kasper.kasper-pc\appdata\roaming\utorrent web\utweb.exe [Unsigned] =>BitTorrent (P2P)
O87 - FAEL: "{A0C23165-C23D-4C13-8BF3-E31D06A58538}" [In-None-P6-TRUE] .(.BitTorrent Inc. - µTorrent Web.) -- C:\users\kasper.kasper-pc\appdata\roaming\utorrent web\utweb.exe [Unsigned] =>BitTorrent (P2P)
O87 - FAEL: "TCP Query User{7C83F48F-F2E9-4EA3-836C-DAFF91A5D129}K:\disque atelier\kms tools portable 25.04.2016 par ratiborus\programs\office 2013-2016 c2r install v5.2\files\bin\kmss.exe" [In-None-P6-TRUE] .(...) -- K:\disque atelier\kms tools portable 25.04.2016 par ratiborus\programs\office 2013-2016 c2r install v5.2\files\bin\kmss.exe [Unsigned] (.not file.) =>HackTool.KMSpico
O87 - FAEL: "UDP Query User{AAB1C483-C8BD-4BB8-A368-1A9B4D5E2842}K:\disque atelier\kms tools portable 25.04.2016 par ratiborus\programs\office 2013-2016 c2r install v5.2\files\bin\kmss.exe" [In-None-P17-TRUE] .(...) -- K:\disque atelier\kms tools portable 25.04.2016 par ratiborus\programs\office 2013-2016 c2r install v5.2\files\bin\kmss.exe [Unsigned] (.not file.) =>HackTool.KMSpico
O87 - FAEL: "TCP Query User{6290BEC4-FD07-47D6-B9B8-297218EDB626}C:\windows\files\bin\kmss.exe" [In-None-P6-TRUE] .(...) -- C:\windows\files\bin\kmss.exe [Unsigned] (.not file.) =>.SUP.Orphan
O87 - FAEL: "UDP Query User{06294C75-AAFE-4FE2-AAF8-B945B9C754B9}C:\windows\files\bin\kmss.exe" [In-None-P17-TRUE] .(...) -- C:\windows\files\bin\kmss.exe [Unsigned] (.not file.) =>.SUP.Orphan
O87 - FAEL: "{882ADDCD-EDA9-49F1-94DC-3A0DB6495D3E}" [In-None-P17-TRUE] .(.Google LLC - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google LLC®

---\\ CODES PRODUITS LOGICIELS (36) - 1s
O90 - PUC: "000061090900C0400000000000F01FEC" [HKLM] . (.Microsoft DCF MUI (French) 2016.) =>.Microsoft Corporation
O90 - PUC: "00006109110000000000000000F01FEC" [HKLM] . (.Microsoft Office Professional Plus 2016.) =>.Microsoft Corporation
O90 - PUC: "000061091A00C0400000000000F01FEC" [HKLM] . (.Microsoft OneNote MUI (French) 2016.) =>.Microsoft Corporation
O90 - PUC: "000061091E00C0400000000000F01FEC" [HKLM] . (.Microsoft Office OSM MUI (French) 2016.) =>.Microsoft Corporation
O90 - PUC: "000061092E00C0400000000000F01FEC" [HKLM] . (.Microsoft Office OSM UX MUI (French) 2016.) =>.Microsoft Corporation
O90 - PUC: "000061094400C0400000000000F01FEC" [HKLM] . (.Microsoft InfoPath MUI (French) 2016.) =>.Microsoft Corporation
O90 - PUC: "000061095100C0400000000000F01FEC" [HKLM] . (.Microsoft Access MUI (French) 2016.) =>.Microsoft Corporation
O90 - PUC: "000061096100C0400000000000F01FEC" [HKLM] . (.Microsoft Excel MUI (French) 2016.) =>.Microsoft Corporation
O90 - PUC: "000061098100C0400000000000F01FEC" [HKLM] . (.Microsoft PowerPoint MUI (French) 2016.) =>.Microsoft Corporation
O90 - PUC: "000061099100C0400000000000F01FEC" [HKLM] . (.Microsoft Publisher MUI (French) 2016.) =>.bl.org
O90 - PUC: "00006109A100C0400000000000F01FEC" [HKLM] . (.Microsoft Outlook MUI (French) 2016.) =>.Microsoft Corporation
O90 - PUC: "00006109AB00C0400000000000F01FEC" [HKLM] . (.Microsoft Groove MUI (French) 2016.) =>.Microsoft Corporation
O90 - PUC: "00006109B100C0400000000000F01FEC" [HKLM] . (.Microsoft Word MUI (French) 2016.) =>.Microsoft Corporation
O90 - PUC: "00006109B210C0400000000000F01FEC" [HKLM] . (.Microsoft Skype for Business MUI (French) 2016.) =>.Skype Technologies
O90 - PUC: "00006109C200C0400000000000F01FEC" [HKLM] . (.Microsoft Office Proofing (French) 2016.) =>.Microsoft Corporation
O90 - PUC: "00006109E600C0400000000000F01FEC" [HKLM] . (.Microsoft Office Shared MUI (French) 2016.) =>.Microsoft Corporation
O90 - PUC: "00006109F10010400000000000F01FEC" [HKLM] . (.Microsoft Office Proofing Tools 2016 - اللغة العربية.) -- C:\WINDOWS\Installer\{90160000-001F-0401-0000-0000000FF1CE}\misc.exe,6 =>.Microsoft Corporation
O90 - PUC: "00006109F10031400000000000F01FEC" [HKLM] . (.Taalprogramma's voor Microsoft Office 2016 - Nederlands.) -- C:\WINDOWS\Installer\{90160000-001F-0413-0000-0000000FF1CE}\misc.exe,6 =>.Microsoft Corporation
O90 - PUC: "00006109F10070400000000000F01FEC" [HKLM] . (.Microsoft Office Korrekturhilfen 2016 – Deutsch.) -- C:\WINDOWS\Installer\{90160000-001F-0407-0000-0000000FF1CE}\misc.exe,6 =>.Microsoft Corporation
O90 - PUC: "00006109F10090400000000000F01FEC" [HKLM] . (.Microsoft Office Proofing Tools 2016 - English.) -- C:\WINDOWS\Installer\{90160000-001F-0409-0000-0000000FF1CE}\misc.exe,6 =>.Microsoft Corporation
O90 - PUC: "00006109F100A0C00000000000F01FEC" [HKLM] . (.Herramientas de corrección de Microsoft Office 2016: español.) -- C:\WINDOWS\Installer\{90160000-001F-0C0A-0000-0000000FF1CE}\misc.exe,6 =>.Microsoft Corporation
O90 - PUC: "00006109F100C0400000000000F01FEC" [HKLM] . (.Outils de vérification linguistique 2016 de Microsoft Office - Français.) -- C:\WINDOWS\Installer\{90160000-001F-040C-0000-0000000FF1CE}\misc.exe,6 =>.Microsoft Corporation
O90 - PUC: "166F59DC4C5A5F446AAACEDD192C14C1" [HKLM] . (.WinZip 23.0.) -- C:\WINDOWS\Installer\{CD95F661-A5C4-44F5-A6AA-ECDD91C2411C}\ARPPRODUCTICON.exe
O90 - PUC: "1D5E3C0FEDA1E123187686FED06E995A" [HKLM] . (.Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219.) =>.bl.org
O90 - PUC: "21EE4A31AE32173319EEFE3BD6FDFFE3" [HKLM] . (.Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005.) =>.Microsoft Corporation
O90 - PUC: "22BEFC8F7E2A1793E9ADB411DEFE1C58" [HKLM] . (.Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005.) =>.Microsoft Corporation
O90 - PUC: "33FB10F5378E38B42BCC4EED4F4970E3" [HKLM] . (.Update for Windows 10 (KB4023057).) =>.Microsoft Corporation
O90 - PUC: "5D213EF3268BEC04E8E46A8DBA6F7263" [HKLM] . (.Microsoft ASP.NET MVC 4 Runtime.) =>.Microsoft Corporation
O90 - PUC: "68AB67CA408033019195008142634963" [HKLM] . (.Adobe Refresh Manager.) -- C:\WINDOWS\Installer\{AC76BA86-0804-1033-1959-001824369436}\ARPPRODUCTICON.exe =>.Western Digital Technologies
O90 - PUC: "68AB67CA7DA76301B744CAF070E41400" [HKLM] . (.Adobe Acrobat Reader DC - Français.) -- C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-AC0F074E4100}\SC_Reader.ico =>.Adobe Inc.
