~ ZHPDiag v2020.10.9.243 Par Nicolas Coolman (2020/10/09)
~ Démarré par marc (Administrator) (2020/10/14 11:32:48)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Certificate ZHPDiag: Legal
~ Etat de la version: Version OK
~ Mode: Scanner
~ Rapport: C:\Users\marc\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\marc\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ Démarrage du système: Normal (Normal boot)
Windows 10 Home, 32-bit (Build 18362) =>.Microsoft Corporation

---\\ NAVIGATEURS INTERNET (3) - 0s
~ GCIE: Google Chrome v86.0.4240.75
~ MSIE: Internet Explorer v11.1082.18362.0
~ OBIE: Microsoft Edge v86.0.622.38

---\\ INFORMATIONS SUR LES PRODUITS WINDOWS (8) - 3s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
~ Windows(R) Operating System, OEM_DM channel
Windows ID Activation : OK
~ Windows Partial Key : FM47D
Windows License : OK
~ Windows Remaining Initializations Number : 1001
Windows Automatic Updates : OK

---\\ LOGICIELS DE PROTECTION (1) - 2s
Windows Defender W10 (Activate) (Protection)

---\\ LOGICIELS D'OPTIMISATION (1) - 2s
~ CCleaner v5.72 (Optimisation)

---\\ INFORMATIONS SUR LE SYSTÈME (6) - 0s
~ Operating System: x86 Family 6 Model 15 Stepping 6, GenuineIntel
~ Operating System: 32-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 3144.324 MB (40% free) : OK =>.RAM Value
System Restore: Activé (Enable)
System drive C: has 67 GB (60%) free of 111 GB : OK =>.Disk Space

---\\ MODE DE CONNEXION AU SYSTÈME (3) - 0s
~ Computer Name: DESKTOP-0EIATSM
~ User Name: marc
~ Logged in as Administrator

---\\ ÉNUMÉRATION DES UNITÉS DE STOCKAGE (2) - 5s
~ Drive C: has 67 GB free of 111 GB (System)
~ Drive D: has 317 GB free of 364 GB

---\\ ÉTAT DU CENTRE DE SÉCURITÉ WINDOWS (7) - 0s
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK

---\\ RECHERCHE PARTICULIÈRE DE FICHIERS GÉNÉRIQUES (25) - 3s
[MD5.A8150087A135F98FC874F313F83CF5FF] - 12/08/2020 - (.Microsoft Corporation - Explorateur Windows.) -- C:\WINDOWS\Explorer.exe [3974376] =>.Microsoft®
[MD5.D0432468FA4B7F66166C430E1334DBDA] - 19/03/2019 - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\WINDOWS\System32\rundll32.exe [61952] [Unsigned] =>.Microsoft Corporation
[MD5.62CAAC112386ABF50F635D05F0C67CC8] - 13/06/2020 - (.Microsoft Corporation - Application de démarrage de Windows.) -- C:\WINDOWS\System32\Wininit.exe [298536] =>.Microsoft®
[MD5.9C2245F0461DC6EEB6A7EC219269FDDB] - 10/09/2020 - (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\WINDOWS\System32\wininet.dll [4538368] [Unsigned] =>.Microsoft Corporation
[MD5.FAE691B2AF31F988A6761D80AEBF8A90] - 13/06/2020 - (.Microsoft Corporation - Application d’ouverture de session Windows.) -- C:\WINDOWS\System32\Winlogon.exe [685056] [Unsigned] =>.Microsoft Corporation
[MD5.BEA2A49EB58E46A8392D5F0A7751E2D0] - 13/06/2020 - (.Microsoft Corporation - Bibliothèque de licences.) -- C:\WINDOWS\System32\sppcomapi.dll [287232] [Unsigned] =>.Microsoft Corporation
[MD5.D53119630B255A98A93ED69BB7D2200A] - 10/09/2020 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\WINDOWS\System32\dnsapi.dll [593480] =>.Microsoft®
[MD5.7ED2323F5CADF60CFC8531F8F9B095F0] - 10/09/2020 - (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\WINDOWS\System32\wuaueng.dll [2397696] [Unsigned] =>.Microsoft Corporation
[MD5.4BB305AEED92BB280760B127548E1DC2] - 19/03/2019 - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\WINDOWS\System32\fr-FR\user32.dll.mui [19968] [Unsigned] =>.Microsoft Corporation
[MD5.09106442835137EFBF467ECFCF74D9CD] - 10/09/2020 - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) -- C:\WINDOWS\System32\drivers\AFD.sys [513352] =>.Microsoft®
[MD5.006C7CDB3050BF9020E8CC05EAE49452] - 13/06/2020 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\WINDOWS\System32\drivers\atapi.sys [22840] =>.Microsoft®
[MD5.07ABEA108AD82B38B37A08FA2CD048ED] - 19/03/2019 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS\System32\drivers\Cdfs.sys [74752] [Unsigned] =>.Microsoft Corporation
[MD5.C0705BA4CBFA86BE41DA3B37BA1239B3] - 19/03/2019 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS\System32\drivers\Cdrom.sys [125952] [Unsigned] =>.Microsoft Corporation
[MD5.C37ECB5AC2CFECE6B439C57F13E4A3F8] - 19/03/2019 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\WINDOWS\System32\drivers\DfsC.sys [114176] [Unsigned] =>.Microsoft Corporation
[MD5.5B30FDAD97C7B9BEA0B18E73BB954AAB] - 13/06/2020 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\WINDOWS\System32\drivers\HDAudBus.sys [92160] [Unsigned] =>.Microsoft Corporation
[MD5.19E04AC22DA35C44050878077D497CB9] - 19/03/2019 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\WINDOWS\System32\drivers\i8042prt.sys [99328] [Unsigned] =>.Microsoft Corporation
[MD5.163B48681978DC53BAF0518DA1C63188] - 19/03/2019 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\drivers\IpNat.sys [187392] [Unsigned] =>.Microsoft Corporation
[MD5.8EBA3941F4ECAB99C8FAACCE3168C6A7] - 10/09/2020 - (.Microsoft Corporation - Minirdr SMB Windows NT.) -- C:\WINDOWS\System32\drivers\MRxSmb.sys [462648] =>.Microsoft®
[MD5.8C06E89C711952AB8DA4F64E76CF0F78] - 13/06/2020 - (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS\System32\drivers\netBT.sys [247808] [Unsigned] =>.Microsoft Corporation
[MD5.840042A1CC1895F98E577F99A6EB9B3B] - 10/09/2020 - (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\WINDOWS\System32\drivers\ntfs.sys [2202936] =>.Microsoft®
[MD5.DD3C8E703762361BE2BB7DD002B82B3D] - 19/03/2019 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\WINDOWS\System32\drivers\Parport.sys [82944] [Unsigned] =>.Microsoft Corporation
[MD5.6A5EFB03BCBFD104E0613E954E14AA8F] - 19/03/2019 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\Rasl2tp.sys [79872] [Unsigned] =>.Microsoft Corporation
[MD5.43078298266DE794C8A3B58FC86C37D7] - 13/06/2020 - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RD.) -- C:\WINDOWS\System32\drivers\rdpdr.sys [131072] [Unsigned] =>.Microsoft Corporation
[MD5.A95F668D4DB65A080BFC574D5954D550] - 19/03/2019 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\WINDOWS\System32\drivers\tdx.sys [95544] =>.Microsoft Windows®
[MD5.3114CEB6A1426D3051A1164971B6220E] - 13/06/2020 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\WINDOWS\System32\drivers\volsnap.sys [356368] =>.Microsoft®

---\\ LISTE DES SERVICES (Non désactivés) (58) - 4s
O23 - Service: C:\Windows\System32\AudioEndpointBuilder.dll (AudioEndpointBuilder) . (.Microsoft Corporation - Générateur de points de terminaison du serv.) - C:\Windows\System32\AudioEndpointBuilder.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\audiosrv.dll (Audiosrv) . (.Microsoft Corporation - Service Audio Windows.) - C:\Windows\System32\audiosrv.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\BFE.DLL (BFE) . (.Microsoft Corporation - Moteur de filtrage de base.) - C:\Windows\System32\BFE.DLL [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\qmgr.dll (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) - C:\Windows\System32\qmgr.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\bisrv.dll (BrokerInfrastructure) . (.Microsoft Corporation - Process State Manager (PSM) Service.) - C:\Windows\System32\psmsrv.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\cdpusersvc.dll (CDPUserSvc) . (.Microsoft Corporation - Composants utilisateur Microsoft (R) CDP.) - C:\Windows\System32\CDPUserSvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: Service pour utilisateur de plateforme d’appareils connecté (CDPUserSvc_39285) . (.Microsoft Corporation - Processus hôte pour les services Windows.) - C:\Windows\System32\svchost.exe =>.Microsoft Windows Publisher®
O23 - Service: C:\Windows\System32\coremessaging.dll (CoreMessagingRegistrar) . (.Microsoft Corporation - Microsoft CoreMessaging Dll.) - C:\Windows\System32\coremessaging.dll =>.Microsoft®
O23 - Service: C:\Windows\System32\cryptsvc.dll (CryptSvc) . (.Microsoft Corporation - Services de chiffrement.) - C:\Windows\System32\cryptsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\das.dll (DeviceAssociationService) . (.Microsoft Corporation - Service d’association de périphérique.) - C:\Windows\System32\das.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\dhcpcore.dll (Dhcp) . (.Microsoft Corporation - Service client DHCP.) - C:\Windows\System32\dhcpcore.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\diagtrack.dll (DiagTrack) . (.Microsoft Corporation - Suivi des diagnostics Microsoft Windows.) - C:\Windows\System32\diagtrack.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\dispbroker.desktop.dll (DispBrokerDesktopSvc) . (.Microsoft Corporation - Courtier d'affichage du bureau.) - C:\Windows\System32\DispBroker.Desktop.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\dnsapi.dll (Dnscache) . (.Microsoft Corporation - Service de résolution du cache DNS.) - C:\Windows\System32\dnsrslvr.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\dosvc.dll (DoSvc) . (.Microsoft Corporation - Processus hôte pour les services Windows.) - C:\Windows\System32\svchost.exe =>.Microsoft Windows Publisher®
O23 - Service: C:\Windows\System32\dusmsvc.dll (DusmSvc) . (.Microsoft Corporation - Service Consommation des données.) - C:\Windows\System32\dusmsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: Service Mise à jour de Microsoft Edge (edgeupdate) (edgeupdate) . (.Microsoft Corporation - Microsoft Edge Update.) - C:\Program Files\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe =>.Microsoft®
O23 - Service: C:\Windows\System32\wevtsvc.dll (EventLog) . (.Microsoft Corporation - Service journal des événements.) - C:\Windows\System32\wevtsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: @comres.dll,-2450 (EventSystem) . (.Microsoft Corporation - COM+.) - C:\Windows\System32\es.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\FntCache.dll (FontCache) . (.Microsoft Corporation - Service de cache de police Windows.) - C:\Windows\System32\FntCache.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: @gpapi.dll,-112 (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) - C:\Windows\System32\gpsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google LLC - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google LLC®
O23 - Service: C:\Windows\System32\iphlpsvc.dll (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) - C:\Windows\System32\iphlpsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\srvsvc.dll (LanmanServer) . (.Microsoft Corporation - DLL du service Serveur.) - C:\Windows\System32\srvsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\wkssvc.dll (LanmanWorkstation) . (.Microsoft Corporation - DLL du service Station de travail.) - C:\Windows\System32\wkssvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\lsm.dll (LSM) . (.Microsoft Corporation - Service du gestionnaire de session locale.) - C:\Windows\System32\lsm.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\moshost.dll (MapsBroker) . (.Microsoft Corporation - Gestionnaire des cartes téléchargées.) - C:\Windows\System32\moshost.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\FirewallAPI.dll (mpssvc) . (.Microsoft Corporation - Service de protection Microsoft.) - C:\Windows\System32\MPSSVC.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: @C:\Program Files\Nero\Update\NASvc.exe,-200 (NAUpdate) . (.Nero AG - NeroUpdate.) - C:\Program Files\Nero\Update\NASvc.exe =>.Nero AG®
O23 - Service: C:\Windows\System32\nlasvc.dll (NlaSvc) . (.Microsoft Corporation - Connaissance des emplacements réseau 2.) - C:\Windows\System32\nlasvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\nsisvc.dll (nsi) . (.Microsoft Corporation - Serveur RPC de l’interface du magasin résea.) - C:\Windows\System32\nsisvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) . (.NVIDIA Corporation - NVIDIA Container.) - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe =>.NVIDIA Corporation®
O23 - Service: C:\Windows\System32\APHostRes.dll (OneSyncSvc) . (.Microsoft Corporation - Accounts Host Service.) - C:\Windows\System32\APHostService.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: Hôte de synchronisation_39285 (OneSyncSvc_39285) . (.Microsoft Corporation - Processus hôte pour les services Windows.) - C:\Windows\System32\svchost.exe =>.Microsoft Windows Publisher®
O23 - Service: C:\Windows\System32\osrss.dll (osrss) . (.Microsoft Corporation - osrss.) - C:\Windows\System32\osrss.dll =>.Microsoft Windows Publisher®
O23 - Service: C:\Windows\System32\umpo.dll (Power) . (.Microsoft Corporation - Service d’alimentation en mode utilisateur.) - C:\Windows\System32\umpo.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\profsvc.dll (ProfSvc) . (.Microsoft Corporation - ProfSvc.) - C:\Windows\System32\profsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\RpcEpMap.dll (RpcEptMapper) . (.Microsoft Corporation - Mappeur de point de terminaison RPC.) - C:\Windows\System32\RpcEpMap.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: @combase.dll,-5010 (RpcSs) . (.Microsoft Corporation - Distributed COM Services.) - C:\Windows\System32\rpcss.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\schedsvc.dll (Schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) - C:\Windows\System32\schedsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\Sens.dll (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) - C:\Windows\System32\Sens.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\shsvcs.dll (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) - C:\Windows\System32\shsvcs.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\spoolsv.exe,-1 (Spooler) . (.Microsoft Corporation - Application sous-système spouleur.) - C:\Windows\System32\spoolsv.exe [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\sppsvc.exe,-101 (sppsvc) . (.Microsoft Corporation - Service de la plateforme de protection logi.) - C:\Windows\System32\sppsvc.exe =>.Microsoft®
O23 - Service: C:\Windows\System32\wiaservc.dll (StiSvc) . (.Microsoft Corporation - Service de périphériques d’images fixes.) - C:\Windows\System32\wiaservc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\sysmain.dll (SysMain) . (.Microsoft Corporation - Hôte de Service SysMain.) - C:\Windows\System32\sysmain.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\SystemEventsBrokerServer.dll (SystemEventsBroker) . (.Microsoft Corporation - Service Broker pour les événements système.) - C:\Windows\System32\SystemEventsBrokerServer.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\themeservice.dll (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) - C:\Windows\System32\themeservice.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\usermgr.dll (UserManager) . (.Microsoft Corporation - UserMgr.) - C:\Windows\System32\usermgr.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\usosvc.dll (UsoSvc) . (.Microsoft Corporation - Mettre à jour la session du service Orchest.) - C:\Windows\System32\usosvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\wcmsvc.dll (Wcmsvc) . (.Microsoft Corporation - DLL du service de gestion des connexions Wi.) - C:\Windows\System32\wcmsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) . (.Microsoft Corporation - Antimalware Service Executable.) - C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2009.7-0\MsMpEng.exe =>.Microsoft®
O23 - Service: C:\Windows\System32\wbem\WMIsvc.dll (winmgmt) . (.Microsoft Corporation - WMI.) - C:\Windows\System32\wbem\WMIsvc.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\wpnservice.dll (WpnService) . (.Microsoft Corporation - Service du système de notifications Push Wi.) - C:\Windows\System32\WpnService.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\WpnUserService.dll (WpnUserService) . (.Microsoft Corporation - Service utilisateur de notifications Push W.) - C:\Windows\System32\WpnUserService.dll [Unsigned] =>.Microsoft Corporation
O23 - Service: Service utilisateur de notifications Push Windows_39285 (WpnUserService_39285) . (.Microsoft Corporation - Processus hôte pour les services Windows.) - C:\Windows\System32\svchost.exe =>.Microsoft Windows Publisher®
O23 - Service: C:\Windows\System32\wscsvc.dll (wscsvc) . (.Microsoft Corporation - Service Centre de sécurité de Windows.) - C:\Windows\System32\wscsvc.dll =>.Microsoft®
O23 - Service: C:\WINDOWS\System32\SearchIndexer.exe,-103 (WSearch) . (.Microsoft Corporation - Indexeur Microsoft Windows Search.) - C:\Windows\System32\SearchIndexer.exe [Unsigned] =>.Microsoft Corporation

---\\ SERVICES NON MICROSOFT (SR=Démarré,SS=Stoppé) (42) - 6s
SR - Boot [19/03/2019] [ 85816] (3ware) . (.LSI.) - C:\Windows\System32\drivers\3ware.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 1038352] (ADP80XX) . (.PMC-Sierra.) - C:\Windows\System32\drivers\adp80xx.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 75280] (amdsata) . (.Advanced Micro Devices.) - C:\Windows\System32\drivers\amdsata.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 215560] (amdsbs) . (.AMD Technologies Inc..) - C:\Windows\System32\drivers\amdsbs.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 23080] (amdxata) . (.Advanced Micro Devices.) - C:\Windows\System32\drivers\amdxata.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 116752] Adaptec SAS/SATA-II RAID S (arcsas) . (.PMC-Sierra, Inc..) - C:\Windows\System32\drivers\arcsas.sys =>.Microsoft Windows®
SR - Demand [19/03/2019] [ 8192] bcmfn2 Service (bcmfn2) . (...) - C:\Windows\System32\drivers\bcmfn2.sys [Unsigned] =>.Broadcom Corporation
SS - Demand [05/10/2020] [ 1123312] Google Chrome Elevation Service (GoogleChromeElevationServi (GoogleChromeElevationService) . (.Google LLC.) - C:\Program Files\Google\Chrome\Application\86.0.4240.75\elevation_service.exe =>.Google LLC®
SR - Demand [19/03/2019] [ 22016] Intel SoC GPIO Controller Driv (GPIO) . (.Intel Corporation.) - C:\Windows\System32\drivers\iaiogpio.sys [Unsigned] =>.Intel Corporation
SR - Auto [11/06/2020] [ 156104] Service Google Update (gupdate) (gupdate) . (.Google LLC.) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google LLC®
SS - Demand [11/06/2020] [ 156104] Service Google Update (gupdatem) (gupdatem) . (.Google LLC.) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google LLC®
SR - Boot [19/03/2019] [ 56848] (HpSAMD) . (.Hewlett-Packard Company.) - C:\Windows\System32\drivers\HpSAMD.sys =>.Microsoft Windows®
SR - Demand [19/03/2019] [ 28672] Intel Serial IO GPIO Controlle (iagpio) . (.Intel(R) Corporation.) - C:\Windows\System32\drivers\iagpio.sys [Unsigned] =>.Intel(R) Corporation
SR - Demand [19/03/2019] [ 73728] Intel(R) Serial IO I2C Host Cont (iai2c) . (.Intel(R) Corporation.) - C:\Windows\System32\drivers\iai2c.sys [Unsigned] =>.Intel(R) Corporation
SR - Demand [19/03/2019] [ 57856] Intel(R) Atom(TM) Proces (iaioi2c) . (.Intel Corporation.) - C:\Windows\System32\drivers\iaioi2c.sys [Unsigned] =>.Intel Corporation
SR - Boot [19/03/2019] [ 693048] Intel Chipset SATA RAI (iaStorAVC) . (.Intel Corporation.) - C:\Windows\System32\drivers\iaStorAVC.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 333624] Intel RAID Controller Wi (iaStorV) . (.Intel Corporation.) - C:\Windows\System32\drivers\iaStorV.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 121144] (ItSas35i) . (.Avago Technologies.) - C:\Windows\System32\drivers\ItSas35i.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 94008] (LSI_SAS) . (.LSI Corporation.) - C:\Windows\System32\drivers\lsi_sas.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 103224] (LSI_SAS2i) . (.LSI Corporation.) - C:\Windows\System32\drivers\lsi_sas2i.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 106296] (LSI_SAS3i) . (.Avago Technologies.) - C:\Windows\System32\drivers\lsi_sas3i.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 69432] (LSI_SSS) . (.LSI Corporation.) - C:\Windows\System32\drivers\lsi_sss.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 52024] (megasas) . (.Avago Technologies.) - C:\Windows\System32\drivers\megasas.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 64312] (megasas2i) . (.Avago Technologies.) - C:\Windows\System32\drivers\MegaSas2i.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 79160] (megasas35i) . (.Avago Technologies.) - C:\Windows\System32\drivers\megasas35i.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 464696] (megasr) . (.LSI Corporation, Inc..) - C:\Windows\System32\drivers\megasr.sys =>.Microsoft Windows®
SR - Demand [13/08/2004] [ 5810] ATK0110 ACPI UTILITY (MTsensor) . (...) - C:\Windows\System32\drivers\ASACPI.sys [Unsigned] =>.ASUSTeK
SR - Boot [19/03/2019] [ 58376] (mvumis) . (.Marvell Semiconductor, Inc..) - C:\Windows\System32\drivers\mvumis.sys =>.Microsoft Windows®
SR - Auto [19/07/2018] [ 794904] @C:\Program Files\Nero\Update\NASvc.exe,-200 (NAUpdate) . (.Nero AG.) - C:\Program Files\Nero\Update\NASvc.exe =>.Nero AG®
SR - Auto [27/10/2017] [ 425408] NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe =>.NVIDIA Corporation®
SR - Demand [09/11/2017] [ 192432] Service for NVIDIA High Definitio (NVHDA) . (.NVIDIA Corporation.) - C:\Windows\System32\drivers\nvhda32v.sys =>.NVIDIA Corporation®
SR - Demand [09/11/2017] [14774384] (nvlddmkm) . (.NVIDIA Corporation.) - C:\Windows\System32\DriverStore\FileRepository\nv_ref_pubwu.inf_x86_f75c0b1bb78ca832\nvlddmkm.sys =>.NVIDIA Corporation®
SR - Boot [19/03/2019] [ 119312] (nvraid) . (.NVIDIA Corporation.) - C:\Windows\System32\drivers\nvraid.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 142352] (nvstor) . (.NVIDIA Corporation.) - C:\Windows\System32\drivers\nvstor.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 51512] (percsas2i) . (.Avago Technologies.) - C:\Windows\System32\drivers\percsas2i.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 59192] (percsas3i) . (.Avago Technologies.) - C:\Windows\System32\drivers\percsas3i.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 41488] (SiSRaid2) . (.Silicon Integrated Systems Corp..) - C:\Windows\System32\drivers\sisraid2.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 79368] (SiSRaid4) . (.Silicon Integrated Systems.) - C:\Windows\System32\drivers\sisraid4.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 27152] (stexstor) . (.Promise Technology, Inc..) - C:\Windows\System32\drivers\stexstor.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 150056] (vsmraid) . (.VIA Technologies Inc.,Ltd.) - C:\Windows\System32\drivers\vsmraid.sys =>.Microsoft Windows®
SR - Boot [19/03/2019] [ 277008] VIA StorX Storage RAID Co (VSTXRAID) . (.VIA Corporation.) - C:\Windows\System32\drivers\VSTXRAID.SYS =>.Microsoft Windows®
SR - Demand [19/03/2019] [ 242688] NDIS6.3 Miniport Driver (yukonw8) . (.Marvell.) - C:\Windows\System32\drivers\yk63x86.sys [Unsigned] =>.Marvell

---\\ TÂCHES PLANIFIÉES EN AUTOMATIQUE (Registre) (10) - 17s
O38 - TASK: {2369D9E4-F674-4575-B3B0-FD053D49EA98}[\CCleaner Update] - (.Piriform Software Ltd - CCleaner emergency updater.) -- C:\Program Files\CCleaner\CCUpdate.exe [686384] =>.Piriform Software Ltd
O38 - TASK: {3061557B-33EA-4E0F-B1D9-12793C1564FF}[\CCleanerSkipUAC] - (.Piriform Software Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe [25492152] =>.Piriform Software Ltd
O38 - TASK: {C2D984B0-4619-4E61-9EC4-87B22CCFE9E2}[\PC Cleaner automatic scan and notifications] - (.PC Helpsoft - PC Cleaner automatic scan and notifications.) -- C:\Program Files\PC Cleaner\PCCNotifications.exe [4131584] =>SUP.Optional.PCHelpSoft
O38 - TASK: {F33F95B7-5E31-40B4-A877-5B424CC46CE6}[\GoogleUpdateTaskMachineUA] - (.Google LLC - Programme d'installation de Google.) -- C:\Program Files\Google\Update\GoogleUpdate.exe [156104] =>.Google LLC
O38 - TASK: {F40A6168-4826-4ACE-9E1A-C955D2C374D1}[\GoogleUpdateTaskMachineCore] - (.Google LLC - Programme d'installation de Google.) -- C:\Program Files\Google\Update\GoogleUpdate.exe [156104] =>.Google LLC
C:\WINDOWS\System32\Tasks\CCleaner Update - (.Piriform Software Ltd.) -- C:\Program Files\CCleaner\CCUpdate.exe [] =>.Piriform Software Ltd
C:\WINDOWS\System32\Tasks\CCleanerSkipUAC - (.Piriform Software Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [$(Arg0)] =>.Piriform Software Ltd
C:\WINDOWS\System32\Tasks\PC Cleaner automatic scan and notifications - (.PC Helpsoft.) -- C:\Program Files\PC Cleaner\PCCNotifications.exe [] =>SUP.Optional.PCHelpSoft
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA - (.Google LLC.) -- C:\Program Files\Google\Update\GoogleUpdate.exe [/ua ./ua] =>.Google LLC
C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore - (.Google LLC.) -- C:\Program Files\Google\Update\GoogleUpdate.exe [/c] =>.Google LLC

---\\ APPLICATIONS LANCÉES AU DÉMARRAGE DU SYSTÈME (9) - 1s
O4 - HKLM\..\Run: [SecurityHealth] . (.Microsoft Corporation - Windows Security notification icon.) -- C:\Windows\System32\SecurityHealthSystray.exe [Unsigned] =>.Microsoft Corporation
O4 - HKCU\..\Run: [OneDrive] . (.Microsoft Corporation - Microsoft OneDrive.) -- C:\Users\marc\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft®
O4 - HKCU\..\Run: [EPLTarget\P0000000000000000] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\System32\spool\drivers\w32x86\3\E_FATIJCE.EXE =>.SEIKO EPSON Corporation®
O4 - HKCU\..\Run: [CCleaner Smart Cleaning] . (.Piriform Software Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe =>.Piriform Software Ltd®
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\System32\OneDriveSetup.exe =>.Microsoft Corporation®
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\System32\OneDriveSetup.exe =>.Microsoft Corporation®
O4 - HKUS\S-1-5-21-2800709370-1097655166-2542114503-1001\..\Run: [OneDrive] . (.Microsoft Corporation - Microsoft OneDrive.) -- C:\Users\marc\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft®
O4 - HKUS\S-1-5-21-2800709370-1097655166-2542114503-1001\..\Run: [EPLTarget\P0000000000000000] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\Windows\System32\spool\drivers\w32x86\3\E_FATIJCE.EXE =>.SEIKO EPSON Corporation®
O4 - HKUS\S-1-5-21-2800709370-1097655166-2542114503-1001\..\Run: [CCleaner Smart Cleaning] . (.Piriform Software Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe =>.Piriform Software Ltd®

---\\ PROCESSUS LANCÉS (24) - 5s
[MD5.1750988BE756AE194E18BF1177CC6EE8] - (.NVIDIA Corporation - NVIDIA Container.) -- C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [425408] [PID.1464] =>.NVIDIA Corporation®
[MD5.1750988BE756AE194E18BF1177CC6EE8] - (.NVIDIA Corporation - NVIDIA Container.) -- C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [425408] [PID.1604] =>.NVIDIA Corporation®
[MD5.3578FEAECCC0EDBA22DF6CF4D22043EF] - (.PC Helpsoft - PC Cleaner automatic scan and notifications.) -- C:\Program Files\PC Cleaner\PCCNotifications.exe [4131584] [PID.3552] {726588307C76C615C7BE4882}. =>SUP.Optional.PCHelpSoft
[MD5.74CDA8051136B80DC3AE4BF86623003C] - (.Google LLC - Google Crash Handler.) -- C:\Program Files\Google\Update\1.3.35.452\GoogleCrashHandler.exe [295368] [PID.1472] =>.Google LLC®
[MD5.68C1EFFC52C9EC6CB0D1249D53B670BF] - (.Google LLC - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [1999344] [PID.4504] =>.Google LLC®
[MD5.68C1EFFC52C9EC6CB0D1249D53B670BF] - (.Google LLC - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [1999344] [PID.4632] =>.Google LLC®
[MD5.68C1EFFC52C9EC6CB0D1249D53B670BF] - (.Google LLC - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [1999344] [PID.1924] =>.Google LLC®
[MD5.68C1EFFC52C9EC6CB0D1249D53B670BF] - (.Google LLC - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [1999344] [PID.348] =>.Google LLC®
[MD5.68C1EFFC52C9EC6CB0D1249D53B670BF] - (.Google LLC - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [1999344] [PID.5144] =>.Google LLC®
[MD5.68C1EFFC52C9EC6CB0D1249D53B670BF] - (.Google LLC - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [1999344] [PID.5588] =>.Google LLC®
[MD5.68C1EFFC52C9EC6CB0D1249D53B670BF] - (.Google LLC - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [1999344] [PID.5960] =>.Google LLC®
[MD5.68C1EFFC52C9EC6CB0D1249D53B670BF] - (.Google LLC - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [1999344] [PID.4304] =>.Google LLC®
[MD5.9ABF28D753B8FA5D51874D6809CEBC6C] - (.Nero AG - NeroUpdate.) -- C:\Program Files\Nero\Update\NASvc.exe [794904] [PID.4188] =>.Nero AG®
[MD5.68C1EFFC52C9EC6CB0D1249D53B670BF] - (.Google LLC - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [1999344] [PID.6024] =>.Google LLC®
[MD5.68C1EFFC52C9EC6CB0D1249D53B670BF] - (.Google LLC - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [1999344] [PID.5496] =>.Google LLC®
[MD5.2C8FF697BF07BC53A43B2E82285FFD4D] - (...) -- C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2020.20090.1002.0_x86__8wekyb3d8bbwe\Microsoft.Photos.exe [484352] [PID.5752] [Unsigned] =>.Microsoft Corporation
[MD5.68C1EFFC52C9EC6CB0D1249D53B670BF] - (.Google LLC - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [1999344] [PID.3064] =>.Google LLC®
[MD5.68C1EFFC52C9EC6CB0D1249D53B670BF] - (.Google LLC - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [1999344] [PID.1656] =>.Google LLC®
[MD5.68C1EFFC52C9EC6CB0D1249D53B670BF] - (.Google LLC - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [1999344] [PID.776] =>.Google LLC®
[MD5.68C1EFFC52C9EC6CB0D1249D53B670BF] - (.Google LLC - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [1999344] [PID.3620] =>.Google LLC®
[MD5.68C1EFFC52C9EC6CB0D1249D53B670BF] - (.Google LLC - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [1999344] [PID.2936] =>.Google LLC®
[MD5.68C1EFFC52C9EC6CB0D1249D53B670BF] - (.Google LLC - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [1999344] [PID.4424] =>.Google LLC®
[MD5.68C1EFFC52C9EC6CB0D1249D53B670BF] - (.Google LLC - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [1999344] [PID.1068] =>.Google LLC®
[MD5.CB7183F790AB5DC53C8CA242727010C9] - (.Nicolas Coolman - ZHPSuite.) -- C:\Users\marc\Downloads\ZHPSuite.exe [3437952] [PID.2196] [Unsigned] =>.Nicolas Coolman

---\\ CHROME, Démarrage, Recherche, Extensions (14) - 2s
G2 - GCE: Preference [marc][User Data\Default\Extensions] [aapocclcgogkmnckokdopfmhonfmgoek] =>.Google Inc. {Slides}
G2 - GCE: Preference [marc][User Data\Default\Extensions] [aohghmighlieiainnegkcijnfilokake] =>.Google Inc. {Docs}
G2 - GCE: Preference [marc][User Data\Default\Extensions] [apdfllckaahabafndbhieahigkjlhalf] http://drive.google.com/ =>.Google Inc. {Drive}
G2 - GCE: Preference [marc][User Data\Default\Extensions] [blpcfgokakmgnkcojhhkbfbldkacnbeo] http://www.youtube.com =>.Youtube {Youtube}
G2 - GCE: Preference [marc][User Data\Default\Extensions] [cnglhdfndkfkpiddcmfioekcjkmojhbj] Voir les codes promos =>.SUP.BrowserExtension
G2 - GCE: Preference [marc][User Data\Default\Extensions] [felcaaldnbdncclmgdcncolpebgiejap] =>.Google Inc. {Sheets}
G2 - GCE: Preference [marc][User Data\Default\Extensions] [ghbmnnjooekpmoecnnnilnnbdlolhkhi] =>.Google Inc. {Docs hors connexion}
G2 - GCE: Preference [marc][User Data\Default\Extensions] [nmmhkkegccagdldgiimedpiccmgmieda] =>.Google Inc. {Wallet}
G2 - GCE: Preference [marc][User Data\Default\Extensions] [pjkljhegncpnkpknbcohdijeoejaedia] http://mail.google.com/ =>.Google Inc. {Gmail}
G2 - GCE: Preference [marc][User Data\Default\Extensions] [pkedcjkdefgpdelpbcmbmeomcjbeemfm] Chrome Media Router =>.Google Inc.
G2 - GCE: Preference [marc][User Data\Default\Local Extension Settings] [cnglhdfndkfkpiddcmfioekcjkmojhbj]
G2 - GCE: Preference [marc][User Data\Default\Local Extension Settings] [ghbmnnjooekpmoecnnnilnnbdlolhkhi] =>.Google Inc. {Docs hors connexion}
G2 - GCE: Preference [marc][User Data\Default\Sync Extension Settings] [edjnbokkihlfclbddajclncbnmgggbie]
G2 - GCE: Preference [marc][User Data\Default\Sync Extension Settings] [pkedcjkdefgpdelpbcmbmeomcjbeemfm] =>.Google Inc. {Chrome Media Router}

---\\ INTERNET EXPLORER,Démarrage,Recherche,URLSearchHook (10) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R3 - URLSearchHook: (no name)[HKCU] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (11.00.18362.1074 (WinBuild.160101.0800)) -- C:\Windows\System32\ieframe.dll =>.Microsoft Corporation
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1 =>Default.Value

---\\ INTERNET EXPLORER, Site de confiance et site sensible (1) - 0s
~ Microsoft Internet Explorer Restricted Site(s) Domains: 0(Good) / 0(Bad)

---\\ MICROSOFT EDGE, Plugin,Favoris,Démarrage,Recherche,Extension (1) - 0s
E2 - GCE: Preference [marc][User Data\Default\Local Extension Settings] [jdiccldimpdaibmpdkjnbmckianbfold] =>.Microsoft Corporation

---\\ INTERNET EXPLORER,Proxy Management (3) - 0s
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 =>.Default.Value
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 =>.Default.Value
R5 - HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet\ManualProxies [] =>.Microsoft

---\\ INTERNET EXPLORER,IniFiles, Autoloading Programs (3) - 0s
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: VMApplet=C:\WINDOWS\system32\SystemPropertiesPerformance.exe (.Microsoft Corporation.) =>.Microsoft Corporation

---\\ ÉTUDE DU FICHIER HOSTS (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (21)

---\\ BROWSER HELPER OBJECT DE NAVIGATEUR (BHO) (1) - 0s
O2 - BHO: IEToEdge BHO - {1FD49718-1D00-4B19-AF5F-070AF6D5D54C} . (.Microsoft Corporation - IEToEdge BHO.) -- C:\Program Files\Microsoft\Edge\Application\86.0.622.38\BHO\ie_to_edge_bho.dll =>.Microsoft®

---\\ RACCOURCIS GLOBAL STARTUP (49) - 8s
O4 - GS\Desktop [defaultuser0]: Assistant Mise à niveau de Windows 10.lnk . (.Microsoft Corporation - Assistant Mise à jour de Windows 10.) C:\Windows10Upgrade\Windows10UpgraderApp.exe /ClientID "Win10Upgrade:VNL:OobeRs1Rs2:{}" =>.Microsoft®
O4 - GS\Desktop [defaultuser0]: Liste films rares Marc 1 (Enregistré automatiquement) - Raccourci.lnk . (...) C:\Users\marc\Documents\Liste films rares Marc 1 (Enregistré automatiquement).doc [Unsigned]
O4 - GS\Desktop [defaultuser0]: Messages 1 DisonsDemain - Raccourci.lnk . (...) C:\Users\marc\Downloads\Messages 1 DisonsDemain.html [Unsigned]
O4 - GS\Desktop [defaultuser0]: Z MOVIE LIST (2) - Raccourci.lnk . (...) C:\Users\marc\Downloads\Z MOVIE LIST (2).docx [Unsigned]
O4 - GS\Desktop [defaultuser0]: ZHPSuite.lnk . (.Nicolas Coolman - ZHPSuite.) C:\Users\marc\AppData\Roaming\ZHP\ZHPSuite.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [defaultuser0]: Google Chrome.lnk . (.Google LLC - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google LLC®
O4 - GS\Quicklaunch [defaultuser0]: Microsoft Edge.lnk . (.Microsoft Corporation - Microsoft Edge.) C:\Program Files\Microsoft\Edge\Application\msedge.exe =>.Microsoft®
O4 - GS\sendTo [defaultuser0]: Destinataire de télécopie.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\System32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [defaultuser0]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [defaultuser0]: Transfert de fichiers Bluetooth.LNK . (.Microsoft Corporation - Transfère les fichiers entre l.) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation
O4 - GS\TaskBar [defaultuser0]: Microsoft Edge.lnk . (.Microsoft Corporation - Microsoft Edge.) C:\Program Files\Microsoft\Edge\Application\msedge.exe --profile-directory=Default =>.Microsoft®
O4 - GS\Programs [defaultuser0]: OneDrive.lnk . (.Microsoft Corporation - Microsoft OneDrive.) C:\Users\marc\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft®
O4 - GS\Desktop [marc]: Assistant Mise à niveau de Windows 10.lnk . (.Microsoft Corporation - Assistant Mise à jour de Windows 10.) C:\Windows10Upgrade\Windows10UpgraderApp.exe /ClientID "Win10Upgrade:VNL:OobeRs1Rs2:{}" =>.Microsoft®
O4 - GS\Desktop [marc]: Liste films rares Marc 1 (Enregistré automatiquement) - Raccourci.lnk . (...) C:\Users\marc\Documents\Liste films rares Marc 1 (Enregistré automatiquement).doc [Unsigned]
O4 - GS\Desktop [marc]: Messages 1 DisonsDemain - Raccourci.lnk . (...) C:\Users\marc\Downloads\Messages 1 DisonsDemain.html [Unsigned]
O4 - GS\Desktop [marc]: Z MOVIE LIST (2) - Raccourci.lnk . (...) C:\Users\marc\Downloads\Z MOVIE LIST (2).docx [Unsigned]
O4 - GS\Desktop [marc]: ZHPSuite.lnk . (.Nicolas Coolman - ZHPSuite.) C:\Users\marc\AppData\Roaming\ZHP\ZHPSuite.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [marc]: Google Chrome.lnk . (.Google LLC - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google LLC®
O4 - GS\Quicklaunch [marc]: Microsoft Edge.lnk . (.Microsoft Corporation - Microsoft Edge.) C:\Program Files\Microsoft\Edge\Application\msedge.exe =>.Microsoft®
O4 - GS\sendTo [marc]: Destinataire de télécopie.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\System32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [marc]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [marc]: Transfert de fichiers Bluetooth.LNK . (.Microsoft Corporation - Transfère les fichiers entre l.) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation
O4 - GS\TaskBar [marc]: Microsoft Edge.lnk . (.Microsoft Corporation - Microsoft Edge.) C:\Program Files\Microsoft\Edge\Application\msedge.exe --profile-directory=Default =>.Microsoft®
O4 - GS\Programs [marc]: OneDrive.lnk . (.Microsoft Corporation - Microsoft OneDrive.) C:\Users\marc\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft®
O4 - GS\CommonDesktop [Public]: CCleaner.lnk . (.Piriform Software Ltd - CCleaner.) C:\Program Files\CCleaner\CCleaner.exe =>.Piriform Software Ltd®
O4 - GS\CommonDesktop [Public]: Express Burn - Logiciel de gravure de disques.lnk . (.NCH Software - Express Burn - Logiciel de gravure de disqu.) C:\Program Files\NCH Software\ExpressBurn\expressburn.exe =>.NCH Software, Inc.®
O4 - GS\CommonDesktop [Public]: Google Chrome.lnk . (.Google LLC - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google LLC®
O4 - GS\CommonDesktop [Public]: Microsoft Edge.lnk . (.Microsoft Corporation - Microsoft Edge.) C:\Program Files\Microsoft\Edge\Application\msedge.exe =>.Microsoft®
O4 - GS\CommonDesktop [Public]: Suite NCH.lnk . (.NCH Software - Express Burn - Logiciel de gravure de disqu.) C:\Program Files\NCH Software\ExpressBurn\expressburn.exe -suite =>.NCH Software, Inc.®
O4 - GS\Programs [Public]: OneDrive.lnk . (.Microsoft Corporation - Microsoft OneDrive.) C:\Users\marc\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft®
O4 - GS\Accessories [Public]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft®
O4 - GS\Accessories [Public]: Notepad.lnk . (.Microsoft Corporation - Bloc-notes.) C:\WINDOWS\system32\notepad.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Math Input Panel.lnk . (.Microsoft Corporation - Math Input Panel Accessory.) C:\Program Files\Common Files\Microsoft Shared\Ink\mip.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Paint.lnk . (.Microsoft Corporation - Paint.) C:\WINDOWS\system32\mspaint.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Quick Assist.lnk . (.Microsoft Corporation - Quick Assist.) C:\WINDOWS\system32\quickassist.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Remote Desktop Connection.lnk . (.Microsoft Corporation - Connexion Bureau à distance.) C:\WINDOWS\system32\mstsc.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Snipping Tool.lnk . (.Microsoft Corporation - Outil Capture d’écran.) C:\WINDOWS\system32\SnippingTool.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Steps Recorder.lnk . (.Microsoft Corporation - Enregistreur d’actions.) C:\WINDOWS\system32\psr.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Windows Fax and Scan.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Wordpad.lnk . (.Microsoft Corporation - Application Windows Wordpad.) C:\Program Files\Windows NT\Accessories\wordpad.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: XPS Viewer.lnk . (.Microsoft Corporation - Visionneuse XPS.) C:\WINDOWS\system32\xpsrchvw.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Character Map.lnk . (.Microsoft Corporation - Table des caractères.) C:\WINDOWS\system32\charmap.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Assistant Mise à niveau de Windows 10.lnk . (.Microsoft Corporation - Assistant Mise à jour de Windows 10.) C:\Windows10Upgrade\Windows10UpgraderApp.exe /ClientID "Win10Upgrade:VNL:OobeRs1Rs2:{}" =>.Microsoft®
O4 - GS\ProgramsCommon [Public]: Express Burn - Logiciel de gravure de disques.lnk . (.NCH Software - Express Burn - Logiciel de gravure de disqu.) C:\Program Files\NCH Software\ExpressBurn\expressburn.exe =>.NCH Software, Inc.®
O4 - GS\ProgramsCommon [Public]: Google Chrome.lnk . (.Google LLC - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google LLC®
O4 - GS\ProgramsCommon [Public]: Immersive Control Panel.lnk . (.Microsoft Corporation - Windows Control Panel.) C:\WINDOWS\System32\Control.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Microsoft Edge.lnk . (.Microsoft Corporation - Microsoft Edge.) C:\Program Files\Microsoft\Edge\Application\msedge.exe =>.Microsoft®
O4 - GS\ProgramsCommon [Public]: Suite NCH.lnk . (.NCH Software - Express Burn - Logiciel de gravure de disqu.) C:\Program Files\NCH Software\ExpressBurn\expressburn.exe -extsuite =>.NCH Software, Inc.®