O90 - PUC: "7AB7040836775934BA8925331F3BE456" [HKLM] . (.NVIDIA PhysX.) -- C:\WINDOWS\Installer\{80407BA7-7763-4395-AB98-5233F1B34E65}\icon.ico =>.nVidia Corporation
O90 - PUC: "7D8CB6DD28547764ABCAA49B336E3C51" [HKLM] . (.Microsoft Visual C++ 2017 X86 Additional Runtime - 14.16.27012.) =>.Microsoft Corporation
O90 - PUC: "8BAD244577171E94B822900A94AE9569" [HKLM] . (.Renesas Electronics USB 3.0 Host Controller Driver.) -- C:\WINDOWS\Installer\{5442DAB8-7177-49E1-8B22-09A049EA5996}\ARPPRODUCTICON.exe =>.Renesas
O90 - PUC: "93BAD29AC2E44034A96BCB446EB8552E" [HKLM] . (.Google Update Helper.) =>.Google Inc.
O90 - PUC: "A089CE062ADB6BC44A720BA745894BAC" [HKLM] . (.Google Update Helper.) =>.Google Inc.
O90 - PUC: "F7ED77B79125E534C91ECF771F4DCCDA" [HKLM] . (.Microsoft Visual C++ 2017 X86 Minimum Runtime - 14.16.27012.) =>.Microsoft Corporation

---\\ PACKAGES WINDOWS INSTALLER (25) - 39s
[MD5.1766B021B0BAB4F82259974154C5A920] [WIS][2020/03/21 09:58:02] (.Google LLC - Google Update Helper.) -- C:\WINDOWS\Installer\26a88e0.msi [40960] =>.Google LLC
[MD5.3E5AB2CDAA273101A5B7FA162FA88494] [WIS][2016/11/14 14:35:19] (.NVIDIA Corporation - Install/UnInstall PhysX Driver + Engines: 2.) -- C:\WINDOWS\Installer\29959.msi [41177600] =>.NVIDIA Corporation
[MD5.90CCA547E47C3C91BF8FE3D010FB0853] [WIS][2020/02/16 14:03:09] (.Google Inc. - Google Update Helper.) -- C:\WINDOWS\Installer\2c04b56.msi [40960] =>.Google Inc.
[MD5.FC1379260842FA7567AB64E3D3AFF922] [WIS][2012/09/24 19:34:12] (.Renesas Electronics Corporation - USB 3.0 Host Controller Driver.) -- C:\WINDOWS\Installer\629e78.msi [918016] =>.Renesas Electronics Corporation
[MD5.1504667BA3C10D841C0B76B6412FAFB5] [WIS][2015/03/17 10:41:29] (.Adobe Systems Incorporated.) -- C:\WINDOWS\Installer\64c38a.msi [2805760] =>.Adobe Systems Incorporated
[MD5.7C65642A31443AEB00233951FB3350EF] [WIS][2019/05/12 15:00:08] (.Corel Corporation - Utilitaire de Compression WinZip.) -- C:\WINDOWS\Installer\8b40d66c.msi [48741888] =>.Corel Corporation
[MD5.EC3E4A04E3E037DB8BF81C83555895FC] [WIS][2020/03/16 00:02:24] (.Adobe Systems Incorporated - Adobe ARM Installer.) -- C:\WINDOWS\Installer\b85ef.msi [911360] =>.Adobe Systems Incorporated
[MD5.B2D96888BC6646EBDEEFB59B363FD015] [WIS][2019/12/09 10:07:55] (.Adobe Inc..) -- C:\WINDOWS\Installer\109968fc.msp [30273536] =>.Adobe Inc.
[MD5.31A1DBE1A433F065C401CD0A73642712] [WIS][2019/11/13 13:16:36] (.Adobe Inc..) -- C:\WINDOWS\Installer\117bad95.msp [1527808] =>.Adobe Inc.
[MD5.4777B622A4EA5AE5F2B67516AB0254AD] [WIS][2019/08/12 08:29:03] (.Adobe Inc..) -- C:\WINDOWS\Installer\120bcfbd.msp [50438144] =>.Adobe Inc.
[MD5.3F05B763DB06D5375D569FF10EAC1CF8] [WIS][2019/04/08 08:22:42] (.Adobe Inc..) -- C:\WINDOWS\Installer\12a04eaa.msp [7155712] =>.Adobe Inc.
[MD5.26712DE883E87BB94D42E4EEA32B7E9E] [WIS][2019/02/20 14:28:20] (.Adobe Systems, Incorporated.) -- C:\WINDOWS\Installer\16fc9411.msp [1986560] =>.Adobe Systems, Incorporated
[MD5.158DB85A7E9649803519367B8E1A7CD7] [WIS][2019/02/11 08:36:53] (.Adobe Systems, Incorporated.) -- C:\WINDOWS\Installer\1e29e310.msp [8757248] =>.Adobe Systems, Incorporated
[MD5.2EA8602FA7F1CC88E5BB14CC6FCEE714] [WIS][2019/10/14 12:12:32] (.Adobe Inc..) -- C:\WINDOWS\Installer\1f05d2ea.msp [20799488] =>.Adobe Inc.
[MD5.5705BA59CE2D386789436E2C34FC5635] [WIS][2019/12/19 10:53:18] (.Adobe Inc..) -- C:\WINDOWS\Installer\2e9f3349.msp [1863680] =>.Adobe Inc.
[MD5.EF167BD45D286A7E38E769B6787DD73F] [WIS][2019/10/17 11:30:59] (.Adobe Inc..) -- C:\WINDOWS\Installer\2eb68321.msp [2490368] =>.Adobe Inc.
[MD5.04B8B2DEC9DFE83D56183D74F3ED40FB] [WIS][2019/08/22 13:14:18] (.Adobe Inc..) -- C:\WINDOWS\Installer\31b92470.msp [2002944] =>.Adobe Inc.
[MD5.BD4173F416AC180D7AD46CB583BAB949] [WIS][2020/05/21 18:16:51] (.Adobe Inc..) -- C:\WINDOWS\Installer\36a79.msp [1392640] =>.Adobe Inc.
[MD5.59E0FCA0A7F48848A6EF34ED7AC987C0] [WIS][2019/06/13 14:38:00] (.Adobe Inc..) -- C:\WINDOWS\Installer\43409c51.msp [2260992] =>.Adobe Inc.
[MD5.66476920EDE9D431EA9809A1657617E9] [WIS][2018/12/19 22:41:41] (.Adobe Systems, Incorporated.) -- C:\WINDOWS\Installer\64c38b.msp [228757504] =>.SUP.Obsolete.Adobe
[MD5.DB596E2ADC480687F78F34B7D452D2CB] [WIS][2020/03/16 08:28:35] (.Adobe Inc..) -- C:\WINDOWS\Installer\67264.msp [8130560] =>.Adobe Inc.
[MD5.497275FFB9E10B5A29223D2A99322F49] [WIS][2020/02/10 09:01:58] (.Adobe Inc..) -- C:\WINDOWS\Installer\8055043b.msp [25227264] =>.Adobe Inc.
[MD5.16551A09D3B9A3BC9049D098FBB4D529] [WIS][2019/05/13 08:57:34] (.Adobe Inc..) -- C:\WINDOWS\Installer\9b8f56d5.msp [59400192] =>.Adobe Inc.
[MD5.2CD061E09E48D7EFD5571169C5BB1386] [WIS][2019/10/24 14:03:06] (.Adobe Inc..) -- C:\WINDOWS\Installer\af13ebf.msp [4616192] =>.Adobe Inc.
[MD5.7F1419CD81DEB4E238B7F0426B0782B7] [WIS][2020/05/11 08:43:48] (.Adobe Inc..) -- C:\WINDOWS\Installer\cc604.msp [50810880] =>.Adobe Inc.

---\\ RECHERCHE DE CLÉS DE REGISTRE Tracing (6) - 1s
HKLM\SOFTWARE\Microsoft\Tracing\santivirusclient_RASAPI32 =>SUP.Optional.Segurazo
HKLM\SOFTWARE\Microsoft\Tracing\santivirusclient_RASMANCS =>SUP.Optional.Segurazo
HKLM\SOFTWARE\Microsoft\Tracing\SAntivirusService_RASAPI32 =>SUP.Optional.Segurazo
HKLM\SOFTWARE\Microsoft\Tracing\SAntivirusService_RASMANCS =>SUP.Optional.Segurazo
HKLM\SOFTWARE\Microsoft\Tracing\SAntivirusUninstaller_RASAPI32 =>SUP.Optional.Segurazo
HKLM\SOFTWARE\Microsoft\Tracing\SAntivirusUninstaller_RASMANCS =>SUP.Optional.Segurazo

---\\ FEATURE CONTROL. (880) - 3s
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ACTIVEX_REPURPOSEDETECTION]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:Setup.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:ODeploy.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:Oarpmany.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:FLTLDR.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:MSOSQM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:MSOICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:CMigrate.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:protocolhandler.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:CSISYNCCLIENT.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:CLVIEW.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:NAMECONTROLSERVER.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:DW20.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:DWTRIG20.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:MSOHTMED.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:MSOXMLED.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:msotd.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:msoev.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:msoia.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:MSOSYNC.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:MSOUC.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:OLicenseHeartbeat.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:FIRSTRUN.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:SELFCERT.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:SETLANG.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:GRAPH.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:MSQRY32.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:SmartTagInstall.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:SQLDumper.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:EXCEL.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:XLICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:Microsoft.Mashup.Container.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:Microsoft.Mashup.Container.NetFX40.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:Microsoft.Mashup.Container.NetFX45.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:GROOVE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:AppSharingHookController.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:lync.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:OcPubMgr.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:UcMapi.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:lync99.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:lynchtmlconv.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:ONENOTE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:IEContentService.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:ONENOTEM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS]:infopath.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_INPUT_PROMPTS]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_INPUT_PROMPTS]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_IMG]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_IMG]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_OBJECT]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_OBJECT]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_SCRIPT]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_SCRIPT]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]:UNPUXHost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]:CCleaner.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]:winzip32.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]:WebAuthBroker.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]:shuame.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]:santivirusclient.exe =>SUP.Optional.Segurazo
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]:santivirusclient.vshost.exe =>SUP.Optional.Segurazo
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_LEGACY_COMPRESSION]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:SAPfewgsrv.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:SAPGUI.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:SAPGuiIT.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:SAPLgPad.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:SAPLOGON.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:Scale_for_R3.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_SQM_UPLOAD_FOR_APP]:ieuser.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_SQM_UPLOAD_FOR_APP]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_TELNET_PROTOCOL]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_TELNET_PROTOCOL]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_UNICODE_HANDLE_CLOSING_CALLBACK]:YahooMusicEngine.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DOCUMENT_COMPATIBLE_MODE]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_SCRIPT_PASTE_URLACTION_IF_PROMPT]:devenv.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_SCRIPT_PASTE_URLACTION_IF_PROMPT]:dexplore.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_SCRIPT_PASTE_URLACTION_IF_PROMPT]:helppane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_SCRIPT_PASTE_URLACTION_IF_PROMPT]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_FEEDS]:msfeedssync.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_FORCE_ADDR_AND_STATUS]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_FORCE_ADDR_AND_STATUS]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:Setup.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:ODeploy.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:Oarpmany.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:FLTLDR.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:MSOSQM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:MSOICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:CMigrate.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:protocolhandler.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:CSISYNCCLIENT.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:CLVIEW.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:NAMECONTROLSERVER.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:DW20.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:DWTRIG20.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:MSOHTMED.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:MSOXMLED.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:msotd.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:msoev.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:msoia.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:MSOSYNC.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:MSOUC.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:OLicenseHeartbeat.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:FIRSTRUN.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:SELFCERT.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:SETLANG.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:GRAPH.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:MSQRY32.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:SmartTagInstall.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:SQLDumper.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:EXCEL.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:XLICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:Microsoft.Mashup.Container.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:Microsoft.Mashup.Container.NetFX40.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:Microsoft.Mashup.Container.NetFX45.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:GROOVE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:AppSharingHookController.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:lync.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:OcPubMgr.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:UcMapi.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:lync99.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:lynchtmlconv.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:ONENOTE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:IEContentService.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:ONENOTEM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:OUTLOOK.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IGNORE_XML_PROLOG]:msiexec.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IMAGING_USE_ART]:cs.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IMAGING_USE_ART]:waol.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IMAGING_USE_ART]:wm.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_INTERNET_SHELL_FOLDERS]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LEGACY_DISPPARAMS]:helppane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LEGACY_DLCONTROL_BEHAVIORS]:wlmail.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:Setup.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:ODeploy.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:Oarpmany.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:FLTLDR.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:MSOSQM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:MSOICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:CMigrate.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:protocolhandler.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:CSISYNCCLIENT.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:CLVIEW.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:NAMECONTROLSERVER.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:DW20.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:DWTRIG20.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:MSOHTMED.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:MSOXMLED.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:msotd.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:msoev.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:msoia.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:MSOSYNC.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:MSOUC.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:OLicenseHeartbeat.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:FIRSTRUN.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:SELFCERT.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:SETLANG.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:GRAPH.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:MSQRY32.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:SmartTagInstall.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:SQLDumper.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:EXCEL.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:XLICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:Microsoft.Mashup.Container.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:Microsoft.Mashup.Container.NetFX40.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:Microsoft.Mashup.Container.NetFX45.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:GROOVE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:AppSharingHookController.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:lync.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:OcPubMgr.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:UcMapi.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:lync99.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:lynchtmlconv.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTIONSPER1_0SERVER]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTIONSPERSERVER]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:Setup.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:ODeploy.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:Oarpmany.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:FLTLDR.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:MSOSQM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:MSOICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:CMigrate.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:protocolhandler.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:CSISYNCCLIENT.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:CLVIEW.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:NAMECONTROLSERVER.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:DW20.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:DWTRIG20.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:MSOHTMED.