---\\ MODIFICATION DOMAINE/ADRESSES (DNS) (2) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{34a4e8e3-8475-4a3c-aa2d-5582bb75da19}: DhcpNameServer = 192.168.1.1 =>.Local IP Adress

---\\ PROTOCOLE ADDITIONNEL (21) - 2s
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll =>.Microsoft Corporation®
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: tbauth - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\System32\tbauth.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll [Unsigned] =>.Microsoft Corporation
O18 - Handler: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\System32\tbauth.dll [Unsigned] =>.Microsoft Corporation
O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL =>.Microsoft Corporation®

---\\ REGISTRE AppInit_DLLs et Winlogon Notify (1) - 0s
O20 - Winlogon : UserInit . (.Microsoft Corporation - Application d’ouverture de session Userinit.) - C:\Windows\system32\userinit.exe =>.Microsoft Corporation

---\\ CLÉ DE REGISTRE EXPLORER StartupApproved (2) - 0s
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:SecurityHealth =>.Microsoft Corporation
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:WindowsDefender =>.Microsoft Corporation

---\\ COMPOSANTS ACTIVESETUP INSTALLÉS (ASIC) (6) - 1s
O40 - ASIC: Microsoft Windows Media Player 12.0 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\System32\wmpdxm.dll [Unsigned] =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Utilitaire d’installation du Lecteur Window.) -- C:\Windows\System32\unregmp2.exe [Unsigned] =>.Microsoft Corporation
O40 - ASIC: Web Platform Customizations - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe [Unsigned] =>.Microsoft Corporation
O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\System32\mscories.dll =>.Microsoft Corporation®
O40 - ASIC: Google Chrome - {8A69D345-D564-463c-AFF1-A69D9E530F96} . (.Google LLC - Google Chrome Installer.) -- C:\Program Files\Google\Chrome\Application\86.0.4240.75\Installer\chrmstp.exe =>.Google LLC®
O40 - ASIC: Microsoft Edge - {9459C573-B17A-45AE-9F64-1857B5D58CEE} . (.Microsoft Corporation - Microsoft Edge Installer.) -- C:\Program Files\Microsoft\Edge\Application\86.0.622.38\Installer\setup.exe =>.Microsoft®

---\\ LOGICIELS INSTALLÉS (52) - 17s
O42 - Logiciel: Assistant Mise à niveau de Windows 10 - (.Microsoft Corporation.) [HKLM] -- {D5C69738-B486-402E-85AC-2456D98A64E4} =>.Microsoft®
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner =>.Piriform Software Ltd®
O42 - Logiciel: EPSON XP-600 Series Printer Uninstall - (.SEIKO EPSON Corporation.) [HKLM] -- EPSON XP-600 Series =>.SEIKO EPSON Corporation®
O42 - Logiciel: Express Burn - Logiciel de gravure de disques - (.NCH Software.) [HKLM] -- ExpressBurn =>.NCH Software, Inc.®
O42 - Logiciel: Google Update Helper - (.Google LLC.) [HKLM] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} [Unsigned] =>.Google LLC (Hidden)
O42 - Logiciel: Google Chrome - (.Google LLC.) [HKLM] -- Google Chrome =>.Google LLC®
O42 - Logiciel: Microsoft Edge - (.Microsoft Corporation.) [HKLM] -- Microsoft Edge =>.Microsoft®
O42 - Logiciel: Microsoft Edge Update - (.Microsoft Corporation.) [HKLM] -- Microsoft Edge Update [Unsigned] =>.Microsoft Corporation
O42 - Logiciel: Microsoft Office Access MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office Outlook MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- PROPLUS =>.Microsoft Corporation®
O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-040C-0000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office Publisher MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft OneDrive - (.Microsoft Corporation.) [HKCU] -- OneDriveSetup.exe =>.Microsoft®
O42 - Logiciel: Microsoft Update Health Tools - (.Microsoft Corporation.) [HKLM] -- {2024865E-A71D-47F1-AE69-18171FBE89C7} [Unsigned] =>.Microsoft Corporation
O42 - Logiciel: Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 - (.Microsoft Corporation.) [HKLM] -- {33d1fd90-4274-48a1-9bc1-97e33d9c2d6f} =>.Microsoft®
O42 - Logiciel: Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 - (.Microsoft Corporation.) [HKLM] -- {B175520C-86A2-35A7-8619-86DC379688B9} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 - (.Microsoft Corporation.) [HKLM] -- {BD95A8CD-1D9F-35AD-981A-3E7925026EBB} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual C++ 2017 Redistributable (x86) - 14.14.26429 - (.Microsoft Corporation.) [HKLM] -- {2019b6a0-8533-4a04-ac0e-b2c10bdb9841} =>.Microsoft Corporation®
O42 - Logiciel: Microsoft Visual C++ 2017 x86 Additional Runtime - 14.14.26429 - (.Microsoft Corporation.) [HKLM] -- {6F0267F3-7467-350D-A8C8-33B72E3658D8} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual C++ 2017 x86 Minimum Runtime - 14.14.26429 - (.Microsoft Corporation.) [HKLM] -- {7753EC39-3039-3629-98BE-447C5D869C09} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Nero ControlCenter - (.Nero AG.) [HKLM] -- {ABC88553-8770-4B97-B43E-5A90647A5B63} [Unsigned] =>.Nero AG (Hidden)
O42 - Logiciel: Nero Core - (.Nero AG.) [HKLM] -- {85EFC653-C416-4759-BFD0-0A0095B3FFAC} [Unsigned] =>.Nero AG
O42 - Logiciel: Nero Core Components - (.Nero AG.) [HKLM] -- {BEBEE34D-84A2-4EDD-8BEA-96CC54371263} [Unsigned] =>.Nero AG (Hidden)
O42 - Logiciel: Nero KnowHow PLUS - (.Nero AG.) [HKLM] -- {AACDE618-4162-4074-B01D-67C5E8D07233} [Unsigned] =>.Nero AG (Hidden)
O42 - Logiciel: Nero Launcher - (.Nero AG.) [HKLM] -- {F942C990-9AD6-4607-9C15-1021D8D859A8} [Unsigned] =>.Nero AG (Hidden)
O42 - Logiciel: Nero Update - (.Nero AG.) [HKLM] -- {65BB0407-4CC8-4DC7-952E-3EEFDF05602A} [Unsigned] =>.Nero AG (Hidden)
O42 - Logiciel: NVIDIA Ansel - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel [Unsigned] =>.NVIDIA Corporation (Hidden)
O42 - Logiciel: NVIDIA Display Container - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVDisplayContainer [Unsigned] =>.NVIDIA Corporation (Hidden)
O42 - Logiciel: NVIDIA Display Container LS - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVDisplayContainerLS [Unsigned] =>.NVIDIA Corporation (Hidden)
O42 - Logiciel: NVIDIA Display Session Container - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVDisplaySessionContainer [Unsigned] =>.NVIDIA Corporation (Hidden)
O42 - Logiciel: NVIDIA Display Watchdog Plugin - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVDisplayPluginWatchdog [Unsigned] =>.NVIDIA Corporation (Hidden)
O42 - Logiciel: NVIDIA Install Application - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer [Unsigned] =>.NVIDIA Corporation (Hidden)
O42 - Logiciel: NVIDIA Pilote audio HD : 1.3.35.1 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver [Unsigned] =>.NVIDIA Corporation
O42 - Logiciel: Panneau de configuration NVIDIA 388.13 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel [Unsigned] =>.NVIDIA Corporation (Hidden)
O42 - Logiciel: PC Cleaner v7.2.0.14 - (.PC Helpsoft.) [HKLM] -- PC Cleaner_is1 {726588307C76C615C7BE4882}. =>SUP.Optional.PCHelpSoft
O42 - Logiciel: Update for Windows 10 (KB4023057) - (.Microsoft Corporation.) [HKLM] -- {5F01BF33-E873-4B83-B2CC-E4DEF494073E} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Update for Windows 10 (KB4480730) - (.Microsoft Corporation.) [HKLM] -- {D2CA80BE-F97F-45C7-AEE6-87742793EF70} [Unsigned] =>.Microsoft Corporation
O42 - Logiciel: UpdateAssistant - (.Microsoft Corporation.) [HKLM] -- {A8CB3AA1-4ED7-4E95-BA0A-3DC927739A0E} [Unsigned] =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Vulkan Run Time Libraries 1.0.61.0 - (.LunarG, Inc..) [HKLM] -- VulkanRT1.0.61.0 =>.LunarG, Inc.® (Hidden)

---\\ CLÉ DE REGISTRE SOFTWARE HKCU & HKLM (52) - 17s
HKCU\Software\PC Cleaner =>SUP.Optional.PCHelpSoft
HKLM\SOFTWARE\ASUS =>.ASUS
HKLM\SOFTWARE\Canneverbe Limited =>.Canneverbe Limited
HKLM\SOFTWARE\DefaultUserEnvironment =>.Microsoft Corporation
HKLM\SOFTWARE\EPSON =>.EPSON
HKLM\SOFTWARE\Google =>.Google
HKLM\SOFTWARE\Intel =>.Intel
HKLM\SOFTWARE\Khronos =>.Khronos
HKLM\SOFTWARE\Macromedia =>.Macromedia
HKLM\SOFTWARE\MozillaPlugins =>.MozillaPlugins
HKLM\SOFTWARE\NCH Software =>.NCH Software
HKLM\SOFTWARE\Nero =>.Ahead Corporation
HKLM\SOFTWARE\NVIDIA Corporation =>.nVidia Corporation
HKLM\SOFTWARE\ODBC =>.DB Connectivity Solutions
HKLM\SOFTWARE\OEM =>.OEM
HKLM\SOFTWARE\OpenSSH =>.OpenBSD
HKLM\SOFTWARE\Partner =>.Google Inc.
HKLM\SOFTWARE\Piriform =>.Piriform
HKLM\SOFTWARE\RegisteredApplications =>.Microsoft Corporation
HKLM\SOFTWARE\Windows =>.Microsoft Corporation
HKLM\SOFTWARE\WOW6432Node =>.Microsoft Corporation
HKCU\SOFTWARE\AppDataLow =>.Microsoft Corporation
HKCU\SOFTWARE\AvastAdSDK =>.Avast Software s.r.o
HKCU\SOFTWARE\Canneverbe Limited =>.Canneverbe Limited
HKCU\SOFTWARE\EPSON =>.EPSON
HKCU\SOFTWARE\Google =>.Google
HKCU\SOFTWARE\Licenses =>.Microsoft Corporation
HKCU\SOFTWARE\NCH Software =>.NCH Software
HKCU\SOFTWARE\Netscape =>.Netscape
HKCU\SOFTWARE\NVIDIA Corporation =>.nVidia Corporation
HKCU\SOFTWARE\ODBC =>.DB Connectivity Solutions
HKCU\SOFTWARE\Piriform =>.Piriform
HKCU\SOFTWARE\RegisteredApplications =>.Microsoft Corporation
HKCU\SOFTWARE\ZHP =>.Nicolas Coolman
HKCU\SOFTWARE\AppDataLow\Software =>.Microsoft Corporation
HKU\.DEFAULT\SOFTWARE\NVIDIA Corporation =>.nVidia Corporation
HKU\.DEFAULT\SOFTWARE\Piriform =>.Piriform
HKU\.DEFAULT\SOFTWARE\RegisteredApplications =>.Microsoft Corporation
HKU\S-1-5-21-2800709370-1097655166-2542114503-1001\SOFTWARE\AppDataLow =>.Microsoft Corporation
HKU\S-1-5-21-2800709370-1097655166-2542114503-1001\SOFTWARE\AvastAdSDK =>.Avast Software s.r.o
HKU\S-1-5-21-2800709370-1097655166-2542114503-1001\SOFTWARE\Canneverbe Limited =>.Canneverbe Limited
HKU\S-1-5-21-2800709370-1097655166-2542114503-1001\SOFTWARE\EPSON =>.EPSON
HKU\S-1-5-21-2800709370-1097655166-2542114503-1001\SOFTWARE\Google =>.Google
HKU\S-1-5-21-2800709370-1097655166-2542114503-1001\SOFTWARE\Licenses =>.Microsoft Corporation
HKU\S-1-5-21-2800709370-1097655166-2542114503-1001\SOFTWARE\NCH Software =>.NCH Software
HKU\S-1-5-21-2800709370-1097655166-2542114503-1001\SOFTWARE\Netscape =>.Netscape
HKU\S-1-5-21-2800709370-1097655166-2542114503-1001\SOFTWARE\NVIDIA Corporation =>.nVidia Corporation
HKU\S-1-5-21-2800709370-1097655166-2542114503-1001\SOFTWARE\ODBC =>.DB Connectivity Solutions
HKU\S-1-5-21-2800709370-1097655166-2542114503-1001\SOFTWARE\PC Cleaner =>SUP.Optional.PCHelpSoft
HKU\S-1-5-21-2800709370-1097655166-2542114503-1001\SOFTWARE\Piriform =>.Piriform
HKU\S-1-5-21-2800709370-1097655166-2542114503-1001\SOFTWARE\RegisteredApplications =>.Microsoft Corporation
HKU\S-1-5-21-2800709370-1097655166-2542114503-1001\SOFTWARE\ZHP =>.Nicolas Coolman

---\\ PACKAGES (2) - 1s
C:\Program Files\WindowsApps\king.com.CandyCrushSodaSaga_1.178.200.0_x86__kgqvnymyfvs32 - (.king.com.) [03/10/2020][Candy Crush Soda Saga] =>king.com
C:\Program Files\WindowsApps\WinZipComputing.WinZipUniversal_1.5.13516.0_x86__3ykzqggjzj4z0 - (.WinZip Computing.) [11/06/2020][WinZip Universal] =>WinZip Computing