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:MSOXMLED.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:msotd.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:msoev.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:msoia.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:MSOSYNC.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:MSOUC.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:OLicenseHeartbeat.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:FIRSTRUN.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:SELFCERT.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:SETLANG.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:GRAPH.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:MSQRY32.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:SmartTagInstall.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:SQLDumper.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:EXCEL.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:XLICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:Microsoft.Mashup.Container.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:Microsoft.Mashup.Container.NetFX40.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:Microsoft.Mashup.Container.NetFX45.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:GROOVE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:AppSharingHookController.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:lync.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:OcPubMgr.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:UcMapi.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:lync99.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:lynchtmlconv.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:ONENOTE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:Setup.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:ODeploy.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:Oarpmany.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:FLTLDR.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:MSOSQM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:MSOICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:CMigrate.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:protocolhandler.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:CSISYNCCLIENT.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:CLVIEW.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:NAMECONTROLSERVER.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:DW20.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:DWTRIG20.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:MSOHTMED.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:MSOXMLED.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:msotd.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:msoev.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:msoia.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:MSOSYNC.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:MSOUC.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:OLicenseHeartbeat.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:FIRSTRUN.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:SELFCERT.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:SETLANG.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:GRAPH.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:MSQRY32.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:SmartTagInstall.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:SQLDumper.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:EXCEL.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:XLICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:Microsoft.Mashup.Container.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:Microsoft.Mashup.Container.NetFX40.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:Microsoft.Mashup.Container.NetFX45.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:GROOVE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:AppSharingHookController.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:lync.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:OcPubMgr.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:UcMapi.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:lync99.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:lynchtmlconv.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:ONENOTE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:IEContentService.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:ONENOTEM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MSHTML_AUTOLOAD_IEFRAME]:mshta.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MSHTML_AUTOLOAD_IEFRAME]:outlook.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MSHTML_AUTOLOAD_IEFRAME]:sidebar.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:Setup.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:ODeploy.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:Oarpmany.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:FLTLDR.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:MSOSQM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:MSOICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:CMigrate.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:protocolhandler.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:CSISYNCCLIENT.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:CLVIEW.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:NAMECONTROLSERVER.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:DW20.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:DWTRIG20.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:MSOHTMED.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:MSOXMLED.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:msotd.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:msoev.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:msoia.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:MSOSYNC.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:MSOUC.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:OLicenseHeartbeat.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:FIRSTRUN.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:SELFCERT.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:SETLANG.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:GRAPH.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:MSQRY32.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:SmartTagInstall.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:SQLDumper.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:EXCEL.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:XLICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:Microsoft.Mashup.Container.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:Microsoft.Mashup.Container.NetFX40.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:Microsoft.Mashup.Container.NetFX45.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:GROOVE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:AppSharingHookController.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:lync.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:OcPubMgr.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:UcMapi.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:lync99.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:lynchtmlconv.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:ONENOTE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:IEContentService.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:ONENOTEM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:Setup.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:ODeploy.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:Oarpmany.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:FLTLDR.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:MSOSQM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:MSOICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:CMigrate.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:protocolhandler.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:CSISYNCCLIENT.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:CLVIEW.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:NAMECONTROLSERVER.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:DW20.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:DWTRIG20.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:MSOHTMED.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:MSOXMLED.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:msotd.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:msoev.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:msoia.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:MSOSYNC.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:MSOUC.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:OLicenseHeartbeat.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:FIRSTRUN.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:SELFCERT.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:SETLANG.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:GRAPH.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:MSQRY32.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:SmartTagInstall.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:SQLDumper.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:EXCEL.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:XLICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:Microsoft.Mashup.Container.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:Microsoft.Mashup.Container.NetFX40.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:Microsoft.Mashup.Container.NetFX45.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:GROOVE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:AppSharingHookController.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:lync.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:OcPubMgr.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:UcMapi.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:lync99.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:lynchtmlconv.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:ONENOTE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:IEContentService.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:ONENOTEM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RELEASE_CALLBACK_ON_STOP_BINDING]:communicator.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ABOUT_PROTOCOL_IE7]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ABOUT_PROTOCOL_IE7]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ABOUT_PROTOCOL_IE7]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:Setup.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:ODeploy.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:Oarpmany.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:FLTLDR.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:MSOSQM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:MSOICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:CMigrate.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:protocolhandler.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:CSISYNCCLIENT.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:CLVIEW.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:NAMECONTROLSERVER.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:DW20.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:DWTRIG20.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:MSOHTMED.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:MSOXMLED.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:msotd.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:msoev.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:msoia.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:MSOSYNC.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:MSOUC.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:OLicenseHeartbeat.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:FIRSTRUN.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:SELFCERT.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:SETLANG.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:GRAPH.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:MSQRY32.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:SmartTagInstall.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:SQLDumper.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:EXCEL.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:XLICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:Microsoft.Mashup.Container.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:Microsoft.Mashup.Container.NetFX40.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:Microsoft.Mashup.Container.NetFX45.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:GROOVE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:AppSharingHookController.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:lync.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:OcPubMgr.