---\\ CONTENU DES DOSSIERS PROGRAMMES (4781) - 939s
O43 - CFD: 13/10/2020 - [] D -- C:\Program Files\CCleaner =>.Piriform Ltd
O43 - CFD: 10/10/2020 - [] D -- C:\Program Files\Common Files =>.Microsoft Corporation
O43 - CFD: 11/06/2020 - [] AD -- C:\Program Files\CUAssistant =>.Microsoft®
O43 - CFD: 11/06/2020 - [0] SHD -- C:\Program Files\Fichiers communs =>.Microsoft Corporation
O43 - CFD: 11/06/2020 - [] D -- C:\Program Files\Google =>.Google LLC®
O43 - CFD: 11/09/2020 - [] D -- C:\Program Files\Internet Explorer =>.Microsoft Corporation
O43 - CFD: 14/07/2020 - [] D -- C:\Program Files\Microsoft =>.Microsoft Corporation
O43 - CFD: 22/06/2020 - [] D -- C:\Program Files\Microsoft Office =>.Microsoft Corporation
O43 - CFD: 01/10/2020 - [] D -- C:\Program Files\Microsoft Update Health Tools =>.Microsoft Corporation
O43 - CFD: 22/06/2020 - [] D -- C:\Program Files\Microsoft Visual Studio =>.Microsoft Corporation
O43 - CFD: 22/06/2020 - [] D -- C:\Program Files\Microsoft Works =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [] D -- C:\Program Files\Microsoft.NET =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [0] D -- C:\Program Files\ModifiableWindowsApps =>.Microsoft Corporation
O43 - CFD: 22/06/2020 - [] D -- C:\Program Files\MSBuild =>.Microsoft Corporation
O43 - CFD: 10/10/2020 - [] D -- C:\Program Files\NCH Software =>.NCH Software
O43 - CFD: 10/10/2020 - [] D -- C:\Program Files\Nero =>.Ahead Corporation
O43 - CFD: 13/06/2020 - [] D -- C:\Program Files\NVIDIA Corporation =>.nVidia Corporation
O43 - CFD: 13/10/2020 - [] D -- C:\Program Files\PC Cleaner {726588307C76C615C7BE4882}. =>SUP.Optional.PCHelpSoft
O43 - CFD: 13/06/2020 - [] AD -- C:\Program Files\rempl =>.Microsoft Corporation
O43 - CFD: 11/06/2020 - [0] HD -- C:\Program Files\Uninstall Information =>.Microsoft Corporation
O43 - CFD: 13/06/2020 - [] D -- C:\Program Files\UNP =>.Microsoft Corporation
O43 - CFD: 11/06/2020 - [] D -- C:\Program Files\VulkanRT =>.LunarG, Inc
O43 - CFD: 13/06/2020 - [] D -- C:\Program Files\Windows Defender =>.Microsoft Corporation
O43 - CFD: 20/07/2020 - [] D -- C:\Program Files\Windows Mail =>.Microsoft Corporation
O43 - CFD: 13/06/2020 - [] D -- C:\Program Files\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [] D -- C:\Program Files\Windows Multimedia Platform =>.Microsoft Corporation
O43 - CFD: 13/06/2020 - [] D -- C:\Program Files\Windows NT =>.Microsoft Corporation
O43 - CFD: 13/06/2020 - [] D -- C:\Program Files\Windows Photo Viewer =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [] D -- C:\Program Files\Windows Portable Devices =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [] D -- C:\Program Files\Windows Security =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [] SHD -- C:\Program Files\Windows Sidebar =>.Microsoft Corporation
O43 - CFD: 13/10/2020 - [] HD -- C:\Program Files\WindowsApps =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [] D -- C:\Program Files\WindowsPowerShell =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility =>.Microsoft Corporation
O43 - CFD: 11/09/2020 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation
O43 - CFD: 12/08/2020 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools
O43 - CFD: 13/10/2020 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner =>.Piriform Ltd
O43 - CFD: 13/06/2020 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON =>.EPSON
O43 - CFD: 19/03/2019 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation
O43 - CFD: 22/06/2020 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office =>.Microsoft Corporation
O43 - CFD: 10/10/2020 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero =>.Ahead Corporation
O43 - CFD: 13/06/2020 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation =>.nVidia Corporation
O43 - CFD: 13/10/2020 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Cleaner =>SUP.Optional.PCHelpSoft
O43 - CFD: 19/03/2019 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp =>.Microsoft Corporation
O43 - CFD: 13/06/2020 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools =>.Microsoft Corporation
O43 - CFD: 13/06/2020 - [0] SHD -- C:\ProgramData\Application Data =>.Microsoft Corporation
O43 - CFD: 11/06/2020 - [0] SHD -- C:\ProgramData\Bureau =>.Microsoft Corporation
O43 - CFD: 16/07/2016 - [0] D -- C:\ProgramData\Comms =>.Microsoft Corporation
O43 - CFD: 13/06/2020 - [0] SHD -- C:\ProgramData\Documents =>.Microsoft Corporation
O43 - CFD: 14/06/2020 - [] D -- C:\ProgramData\EPSON =>.EPSON
O43 - CFD: 11/06/2020 - [0] SHD -- C:\ProgramData\Menu Démarrer =>.Microsoft Corporation
O43 - CFD: 14/07/2020 - [] SD -- C:\ProgramData\Microsoft =>.Microsoft Corporation
O43 - CFD: 22/06/2020 - [] D -- C:\ProgramData\Microsoft Help =>.Microsoft Corporation
O43 - CFD: 13/06/2020 - [] D -- C:\ProgramData\Microsoft OneDrive =>.Microsoft Corporation
O43 - CFD: 11/06/2020 - [0] SHD -- C:\ProgramData\Modèles =>.Microsoft Corporation
O43 - CFD: 10/10/2020 - [] D -- C:\ProgramData\NCH Software =>.NCH Software
O43 - CFD: 11/10/2020 - [] D -- C:\ProgramData\Nero =>.Ahead Corporation
O43 - CFD: 14/10/2020 - [] D -- C:\ProgramData\NVIDIA =>.nVidia Corporation
O43 - CFD: 13/06/2020 - [] D -- C:\ProgramData\NVIDIA Corporation =>.nVidia Corporation
O43 - CFD: 10/10/2020 - [] D -- C:\ProgramData\Package Cache =>.Microsoft Corporation
O43 - CFD: 20/07/2020 - [] D -- C:\ProgramData\Packages =>.Microsoft Corporation
O43 - CFD: 13/10/2020 - [] D -- C:\ProgramData\PC Cleaner
O43 - CFD: 14/10/2020 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [0] D -- C:\ProgramData\SoftwareDistribution =>.Microsoft Corporation
O43 - CFD: 13/06/2020 - [0] D -- C:\ProgramData\ssh
O43 - CFD: 13/06/2020 - [] D -- C:\ProgramData\USOPrivate =>.Microsoft Corporation
O43 - CFD: 13/06/2020 - [] D -- C:\ProgramData\USOShared =>.Microsoft Corporation
O43 - CFD: 22/06/2020 - [] D -- C:\Program Files\Common Files\DESIGNER =>.Designer
O43 - CFD: 12/06/2020 - [] D -- C:\Program Files\Common Files\EPSON =>.EPSON
O43 - CFD: 22/06/2020 - [] D -- C:\Program Files\Common Files\Microsoft Shared =>.Microsoft Corporation
O43 - CFD: 10/10/2020 - [] D -- C:\Program Files\Common Files\Nero =>.Ahead Corporation
O43 - CFD: 19/03/2019 - [] D -- C:\Program Files\Common Files\Services =>.Microsoft Corporation
O43 - CFD: 20/07/2020 - [] D -- C:\Program Files\Common Files\System =>.Microsoft Corporation
O43 - CFD: 11/06/2020 - [] D -- C:\Users\marc\AppData\Roaming\Adobe =>.Adobe
O43 - CFD: 09/10/2020 - [] D -- C:\Users\marc\AppData\Roaming\Burnaware =>.BurnAware
O43 - CFD: 09/10/2020 - [] D -- C:\Users\marc\AppData\Roaming\Canneverbe Limited =>.Canneverbe Limited
O43 - CFD: 27/07/2020 - [] SD -- C:\Users\marc\AppData\Roaming\Microsoft =>.Microsoft Corporation
O43 - CFD: 10/10/2020 - [] D -- C:\Users\marc\AppData\Roaming\Nero =>.Ahead Corporation
O43 - CFD: 13/10/2020 - [] D -- C:\Users\marc\AppData\Roaming\PC Cleaner
O43 - CFD: 16/07/2020 - [] D -- C:\Users\marc\AppData\Roaming\Skype =>.Skype
O43 - CFD: 14/10/2020 - [] D -- C:\Users\marc\AppData\Roaming\ZHP =>.Nicolas Coolman
O43 - CFD: 13/06/2020 - [0] SHD -- C:\Users\marc\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 11/06/2020 - [] D -- C:\Users\marc\AppData\Local\Comms =>.Microsoft Corporation
O43 - CFD: 13/06/2020 - [] D -- C:\Users\marc\AppData\Local\ConnectedDevicesPlatform =>.Microsoft Corporation
O43 - CFD: 13/10/2020 - [] D -- C:\Users\marc\AppData\Local\D3DSCache =>.Legitimate
O43 - CFD: 11/06/2020 - [] D -- C:\Users\marc\AppData\Local\Google =>.Google
O43 - CFD: 13/06/2020 - [0] SHD -- C:\Users\marc\AppData\Local\Historique =>.Microsoft Corporation
O43 - CFD: 11/10/2020 - [] D -- C:\Users\marc\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 22/06/2020 - [0] D -- C:\Users\marc\AppData\Local\Microsoft Help =>.Microsoft Corporation
O43 - CFD: 13/06/2020 - [] D -- C:\Users\marc\AppData\Local\MicrosoftEdge =>.Microsoft Corporation
O43 - CFD: 11/06/2020 - [] D -- C:\Users\marc\AppData\Local\OneDrive =>.Microsoft Corporation
O43 - CFD: 18/07/2020 - [] D -- C:\Users\marc\AppData\Local\Packages =>.Microsoft Corporation
O43 - CFD: 18/07/2020 - [] D -- C:\Users\marc\AppData\Local\PlaceholderTileLogoFolder =>.Microsoft Corporation
O43 - CFD: 09/10/2020 - [] D -- C:\Users\marc\AppData\Local\Programs =>.Microsoft Corporation
O43 - CFD: 11/06/2020 - [] D -- C:\Users\marc\AppData\Local\Publishers =>.Microsoft Corporation
O43 - CFD: 14/10/2020 - [] D -- C:\Users\marc\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 13/06/2020 - [0] SHD -- C:\Users\marc\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 11/06/2020 - [] D -- C:\Users\marc\AppData\Local\TileDataLayer =>.Microsoft Corporation
O43 - CFD: 11/06/2020 - [0] D -- C:\Users\marc\AppData\Local\VirtualStore =>.Microsoft Corporation
O43 - CFD: 14/10/2020 - [] D -- C:\Users\marc\AppData\Local\ZHP =>.Nicolas Coolman
O43 - CFD: 09/10/2020 - [0] D -- C:\Users\marc\AppData\Local\Programs\Common =>.Microsoft Corporation
O43 - CFD: 27/07/2020 - [] SD -- C:\Users\marc\AppData\LocalLow\Microsoft =>.Microsoft Corporation
O43 - CFD: 13/06/2020 - [] RD -- C:\Users\marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility =>.Microsoft Corporation
O43 - CFD: 13/06/2020 - [] RD -- C:\Users\marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation
O43 - CFD: 12/09/2020 - [] RD -- C:\Users\marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools
O43 - CFD: 19/03/2019 - [] D -- C:\Users\marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation
O43 - CFD: 12/09/2020 - [] RD -- C:\Users\marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [] RD -- C:\Users\marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [] RD -- C:\Users\marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell =>.Microsoft Corporation
O43 - CFD: 13/06/2020 - [0] SHD -- C:\Users\Default\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 11/06/2020 - [0] SHD -- C:\Users\Default\AppData\Local\Historique =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [] D -- C:\Users\Default\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [0] D -- C:\Users\Default\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 13/06/2020 - [0] SHD -- C:\Users\Default\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 13/06/2020 - [0] SHD -- C:\Users\Default User\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 11/06/2020 - [0] SHD -- C:\Users\Default User\AppData\Local\Historique =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [] D -- C:\Users\Default User\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 19/03/2019 - [0] D -- C:\Users\Default User\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 13/06/2020 - [0] SHD -- C:\Users\Default User\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 17/07/2020 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\D3DSCache =>.Legitimate
O43 - CFD: 14/06/2020 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\DataSharing =>.DataSharing
O43 - CFD: 13/06/2020 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 17/09/2020 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\Paakages
O43 - CFD: 05/10/2020 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\Packages =>.Microsoft Corporation
O43 - CFD: 14/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1048-1044-2a706e.tmp
O43 - CFD: 14/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1048-1044-2a7090.tmp
O43 - CFD: 14/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1048-1044-2a70a1.tmp
O43 - CFD: 14/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1048-1044-2a70a3.tmp
O43 - CFD: 14/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1048-1044-2a70b5.tmp
O43 - CFD: 14/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1048-1044-2a70c6.tmp
O43 - CFD: 14/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1048-1044-2a70d8.tmp
O43 - CFD: 14/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1048-1044-2a70ea.tmp
O43 - CFD: 14/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1048-1044-2a70fb.tmp
O43 - CFD: 14/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1048-1044-2a710d.tmp
O43 - CFD: 14/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1048-1044-2a711f.tmp
O43 - CFD: 14/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1048-1044-2a7130.tmp
O43 - CFD: 14/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1048-1044-2a7132.tmp
O43 - CFD: 14/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1048-1044-2a7144.tmp
O43 - CFD: 14/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1048-1044-2a7155.tmp
O43 - CFD: 14/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1048-1044-2a7167.tmp
O43 - CFD: 14/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1048-1044-2a7179.tmp
O43 - CFD: 14/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1048-1044-2a718a.tmp
O43 - CFD: 14/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1048-1044-2a719c.tmp
O43 - CFD: 06/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1048-18a0-43664f6.tmp
O43 - CFD: 06/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1048-18a0-4366517.tmp
O43 - CFD: 06/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1048-18a0-4366529.tmp
O43 - CFD: 06/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1048-18a0-436653a.tmp
O43 - CFD: 06/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1048-18a0-436656b.tmp
O43 - CFD: 06/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1048-18a0-436658c.tmp
O43 - CFD: 06/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1048-18a0-436659e.tmp
O43 - CFD: 06/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1048-18a0-43665bf.tmp
O43 - CFD: 06/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1048-18a0-43665d1.tmp
O43 - CFD: 06/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1048-18a0-43665e2.tmp
O43 - CFD: 06/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1048-18a0-43665f4.tmp
O43 - CFD: 06/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1048-18a0-4366615.tmp
O43 - CFD: 06/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1048-18a0-4366637.tmp
O43 - CFD: 06/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1048-18a0-4366648.tmp
O43 - CFD: 06/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1048-18a0-4366669.tmp
O43 - CFD: 06/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1048-18a0-436667b.tmp
O43 - CFD: 06/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1048-18a0-43666ac.tmp
O43 - CFD: 06/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1048-18a0-43666ec.tmp
O43 - CFD: 06/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1048-18a0-436670e.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1050-1824-19b3a39.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1050-1824-19b3a5a.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1050-1824-19b3a6b.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1050-1824-19b3a7d.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1050-1824-19b3a8f.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1050-1824-19b3aa0.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1050-1824-19b3aa2.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1050-1824-19b3ac4.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1050-1824-19b3ad5.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1050-1824-19b3ae7.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1050-1824-19b3af8.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1050-1824-19b3b0a.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1050-1824-19b3b1c.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1050-1824-19b3b2d.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1050-1824-19b3b3f.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1050-1824-19b3b41.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1050-1824-19b3b91.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1050-1824-19b3ba3.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1050-1824-19b3bc4.tmp
O43 - CFD: 09/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1054-1178-9e54d23.tmp
O43 - CFD: 09/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1054-1178-9e54d44.tmp
O43 - CFD: 09/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1054-1178-9e54d46.tmp
O43 - CFD: 09/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1054-1178-9e54d58.tmp
O43 - CFD: 09/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1054-1178-9e54d69.tmp
O43 - CFD: 09/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1054-1178-9e54d6b.tmp
O43 - CFD: 09/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1054-1178-9e54d7d.tmp
O43 - CFD: 09/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1054-1178-9e54d8f.tmp
O43 - CFD: 09/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1054-1178-9e54da0.tmp
O43 - CFD: 09/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1054-1178-9e54db2.tmp
O43 - CFD: 09/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1054-1178-9e54dc4.tmp
O43 - CFD: 09/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1054-1178-9e54dc6.tmp
O43 - CFD: 09/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1054-1178-9e54dd7.tmp
O43 - CFD: 09/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1054-1178-9e54de9.tmp
O43 - CFD: 09/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1054-1178-9e54deb.tmp
O43 - CFD: 09/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1054-1178-9e54dfc.tmp
O43 - CFD: 09/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1054-1178-9e54e0e.tmp
O43 - CFD: 09/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1054-1178-9e54e10.tmp
O43 - CFD: 09/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1054-1178-9e54e22.tmp
O43 - CFD: 31/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1098-1068-3143fad.tmp
O43 - CFD: 31/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1098-1068-3143fbf.tmp
O43 - CFD: 31/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1098-1068-3143fe0.tmp
O43 - CFD: 31/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1098-1068-3143ff2.tmp
O43 - CFD: 31/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1098-1068-3144003.tmp
O43 - CFD: 31/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1098-1068-3144015.tmp
O43 - CFD: 31/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1098-1068-3144027.tmp
O43 - CFD: 31/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1098-1068-3144029.tmp
O43 - CFD: 31/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1098-1068-314403a.tmp
O43 - CFD: 31/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1098-1068-314404c.tmp
O43 - CFD: 31/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1098-1068-314404e.tmp
O43 - CFD: 31/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1098-1068-3144060.tmp
O43 - CFD: 31/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1098-1068-3144071.tmp
O43 - CFD: 31/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1098-1068-3144073.tmp
O43 - CFD: 31/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1098-1068-3144085.tmp
O43 - CFD: 31/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1098-1068-3144096.tmp
O43 - CFD: 31/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1098-1068-3144098.tmp
O43 - CFD: 31/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1098-1068-31440aa.tmp
O43 - CFD: 31/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1098-1068-31440bc.tmp
O43 - CFD: 04/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10a4-10c-2818cde.tmp
O43 - CFD: 04/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10a4-10c-2818cff.tmp
O43 - CFD: 04/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10a4-10c-2818d21.tmp
O43 - CFD: 04/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10a4-10c-2818d42.tmp
O43 - CFD: 04/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10a4-10c-2818d53.tmp
O43 - CFD: 04/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10a4-10c-2818d75.tmp
O43 - CFD: 04/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10a4-10c-2818d96.tmp
O43 - CFD: 04/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10a4-10c-2818da8.tmp
O43 - CFD: 04/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10a4-10c-2818dc9.tmp
O43 - CFD: 04/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10a4-10c-2818dda.tmp
O43 - CFD: 04/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10a4-10c-2818dfc.tmp
O43 - CFD: 04/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10a4-10c-2818e1d.tmp
O43 - CFD: 04/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10a4-10c-2818e3e.tmp
O43 - CFD: 04/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10a4-10c-2818e50.tmp
O43 - CFD: 04/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10a4-10c-2818e71.tmp
O43 - CFD: 04/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10a4-10c-2818e83.tmp
O43 - CFD: 04/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10a4-10c-2818ea4.tmp
O43 - CFD: 04/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10a4-10c-2818eb6.tmp
O43 - CFD: 04/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10a4-10c-2818ed7.tmp
O43 - CFD: 25/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10f8-1674-572d6d9.tmp
O43 - CFD: 25/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10f8-1674-572d70a.tmp
O43 - CFD: 25/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10f8-1674-572d70c.tmp
O43 - CFD: 25/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10f8-1674-572d70e.tmp
O43 - CFD: 25/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10f8-1674-572d71f.tmp
O43 - CFD: 25/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10f8-1674-572d731.tmp
O43 - CFD: 25/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10f8-1674-572d743.tmp
O43 - CFD: 25/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10f8-1674-572d754.tmp
O43 - CFD: 25/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10f8-1674-572d766.tmp
O43 - CFD: 25/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10f8-1674-572d768.tmp
O43 - CFD: 25/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10f8-1674-572d789.tmp
O43 - CFD: 25/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10f8-1674-572d79b.tmp
O43 - CFD: 25/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10f8-1674-572d79d.tmp
O43 - CFD: 25/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10f8-1674-572d7ae.tmp
O43 - CFD: 25/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10f8-1674-572d7c0.tmp
O43 - CFD: 25/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10f8-1674-572d7c2.tmp
O43 - CFD: 25/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10f8-1674-572d7d4.tmp
O43 - CFD: 25/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10f8-1674-572d7e5.tmp
O43 - CFD: 25/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10f8-1674-572d7f7.tmp
O43 - CFD: 17/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10f8-5a4-3baa7f5.tmp
O43 - CFD: 17/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10f8-5a4-3baa816.tmp
O43 - CFD: 17/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10f8-5a4-3baa828.tmp
O43 - CFD: 17/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10f8-5a4-3baa83a.tmp
O43 - CFD: 17/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10f8-5a4-3baa84b.tmp
O43 - CFD: 17/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10f8-5a4-3baa84d.tmp
O43 - CFD: 17/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10f8-5a4-3baa85f.tmp
O43 - CFD: 17/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10f8-5a4-3baa871.tmp
O43 - CFD: 17/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10f8-5a4-3baa882.tmp
O43 - CFD: 17/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10f8-5a4-3baa884.tmp
O43 - CFD: 17/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10f8-5a4-3baa896.tmp
O43 - CFD: 17/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10f8-5a4-3baa8a7.tmp
O43 - CFD: 17/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10f8-5a4-3baa8a9.tmp
O43 - CFD: 17/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10f8-5a4-3baa8bb.tmp
O43 - CFD: 17/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10f8-5a4-3baa8cd.tmp
O43 - CFD: 17/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10f8-5a4-3baa8cf.tmp
O43 - CFD: 17/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10f8-5a4-3baa8e0.tmp
O43 - CFD: 17/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10f8-5a4-3baa8f2.tmp
O43 - CFD: 17/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-10f8-5a4-3baa8f4.tmp
O43 - CFD: 17/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-111c-9dc-55bab73.tmp
O43 - CFD: 17/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-111c-9dc-55baba4.tmp
O43 - CFD: 17/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-111c-9dc-55baba6.tmp
O43 - CFD: 17/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-111c-9dc-55babb8.tmp
O43 - CFD: 17/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-111c-9dc-55babca.tmp
O43 - CFD: 17/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-111c-9dc-55babdb.tmp
O43 - CFD: 17/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-111c-9dc-55babed.tmp
O43 - CFD: 17/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-111c-9dc-55babfe.tmp
O43 - CFD: 17/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-111c-9dc-55bac10.tmp
O43 - CFD: 17/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-111c-9dc-55bac12.tmp
O43 - CFD: 17/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-111c-9dc-55bac24.tmp
O43 - CFD: 17/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-111c-9dc-55bac35.tmp
O43 - CFD: 17/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-111c-9dc-55bac57.tmp
O43 - CFD: 17/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-111c-9dc-55bac59.tmp
O43 - CFD: 17/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-111c-9dc-55bac6a.tmp
O43 - CFD: 17/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-111c-9dc-55bac7c.tmp
O43 - CFD: 17/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-111c-9dc-55bac8d.tmp
O43 - CFD: 17/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-111c-9dc-55bacaf.tmp
O43 - CFD: 17/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-111c-9dc-55bacc0.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1120-b0-aabf41e.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1120-b0-aabf43f.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1120-b0-aabf451.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1120-b0-aabf462.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1120-b0-aabf474.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1120-b0-aabf476.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1120-b0-aabf488.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1120-b0-aabf4a9.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1120-b0-aabf4ca.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1120-b0-aabf4cc.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1120-b0-aabf4ed.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1120-b0-aabf50f.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1120-b0-aabf530.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1120-b0-aabf551.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1120-b0-aabf572.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1120-b0-aabf584.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1120-b0-aabf596.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1120-b0-aabf5b7.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1120-b0-aabf5c9.tmp
O43 - CFD: 21/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11b0-18e0-39be76.tmp
O43 - CFD: 21/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11b0-18e0-39be97.tmp
O43 - CFD: 21/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11b0-18e0-39beb8.tmp
O43 - CFD: 21/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11b0-18e0-39beca.tmp
O43 - CFD: 21/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11b0-18e0-39beeb.tmp
O43 - CFD: 21/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11b0-18e0-39bf0d.tmp
O43 - CFD: 21/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11b0-18e0-39bf2e.tmp
O43 - CFD: 21/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11b0-18e0-39bf4f.tmp
O43 - CFD: 21/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11b0-18e0-39bf61.tmp
O43 - CFD: 21/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11b0-18e0-39bf82.tmp
O43 - CFD: 21/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11b0-18e0-39bfe2.tmp
O43 - CFD: 21/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11b0-18e0-39bff3.tmp
O43 - CFD: 21/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11b0-18e0-39c015.tmp
O43 - CFD: 21/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11b0-18e0-39c036.tmp
O43 - CFD: 21/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11b0-18e0-39c057.tmp
O43 - CFD: 21/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11b0-18e0-39c078.tmp
O43 - CFD: 21/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11b0-18e0-39c08a.tmp
O43 - CFD: 21/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11b0-18e0-39c0ab.tmp
O43 - CFD: 21/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11b0-18e0-39c0bd.tmp
O43 - CFD: 25/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11d8-510-42fae65.tmp
O43 - CFD: 25/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11d8-510-42fae95.tmp
O43 - CFD: 25/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11d8-510-42fae97.tmp
O43 - CFD: 25/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11d8-510-42faea9.tmp
O43 - CFD: 25/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11d8-510-42faebb.tmp
O43 - CFD: 25/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11d8-510-42faebd.tmp
O43 - CFD: 25/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11d8-510-42faece.tmp
O43 - CFD: 25/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11d8-510-42faee0.tmp
O43 - CFD: 25/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11d8-510-42faf01.tmp
O43 - CFD: 25/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11d8-510-42faf03.tmp
O43 - CFD: 25/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11d8-510-42faf24.tmp
O43 - CFD: 25/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11d8-510-42faf36.tmp
O43 - CFD: 25/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11d8-510-42faf38.tmp
O43 - CFD: 25/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11d8-510-42faf4a.tmp
O43 - CFD: 25/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11d8-510-42faf5b.tmp
O43 - CFD: 25/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11d8-510-42faf5d.tmp
O43 - CFD: 25/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11d8-510-42faf6f.tmp
O43 - CFD: 25/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11d8-510-42faf81.tmp
O43 - CFD: 25/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11d8-510-42faf83.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11e4-178-149511b4.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11e4-178-149511c6.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11e4-178-149511d7.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11e4-178-149511e9.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11e4-178-149511eb.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11e4-178-149511fd.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11e4-178-1495120e.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11e4-178-14951210.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11e4-178-14951222.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11e4-178-14951234.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11e4-178-14951236.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11e4-178-14951247.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11e4-178-14951249.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11e4-178-1495125b.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11e4-178-1495126c.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11e4-178-1495126e.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11e4-178-14951280.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11e4-178-14951292.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11e4-178-14951294.tmp
O43 - CFD: 20/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11fc-1750-52d443d.tmp
O43 - CFD: 20/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11fc-1750-52d445f.tmp
O43 - CFD: 20/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11fc-1750-52d4470.tmp
O43 - CFD: 20/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11fc-1750-52d4482.tmp
O43 - CFD: 20/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11fc-1750-52d4493.tmp
O43 - CFD: 20/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11fc-1750-52d44a5.tmp
O43 - CFD: 20/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11fc-1750-52d44a7.tmp
O43 - CFD: 20/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11fc-1750-52d44b9.tmp
O43 - CFD: 20/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11fc-1750-52d44ca.tmp
O43 - CFD: 20/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11fc-1750-52d44cc.tmp
O43 - CFD: 20/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11fc-1750-52d44de.tmp
O43 - CFD: 20/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11fc-1750-52d44f0.tmp
O43 - CFD: 20/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11fc-1750-52d44f2.tmp
O43 - CFD: 20/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11fc-1750-52d4503.tmp
O43 - CFD: 20/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11fc-1750-52d4515.tmp
O43 - CFD: 20/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11fc-1750-52d4517.tmp
O43 - CFD: 20/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11fc-1750-52d4528.tmp
O43 - CFD: 20/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11fc-1750-52d452a.tmp
O43 - CFD: 20/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-11fc-1750-52d453c.tmp
O43 - CFD: 02/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-120-8f4-2d92648.tmp
O43 - CFD: 02/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-120-8f4-2d9266a.tmp
O43 - CFD: 02/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-120-8f4-2d9266c.tmp
O43 - CFD: 02/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-120-8f4-2d9267d.tmp
O43 - CFD: 02/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-120-8f4-2d9268f.tmp
O43 - CFD: 02/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-120-8f4-2d92691.tmp
O43 - CFD: 02/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-120-8f4-2d926a2.tmp
O43 - CFD: 02/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-120-8f4-2d926b4.tmp
O43 - CFD: 02/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-120-8f4-2d926b6.tmp
O43 - CFD: 02/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-120-8f4-2d926c8.tmp
O43 - CFD: 02/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-120-8f4-2d926d9.tmp
O43 - CFD: 02/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-120-8f4-2d926db.tmp
O43 - CFD: 02/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-120-8f4-2d926ed.tmp
O43 - CFD: 02/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-120-8f4-2d926ff.tmp
O43 - CFD: 02/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-120-8f4-2d92701.tmp
O43 - CFD: 02/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-120-8f4-2d92712.tmp
O43 - CFD: 02/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-120-8f4-2d92724.tmp
O43 - CFD: 02/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-120-8f4-2d92726.tmp
O43 - CFD: 02/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-120-8f4-2d92747.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1210-1a7c-26f3f71.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1210-1a7c-26f3f73.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1210-1a7c-26f3f85.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1210-1a7c-26f3f97.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1210-1a7c-26f3f99.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1210-1a7c-26f3fba.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1210-1a7c-26f3fbc.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1210-1a7c-26f3fcd.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1210-1a7c-26f3fdf.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1210-1a7c-26f3fe1.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1210-1a7c-26f3ff3.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1210-1a7c-26f4004.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1210-1a7c-26f4016.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1210-1a7c-26f4018.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1210-1a7c-26f402a.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1210-1a7c-26f403b.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1210-1a7c-26f403d.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1210-1a7c-26f404f.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1210-1a7c-26f4060.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1260-1da0-31eacce.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1260-1da0-31eace0.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1260-1da0-31eacf1.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1260-1da0-31eacf3.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1260-1da0-31ead05.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1260-1da0-31ead17.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1260-1da0-31ead19.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1260-1da0-31ead2a.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1260-1da0-31ead3c.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1260-1da0-31ead3e.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1260-1da0-31ead50.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1260-1da0-31ead61.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1260-1da0-31ead73.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1260-1da0-31ead84.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1260-1da0-31ead96.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1260-1da0-31ead98.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1260-1da0-31eadaa.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1260-1da0-31eadbb.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1260-1da0-31eadbd.tmp
O43 - CFD: 30/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1268-18f4-a74cf.tmp
O43 - CFD: 30/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1268-18f4-a74f0.tmp
O43 - CFD: 30/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1268-18f4-a7502.tmp
O43 - CFD: 30/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1268-18f4-a7523.tmp
O43 - CFD: 30/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1268-18f4-a7535.tmp
O43 - CFD: 30/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1268-18f4-a7546.tmp
O43 - CFD: 30/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1268-18f4-a7558.tmp
O43 - CFD: 30/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1268-18f4-a7579.tmp
O43 - CFD: 30/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1268-18f4-a758b.tmp
O43 - CFD: 30/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1268-18f4-a759d.tmp
O43 - CFD: 30/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1268-18f4-a75ae.tmp
O43 - CFD: 30/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1268-18f4-a75c0.tmp
O43 - CFD: 30/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1268-18f4-a767d.tmp
O43 - CFD: 30/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1268-18f4-a768f.tmp
O43 - CFD: 30/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1268-18f4-a76a1.tmp
O43 - CFD: 30/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1268-18f4-a76a3.tmp
O43 - CFD: 30/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1268-18f4-a76c4.tmp
O43 - CFD: 30/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1268-18f4-a76e5.tmp
O43 - CFD: 30/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1268-18f4-a7706.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12a4-224-39b2cc1.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12a4-224-39b2cd3.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12a4-224-39b2ce4.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12a4-224-39b2cf6.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12a4-224-39b2d07.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12a4-224-39b2d19.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12a4-224-39b2d2b.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12a4-224-39b2d4c.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12a4-224-39b2d5e.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12a4-224-39b2d60.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12a4-224-39b2d71.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12a4-224-39b2d92.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12a4-224-39b2da4.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12a4-224-39b2db6.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12a4-224-39b2dc7.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12a4-224-39b2dd9.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12a4-224-39b2deb.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12a4-224-39b2dfc.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12a4-224-39b2e0e.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12c4-1930-2021249.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12c4-1930-202126a.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12c4-1930-202127c.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12c4-1930-202127e.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12c4-1930-202128f.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12c4-1930-20212a1.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12c4-1930-20212a3.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12c4-1930-20212b5.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12c4-1930-20212b7.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12c4-1930-20212c8.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12c4-1930-20212da.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12c4-1930-20212dc.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12c4-1930-20212ee.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12c4-1930-20212ff.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12c4-1930-2021301.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12c4-1930-2021313.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12c4-1930-2021324.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12c4-1930-2021326.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12c4-1930-2021338.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12d4-1690-31a19f8.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12d4-1690-31a19fa.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12d4-1690-31a1a1b.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12d4-1690-31a1a2d.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12d4-1690-31a1a3e.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12d4-1690-31a1a50.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12d4-1690-31a1a62.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12d4-1690-31a1a73.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12d4-1690-31a1a85.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12d4-1690-31a1a96.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12d4-1690-31a1aa8.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12d4-1690-31a1aba.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12d4-1690-31a1acb.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12d4-1690-31a1aed.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12d4-1690-31a1afe.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12d4-1690-31a1b10.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12d4-1690-31a1b21.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12d4-1690-31a1b23.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12d4-1690-31a1b35.tmp
O43 - CFD: 19/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12ec-edc-35adff.tmp
O43 - CFD: 19/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12ec-edc-35ae20.tmp
O43 - CFD: 19/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12ec-edc-35ae22.tmp
O43 - CFD: 19/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12ec-edc-35ae33.tmp
O43 - CFD: 19/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12ec-edc-35ae45.tmp
O43 - CFD: 19/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12ec-edc-35ae47.tmp
O43 - CFD: 19/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12ec-edc-35ae59.tmp
O43 - CFD: 19/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12ec-edc-35ae6a.tmp
O43 - CFD: 19/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12ec-edc-35ae6c.tmp
O43 - CFD: 19/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12ec-edc-35ae7e.tmp
O43 - CFD: 19/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12ec-edc-35ae90.tmp
O43 - CFD: 19/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12ec-edc-35ae92.tmp
O43 - CFD: 19/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12ec-edc-35aea3.tmp
O43 - CFD: 19/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12ec-edc-35aeb5.tmp
O43 - CFD: 19/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12ec-edc-35aeb7.tmp
O43 - CFD: 19/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12ec-edc-35aec8.tmp
O43 - CFD: 19/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12ec-edc-35aeda.tmp
O43 - CFD: 19/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12ec-edc-35aeec.tmp
O43 - CFD: 19/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-12ec-edc-35aefd.tmp
O43 - CFD: 19/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1300-15f8-18eac6.tmp
O43 - CFD: 19/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1300-15f8-18ead8.tmp
O43 - CFD: 19/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1300-15f8-18eaf9.tmp
O43 - CFD: 19/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1300-15f8-18eb0b.tmp
O43 - CFD: 19/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1300-15f8-18eb1c.tmp
O43 - CFD: 19/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1300-15f8-18eb2e.tmp
O43 - CFD: 19/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1300-15f8-18eb5f.tmp
O43 - CFD: 19/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1300-15f8-18eb70.tmp
O43 - CFD: 19/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1300-15f8-18eb82.tmp
O43 - CFD: 19/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1300-15f8-18eba3.tmp
O43 - CFD: 19/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1300-15f8-18ebb5.tmp
O43 - CFD: 19/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1300-15f8-18ebc7.tmp
O43 - CFD: 19/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1300-15f8-18ebd8.tmp
O43 - CFD: 19/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1300-15f8-18ebea.tmp
O43 - CFD: 19/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1300-15f8-18ebfb.tmp
O43 - CFD: 19/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1300-15f8-18ec0d.tmp
O43 - CFD: 19/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1300-15f8-18ec1f.tmp
O43 - CFD: 19/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1300-15f8-18ec30.tmp
O43 - CFD: 19/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1300-15f8-18ec42.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1324-10c4-54ce588.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1324-10c4-54ce5b8.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1324-10c4-54ce5ca.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1324-10c4-54ce5cc.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1324-10c4-54ce5de.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1324-10c4-54ce5ef.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1324-10c4-54ce601.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1324-10c4-54ce603.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1324-10c4-54ce615.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1324-10c4-54ce617.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1324-10c4-54ce628.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1324-10c4-54ce63a.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1324-10c4-54ce64b.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1324-10c4-54ce65d.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1324-10c4-54ce65f.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1324-10c4-54ce671.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1324-10c4-54ce682.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1324-10c4-54ce694.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1324-10c4-54ce696.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1324-d60-1924783.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1324-d60-1924794.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1324-d60-1924796.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1324-d60-19247a8.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1324-d60-19247ba.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1324-d60-19247bc.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1324-d60-19247cd.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1324-d60-19247df.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1324-d60-19247e1.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1324-d60-19247f2.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1324-d60-1924804.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1324-d60-1924816.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1324-d60-1924827.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1324-d60-1924839.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1324-d60-192484b.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1324-d60-192485c.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1324-d60-192485e.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1324-d60-1924870.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1324-d60-1924881.tmp
O43 - CFD: 14/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1348-694-539d9cc.tmp
O43 - CFD: 14/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1348-694-539d9de.tmp
O43 - CFD: 14/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1348-694-539d9ef.tmp
O43 - CFD: 14/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1348-694-539d9f1.tmp
O43 - CFD: 14/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1348-694-539da03.tmp
O43 - CFD: 14/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1348-694-539da15.tmp
O43 - CFD: 14/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1348-694-539da17.tmp
O43 - CFD: 14/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1348-694-539da28.tmp
O43 - CFD: 14/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1348-694-539da2a.tmp
O43 - CFD: 14/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1348-694-539da3c.tmp
O43 - CFD: 14/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1348-694-539da3e.tmp
O43 - CFD: 14/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1348-694-539da4f.tmp
O43 - CFD: 14/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1348-694-539da61.tmp
O43 - CFD: 14/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1348-694-539da63.tmp
O43 - CFD: 14/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1348-694-539da75.tmp
O43 - CFD: 14/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1348-694-539da77.tmp
O43 - CFD: 14/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1348-694-539da88.tmp
O43 - CFD: 14/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1348-694-539da9a.tmp
O43 - CFD: 14/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1348-694-539da9c.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1374-1dd8-12fdce.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1374-1dd8-12fde0.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1374-1dd8-12fdf2.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1374-1dd8-12fe03.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1374-1dd8-12fe05.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1374-1dd8-12fe17.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1374-1dd8-12fe29.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1374-1dd8-12fe2b.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1374-1dd8-12fe3c.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1374-1dd8-12fe4e.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1374-1dd8-12fe50.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1374-1dd8-12fe61.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1374-1dd8-12fe73.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1374-1dd8-12fe75.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1374-1dd8-12fe87.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1374-1dd8-12fe98.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1374-1dd8-12fe9a.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1374-1dd8-12feac.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1374-1dd8-12febe.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13bc-1218-10e9cc9.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13bc-1218-10e9cda.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13bc-1218-10e9cec.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13bc-1218-10e9cfe.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13bc-1218-10e9d00.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13bc-1218-10e9d11.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13bc-1218-10e9d23.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13bc-1218-10e9d25.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13bc-1218-10e9d37.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13bc-1218-10e9d39.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13bc-1218-10e9d4a.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13bc-1218-10e9d5c.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13bc-1218-10e9d5e.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13bc-1218-10e9d6f.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13bc-1218-10e9d71.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13bc-1218-10e9d83.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13bc-1218-10e9d95.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13bc-1218-10e9d97.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13bc-1218-10e9da8.tmp
O43 - CFD: 19/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13d4-1218-137977.tmp
O43 - CFD: 19/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13d4-1218-1379a8.tmp
O43 - CFD: 19/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13d4-1218-1379aa.tmp
O43 - CFD: 19/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13d4-1218-1379bb.tmp
O43 - CFD: 19/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13d4-1218-1379bd.tmp
O43 - CFD: 19/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13d4-1218-1379cf.tmp
O43 - CFD: 19/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13d4-1218-1379e0.tmp
O43 - CFD: 19/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13d4-1218-1379e2.tmp
O43 - CFD: 19/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13d4-1218-1379f4.tmp
O43 - CFD: 19/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13d4-1218-137a06.tmp
O43 - CFD: 19/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13d4-1218-137a08.tmp
O43 - CFD: 19/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13d4-1218-137a19.tmp
O43 - CFD: 19/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13d4-1218-137a2b.tmp
O43 - CFD: 19/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13d4-1218-137a2d.tmp
O43 - CFD: 19/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13d4-1218-137a3f.tmp
O43 - CFD: 19/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13d4-1218-137a50.tmp
O43 - CFD: 19/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13d4-1218-137a52.tmp
O43 - CFD: 19/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13d4-1218-137a73.tmp
O43 - CFD: 19/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13d4-1218-137a85.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13e0-1204-fc363ed.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13e0-1204-fc3640e.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13e0-1204-fc36420.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13e0-1204-fc36422.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13e0-1204-fc36434.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13e0-1204-fc36445.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13e0-1204-fc36447.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13e0-1204-fc36459.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13e0-1204-fc3646b.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13e0-1204-fc3646d.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13e0-1204-fc3647e.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13e0-1204-fc36480.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13e0-1204-fc36492.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13e0-1204-fc364a3.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13e0-1204-fc364b5.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13e0-1204-fc364b7.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13e0-1204-fc364c9.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13e0-1204-fc364da.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13e0-1204-fc364dc.tmp
O43 - CFD: 21/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13f0-f8c-a6c72cb.tmp
O43 - CFD: 21/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13f0-f8c-a6c72ec.tmp
O43 - CFD: 21/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13f0-f8c-a6c72fe.tmp
O43 - CFD: 21/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13f0-f8c-a6c730f.tmp
O43 - CFD: 21/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13f0-f8c-a6c7311.tmp
O43 - CFD: 21/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13f0-f8c-a6c7323.tmp
O43 - CFD: 21/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13f0-f8c-a6c7335.tmp
O43 - CFD: 21/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13f0-f8c-a6c7337.tmp
O43 - CFD: 21/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13f0-f8c-a6c7348.tmp
O43 - CFD: 21/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13f0-f8c-a6c735a.tmp
O43 - CFD: 21/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13f0-f8c-a6c735c.tmp
O43 - CFD: 21/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13f0-f8c-a6c736e.tmp
O43 - CFD: 21/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13f0-f8c-a6c7370.tmp
O43 - CFD: 21/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13f0-f8c-a6c7381.tmp
O43 - CFD: 21/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13f0-f8c-a6c7393.tmp
O43 - CFD: 21/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13f0-f8c-a6c7395.tmp
O43 - CFD: 21/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13f0-f8c-a6c73a6.tmp
O43 - CFD: 21/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13f0-f8c-a6c73b8.tmp
O43 - CFD: 21/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13f0-f8c-a6c73ba.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13f0-f94-29337c1.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13f0-f94-29337c3.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13f0-f94-29337d5.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13f0-f94-29337d7.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13f0-f94-29337e9.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13f0-f94-29337fa.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13f0-f94-293380c.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13f0-f94-293380e.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13f0-f94-2933820.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13f0-f94-2933831.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13f0-f94-2933833.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13f0-f94-2933845.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13f0-f94-2933856.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13f0-f94-2933858.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13f0-f94-293386a.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13f0-f94-293387c.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13f0-f94-293387e.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13f0-f94-293388f.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-13f0-f94-29338a1.tmp
O43 - CFD: 29/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1400-1404-b6672.tmp
O43 - CFD: 29/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1400-1404-b6694.tmp
O43 - CFD: 29/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1400-1404-b6696.tmp
O43 - CFD: 29/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1400-1404-b66a7.tmp
O43 - CFD: 29/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1400-1404-b66a9.tmp
O43 - CFD: 29/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1400-1404-b66bb.tmp
O43 - CFD: 29/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1400-1404-b66cd.tmp
O43 - CFD: 29/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1400-1404-b66de.tmp
O43 - CFD: 29/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1400-1404-b66e0.tmp
O43 - CFD: 29/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1400-1404-b66f2.tmp
O43 - CFD: 29/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1400-1404-b6703.tmp
O43 - CFD: 29/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1400-1404-b6715.tmp
O43 - CFD: 29/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1400-1404-b6717.tmp
O43 - CFD: 29/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1400-1404-b6729.tmp
O43 - CFD: 29/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1400-1404-b673a.tmp
O43 - CFD: 29/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1400-1404-b673c.tmp
O43 - CFD: 29/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1400-1404-b674e.tmp
O43 - CFD: 29/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1400-1404-b6760.tmp
O43 - CFD: 29/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1400-1404-b6762.tmp
O43 - CFD: 31/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1418-1ef0-11171d.tmp
O43 - CFD: 31/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1418-1ef0-11173e.tmp
O43 - CFD: 31/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1418-1ef0-111740.tmp
O43 - CFD: 31/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1418-1ef0-111752.tmp
O43 - CFD: 31/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1418-1ef0-111763.tmp
O43 - CFD: 31/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1418-1ef0-111765.tmp
O43 - CFD: 31/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1418-1ef0-111777.tmp
O43 - CFD: 31/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1418-1ef0-111788.tmp
O43 - CFD: 31/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1418-1ef0-11178a.tmp
O43 - CFD: 31/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1418-1ef0-11179c.tmp
O43 - CFD: 31/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1418-1ef0-11179e.tmp
O43 - CFD: 31/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1418-1ef0-1117bf.tmp
O43 - CFD: 31/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1418-1ef0-1117c1.tmp
O43 - CFD: 31/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1418-1ef0-1117d3.tmp
O43 - CFD: 31/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1418-1ef0-1117e5.tmp
O43 - CFD: 31/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1418-1ef0-1117e7.tmp
O43 - CFD: 31/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1418-1ef0-1117f8.tmp
O43 - CFD: 31/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1418-1ef0-11180a.tmp
O43 - CFD: 31/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1418-1ef0-11180c.tmp
O43 - CFD: 22/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-141c-16b0-9f7fe.tmp
O43 - CFD: 22/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-141c-16b0-9f83e.tmp
O43 - CFD: 22/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-141c-16b0-9f850.tmp
O43 - CFD: 22/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-141c-16b0-9f852.tmp
O43 - CFD: 22/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-141c-16b0-9f873.tmp
O43 - CFD: 22/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-141c-16b0-9f885.tmp
O43 - CFD: 22/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-141c-16b0-9f897.tmp
O43 - CFD: 22/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-141c-16b0-9f899.tmp
O43 - CFD: 22/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-141c-16b0-9f8aa.tmp
O43 - CFD: 22/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-141c-16b0-9f8ac.tmp
O43 - CFD: 22/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-141c-16b0-9f8be.tmp
O43 - CFD: 22/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-141c-16b0-9f8cf.tmp
O43 - CFD: 22/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-141c-16b0-9f8e1.tmp
O43 - CFD: 22/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-141c-16b0-9f8e3.tmp
O43 - CFD: 22/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-141c-16b0-9f8f5.tmp
O43 - CFD: 22/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-141c-16b0-9f8f7.tmp
O43 - CFD: 22/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-141c-16b0-9f908.tmp
O43 - CFD: 22/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-141c-16b0-9f91a.tmp
O43 - CFD: 22/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-141c-16b0-9f91c.tmp
O43 - CFD: 11/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1424-2708-483c203.tmp
O43 - CFD: 11/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1424-2708-483c225.tmp
O43 - CFD: 11/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1424-2708-483c236.tmp
O43 - CFD: 11/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1424-2708-483c238.tmp
O43 - CFD: 11/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1424-2708-483c24a.tmp
O43 - CFD: 11/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1424-2708-483c26b.tmp
O43 - CFD: 11/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1424-2708-483c27d.tmp
O43 - CFD: 11/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1424-2708-483c27f.tmp
O43 - CFD: 11/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1424-2708-483c290.tmp
O43 - CFD: 11/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1424-2708-483c2a2.tmp
O43 - CFD: 11/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1424-2708-483c2a4.tmp
O43 - CFD: 11/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1424-2708-483c2b6.tmp
O43 - CFD: 11/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1424-2708-483c2c7.tmp
O43 - CFD: 11/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1424-2708-483c2d9.tmp
O43 - CFD: 11/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1424-2708-483c2db.tmp
O43 - CFD: 11/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1424-2708-483c2fc.tmp
O43 - CFD: 11/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1424-2708-483c30e.tmp
O43 - CFD: 11/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1424-2708-483c31f.tmp
O43 - CFD: 11/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1424-2708-483c331.tmp
O43 - CFD: 14/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1438-198c-54b5504.tmp
O43 - CFD: 14/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1438-198c-54b5526.tmp
O43 - CFD: 14/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1438-198c-54b5537.tmp
O43 - CFD: 14/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1438-198c-54b5549.tmp
O43 - CFD: 14/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1438-198c-54b554b.tmp
O43 - CFD: 14/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1438-198c-54b555c.tmp
O43 - CFD: 14/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1438-198c-54b556e.tmp
O43 - CFD: 14/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1438-198c-54b5570.tmp
O43 - CFD: 14/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1438-198c-54b5582.tmp
O43 - CFD: 14/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1438-198c-54b5593.tmp
O43 - CFD: 14/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1438-198c-54b55a5.tmp
O43 - CFD: 14/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1438-198c-54b55d6.tmp
O43 - CFD: 14/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1438-198c-54b55f7.tmp
O43 - CFD: 14/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1438-198c-54b5609.tmp
O43 - CFD: 14/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1438-198c-54b562a.tmp
O43 - CFD: 14/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1438-198c-54b564b.tmp
O43 - CFD: 14/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1438-198c-54b565d.tmp
O43 - CFD: 14/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1438-198c-54b566e.tmp
O43 - CFD: 14/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1438-198c-54b5680.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1438-19b8-6163ff.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1438-19b8-616420.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1438-19b8-616432.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1438-19b8-616434.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1438-19b8-616446.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1438-19b8-616457.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1438-19b8-616469.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1438-19b8-61647b.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1438-19b8-61647d.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1438-19b8-61648e.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1438-19b8-6164a0.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1438-19b8-6164a2.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1438-19b8-6164b3.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1438-19b8-6164c5.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1438-19b8-6164c7.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1438-19b8-6164d9.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1438-19b8-6164ea.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1438-19b8-6164ec.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1438-19b8-6164fe.tmp
O43 - CFD: 12/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1464-1460-12799b.tmp
O43 - CFD: 12/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1464-1460-1279ac.tmp
O43 - CFD: 12/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1464-1460-1279be.tmp
O43 - CFD: 12/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1464-1460-1279c0.tmp
O43 - CFD: 12/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1464-1460-1279d2.tmp
O43 - CFD: 12/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1464-1460-1279e3.tmp
O43 - CFD: 12/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1464-1460-1279f5.tmp
O43 - CFD: 12/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1464-1460-1279f7.tmp
O43 - CFD: 12/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1464-1460-127a08.tmp
O43 - CFD: 12/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1464-1460-127a1a.tmp
O43 - CFD: 12/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1464-1460-127a1c.tmp
O43 - CFD: 12/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1464-1460-127a2e.tmp
O43 - CFD: 12/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1464-1460-127a3f.tmp
O43 - CFD: 12/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1464-1460-127a41.tmp
O43 - CFD: 12/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1464-1460-127a53.tmp
O43 - CFD: 12/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1464-1460-127a55.tmp
O43 - CFD: 12/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1464-1460-127a67.tmp
O43 - CFD: 12/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1464-1460-127a78.tmp
O43 - CFD: 12/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1464-1460-127a8a.tmp
O43 - CFD: 24/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1464-bd0-4e44385.tmp
O43 - CFD: 24/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1464-bd0-4e443a6.tmp
O43 - CFD: 24/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1464-bd0-4e443b8.tmp
O43 - CFD: 24/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1464-bd0-4e443c9.tmp
O43 - CFD: 24/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1464-bd0-4e443db.tmp
O43 - CFD: 24/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1464-bd0-4e443fc.tmp
O43 - CFD: 24/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1464-bd0-4e4440e.tmp
O43 - CFD: 24/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1464-bd0-4e4441f.tmp
O43 - CFD: 24/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1464-bd0-4e44431.tmp
O43 - CFD: 24/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1464-bd0-4e44443.tmp
O43 - CFD: 24/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1464-bd0-4e44445.tmp
O43 - CFD: 24/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1464-bd0-4e44466.tmp
O43 - CFD: 24/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1464-bd0-4e44478.tmp
O43 - CFD: 24/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1464-bd0-4e44499.tmp
O43 - CFD: 24/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1464-bd0-4e444aa.tmp
O43 - CFD: 24/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1464-bd0-4e444ac.tmp
O43 - CFD: 24/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1464-bd0-4e444be.tmp
O43 - CFD: 24/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1464-bd0-4e444d0.tmp
O43 - CFD: 24/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1464-bd0-4e444d2.tmp
O43 - CFD: 30/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-148-162c-53f779a.tmp
O43 - CFD: 30/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-148-162c-53f77ac.tmp
O43 - CFD: 30/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-148-162c-53f77bd.tmp
O43 - CFD: 30/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-148-162c-53f77bf.tmp
O43 - CFD: 30/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-148-162c-53f77d1.tmp
O43 - CFD: 30/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-148-162c-53f77e3.tmp
O43 - CFD: 30/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-148-162c-53f77e5.tmp
O43 - CFD: 30/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-148-162c-53f77f6.tmp
O43 - CFD: 30/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-148-162c-53f7808.tmp
O43 - CFD: 30/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-148-162c-53f781a.tmp
O43 - CFD: 30/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-148-162c-53f783b.tmp
O43 - CFD: 30/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-148-162c-53f784c.tmp
O43 - CFD: 30/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-148-162c-53f786e.tmp
O43 - CFD: 30/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-148-162c-53f7870.tmp
O43 - CFD: 30/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-148-162c-53f7881.tmp
O43 - CFD: 30/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-148-162c-53f7893.tmp
O43 - CFD: 30/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-148-162c-53f7895.tmp
O43 - CFD: 30/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-148-162c-53f78b6.tmp
O43 - CFD: 30/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-148-162c-53f78b8.tmp
O43 - CFD: 04/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1484-18ec-155367.tmp
O43 - CFD: 04/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1484-18ec-155378.tmp
O43 - CFD: 04/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1484-18ec-15538a.tmp
O43 - CFD: 04/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1484-18ec-15539c.tmp
O43 - CFD: 04/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1484-18ec-1553ad.tmp
O43 - CFD: 04/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1484-18ec-1553bf.tmp
O43 - CFD: 04/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1484-18ec-1553c1.tmp
O43 - CFD: 04/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1484-18ec-1553d3.tmp
O43 - CFD: 04/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1484-18ec-1553d5.tmp
O43 - CFD: 04/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1484-18ec-1553e6.tmp
O43 - CFD: 04/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1484-18ec-1553f8.tmp
O43 - CFD: 04/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1484-18ec-1553fa.tmp
O43 - CFD: 04/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1484-18ec-15540b.tmp
O43 - CFD: 04/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1484-18ec-15541d.tmp
O43 - CFD: 04/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1484-18ec-15541f.tmp
O43 - CFD: 04/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1484-18ec-155440.tmp
O43 - CFD: 04/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1484-18ec-155452.tmp
O43 - CFD: 04/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1484-18ec-155454.tmp
O43 - CFD: 04/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1484-18ec-155466.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14d0-1740-c8cb3.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14d0-1740-c8cc4.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14d0-1740-c8cd6.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14d0-1740-c8cd8.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14d0-1740-c8ce9.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14d0-1740-c8ceb.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14d0-1740-c8cfd.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14d0-1740-c8d0f.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14d0-1740-c8d20.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14d0-1740-c8d32.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14d0-1740-c8d44.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14d0-1740-c8d65.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14d0-1740-c8d76.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14d0-1740-c8d78.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14d0-1740-c8d8a.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14d0-1740-c8d8c.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14d0-1740-c8d9e.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14d0-1740-c8da0.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14d0-1740-c8db1.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14e8-eb0-1b4d508.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14e8-eb0-1b4d519.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14e8-eb0-1b4d52b.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14e8-eb0-1b4d52d.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14e8-eb0-1b4d53f.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14e8-eb0-1b4d550.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14e8-eb0-1b4d552.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14e8-eb0-1b4d564.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14e8-eb0-1b4d576.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14e8-eb0-1b4d578.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14e8-eb0-1b4d589.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14e8-eb0-1b4d59b.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14e8-eb0-1b4d59d.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14e8-eb0-1b4d5ae.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14e8-eb0-1b4d5c0.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14e8-eb0-1b4d5c2.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14e8-eb0-1b4d5d4.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14e8-eb0-1b4d5e5.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-14e8-eb0-1b4d5e7.tmp
O43 - CFD: 28/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1500-5bc-a7397.tmp
O43 - CFD: 28/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1500-5bc-a73a8.tmp
O43 - CFD: 28/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1500-5bc-a73ba.tmp
O43 - CFD: 28/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1500-5bc-a73db.tmp
O43 - CFD: 28/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1500-5bc-a73dd.tmp
O43 - CFD: 28/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1500-5bc-a73ef.tmp
O43 - CFD: 28/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1500-5bc-a7400.tmp
O43 - CFD: 28/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1500-5bc-a7402.tmp
O43 - CFD: 28/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1500-5bc-a7414.tmp
O43 - CFD: 28/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1500-5bc-a7445.tmp
O43 - CFD: 28/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1500-5bc-a7456.tmp
O43 - CFD: 28/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1500-5bc-a7468.tmp
O43 - CFD: 28/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1500-5bc-a747a.tmp
O43 - CFD: 28/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1500-5bc-a747c.tmp
O43 - CFD: 28/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1500-5bc-a748d.tmp
O43 - CFD: 28/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1500-5bc-a749f.tmp
O43 - CFD: 28/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1500-5bc-a74a1.tmp
O43 - CFD: 28/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1500-5bc-a74b3.tmp
O43 - CFD: 28/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1500-5bc-a74c4.tmp
O43 - CFD: 08/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-151c-888-343a72d.tmp
O43 - CFD: 08/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-151c-888-343a74e.tmp
O43 - CFD: 08/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-151c-888-343a80c.tmp
O43 - CFD: 08/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-151c-888-343a936.tmp
O43 - CFD: 08/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-151c-888-343a9c5.tmp
O43 - CFD: 08/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-151c-888-343ab1f.tmp
O43 - CFD: 08/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-151c-888-343ab5f.tmp
O43 - CFD: 08/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-151c-888-343bfe3.tmp
O43 - CFD: 08/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-151c-888-343c360.tmp
O43 - CFD: 08/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-151c-888-343d506.tmp
O43 - CFD: 08/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-151c-888-343ee9a.tmp
O43 - CFD: 08/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-151c-888-344039b.tmp
O43 - CFD: 08/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-151c-888-34403fb.tmp
O43 - CFD: 08/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-151c-888-344044b.tmp
O43 - CFD: 08/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-151c-888-3440cba.tmp
O43 - CFD: 08/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-151c-888-3440ccb.tmp
O43 - CFD: 08/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-151c-888-3440cdd.tmp
O43 - CFD: 08/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-151c-888-3440cee.tmp
O43 - CFD: 08/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-151c-888-3440d10.tmp
O43 - CFD: 22/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1548-21f4-372bc75.tmp
O43 - CFD: 22/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1548-21f4-372bc87.tmp
O43 - CFD: 22/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1548-21f4-372bca8.tmp
O43 - CFD: 22/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1548-21f4-372bcba.tmp
O43 - CFD: 22/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1548-21f4-372bccc.tmp
O43 - CFD: 22/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1548-21f4-372bcdd.tmp
O43 - CFD: 22/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1548-21f4-372bcfe.tmp
O43 - CFD: 22/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1548-21f4-372bd10.tmp
O43 - CFD: 22/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1548-21f4-372bd12.tmp
O43 - CFD: 22/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1548-21f4-372bd24.tmp
O43 - CFD: 22/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1548-21f4-372bd35.tmp
O43 - CFD: 22/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1548-21f4-372bd37.tmp
O43 - CFD: 22/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1548-21f4-372bd49.tmp
O43 - CFD: 22/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1548-21f4-372bd7a.tmp
O43 - CFD: 22/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1548-21f4-372bd9b.tmp
O43 - CFD: 22/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1548-21f4-372bdbc.tmp
O43 - CFD: 22/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1548-21f4-372bdbe.tmp
O43 - CFD: 22/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1548-21f4-372bdd0.tmp
O43 - CFD: 22/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1548-21f4-372bde2.tmp
O43 - CFD: 13/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1584-1a8c-22eb44f.tmp
O43 - CFD: 13/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1584-1a8c-22eb461.tmp
O43 - CFD: 13/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1584-1a8c-22eb473.tmp
O43 - CFD: 13/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1584-1a8c-22eb475.tmp
O43 - CFD: 13/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1584-1a8c-22eb486.tmp
O43 - CFD: 13/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1584-1a8c-22eb488.tmp
O43 - CFD: 13/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1584-1a8c-22eb49a.tmp
O43 - CFD: 13/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1584-1a8c-22eb4ac.tmp
O43 - CFD: 13/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1584-1a8c-22eb4ae.tmp
O43 - CFD: 13/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1584-1a8c-22eb4bf.tmp
O43 - CFD: 13/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1584-1a8c-22eb4c1.tmp
O43 - CFD: 13/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1584-1a8c-22eb4d3.tmp
O43 - CFD: 13/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1584-1a8c-22eb4e4.tmp
O43 - CFD: 13/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1584-1a8c-22eb4e6.tmp
O43 - CFD: 13/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1584-1a8c-22eb4f8.tmp
O43 - CFD: 13/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1584-1a8c-22eb50a.tmp
O43 - CFD: 13/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1584-1a8c-22eb50c.tmp
O43 - CFD: 13/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1584-1a8c-22eb51d.tmp
O43 - CFD: 13/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1584-1a8c-22eb52f.tmp
O43 - CFD: 06/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-158c-1c58-4b5cda9.tmp
O43 - CFD: 06/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-158c-1c58-4b5cdca.tmp
O43 - CFD: 06/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-158c-1c58-4b5cddc.tmp
O43 - CFD: 06/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-158c-1c58-4b5cded.tmp
O43 - CFD: 06/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-158c-1c58-4b5cdff.tmp
O43 - CFD: 06/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-158c-1c58-4b5ce10.tmp
O43 - CFD: 06/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-158c-1c58-4b5ce22.tmp
O43 - CFD: 06/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-158c-1c58-4b5ce43.tmp
O43 - CFD: 06/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-158c-1c58-4b5ce55.tmp
O43 - CFD: 06/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-158c-1c58-4b5ce67.tmp
O43 - CFD: 06/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-158c-1c58-4b5ce69.tmp
O43 - CFD: 06/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-158c-1c58-4b5ce7a.tmp
O43 - CFD: 06/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-158c-1c58-4b5ce8c.tmp
O43 - CFD: 06/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-158c-1c58-4b5ce9d.tmp
O43 - CFD: 06/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-158c-1c58-4b5ce9f.tmp
O43 - CFD: 06/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-158c-1c58-4b5ceb1.tmp
O43 - CFD: 06/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-158c-1c58-4b5cec3.tmp
O43 - CFD: 06/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-158c-1c58-4b5ced4.tmp
O43 - CFD: 06/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-158c-1c58-4b5cee6.tmp
O43 - CFD: 10/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1590-f28-1f58a28.tmp
O43 - CFD: 10/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1590-f28-1f58a39.tmp
O43 - CFD: 10/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1590-f28-1f58a4b.tmp
O43 - CFD: 10/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1590-f28-1f58a5d.tmp
O43 - CFD: 10/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1590-f28-1f58a6e.tmp
O43 - CFD: 10/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1590-f28-1f58a80.tmp
O43 - CFD: 10/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1590-f28-1f58aa1.tmp
O43 - CFD: 10/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1590-f28-1f58aa3.tmp
O43 - CFD: 10/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1590-f28-1f58ab5.tmp
O43 - CFD: 10/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1590-f28-1f58ab7.tmp
O43 - CFD: 10/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1590-f28-1f58ac8.tmp
O43 - CFD: 10/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1590-f28-1f58ada.tmp
O43 - CFD: 10/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1590-f28-1f58aec.tmp
O43 - CFD: 10/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1590-f28-1f58aee.tmp
O43 - CFD: 10/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1590-f28-1f58aff.tmp
O43 - CFD: 10/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1590-f28-1f58b11.tmp
O43 - CFD: 10/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1590-f28-1f58b13.tmp
O43 - CFD: 10/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1590-f28-1f58b24.tmp
O43 - CFD: 10/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1590-f28-1f58b36.tmp
O43 - CFD: 12/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-15f0-cf4-2b438d.tmp
O43 - CFD: 12/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-15f0-cf4-2b439f.tmp
O43 - CFD: 12/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-15f0-cf4-2b43d0.tmp
O43 - CFD: 12/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-15f0-cf4-2b43e1.tmp
O43 - CFD: 12/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-15f0-cf4-2b43f3.tmp
O43 - CFD: 12/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-15f0-cf4-2b4405.tmp
O43 - CFD: 12/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-15f0-cf4-2b4416.tmp
O43 - CFD: 12/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-15f0-cf4-2b4428.tmp
O43 - CFD: 12/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-15f0-cf4-2b4439.tmp
O43 - CFD: 12/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-15f0-cf4-2b444b.tmp
O43 - CFD: 12/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-15f0-cf4-2b445d.tmp
O43 - CFD: 12/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-15f0-cf4-2b445f.tmp
O43 - CFD: 12/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-15f0-cf4-2b4480.tmp
O43 - CFD: 12/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-15f0-cf4-2b44c0.tmp
O43 - CFD: 12/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-15f0-cf4-2b4511.tmp
O43 - CFD: 12/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-15f0-cf4-2b4532.tmp
O43 - CFD: 12/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-15f0-cf4-2b4543.tmp
O43 - CFD: 12/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-15f0-cf4-2b4565.tmp
O43 - CFD: 12/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-15f0-cf4-2b45c4.tmp
O43 - CFD: 24/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-161c-1b74-150db3.tmp
O43 - CFD: 24/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-161c-1b74-150dd4.tmp
O43 - CFD: 24/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-161c-1b74-150de6.tmp
O43 - CFD: 24/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-161c-1b74-150de8.tmp
O43 - CFD: 24/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-161c-1b74-150e09.tmp
O43 - CFD: 24/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-161c-1b74-150e1b.tmp
O43 - CFD: 24/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-161c-1b74-150e2c.tmp
O43 - CFD: 24/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-161c-1b74-150e3e.tmp
O43 - CFD: 24/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-161c-1b74-150e50.tmp
O43 - CFD: 24/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-161c-1b74-150e71.tmp
O43 - CFD: 24/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-161c-1b74-150e83.tmp
O43 - CFD: 24/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-161c-1b74-150e94.tmp
O43 - CFD: 24/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-161c-1b74-150e96.tmp
O43 - CFD: 24/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-161c-1b74-150ea8.tmp
O43 - CFD: 24/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-161c-1b74-150eb9.tmp
O43 - CFD: 24/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-161c-1b74-150ecb.tmp
O43 - CFD: 24/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-161c-1b74-150edd.tmp
O43 - CFD: 24/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-161c-1b74-150eee.tmp
O43 - CFD: 24/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-161c-1b74-150f00.tmp
O43 - CFD: 06/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1624-10e4-581b704.tmp
O43 - CFD: 06/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1624-10e4-581b715.tmp
O43 - CFD: 06/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1624-10e4-581b727.tmp
O43 - CFD: 06/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1624-10e4-581b738.tmp
O43 - CFD: 06/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1624-10e4-581b73a.tmp
O43 - CFD: 06/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1624-10e4-581b74c.tmp
O43 - CFD: 06/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1624-10e4-581b75e.tmp
O43 - CFD: 06/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1624-10e4-581b760.tmp
O43 - CFD: 06/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1624-10e4-581b771.tmp
O43 - CFD: 06/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1624-10e4-581b783.tmp
O43 - CFD: 06/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1624-10e4-581b785.tmp
O43 - CFD: 06/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1624-10e4-581b797.tmp
O43 - CFD: 06/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1624-10e4-581b7a8.tmp
O43 - CFD: 06/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1624-10e4-581b7aa.tmp
O43 - CFD: 06/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1624-10e4-581b7bc.tmp
O43 - CFD: 06/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1624-10e4-581b7cd.tmp
O43 - CFD: 06/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1624-10e4-581b7cf.tmp
O43 - CFD: 06/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1624-10e4-581b7e1.tmp
O43 - CFD: 06/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1624-10e4-581b7f3.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-163c-101c-965943d.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-163c-101c-965945e.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-163c-101c-9659460.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-163c-101c-9659481.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-163c-101c-9659493.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-163c-101c-96594b4.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-163c-101c-96594d5.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-163c-101c-9659506.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-163c-101c-9659518.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-163c-101c-9659529.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-163c-101c-965953b.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-163c-101c-965954d.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-163c-101c-965955e.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-163c-101c-9659560.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-163c-101c-9659572.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-163c-101c-9659584.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-163c-101c-9659586.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-163c-101c-9659597.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-163c-101c-96595b8.tmp
O43 - CFD: 08/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1654-15d8-49b8294.tmp
O43 - CFD: 08/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1654-15d8-49b82a6.tmp
O43 - CFD: 08/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1654-15d8-49b82b8.tmp
O43 - CFD: 08/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1654-15d8-49b82c9.tmp
O43 - CFD: 08/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1654-15d8-49b82db.tmp
O43 - CFD: 08/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1654-15d8-49b82dd.tmp
O43 - CFD: 08/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1654-15d8-49b82ef.tmp
O43 - CFD: 08/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1654-15d8-49b8300.tmp
O43 - CFD: 08/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1654-15d8-49b8302.tmp
O43 - CFD: 08/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1654-15d8-49b8314.tmp
O43 - CFD: 08/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1654-15d8-49b8325.tmp
O43 - CFD: 08/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1654-15d8-49b8327.tmp
O43 - CFD: 08/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1654-15d8-49b8339.tmp
O43 - CFD: 08/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1654-15d8-49b834b.tmp
O43 - CFD: 08/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1654-15d8-49b835c.tmp
O43 - CFD: 08/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1654-15d8-49b835e.tmp
O43 - CFD: 08/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1654-15d8-49b8370.tmp
O43 - CFD: 08/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1654-15d8-49b8382.tmp
O43 - CFD: 08/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1654-15d8-49b8393.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1674-16c-a3d64.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1674-16c-a3d85.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1674-16c-a3d96.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1674-16c-a3da8.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1674-16c-a3dba.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1674-16c-a3ddb.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1674-16c-a3e2b.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1674-16c-a3e3d.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1674-16c-a3e4e.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1674-16c-a3e60.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1674-16c-a3e72.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1674-16c-a3e74.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1674-16c-a3e85.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1674-16c-a3e97.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1674-16c-a3ea8.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1674-16c-a3eaa.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1674-16c-a3ebc.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1674-16c-a3ece.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1674-16c-a3ed0.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1684-ae8-8f2f8f1.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1684-ae8-8f2f903.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1684-ae8-8f2f915.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1684-ae8-8f2f917.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1684-ae8-8f2f938.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1684-ae8-8f2f949.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1684-ae8-8f2f95b.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1684-ae8-8f2f95d.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1684-ae8-8f2f96f.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1684-ae8-8f2f980.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1684-ae8-8f2f982.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1684-ae8-8f2f994.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1684-ae8-8f2f9a6.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1684-ae8-8f2f9a8.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1684-ae8-8f2f9b9.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1684-ae8-8f2f9cb.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1684-ae8-8f2f9cd.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1684-ae8-8f2f9de.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1684-ae8-8f2fa00.tmp
O43 - CFD: 05/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-168c-129c-50aa13.tmp
O43 - CFD: 05/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-168c-129c-50aa35.tmp
O43 - CFD: 05/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-168c-129c-50aa46.tmp
O43 - CFD: 05/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-168c-129c-50aa58.tmp
O43 - CFD: 05/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-168c-129c-50aa79.tmp
O43 - CFD: 05/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-168c-129c-50aa7b.tmp
O43 - CFD: 05/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-168c-129c-50aa8d.tmp
O43 - CFD: 05/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-168c-129c-50aa9e.tmp
O43 - CFD: 05/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-168c-129c-50aac0.tmp
O43 - CFD: 05/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-168c-129c-50ab10.tmp
O43 - CFD: 05/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-168c-129c-50ab21.tmp
O43 - CFD: 05/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-168c-129c-50ab33.tmp
O43 - CFD: 05/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-168c-129c-50ab45.tmp
O43 - CFD: 05/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-168c-129c-50ab56.tmp
O43 - CFD: 05/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-168c-129c-50ab68.tmp
O43 - CFD: 05/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-168c-129c-50ab79.tmp
O43 - CFD: 05/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-168c-129c-50ab8b.tmp
O43 - CFD: 05/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-168c-129c-50ab9d.tmp
O43 - CFD: 05/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-168c-129c-50abae.tmp
O43 - CFD: 14/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1690-1f34-15987e.tmp
O43 - CFD: 14/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1690-1f34-1598bf.tmp
O43 - CFD: 14/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1690-1f34-1598c1.tmp
O43 - CFD: 14/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1690-1f34-1598d2.tmp
O43 - CFD: 14/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1690-1f34-1598e4.tmp
O43 - CFD: 14/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1690-1f34-1598e6.tmp
O43 - CFD: 14/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1690-1f34-1598f8.tmp
O43 - CFD: 14/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1690-1f34-159909.tmp
O43 - CFD: 14/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1690-1f34-15991b.tmp
O43 - CFD: 14/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1690-1f34-15991d.tmp
O43 - CFD: 14/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1690-1f34-15992f.tmp
O43 - CFD: 14/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1690-1f34-159940.tmp
O43 - CFD: 14/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1690-1f34-159952.tmp
O43 - CFD: 14/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1690-1f34-159963.tmp
O43 - CFD: 14/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1690-1f34-159965.tmp
O43 - CFD: 14/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1690-1f34-159977.tmp
O43 - CFD: 14/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1690-1f34-159989.tmp
O43 - CFD: 14/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1690-1f34-15999a.tmp
O43 - CFD: 14/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1690-1f34-1599ac.tmp
O43 - CFD: 18/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16b4-102c-3829dc.tmp
O43 - CFD: 18/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16b4-102c-3829fd.tmp
O43 - CFD: 18/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16b4-102c-382a0f.tmp
O43 - CFD: 18/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16b4-102c-382a20.tmp
O43 - CFD: 18/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16b4-102c-382a32.tmp
O43 - CFD: 18/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16b4-102c-382a44.tmp
O43 - CFD: 18/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16b4-102c-382a46.tmp
O43 - CFD: 18/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16b4-102c-382a57.tmp
O43 - CFD: 18/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16b4-102c-382a69.tmp
O43 - CFD: 18/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16b4-102c-382a8a.tmp
O43 - CFD: 18/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16b4-102c-382aab.tmp
O43 - CFD: 18/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16b4-102c-382adc.tmp
O43 - CFD: 18/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16b4-102c-382aee.tmp
O43 - CFD: 18/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16b4-102c-382aff.tmp
O43 - CFD: 18/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16b4-102c-382b11.tmp
O43 - CFD: 18/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16b4-102c-382b23.tmp
O43 - CFD: 18/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16b4-102c-382b25.tmp
O43 - CFD: 18/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16b4-102c-382b36.tmp
O43 - CFD: 18/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16b4-102c-382b48.tmp
O43 - CFD: 20/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16c4-15d4-36e6030.tmp
O43 - CFD: 20/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16c4-15d4-36e6032.tmp
O43 - CFD: 20/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16c4-15d4-36e6043.tmp
O43 - CFD: 20/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16c4-15d4-36e6055.tmp
O43 - CFD: 20/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16c4-15d4-36e6057.tmp
O43 - CFD: 20/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16c4-15d4-36e6069.tmp
O43 - CFD: 20/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16c4-15d4-36e607a.tmp
O43 - CFD: 20/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16c4-15d4-36e607c.tmp
O43 - CFD: 20/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16c4-15d4-36e608e.tmp
O43 - CFD: 20/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16c4-15d4-36e60a0.tmp
O43 - CFD: 20/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16c4-15d4-36e60a2.tmp
O43 - CFD: 20/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16c4-15d4-36e60b3.tmp
O43 - CFD: 20/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16c4-15d4-36e60b5.tmp
O43 - CFD: 20/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16c4-15d4-36e60c7.tmp
O43 - CFD: 20/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16c4-15d4-36e60d8.tmp
O43 - CFD: 20/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16c4-15d4-36e60da.tmp
O43 - CFD: 20/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16c4-15d4-36e60ec.tmp
O43 - CFD: 20/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16c4-15d4-36e60fe.tmp
O43 - CFD: 20/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16c4-15d4-36e610f.tmp
O43 - CFD: 31/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16c8-16a0-a3853.tmp
O43 - CFD: 31/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16c8-16a0-a3864.tmp
O43 - CFD: 31/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16c8-16a0-a3886.tmp
O43 - CFD: 31/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16c8-16a0-a3888.tmp
O43 - CFD: 31/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16c8-16a0-a3899.tmp
O43 - CFD: 31/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16c8-16a0-a38ab.tmp
O43 - CFD: 31/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16c8-16a0-a38ad.tmp
O43 - CFD: 31/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16c8-16a0-a38be.tmp
O43 - CFD: 31/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16c8-16a0-a38c0.tmp
O43 - CFD: 31/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16c8-16a0-a38d2.tmp
O43 - CFD: 31/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16c8-16a0-a38f3.tmp
O43 - CFD: 31/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16c8-16a0-a38f5.tmp
O43 - CFD: 31/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16c8-16a0-a3907.tmp
O43 - CFD: 31/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16c8-16a0-a3909.tmp
O43 - CFD: 31/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16c8-16a0-a391b.tmp
O43 - CFD: 31/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16c8-16a0-a392c.tmp
O43 - CFD: 31/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16c8-16a0-a392e.tmp
O43 - CFD: 31/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16c8-16a0-a3940.tmp
O43 - CFD: 31/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16c8-16a0-a3951.tmp
O43 - CFD: 27/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16dc-1408-1ded7d.tmp
O43 - CFD: 27/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16dc-1408-1ded9e.tmp
O43 - CFD: 27/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16dc-1408-1dedb0.tmp
O43 - CFD: 27/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16dc-1408-1dedb2.tmp
O43 - CFD: 27/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16dc-1408-1dedc4.tmp
O43 - CFD: 27/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16dc-1408-1dedd5.tmp
O43 - CFD: 27/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16dc-1408-1dedd7.tmp
O43 - CFD: 27/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16dc-1408-1dede9.tmp
O43 - CFD: 27/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16dc-1408-1dedfb.tmp
O43 - CFD: 27/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16dc-1408-1dee0c.tmp
O43 - CFD: 27/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16dc-1408-1dee1e.tmp
O43 - CFD: 27/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16dc-1408-1dee20.tmp
O43 - CFD: 27/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16dc-1408-1dee31.tmp
O43 - CFD: 27/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16dc-1408-1dee43.tmp
O43 - CFD: 27/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16dc-1408-1dee45.tmp
O43 - CFD: 27/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16dc-1408-1dee57.tmp
O43 - CFD: 27/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16dc-1408-1dee68.tmp
O43 - CFD: 27/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16dc-1408-1dee7a.tmp
O43 - CFD: 27/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-16dc-1408-1dee8c.tmp
O43 - CFD: 27/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1710-1f80-50e0ecc.tmp
O43 - CFD: 27/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1710-1f80-50e0ede.tmp
O43 - CFD: 27/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1710-1f80-50e0ef0.tmp
O43 - CFD: 27/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1710-1f80-50e0f01.tmp
O43 - CFD: 27/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1710-1f80-50e0f13.tmp
O43 - CFD: 27/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1710-1f80-50e0f15.tmp
O43 - CFD: 27/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1710-1f80-50e0f27.tmp
O43 - CFD: 27/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1710-1f80-50e0f38.tmp
O43 - CFD: 27/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1710-1f80-50e0f4a.tmp
O43 - CFD: 27/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1710-1f80-50e0f5b.tmp
O43 - CFD: 27/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1710-1f80-50e0f5d.tmp
O43 - CFD: 27/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1710-1f80-50e0f6f.tmp
O43 - CFD: 27/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1710-1f80-50e0f81.tmp
O43 - CFD: 27/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1710-1f80-50e0f83.tmp
O43 - CFD: 27/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1710-1f80-50e0f94.tmp
O43 - CFD: 27/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1710-1f80-50e0fa6.tmp
O43 - CFD: 27/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1710-1f80-50e0fb8.tmp
O43 - CFD: 27/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1710-1f80-50e0fba.tmp
O43 - CFD: 27/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1710-1f80-50e0fcb.tmp
O43 - CFD: 22/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-172c-1950-2296aa.tmp
O43 - CFD: 22/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-172c-1950-2296bc.tmp
O43 - CFD: 22/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-172c-1950-2296ce.tmp
O43 - CFD: 22/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-172c-1950-2296df.tmp
O43 - CFD: 22/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-172c-1950-2296e1.tmp
O43 - CFD: 22/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-172c-1950-2296f3.tmp
O43 - CFD: 22/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-172c-1950-229704.tmp
O43 - CFD: 22/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-172c-1950-229706.tmp
O43 - CFD: 22/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-172c-1950-229718.tmp
O43 - CFD: 22/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-172c-1950-22972a.tmp
O43 - CFD: 22/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-172c-1950-22972c.tmp
O43 - CFD: 22/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-172c-1950-22973d.tmp
O43 - CFD: 22/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-172c-1950-22973f.tmp
O43 - CFD: 22/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-172c-1950-229751.tmp
O43 - CFD: 22/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-172c-1950-229772.tmp
O43 - CFD: 22/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-172c-1950-229784.tmp
O43 - CFD: 22/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-172c-1950-2297b5.tmp
O43 - CFD: 22/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-172c-1950-2297c6.tmp
O43 - CFD: 22/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-172c-1950-2297d8.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1758-19c8-29b164.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1758-19c8-29b185.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1758-19c8-29b187.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1758-19c8-29b199.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1758-19c8-29b1ab.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1758-19c8-29b1ad.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1758-19c8-29b1be.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1758-19c8-29b1d0.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1758-19c8-29b1d2.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1758-19c8-29b1e3.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1758-19c8-29b1f5.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1758-19c8-29b1f7.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1758-19c8-29b209.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1758-19c8-29b21a.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1758-19c8-29b21c.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1758-19c8-29b22e.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1758-19c8-29b230.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1758-19c8-29b242.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1758-19c8-29b253.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1764-17ac-a504f.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1764-17ac-a5071.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1764-17ac-a5073.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1764-17ac-a5084.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1764-17ac-a5096.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1764-17ac-a50a7.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1764-17ac-a50b9.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1764-17ac-a50cb.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1764-17ac-a50dc.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1764-17ac-a50de.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1764-17ac-a50f0.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1764-17ac-a5102.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1764-17ac-a5113.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1764-17ac-a5125.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1764-17ac-a5127.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1764-17ac-a5138.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1764-17ac-a514a.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1764-17ac-a514c.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1764-17ac-a515e.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1780-10c8-bedc3.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1780-10c8-bede4.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1780-10c8-bedf6.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1780-10c8-bedf8.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1780-10c8-bee0a.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1780-10c8-bee0c.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1780-10c8-bee1d.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1780-10c8-bee2f.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1780-10c8-bee31.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1780-10c8-bee42.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1780-10c8-bee54.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1780-10c8-bee56.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1780-10c8-bee68.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1780-10c8-bee79.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1780-10c8-bee8b.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1780-10c8-bee8d.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1780-10c8-bee9f.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1780-10c8-beeb0.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1780-10c8-beeb2.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1784-828-c2147.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1784-828-c2158.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1784-828-c216a.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1784-828-c216c.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1784-828-c217d.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1784-828-c218f.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1784-828-c2191.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1784-828-c21a3.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1784-828-c21b4.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1784-828-c21b6.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1784-828-c21c8.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1784-828-c21da.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1784-828-c21eb.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1784-828-c220c.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1784-828-c221e.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1784-828-c2220.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1784-828-c2232.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1784-828-c2243.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1784-828-c2255.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1794-19f4-344fb7.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1794-19f4-344fe8.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1794-19f4-345009.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1794-19f4-34501a.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1794-19f4-34503c.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1794-19f4-34503e.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1794-19f4-34505f.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1794-19f4-345080.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1794-19f4-3450a1.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1794-19f4-3450b3.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1794-19f4-3450c5.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1794-19f4-3450f6.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1794-19f4-345107.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1794-19f4-345128.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1794-19f4-34513a.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1794-19f4-34514c.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1794-19f4-34514e.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1794-19f4-34517f.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1794-19f4-3451a0.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17a8-d0-1e6fec.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17a8-d0-1e700d.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17a8-d0-1e701f.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17a8-d0-1e7030.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17a8-d0-1e7052.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17a8-d0-1e7073.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17a8-d0-1e7084.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17a8-d0-1e7096.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17a8-d0-1e70b7.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17a8-d0-1e70c9.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17a8-d0-1e70ea.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17a8-d0-1e710b.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17a8-d0-1e712d.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17a8-d0-1e714e.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17a8-d0-1e717f.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17a8-d0-1e7190.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17a8-d0-1e71b2.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17a8-d0-1e71d3.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17a8-d0-1e71f4.tmp
O43 - CFD: 05/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17d0-17f4-209220.tmp
O43 - CFD: 05/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17d0-17f4-209241.tmp
O43 - CFD: 05/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17d0-17f4-209253.tmp
O43 - CFD: 05/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17d0-17f4-209274.tmp
O43 - CFD: 05/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17d0-17f4-209286.tmp
O43 - CFD: 05/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17d0-17f4-209297.tmp
O43 - CFD: 05/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17d0-17f4-2092a9.tmp
O43 - CFD: 05/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17d0-17f4-2092bb.tmp
O43 - CFD: 05/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17d0-17f4-2092dc.tmp
O43 - CFD: 05/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17d0-17f4-2092ed.tmp
O43 - CFD: 05/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17d0-17f4-2092ff.tmp
O43 - CFD: 05/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17d0-17f4-209311.tmp
O43 - CFD: 05/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17d0-17f4-209322.tmp
O43 - CFD: 05/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17d0-17f4-209334.tmp
O43 - CFD: 05/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17d0-17f4-209346.tmp
O43 - CFD: 05/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17d0-17f4-209357.tmp
O43 - CFD: 05/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17d0-17f4-209378.tmp
O43 - CFD: 05/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17d0-17f4-20938a.tmp
O43 - CFD: 05/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17d0-17f4-20939c.tmp
O43 - CFD: 25/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17f8-c2c-502f5eb.tmp
O43 - CFD: 25/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17f8-c2c-502f60c.tmp
O43 - CFD: 25/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17f8-c2c-502f61e.tmp
O43 - CFD: 25/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17f8-c2c-502f620.tmp
O43 - CFD: 25/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17f8-c2c-502f631.tmp
O43 - CFD: 25/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17f8-c2c-502f633.tmp
O43 - CFD: 25/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17f8-c2c-502f645.tmp
O43 - CFD: 25/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17f8-c2c-502f657.tmp
O43 - CFD: 25/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17f8-c2c-502f668.tmp
O43 - CFD: 25/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17f8-c2c-502f66a.tmp
O43 - CFD: 25/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17f8-c2c-502f67c.tmp
O43 - CFD: 25/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17f8-c2c-502f68d.tmp
O43 - CFD: 25/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17f8-c2c-502f68f.tmp
O43 - CFD: 25/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17f8-c2c-502f6a1.tmp
O43 - CFD: 25/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17f8-c2c-502f6b3.tmp
O43 - CFD: 25/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17f8-c2c-502f6c4.tmp
O43 - CFD: 25/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17f8-c2c-502f6e6.tmp
O43 - CFD: 25/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17f8-c2c-502f6f7.tmp
O43 - CFD: 25/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-17f8-c2c-502f709.tmp
O43 - CFD: 09/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1804-1bc4-a5e78.tmp
O43 - CFD: 09/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1804-1bc4-a5e9a.tmp
O43 - CFD: 09/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1804-1bc4-a5eab.tmp
O43 - CFD: 09/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1804-1bc4-a5ebd.tmp
O43 - CFD: 09/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1804-1bc4-a5ebf.tmp
O43 - CFD: 09/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1804-1bc4-a5ee0.tmp
O43 - CFD: 09/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1804-1bc4-a5ee2.tmp
O43 - CFD: 09/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1804-1bc4-a5ef4.tmp
O43 - CFD: 09/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1804-1bc4-a5ef6.tmp
O43 - CFD: 09/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1804-1bc4-a5f07.tmp
O43 - CFD: 09/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1804-1bc4-a5f19.tmp
O43 - CFD: 09/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1804-1bc4-a5f1b.tmp
O43 - CFD: 09/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1804-1bc4-a5f2d.tmp
O43 - CFD: 09/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1804-1bc4-a5f3e.tmp
O43 - CFD: 09/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1804-1bc4-a5f40.tmp
O43 - CFD: 09/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1804-1bc4-a5f52.tmp
O43 - CFD: 09/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1804-1bc4-a5f63.tmp
O43 - CFD: 09/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1804-1bc4-a5f65.tmp
O43 - CFD: 09/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1804-1bc4-a5f77.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1834-16e8-75cb836.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1834-16e8-75cb857.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1834-16e8-75cb878.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1834-16e8-75cb88a.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1834-16e8-75cb88c.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1834-16e8-75cb89e.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1834-16e8-75cb8af.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1834-16e8-75cb8c1.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1834-16e8-75cb8d2.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1834-16e8-75cb8d4.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1834-16e8-75cb8e6.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1834-16e8-75cb8f8.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1834-16e8-75cb909.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1834-16e8-75cb91b.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1834-16e8-75cb91d.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1834-16e8-75cb92f.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1834-16e8-75cb940.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1834-16e8-75cb952.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1834-16e8-75cb973.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1840-f38-957fec2.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1840-f38-957fee4.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1840-f38-957fee6.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1840-f38-957fef7.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1840-f38-957ff09.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1840-f38-957ff1a.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1840-f38-957ff2c.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1840-f38-957ff3e.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1840-f38-957ff5f.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1840-f38-957ff71.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1840-f38-957ff82.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1840-f38-957ff94.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1840-f38-957ffa5.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1840-f38-957ffb7.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1840-f38-957ffc9.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1840-f38-957ffda.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1840-f38-958001b.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1840-f38-958002c.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1840-f38-958005d.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1844-1bc8-16320f.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1844-1bc8-163230.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1844-1bc8-163232.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1844-1bc8-163244.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1844-1bc8-163255.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1844-1bc8-163267.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1844-1bc8-163269.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1844-1bc8-16327b.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1844-1bc8-16328c.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1844-1bc8-16328e.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1844-1bc8-1632a0.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1844-1bc8-1632b1.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1844-1bc8-1632b3.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1844-1bc8-1632c5.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1844-1bc8-1632d7.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1844-1bc8-1632e8.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1844-1bc8-1632fa.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1844-1bc8-16330c.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1844-1bc8-16332d.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-185c-1e3c-567bb67.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-185c-1e3c-567bb98.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-185c-1e3c-567bb9a.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-185c-1e3c-567bbac.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-185c-1e3c-567bbbd.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-185c-1e3c-567bbbf.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-185c-1e3c-567bbd1.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-185c-1e3c-567bbe2.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-185c-1e3c-567bbf4.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-185c-1e3c-567bc06.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-185c-1e3c-567bc17.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-185c-1e3c-567bc29.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-185c-1e3c-567bc3b.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-185c-1e3c-567bc4c.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-185c-1e3c-567bc4e.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-185c-1e3c-567bc60.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-185c-1e3c-567bc71.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-185c-1e3c-567bc73.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-185c-1e3c-567bc85.tmp
O43 - CFD: 12/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-186c-8f0-225d8ea.tmp
O43 - CFD: 12/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-186c-8f0-225d8ec.tmp
O43 - CFD: 12/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-186c-8f0-225d90e.tmp
O43 - CFD: 12/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-186c-8f0-225d910.tmp
O43 - CFD: 12/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-186c-8f0-225d921.tmp
O43 - CFD: 12/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-186c-8f0-225d933.tmp
O43 - CFD: 12/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-186c-8f0-225d935.tmp
O43 - CFD: 12/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-186c-8f0-225d946.tmp
O43 - CFD: 12/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-186c-8f0-225d958.tmp
O43 - CFD: 12/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-186c-8f0-225d95a.tmp
O43 - CFD: 12/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-186c-8f0-225d96c.tmp
O43 - CFD: 12/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-186c-8f0-225d97d.tmp
O43 - CFD: 12/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-186c-8f0-225d97f.tmp
O43 - CFD: 12/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-186c-8f0-225d991.tmp
O43 - CFD: 12/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-186c-8f0-225d9b2.tmp
O43 - CFD: 12/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-186c-8f0-225d9b4.tmp
O43 - CFD: 12/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-186c-8f0-225d9c6.tmp
O43 - CFD: 12/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-186c-8f0-225d9d7.tmp
O43 - CFD: 12/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-186c-8f0-225d9d9.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-186c-e00-1eb2a2.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-186c-e00-1eb2c3.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-186c-e00-1eb2d5.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-186c-e00-1eb2f6.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-186c-e00-1eb317.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-186c-e00-1eb329.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-186c-e00-1eb34a.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-186c-e00-1eb37b.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-186c-e00-1eb38d.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-186c-e00-1eb3ae.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-186c-e00-1eb3cf.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-186c-e00-1eb3e1.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-186c-e00-1eb402.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-186c-e00-1eb423.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-186c-e00-1eb445.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-186c-e00-1eb456.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-186c-e00-1eb477.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-186c-e00-1eb489.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-186c-e00-1eb49b.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1884-ef4-254a737.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1884-ef4-254a749.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1884-ef4-254a74b.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1884-ef4-254a75c.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1884-ef4-254a76e.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1884-ef4-254a770.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1884-ef4-254a782.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1884-ef4-254a793.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1884-ef4-254a795.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1884-ef4-254a7a7.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1884-ef4-254a7b8.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1884-ef4-254a7ba.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1884-ef4-254a7cc.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1884-ef4-254a7de.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1884-ef4-254a7e0.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1884-ef4-254a7f1.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1884-ef4-254a7f3.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1884-ef4-254a805.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1884-ef4-254a817.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-188c-1e38-19091c.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-188c-1e38-19093d.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-188c-1e38-19094f.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-188c-1e38-190951.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-188c-1e38-190962.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-188c-1e38-190974.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-188c-1e38-190986.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-188c-1e38-190988.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-188c-1e38-190999.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-188c-1e38-1909ab.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-188c-1e38-1909ad.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-188c-1e38-1909be.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-188c-1e38-1909d0.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-188c-1e38-1909e2.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-188c-1e38-1909f3.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-188c-1e38-1909f5.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-188c-1e38-190a07.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-188c-1e38-190a19.tmp
O43 - CFD: 07/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-188c-1e38-190a2a.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-188c-b08-f4d58b.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-188c-b08-f4d59c.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-188c-b08-f4d5ae.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-188c-b08-f4d5bf.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-188c-b08-f4d5e1.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-188c-b08-f4d5f2.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-188c-b08-f4d604.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-188c-b08-f4d616.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-188c-b08-f4d637.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-188c-b08-f4d648.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-188c-b08-f4d64a.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-188c-b08-f4d67b.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-188c-b08-f4d68d.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-188c-b08-f4d68f.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-188c-b08-f4d6b0.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-188c-b08-f4d6c2.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-188c-b08-f4d6d3.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-188c-b08-f4d6e5.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-188c-b08-f4d6f7.tmp
O43 - CFD: 21/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18a4-1594-ced70.tmp
O43 - CFD: 21/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18a4-1594-ced91.tmp
O43 - CFD: 21/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18a4-1594-ceda3.tmp
O43 - CFD: 21/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18a4-1594-cedb5.tmp
O43 - CFD: 21/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18a4-1594-cedc6.tmp
O43 - CFD: 21/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18a4-1594-cede8.tmp
O43 - CFD: 21/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18a4-1594-cedf9.tmp
O43 - CFD: 21/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18a4-1594-cedfb.tmp
O43 - CFD: 21/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18a4-1594-cee0d.tmp
O43 - CFD: 21/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18a4-1594-cee1e.tmp
O43 - CFD: 21/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18a4-1594-cee30.tmp
O43 - CFD: 21/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18a4-1594-cee42.tmp
O43 - CFD: 21/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18a4-1594-cee53.tmp
O43 - CFD: 21/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18a4-1594-cee65.tmp
O43 - CFD: 21/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18a4-1594-cee86.tmp
O43 - CFD: 21/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18a4-1594-cee98.tmp
O43 - CFD: 21/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18a4-1594-ceea9.tmp
O43 - CFD: 21/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18a4-1594-ceebb.tmp
O43 - CFD: 21/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18a4-1594-ceecd.tmp
O43 - CFD: 05/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18bc-1ec0-2ee0e8.tmp
O43 - CFD: 05/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18bc-1ec0-2ee109.tmp
O43 - CFD: 05/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18bc-1ec0-2ee12a.tmp
O43 - CFD: 05/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18bc-1ec0-2ee14c.tmp
O43 - CFD: 05/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18bc-1ec0-2ee15d.tmp
O43 - CFD: 05/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18bc-1ec0-2ee17e.tmp
O43 - CFD: 05/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18bc-1ec0-2ee190.tmp
O43 - CFD: 05/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18bc-1ec0-2ee1c1.tmp
O43 - CFD: 05/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18bc-1ec0-2ee1e2.tmp
O43 - CFD: 05/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18bc-1ec0-2ee1f4.tmp
O43 - CFD: 05/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18bc-1ec0-2ee205.tmp
O43 - CFD: 05/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18bc-1ec0-2ee217.tmp
O43 - CFD: 05/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18bc-1ec0-2ee238.tmp
O43 - CFD: 05/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18bc-1ec0-2ee25a.tmp
O43 - CFD: 05/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18bc-1ec0-2ee26b.tmp
O43 - CFD: 05/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18bc-1ec0-2ee28c.tmp
O43 - CFD: 05/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18bc-1ec0-2ee29e.tmp
O43 - CFD: 05/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18bc-1ec0-2ee2bf.tmp
O43 - CFD: 05/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18bc-1ec0-2ee2f0.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18c4-1bd0-171e44.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18c4-1bd0-171e55.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18c4-1bd0-171e67.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18c4-1bd0-171e88.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18c4-1bd0-171e9a.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18c4-1bd0-171eab.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18c4-1bd0-171ecd.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18c4-1bd0-171ede.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18c4-1bd0-171ef0.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18c4-1bd0-171f01.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18c4-1bd0-171f13.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18c4-1bd0-171f25.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18c4-1bd0-171f36.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18c4-1bd0-171f48.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18c4-1bd0-171f5a.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18c4-1bd0-171f7b.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18c4-1bd0-171f8c.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18c4-1bd0-171f9e.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18c4-1bd0-171fb0.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18c8-c38-24cf74.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18c8-c38-24cf95.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18c8-c38-24cfb6.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18c8-c38-24cfc8.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18c8-c38-24cfe9.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18c8-c38-24cffb.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18c8-c38-24d00c.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18c8-c38-24d01e.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18c8-c38-24d03f.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18c8-c38-24d041.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18c8-c38-24d053.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18c8-c38-24d064.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18c8-c38-24d076.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18c8-c38-24d088.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18c8-c38-24d099.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18c8-c38-24d0ab.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18c8-c38-24d0ad.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18c8-c38-24d0ce.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18c8-c38-24d0e0.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18d0-ccc-18ae69.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18d0-ccc-18ae8a.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18d0-ccc-18ae9c.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18d0-ccc-18aeae.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18d0-ccc-18aebf.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18d0-ccc-18aef0.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18d0-ccc-18af02.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18d0-ccc-18af13.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18d0-ccc-18af25.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18d0-ccc-18af37.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18d0-ccc-18af48.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18d0-ccc-18af4a.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18d0-ccc-18af5c.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18d0-ccc-18af6d.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18d0-ccc-18af7f.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18d0-ccc-18af91.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18d0-ccc-18afa2.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18d0-ccc-18afb4.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18d0-ccc-18afc6.tmp
O43 - CFD: 01/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18d8-ae8-3227c6.tmp
O43 - CFD: 01/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18d8-ae8-3227e7.tmp
O43 - CFD: 01/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18d8-ae8-3227f9.tmp
O43 - CFD: 01/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18d8-ae8-32280a.tmp
O43 - CFD: 01/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18d8-ae8-32280c.tmp
O43 - CFD: 01/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18d8-ae8-32281e.tmp
O43 - CFD: 01/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18d8-ae8-322830.tmp
O43 - CFD: 01/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18d8-ae8-322841.tmp
O43 - CFD: 01/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18d8-ae8-322853.tmp
O43 - CFD: 01/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18d8-ae8-322864.tmp
O43 - CFD: 01/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18d8-ae8-322866.tmp
O43 - CFD: 01/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18d8-ae8-322868.tmp
O43 - CFD: 01/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18d8-ae8-32287a.tmp
O43 - CFD: 01/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18d8-ae8-32288c.tmp
O43 - CFD: 01/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18d8-ae8-3228ad.tmp
O43 - CFD: 01/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18d8-ae8-3228bf.tmp
O43 - CFD: 01/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18d8-ae8-3228d0.tmp
O43 - CFD: 01/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18d8-ae8-322901.tmp
O43 - CFD: 01/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18d8-ae8-322922.tmp
O43 - CFD: 09/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e4-1824-b8516.tmp
O43 - CFD: 09/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e4-1824-b8537.tmp
O43 - CFD: 09/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e4-1824-b8549.tmp
O43 - CFD: 09/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e4-1824-b854b.tmp
O43 - CFD: 09/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e4-1824-b855d.tmp
O43 - CFD: 09/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e4-1824-b856e.tmp
O43 - CFD: 09/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e4-1824-b8570.tmp
O43 - CFD: 09/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e4-1824-b8582.tmp
O43 - CFD: 09/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e4-1824-b8594.tmp
O43 - CFD: 09/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e4-1824-b8596.tmp
O43 - CFD: 09/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e4-1824-b85a7.tmp
O43 - CFD: 09/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e4-1824-b85b9.tmp
O43 - CFD: 09/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e4-1824-b85bb.tmp
O43 - CFD: 09/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e4-1824-b85cc.tmp
O43 - CFD: 09/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e4-1824-b85ce.tmp
O43 - CFD: 09/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e4-1824-b85e0.tmp
O43 - CFD: 09/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e4-1824-b8601.tmp
O43 - CFD: 09/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e4-1824-b8613.tmp
O43 - CFD: 09/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e4-1824-b8625.tmp
O43 - CFD: 25/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e4-1efc-133bb2.tmp
O43 - CFD: 25/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e4-1efc-133bd3.tmp
O43 - CFD: 25/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e4-1efc-133be5.tmp
O43 - CFD: 25/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e4-1efc-133be7.tmp
O43 - CFD: 25/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e4-1efc-133bf9.tmp
O43 - CFD: 25/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e4-1efc-133c0a.tmp
O43 - CFD: 25/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e4-1efc-133c0c.tmp
O43 - CFD: 25/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e4-1efc-133c1e.tmp
O43 - CFD: 25/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e4-1efc-133c4f.tmp
O43 - CFD: 25/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e4-1efc-133c60.tmp
O43 - CFD: 25/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e4-1efc-133c72.tmp
O43 - CFD: 25/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e4-1efc-133c74.tmp
O43 - CFD: 25/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e4-1efc-133c86.tmp
O43 - CFD: 25/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e4-1efc-133c97.tmp
O43 - CFD: 25/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e4-1efc-133ca9.tmp
O43 - CFD: 25/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e4-1efc-133cbb.tmp
O43 - CFD: 25/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e4-1efc-133ccc.tmp
O43 - CFD: 25/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e4-1efc-133cce.tmp
O43 - CFD: 25/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e4-1efc-133ce0.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e8-18f0-a6acd.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e8-18f0-a6aee.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e8-18f0-a6af0.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e8-18f0-a6b01.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e8-18f0-a6b13.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e8-18f0-a6b15.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e8-18f0-a6b36.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e8-18f0-a6b48.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e8-18f0-a6b5a.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e8-18f0-a6b5c.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e8-18f0-a6b5e.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e8-18f0-a6b6f.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e8-18f0-a6b90.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e8-18f0-a6b92.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e8-18f0-a6ba4.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e8-18f0-a6bb6.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e8-18f0-a6bc7.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e8-18f0-a6bd9.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-18e8-18f0-a6beb.tmp
O43 - CFD: 08/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1928-fd4-a8097.tmp
O43 - CFD: 08/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1928-fd4-a80a8.tmp
O43 - CFD: 08/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1928-fd4-a80ba.tmp
O43 - CFD: 08/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1928-fd4-a80bc.tmp
O43 - CFD: 08/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1928-fd4-a80ce.tmp
O43 - CFD: 08/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1928-fd4-a80df.tmp
O43 - CFD: 08/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1928-fd4-a80f1.tmp
O43 - CFD: 08/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1928-fd4-a80f3.tmp
O43 - CFD: 08/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1928-fd4-a8104.tmp
O43 - CFD: 08/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1928-fd4-a8135.tmp
O43 - CFD: 08/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1928-fd4-a8137.tmp
O43 - CFD: 08/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1928-fd4-a8159.tmp
O43 - CFD: 08/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1928-fd4-a815b.tmp
O43 - CFD: 08/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1928-fd4-a816c.tmp
O43 - CFD: 08/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1928-fd4-a816e.tmp
O43 - CFD: 08/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1928-fd4-a8180.tmp
O43 - CFD: 08/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1928-fd4-a8191.tmp
O43 - CFD: 08/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1928-fd4-a8193.tmp
O43 - CFD: 08/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1928-fd4-a81a5.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1934-1aa0-adfdd.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1934-1aa0-adfff.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1934-1aa0-ae010.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1934-1aa0-ae022.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1934-1aa0-ae024.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1934-1aa0-ae035.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1934-1aa0-ae047.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1934-1aa0-ae059.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1934-1aa0-ae06a.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1934-1aa0-ae06c.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1934-1aa0-ae07e.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1934-1aa0-ae090.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1934-1aa0-ae092.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1934-1aa0-ae0a3.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1934-1aa0-ae0b5.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1934-1aa0-ae0c6.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1934-1aa0-ae0d8.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1934-1aa0-ae0da.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1934-1aa0-ae0ec.tmp
O43 - CFD: 29/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-194c-c44-408e0d.tmp
O43 - CFD: 29/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-194c-c44-408e2f.tmp
O43 - CFD: 29/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-194c-c44-408e40.tmp
O43 - CFD: 29/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-194c-c44-408e52.tmp
O43 - CFD: 29/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-194c-c44-408e63.tmp
O43 - CFD: 29/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-194c-c44-408e65.tmp
O43 - CFD: 29/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-194c-c44-408e77.tmp
O43 - CFD: 29/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-194c-c44-408e89.tmp
O43 - CFD: 29/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-194c-c44-408e9a.tmp
O43 - CFD: 29/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-194c-c44-408eac.tmp
O43 - CFD: 29/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-194c-c44-408eae.tmp
O43 - CFD: 29/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-194c-c44-408ecf.tmp
O43 - CFD: 29/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-194c-c44-408ee1.tmp
O43 - CFD: 29/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-194c-c44-408ef2.tmp
O43 - CFD: 29/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-194c-c44-408f04.tmp
O43 - CFD: 29/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-194c-c44-408f06.tmp
O43 - CFD: 29/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-194c-c44-408f18.tmp
O43 - CFD: 29/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-194c-c44-408f29.tmp
O43 - CFD: 29/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-194c-c44-408f3b.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-11cc-1b29aa.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-11cc-1b29bc.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-11cc-1b29dd.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-11cc-1b29ef.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-11cc-1b2a00.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-11cc-1b2a12.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-11cc-1b2a23.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-11cc-1b2a35.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-11cc-1b2a47.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-11cc-1b2a58.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-11cc-1b2a6a.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-11cc-1b2a8b.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-11cc-1b2a8d.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-11cc-1b2a8f.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-11cc-1b2aa1.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-11cc-1b2aa3.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-11cc-1b2ac4.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-11cc-1b2ad6.tmp
O43 - CFD: 07/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-11cc-1b2ae7.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-7b4-115771e.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-7b4-115773f.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-7b4-1157751.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-7b4-1157753.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-7b4-1157765.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-7b4-1157776.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-7b4-1157778.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-7b4-115778a.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-7b4-115779c.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-7b4-115779e.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-7b4-11577af.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-7b4-11577c1.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-7b4-11577c3.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-7b4-11577d4.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-7b4-11577e6.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-7b4-11577e8.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-7b4-11577fa.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-7b4-115780b.tmp
O43 - CFD: 12/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-195c-7b4-115781d.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1970-1bf0-1bf595.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1970-1bf0-1bf5b6.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1970-1bf0-1bf5c8.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1970-1bf0-1bf5ca.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1970-1bf0-1bf5dc.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1970-1bf0-1bf5de.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1970-1bf0-1bf5ef.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1970-1bf0-1bf601.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1970-1bf0-1bf603.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1970-1bf0-1bf615.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1970-1bf0-1bf626.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1970-1bf0-1bf628.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1970-1bf0-1bf63a.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1970-1bf0-1bf64b.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1970-1bf0-1bf65d.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1970-1bf0-1bf67e.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1970-1bf0-1bf680.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1970-1bf0-1bf692.tmp
O43 - CFD: 13/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1970-1bf0-1bf6a4.tmp
O43 - CFD: 10/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-199c-568-5517149.tmp
O43 - CFD: 10/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-199c-568-551715b.tmp
O43 - CFD: 10/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-199c-568-551716d.tmp
O43 - CFD: 10/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-199c-568-551717e.tmp
O43 - CFD: 10/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-199c-568-5517190.tmp
O43 - CFD: 10/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-199c-568-5517192.tmp
O43 - CFD: 10/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-199c-568-55171a4.tmp
O43 - CFD: 10/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-199c-568-55171b5.tmp
O43 - CFD: 10/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-199c-568-55171c7.tmp
O43 - CFD: 10/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-199c-568-55171d8.tmp
O43 - CFD: 10/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-199c-568-55171ea.tmp
O43 - CFD: 10/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-199c-568-55171ec.tmp
O43 - CFD: 10/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-199c-568-551720d.tmp
O43 - CFD: 10/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-199c-568-551721f.tmp
O43 - CFD: 10/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-199c-568-5517231.tmp
O43 - CFD: 10/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-199c-568-5517242.tmp
O43 - CFD: 10/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-199c-568-5517244.tmp
O43 - CFD: 10/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-199c-568-5517256.tmp
O43 - CFD: 10/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-199c-568-5517267.tmp
O43 - CFD: 12/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19a0-d3c-1143a0ac.tmp
O43 - CFD: 12/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19a0-d3c-1143a0cd.tmp
O43 - CFD: 12/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19a0-d3c-1143a0df.tmp
O43 - CFD: 12/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19a0-d3c-1143a0f1.tmp
O43 - CFD: 12/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19a0-d3c-1143a0f3.tmp
O43 - CFD: 12/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19a0-d3c-1143a104.tmp
O43 - CFD: 12/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19a0-d3c-1143a116.tmp
O43 - CFD: 12/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19a0-d3c-1143a128.tmp
O43 - CFD: 12/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19a0-d3c-1143a139.tmp
O43 - CFD: 12/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19a0-d3c-1143a14b.tmp
O43 - CFD: 12/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19a0-d3c-1143a14d.tmp
O43 - CFD: 12/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19a0-d3c-1143a15e.tmp
O43 - CFD: 12/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19a0-d3c-1143a170.tmp
O43 - CFD: 12/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19a0-d3c-1143a191.tmp
O43 - CFD: 12/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19a0-d3c-1143a1b3.tmp
O43 - CFD: 12/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19a0-d3c-1143a1c4.tmp
O43 - CFD: 12/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19a0-d3c-1143a1d6.tmp
O43 - CFD: 12/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19a0-d3c-1143a1e7.tmp
O43 - CFD: 12/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19a0-d3c-1143a1f9.tmp
O43 - CFD: 13/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19d4-19e4-1218be.tmp
O43 - CFD: 13/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19d4-19e4-1218c0.tmp
O43 - CFD: 13/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19d4-19e4-1218d1.tmp
O43 - CFD: 13/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19d4-19e4-1218d3.tmp
O43 - CFD: 13/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19d4-19e4-1218e5.tmp
O43 - CFD: 13/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19d4-19e4-1218e7.tmp
O43 - CFD: 13/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19d4-19e4-1218e9.tmp
O43 - CFD: 13/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19d4-19e4-1218fb.tmp
O43 - CFD: 13/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19d4-19e4-1218fd.tmp
O43 - CFD: 13/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19d4-19e4-12190e.tmp
O43 - CFD: 13/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19d4-19e4-121910.tmp
O43 - CFD: 13/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19d4-19e4-121912.tmp
O43 - CFD: 13/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19d4-19e4-121924.tmp
O43 - CFD: 13/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19d4-19e4-121926.tmp
O43 - CFD: 13/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19d4-19e4-121938.tmp
O43 - CFD: 13/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19d4-19e4-12193a.tmp
O43 - CFD: 13/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19d4-19e4-12193c.tmp
O43 - CFD: 13/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19d4-19e4-12194d.tmp
O43 - CFD: 13/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-19d4-19e4-12195f.tmp
O43 - CFD: 08/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a2c-14d8-477f35f.tmp
O43 - CFD: 08/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a2c-14d8-477f38f.tmp
O43 - CFD: 08/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a2c-14d8-477f3b1.tmp
O43 - CFD: 08/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a2c-14d8-477f3c2.tmp
O43 - CFD: 08/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a2c-14d8-477f3d4.tmp
O43 - CFD: 08/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a2c-14d8-477f3e6.tmp
O43 - CFD: 08/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a2c-14d8-477f3f7.tmp
O43 - CFD: 08/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a2c-14d8-477f418.tmp
O43 - CFD: 08/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a2c-14d8-477f42a.tmp
O43 - CFD: 08/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a2c-14d8-477f45b.tmp
O43 - CFD: 08/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a2c-14d8-477f45d.tmp
O43 - CFD: 08/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a2c-14d8-477f46f.tmp
O43 - CFD: 08/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a2c-14d8-477f480.tmp
O43 - CFD: 08/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a2c-14d8-477f492.tmp
O43 - CFD: 08/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a2c-14d8-477f4b3.tmp
O43 - CFD: 08/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a2c-14d8-477f4c5.tmp
O43 - CFD: 08/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a2c-14d8-477f4d6.tmp
O43 - CFD: 08/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a2c-14d8-477f4e8.tmp
O43 - CFD: 08/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a2c-14d8-477f4fa.tmp
O43 - CFD: 25/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a2c-1538-de444.tmp
O43 - CFD: 25/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a2c-1538-de455.tmp
O43 - CFD: 25/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a2c-1538-de467.tmp
O43 - CFD: 25/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a2c-1538-de479.tmp
O43 - CFD: 25/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a2c-1538-de47b.tmp
O43 - CFD: 25/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a2c-1538-de48c.tmp
O43 - CFD: 25/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a2c-1538-de48e.tmp
O43 - CFD: 25/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a2c-1538-de4a0.tmp
O43 - CFD: 25/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a2c-1538-de4b1.tmp
O43 - CFD: 25/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a2c-1538-de4b3.tmp
O43 - CFD: 25/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a2c-1538-de4c5.tmp
O43 - CFD: 25/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a2c-1538-de4d7.tmp
O43 - CFD: 25/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a2c-1538-de4d9.tmp
O43 - CFD: 25/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a2c-1538-de4ea.tmp
O43 - CFD: 25/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a2c-1538-de4fc.tmp
O43 - CFD: 25/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a2c-1538-de4fe.tmp
O43 - CFD: 25/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a2c-1538-de510.tmp
O43 - CFD: 25/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a2c-1538-de512.tmp
O43 - CFD: 25/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a2c-1538-de523.tmp
O43 - CFD: 14/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a30-13c4-a3de1.tmp
O43 - CFD: 14/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a30-13c4-a3df2.tmp
O43 - CFD: 14/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a30-13c4-a3e04.tmp
O43 - CFD: 14/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a30-13c4-a3e15.tmp
O43 - CFD: 14/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a30-13c4-a3e17.tmp
O43 - CFD: 14/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a30-13c4-a3e29.tmp
O43 - CFD: 14/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a30-13c4-a3e2b.tmp
O43 - CFD: 14/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a30-13c4-a3e3d.tmp
O43 - CFD: 14/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a30-13c4-a3e4e.tmp
O43 - CFD: 14/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a30-13c4-a3e50.tmp
O43 - CFD: 14/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a30-13c4-a3e62.tmp
O43 - CFD: 14/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a30-13c4-a3e64.tmp
O43 - CFD: 14/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a30-13c4-a3e76.tmp
O43 - CFD: 14/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a30-13c4-a3e87.tmp
O43 - CFD: 14/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a30-13c4-a3e89.tmp
O43 - CFD: 14/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a30-13c4-a3e9b.tmp
O43 - CFD: 14/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a30-13c4-a3e9d.tmp
O43 - CFD: 14/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a30-13c4-a3eae.tmp
O43 - CFD: 14/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a30-13c4-a3ec0.tmp
O43 - CFD: 03/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-15e0-b314f28.tmp
O43 - CFD: 03/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-15e0-b314f59.tmp
O43 - CFD: 03/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-15e0-b314f7a.tmp
O43 - CFD: 03/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-15e0-b314f9b.tmp
O43 - CFD: 03/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-15e0-b314fad.tmp
O43 - CFD: 03/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-15e0-b314fce.tmp
O43 - CFD: 03/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-15e0-b314fe0.tmp
O43 - CFD: 03/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-15e0-b315001.tmp
O43 - CFD: 03/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-15e0-b315022.tmp
O43 - CFD: 03/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-15e0-b315034.tmp
O43 - CFD: 03/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-15e0-b315055.tmp
O43 - CFD: 03/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-15e0-b315076.tmp
O43 - CFD: 03/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-15e0-b315088.tmp
O43 - CFD: 03/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-15e0-b3150a9.tmp
O43 - CFD: 03/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-15e0-b3150ca.tmp
O43 - CFD: 03/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-15e0-b3150dc.tmp
O43 - CFD: 03/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-15e0-b3150ee.tmp
O43 - CFD: 03/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-15e0-b31510f.tmp
O43 - CFD: 03/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-15e0-b315120.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-db0-1a7241.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-db0-1a7262.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-db0-1a7264.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-db0-1a7276.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-db0-1a7278.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-db0-1a7289.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-db0-1a729b.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-db0-1a729d.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-db0-1a72af.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-db0-1a72c0.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-db0-1a72c2.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-db0-1a72d4.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-db0-1a72e6.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-db0-1a72e8.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-db0-1a72f9.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-db0-1a730b.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-db0-1a730d.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-db0-1a731e.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a34-db0-1a7330.tmp
O43 - CFD: 29/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a40-1984-1d2fda.tmp
O43 - CFD: 29/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a40-1984-1d300b.tmp
O43 - CFD: 29/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a40-1984-1d301d.tmp
O43 - CFD: 29/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a40-1984-1d303e.tmp
O43 - CFD: 29/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a40-1984-1d3040.tmp
O43 - CFD: 29/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a40-1984-1d3061.tmp
O43 - CFD: 29/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a40-1984-1d3073.tmp
O43 - CFD: 29/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a40-1984-1d3075.tmp
O43 - CFD: 29/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a40-1984-1d3077.tmp
O43 - CFD: 29/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a40-1984-1d30a8.tmp
O43 - CFD: 29/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a40-1984-1d30b9.tmp
O43 - CFD: 29/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a40-1984-1d30cb.tmp
O43 - CFD: 29/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a40-1984-1d30dd.tmp
O43 - CFD: 29/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a40-1984-1d30df.tmp
O43 - CFD: 29/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a40-1984-1d30f0.tmp
O43 - CFD: 29/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a40-1984-1d3102.tmp
O43 - CFD: 29/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a40-1984-1d3104.tmp
O43 - CFD: 29/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a40-1984-1d3144.tmp
O43 - CFD: 29/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a40-1984-1d3156.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a4c-1ee8-ef24a15.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a4c-1ee8-ef24a36.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a4c-1ee8-ef24a38.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a4c-1ee8-ef24a49.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a4c-1ee8-ef24a4b.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a4c-1ee8-ef24a5d.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a4c-1ee8-ef24a6f.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a4c-1ee8-ef24a71.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a4c-1ee8-ef24a82.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a4c-1ee8-ef24a94.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a4c-1ee8-ef24a96.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a4c-1ee8-ef24aa8.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a4c-1ee8-ef24aaa.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a4c-1ee8-ef24abb.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a4c-1ee8-ef24acd.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a4c-1ee8-ef24acf.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a4c-1ee8-ef24ae0.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a4c-1ee8-ef24af2.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a4c-1ee8-ef24af4.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a74-1a2c-a700c.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a74-1a2c-a728f.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a74-1a2c-a72a1.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a74-1a2c-a72b2.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a74-1a2c-a72c4.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a74-1a2c-a72d5.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a74-1a2c-a72d7.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a74-1a2c-a72e9.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a74-1a2c-a72fb.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a74-1a2c-a730c.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a74-1a2c-a731e.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a74-1a2c-a7330.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a74-1a2c-a7341.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a74-1a2c-a7353.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a74-1a2c-a7364.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a74-1a2c-a7376.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a74-1a2c-a7388.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a74-1a2c-a7399.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1a74-1a2c-a739b.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ab8-1670-a329ec7.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ab8-1670-a329ed8.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ab8-1670-a329eda.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ab8-1670-a329eec.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ab8-1670-a329efe.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ab8-1670-a329f0f.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ab8-1670-a329f11.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ab8-1670-a329f23.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ab8-1670-a329f35.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ab8-1670-a329f46.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ab8-1670-a329f48.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ab8-1670-a329f5a.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ab8-1670-a329f6b.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ab8-1670-a329f6d.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ab8-1670-a329f8f.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ab8-1670-a329fa0.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ab8-1670-a329fa2.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ab8-1670-a329fa4.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ab8-1670-a329fc6.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1adc-590-9bfda77.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1adc-590-9bfda89.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1adc-590-9bfda9b.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1adc-590-9bfda9d.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1adc-590-9bfdaae.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1adc-590-9bfdac0.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1adc-590-9bfdac2.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1adc-590-9bfdad4.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1adc-590-9bfdae5.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1adc-590-9bfdae7.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1adc-590-9bfdaf9.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1adc-590-9bfdafb.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1adc-590-9bfdb0c.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1adc-590-9bfdb1e.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1adc-590-9bfdb20.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1adc-590-9bfdb32.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1adc-590-9bfdb43.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1adc-590-9bfdb45.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1adc-590-9bfdb57.tmp
O43 - CFD: 10/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ae0-18f8-29a6a6.tmp
O43 - CFD: 10/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ae0-18f8-29a6c7.tmp
O43 - CFD: 10/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ae0-18f8-29a6e9.tmp
O43 - CFD: 10/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ae0-18f8-29a70a.tmp
O43 - CFD: 10/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ae0-18f8-29a71b.tmp
O43 - CFD: 10/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ae0-18f8-29a71d.tmp
O43 - CFD: 10/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ae0-18f8-29a72f.tmp
O43 - CFD: 10/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ae0-18f8-29a750.tmp
O43 - CFD: 10/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ae0-18f8-29a762.tmp
O43 - CFD: 10/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ae0-18f8-29a774.tmp
O43 - CFD: 10/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ae0-18f8-29a785.tmp
O43 - CFD: 10/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ae0-18f8-29a797.tmp
O43 - CFD: 10/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ae0-18f8-29a7a8.tmp
O43 - CFD: 10/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ae0-18f8-29a7ba.tmp
O43 - CFD: 10/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ae0-18f8-29a7cc.tmp
O43 - CFD: 10/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ae0-18f8-29a7dd.tmp
O43 - CFD: 10/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ae0-18f8-29a7ef.tmp
O43 - CFD: 10/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ae0-18f8-29a801.tmp
O43 - CFD: 10/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ae0-18f8-29a812.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-daff7.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db018.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db03a.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db05b.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db464.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db485.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db497.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db4b8.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db4ca.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db4eb.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db4fd.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db51e.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db530.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db551.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db563.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db584.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db595.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db5a7.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db5c8.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db5ea.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db5ec.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db60d.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db61e.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db630.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db651.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db673.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db675.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db696.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db6a7.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db6b9.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db719.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db72a.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db73c.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db74e.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db75f.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db771.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db783.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db7a4.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db7b5.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db873.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db885.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db896.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db8a8.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db8b9.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db8cb.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db8dd.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db8ee.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db900.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db912.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db923.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db935.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db946.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db958.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db96a.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db97b.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db98d.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b04-1af0-db99f.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b14-1b28-bbcd0.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b14-1b28-bbcf1.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b14-1b28-bbd03.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b14-1b28-bbd14.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b14-1b28-bbd16.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b14-1b28-bbd47.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b14-1b28-bbd59.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b14-1b28-bbd5b.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b14-1b28-bbd6c.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b14-1b28-bbd6e.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b14-1b28-bbd80.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b14-1b28-bbd92.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b14-1b28-bbd94.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b14-1b28-bbda5.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b14-1b28-bbdb7.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b14-1b28-bbdb9.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b14-1b28-bbdcb.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b14-1b28-bbddc.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b14-1b28-bbdde.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b20-6c-32e828.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b20-6c-32e859.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b20-6c-32e86a.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b20-6c-32e87c.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b20-6c-32e87e.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b20-6c-32e89f.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b20-6c-32e8b1.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b20-6c-32e8c2.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b20-6c-32e8d4.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b20-6c-32e8f5.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b20-6c-32e907.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b20-6c-32e919.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b20-6c-32e93a.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b20-6c-32e93c.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b20-6c-32e95d.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b20-6c-32e96f.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b20-6c-32e980.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b20-6c-32e992.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b20-6c-32e9a4.tmp
O43 - CFD: 07/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b34-18c4-22cf5e.tmp
O43 - CFD: 07/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b34-18c4-22cf70.tmp
O43 - CFD: 07/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b34-18c4-22cf81.tmp
O43 - CFD: 07/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b34-18c4-22cf93.tmp
O43 - CFD: 07/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b34-18c4-22cf95.tmp
O43 - CFD: 07/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b34-18c4-22cfb6.tmp
O43 - CFD: 07/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b34-18c4-22cfb8.tmp
O43 - CFD: 07/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b34-18c4-22cfba.tmp
O43 - CFD: 07/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b34-18c4-22cfcc.tmp
O43 - CFD: 07/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b34-18c4-22cfce.tmp
O43 - CFD: 07/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b34-18c4-22cfdf.tmp
O43 - CFD: 07/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b34-18c4-22cff1.tmp
O43 - CFD: 07/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b34-18c4-22cff3.tmp
O43 - CFD: 07/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b34-18c4-22d005.tmp
O43 - CFD: 07/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b34-18c4-22d016.tmp
O43 - CFD: 07/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b34-18c4-22d018.tmp
O43 - CFD: 07/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b34-18c4-22d039.tmp
O43 - CFD: 07/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b34-18c4-22d04b.tmp
O43 - CFD: 07/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b34-18c4-22d05d.tmp
O43 - CFD: 13/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b80-e0-2f08ef5.tmp
O43 - CFD: 13/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b80-e0-2f08f07.tmp
O43 - CFD: 13/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b80-e0-2f08f19.tmp
O43 - CFD: 13/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b80-e0-2f08f3a.tmp
O43 - CFD: 13/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b80-e0-2f08f4b.tmp
O43 - CFD: 13/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b80-e0-2f08f5d.tmp
O43 - CFD: 13/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b80-e0-2f08f6f.tmp
O43 - CFD: 13/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b80-e0-2f08f80.tmp
O43 - CFD: 13/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b80-e0-2f08f92.tmp
O43 - CFD: 13/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b80-e0-2f08fa4.tmp
O43 - CFD: 13/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b80-e0-2f08fb5.tmp
O43 - CFD: 13/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b80-e0-2f08fb7.tmp
O43 - CFD: 13/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b80-e0-2f08fc9.tmp
O43 - CFD: 13/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b80-e0-2f08fea.tmp
O43 - CFD: 13/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b80-e0-2f08ffc.tmp
O43 - CFD: 13/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b80-e0-2f0901d.tmp
O43 - CFD: 13/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b80-e0-2f0902f.tmp
O43 - CFD: 13/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b80-e0-2f09040.tmp
O43 - CFD: 13/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1b80-e0-2f09061.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ba4-1d88-a6fbe.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ba4-1d88-a6fdf.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ba4-1d88-a6ff1.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ba4-1d88-a7003.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ba4-1d88-a7014.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ba4-1d88-a7026.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ba4-1d88-a7057.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ba4-1d88-a7068.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ba4-1d88-a707a.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ba4-1d88-a708c.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ba4-1d88-a709d.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ba4-1d88-a70af.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ba4-1d88-a70c1.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ba4-1d88-a70d2.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ba4-1d88-a70f3.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ba4-1d88-a7105.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ba4-1d88-a7117.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ba4-1d88-a7119.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ba4-1d88-a712a.tmp
O43 - CFD: 21/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bac-6f8-4d2943c.tmp
O43 - CFD: 21/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bac-6f8-4d2944e.tmp
O43 - CFD: 21/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bac-6f8-4d29460.tmp
O43 - CFD: 21/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bac-6f8-4d29462.tmp
O43 - CFD: 21/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bac-6f8-4d29473.tmp
O43 - CFD: 21/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bac-6f8-4d29485.tmp
O43 - CFD: 21/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bac-6f8-4d29487.tmp
O43 - CFD: 21/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bac-6f8-4d29499.tmp
O43 - CFD: 21/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bac-6f8-4d294aa.tmp
O43 - CFD: 21/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bac-6f8-4d294bc.tmp
O43 - CFD: 21/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bac-6f8-4d294cd.tmp
O43 - CFD: 21/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bac-6f8-4d294cf.tmp
O43 - CFD: 21/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bac-6f8-4d294e1.tmp
O43 - CFD: 21/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bac-6f8-4d294f3.tmp
O43 - CFD: 21/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bac-6f8-4d294f5.tmp
O43 - CFD: 21/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bac-6f8-4d29506.tmp
O43 - CFD: 21/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bac-6f8-4d29518.tmp
O43 - CFD: 21/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bac-6f8-4d2951a.tmp
O43 - CFD: 21/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bac-6f8-4d2952c.tmp
O43 - CFD: 29/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bbc-1b24-ee7c9.tmp
O43 - CFD: 29/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bbc-1b24-ee7db.tmp
O43 - CFD: 29/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bbc-1b24-ee7ec.tmp
O43 - CFD: 29/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bbc-1b24-ee7fe.tmp
O43 - CFD: 29/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bbc-1b24-ee810.tmp
O43 - CFD: 29/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bbc-1b24-ee821.tmp
O43 - CFD: 29/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bbc-1b24-ee823.tmp
O43 - CFD: 29/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bbc-1b24-ee835.tmp
O43 - CFD: 29/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bbc-1b24-ee847.tmp
O43 - CFD: 29/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bbc-1b24-ee858.tmp
O43 - CFD: 29/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bbc-1b24-ee85a.tmp
O43 - CFD: 29/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bbc-1b24-ee86c.tmp
O43 - CFD: 29/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bbc-1b24-ee87d.tmp
O43 - CFD: 29/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bbc-1b24-ee87f.tmp
O43 - CFD: 29/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bbc-1b24-ee891.tmp
O43 - CFD: 29/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bbc-1b24-ee8a3.tmp
O43 - CFD: 29/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bbc-1b24-ee8b4.tmp
O43 - CFD: 29/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bbc-1b24-ee8b6.tmp
O43 - CFD: 29/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bbc-1b24-ee8c8.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc4-1404-b3735.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc4-1404-b3746.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc4-1404-b3758.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc4-1404-b376a.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc4-1404-b378b.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc4-1404-b37bc.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc4-1404-b37dd.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc4-1404-b37ef.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc4-1404-b3800.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc4-1404-b3812.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc4-1404-b3823.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc4-1404-b3835.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc4-1404-b3837.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc4-1404-b3849.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc4-1404-b384b.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc4-1404-b385c.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc4-1404-b386e.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc4-1404-b3880.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc4-1404-b3891.tmp
O43 - CFD: 14/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc8-138-3beff3a.tmp
O43 - CFD: 14/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc8-138-3beff5b.tmp
O43 - CFD: 14/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc8-138-3beff5d.tmp
O43 - CFD: 14/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc8-138-3beff6e.tmp
O43 - CFD: 14/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc8-138-3beff80.tmp
O43 - CFD: 14/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc8-138-3beff82.tmp
O43 - CFD: 14/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc8-138-3beff94.tmp
O43 - CFD: 14/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc8-138-3beffa5.tmp
O43 - CFD: 14/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc8-138-3beffa7.tmp
O43 - CFD: 14/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc8-138-3beffb9.tmp
O43 - CFD: 14/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc8-138-3beffcb.tmp
O43 - CFD: 14/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc8-138-3beffdc.tmp
O43 - CFD: 14/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc8-138-3beffee.tmp
O43 - CFD: 14/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc8-138-3befff0.tmp
O43 - CFD: 14/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc8-138-3bf0001.tmp
O43 - CFD: 14/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc8-138-3bf0013.tmp
O43 - CFD: 14/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc8-138-3bf0015.tmp
O43 - CFD: 14/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc8-138-3bf0027.tmp
O43 - CFD: 14/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bc8-138-3bf0038.tmp
O43 - CFD: 26/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bd8-1dd0-565d85f.tmp
O43 - CFD: 26/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bd8-1dd0-565d870.tmp
O43 - CFD: 26/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bd8-1dd0-565d892.tmp
O43 - CFD: 26/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bd8-1dd0-565d8a3.tmp
O43 - CFD: 26/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bd8-1dd0-565d8c5.tmp
O43 - CFD: 26/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bd8-1dd0-565d8d6.tmp
O43 - CFD: 26/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bd8-1dd0-565d8e8.tmp
O43 - CFD: 26/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bd8-1dd0-565d909.tmp
O43 - CFD: 26/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bd8-1dd0-565d91b.tmp
O43 - CFD: 26/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bd8-1dd0-565d92c.tmp
O43 - CFD: 26/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bd8-1dd0-565d93e.tmp
O43 - CFD: 26/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bd8-1dd0-565d950.tmp
O43 - CFD: 26/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bd8-1dd0-565d961.tmp
O43 - CFD: 26/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bd8-1dd0-565d973.tmp
O43 - CFD: 26/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bd8-1dd0-565d975.tmp
O43 - CFD: 26/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bd8-1dd0-565d986.tmp
O43 - CFD: 26/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bd8-1dd0-565d998.tmp
O43 - CFD: 26/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bd8-1dd0-565d9aa.tmp
O43 - CFD: 26/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1bd8-1dd0-565d9ac.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c0c-75c-5c3ad10.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c0c-75c-5c3ad12.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c0c-75c-5c3ad23.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c0c-75c-5c3ad35.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c0c-75c-5c3ad37.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c0c-75c-5c3ad49.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c0c-75c-5c3ad6a.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c0c-75c-5c3ad6c.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c0c-75c-5c3ad7d.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c0c-75c-5c3ad7f.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c0c-75c-5c3ad91.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c0c-75c-5c3ada3.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c0c-75c-5c3ada5.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c0c-75c-5c3adb6.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c0c-75c-5c3adb8.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c0c-75c-5c3adca.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c0c-75c-5c3addc.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c0c-75c-5c3adde.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c0c-75c-5c3adef.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c14-1ee8-25ed67.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c14-1ee8-25ed78.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c14-1ee8-25ed8a.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c14-1ee8-25ed8c.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c14-1ee8-25ed9e.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c14-1ee8-25edaf.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c14-1ee8-25edb1.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c14-1ee8-25edc3.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c14-1ee8-25edd5.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c14-1ee8-25ede6.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c14-1ee8-25edf8.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c14-1ee8-25edfa.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c14-1ee8-25edfc.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c14-1ee8-25ee0d.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c14-1ee8-25ee1f.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c14-1ee8-25ee21.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c14-1ee8-25ee33.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c14-1ee8-25ee44.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c14-1ee8-25ee46.tmp
O43 - CFD: 23/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-18a4-166469.tmp
O43 - CFD: 23/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-18a4-16647b.tmp
O43 - CFD: 23/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-18a4-16648d.tmp
O43 - CFD: 23/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-18a4-16649e.tmp
O43 - CFD: 23/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-18a4-1664a0.tmp
O43 - CFD: 23/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-18a4-1664b2.tmp
O43 - CFD: 23/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-18a4-1664c4.tmp
O43 - CFD: 23/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-18a4-1664c6.tmp
O43 - CFD: 23/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-18a4-1664d7.tmp
O43 - CFD: 23/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-18a4-1664e9.tmp
O43 - CFD: 23/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-18a4-1664eb.tmp
O43 - CFD: 23/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-18a4-1664fc.tmp
O43 - CFD: 23/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-18a4-16650e.tmp
O43 - CFD: 23/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-18a4-166520.tmp
O43 - CFD: 23/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-18a4-166531.tmp
O43 - CFD: 23/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-18a4-166543.tmp
O43 - CFD: 23/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-18a4-166555.tmp
O43 - CFD: 23/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-18a4-166566.tmp
O43 - CFD: 23/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-18a4-166578.tmp
O43 - CFD: 15/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-1c20-9b76b.tmp
O43 - CFD: 15/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-1c20-9bc01.tmp
O43 - CFD: 15/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-1c20-9bc12.tmp
O43 - CFD: 15/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-1c20-9bc24.tmp
O43 - CFD: 15/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-1c20-9bc35.tmp
O43 - CFD: 15/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-1c20-9bc47.tmp
O43 - CFD: 15/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-1c20-9bc59.tmp
O43 - CFD: 15/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-1c20-9bc6a.tmp
O43 - CFD: 15/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-1c20-9bc9b.tmp
O43 - CFD: 15/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-1c20-9bccc.tmp
O43 - CFD: 15/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-1c20-9bd1c.tmp
O43 - CFD: 15/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-1c20-9bd2e.tmp
O43 - CFD: 15/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-1c20-9bd3f.tmp
O43 - CFD: 15/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-1c20-9bd51.tmp
O43 - CFD: 15/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-1c20-9bd92.tmp
O43 - CFD: 15/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-1c20-9bda3.tmp
O43 - CFD: 15/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-1c20-9bda5.tmp
O43 - CFD: 15/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-1c20-9bdb7.tmp
O43 - CFD: 15/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c18-1c20-9bdc8.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c34-f70-13ded8.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c34-f70-13def9.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c34-f70-13df0b.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c34-f70-13df0d.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c34-f70-13df1e.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c34-f70-13df30.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c34-f70-13df32.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c34-f70-13df44.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c34-f70-13df55.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c34-f70-13df67.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c34-f70-13df78.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c34-f70-13df8a.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c34-f70-13df9c.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c34-f70-13df9e.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c34-f70-13dfaf.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c34-f70-13dfb1.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c34-f70-13dfc3.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c34-f70-13dfd5.tmp
O43 - CFD: 11/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c34-f70-13dfe6.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c50-2e8-36659de.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c50-2e8-36659ff.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c50-2e8-3665a10.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c50-2e8-3665a12.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c50-2e8-3665a24.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c50-2e8-3665a36.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c50-2e8-3665a38.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c50-2e8-3665a59.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c50-2e8-3665a5b.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c50-2e8-3665a6d.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c50-2e8-3665a6f.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c50-2e8-3665a80.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c50-2e8-3665a92.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c50-2e8-3665a94.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c50-2e8-3665aa5.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c50-2e8-3665ab7.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c50-2e8-3665ab9.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c50-2e8-3665acb.tmp
O43 - CFD: 07/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c50-2e8-3665adc.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c7c-1c78-b1ad3.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c7c-1c78-b1ae5.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c7c-1c78-b1af6.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c7c-1c78-b1af8.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c7c-1c78-b1b0a.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c7c-1c78-b1b1c.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c7c-1c78-b1b2d.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c7c-1c78-b1b2f.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c7c-1c78-b1b41.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c7c-1c78-b1b52.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c7c-1c78-b1b54.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c7c-1c78-b1b66.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c7c-1c78-b1b68.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c7c-1c78-b1b7a.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c7c-1c78-b1b8b.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c7c-1c78-b1b8d.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c7c-1c78-b1b9f.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c7c-1c78-b1bb1.tmp
O43 - CFD: 30/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c7c-1c78-b1bb3.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c8c-c54-115147.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c8c-c54-115169.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c8c-c54-11517a.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c8c-c54-11518c.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c8c-c54-11519d.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c8c-c54-11519f.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c8c-c54-1151a1.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c8c-c54-1151c3.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c8c-c54-1151c5.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c8c-c54-1151e6.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c8c-c54-1151f8.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c8c-c54-1151fa.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c8c-c54-11520b.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c8c-c54-11521d.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c8c-c54-11521f.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c8c-c54-115240.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c8c-c54-115252.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c8c-c54-1152a2.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1c8c-c54-115311.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ca8-1500-3437f9.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ca8-1500-34381a.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ca8-1500-34382b.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ca8-1500-34383d.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ca8-1500-34385e.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ca8-1500-343870.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ca8-1500-343872.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ca8-1500-343893.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ca8-1500-3438a5.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ca8-1500-3438b6.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ca8-1500-3438c8.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ca8-1500-3438e9.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ca8-1500-3438fb.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ca8-1500-34390d.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ca8-1500-34392e.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ca8-1500-34393f.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ca8-1500-343951.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ca8-1500-343972.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ca8-1500-343974.tmp
O43 - CFD: 18/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc4-1a18-36afee.tmp
O43 - CFD: 18/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc4-1a18-36b00f.tmp
O43 - CFD: 18/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc4-1a18-36b030.tmp
O43 - CFD: 18/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc4-1a18-36b052.tmp
O43 - CFD: 18/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc4-1a18-36b063.tmp
O43 - CFD: 18/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc4-1a18-36b075.tmp
O43 - CFD: 18/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc4-1a18-36b077.tmp
O43 - CFD: 18/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc4-1a18-36b088.tmp
O43 - CFD: 18/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc4-1a18-36b0aa.tmp
O43 - CFD: 18/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc4-1a18-36b0ac.tmp
O43 - CFD: 18/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc4-1a18-36b0cd.tmp
O43 - CFD: 18/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc4-1a18-36b0df.tmp
O43 - CFD: 18/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc4-1a18-36b0f0.tmp
O43 - CFD: 18/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc4-1a18-36b111.tmp
O43 - CFD: 18/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc4-1a18-36b113.tmp
O43 - CFD: 18/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc4-1a18-36b125.tmp
O43 - CFD: 18/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc4-1a18-36b137.tmp
O43 - CFD: 18/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc4-1a18-36b168.tmp
O43 - CFD: 18/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1cc4-1a18-36b179.tmp
O43 - CFD: 03/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d0c-1118-818228b.tmp
O43 - CFD: 03/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d0c-1118-818229d.tmp
O43 - CFD: 03/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d0c-1118-81822ae.tmp
O43 - CFD: 03/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d0c-1118-81822c0.tmp
O43 - CFD: 03/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d0c-1118-81822d1.tmp
O43 - CFD: 03/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d0c-1118-81822d3.tmp
O43 - CFD: 03/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d0c-1118-81822e5.tmp
O43 - CFD: 03/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d0c-1118-81822f7.tmp
O43 - CFD: 03/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d0c-1118-81822f9.tmp
O43 - CFD: 03/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d0c-1118-818230a.tmp
O43 - CFD: 03/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d0c-1118-818231c.tmp
O43 - CFD: 03/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d0c-1118-818231e.tmp
O43 - CFD: 03/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d0c-1118-8182330.tmp
O43 - CFD: 03/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d0c-1118-8182351.tmp
O43 - CFD: 03/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d0c-1118-8182372.tmp
O43 - CFD: 03/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d0c-1118-8182393.tmp
O43 - CFD: 03/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d0c-1118-81823a5.tmp
O43 - CFD: 03/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d0c-1118-81823b7.tmp
O43 - CFD: 03/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d0c-1118-81823d8.tmp
O43 - CFD: 28/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d10-f9c-52c5588.tmp
O43 - CFD: 28/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d10-f9c-52c55a9.tmp
O43 - CFD: 28/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d10-f9c-52c55ab.tmp
O43 - CFD: 28/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d10-f9c-52c55bd.tmp
O43 - CFD: 28/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d10-f9c-52c55bf.tmp
O43 - CFD: 28/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d10-f9c-52c55e0.tmp
O43 - CFD: 28/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d10-f9c-52c55e2.tmp
O43 - CFD: 28/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d10-f9c-52c55f4.tmp
O43 - CFD: 28/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d10-f9c-52c5605.tmp
O43 - CFD: 28/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d10-f9c-52c5607.tmp
O43 - CFD: 28/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d10-f9c-52c5619.tmp
O43 - CFD: 28/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d10-f9c-52c563a.tmp
O43 - CFD: 28/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d10-f9c-52c563c.tmp
O43 - CFD: 28/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d10-f9c-52c564e.tmp
O43 - CFD: 28/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d10-f9c-52c565f.tmp
O43 - CFD: 28/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d10-f9c-52c5661.tmp
O43 - CFD: 28/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d10-f9c-52c5673.tmp
O43 - CFD: 28/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d10-f9c-52c5675.tmp
O43 - CFD: 28/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d10-f9c-52c5687.tmp
O43 - CFD: 05/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d18-310-7a09fa2.tmp
O43 - CFD: 05/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d18-310-7a09fc3.tmp
O43 - CFD: 05/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d18-310-7a09fd5.tmp
O43 - CFD: 05/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d18-310-7a09fe7.tmp
O43 - CFD: 05/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d18-310-7a09ff8.tmp
O43 - CFD: 05/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d18-310-7a0a00a.tmp
O43 - CFD: 05/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d18-310-7a0a01b.tmp
O43 - CFD: 05/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d18-310-7a0a02d.tmp
O43 - CFD: 05/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d18-310-7a0a03f.tmp
O43 - CFD: 05/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d18-310-7a0a050.tmp
O43 - CFD: 05/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d18-310-7a0a062.tmp
O43 - CFD: 05/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d18-310-7a0a074.tmp
O43 - CFD: 05/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d18-310-7a0a085.tmp
O43 - CFD: 05/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d18-310-7a0a097.tmp
O43 - CFD: 05/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d18-310-7a0a0a8.tmp
O43 - CFD: 05/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d18-310-7a0a0ba.tmp
O43 - CFD: 05/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d18-310-7a0a0cc.tmp
O43 - CFD: 05/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d18-310-7a0a0dd.tmp
O43 - CFD: 05/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d18-310-7a0a0ef.tmp
O43 - CFD: 20/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d40-1d30-a2da4.tmp
O43 - CFD: 20/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d40-1d30-a2dd5.tmp
O43 - CFD: 20/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d40-1d30-a2df6.tmp
O43 - CFD: 20/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d40-1d30-a2e08.tmp
O43 - CFD: 20/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d40-1d30-a2e29.tmp
O43 - CFD: 20/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d40-1d30-a2e3b.tmp
O43 - CFD: 20/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d40-1d30-a2e3d.tmp
O43 - CFD: 20/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d40-1d30-a2e5e.tmp
O43 - CFD: 20/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d40-1d30-a2e70.tmp
O43 - CFD: 20/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d40-1d30-a2e72.tmp
O43 - CFD: 20/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d40-1d30-a2e83.tmp
O43 - CFD: 20/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d40-1d30-a2e95.tmp
O43 - CFD: 20/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d40-1d30-a2e97.tmp
O43 - CFD: 20/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d40-1d30-a2ea9.tmp
O43 - CFD: 20/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d40-1d30-a2eba.tmp
O43 - CFD: 20/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d40-1d30-a2ebc.tmp
O43 - CFD: 20/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d40-1d30-a2ece.tmp
O43 - CFD: 20/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d40-1d30-a2ee0.tmp
O43 - CFD: 20/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d40-1d30-a2ef1.tmp
O43 - CFD: 23/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d44-1a28-a4dee.tmp
O43 - CFD: 23/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d44-1a28-a4e0f.tmp
O43 - CFD: 23/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d44-1a28-a4e11.tmp
O43 - CFD: 23/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d44-1a28-a4e23.tmp
O43 - CFD: 23/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d44-1a28-a4e34.tmp
O43 - CFD: 23/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d44-1a28-a4e36.tmp
O43 - CFD: 23/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d44-1a28-a4e48.tmp
O43 - CFD: 23/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d44-1a28-a4e5a.tmp
O43 - CFD: 23/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d44-1a28-a4e5c.tmp
O43 - CFD: 23/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d44-1a28-a4e6d.tmp
O43 - CFD: 23/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d44-1a28-a4e7f.tmp
O43 - CFD: 23/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d44-1a28-a4e91.tmp
O43 - CFD: 23/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d44-1a28-a4e93.tmp
O43 - CFD: 23/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d44-1a28-a4ea4.tmp
O43 - CFD: 23/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d44-1a28-a4eb6.tmp
O43 - CFD: 23/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d44-1a28-a4eb8.tmp
O43 - CFD: 23/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d44-1a28-a4ec9.tmp
O43 - CFD: 23/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d44-1a28-a4edb.tmp
O43 - CFD: 23/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d44-1a28-a4eed.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d44-da8-9f3b57e.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d44-da8-9f3b59f.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d44-da8-9f3b5b1.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d44-da8-9f3b5b3.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d44-da8-9f3b5c4.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d44-da8-9f3b5d6.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d44-da8-9f3b5d8.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d44-da8-9f3b5e9.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d44-da8-9f3b5eb.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d44-da8-9f3b5fd.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d44-da8-9f3b60f.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d44-da8-9f3b620.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d44-da8-9f3b632.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d44-da8-9f3b644.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d44-da8-9f3b655.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d44-da8-9f3b667.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d44-da8-9f3b678.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d44-da8-9f3b67a.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d44-da8-9f3b6ab.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d70-1d28-b00e2.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d70-1d28-b0104.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d70-1d28-b0115.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d70-1d28-b0127.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d70-1d28-b0139.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d70-1d28-b014a.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d70-1d28-b015c.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d70-1d28-b016d.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d70-1d28-b017f.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d70-1d28-b01a0.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d70-1d28-b01b2.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d70-1d28-b01b4.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d70-1d28-b01c6.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d70-1d28-b01d7.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d70-1d28-b01e9.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d70-1d28-b01fa.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d70-1d28-b020c.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d70-1d28-b021e.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d70-1d28-b022f.tmp
O43 - CFD: 02/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d78-1f5c-56bb4dc.tmp
O43 - CFD: 02/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d78-1f5c-56bb4fd.tmp
O43 - CFD: 02/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d78-1f5c-56bb50f.tmp
O43 - CFD: 02/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d78-1f5c-56bb520.tmp
O43 - CFD: 02/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d78-1f5c-56bb532.tmp
O43 - CFD: 02/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d78-1f5c-56bb534.tmp
O43 - CFD: 02/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d78-1f5c-56bb546.tmp
O43 - CFD: 02/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d78-1f5c-56bb557.tmp
O43 - CFD: 02/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d78-1f5c-56bb559.tmp
O43 - CFD: 02/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d78-1f5c-56bb56b.tmp
O43 - CFD: 02/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d78-1f5c-56bb57c.tmp
O43 - CFD: 02/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d78-1f5c-56bb57e.tmp
O43 - CFD: 02/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d78-1f5c-56bb590.tmp
O43 - CFD: 02/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d78-1f5c-56bb5a2.tmp
O43 - CFD: 02/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d78-1f5c-56bb5a4.tmp
O43 - CFD: 02/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d78-1f5c-56bb5b5.tmp
O43 - CFD: 02/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d78-1f5c-56bb5c7.tmp
O43 - CFD: 02/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d78-1f5c-56bb5c9.tmp
O43 - CFD: 02/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1d78-1f5c-56bb5db.tmp
O43 - CFD: 30/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dbc-1b2c-27a9ad.tmp
O43 - CFD: 30/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dbc-1b2c-27a9ce.tmp
O43 - CFD: 30/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dbc-1b2c-27a9f0.tmp
O43 - CFD: 30/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dbc-1b2c-27aa01.tmp
O43 - CFD: 30/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dbc-1b2c-27aa13.tmp
O43 - CFD: 30/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dbc-1b2c-27aa34.tmp
O43 - CFD: 30/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dbc-1b2c-27aa46.tmp
O43 - CFD: 30/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dbc-1b2c-27aa57.tmp
O43 - CFD: 30/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dbc-1b2c-27aa69.tmp
O43 - CFD: 30/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dbc-1b2c-27aa7b.tmp
O43 - CFD: 30/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dbc-1b2c-27aa8c.tmp
O43 - CFD: 30/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dbc-1b2c-27aa9e.tmp
O43 - CFD: 30/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dbc-1b2c-27aab0.tmp
O43 - CFD: 30/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dbc-1b2c-27aac1.tmp
O43 - CFD: 30/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dbc-1b2c-27aad3.tmp
O43 - CFD: 30/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dbc-1b2c-27aae4.tmp
O43 - CFD: 30/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dbc-1b2c-27ab06.tmp
O43 - CFD: 30/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dbc-1b2c-27ab27.tmp
O43 - CFD: 30/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dbc-1b2c-27ab39.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dd0-1dcc-a1663.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dd0-1dcc-a1684.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dd0-1dcc-a1696.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dd0-1dcc-a16a8.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dd0-1dcc-a16aa.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dd0-1dcc-a16bb.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dd0-1dcc-a16bd.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dd0-1dcc-a16cf.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dd0-1dcc-a16e1.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dd0-1dcc-a16f2.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dd0-1dcc-a16f4.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dd0-1dcc-a1706.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dd0-1dcc-a1717.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dd0-1dcc-a1719.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dd0-1dcc-a172b.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dd0-1dcc-a173d.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dd0-1dcc-a173f.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dd0-1dcc-a1750.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1dd0-1dcc-a1762.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e0c-1e10-eb3d8.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e0c-1e10-eb3fa.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e0c-1e10-eb41b.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e0c-1e10-eb42c.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e0c-1e10-eb43e.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e0c-1e10-eb440.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e0c-1e10-eb452.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e0c-1e10-eb463.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e0c-1e10-eb465.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e0c-1e10-eb477.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e0c-1e10-eb479.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e0c-1e10-eb48b.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e0c-1e10-eb49c.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e0c-1e10-eb49e.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e0c-1e10-eb4b0.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e0c-1e10-eb4b2.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e0c-1e10-eb4c3.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e0c-1e10-eb4d5.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e0c-1e10-eb4e7.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e14-e2c-f223635.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e14-e2c-f223647.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e14-e2c-f223668.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e14-e2c-f22367a.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e14-e2c-f22368b.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e14-e2c-f22369d.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e14-e2c-f2236af.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e14-e2c-f2236c0.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e14-e2c-f2236c2.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e14-e2c-f2236e3.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e14-e2c-f2236f5.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e14-e2c-f223707.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e14-e2c-f223718.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e14-e2c-f22373a.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e14-e2c-f22373c.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e14-e2c-f22374d.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e14-e2c-f22375f.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e14-e2c-f223770.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e14-e2c-f223772.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e54-16f8-1069722.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e54-16f8-1069744.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e54-16f8-1069746.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e54-16f8-1069757.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e54-16f8-1069769.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e54-16f8-106976b.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e54-16f8-106977d.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e54-16f8-106977f.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e54-16f8-1069790.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e54-16f8-10697a2.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e54-16f8-10697a4.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e54-16f8-10697b5.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e54-16f8-10697c7.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e54-16f8-10697c9.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e54-16f8-10697db.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e54-16f8-10697ec.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e54-16f8-10697ee.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e54-16f8-1069800.tmp
O43 - CFD: 16/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e54-16f8-1069812.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e68-4f0-333eb77.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e68-4f0-333eb89.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e68-4f0-333eb9a.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e68-4f0-333ebac.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e68-4f0-333ebae.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e68-4f0-333ebc0.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e68-4f0-333ebd1.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e68-4f0-333ebd3.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e68-4f0-333ebe5.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e68-4f0-333ebe7.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e68-4f0-333ebf8.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e68-4f0-333ec0a.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e68-4f0-333ec1c.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e68-4f0-333ec1e.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e68-4f0-333ec2f.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e68-4f0-333ec41.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e68-4f0-333ec43.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e68-4f0-333ec55.tmp
O43 - CFD: 09/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e68-4f0-333ec66.tmp
O43 - CFD: 01/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e80-1398-3f50e27.tmp
O43 - CFD: 01/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e80-1398-3f50e48.tmp
O43 - CFD: 01/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e80-1398-3f50e5a.tmp
O43 - CFD: 01/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e80-1398-3f50e6c.tmp
O43 - CFD: 01/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e80-1398-3f50eac.tmp
O43 - CFD: 01/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e80-1398-3f50edd.tmp
O43 - CFD: 01/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e80-1398-3f50f0e.tmp
O43 - CFD: 01/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e80-1398-3f50f3f.tmp
O43 - CFD: 01/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e80-1398-3f50f60.tmp
O43 - CFD: 01/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e80-1398-3f50f72.tmp
O43 - CFD: 01/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e80-1398-3f50f83.tmp
O43 - CFD: 01/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e80-1398-3f50fa5.tmp
O43 - CFD: 01/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e80-1398-3f50fc6.tmp
O43 - CFD: 01/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e80-1398-3f50fe7.tmp
O43 - CFD: 01/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e80-1398-3f50ff9.tmp
O43 - CFD: 01/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e80-1398-3f5100a.tmp
O43 - CFD: 01/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e80-1398-3f5101c.tmp
O43 - CFD: 01/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e80-1398-3f5102e.tmp
O43 - CFD: 01/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e80-1398-3f5105e.tmp
O43 - CFD: 30/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e8c-1860-4f711da.tmp
O43 - CFD: 30/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e8c-1860-4f711fb.tmp
O43 - CFD: 30/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e8c-1860-4f711fd.tmp
O43 - CFD: 30/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e8c-1860-4f7121e.tmp
O43 - CFD: 30/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e8c-1860-4f71230.tmp
O43 - CFD: 30/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e8c-1860-4f71232.tmp
O43 - CFD: 30/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e8c-1860-4f71243.tmp
O43 - CFD: 30/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e8c-1860-4f71255.tmp
O43 - CFD: 30/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e8c-1860-4f71267.tmp
O43 - CFD: 30/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e8c-1860-4f71278.tmp
O43 - CFD: 30/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e8c-1860-4f71299.tmp
O43 - CFD: 30/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e8c-1860-4f7129b.tmp
O43 - CFD: 30/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e8c-1860-4f712ad.tmp
O43 - CFD: 30/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e8c-1860-4f712af.tmp
O43 - CFD: 30/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e8c-1860-4f712c1.tmp
O43 - CFD: 30/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e8c-1860-4f712d2.tmp
O43 - CFD: 30/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e8c-1860-4f712d4.tmp
O43 - CFD: 30/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e8c-1860-4f712e6.tmp
O43 - CFD: 30/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e8c-1860-4f712f8.tmp
O43 - CFD: 28/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e90-18c8-a1d02fa.tmp
O43 - CFD: 28/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e90-18c8-a1d030c.tmp
O43 - CFD: 28/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e90-18c8-a1d031d.tmp
O43 - CFD: 28/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e90-18c8-a1d031f.tmp
O43 - CFD: 28/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e90-18c8-a1d0331.tmp
O43 - CFD: 28/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e90-18c8-a1d0343.tmp
O43 - CFD: 28/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e90-18c8-a1d0354.tmp
O43 - CFD: 28/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e90-18c8-a1d0366.tmp
O43 - CFD: 28/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e90-18c8-a1d0368.tmp
O43 - CFD: 28/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e90-18c8-a1d037a.tmp
O43 - CFD: 28/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e90-18c8-a1d038b.tmp
O43 - CFD: 28/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e90-18c8-a1d038d.tmp
O43 - CFD: 28/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e90-18c8-a1d039f.tmp
O43 - CFD: 28/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e90-18c8-a1d03b0.tmp
O43 - CFD: 28/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e90-18c8-a1d03b2.tmp
O43 - CFD: 28/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e90-18c8-a1d03c4.tmp
O43 - CFD: 28/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e90-18c8-a1d03d6.tmp
O43 - CFD: 28/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e90-18c8-a1d03d8.tmp
O43 - CFD: 28/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1e90-18c8-a1d03e9.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ebc-1500-11f279.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ebc-1500-11f28b.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ebc-1500-11f29c.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ebc-1500-11f29e.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ebc-1500-11f2b0.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ebc-1500-11f2c1.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ebc-1500-11f2c3.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ebc-1500-11f2d5.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ebc-1500-11f2e7.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ebc-1500-11f2e9.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ebc-1500-11f2fa.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ebc-1500-11f30c.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ebc-1500-11f30e.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ebc-1500-11f32f.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ebc-1500-11f341.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ebc-1500-11f352.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ebc-1500-11f364.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ebc-1500-11f376.tmp
O43 - CFD: 16/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ebc-1500-11f387.tmp
O43 - CFD: 10/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ecc-1ed0-e61f0.tmp
O43 - CFD: 10/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ecc-1ed0-e6211.tmp
O43 - CFD: 10/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ecc-1ed0-e6213.tmp
O43 - CFD: 10/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ecc-1ed0-e6224.tmp
O43 - CFD: 10/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ecc-1ed0-e6236.tmp
O43 - CFD: 10/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ecc-1ed0-e6238.tmp
O43 - CFD: 10/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ecc-1ed0-e624a.tmp
O43 - CFD: 10/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ecc-1ed0-e624c.tmp
O43 - CFD: 10/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ecc-1ed0-e625d.tmp
O43 - CFD: 10/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ecc-1ed0-e626f.tmp
O43 - CFD: 10/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ecc-1ed0-e6281.tmp
O43 - CFD: 10/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ecc-1ed0-e6292.tmp
O43 - CFD: 10/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ecc-1ed0-e62a4.tmp
O43 - CFD: 10/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ecc-1ed0-e62a6.tmp
O43 - CFD: 10/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ecc-1ed0-e62b7.tmp
O43 - CFD: 10/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ecc-1ed0-e62b9.tmp
O43 - CFD: 10/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ecc-1ed0-e62cb.tmp
O43 - CFD: 10/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ecc-1ed0-e62dd.tmp
O43 - CFD: 10/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ecc-1ed0-e62df.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ef4-1d84-164ad7.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ef4-1d84-164af8.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ef4-1d84-164b09.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ef4-1d84-164b1b.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ef4-1d84-164b1d.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ef4-1d84-164b2f.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ef4-1d84-164b40.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ef4-1d84-164b42.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ef4-1d84-164b54.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ef4-1d84-164b66.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ef4-1d84-164b68.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ef4-1d84-164b79.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ef4-1d84-164b8b.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ef4-1d84-164b8d.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ef4-1d84-164b9e.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ef4-1d84-164ba0.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ef4-1d84-164bb2.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ef4-1d84-164bc4.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ef4-1d84-164bc6.tmp
O43 - CFD: 20/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f1c-11a8-693f706.tmp
O43 - CFD: 20/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f1c-11a8-693f85f.tmp
O43 - CFD: 20/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f1c-11a8-693f9e8.tmp
O43 - CFD: 20/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f1c-11a8-694162c.tmp
O43 - CFD: 20/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f1c-11a8-694168c.tmp
O43 - CFD: 20/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f1c-11a8-6941cb8.tmp
O43 - CFD: 20/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f1c-11a8-6941d08.tmp
O43 - CFD: 20/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f1c-11a8-6941d49.tmp
O43 - CFD: 20/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f1c-11a8-6941dd7.tmp
O43 - CFD: 20/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f1c-11a8-6941e66.tmp
O43 - CFD: 20/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f1c-11a8-6941f04.tmp
O43 - CFD: 20/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f1c-11a8-6941f93.tmp
O43 - CFD: 20/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f1c-11a8-6942002.tmp
O43 - CFD: 20/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f1c-11a8-69420fe.tmp
O43 - CFD: 20/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f1c-11a8-694213f.tmp
O43 - CFD: 20/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f1c-11a8-69421be.tmp
O43 - CFD: 20/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f1c-11a8-694225c.tmp
O43 - CFD: 20/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f1c-11a8-69422fa.tmp
O43 - CFD: 20/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f1c-11a8-6942389.tmp
O43 - CFD: 21/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f34-1eb0-357ec1.tmp
O43 - CFD: 21/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f34-1eb0-357ee2.tmp
O43 - CFD: 21/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f34-1eb0-357ef4.tmp
O43 - CFD: 21/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f34-1eb0-357f15.tmp
O43 - CFD: 21/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f34-1eb0-357f27.tmp
O43 - CFD: 21/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f34-1eb0-357f38.tmp
O43 - CFD: 21/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f34-1eb0-357f4a.tmp
O43 - CFD: 21/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f34-1eb0-357f5b.tmp
O43 - CFD: 21/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f34-1eb0-357f6d.tmp
O43 - CFD: 21/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f34-1eb0-357f6f.tmp
O43 - CFD: 21/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f34-1eb0-357f81.tmp
O43 - CFD: 21/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f34-1eb0-357f92.tmp
O43 - CFD: 21/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f34-1eb0-357f94.tmp
O43 - CFD: 21/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f34-1eb0-357fb6.tmp
O43 - CFD: 21/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f34-1eb0-357fe6.tmp
O43 - CFD: 21/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f34-1eb0-358008.tmp
O43 - CFD: 21/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f34-1eb0-358019.tmp
O43 - CFD: 21/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f34-1eb0-35802b.tmp
O43 - CFD: 21/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f34-1eb0-35802d.tmp
O43 - CFD: 21/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f38-28c-4059134.tmp
O43 - CFD: 21/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f38-28c-4059146.tmp
O43 - CFD: 21/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f38-28c-4059157.tmp
O43 - CFD: 21/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f38-28c-4059159.tmp
O43 - CFD: 21/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f38-28c-405916b.tmp
O43 - CFD: 21/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f38-28c-405917d.tmp
O43 - CFD: 21/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f38-28c-405917f.tmp
O43 - CFD: 21/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f38-28c-4059190.tmp
O43 - CFD: 21/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f38-28c-40591a2.tmp
O43 - CFD: 21/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f38-28c-40591a4.tmp
O43 - CFD: 21/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f38-28c-40591c5.tmp
O43 - CFD: 21/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f38-28c-40591d7.tmp
O43 - CFD: 21/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f38-28c-40591d9.tmp
O43 - CFD: 21/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f38-28c-40591ea.tmp
O43 - CFD: 21/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f38-28c-40591fc.tmp
O43 - CFD: 21/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f38-28c-40591fe.tmp
O43 - CFD: 21/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f38-28c-4059210.tmp
O43 - CFD: 21/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f38-28c-4059221.tmp
O43 - CFD: 21/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f38-28c-4059223.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f3c-1fdc-2f025a.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f3c-1fdc-2f028b.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f3c-1fdc-2f029d.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f3c-1fdc-2f02be.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f3c-1fdc-2f02d0.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f3c-1fdc-2f02f1.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f3c-1fdc-2f0312.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f3c-1fdc-2f0324.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f3c-1fdc-2f0335.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f3c-1fdc-2f0347.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f3c-1fdc-2f0359.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f3c-1fdc-2f036a.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f3c-1fdc-2f038c.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f3c-1fdc-2f03ad.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f3c-1fdc-2f03ce.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f3c-1fdc-2f03e0.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f3c-1fdc-2f0401.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f3c-1fdc-2f0413.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f3c-1fdc-2f0424.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f48-19cc-d92b9.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f48-19cc-d92ca.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f48-19cc-d92dc.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f48-19cc-d930d.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f48-19cc-d930f.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f48-19cc-d9320.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f48-19cc-d9322.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f48-19cc-d9334.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f48-19cc-d9346.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f48-19cc-d9348.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f48-19cc-d9359.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f48-19cc-d935b.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f48-19cc-d936d.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f48-19cc-d937f.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f48-19cc-d9381.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f48-19cc-d9392.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f48-19cc-d9394.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f48-19cc-d93a6.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f48-19cc-d93b7.tmp
O43 - CFD: 23/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f58-1164-41c342.tmp
O43 - CFD: 23/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f58-1164-41c363.tmp
O43 - CFD: 23/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f58-1164-41c374.tmp
O43 - CFD: 23/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f58-1164-41c396.tmp
O43 - CFD: 23/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f58-1164-41c3a7.tmp
O43 - CFD: 23/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f58-1164-41c3a9.tmp