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:UcMapi.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:lync99.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:lynchtmlconv.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:ONENOTE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:IEContentService.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:ONENOTEM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:msimn.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:winmail.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:Setup.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:ODeploy.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:Oarpmany.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:FLTLDR.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:MSOSQM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:MSOICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:CMigrate.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:protocolhandler.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:CSISYNCCLIENT.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:CLVIEW.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:NAMECONTROLSERVER.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:DW20.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:DWTRIG20.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:MSOHTMED.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:MSOXMLED.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:msotd.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:msoev.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:msoia.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:MSOSYNC.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:MSOUC.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:OLicenseHeartbeat.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:FIRSTRUN.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:SELFCERT.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:SETLANG.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:GRAPH.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:MSQRY32.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:SmartTagInstall.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:SQLDumper.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:EXCEL.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:XLICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:Microsoft.Mashup.Container.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:Microsoft.Mashup.Container.NetFX40.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:Microsoft.Mashup.Container.NetFX45.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:GROOVE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:AppSharingHookController.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:lync.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:OcPubMgr.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:UcMapi.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:lync99.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:lynchtmlconv.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:ONENOTE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:IEContentService.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_OBJECT_DATA_ATTRIBUTE]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_RES_TO_LMZ]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_RES_TO_LMZ]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_RES_TO_LMZ]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:Setup.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:ODeploy.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:Oarpmany.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:FLTLDR.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:MSOSQM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:MSOICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:CMigrate.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:protocolhandler.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:CSISYNCCLIENT.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:CLVIEW.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:NAMECONTROLSERVER.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:DW20.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:DWTRIG20.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:MSOHTMED.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:MSOXMLED.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:msotd.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:msoev.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:msoia.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:MSOSYNC.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:MSOUC.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:OLicenseHeartbeat.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:FIRSTRUN.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:SELFCERT.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:SETLANG.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:GRAPH.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:MSQRY32.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:SmartTagInstall.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:SQLDumper.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:XLICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:Microsoft.Mashup.Container.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:Microsoft.Mashup.Container.NetFX40.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:Microsoft.Mashup.Container.NetFX45.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:GROOVE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:AppSharingHookController.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:lync.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:OcPubMgr.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:UcMapi.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:lync99.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:lynchtmlconv.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:IEContentService.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:ONENOTEM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:OUTLOOK.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:Setup.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:ODeploy.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:Oarpmany.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:FLTLDR.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:MSOSQM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:MSOICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:CMigrate.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:protocolhandler.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:CSISYNCCLIENT.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:CLVIEW.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:NAMECONTROLSERVER.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:DW20.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:DWTRIG20.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:MSOHTMED.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:MSOXMLED.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:msotd.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:msoev.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:msoia.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:MSOSYNC.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:MSOUC.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:OLicenseHeartbeat.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:FIRSTRUN.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:SELFCERT.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:SETLANG.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:GRAPH.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:MSQRY32.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:SmartTagInstall.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:SQLDumper.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:EXCEL.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:XLICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:Microsoft.Mashup.Container.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:Microsoft.Mashup.Container.NetFX40.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:Microsoft.Mashup.Container.NetFX45.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:GROOVE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:AppSharingHookController.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:lync.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:OcPubMgr.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:UcMapi.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:lync99.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:lynchtmlconv.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:ONENOTE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:IEContentService.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:ONENOTEM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:OUTLOOK.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SHIM_MSHELP_COMBINE]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SHIM_MSHELP_COMBINE]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SHOW_APP_PROTOCOL_WARN_DIALOG]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SSLUX]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SUBDOWNLOAD_LOCKDOWN]:msimn.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SUBDOWNLOAD_LOCKDOWN]:outlook.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SUBDOWNLOAD_LOCKDOWN]:winmail.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:Setup.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:ODeploy.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:Oarpmany.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:FLTLDR.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:MSOSQM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:MSOICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:CMigrate.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:protocolhandler.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:CSISYNCCLIENT.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:CLVIEW.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:NAMECONTROLSERVER.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:DW20.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:DWTRIG20.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:MSOHTMED.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:MSOXMLED.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:msotd.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:msoev.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:msoia.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:MSOSYNC.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:MSOUC.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:OLicenseHeartbeat.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:FIRSTRUN.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:SELFCERT.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:SETLANG.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:GRAPH.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:MSQRY32.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:SmartTagInstall.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:SQLDumper.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:EXCEL.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:XLICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:Microsoft.Mashup.Container.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:Microsoft.Mashup.Container.NetFX40.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:Microsoft.Mashup.Container.NetFX45.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:GROOVE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:AppSharingHookController.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:lync.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:OcPubMgr.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:UcMapi.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:lync99.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:lynchtmlconv.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:ONENOTE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:IEContentService.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:ONENOTEM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:OUTLOOK.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_WINDOWEDSELECTCONTROL]:excel.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_WINDOWEDSELECTCONTROL]:infopath.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_WINDOWEDSELECTCONTROL]:powerpnt.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_WINDOWEDSELECTCONTROL]:winword.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:Setup.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:ODeploy.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:Oarpmany.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:FLTLDR.