O43 - CFD: 23/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f58-1164-41c3bb.tmp
O43 - CFD: 23/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f58-1164-41c3cd.tmp
O43 - CFD: 23/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f58-1164-41c3de.tmp
O43 - CFD: 23/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f58-1164-41c3e0.tmp
O43 - CFD: 23/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f58-1164-41c3f2.tmp
O43 - CFD: 23/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f58-1164-41c403.tmp
O43 - CFD: 23/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f58-1164-41c405.tmp
O43 - CFD: 23/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f58-1164-41c417.tmp
O43 - CFD: 23/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f58-1164-41c429.tmp
O43 - CFD: 23/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f58-1164-41c43a.tmp
O43 - CFD: 23/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f58-1164-41c43c.tmp
O43 - CFD: 23/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f58-1164-41c44e.tmp
O43 - CFD: 23/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f58-1164-41c47f.tmp
O43 - CFD: 24/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f68-12dc-b3011.tmp
O43 - CFD: 24/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f68-12dc-b3032.tmp
O43 - CFD: 24/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f68-12dc-b3043.tmp
O43 - CFD: 24/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f68-12dc-b3065.tmp
O43 - CFD: 24/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f68-12dc-b3076.tmp
O43 - CFD: 24/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f68-12dc-b3078.tmp
O43 - CFD: 24/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f68-12dc-b308a.tmp
O43 - CFD: 24/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f68-12dc-b309c.tmp
O43 - CFD: 24/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f68-12dc-b30ad.tmp
O43 - CFD: 24/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f68-12dc-b30bf.tmp
O43 - CFD: 24/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f68-12dc-b30c1.tmp
O43 - CFD: 24/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f68-12dc-b30d2.tmp
O43 - CFD: 24/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f68-12dc-b30e4.tmp
O43 - CFD: 24/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f68-12dc-b30e6.tmp
O43 - CFD: 24/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f68-12dc-b30f8.tmp
O43 - CFD: 24/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f68-12dc-b3109.tmp
O43 - CFD: 24/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f68-12dc-b310b.tmp
O43 - CFD: 24/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f68-12dc-b311d.tmp
O43 - CFD: 24/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f68-12dc-b312f.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f80-1f7c-9f975.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f80-1f7c-9fa13.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f80-1f7c-9fa83.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f80-1f7c-9faa4.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f80-1f7c-9fac5.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f80-1f7c-9fae6.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f80-1f7c-9fb08.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f80-1f7c-9fb29.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f80-1f7c-9fb4a.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f80-1f7c-9fb6b.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f80-1f7c-9fb8d.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f80-1f7c-9fbae.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f80-1f7c-9fbdf.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f80-1f7c-9fc00.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f80-1f7c-9fc21.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f80-1f7c-9fc42.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f80-1f7c-9fc54.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f80-1f7c-9fc56.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f80-1f7c-9fc68.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f98-1f9c-134e21.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f98-1f9c-134e33.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f98-1f9c-134e44.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f98-1f9c-134e46.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f98-1f9c-134e58.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f98-1f9c-134e69.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f98-1f9c-134e6b.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f98-1f9c-134e7d.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f98-1f9c-134e8f.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f98-1f9c-134e91.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f98-1f9c-134ea2.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f98-1f9c-134eb4.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f98-1f9c-134eb6.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f98-1f9c-134ec8.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f98-1f9c-134ed9.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f98-1f9c-134edb.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f98-1f9c-134eed.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f98-1f9c-134eef.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1f98-1f9c-134f00.tmp
O43 - CFD: 26/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fa8-1fac-a2b14.tmp
O43 - CFD: 26/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fa8-1fac-a2b26.tmp
O43 - CFD: 26/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fa8-1fac-a2b37.tmp
O43 - CFD: 26/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fa8-1fac-a2b49.tmp
O43 - CFD: 26/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fa8-1fac-a2b4b.tmp
O43 - CFD: 26/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fa8-1fac-a2b5d.tmp
O43 - CFD: 26/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fa8-1fac-a2b6e.tmp
O43 - CFD: 26/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fa8-1fac-a2b70.tmp
O43 - CFD: 26/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fa8-1fac-a2b82.tmp
O43 - CFD: 26/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fa8-1fac-a2b93.tmp
O43 - CFD: 26/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fa8-1fac-a2b95.tmp
O43 - CFD: 26/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fa8-1fac-a2ba7.tmp
O43 - CFD: 26/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fa8-1fac-a2ba9.tmp
O43 - CFD: 26/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fa8-1fac-a2bbb.tmp
O43 - CFD: 26/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fa8-1fac-a2bcc.tmp
O43 - CFD: 26/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fa8-1fac-a2bce.tmp
O43 - CFD: 26/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fa8-1fac-a2be0.tmp
O43 - CFD: 26/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fa8-1fac-a2bf2.tmp
O43 - CFD: 26/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fa8-1fac-a2bf4.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fc4-19c-195855.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fc4-19c-195876.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fc4-19c-195888.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fc4-19c-19588a.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fc4-19c-19589c.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fc4-19c-1958ad.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fc4-19c-1958bf.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fc4-19c-1958d0.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fc4-19c-1958d2.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fc4-19c-1958e4.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fc4-19c-1958f6.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fc4-19c-195907.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fc4-19c-195909.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fc4-19c-19591b.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fc4-19c-19591d.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fc4-19c-19592f.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fc4-19c-195940.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fc4-19c-195942.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fc4-19c-195954.tmp
O43 - CFD: 02/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fd4-1320-3e3caa9.tmp
O43 - CFD: 02/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fd4-1320-3e3caca.tmp
O43 - CFD: 02/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fd4-1320-3e3cadb.tmp
O43 - CFD: 02/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fd4-1320-3e3caed.tmp
O43 - CFD: 02/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fd4-1320-3e3caff.tmp
O43 - CFD: 02/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fd4-1320-3e3cb10.tmp
O43 - CFD: 02/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fd4-1320-3e3cb22.tmp
O43 - CFD: 02/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fd4-1320-3e3cb43.tmp
O43 - CFD: 02/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fd4-1320-3e3cb55.tmp
O43 - CFD: 02/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fd4-1320-3e3cb66.tmp
O43 - CFD: 02/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fd4-1320-3e3cb78.tmp
O43 - CFD: 02/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fd4-1320-3e3cb99.tmp
O43 - CFD: 02/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fd4-1320-3e3cbab.tmp
O43 - CFD: 02/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fd4-1320-3e3cbbd.tmp
O43 - CFD: 02/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fd4-1320-3e3cbce.tmp
O43 - CFD: 02/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fd4-1320-3e3cbd0.tmp
O43 - CFD: 02/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fd4-1320-3e3cbe2.tmp
O43 - CFD: 02/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fd4-1320-3e3cbf3.tmp
O43 - CFD: 02/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fd4-1320-3e3cbf5.tmp
O43 - CFD: 25/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fe8-1720-1ef44cf.tmp
O43 - CFD: 25/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fe8-1720-1ef44f0.tmp
O43 - CFD: 25/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fe8-1720-1ef44f2.tmp
O43 - CFD: 25/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fe8-1720-1ef4504.tmp
O43 - CFD: 25/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fe8-1720-1ef4515.tmp
O43 - CFD: 25/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fe8-1720-1ef4517.tmp
O43 - CFD: 25/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fe8-1720-1ef4529.tmp
O43 - CFD: 25/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fe8-1720-1ef453b.tmp
O43 - CFD: 25/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fe8-1720-1ef453d.tmp
O43 - CFD: 25/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fe8-1720-1ef454e.tmp
O43 - CFD: 25/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fe8-1720-1ef4560.tmp
O43 - CFD: 25/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fe8-1720-1ef4562.tmp
O43 - CFD: 25/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fe8-1720-1ef4574.tmp
O43 - CFD: 25/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fe8-1720-1ef4576.tmp
O43 - CFD: 25/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fe8-1720-1ef4587.tmp
O43 - CFD: 25/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fe8-1720-1ef45a8.tmp
O43 - CFD: 25/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fe8-1720-1ef45ba.tmp
O43 - CFD: 25/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fe8-1720-1ef45bc.tmp
O43 - CFD: 25/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fe8-1720-1ef45ce.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fe8-eb8-a4999.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fe8-eb8-a49ba.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fe8-eb8-a49cb.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fe8-eb8-a49dd.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fe8-eb8-a49ef.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fe8-eb8-a4a00.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fe8-eb8-a4a31.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fe8-eb8-a4a43.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fe8-eb8-a4a54.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fe8-eb8-a4a56.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fe8-eb8-a4a68.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fe8-eb8-a4a7a.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fe8-eb8-a4a7c.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fe8-eb8-a4a8d.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fe8-eb8-a4a9f.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fe8-eb8-a4ab1.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fe8-eb8-a4ac2.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fe8-eb8-a4ad4.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1fe8-eb8-a4ad6.tmp
O43 - CFD: 20/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ff4-1dcc-14bcb5.tmp
O43 - CFD: 20/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ff4-1dcc-14bce6.tmp
O43 - CFD: 20/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ff4-1dcc-14bd36.tmp
O43 - CFD: 20/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ff4-1dcc-14bd47.tmp
O43 - CFD: 20/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ff4-1dcc-14bd69.tmp
O43 - CFD: 20/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ff4-1dcc-14bd7a.tmp
O43 - CFD: 20/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ff4-1dcc-14bd8c.tmp
O43 - CFD: 20/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ff4-1dcc-14bd9d.tmp
O43 - CFD: 20/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ff4-1dcc-14bdaf.tmp
O43 - CFD: 20/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ff4-1dcc-14bdc1.tmp
O43 - CFD: 20/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ff4-1dcc-14bde2.tmp
O43 - CFD: 20/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ff4-1dcc-14be03.tmp
O43 - CFD: 20/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ff4-1dcc-14be24.tmp
O43 - CFD: 20/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ff4-1dcc-14be36.tmp
O43 - CFD: 20/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ff4-1dcc-14be57.tmp
O43 - CFD: 20/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ff4-1dcc-14be69.tmp
O43 - CFD: 20/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ff4-1dcc-14be7b.tmp
O43 - CFD: 20/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ff4-1dcc-14be9c.tmp
O43 - CFD: 20/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ff4-1dcc-14bead.tmp
O43 - CFD: 03/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ff8-1b08-1ae202.tmp
O43 - CFD: 03/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ff8-1b08-1ae233.tmp
O43 - CFD: 03/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ff8-1b08-1ae245.tmp
O43 - CFD: 03/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ff8-1b08-1ae256.tmp
O43 - CFD: 03/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ff8-1b08-1ae268.tmp
O43 - CFD: 03/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ff8-1b08-1ae27a.tmp
O43 - CFD: 03/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ff8-1b08-1ae28b.tmp
O43 - CFD: 03/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ff8-1b08-1ae29d.tmp
O43 - CFD: 03/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ff8-1b08-1ae2af.tmp
O43 - CFD: 03/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ff8-1b08-1ae2c0.tmp
O43 - CFD: 03/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ff8-1b08-1ae2d2.tmp
O43 - CFD: 03/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ff8-1b08-1ae2e3.tmp
O43 - CFD: 03/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ff8-1b08-1ae2f5.tmp
O43 - CFD: 03/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ff8-1b08-1ae307.tmp
O43 - CFD: 03/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ff8-1b08-1ae309.tmp
O43 - CFD: 03/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ff8-1b08-1ae31a.tmp
O43 - CFD: 03/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ff8-1b08-1ae32c.tmp
O43 - CFD: 03/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ff8-1b08-1ae33e.tmp
O43 - CFD: 03/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-1ff8-1b08-1ae35f.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2094-2690-9c3a1b1.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2094-2690-9c3a1b3.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2094-2690-9c3a1c4.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2094-2690-9c3a1d6.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2094-2690-9c3a1e8.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2094-2690-9c3a1f9.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2094-2690-9c3a1fb.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2094-2690-9c3a20d.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2094-2690-9c3a21f.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2094-2690-9c3a230.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2094-2690-9c3a242.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2094-2690-9c3a244.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2094-2690-9c3a255.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2094-2690-9c3a267.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2094-2690-9c3a279.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2094-2690-9c3a27b.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2094-2690-9c3a28c.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2094-2690-9c3a29e.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2094-2690-9c3a2b0.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2128-141c-132148c3.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2128-141c-132148e5.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2128-141c-132148f6.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2128-141c-13214908.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2128-141c-1321490a.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2128-141c-1321491b.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2128-141c-1321492d.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2128-141c-1321492f.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2128-141c-13214941.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2128-141c-13214952.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2128-141c-13214954.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2128-141c-13214966.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2128-141c-13214978.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2128-141c-1321497a.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2128-141c-1321497c.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2128-141c-1321498d.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2128-141c-1321499f.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2128-141c-132149a1.tmp
O43 - CFD: 20/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2128-141c-132149b2.tmp
O43 - CFD: 08/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21dc-2500-54036e3.tmp
O43 - CFD: 08/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21dc-2500-5403704.tmp
O43 - CFD: 08/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21dc-2500-5403706.tmp
O43 - CFD: 08/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21dc-2500-5403718.tmp
O43 - CFD: 08/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21dc-2500-5403729.tmp
O43 - CFD: 08/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21dc-2500-540372b.tmp
O43 - CFD: 08/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21dc-2500-540373d.tmp
O43 - CFD: 08/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21dc-2500-540374f.tmp
O43 - CFD: 08/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21dc-2500-5403751.tmp
O43 - CFD: 08/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21dc-2500-5403772.tmp
O43 - CFD: 08/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21dc-2500-5403774.tmp
O43 - CFD: 08/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21dc-2500-5403786.tmp
O43 - CFD: 08/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21dc-2500-5403797.tmp
O43 - CFD: 08/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21dc-2500-54037a9.tmp
O43 - CFD: 08/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21dc-2500-54037ba.tmp
O43 - CFD: 08/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21dc-2500-54037cc.tmp
O43 - CFD: 08/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21dc-2500-54037ce.tmp
O43 - CFD: 08/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21dc-2500-54037e0.tmp
O43 - CFD: 08/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-21dc-2500-54037f1.tmp
O43 - CFD: 22/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-239c-340-51bbf03.tmp
O43 - CFD: 22/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-239c-340-51bbf33.tmp
O43 - CFD: 22/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-239c-340-51bbf45.tmp
O43 - CFD: 22/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-239c-340-51bbf57.tmp
O43 - CFD: 22/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-239c-340-51bbf68.tmp
O43 - CFD: 22/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-239c-340-51bbf8a.tmp
O43 - CFD: 22/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-239c-340-51bbf9b.tmp
O43 - CFD: 22/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-239c-340-51bbfad.tmp
O43 - CFD: 22/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-239c-340-51bbfbe.tmp
O43 - CFD: 22/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-239c-340-51bbfd0.tmp
O43 - CFD: 22/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-239c-340-51bbff1.tmp
O43 - CFD: 22/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-239c-340-51bc003.tmp
O43 - CFD: 22/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-239c-340-51bc015.tmp
O43 - CFD: 22/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-239c-340-51bc026.tmp
O43 - CFD: 22/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-239c-340-51bc038.tmp
O43 - CFD: 22/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-239c-340-51bc059.tmp
O43 - CFD: 22/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-239c-340-51bc06b.tmp
O43 - CFD: 22/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-239c-340-51bc06d.tmp
O43 - CFD: 22/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-239c-340-51bc07e.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2420-24a8-88010be.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2420-24a8-88010d0.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2420-24a8-88010e2.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2420-24a8-88010f3.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2420-24a8-88010f5.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2420-24a8-8801107.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2420-24a8-8801119.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2420-24a8-880111b.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2420-24a8-880112c.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2420-24a8-880112e.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2420-24a8-8801140.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2420-24a8-8801151.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2420-24a8-8801153.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2420-24a8-8801165.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2420-24a8-8801177.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2420-24a8-8801179.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2420-24a8-880118a.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2420-24a8-880118c.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2420-24a8-880119e.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-24b4-2090-c141328.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-24b4-2090-c141349.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-24b4-2090-c14135b.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-24b4-2090-c14135d.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-24b4-2090-c14136f.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-24b4-2090-c141380.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-24b4-2090-c141382.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-24b4-2090-c141394.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-24b4-2090-c141396.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-24b4-2090-c1413a8.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-24b4-2090-c1413b9.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-24b4-2090-c1413bb.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-24b4-2090-c1413cd.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-24b4-2090-c1413cf.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-24b4-2090-c1413e0.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-24b4-2090-c1413f2.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-24b4-2090-c1413f4.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-24b4-2090-c141406.tmp
O43 - CFD: 02/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-24b4-2090-c141417.tmp
O43 - CFD: 15/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-270c-2688-8da5b2f.tmp
O43 - CFD: 15/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-270c-2688-8da5b51.tmp
O43 - CFD: 15/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-270c-2688-8da5b72.tmp
O43 - CFD: 15/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-270c-2688-8da5b74.tmp
O43 - CFD: 15/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-270c-2688-8da5b95.tmp
O43 - CFD: 15/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-270c-2688-8da5b97.tmp
O43 - CFD: 15/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-270c-2688-8da5ba9.tmp
O43 - CFD: 15/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-270c-2688-8da5bba.tmp
O43 - CFD: 15/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-270c-2688-8da5bcc.tmp
O43 - CFD: 15/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-270c-2688-8da5bce.tmp
O43 - CFD: 15/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-270c-2688-8da5be0.tmp
O43 - CFD: 15/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-270c-2688-8da5bf1.tmp
O43 - CFD: 15/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-270c-2688-8da5bf3.tmp
O43 - CFD: 15/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-270c-2688-8da5c05.tmp
O43 - CFD: 15/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-270c-2688-8da5c16.tmp
O43 - CFD: 15/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-270c-2688-8da5c18.tmp
O43 - CFD: 15/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-270c-2688-8da5c2a.tmp
O43 - CFD: 15/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-270c-2688-8da5c3c.tmp
O43 - CFD: 15/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-270c-2688-8da5c3e.tmp
O43 - CFD: 03/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27c0-27c4-a0cde.tmp
O43 - CFD: 03/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27c0-27c4-a0cff.tmp
O43 - CFD: 03/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27c0-27c4-a0d11.tmp
O43 - CFD: 03/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27c0-27c4-a0d13.tmp
O43 - CFD: 03/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27c0-27c4-a0d24.tmp
O43 - CFD: 03/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27c0-27c4-a0d26.tmp
O43 - CFD: 03/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27c0-27c4-a0d38.tmp
O43 - CFD: 03/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27c0-27c4-a0d49.tmp
O43 - CFD: 03/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27c0-27c4-a0d4b.tmp
O43 - CFD: 03/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27c0-27c4-a0d5d.tmp
O43 - CFD: 03/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27c0-27c4-a0d6f.tmp
O43 - CFD: 03/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27c0-27c4-a0d71.tmp
O43 - CFD: 03/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27c0-27c4-a0d82.tmp
O43 - CFD: 03/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27c0-27c4-a0d84.tmp
O43 - CFD: 03/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27c0-27c4-a0d96.tmp
O43 - CFD: 03/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27c0-27c4-a0da8.tmp
O43 - CFD: 03/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27c0-27c4-a0db9.tmp
O43 - CFD: 03/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27c0-27c4-a0dbb.tmp
O43 - CFD: 03/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-27c0-27c4-a0dcd.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2f4-1a24-1decd7a.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2f4-1a24-1decd9b.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2f4-1a24-1decdad.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2f4-1a24-1decdaf.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2f4-1a24-1decdc0.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2f4-1a24-1decdc2.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2f4-1a24-1decdd4.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2f4-1a24-1decde6.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2f4-1a24-1decde8.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2f4-1a24-1decdf9.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2f4-1a24-1dece0b.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2f4-1a24-1dece0d.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2f4-1a24-1dece1f.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2f4-1a24-1dece21.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2f4-1a24-1dece32.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2f4-1a24-1dece44.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2f4-1a24-1dece46.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2f4-1a24-1dece57.tmp
O43 - CFD: 05/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-2f4-1a24-1dece69.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-320-1380-265911c.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-320-1380-265912e.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-320-1380-265913f.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-320-1380-2659151.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-320-1380-2659163.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-320-1380-2659174.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-320-1380-2659186.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-320-1380-2659198.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-320-1380-26591a9.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-320-1380-26591bb.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-320-1380-26591cc.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-320-1380-26591de.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-320-1380-26591f0.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-320-1380-2659201.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-320-1380-2659213.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-320-1380-2659225.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-320-1380-2659236.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-320-1380-2659248.tmp
O43 - CFD: 04/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-320-1380-2659259.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-388-2d8-9bff6.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-388-2d8-9c017.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-388-2d8-9c029.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-388-2d8-9c03b.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-388-2d8-9c05c.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-388-2d8-9c06e.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-388-2d8-9c07f.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-388-2d8-9c091.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-388-2d8-9c0a2.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-388-2d8-9c0b4.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-388-2d8-9c0c6.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-388-2d8-9c0d7.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-388-2d8-9c0e9.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-388-2d8-9c0fb.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-388-2d8-9c10c.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-388-2d8-9c11e.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-388-2d8-9c12f.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-388-2d8-9c170.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-388-2d8-9c182.tmp
O43 - CFD: 15/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-454-e60-3b94fc8.tmp
O43 - CFD: 15/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-454-e60-3b94fd9.tmp
O43 - CFD: 15/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-454-e60-3b94feb.tmp
O43 - CFD: 15/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-454-e60-3b94ffd.tmp
O43 - CFD: 15/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-454-e60-3b9500e.tmp
O43 - CFD: 15/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-454-e60-3b95010.tmp
O43 - CFD: 15/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-454-e60-3b95022.tmp
O43 - CFD: 15/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-454-e60-3b95034.tmp
O43 - CFD: 15/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-454-e60-3b95036.tmp
O43 - CFD: 15/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-454-e60-3b95047.tmp
O43 - CFD: 15/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-454-e60-3b95059.tmp
O43 - CFD: 15/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-454-e60-3b9505b.tmp
O43 - CFD: 15/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-454-e60-3b9506c.tmp
O43 - CFD: 15/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-454-e60-3b9507e.tmp
O43 - CFD: 15/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-454-e60-3b95080.tmp
O43 - CFD: 15/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-454-e60-3b95092.tmp
O43 - CFD: 15/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-454-e60-3b950a3.tmp
O43 - CFD: 15/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-454-e60-3b950a5.tmp
O43 - CFD: 15/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-454-e60-3b950b7.tmp
O43 - CFD: 05/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-468-e18-2f182ea.tmp
O43 - CFD: 05/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-468-e18-2f182fc.tmp
O43 - CFD: 05/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-468-e18-2f1830e.tmp
O43 - CFD: 05/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-468-e18-2f18310.tmp
O43 - CFD: 05/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-468-e18-2f18321.tmp
O43 - CFD: 05/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-468-e18-2f18333.tmp
O43 - CFD: 05/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-468-e18-2f18335.tmp
O43 - CFD: 05/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-468-e18-2f18356.tmp
O43 - CFD: 05/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-468-e18-2f18377.tmp
O43 - CFD: 05/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-468-e18-2f18379.tmp
O43 - CFD: 05/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-468-e18-2f1838b.tmp
O43 - CFD: 05/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-468-e18-2f1839d.tmp
O43 - CFD: 05/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-468-e18-2f1839f.tmp
O43 - CFD: 05/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-468-e18-2f183b0.tmp
O43 - CFD: 05/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-468-e18-2f183c2.tmp
O43 - CFD: 05/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-468-e18-2f183d4.tmp
O43 - CFD: 05/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-468-e18-2f183e5.tmp
O43 - CFD: 05/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-468-e18-2f183e7.tmp
O43 - CFD: 05/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-468-e18-2f183f9.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-49c-1534-19795aa.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-49c-1534-19795bc.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-49c-1534-19795be.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-49c-1534-19795cf.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-49c-1534-19795e1.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-49c-1534-19795f3.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-49c-1534-1979604.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-49c-1534-1979616.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-49c-1534-1979618.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-49c-1534-197962a.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-49c-1534-197963b.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-49c-1534-197963d.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-49c-1534-197964f.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-49c-1534-1979651.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-49c-1534-1979662.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-49c-1534-1979684.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-49c-1534-1979686.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-49c-1534-1979697.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-49c-1534-1979699.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c4-1a2c-43fbaab.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c4-1a2c-43fbaad.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c4-1a2c-43fbabf.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c4-1a2c-43fbad1.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c4-1a2c-43fbad3.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c4-1a2c-43fbae4.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c4-1a2c-43fbae6.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c4-1a2c-43fbaf8.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c4-1a2c-43fbb09.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c4-1a2c-43fbb0b.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c4-1a2c-43fbb1d.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c4-1a2c-43fbb2f.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c4-1a2c-43fbb31.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c4-1a2c-43fbb42.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c4-1a2c-43fbb54.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c4-1a2c-43fbb56.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c4-1a2c-43fbb68.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c4-1a2c-43fbb6a.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c4-1a2c-43fbb7b.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c8-1bb4-9a8e4.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c8-1bb4-9a944.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c8-1bb4-9a955.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c8-1bb4-9a967.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c8-1bb4-9a979.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c8-1bb4-9a99a.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c8-1bb4-9a9ab.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c8-1bb4-9a9ad.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c8-1bb4-9a9bf.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c8-1bb4-9a9d1.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c8-1bb4-9a9d3.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c8-1bb4-9a9e4.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c8-1bb4-9a9e6.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c8-1bb4-9a9f8.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c8-1bb4-9a9fa.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c8-1bb4-9aa0c.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c8-1bb4-9aa1d.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c8-1bb4-9aa1f.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4c8-1bb4-9aa31.tmp
O43 - CFD: 13/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4f0-4f4-49ca7.tmp
O43 - CFD: 13/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4f0-4f4-49cb9.tmp
O43 - CFD: 13/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4f0-4f4-49cbb.tmp
O43 - CFD: 13/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4f0-4f4-49ccd.tmp
O43 - CFD: 13/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4f0-4f4-49ccf.tmp
O43 - CFD: 13/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4f0-4f4-49ce0.tmp
O43 - CFD: 13/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4f0-4f4-49ce2.tmp
O43 - CFD: 13/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4f0-4f4-49ce4.tmp
O43 - CFD: 13/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4f0-4f4-49cf6.tmp
O43 - CFD: 13/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4f0-4f4-49cf8.tmp
O43 - CFD: 13/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4f0-4f4-49d0a.tmp
O43 - CFD: 13/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4f0-4f4-49d0c.tmp
O43 - CFD: 13/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4f0-4f4-49d1d.tmp
O43 - CFD: 13/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4f0-4f4-49d2f.tmp
O43 - CFD: 13/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4f0-4f4-49d50.tmp
O43 - CFD: 13/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4f0-4f4-49d52.tmp
O43 - CFD: 13/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4f0-4f4-49d64.tmp
O43 - CFD: 13/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4f0-4f4-49d75.tmp
O43 - CFD: 13/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4f0-4f4-49d87.tmp
O43 - CFD: 30/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4f8-6a8-43b8f88.tmp
O43 - CFD: 30/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4f8-6a8-43b8f8a.tmp
O43 - CFD: 30/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4f8-6a8-43b8f9b.tmp
O43 - CFD: 30/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4f8-6a8-43b8fad.tmp
O43 - CFD: 30/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4f8-6a8-43b8faf.tmp
O43 - CFD: 30/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4f8-6a8-43b8fc1.tmp
O43 - CFD: 30/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4f8-6a8-43b8fd2.tmp
O43 - CFD: 30/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4f8-6a8-43b8fd4.tmp
O43 - CFD: 30/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4f8-6a8-43b8fe6.tmp
O43 - CFD: 30/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4f8-6a8-43b8ff8.tmp
O43 - CFD: 30/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4f8-6a8-43b8ffa.tmp
O43 - CFD: 30/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4f8-6a8-43b900b.tmp
O43 - CFD: 30/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4f8-6a8-43b901d.tmp
O43 - CFD: 30/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4f8-6a8-43b901f.tmp
O43 - CFD: 30/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4f8-6a8-43b9040.tmp
O43 - CFD: 30/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4f8-6a8-43b9052.tmp
O43 - CFD: 30/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4f8-6a8-43b9054.tmp
O43 - CFD: 30/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4f8-6a8-43b9065.tmp
O43 - CFD: 30/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-4f8-6a8-43b9077.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-530-b98-246dd6e.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-530-b98-246dd80.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-530-b98-246dd91.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-530-b98-246dd93.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-530-b98-246dda5.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-530-b98-246ddb7.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-530-b98-246ddb9.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-530-b98-246ddca.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-530-b98-246ddcc.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-530-b98-246ddde.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-530-b98-246ddef.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-530-b98-246ddf1.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-530-b98-246de03.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-530-b98-246de15.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-530-b98-246de17.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-530-b98-246de28.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-530-b98-246de3a.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-530-b98-246de3c.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-530-b98-246de4e.tmp
O43 - CFD: 22/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-590-120c-1bc9a3.tmp
O43 - CFD: 22/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-590-120c-1bc9b5.tmp
O43 - CFD: 22/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-590-120c-1bc9c6.tmp
O43 - CFD: 22/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-590-120c-1bc9d8.tmp
O43 - CFD: 22/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-590-120c-1bc9ea.tmp
O43 - CFD: 22/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-590-120c-1bc9fb.tmp
O43 - CFD: 22/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-590-120c-1bca1d.tmp
O43 - CFD: 22/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-590-120c-1bca2e.tmp
O43 - CFD: 22/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-590-120c-1bca40.tmp
O43 - CFD: 22/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-590-120c-1bca51.tmp
O43 - CFD: 22/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-590-120c-1bca63.tmp
O43 - CFD: 22/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-590-120c-1bca75.tmp
O43 - CFD: 22/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-590-120c-1bca86.tmp
O43 - CFD: 22/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-590-120c-1bca98.tmp
O43 - CFD: 22/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-590-120c-1bcaaa.tmp
O43 - CFD: 22/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-590-120c-1bcabb.tmp
O43 - CFD: 22/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-590-120c-1bcacd.tmp
O43 - CFD: 22/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-590-120c-1bcade.tmp
O43 - CFD: 22/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-590-120c-1bcaf0.tmp
O43 - CFD: 03/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-5e8-16a0-a857487.tmp
O43 - CFD: 03/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-5e8-16a0-a8574a8.tmp
O43 - CFD: 03/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-5e8-16a0-a8574ba.tmp
O43 - CFD: 03/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-5e8-16a0-a8574db.tmp
O43 - CFD: 03/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-5e8-16a0-a8574ec.tmp
O43 - CFD: 03/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-5e8-16a0-a8574fe.tmp
O43 - CFD: 03/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-5e8-16a0-a857500.tmp
O43 - CFD: 03/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-5e8-16a0-a857512.tmp
O43 - CFD: 03/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-5e8-16a0-a857523.tmp
O43 - CFD: 03/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-5e8-16a0-a857535.tmp
O43 - CFD: 03/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-5e8-16a0-a857537.tmp
O43 - CFD: 03/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-5e8-16a0-a857558.tmp
O43 - CFD: 03/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-5e8-16a0-a857579.tmp
O43 - CFD: 03/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-5e8-16a0-a85758b.tmp
O43 - CFD: 03/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-5e8-16a0-a8575ac.tmp
O43 - CFD: 03/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-5e8-16a0-a8575be.tmp
O43 - CFD: 03/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-5e8-16a0-a8575d0.tmp
O43 - CFD: 03/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-5e8-16a0-a8575f1.tmp
O43 - CFD: 03/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-5e8-16a0-a857602.tmp
O43 - CFD: 23/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-634-4d8-1240b8.tmp
O43 - CFD: 23/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-634-4d8-1240d9.tmp
O43 - CFD: 23/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-634-4d8-1240db.tmp
O43 - CFD: 23/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-634-4d8-1240ed.tmp
O43 - CFD: 23/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-634-4d8-1240ef.tmp
O43 - CFD: 23/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-634-4d8-124101.tmp
O43 - CFD: 23/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-634-4d8-124112.tmp
O43 - CFD: 23/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-634-4d8-124114.tmp
O43 - CFD: 23/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-634-4d8-124126.tmp
O43 - CFD: 23/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-634-4d8-124138.tmp
O43 - CFD: 23/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-634-4d8-12413a.tmp
O43 - CFD: 23/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-634-4d8-12414b.tmp
O43 - CFD: 23/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-634-4d8-12415d.tmp
O43 - CFD: 23/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-634-4d8-12415f.tmp
O43 - CFD: 23/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-634-4d8-124170.tmp
O43 - CFD: 23/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-634-4d8-124182.tmp
O43 - CFD: 23/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-634-4d8-124184.tmp
O43 - CFD: 23/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-634-4d8-124196.tmp
O43 - CFD: 23/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-634-4d8-1241a7.tmp
O43 - CFD: 27/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-65c-ee0-9e86e.tmp
O43 - CFD: 27/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-65c-ee0-9e88f.tmp
O43 - CFD: 27/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-65c-ee0-9e891.tmp
O43 - CFD: 27/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-65c-ee0-9e8a2.tmp
O43 - CFD: 27/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-65c-ee0-9e8b4.tmp
O43 - CFD: 27/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-65c-ee0-9e8b6.tmp
O43 - CFD: 27/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-65c-ee0-9e8c8.tmp
O43 - CFD: 27/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-65c-ee0-9e8ca.tmp
O43 - CFD: 27/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-65c-ee0-9e8db.tmp
O43 - CFD: 27/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-65c-ee0-9e8ed.tmp
O43 - CFD: 27/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-65c-ee0-9e8ef.tmp
O43 - CFD: 27/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-65c-ee0-9e901.tmp
O43 - CFD: 27/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-65c-ee0-9e903.tmp
O43 - CFD: 27/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-65c-ee0-9e914.tmp
O43 - CFD: 27/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-65c-ee0-9e926.tmp
O43 - CFD: 27/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-65c-ee0-9e928.tmp
O43 - CFD: 27/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-65c-ee0-9e939.tmp
O43 - CFD: 27/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-65c-ee0-9e93b.tmp
O43 - CFD: 27/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-65c-ee0-9e95d.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-6bc-1d28-9642dc7.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-6bc-1d28-9642de8.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-6bc-1d28-9642dea.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-6bc-1d28-9642dfc.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-6bc-1d28-9642e0e.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-6bc-1d28-9642e10.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-6bc-1d28-9642e21.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-6bc-1d28-9642e33.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-6bc-1d28-9642e35.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-6bc-1d28-9642e46.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-6bc-1d28-9642e48.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-6bc-1d28-9642e5a.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-6bc-1d28-9642e6c.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-6bc-1d28-9642e6e.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-6bc-1d28-9642e7f.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-6bc-1d28-9642e91.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-6bc-1d28-9642e93.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-6bc-1d28-9642ea5.tmp
O43 - CFD: 01/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-6bc-1d28-9642eb6.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-6e0-9a0-e11787e.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-6e0-9a0-e11789f.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-6e0-9a0-e1178e0.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-6e0-9a0-e1178f1.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-6e0-9a0-e117903.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-6e0-9a0-e117924.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-6e0-9a0-e117945.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-6e0-9a0-e117957.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-6e0-9a0-e117969.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-6e0-9a0-e11797a.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-6e0-9a0-e11798c.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-6e0-9a0-e11799d.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-6e0-9a0-e1179af.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-6e0-9a0-e1179e0.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-6e0-9a0-e1179f2.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-6e0-9a0-e117a13.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-6e0-9a0-e117a53.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-6e0-9a0-e117a84.tmp
O43 - CFD: 04/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-6e0-9a0-e117ab5.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-758-dd0-dbc88f6.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-758-dd0-dbc8917.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-758-dd0-dbc8919.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-758-dd0-dbc892b.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-758-dd0-dbc893d.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-758-dd0-dbc893f.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-758-dd0-dbc8950.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-758-dd0-dbc8952.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-758-dd0-dbc8964.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-758-dd0-dbc8975.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-758-dd0-dbc8977.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-758-dd0-dbc8989.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-758-dd0-dbc898b.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-758-dd0-dbc89ac.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-758-dd0-dbc89ae.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-758-dd0-dbc89c0.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-758-dd0-dbc89d2.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-758-dd0-dbc89d4.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-758-dd0-dbc89e5.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-778-16c8-f4782ab.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-778-16c8-f4782cd.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-778-16c8-f4782de.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-778-16c8-f4782f0.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-778-16c8-f4782f2.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-778-16c8-f478304.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-778-16c8-f478315.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-778-16c8-f478336.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-778-16c8-f478358.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-778-16c8-f478369.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-778-16c8-f47837b.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-778-16c8-f47838d.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-778-16c8-f47838f.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-778-16c8-f4783a0.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-778-16c8-f4783b2.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-778-16c8-f4783b4.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-778-16c8-f4783d5.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-778-16c8-f4783e7.tmp
O43 - CFD: 29/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-778-16c8-f4783f8.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-78c-1b24-4dd23ca.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-78c-1b24-4dd23db.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-78c-1b24-4dd23dd.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-78c-1b24-4dd23ff.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-78c-1b24-4dd2410.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-78c-1b24-4dd2412.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-78c-1b24-4dd2424.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-78c-1b24-4dd2436.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-78c-1b24-4dd2457.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-78c-1b24-4dd2468.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-78c-1b24-4dd246a.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-78c-1b24-4dd247c.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-78c-1b24-4dd249d.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-78c-1b24-4dd249f.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-78c-1b24-4dd24c1.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-78c-1b24-4dd24e2.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-78c-1b24-4dd2503.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-78c-1b24-4dd2515.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-78c-1b24-4dd2526.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-790-2120-8c9f167.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-790-2120-8c9f188.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-790-2120-8c9f18a.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-790-2120-8c9f19c.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-790-2120-8c9f1ae.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-790-2120-8c9f1bf.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-790-2120-8c9f1c1.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-790-2120-8c9f1d3.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-790-2120-8c9f1e4.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-790-2120-8c9f1e6.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-790-2120-8c9f1f8.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-790-2120-8c9f20a.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-790-2120-8c9f20c.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-790-2120-8c9f21d.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-790-2120-8c9f22f.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-790-2120-8c9f241.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-790-2120-8c9f243.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-790-2120-8c9f254.tmp
O43 - CFD: 09/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-790-2120-8c9f266.tmp
O43 - CFD: 26/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8c0-454-bfe0f.tmp
O43 - CFD: 26/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8c0-454-bfe30.tmp
O43 - CFD: 26/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8c0-454-bfe32.tmp
O43 - CFD: 26/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8c0-454-bfe44.tmp
O43 - CFD: 26/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8c0-454-bfe55.tmp
O43 - CFD: 26/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8c0-454-bfe57.tmp
O43 - CFD: 26/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8c0-454-bfe69.tmp
O43 - CFD: 26/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8c0-454-bfe7b.tmp
O43 - CFD: 26/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8c0-454-bfe8c.tmp
O43 - CFD: 26/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8c0-454-bfe8e.tmp
O43 - CFD: 26/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8c0-454-bfea0.tmp
O43 - CFD: 26/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8c0-454-bfeb2.tmp
O43 - CFD: 26/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8c0-454-bfeb4.tmp
O43 - CFD: 26/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8c0-454-bfec5.tmp
O43 - CFD: 26/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8c0-454-bfed7.tmp
O43 - CFD: 26/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8c0-454-bfed9.tmp
O43 - CFD: 26/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8c0-454-bfeea.tmp
O43 - CFD: 26/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8c0-454-bfefc.tmp
O43 - CFD: 26/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8c0-454-bff0e.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8e8-4c0-57f349e.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8e8-4c0-57f34b0.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8e8-4c0-57f34c2.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8e8-4c0-57f34d3.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8e8-4c0-57f34d5.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8e8-4c0-57f34e7.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8e8-4c0-57f34e9.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8e8-4c0-57f34fb.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8e8-4c0-57f350c.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8e8-4c0-57f350e.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8e8-4c0-57f3520.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8e8-4c0-57f3531.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8e8-4c0-57f3533.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8e8-4c0-57f3545.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8e8-4c0-57f3557.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8e8-4c0-57f3568.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8e8-4c0-57f356a.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8e8-4c0-57f357c.tmp
O43 - CFD: 01/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-8e8-4c0-57f358e.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-934-1a04-51b06de.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-934-1a04-51b06f0.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-934-1a04-51b0711.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-934-1a04-51b0722.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-934-1a04-51b0744.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-934-1a04-51b0755.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-934-1a04-51b0767.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-934-1a04-51b0779.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-934-1a04-51b077b.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-934-1a04-51b078c.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-934-1a04-51b079e.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-934-1a04-51b07af.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-934-1a04-51b07c1.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-934-1a04-51b07d3.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-934-1a04-51b07e4.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-934-1a04-51b07f6.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-934-1a04-51b07f8.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-934-1a04-51b0819.tmp
O43 - CFD: 11/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-934-1a04-51b082b.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-958-334-15dead9.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-958-334-15deafa.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-958-334-15deafc.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-958-334-15deb0e.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-958-334-15deb10.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-958-334-15deb31.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-958-334-15deb33.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-958-334-15deb45.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-958-334-15deb47.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-958-334-15deb58.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-958-334-15deb6a.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-958-334-15deb6c.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-958-334-15deb7e.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-958-334-15deb8f.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-958-334-15deb91.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-958-334-15deba3.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-958-334-15deba5.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-958-334-15debb6.tmp
O43 - CFD: 17/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-958-334-15debc8.tmp
O43 - CFD: 26/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-988-1cc4-9e2c2de.tmp
O43 - CFD: 26/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-988-1cc4-9e2c32e.tmp
O43 - CFD: 26/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-988-1cc4-9e2c350.tmp
O43 - CFD: 26/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-988-1cc4-9e2c371.tmp
O43 - CFD: 26/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-988-1cc4-9e2c392.tmp
O43 - CFD: 26/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-988-1cc4-9e2c411.tmp
O43 - CFD: 26/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-988-1cc4-9e2c423.tmp
O43 - CFD: 26/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-988-1cc4-9e2c425.tmp
O43 - CFD: 26/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-988-1cc4-9e2c436.tmp
O43 - CFD: 26/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-988-1cc4-9e2c458.tmp
O43 - CFD: 26/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-988-1cc4-9e2c469.tmp
O43 - CFD: 26/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-988-1cc4-9e2c47b.tmp
O43 - CFD: 26/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-988-1cc4-9e2c48c.tmp
O43 - CFD: 26/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-988-1cc4-9e2c48e.tmp
O43 - CFD: 26/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-988-1cc4-9e2c4a0.tmp
O43 - CFD: 26/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-988-1cc4-9e2c4b2.tmp
O43 - CFD: 26/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-988-1cc4-9e2c4b4.tmp
O43 - CFD: 26/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-988-1cc4-9e2c4c5.tmp
O43 - CFD: 26/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-988-1cc4-9e2c4d7.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-98c-15f0-188c04d.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-98c-15f0-188c06e.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-98c-15f0-188c070.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-98c-15f0-188c082.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-98c-15f0-188c094.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-98c-15f0-188c0a5.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-98c-15f0-188c0b7.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-98c-15f0-188c0c9.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-98c-15f0-188c0cb.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-98c-15f0-188c0dc.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-98c-15f0-188c0ee.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-98c-15f0-188c0f0.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-98c-15f0-188c101.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-98c-15f0-188c103.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-98c-15f0-188c115.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-98c-15f0-188c127.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-98c-15f0-188c129.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-98c-15f0-188c13a.tmp
O43 - CFD: 16/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-98c-15f0-188c14c.tmp
O43 - CFD: 15/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9a8-1998-a3044.tmp
O43 - CFD: 15/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9a8-1998-a3056.tmp
O43 - CFD: 15/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9a8-1998-a3067.tmp
O43 - CFD: 15/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9a8-1998-a3069.tmp
O43 - CFD: 15/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9a8-1998-a307b.tmp
O43 - CFD: 15/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9a8-1998-a307d.tmp
O43 - CFD: 15/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9a8-1998-a308f.tmp
O43 - CFD: 15/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9a8-1998-a30a0.tmp
O43 - CFD: 15/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9a8-1998-a30a2.tmp
O43 - CFD: 15/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9a8-1998-a30b4.tmp
O43 - CFD: 15/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9a8-1998-a30b6.tmp
O43 - CFD: 15/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9a8-1998-a30c8.tmp
O43 - CFD: 15/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9a8-1998-a30d9.tmp
O43 - CFD: 15/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9a8-1998-a30db.tmp
O43 - CFD: 15/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9a8-1998-a30ed.tmp
O43 - CFD: 15/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9a8-1998-a30ef.tmp
O43 - CFD: 15/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9a8-1998-a3100.tmp
O43 - CFD: 15/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9a8-1998-a3112.tmp
O43 - CFD: 15/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9a8-1998-a3114.tmp
O43 - CFD: 06/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b0-7b4-35919d.tmp
O43 - CFD: 06/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b0-7b4-3591be.tmp
O43 - CFD: 06/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b0-7b4-3591d0.tmp
O43 - CFD: 06/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b0-7b4-3591e1.tmp
O43 - CFD: 06/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b0-7b4-3591f3.tmp
O43 - CFD: 06/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b0-7b4-359205.tmp
O43 - CFD: 06/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b0-7b4-359216.tmp
O43 - CFD: 06/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b0-7b4-359228.tmp
O43 - CFD: 06/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b0-7b4-35923a.tmp
O43 - CFD: 06/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b0-7b4-35926a.tmp
O43 - CFD: 06/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b0-7b4-35927c.tmp
O43 - CFD: 06/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b0-7b4-35928e.tmp
O43 - CFD: 06/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b0-7b4-35929f.tmp
O43 - CFD: 06/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b0-7b4-3592b1.tmp
O43 - CFD: 06/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b0-7b4-3592c3.tmp
O43 - CFD: 06/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b0-7b4-3592d4.tmp
O43 - CFD: 06/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b0-7b4-3592e6.tmp
O43 - CFD: 06/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b0-7b4-3592f7.tmp
O43 - CFD: 06/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b0-7b4-359309.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b4-1f84-bc9249a.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b4-1f84-bc9249c.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b4-1f84-bc924ad.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b4-1f84-bc924bf.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b4-1f84-bc924c1.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b4-1f84-bc924d3.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b4-1f84-bc924e4.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b4-1f84-bc924e6.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b4-1f84-bc924f8.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b4-1f84-bc9250a.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b4-1f84-bc9250c.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b4-1f84-bc9251d.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b4-1f84-bc9252f.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b4-1f84-bc92531.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b4-1f84-bc92552.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b4-1f84-bc92554.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b4-1f84-bc92566.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b4-1f84-bc92577.tmp
O43 - CFD: 22/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b4-1f84-bc92589.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b8-1510-ab5ef.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b8-1510-ab601.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b8-1510-ab612.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b8-1510-ab624.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b8-1510-ab626.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b8-1510-ab647.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b8-1510-ab649.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b8-1510-ab65b.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b8-1510-ab66c.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b8-1510-ab67e.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b8-1510-ab680.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b8-1510-ab692.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b8-1510-ab6a3.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b8-1510-ab6a5.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b8-1510-ab6b7.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b8-1510-ab6c8.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b8-1510-ab6ca.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b8-1510-ab6dc.tmp
O43 - CFD: 10/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-9b8-1510-ab6ee.tmp
O43 - CFD: 27/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a48-2364-eeeb063.tmp
O43 - CFD: 27/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a48-2364-eeeb085.tmp
O43 - CFD: 27/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a48-2364-eeeb087.tmp
O43 - CFD: 27/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a48-2364-eeeb098.tmp
O43 - CFD: 27/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a48-2364-eeeb0aa.tmp
O43 - CFD: 27/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a48-2364-eeeb0ac.tmp
O43 - CFD: 27/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a48-2364-eeeb0be.tmp
O43 - CFD: 27/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a48-2364-eeeb0cf.tmp
O43 - CFD: 27/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a48-2364-eeeb0e1.tmp
O43 - CFD: 27/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a48-2364-eeeb0f2.tmp
O43 - CFD: 27/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a48-2364-eeeb104.tmp
O43 - CFD: 27/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a48-2364-eeeb116.tmp
O43 - CFD: 27/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a48-2364-eeeb127.tmp
O43 - CFD: 27/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a48-2364-eeeb139.tmp
O43 - CFD: 27/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a48-2364-eeeb14b.tmp
O43 - CFD: 27/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a48-2364-eeeb15c.tmp
O43 - CFD: 27/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a48-2364-eeeb16e.tmp
O43 - CFD: 27/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a48-2364-eeeb17f.tmp
O43 - CFD: 27/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-a48-2364-eeeb191.tmp
O43 - CFD: 15/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-af4-b24-782e102.tmp
O43 - CFD: 15/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-af4-b24-782e133.tmp
O43 - CFD: 15/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-af4-b24-782e145.tmp
O43 - CFD: 15/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-af4-b24-782e156.tmp
O43 - CFD: 15/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-af4-b24-782e168.tmp
O43 - CFD: 15/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-af4-b24-782e17a.tmp
O43 - CFD: 15/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-af4-b24-782e17c.tmp
O43 - CFD: 15/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-af4-b24-782e19d.tmp
O43 - CFD: 15/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-af4-b24-782e1af.tmp
O43 - CFD: 15/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-af4-b24-782e1c0.tmp
O43 - CFD: 15/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-af4-b24-782e1d2.tmp
O43 - CFD: 15/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-af4-b24-782e1e3.tmp
O43 - CFD: 15/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-af4-b24-782e1e5.tmp
O43 - CFD: 15/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-af4-b24-782e1f7.tmp
O43 - CFD: 15/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-af4-b24-782e209.tmp
O43 - CFD: 15/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-af4-b24-782e21a.tmp
O43 - CFD: 15/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-af4-b24-782e22c.tmp
O43 - CFD: 15/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-af4-b24-782e23e.tmp
O43 - CFD: 15/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-af4-b24-782e24f.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b48-bf0-18307f.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b48-bf0-183090.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b48-bf0-1830a2.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b48-bf0-1830b4.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b48-bf0-1830c5.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b48-bf0-1830d7.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b48-bf0-1830e8.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b48-bf0-1830fa.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b48-bf0-18310c.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b48-bf0-18311d.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b48-bf0-18312f.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b48-bf0-183141.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b48-bf0-183152.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b48-bf0-183164.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b48-bf0-183175.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b48-bf0-183187.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b48-bf0-183189.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b48-bf0-18319b.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b48-bf0-1831ac.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b98-b84-1fe43c.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b98-b84-1fe44e.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b98-b84-1fe460.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b98-b84-1fe471.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b98-b84-1fe483.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b98-b84-1fe494.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b98-b84-1fe4a6.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b98-b84-1fe4a8.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b98-b84-1fe4ba.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b98-b84-1fe4cb.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b98-b84-1fe4dd.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b98-b84-1fe4fe.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b98-b84-1fe500.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b98-b84-1fe521.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b98-b84-1fe523.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b98-b84-1fe545.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b98-b84-1fe556.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b98-b84-1fe558.tmp
O43 - CFD: 13/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-b98-b84-1fe56a.tmp
O43 - CFD: 18/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-be8-12f4-a8ccdef.tmp
O43 - CFD: 18/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-be8-12f4-a8cce11.tmp
O43 - CFD: 18/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-be8-12f4-a8cce22.tmp
O43 - CFD: 18/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-be8-12f4-a8cce24.tmp
O43 - CFD: 18/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-be8-12f4-a8cce36.tmp
O43 - CFD: 18/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-be8-12f4-a8cce47.tmp
O43 - CFD: 18/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-be8-12f4-a8cce49.tmp
O43 - CFD: 18/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-be8-12f4-a8cce5b.tmp
O43 - CFD: 18/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-be8-12f4-a8cce6d.tmp
O43 - CFD: 18/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-be8-12f4-a8cce7e.tmp
O43 - CFD: 18/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-be8-12f4-a8cce80.tmp
O43 - CFD: 18/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-be8-12f4-a8cce92.tmp
O43 - CFD: 18/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-be8-12f4-a8ccea4.tmp
O43 - CFD: 18/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-be8-12f4-a8ccea6.tmp
O43 - CFD: 18/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-be8-12f4-a8cceb7.tmp
O43 - CFD: 18/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-be8-12f4-a8ccec9.tmp
O43 - CFD: 18/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-be8-12f4-a8ccecb.tmp
O43 - CFD: 18/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-be8-12f4-a8cceec.tmp
O43 - CFD: 18/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-be8-12f4-a8ccefe.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-bf0-130-331896b.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-bf0-130-331898c.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-bf0-130-331898e.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-bf0-130-33189b0.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-bf0-130-33189c1.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-bf0-130-33189d3.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-bf0-130-33189d5.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-bf0-130-33189e7.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-bf0-130-33189f8.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-bf0-130-33189fa.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-bf0-130-3318a0c.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-bf0-130-3318a2d.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-bf0-130-3318a3f.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-bf0-130-3318a50.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-bf0-130-3318a62.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-bf0-130-3318a74.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-bf0-130-3318a85.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-bf0-130-3318a87.tmp
O43 - CFD: 23/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-bf0-130-3318a99.tmp
O43 - CFD: 08/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-bf8-1b0c-26700c9.tmp
O43 - CFD: 08/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-bf8-1b0c-26700ea.tmp
O43 - CFD: 08/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-bf8-1b0c-26700fc.tmp
O43 - CFD: 08/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-bf8-1b0c-267011d.tmp
O43 - CFD: 08/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-bf8-1b0c-267012f.tmp
O43 - CFD: 08/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-bf8-1b0c-2670141.tmp
O43 - CFD: 08/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-bf8-1b0c-2670152.tmp
O43 - CFD: 08/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-bf8-1b0c-2670154.tmp
O43 - CFD: 08/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-bf8-1b0c-2670175.tmp
O43 - CFD: 08/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-bf8-1b0c-2670187.tmp
O43 - CFD: 08/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-bf8-1b0c-2670199.tmp
O43 - CFD: 08/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-bf8-1b0c-26701aa.tmp
O43 - CFD: 08/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-bf8-1b0c-26701ac.tmp
O43 - CFD: 08/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-bf8-1b0c-26701be.tmp
O43 - CFD: 08/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-bf8-1b0c-26701d0.tmp
O43 - CFD: 08/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-bf8-1b0c-26701d2.tmp
O43 - CFD: 08/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-bf8-1b0c-26701e3.tmp
O43 - CFD: 08/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-bf8-1b0c-26701f5.tmp
O43 - CFD: 08/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-bf8-1b0c-2670206.tmp
O43 - CFD: 15/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c24-1d38-52b5bf5.tmp
O43 - CFD: 15/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c24-1d38-52b5c07.tmp
O43 - CFD: 15/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c24-1d38-52b5c09.tmp
O43 - CFD: 15/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c24-1d38-52b5c1b.tmp
O43 - CFD: 15/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c24-1d38-52b5c1d.tmp
O43 - CFD: 15/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c24-1d38-52b5c2e.tmp
O43 - CFD: 15/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c24-1d38-52b5c40.tmp
O43 - CFD: 15/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c24-1d38-52b5c42.tmp
O43 - CFD: 15/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c24-1d38-52b5c53.tmp
O43 - CFD: 15/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c24-1d38-52b5c65.tmp
O43 - CFD: 15/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c24-1d38-52b5c67.tmp
O43 - CFD: 15/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c24-1d38-52b5c79.tmp
O43 - CFD: 15/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c24-1d38-52b5c7b.tmp
O43 - CFD: 15/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c24-1d38-52b5c8c.tmp
O43 - CFD: 15/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c24-1d38-52b5c9e.tmp
O43 - CFD: 15/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c24-1d38-52b5ca0.tmp
O43 - CFD: 15/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c24-1d38-52b5cb2.tmp
O43 - CFD: 15/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c24-1d38-52b5cc3.tmp
O43 - CFD: 15/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c24-1d38-52b5cc5.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c54-d1c-17c4a5.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c54-d1c-17c4c7.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c54-d1c-17c4d8.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c54-d1c-17c4ea.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c54-d1c-17c4fb.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c54-d1c-17c50d.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c54-d1c-17c51f.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c54-d1c-17c530.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c54-d1c-17c542.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c54-d1c-17c554.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c54-d1c-17c556.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c54-d1c-17c567.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c54-d1c-17c579.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c54-d1c-17c58a.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c54-d1c-17c59c.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c54-d1c-17c5ae.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c54-d1c-17c5bf.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c54-d1c-17c5d1.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c54-d1c-17c5e3.tmp
O43 - CFD: 14/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c98-1264-32bff64.tmp
O43 - CFD: 14/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c98-1264-32bff75.tmp
O43 - CFD: 14/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c98-1264-32bff77.tmp
O43 - CFD: 14/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c98-1264-32bff89.tmp
O43 - CFD: 14/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c98-1264-32bff9a.tmp
O43 - CFD: 14/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c98-1264-32bff9c.tmp
O43 - CFD: 14/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c98-1264-32bffae.tmp
O43 - CFD: 14/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c98-1264-32bffc0.tmp
O43 - CFD: 14/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c98-1264-32bffc2.tmp
O43 - CFD: 14/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c98-1264-32bffd3.tmp
O43 - CFD: 14/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c98-1264-32bffe5.tmp
O43 - CFD: 14/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c98-1264-32bffe7.tmp
O43 - CFD: 14/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c98-1264-32bfff9.tmp
O43 - CFD: 14/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c98-1264-32bfffb.tmp
O43 - CFD: 14/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c98-1264-32c000c.tmp
O43 - CFD: 14/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c98-1264-32c001e.tmp
O43 - CFD: 14/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c98-1264-32c002f.tmp
O43 - CFD: 14/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c98-1264-32c0031.tmp
O43 - CFD: 14/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-c98-1264-32c0043.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ce4-1cc8-13c257.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ce4-1cc8-13c269.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ce4-1cc8-13c27a.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ce4-1cc8-13c27c.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ce4-1cc8-13c28e.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ce4-1cc8-13c29f.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ce4-1cc8-13c2a1.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ce4-1cc8-13c2b3.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ce4-1cc8-13c2c5.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ce4-1cc8-13c2c7.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ce4-1cc8-13c2d8.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ce4-1cc8-13c2ea.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ce4-1cc8-13c2ec.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ce4-1cc8-13c2fe.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ce4-1cc8-13c30f.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ce4-1cc8-13c311.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ce4-1cc8-13c323.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ce4-1cc8-13c334.tmp
O43 - CFD: 28/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ce4-1cc8-13c336.tmp
O43 - CFD: 26/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ce8-2408-a48a505.tmp
O43 - CFD: 26/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ce8-2408-a48a527.tmp
O43 - CFD: 26/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ce8-2408-a48a538.tmp
O43 - CFD: 26/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ce8-2408-a48a53a.tmp
O43 - CFD: 26/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ce8-2408-a48a54c.tmp
O43 - CFD: 26/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ce8-2408-a48a55e.tmp
O43 - CFD: 26/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ce8-2408-a48a560.tmp
O43 - CFD: 26/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ce8-2408-a48a571.tmp
O43 - CFD: 26/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ce8-2408-a48a583.tmp
O43 - CFD: 26/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ce8-2408-a48a594.tmp
O43 - CFD: 26/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ce8-2408-a48a596.tmp
O43 - CFD: 26/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ce8-2408-a48a5a8.tmp
O43 - CFD: 26/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ce8-2408-a48a5ba.tmp
O43 - CFD: 26/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ce8-2408-a48a5bc.tmp
O43 - CFD: 26/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ce8-2408-a48a5cd.tmp
O43 - CFD: 26/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ce8-2408-a48a5df.tmp
O43 - CFD: 26/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ce8-2408-a48a5e1.tmp
O43 - CFD: 26/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ce8-2408-a48a5f3.tmp
O43 - CFD: 26/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ce8-2408-a48a604.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-cf8-1a04-4f5a4cc.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-cf8-1a04-4f5a4ee.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-cf8-1a04-4f5a4ff.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-cf8-1a04-4f5a501.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-cf8-1a04-4f5a513.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-cf8-1a04-4f5a525.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-cf8-1a04-4f5a536.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-cf8-1a04-4f5a548.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-cf8-1a04-4f5a54a.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-cf8-1a04-4f5a55b.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-cf8-1a04-4f5a57d.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-cf8-1a04-4f5a58e.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-cf8-1a04-4f5a5b0.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-cf8-1a04-4f5a5c1.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-cf8-1a04-4f5a5d3.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-cf8-1a04-4f5a5e4.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-cf8-1a04-4f5a5f6.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-cf8-1a04-4f5a5f8.tmp
O43 - CFD: 24/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-cf8-1a04-4f5a619.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d5c-13f8-2485846.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d5c-13f8-2485858.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d5c-13f8-2485879.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d5c-13f8-248588b.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d5c-13f8-248589d.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d5c-13f8-24858be.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d5c-13f8-24858c0.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d5c-13f8-24858e1.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d5c-13f8-2485902.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d5c-13f8-2485904.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d5c-13f8-2485916.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d5c-13f8-2485928.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d5c-13f8-248592a.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d5c-13f8-248593b.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d5c-13f8-248594d.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d5c-13f8-248598d.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d5c-13f8-24859af.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d5c-13f8-24859c0.tmp
O43 - CFD: 12/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d5c-13f8-24859c2.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d80-888-af63ab4.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d80-888-af63ae5.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d80-888-af63af7.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d80-888-af63b08.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d80-888-af63b1a.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d80-888-af63b1c.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d80-888-af63b2e.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d80-888-af63b3f.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d80-888-af63b41.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d80-888-af63b53.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d80-888-af63b65.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d80-888-af63b67.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d80-888-af63b78.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d80-888-af63b8a.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d80-888-af63b9b.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d80-888-af63b9d.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d80-888-af63baf.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d80-888-af63bc1.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-d80-888-af63bd2.tmp
O43 - CFD: 05/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-db0-790-426f9f.tmp
O43 - CFD: 05/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-db0-790-426fcf.tmp
O43 - CFD: 05/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-db0-790-426fd1.tmp
O43 - CFD: 05/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-db0-790-426ff3.tmp
O43 - CFD: 05/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-db0-790-427004.tmp
O43 - CFD: 05/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-db0-790-427006.tmp
O43 - CFD: 05/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-db0-790-427018.tmp
O43 - CFD: 05/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-db0-790-42702a.tmp
O43 - CFD: 05/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-db0-790-42703b.tmp
O43 - CFD: 05/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-db0-790-42704d.tmp
O43 - CFD: 05/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-db0-790-42705e.tmp
O43 - CFD: 05/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-db0-790-427070.tmp
O43 - CFD: 05/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-db0-790-427091.tmp
O43 - CFD: 05/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-db0-790-4270a3.tmp
O43 - CFD: 05/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-db0-790-4270b5.tmp
O43 - CFD: 05/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-db0-790-4270d6.tmp
O43 - CFD: 05/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-db0-790-4270e7.tmp
O43 - CFD: 05/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-db0-790-427109.tmp
O43 - CFD: 05/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-db0-790-42712a.tmp
O43 - CFD: 19/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-dc-bc8-52ea43b.tmp
O43 - CFD: 19/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-dc-bc8-52ea45c.tmp
O43 - CFD: 19/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-dc-bc8-52ea45e.tmp
O43 - CFD: 19/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-dc-bc8-52ea470.tmp
O43 - CFD: 19/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-dc-bc8-52ea481.tmp
O43 - CFD: 19/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-dc-bc8-52ea493.tmp
O43 - CFD: 19/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-dc-bc8-52ea4a4.tmp
O43 - CFD: 19/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-dc-bc8-52ea4a6.tmp
O43 - CFD: 19/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-dc-bc8-52ea4c8.tmp
O43 - CFD: 19/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-dc-bc8-52ea4d9.tmp
O43 - CFD: 19/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-dc-bc8-52ea4eb.tmp
O43 - CFD: 19/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-dc-bc8-52ea4ed.tmp
O43 - CFD: 19/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-dc-bc8-52ea4ff.tmp
O43 - CFD: 19/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-dc-bc8-52ea510.tmp
O43 - CFD: 19/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-dc-bc8-52ea531.tmp
O43 - CFD: 19/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-dc-bc8-52ea543.tmp
O43 - CFD: 19/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-dc-bc8-52ea555.tmp
O43 - CFD: 19/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-dc-bc8-52ea566.tmp
O43 - CFD: 19/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-dc-bc8-52ea578.tmp
O43 - CFD: 16/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-dfc-19c0-1417e9.tmp
O43 - CFD: 16/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-dfc-19c0-14180a.tmp
O43 - CFD: 16/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-dfc-19c0-14181c.tmp
O43 - CFD: 16/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-dfc-19c0-14181e.tmp
O43 - CFD: 16/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-dfc-19c0-141830.tmp
O43 - CFD: 16/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-dfc-19c0-141841.tmp
O43 - CFD: 16/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-dfc-19c0-141853.tmp
O43 - CFD: 16/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-dfc-19c0-141855.tmp
O43 - CFD: 16/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-dfc-19c0-141867.tmp
O43 - CFD: 16/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-dfc-19c0-141878.tmp
O43 - CFD: 16/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-dfc-19c0-14188a.tmp
O43 - CFD: 16/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-dfc-19c0-14188c.tmp
O43 - CFD: 16/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-dfc-19c0-14189d.tmp
O43 - CFD: 16/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-dfc-19c0-1418af.tmp
O43 - CFD: 16/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-dfc-19c0-1418c1.tmp
O43 - CFD: 16/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-dfc-19c0-1418c3.tmp
O43 - CFD: 16/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-dfc-19c0-1418d4.tmp
O43 - CFD: 16/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-dfc-19c0-1418e6.tmp
O43 - CFD: 16/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-dfc-19c0-1418e8.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe366.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe387.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe399.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe3ba.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe41a.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe44b.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe46c.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe47d.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe49f.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe4b0.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe4d2.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe4e3.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe504.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe516.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe547.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe568.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe56a.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe59b.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe5ad.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe5be.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe5d0.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe5e2.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe612.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe624.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe645.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe657.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe678.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe699.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe6ab.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe6bd.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe6de.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe6ff.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe711.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe732.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe744.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe765.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe890.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe8a1.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe8b3.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe8c5.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe8d6.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe8e8.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe8ea.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe8fc.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe90d.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe90f.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe921.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe932.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe944.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe946.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe958.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe969.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe97b.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe97d.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe98f.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe9a0.tmp
O43 - CFD: 14/10/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e20-1614-2fe9b2.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e38-103c-28aa4b0.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e38-103c-28aa4c2.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e38-103c-28aa4d3.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e38-103c-28aa4d5.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e38-103c-28aa4e7.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e38-103c-28aa4f8.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e38-103c-28aa4fa.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e38-103c-28aa50c.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e38-103c-28aa51e.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e38-103c-28aa520.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e38-103c-28aa531.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e38-103c-28aa543.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e38-103c-28aa545.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e38-103c-28aa557.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e38-103c-28aa568.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e38-103c-28aa56a.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e38-103c-28aa57c.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e38-103c-28aa58d.tmp
O43 - CFD: 28/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e38-103c-28aa58f.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e4-19d8-10324e85.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e4-19d8-10324e96.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e4-19d8-10324e98.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e4-19d8-10324eaa.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e4-19d8-10324ebc.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e4-19d8-10324ebe.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e4-19d8-10324ecf.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e4-19d8-10324ee1.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e4-19d8-10324ee3.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e4-19d8-10324ef5.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e4-19d8-10324f06.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e4-19d8-10324f08.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e4-19d8-10324f1a.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e4-19d8-10324f2b.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e4-19d8-10324f2d.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e4-19d8-10324f3f.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e4-19d8-10324f51.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e4-19d8-10324f62.tmp
O43 - CFD: 19/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e4-19d8-10324f64.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e50-1840-2071acc.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e50-1840-2071ade.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e50-1840-2071af0.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e50-1840-2071b01.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e50-1840-2071b13.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e50-1840-2071b24.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e50-1840-2071b26.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e50-1840-2071b38.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e50-1840-2071b4a.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e50-1840-2071b5b.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e50-1840-2071b6d.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e50-1840-2071b6f.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e50-1840-2071b81.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e50-1840-2071b83.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e50-1840-2071b94.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e50-1840-2071ba6.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e50-1840-2071bb7.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e50-1840-2071bc9.tmp
O43 - CFD: 18/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-e50-1840-2071bcb.tmp
O43 - CFD: 15/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-edc-1a8-436876.tmp
O43 - CFD: 15/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-edc-1a8-436887.tmp
O43 - CFD: 15/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-edc-1a8-436899.tmp
O43 - CFD: 15/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-edc-1a8-4368ab.tmp
O43 - CFD: 15/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-edc-1a8-4368bc.tmp
O43 - CFD: 15/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-edc-1a8-4368ce.tmp
O43 - CFD: 15/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-edc-1a8-4368df.tmp
O43 - CFD: 15/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-edc-1a8-4368f1.tmp
O43 - CFD: 15/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-edc-1a8-4368f3.tmp
O43 - CFD: 15/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-edc-1a8-436905.tmp
O43 - CFD: 15/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-edc-1a8-436916.tmp
O43 - CFD: 15/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-edc-1a8-436928.tmp
O43 - CFD: 15/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-edc-1a8-43692a.tmp
O43 - CFD: 15/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-edc-1a8-43693c.tmp
O43 - CFD: 15/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-edc-1a8-43694d.tmp
O43 - CFD: 15/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-edc-1a8-43695f.tmp
O43 - CFD: 15/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-edc-1a8-436970.tmp
O43 - CFD: 15/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-edc-1a8-436972.tmp
O43 - CFD: 15/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-edc-1a8-436984.tmp
O43 - CFD: 13/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f0c-1810-26cdb5.tmp
O43 - CFD: 13/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f0c-1810-26ce05.tmp
O43 - CFD: 13/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f0c-1810-26ce26.tmp
O43 - CFD: 13/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f0c-1810-26ce47.tmp
O43 - CFD: 13/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f0c-1810-26ce69.tmp
O43 - CFD: 13/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f0c-1810-26ce8a.tmp
O43 - CFD: 13/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f0c-1810-26ceab.tmp
O43 - CFD: 13/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f0c-1810-26cecc.tmp
O43 - CFD: 13/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f0c-1810-26cede.tmp
O43 - CFD: 13/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f0c-1810-26ceff.tmp
O43 - CFD: 13/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f0c-1810-26cf11.tmp
O43 - CFD: 13/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f0c-1810-26cf22.tmp
O43 - CFD: 13/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f0c-1810-26cf34.tmp
O43 - CFD: 13/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f0c-1810-26cf46.tmp
O43 - CFD: 13/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f0c-1810-26cf57.tmp
O43 - CFD: 13/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f0c-1810-26cf59.tmp
O43 - CFD: 13/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f0c-1810-26cf6b.tmp
O43 - CFD: 13/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f0c-1810-26cf7d.tmp
O43 - CFD: 13/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f0c-1810-26cf8e.tmp
O43 - CFD: 06/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f0c-a40-26a5a54.tmp
O43 - CFD: 06/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f0c-a40-26a5a66.tmp
O43 - CFD: 06/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f0c-a40-26a5a68.tmp
O43 - CFD: 06/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f0c-a40-26a5a7a.tmp
O43 - CFD: 06/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f0c-a40-26a5a8b.tmp
O43 - CFD: 06/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f0c-a40-26a5a8d.tmp
O43 - CFD: 06/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f0c-a40-26a5a9f.tmp
O43 - CFD: 06/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f0c-a40-26a5ab1.tmp
O43 - CFD: 06/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f0c-a40-26a5ab3.tmp
O43 - CFD: 06/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f0c-a40-26a5ac4.tmp
O43 - CFD: 06/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f0c-a40-26a5ac6.tmp
O43 - CFD: 06/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f0c-a40-26a5ad8.tmp
O43 - CFD: 06/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f0c-a40-26a5ae9.tmp
O43 - CFD: 06/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f0c-a40-26a5aeb.tmp
O43 - CFD: 06/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f0c-a40-26a5afd.tmp
O43 - CFD: 06/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f0c-a40-26a5b0f.tmp
O43 - CFD: 06/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f0c-a40-26a5b11.tmp
O43 - CFD: 06/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f0c-a40-26a5b22.tmp
O43 - CFD: 06/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f0c-a40-26a5b24.tmp
O43 - CFD: 13/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f1c-1d1c-282267.tmp
O43 - CFD: 13/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f1c-1d1c-282279.tmp
O43 - CFD: 13/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f1c-1d1c-2822aa.tmp
O43 - CFD: 13/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f1c-1d1c-2822bc.tmp
O43 - CFD: 13/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f1c-1d1c-2822be.tmp
O43 - CFD: 13/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f1c-1d1c-2822cf.tmp
O43 - CFD: 13/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f1c-1d1c-2822e1.tmp
O43 - CFD: 13/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f1c-1d1c-2822f2.tmp
O43 - CFD: 13/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f1c-1d1c-2822f4.tmp
O43 - CFD: 13/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f1c-1d1c-282316.tmp
O43 - CFD: 13/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f1c-1d1c-282327.tmp
O43 - CFD: 13/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f1c-1d1c-282339.tmp
O43 - CFD: 13/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f1c-1d1c-28234b.tmp
O43 - CFD: 13/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f1c-1d1c-28236c.tmp
O43 - CFD: 13/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f1c-1d1c-28237d.tmp
O43 - CFD: 13/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f1c-1d1c-28238f.tmp
O43 - CFD: 13/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f1c-1d1c-2823a1.tmp
O43 - CFD: 13/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f1c-1d1c-2823b2.tmp
O43 - CFD: 13/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f1c-1d1c-2823b4.tmp
O43 - CFD: 15/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f28-1514-2bff399.tmp
O43 - CFD: 15/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f28-1514-2bff3ab.tmp
O43 - CFD: 15/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f28-1514-2bff3bd.tmp
O43 - CFD: 15/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f28-1514-2bff3ce.tmp
O43 - CFD: 15/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f28-1514-2bff3e0.tmp
O43 - CFD: 15/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f28-1514-2bff3f1.tmp
O43 - CFD: 15/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f28-1514-2bff3f3.tmp
O43 - CFD: 15/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f28-1514-2bff405.tmp
O43 - CFD: 15/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f28-1514-2bff407.tmp
O43 - CFD: 15/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f28-1514-2bff419.tmp
O43 - CFD: 15/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f28-1514-2bff42a.tmp
O43 - CFD: 15/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f28-1514-2bff43c.tmp
O43 - CFD: 15/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f28-1514-2bff43e.tmp
O43 - CFD: 15/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f28-1514-2bff450.tmp
O43 - CFD: 15/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f28-1514-2bff461.tmp
O43 - CFD: 15/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f28-1514-2bff473.tmp
O43 - CFD: 15/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f28-1514-2bff484.tmp
O43 - CFD: 15/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f28-1514-2bff496.tmp
O43 - CFD: 15/06/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f28-1514-2bff4a8.tmp
O43 - CFD: 21/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f2c-1700-21f149e.tmp
O43 - CFD: 21/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f2c-1700-21f14ce.tmp
O43 - CFD: 21/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f2c-1700-21f14f0.tmp
O43 - CFD: 21/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f2c-1700-21f1501.tmp
O43 - CFD: 21/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f2c-1700-21f1523.tmp
O43 - CFD: 21/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f2c-1700-21f1544.tmp
O43 - CFD: 21/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f2c-1700-21f1555.tmp
O43 - CFD: 21/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f2c-1700-21f1577.tmp
O43 - CFD: 21/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f2c-1700-21f1588.tmp
O43 - CFD: 21/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f2c-1700-21f15aa.tmp
O43 - CFD: 21/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f2c-1700-21f15bb.tmp
O43 - CFD: 21/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f2c-1700-21f15dc.tmp
O43 - CFD: 21/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f2c-1700-21f15ee.tmp
O43 - CFD: 21/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f2c-1700-21f160f.tmp
O43 - CFD: 21/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f2c-1700-21f1621.tmp
O43 - CFD: 21/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f2c-1700-21f1633.tmp
O43 - CFD: 21/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f2c-1700-21f1635.tmp
O43 - CFD: 21/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f2c-1700-21f1646.tmp
O43 - CFD: 21/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f2c-1700-21f1658.tmp
O43 - CFD: 03/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f3c-137c-8a8fc45.tmp
O43 - CFD: 03/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f3c-137c-8a8fc56.tmp
O43 - CFD: 03/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f3c-137c-8a8fc68.tmp
O43 - CFD: 03/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f3c-137c-8a8fc7a.tmp
O43 - CFD: 03/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f3c-137c-8a8fc8b.tmp
O43 - CFD: 03/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f3c-137c-8a8fc9d.tmp
O43 - CFD: 03/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f3c-137c-8a8fcaf.tmp
O43 - CFD: 03/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f3c-137c-8a8fcd0.tmp
O43 - CFD: 03/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f3c-137c-8a8fce1.tmp
O43 - CFD: 03/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f3c-137c-8a8fce3.tmp
O43 - CFD: 03/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f3c-137c-8a8fcf5.tmp
O43 - CFD: 03/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f3c-137c-8a8fd07.tmp
O43 - CFD: 03/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f3c-137c-8a8fd18.tmp
O43 - CFD: 03/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f3c-137c-8a8fd2a.tmp
O43 - CFD: 03/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f3c-137c-8a8fd2c.tmp
O43 - CFD: 03/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f3c-137c-8a8fd3e.tmp
O43 - CFD: 03/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f3c-137c-8a8fd4f.tmp
O43 - CFD: 03/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f3c-137c-8a8fd51.tmp
O43 - CFD: 03/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f3c-137c-8a8fd63.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f54-2514-4334547.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f54-2514-4334559.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f54-2514-433455b.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f54-2514-433456c.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f54-2514-433457e.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f54-2514-4334580.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f54-2514-4334591.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f54-2514-43345a3.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f54-2514-43345b5.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f54-2514-43345b7.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f54-2514-43345c8.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f54-2514-43345da.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f54-2514-43345dc.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f54-2514-43345ee.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f54-2514-43345ff.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f54-2514-4334611.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f54-2514-4334622.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f54-2514-4334634.tmp
O43 - CFD: 27/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f54-2514-4334636.tmp
O43 - CFD: 19/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f94-1a80-28a8ed.tmp
O43 - CFD: 19/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f94-1a80-28a90e.tmp
O43 - CFD: 19/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f94-1a80-28a920.tmp
O43 - CFD: 19/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f94-1a80-28a931.tmp
O43 - CFD: 19/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f94-1a80-28a943.tmp
O43 - CFD: 19/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f94-1a80-28a945.tmp
O43 - CFD: 19/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f94-1a80-28a957.tmp
O43 - CFD: 19/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f94-1a80-28a968.tmp
O43 - CFD: 19/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f94-1a80-28a98a.tmp
O43 - CFD: 19/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f94-1a80-28a99b.tmp
O43 - CFD: 19/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f94-1a80-28a9ad.tmp
O43 - CFD: 19/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f94-1a80-28a9af.tmp
O43 - CFD: 19/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f94-1a80-28a9c0.tmp
O43 - CFD: 19/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f94-1a80-28a9d2.tmp
O43 - CFD: 19/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f94-1a80-28a9d4.tmp
O43 - CFD: 19/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f94-1a80-28a9e6.tmp
O43 - CFD: 19/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f94-1a80-28a9f7.tmp
O43 - CFD: 19/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f94-1a80-28aa09.tmp
O43 - CFD: 19/08/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-f94-1a80-28aa0b.tmp
O43 - CFD: 17/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-fd4-e48-2b8efb3.tmp
O43 - CFD: 17/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-fd4-e48-2b8efc5.tmp
O43 - CFD: 17/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-fd4-e48-2b8efe6.tmp
O43 - CFD: 17/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-fd4-e48-2b8eff8.tmp
O43 - CFD: 17/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-fd4-e48-2b8f009.tmp
O43 - CFD: 17/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-fd4-e48-2b8f02b.tmp
O43 - CFD: 17/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-fd4-e48-2b8f04c.tmp
O43 - CFD: 17/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-fd4-e48-2b8f05e.tmp
O43 - CFD: 17/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-fd4-e48-2b8f07f.tmp
O43 - CFD: 17/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-fd4-e48-2b8f090.tmp
O43 - CFD: 17/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-fd4-e48-2b8f0b2.tmp
O43 - CFD: 17/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-fd4-e48-2b8f0e3.tmp
O43 - CFD: 17/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-fd4-e48-2b8f104.tmp
O43 - CFD: 17/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-fd4-e48-2b8f115.tmp
O43 - CFD: 17/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-fd4-e48-2b8f127.tmp
O43 - CFD: 17/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-fd4-e48-2b8f139.tmp
O43 - CFD: 17/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-fd4-e48-2b8f16a.tmp
O43 - CFD: 17/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-fd4-e48-2b8f17b.tmp
O43 - CFD: 17/07/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-fd4-e48-2b8f18d.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ff4-1d18-8624770.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ff4-1d18-8624792.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ff4-1d18-86247a3.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ff4-1d18-86247a5.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ff4-1d18-86247c6.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ff4-1d18-86247d8.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ff4-1d18-86247ea.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ff4-1d18-86247ec.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ff4-1d18-86247fd.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ff4-1d18-862480f.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ff4-1d18-8624811.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ff4-1d18-8624823.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ff4-1d18-8624834.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ff4-1d18-8624836.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ff4-1d18-8624848.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ff4-1d18-8624859.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ff4-1d18-862485b.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ff4-1d18-862486d.tmp
O43 - CFD: 18/09/2020 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\tw-ff4-1d18-862487f.tmp
O43 - CFD: 13/06/2020 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Roaming\Adobe =>.Adobe
O43 - CFD: 14/07/2020 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Roaming\Microsoft =>.Microsoft Corporation

---\\ ShellIconOverlayIdentifiers (SIOI) (1) - 0s
O106 - SIOI: Enhanced Storage Icon Overlay Handler Class [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - DLL d’extension d’environnement de stockage.) -- C:\Windows\System32\EhStorShell.dll [Unsigned] =>.Microsoft Corporation

---\\ RACCOURCIS DES MENUS CONTEXTUELS (SCMH) (24) - 2s
O108 - CMH1: EPP - {09A47860-11B0-4DA5-AFA5-26D86198A780} . (.Microsoft Corporation - Extension Microsoft Security Client Shell.) -- C:\Program Files\Windows Defender\shellext.dll =>.Microsoft Windows®
O108 - CMH1: ModernSharing - {e2bf9676-5f8f-435c-97eb-11607a5bedf7} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH1: Open With - {09799AFB-AD67-11d1-ABCD-00C04FC30936} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft®
O108 - CMH1: Open With EncryptionMenu - {A470F8CF-A1E8-4f65-8335-227475AA5C46} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft®
O108 - CMH1: Sharing - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH1: WorkFolders - {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} . (.Microsoft Corporation - Extension d’environnement de Dossiers de tr.) -- C:\Windows\System32\WorkfoldersShell.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH2: NvAppShExt - {A929C4CE-FD36-4270-B4F5-34ECAC5BD63C} . (.NVIDIA Corporation - NVIDIA Shell Extensions.) -- C:\Windows\System32\nv3dappshext.dll =>.NVIDIA Corporation®
O108 - CMH2: OpenContainingFolderMenu - {37ea3a21-7493-4208-a011-7f9ea79ce9f5} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft®
O108 - CMH2: OpenGLShExt - {E97DEC16-A50D-49bb-AE24-CF682282E08D} . (.NVIDIA Corporation - NVIDIA Shell Extensions.) -- C:\Windows\System32\nv3dappshext.dll =>.NVIDIA Corporation®
O108 - CMH3: CopyAsPathMenu - {f3d06e7c-1e45-4a26-847e-f9fcdee59be0} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft®
O108 - CMH3: SendTo - {7BA4C740-9E81-11CF-99D3-00AA004AE837} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft®
O108 - CMH4: EncryptionMenu - {A470F8CF-A1E8-4f65-8335-227475AA5C46} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft®
O108 - CMH4: EPP - {09A47860-11B0-4DA5-AFA5-26D86198A780} . (.Microsoft Corporation - Extension Microsoft Security Client Shell.) -- C:\Program Files\Windows Defender\shellext.dll =>.Microsoft Windows®
O108 - CMH4: Sharing - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH4: WorkFolders - {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} . (.Microsoft Corporation - Extension d’environnement de Dossiers de tr.) -- C:\Windows\System32\WorkfoldersShell.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH5: New - {D969A300-E7FF-11d0-A93B-00A0C90F2719} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft®
O108 - CMH5: NvCplDesktopContext - {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} . (.NVIDIA Corporation - NVIDIA Display Shell Extension.) -- C:\Windows\System32\nvshext.dll =>.NVIDIA Corporation®
O108 - CMH5: Sharing - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH5: WorkFolders - {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} . (.Microsoft Corporation - Extension d’environnement de Dossiers de tr.) -- C:\Windows\System32\WorkfoldersShell.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH6: Library Location - {3dad6c5d-2167-4cae-9914-f99e41c12cfa} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft®
O108 - CMH6: PintoStartScreen - {470C0EBD-5D73-4d58-9CED-E91E22E23282} . (.Microsoft Corporation - Programme de résolution d’applications.) -- C:\Windows\System32\appresolver.dll =>.Microsoft®
O108 - CMH7: EnhancedStorageShell - {2854F705-3548-414C-A113-93E27C808C85} . (.Microsoft Corporation - DLL d’extension d’environnement de stockage.) -- C:\Windows\System32\EhStorShell.dll [Unsigned] =>.Microsoft Corporation
O108 - CMH7: EPP - {09A47860-11B0-4DA5-AFA5-26D86198A780} . (.Microsoft Corporation - Extension Microsoft Security Client Shell.) -- C:\Program Files\Windows Defender\shellext.dll =>.Microsoft Windows®
O108 - CMH7: Sharing - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll [Unsigned] =>.Microsoft Corporation