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:MSOSQM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:MSOICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:CMigrate.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:protocolhandler.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:CSISYNCCLIENT.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:NAMECONTROLSERVER.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:DW20.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:DWTRIG20.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:MSOHTMED.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:MSOXMLED.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:msotd.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:msoev.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:msoia.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:MSOSYNC.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:MSOUC.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:OLicenseHeartbeat.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:FIRSTRUN.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:SELFCERT.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:SETLANG.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:GRAPH.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:MSQRY32.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:SmartTagInstall.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:SQLDumper.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:EXCEL.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:XLICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:Microsoft.Mashup.Container.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:Microsoft.Mashup.Container.NetFX40.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:Microsoft.Mashup.Container.NetFX45.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:GROOVE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:AppSharingHookController.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:lync.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:OcPubMgr.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:UcMapi.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:lync99.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:lynchtmlconv.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:ONENOTE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:IEContentService.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:ONENOTEM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:OUTLOOK.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VIEWLINKEDWEBOC_IS_UNSAFE]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_MOVESIZECHILD]:msn.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:Setup.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:ODeploy.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:Oarpmany.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:FLTLDR.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:MSOSQM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:MSOICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:CMigrate.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:protocolhandler.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:CSISYNCCLIENT.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:CLVIEW.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:NAMECONTROLSERVER.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:DW20.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:DWTRIG20.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:MSOHTMED.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:MSOXMLED.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:msotd.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:msoev.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:msoia.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:MSOSYNC.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:MSOUC.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:OLicenseHeartbeat.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:FIRSTRUN.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:SELFCERT.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:SETLANG.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:GRAPH.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:MSQRY32.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:SmartTagInstall.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:SQLDumper.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:EXCEL.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:XLICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:Microsoft.Mashup.Container.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:Microsoft.Mashup.Container.NetFX40.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:Microsoft.Mashup.Container.NetFX45.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:GROOVE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:AppSharingHookController.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:lync.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:OcPubMgr.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:UcMapi.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:lync99.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:lynchtmlconv.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:ONENOTE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:IEContentService.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:ONENOTEM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:Setup.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:ODeploy.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:Oarpmany.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:FLTLDR.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:MSOSQM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:MSOICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:CMigrate.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:protocolhandler.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:CSISYNCCLIENT.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:CLVIEW.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:NAMECONTROLSERVER.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:DW20.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:DWTRIG20.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:MSOHTMED.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:MSOXMLED.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:msotd.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:msoev.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:msoia.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:MSOSYNC.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:MSOUC.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:OLicenseHeartbeat.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:FIRSTRUN.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:SELFCERT.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:SETLANG.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:GRAPH.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:MSQRY32.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:SmartTagInstall.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:SQLDumper.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:EXCEL.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:XLICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:Microsoft.Mashup.Container.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:Microsoft.Mashup.Container.NetFX40.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:Microsoft.Mashup.Container.NetFX45.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:GROOVE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:AppSharingHookController.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:lync.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:OcPubMgr.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:UcMapi.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:lync99.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:lynchtmlconv.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:ONENOTE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:IEContentService.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:ONENOTEM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_XSSFILTER]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_XSSFILTER]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:Setup.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:ODeploy.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:Oarpmany.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:FLTLDR.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:MSOSQM.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:MSOICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:CMigrate.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:protocolhandler.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:CSISYNCCLIENT.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:CLVIEW.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:NAMECONTROLSERVER.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:DW20.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:DWTRIG20.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:MSOHTMED.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:MSOXMLED.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:msotd.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:msoev.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:msoia.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:MSOSYNC.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:MSOUC.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:OLicenseHeartbeat.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:FIRSTRUN.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:SELFCERT.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:SETLANG.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:GRAPH.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:MSQRY32.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:SmartTagInstall.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:SQLDumper.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:EXCEL.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:XLICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:Microsoft.Mashup.Container.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:Microsoft.Mashup.Container.NetFX40.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:Microsoft.Mashup.Container.NetFX45.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:GROOVE.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:AppSharingHookController.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:lync.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:OcPubMgr.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:UcMapi.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:lync99.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:lynchtmlconv.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:ONENOTE.EXE =>.Legitimate

---\\ SCAN ADDITIONNEL (85) - 12s
C:\Users\kasper.kasper-PC\AppData\Local\{6A5B5C07-4EF3-30BF-236B-15570703E9CF} =>PUP.Optional.WinYahoo
C:\Users\kasper.kasper-PC\AppData\Local\{6A5B5C07-4EF3-30BF-236B-15570703E9CF}\HowToRemove =>PUP.Optional.WinYahoo
C:\Users\kasper.kasper-PC\AppData\Local\{6A5B5C07-4EF3-30BF-236B-15570703E9CF}\lilesina =>PUP.Optional.WinYahoo
C:\Users\kasper.kasper-PC\AppData\Local\{6A5B5C07-4EF3-30BF-236B-15570703E9CF}\sacarorit =>PUP.Optional.WinYahoo
C:\Users\kasper.kasper-PC\AppData\Local\{6A5B5C07-4EF3-30BF-236B-15570703E9CF}\uninst.exe =>PUP.Optional.WinYahoo
C:\Users\kasper.kasper-PC\AppData\Local\{6A5B5C07-4EF3-30BF-236B-15570703E9CF}\uninstp.dat =>PUP.Optional.WinYahoo
C:\Users\kasper.kasper-PC\AppData\Local\{6A5B5C07-4EF3-30BF-236B-15570703E9CF}\HowToRemove\chromium-min.jpg =>PUP.Optional.WinYahoo
C:\Users\kasper.kasper-PC\AppData\Local\{6A5B5C07-4EF3-30BF-236B-15570703E9CF}\HowToRemove\control panel-min-min.JPG =>PUP.Optional.WinYahoo
C:\Users\kasper.kasper-PC\AppData\Local\{6A5B5C07-4EF3-30BF-236B-15570703E9CF}\HowToRemove\down.png =>PUP.Optional.WinYahoo
C:\Users\kasper.kasper-PC\AppData\Local\{6A5B5C07-4EF3-30BF-236B-15570703E9CF}\HowToRemove\ff menu.JPG =>PUP.Optional.WinYahoo
C:\Users\kasper.kasper-PC\AppData\Local\{6A5B5C07-4EF3-30BF-236B-15570703E9CF}\HowToRemove\ff search engine-min.png =>PUP.Optional.WinYahoo
C:\Users\kasper.kasper-PC\AppData\Local\{6A5B5C07-4EF3-30BF-236B-15570703E9CF}\HowToRemove\HowToRemove.html =>PUP.Optional.WinYahoo
C:\Users\kasper.kasper-PC\AppData\Local\{6A5B5C07-4EF3-30BF-236B-15570703E9CF}\HowToRemove\hp-min ff.png =>PUP.Optional.WinYahoo
C:\Users\kasper.kasper-PC\AppData\Local\{6A5B5C07-4EF3-30BF-236B-15570703E9CF}\HowToRemove\hp-min ie.png =>PUP.Optional.WinYahoo
C:\Users\kasper.kasper-PC\AppData\Local\{6A5B5C07-4EF3-30BF-236B-15570703E9CF}\HowToRemove\search engine.gif =>PUP.Optional.WinYahoo
C:\Users\kasper.kasper-PC\AppData\Local\{6A5B5C07-4EF3-30BF-236B-15570703E9CF}\HowToRemove\setup pages.gif =>PUP.Optional.WinYahoo
C:\Users\kasper.kasper-PC\AppData\Local\{6A5B5C07-4EF3-30BF-236B-15570703E9CF}\HowToRemove\sp-min.png =>PUP.Optional.WinYahoo
C:\Users\kasper.kasper-PC\AppData\Local\{6A5B5C07-4EF3-30BF-236B-15570703E9CF}\HowToRemove\start-min.jpg =>PUP.Optional.WinYahoo
C:\Users\kasper.kasper-PC\AppData\Local\{6A5B5C07-4EF3-30BF-236B-15570703E9CF}\HowToRemove\up.png =>PUP.Optional.WinYahoo
HKLM\SYSTEM\CurrentControlSet\Services\SANTIVIRUSKD =>SUP.Optional.Segurazo
C:\Program Files\SAntivirus\SAntivirusKD.sys =>SUP.Optional.Segurazo
HKLM\SYSTEM\CurrentControlSet\Services\SAntivirusSvc =>SUP.Optional.Segurazo
C:\Program Files\SAntivirus\SAntivirusService.exe =>SUP.Optional.Segurazo
C:\Users\kasper.kasper-PC\AppData\Roaming\uTorrent Web\utweb.exe =>BitTorrent (P2P)
C:\Windows\Temp\KMSAuto\bin\KMSSS.exe =>Heuristic.Suspect
C:\Program Files\SAntivirus =>SUP.Optional.Segurazo
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SAntivirus =>SUP.Optional.Segurazo
C:\ProgramData\ReimageRepair =>SUP.Optional.ReimageRepair
C:\ProgramData\SAntivirus =>SUP.Optional.Segurazo
C:\Users\kasper.kasper-PC\AppData\Roaming\santivirusclient =>SUP.Optional.Segurazo
C:\WINDOWS\Prefetch\KMSAUTO.EXE-4C1E1D46.pf =>HackTool.WinActivator
C:\WINDOWS\Prefetch\SEGURAZOKILLER.EXE-F60DC848.pf =>SUP.Optional.Segurazo
[HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]:TCP Query User{21A22B15-4203-4ED5-8D4F-344FDA548169}C:\users\kasper.kasper-pc\appdata\roaming\utorrent web\utweb.exe =>BitTorrent (P2P)
[HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]:UDP Query User{5A1B761B-9D18-45B9-8F14-086252963D63}C:\users\kasper.kasper-pc\appdata\roaming\utorrent web\utweb.exe =>BitTorrent (P2P)
[HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]:{E5E99050-7097-444E-996C-DFECAFD65565} =>BitTorrent (P2P)
[HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]:{A0C23165-C23D-4C13-8BF3-E31D06A58538} =>BitTorrent (P2P)
[HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]:TCP Query User{7C83F48F-F2E9-4EA3-836C-DAFF91A5D129}K:\disque atelier\kms tools portable 25.04.2016 par ratiborus\programs\office 2013-2016 c2r install v5.2\files\bin\kmss.exe =>HackTool.KMSpico
[HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]:UDP Query User{AAB1C483-C8BD-4BB8-A368-1A9B4D5E2842}K:\disque atelier\kms tools portable 25.04.2016 par ratiborus\programs\office 2013-2016 c2r install v5.2\files\bin\kmss.exe =>HackTool.KMSpico
C:\WINDOWS\Installer\64c38b.msp =>.SUP.Obsolete.Adobe
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\santivirusclient_RASAPI32 =>SUP.Optional.Segurazo
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\santivirusclient_RASMANCS =>SUP.Optional.Segurazo
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SAntivirusService_RASAPI32 =>SUP.Optional.Segurazo
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SAntivirusService_RASMANCS =>SUP.Optional.Segurazo
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SAntivirusUninstaller_RASAPI32 =>SUP.Optional.Segurazo
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SAntivirusUninstaller_RASMANCS =>SUP.Optional.Segurazo
C:\Users\kasper.kasper-PC\AppData\Local\Google\Chrome\User Data\Default\File System\000 =>.SUP.Temporary.Chrome
C:\Users\kasper.kasper-PC\AppData\Local\Google\Chrome\User Data\Default\File System\001 =>.SUP.Temporary.Chrome
C:\Users\kasper.kasper-PC\AppData\Local\Google\Chrome\User Data\Default\File System\002 =>.SUP.Temporary.Chrome
C:\Users\kasper.kasper-PC\AppData\Local\Google\Chrome\User Data\Default\File System\003 =>.SUP.Temporary.Chrome
C:\Users\kasper.kasper-PC\AppData\Local\Google\Chrome\User Data\Default\File System\004 =>.SUP.Temporary.Chrome
C:\Users\kasper.kasper-PC\AppData\Local\Google\Chrome\User Data\Default\File System\005 =>.SUP.Temporary.Chrome
C:\Users\kasper.kasper-PC\AppData\Local\Google\Chrome\User Data\Default\File System\006 =>.SUP.Temporary.Chrome
C:\Users\kasper.kasper-PC\AppData\Local\Google\Chrome\User Data\Default\File System\007 =>.SUP.Temporary.Chrome
C:\Users\kasper.kasper-PC\AppData\Local\Google\Chrome\User Data\Default\File System\008 =>.SUP.Temporary.Chrome
C:\Users\kasper.kasper-PC\AppData\Local\Google\Chrome\User Data\Default\File System\009 =>.SUP.Temporary.Chrome
C:\Users\kasper.kasper-PC\AppData\Local\Google\Chrome\User Data\Default\File System\010 =>.SUP.Temporary.Chrome
C:\Users\kasper.kasper-PC\AppData\Local\Google\Chrome\User Data\Default\File System\011 =>.SUP.Temporary.Chrome
C:\Users\kasper.kasper-PC\AppData\Local\Google\Chrome\User Data\Default\File System\012 =>.SUP.Temporary.Chrome
C:\Users\kasper.kasper-PC\AppData\Local\Google\Chrome\User Data\Default\File System\013 =>.SUP.Temporary.Chrome
C:\Users\kasper.kasper-PC\AppData\Local\Google\Chrome\User Data\Default\File System\014 =>.SUP.Temporary.Chrome
C:\Users\kasper.kasper-PC\AppData\Local\Google\Chrome\User Data\Default\File System\015 =>.SUP.Temporary.Chrome
C:\Users\kasper.kasper-PC\AppData\Local\Google\Chrome\User Data\Default\File System\016 =>.SUP.Temporary.Chrome
C:\Users\kasper.kasper-PC\AppData\Local\Google\Chrome\User Data\Default\File System\017 =>.SUP.Temporary.Chrome
C:\Users\kasper.kasper-PC\AppData\Local\Google\Chrome\User Data\Default\File System\018 =>.SUP.Temporary.Chrome
C:\Users\kasper.kasper-PC\AppData\Local\Google\Chrome\User Data\Default\File System\019 =>.SUP.Temporary.Chrome
C:\Users\kasper.kasper-PC\AppData\Local\Google\Chrome\User Data\Default\File System\020 =>.SUP.Temporary.Chrome
C:\Users\kasper.kasper-PC\AppData\Local\Google\Chrome\User Data\Default\File System\021 =>.SUP.Temporary.Chrome
C:\Users\kasper.kasper-PC\AppData\Local\Google\Chrome\User Data\Default\File System\022 =>.SUP.Temporary.Chrome
C:\Users\kasper.kasper-PC\AppData\Local\Google\Chrome\User Data\Default\File System\023 =>.SUP.Temporary.Chrome
HKCU\Software\undefined =>.SUP.Downloader
HKLM\SOFTWARE\Wow6432Node\SAntivirus =>SUP.Optional.Segurazo
HKLM\SOFTWARE\SAntivirus =>SUP.Optional.Segurazo
HKLM\SOFTWARE\SegOption =>SUP.Optional.Segurazo
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:K:\disque atelier\kms tools portable 25.04.2016 par ratiborus\programs\office 2013-2016 c2r install v5.2\files\bin\kmss.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:K:\disque atelier\kms tools portable 25.04.2016 par ratiborus\programs\office 2013-2016 c2r install v5.2\files\bin\kmss.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\windows\files\bin\kmss.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\windows\files\bin\kmss.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\kasper.kasper-PC\AppData\Roaming\uTorrent Web\utweb.exe.FriendlyAppName =>BitTorrent (P2P)
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\kasper.kasper-PC\AppData\Roaming\uTorrent Web\utweb.exe.ApplicationCompany =>BitTorrent (P2P)
[HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:K:\disque atelier\kms tools portable 25.04.2016 par ratiborus\programs\office 2013-2016 c2r install v5.2\files\bin\kmss.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:K:\disque atelier\kms tools portable 25.04.2016 par ratiborus\programs\office 2013-2016 c2r install v5.2\files\bin\kmss.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\windows\files\bin\kmss.exe.FriendlyAppName =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\windows\files\bin\kmss.exe.ApplicationCompany =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\kasper.kasper-PC\AppData\Roaming\uTorrent Web\utweb.exe.FriendlyAppName =>BitTorrent (P2P)
[HKU\S-1-5-21-2049537270-2770977086-2453291920-1000\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\kasper.kasper-PC\AppData\Roaming\uTorrent Web\utweb.exe.ApplicationCompany =>BitTorrent (P2P)

---\\ RÉCAPITULATIF DES ÉLÉMENTS TROUVÉS (11) - 0s
https://nicolascoolman.eu/forum/Topic/winyahoo-logiciel-optionnel-potentiellement-indesirable-pup-lpi/ =>PUP.Optional.WinYahoo
https://nicolascoolman.eu/2019/07/23/sup-segurazo/ =>SUP.Optional.Segurazo
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>BitTorrent (P2P)
https://nicolascoolman.eu/2017/09/12/origine-lignes-orphelines/ =>.SUP.Orphan
https://nicolascoolman.eu/2017/12/22/sup-downloader/ =>.SUP.Downloader
https://nicolascoolman.eu/2017/01/27/superfluous-reimagerepair/ =>SUP.Optional.ReimageRepair
https://nicolascoolman.eu/2017/01/13/hacktool-winactivator/ =>HackTool.WinActivator
https://nicolascoolman.eu/2017/02/16/hacktool-kmspico/ =>HackTool.KMSpico
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.Obsolete.Adobe
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.Temporary.Chrome
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.Orphan.MUICache

---\\ NUMEROS DE SÉRIE
[00BE8245D015B674066682BA42C3AB7B8D] [14/02/2020] (.Digital Communications Inc.) - C:\Program Files\SAntivirus\santivirusclient.exe =>SUP.Optional.Segurazo
[00BE8245D015B674066682BA42C3AB7B8D] [14/02/2020] (.Digital Communications Inc.) - C:\Program Files\SAntivirus\SAntivirusIC.exe =>SUP.Optional.Segurazo
[00BE8245D015B674066682BA42C3AB7B8D] [16/02/2020] (.Digital Communications Inc.) - C:\Program Files\SAntivirus\SAntivirusService.exe =>SUP.Optional.Segurazo
[00E2974858A0A4BC980D957B51159AA7B4] [13/03/2020] (.Janos Mathe.) - C:\Program Files\Hard Disk Sentinel\unins000.exe =>.Janos Mathe
[02FA994D660DE659EE9037ECB437D766] [14/10/2019] (.Piriform Software Ltd.) - C:\Program Files\CCleaner\CCleaner.exe =>.Piriform Software Ltd
[02FA994D660DE659EE9037ECB437D766] [14/10/2019] (.Piriform Software Ltd.) - C:\Program Files\CCleaner\uninst.exe =>.Piriform Software Ltd
[0320BE3EB866526927F999B97B04346E] [25/04/2018] (.Realtek Semiconductor Corp..) - C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe =>.Realtek Semiconductor Corp.
[0320BE3EB866526927F999B97B04346E] [25/04/2018] (.Realtek Semiconductor Corp..) - C:\Program Files\Realtek\Audio\HDA\RtlUpd.exe =>.Realtek Semiconductor Corp.
[0320BE3EB866526927F999B97B04346E] [25/04/2018] (.Realtek Semiconductor Corp..) - C:\Windows\System32\drivers\RTKVHDA.sys =>.Realtek Semiconductor Corp.
[045F7B840FB74D1CD3FD9920335A93A0] [20/05/2016] (.Logitech Inc.) - C:\Windows\System32\LogiLDA.DLL =>.Logitech Inc
[05D3AC4A8944689E10380AAE2B1BFEBE] [17/02/2019] (.Adlice.) - C:\Program Files\Diag\unins000.exe =>.Adlice
[05D3AC4A8944689E10380AAE2B1BFEBE] [17/02/2019] (.Adlice.) - C:\Program Files\RogueKiller\unins000.exe =>.Adlice
[05D3AC4A8944689E10380AAE2B1BFEBE] [25/01/2019] (.Adlice.) - C:\Program Files\Diag\Diag.exe =>.Adlice
[06AEA76BAC46A9E8CFE6D29E45AAF033] [21/03/2020] (.Google LLC.) - C:\Program Files\Google\Update\1.3.35.452\GoogleCrashHandler.exe =>.Google LLC
[08A8E826950F1A9940262589FCAF0B8F] [24/05/2020] (.WZT.) - C:\Windows\Temp\KMSAuto\bin\KMSSS.exe =>.Not verified
[0C15BE4A15BB0903C901B1D6C265302F] [16/05/2020] (.Google LLC.) - C:\Program Files\Google\Chrome\Application\83.0.4103.61\elevation_service.exe =>.Google LLC
[0C15BE4A15BB0903C901B1D6C265302F] [16/05/2020] (.Google LLC.) - C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google LLC
[0C15BE4A15BB0903C901B1D6C265302F] [27/05/2020] (.Google LLC.) - C:\Program Files\Google\Chrome\Application\83.0.4103.61\Installer\chrmstp.exe =>.Google LLC
[0C15BE4A15BB0903C901B1D6C265302F] [27/05/2020] (.Google LLC.) - C:\Program Files\Google\Chrome\Application\83.0.4103.61\Installer\setup.exe =>.Google LLC
[0C15BE4A15BB0903C901B1D6C265302F] [27/05/2020] (.Google LLC.) - C:\Users\kasper.kasper-PC\AppData\Local\Google\Chrome\User Data\SwReporter\83.236.200\software_reporter_tool.exe =>.Google LLC
[0EE3F1C8F451CBF21203341A53F23E71] [04/05/2020] (.Adobe Inc..) - C:\Program Files\Adobe\Acrobat Reader DC\Reader\AcroBroker.exe =>.Adobe Inc.
[0EE3F1C8F451CBF21203341A53F23E71] [20/05/2020] (.Adobe Inc..) - C:\Program Files\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe =>.Adobe Inc.
[0EE3F1C8F451CBF21203341A53F23E71] [25/02/2020] (.Adobe Inc..) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe =>.Adobe Inc.
[0F5C689DC0717374609E20ED097B19D9] [25/04/2018] (.ICEpower a/s.) - C:\Windows\System32\ICEsoundService.exe =>.ICEpower a/s
[1044F31AE1F93A0BB95F19AB9FAAC6BB] [28/05/2020] (.ESET, spol. s r.o..) - C:\Users\kasper.kasper-PC\AppData\Local\Google\Chrome\User Data\SwReporter\83.236.200\edls_32.dll =>.ESET, spol. s r.o.
[1044F31AE1F93A0BB95F19AB9FAAC6BB] [28/05/2020] (.ESET, spol. s r.o..) - C:\Users\kasper.kasper-PC\AppData\Local\Google\Chrome\User Data\SwReporter\83.236.200\em000_32.dll =>.ESET, spol. s r.o.
[1044F31AE1F93A0BB95F19AB9FAAC6BB] [28/05/2020] (.ESET, spol. s r.o..) - C:\Users\kasper.kasper-PC\AppData\Local\Google\Chrome\User Data\SwReporter\83.236.200\em001_32.dll =>.ESET, spol. s r.o.
[1044F31AE1F93A0BB95F19AB9FAAC6BB] [28/05/2020] (.ESET, spol. s r.o..) - C:\Users\kasper.kasper-PC\AppData\Local\Google\Chrome\User Data\SwReporter\83.236.200\em002_32.dll =>.ESET, spol. s r.o.
[1044F31AE1F93A0BB95F19AB9FAAC6BB] [28/05/2020] (.ESET, spol. s r.o..) - C:\Users\kasper.kasper-PC\AppData\Local\Google\Chrome\User Data\SwReporter\83.236.200\em003_32.dll =>.ESET, spol. s r.o.
[1044F31AE1F93A0BB95F19AB9FAAC6BB] [28/05/2020] (.ESET, spol. s r.o..) - C:\Users\kasper.kasper-PC\AppData\Local\Google\Chrome\User Data\SwReporter\83.236.200\em004_32.dll =>.ESET, spol. s r.o.