---\\ IMAGE FILE EXECUTION OPTIONS (IFEO) (18) - 4s
O50 - IFEO:C:\Windows\System32\cscript.exe - (.Microsoft Corporation - Microsoft ® Console Based Script Host.) [DisableExceptionChainValidation\\3] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\dllhost.exe - (.Microsoft Corporation - COM Surrogate.) [DisableExceptionChainValidation\\3] =>.Microsoft Windows®
O50 - IFEO:C:\Windows\System32\drvinst.exe - (.Microsoft Corporation - Module d’installation de pilotes.) [DisableExceptionChainValidation\\3] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\ie4uinit.exe - (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) [MitigationOptions\\256] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\ieUnatt.exe - (.Microsoft Corporation - Outil d’installation sans assistance d’IE 7.) [MitigationOptions\\256] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\mmc.exe - (.Microsoft Corporation - Microsoft Management Console.) [DisableExceptionChainValidation\\3] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\MRT.exe - (.Microsoft Corporation - Outil de suppression de logiciels malveilla.) [CFGOptions\\1] =>.Microsoft®
O50 - IFEO:C:\Windows\System32\msfeedssync.exe - (.Microsoft Corporation - Microsoft Feeds Synchronization.) [MitigationOptions\\256] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\mshta.exe - (.Microsoft Corporation - Hôte des applications HTML de Microsoft(R).) [MitigationOptions\\256] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\PresentationHost.exe - (.Microsoft Corporation - Windows Presentation Foundation Host.) [MitigationOptions\\1118481] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\PrintIsolationHost.exe - (.Microsoft Corporation - PrintIsolationHost.) [MitigationOptions\\2097152] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\rundll32.exe - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) [DisableExceptionChainValidation\\3] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\runtimebroker.exe - (.Microsoft Corporation - Runtime Broker.) [MitigationOptions\\4294967296] =>.Microsoft Windows®
O50 - IFEO:C:\Windows\System32\searchprotocolhost.exe - (.Microsoft Corporation - Microsoft Windows Search Protocol Host.) [DisableExceptionChainValidation\\3] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\spoolsv.exe - (.Microsoft Corporation - Application sous-système spouleur.) [DisableExceptionChainValidation\\3] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\spoolsv.exe - (.Microsoft Corporation - Application sous-système spouleur.) [MitigationOptions\\2097152] [Unsigned] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\svchost.exe - (.Microsoft Corporation - Processus hôte pour les services Windows.) [MinimumStackCommitInBytes\\32768] =>.Microsoft Windows Publisher®
O50 - IFEO:C:\Windows\System32\wscript.exe - (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) [DisableExceptionChainValidation\\3] [Unsigned] =>.Microsoft Corporation