[1044F31AE1F93A0BB95F19AB9FAAC6BB] [28/05/2020] (.ESET, spol. s r.o..) - C:\Users\kasper.kasper-PC\AppData\Local\Google\Chrome\User Data\SwReporter\83.236.200\em005_32.dll =>.ESET, spol. s r.o.
[112172E6B04266BB4059BFEF636CF8F452A0] [24/03/2018] (.Disc Soft Ltd.) - C:\Windows\System32\drivers\dtlitescsibus.sys =>.Disc Soft Ltd
[112172E6B04266BB4059BFEF636CF8F452A0] [24/03/2018] (.Disc Soft Ltd.) - C:\Windows\System32\drivers\dtliteusbbus.sys =>.Disc Soft Ltd
[12DFC245BB37B84C6DA2FBA4E421B62E] [16/02/2020] (.Digital Communications Inc..) - C:\Program Files\SAntivirus\SAntivirusKD.sys =>SUP.Optional.Segurazo
[14781BC862E8DC503A559346F5DCC518] [14/11/2016] (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe =>.NVIDIA Corporation
[14781BC862E8DC503A559346F5DCC518] [14/11/2016] (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\3D Vision\nvStInst.exe =>.NVIDIA Corporation
[14781BC862E8DC503A559346F5DCC518] [14/11/2016] (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\Display\nvtray.exe =>.NVIDIA Corporation
[14781BC862E8DC503A559346F5DCC518] [14/11/2016] (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe =>.NVIDIA Corporation
[14781BC862E8DC503A559346F5DCC518] [14/11/2016] (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe =>.NVIDIA Corporation
[14781BC862E8DC503A559346F5DCC518] [14/11/2016] (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe =>.NVIDIA Corporation
[14781BC862E8DC503A559346F5DCC518] [14/11/2016] (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe =>.NVIDIA Corporation
[14781BC862E8DC503A559346F5DCC518] [14/11/2016] (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe =>.NVIDIA Corporation
[14781BC862E8DC503A559346F5DCC518] [14/11/2016] (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe =>.NVIDIA Corporation
[14781BC862E8DC503A559346F5DCC518] [14/11/2016] (.NVIDIA Corporation.) - C:\Windows\System32\drivers\nvlddmkm.sys =>.NVIDIA Corporation
[14781BC862E8DC503A559346F5DCC518] [14/11/2016] (.NVIDIA Corporation.) - C:\Windows\System32\drivers\nvvad32v.sys =>.NVIDIA Corporation
[14781BC862E8DC503A559346F5DCC518] [14/11/2016] (.NVIDIA Corporation.) - C:\Windows\System32\nvshext.dll =>.NVIDIA Corporation
[14781BC862E8DC503A559346F5DCC518] [14/11/2016] (.NVIDIA Corporation.) - C:\Windows\System32\nvvsvc.exe =>.NVIDIA Corporation
[14F8FDD167F92402B1570B5DC495C815] [03/02/2019] (.Google Inc.) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc
[1692535DEB2BDEFE27AD58974724F390] [16/02/2020] (.Reason Software Company Inc..) - C:\Program Files\SAntivirus\rsEngineHelper.exe =>.Reason Software Company Inc.
[1BC9A10183E344EDC57B92B7027F12A3] [29/11/2018] (.Rivet Networks LLC.) - C:\Windows\System32\drivers\L1C63x86.sys =>.Rivet Networks LLC
[1ED0F913987F133C774A54566F97BB2E] [27/08/2012] (.Renesas Electronics Corporation.) - C:\Windows\System32\drivers\nusb3hub.sys =>.Renesas Electronics Corporation
[1ED0F913987F133C774A54566F97BB2E] [27/08/2012] (.Renesas Electronics Corporation.) - C:\Windows\System32\drivers\nusb3xhc.sys =>.Renesas Electronics Corporation
[230731EF6F4DBDF734B73FC6D59C2F4B] [02/08/2016] (.VS Revo Group.) - C:\Program Files\VS Revo Group\Revo Uninstaller\RevoUnin.exe =>.VS Revo Group
[24A1BD176051FF864D018812F9F2304C] [13/05/2020] (.Corel Corporation.) - C:\Users\kasper.kasper-PC\AppData\Local\assembly\tmp\8EJJMUKI\WinZipExpressForOffice.resources.DLL =>.Corel Corporation
[24A1BD176051FF864D018812F9F2304C] [13/05/2020] (.Corel Corporation.) - C:\Users\kasper.kasper-PC\AppData\Local\assembly\tmp\MW1ZP9IZ\WinZipExpressForOffice.DLL =>.Corel Corporation
[24A1BD176051FF864D018812F9F2304C] [21/05/2020] (.Corel Corporation.) - C:\Users\kasper.kasper-PC\AppData\Local\assembly\tmp\LDS7LTVY\WinZipExpressForOffice.DLL =>.Corel Corporation
[24A1BD176051FF864D018812F9F2304C] [22/10/2018] (.Corel Corporation.) - C:\Program Files\WinZip\winzip32.exe =>.Corel Corporation
[24A1BD176051FF864D018812F9F2304C] [22/10/2018] (.Corel Corporation.) - C:\Program Files\WinZip\WzPreloader.exe =>.Corel Corporation
[24A1BD176051FF864D018812F9F2304C] [22/10/2018] (.Corel Corporation.) - C:\Program Files\WinZip\wzshlstb.dll =>.Corel Corporation
[24A1BD176051FF864D018812F9F2304C] [22/10/2018] (.Corel Corporation.) - C:\Program Files\WinZip\WZUpdateNotifier.exe =>.Corel Corporation
[289EE98C64265576B79E161AFDB3E4D2] [04/04/2017] (.Sony Mobile Communications AB.) - C:\Windows\System32\drivers\ggflt.sys =>.Sony Mobile Communications AB
[289EE98C64265576B79E161AFDB3E4D2] [04/04/2017] (.Sony Mobile Communications AB.) - C:\Windows\System32\drivers\ggsomc.sys =>.Sony Mobile Communications AB
[37D01DA15D9FCBA489C35F443E30A55D] [22/10/2018] (.Add-in Express.) - C:\Program Files\WinZip\adxregistrator.exe =>.Add-in Express
[37ED9092BDD1DCCF58D2AFA47F961448] [16/07/2009] (.ASUSTeK Computer Inc..) - C:\Windows\System32\drivers\ASACPI.sys =>.ASUSTeK Computer Inc.
[43BB437D609866286DD839E1D00309F5] [09/12/2016] (.NVIDIA Corporation.) - C:\Windows\System32\drivers\nvstusb.sys =>.NVIDIA Corporation
[4A2B6623B7868694D462E275FF7470C3] [29/04/2009] (.MLK Technologies Limited.) - C:\Windows\System32\drivers\KMWDFILTER.sys =>.MLK Technologies Limited
[6F13BCD50963D2F309439E37FD459C7C] [02/05/2020] (.BitTorrent Inc.) - C:\Users\kasper.kasper-PC\AppData\Roaming\uTorrent Web\helper\helper.exe =>BitTorrent (P2P)
[6F13BCD50963D2F309439E37FD459C7C] [13/04/2020] (.BitTorrent Inc.) - C:\Users\kasper.kasper-PC\AppData\Roaming\uTorrent Web\Uninstall.exe =>BitTorrent (P2P)
[72ACD79546C6E0B523B123D763EFE617] [26/07/2012] (.Canon Inc..) - C:\Windows\System32\CanonIJ Uninstaller Information\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG6200_series\DELDRV.exe =>.Canon Inc.
[75F8622A53135E50837BA7451C836D99] [16/09/2011] (.Renesas Electronics Corporation.) - C:\Program Files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe =>.Renesas Electronics Corporation
[7D08D9BC130726DE26EE4EF28E133084] [07/10/2015] (.ASUSTeK Computer Inc..) - C:\Windows\System32\drivers\AsusVBus.sys =>.ASUSTeK Computer Inc.

~ Unselected Options: WR,
~ End of the scan, 10058 items in 19mn54s (6208)(1)

Publicité


Signaler le contenu de ce document

Publicité