---\\ LISTE DES PILOTES DU SYSTÈME (388) - 24s
O58 - SDL:2019/03/19 04:39:26 A . (.Microsoft Corporation - 1394 OpenHCI Driver.) -- C:\WINDOWS\System32\drivers\1394ohci.sys [190464] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:26 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\WINDOWS\System32\drivers\3ware.sys [85816] =>.Microsoft Windows®
O58 - SDL:2020/06/13 07:48:43 A . (.Microsoft Corporation - Pilote ACPI pour NT.) -- C:\WINDOWS\System32\drivers\acpi.sys [603960] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:26 A . (.Microsoft Corporation - ACPI Devices Driver.) -- C:\WINDOWS\System32\drivers\AcpiDev.sys [14336] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:36 A . (.Microsoft Corporation - ACPIEx Driver.) -- C:\WINDOWS\System32\drivers\acpiex.sys [96272] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:26 A . (.Microsoft Corporation - ACPI Processor Aggregator Device Driver.) -- C:\WINDOWS\System32\drivers\acpipagr.sys [9216] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:24 A . (.Microsoft Corporation - ACPI Power Metering Driver.) -- C:\WINDOWS\System32\drivers\acpipmi.sys [11264] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:26 A . (.Microsoft Corporation - ACPI Wake Alarm.) -- C:\WINDOWS\System32\drivers\acpitime.sys [9216] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:48:47 A . (.Microsoft Corporation - Audio KMDF Class Extension.) -- C:\WINDOWS\System32\drivers\Acx01000.sys [241664] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:26 A . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS.) -- C:\WINDOWS\System32\drivers\adp80xx.sys [1038352] =>.Microsoft Windows®
O58 - SDL:2020/09/10 22:26:28 A . (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) -- C:\WINDOWS\System32\drivers\afd.sys [513352] =>.Microsoft®
O58 - SDL:2020/08/12 17:22:41 A . (.Microsoft Corporation - AF_UNIX socket provider.) -- C:\WINDOWS\System32\drivers\afunix.sys [29696] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:49:46 A . (.Microsoft Corporation - Gestionnaire d'appels RAS Agile Vpn Minipor.) -- C:\WINDOWS\System32\drivers\agilevpn.sys [93696] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/10 22:26:37 A . (.Microsoft Corporation - Application Compatibility Cache.) -- C:\WINDOWS\System32\drivers\ahcache.sys [231936] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/10 22:26:12 A . (.Microsoft Corporation - Processor Device Driver.) -- C:\WINDOWS\System32\drivers\amdk8.sys [156992] =>.Microsoft®
O58 - SDL:2020/09/10 22:26:12 A . (.Microsoft Corporation - Processor Device Driver.) -- C:\WINDOWS\System32\drivers\amdppm.sys [160568] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:26 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\WINDOWS\System32\drivers\amdsata.sys [75280] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:26 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\WINDOWS\System32\drivers\amdsbs.sys [215560] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:26 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\WINDOWS\System32\drivers\amdxata.sys [23080] =>.Microsoft Windows®
O58 - SDL:2020/09/10 22:26:26 A . (.Microsoft Corporation - AppID Driver.) -- C:\WINDOWS\System32\drivers\appid.sys [165192] =>.Microsoft®
O58 - SDL:2020/09/10 22:26:26 A . (.Microsoft Corporation - Applocker Filter.) -- C:\WINDOWS\System32\drivers\applockerfltr.sys [13312] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:26 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\WINDOWS\System32\drivers\arcsas.sys [116752] =>.Microsoft Windows®
O58 - SDL:2004/08/13 09:56:20 A . (. - ATK0110 ACPI Utility.) -- C:\WINDOWS\System32\drivers\ASACPI.sys [5810] [Unsigned] =>.ASUSTeK
O58 - SDL:2019/03/19 04:40:48 A . (.Microsoft Corporation - MS Remote Access serial network driver.) -- C:\WINDOWS\System32\drivers\asyncmac.sys [20480] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:48:43 A . (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\WINDOWS\System32\drivers\atapi.sys [22840] =>.Microsoft®
O58 - SDL:2020/06/13 07:48:43 A . (.Microsoft Corporation - ATAPI Driver Extension.) -- C:\WINDOWS\System32\drivers\ataport.sys [156984] =>.Microsoft®
O58 - SDL:2019/03/19 04:40:21 A . (.Microsoft Corporation - BAM Kernel Driver.) -- C:\WINDOWS\System32\drivers\bam.sys [57144] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:26 A . (.Microsoft Corporation - Battery Class Driver.) -- C:\WINDOWS\System32\drivers\battc.sys [35128] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:20 A . (. - BCM Function 2 Device Driver.) -- C:\WINDOWS\System32\drivers\bcmfn2.sys [8192] [Unsigned] =>.Broadcom Corporation
O58 - SDL:2019/03/19 04:39:46 A . (.Microsoft Corporation - BEEP Driver.) -- C:\WINDOWS\System32\drivers\beep.sys [7168] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:49:19 A . (.Microsoft Corporation - Windows Bind Filter Driver.) -- C:\WINDOWS\System32\drivers\bindflt.sys [89912] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:40 A . (.Microsoft Corporation - NT Lan Manager Datagram Receiver Driver.) -- C:\WINDOWS\System32\drivers\bowser.sys [76800] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:59 A . (.Microsoft Corporation - MAC Bridge Driver.) -- C:\WINDOWS\System32\drivers\bridge.sys [96256] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/10 22:26:11 A . (.Microsoft Corporation - Microsoft Bluetooth Audio Multiprofile Mana.) -- C:\WINDOWS\System32\drivers\BtaMPM.sys [27648] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:48:42 A . (.Microsoft Corporation - Bluetooth A2DP Driver.) -- C:\WINDOWS\System32\drivers\BthA2dp.sys [165376] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:48:44 A . (.Microsoft Corporation - Extension de bus Bluetooth.) -- C:\WINDOWS\System32\drivers\bthenum.sys [92672] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:20 A . (.Microsoft Corporation - Bluetooth Hands-Free Audio and Call Control.) -- C:\WINDOWS\System32\drivers\BthHfEnum.sys [94720] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:48:44 A . (.Microsoft Corporation - Bluetooth Transport Extensibility Miniport.) -- C:\WINDOWS\System32\drivers\BthMini.SYS [25600] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:23 A . (.Microsoft Corporation - Bluetooth Communications Driver.) -- C:\WINDOWS\System32\drivers\bthmodem.sys [52736] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:48:44 A . (.Microsoft Corporation - Pilote de bus Bluetooth.) -- C:\WINDOWS\System32\drivers\bthport.sys [1091584] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:48:44 A . (.Microsoft Corporation - Pilote de Miniport Bluetooth.) -- C:\WINDOWS\System32\drivers\BTHUSB.SYS [71168] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - Button Converter Driver.) -- C:\WINDOWS\System32\drivers\buttonconverter.sys [29696] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:21 A . (.Microsoft Corporation - Charge Arbiration Driver.) -- C:\WINDOWS\System32\drivers\CAD.sys [53560] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:56 A . (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS\System32\drivers\cdfs.sys [74752] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:26 A . (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS\System32\drivers\cdrom.sys [125952] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:02 A . (.Microsoft Corporation - Event Aggregation Kernel Mode Library.) -- C:\WINDOWS\System32\drivers\CEA.sys [61752] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:21 A . (.Microsoft Corporation - Consumer IR Class Driver for eHome.) -- C:\WINDOWS\System32\drivers\circlass.sys [39424] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:49:32 A . (.Microsoft Corporation - SCSI Class System Dll.) -- C:\WINDOWS\System32\drivers\Classpnp.sys [353080] =>.Microsoft®
O58 - SDL:2020/06/13 07:49:28 A . (.Microsoft Corporation - Cloud Files Mini Filter Driver.) -- C:\WINDOWS\System32\drivers\cldflt.sys [351232] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/10 22:26:30 A . (.Microsoft Corporation - Common Log File System Driver.) -- C:\WINDOWS\System32\drivers\clfs.sys [277304] =>.Microsoft®
O58 - SDL:2020/06/13 07:49:00 A . (.Microsoft Corporation - CLIP Service.) -- C:\WINDOWS\System32\drivers\ClipSp.sys [824120] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:26 A . (.Microsoft Corporation - Control Method Battery Driver.) -- C:\WINDOWS\System32\drivers\CmBatt.sys [26624] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:36 A . (.Microsoft Corporation - Noyau Gestionnaire de configuration Configu.) -- C:\WINDOWS\System32\drivers\cmimcext.sys [25616] =>.Microsoft Windows®
O58 - SDL:2020/06/13 07:49:31 A . (.Microsoft Corporation - Kernel Cryptography, Next Generation.) -- C:\WINDOWS\System32\drivers\cng.sys [553656] =>.Microsoft®
O58 - SDL:2019/03/19 04:40:03 A . (.Microsoft Corporation - CNG Hardware Assist algorithm provider.) -- C:\WINDOWS\System32\drivers\cnghwassist.sys [32568] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:02 A . (.Microsoft Corporation - Console Driver.) -- C:\WINDOWS\System32\drivers\condrv.sys [44560] =>.Microsoft Windows®
O58 - SDL:2020/06/13 07:49:33 A . (.Microsoft Corporation - Crash Dump Driver.) -- C:\WINDOWS\System32\drivers\crashdmp.sys [80912] =>.Microsoft®
O58 - SDL:2019/03/19 04:40:21 A . (.Microsoft Corporation - DAM Kernel Driver.) -- C:\WINDOWS\System32\drivers\dam.sys [81208] =>.Microsoft Windows®
O58 - SDL:2020/06/13 07:48:42 A . (.Microsoft Corporation - Xbox Device Authentication Driver.) -- C:\WINDOWS\System32\drivers\devauthe.sys [36352] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:19 A . (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\WINDOWS\System32\drivers\dfsc.sys [114176] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:26 A . (.Microsoft Corporation - PnP Disk Driver.) -- C:\WINDOWS\System32\drivers\disk.sys [77624] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:29 A . (.Microsoft Corporation - Crash Dump Disk Driver.) -- C:\WINDOWS\System32\drivers\Diskdump.sys [31032] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:29 A . (.Microsoft Corporation - Boot Over USB Dump Driver.) -- C:\WINDOWS\System32\drivers\Dmpusbstor.sys [11264] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:30 A . (.Microsoft Corporation - Mémoire dynamique.) -- C:\WINDOWS\System32\drivers\dmvsc.sys [49464] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:23 A . (.Microsoft Corporation - Microsoft Trusted Audio Drivers.) -- C:\WINDOWS\System32\drivers\drmk.sys [70144] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:23 A . (.Microsoft Corporation - Microsoft Trusted Audio Drivers.) -- C:\WINDOWS\System32\drivers\drmkaud.sys [14696] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:14 A . (.Microsoft Corporation - ATAPI Dump Driver.) -- C:\WINDOWS\System32\drivers\Dumpata.sys [30736] =>.Microsoft Windows®
O58 - SDL:2020/06/13 07:50:29 A . (.Microsoft Corporation - Bitlocker Drive Encryption Crashdump Filter.) -- C:\WINDOWS\System32\drivers\dumpfve.sys [75696] =>.Microsoft®
O58 - SDL:2020/06/13 07:48:44 A . (.Microsoft Corporation - SD Crashdump Port Driver.) -- C:\WINDOWS\System32\drivers\dumpsd.sys [158736] =>.Microsoft®
O58 - SDL:2019/03/19 04:40:03 A . (.Microsoft Corporation - SD Host Controller Crashdump Port Driver.) -- C:\WINDOWS\System32\drivers\dumpsdport.sys [23040] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:29 A . (.Microsoft Corporation - Storport Dump Driver.) -- C:\WINDOWS\System32\drivers\Dumpstorport.sys [28680] =>.Microsoft Windows®
O58 - SDL:2020/09/10 22:26:18 A . (.Microsoft Corporation - DirectX Graphics Kernel.) -- C:\WINDOWS\System32\drivers\dxgkrnl.sys [2755384] =>.Microsoft®
O58 - SDL:2020/09/10 22:26:18 A . (.Microsoft Corporation - DirectX Graphics MMS.) -- C:\WINDOWS\System32\drivers\dxgmms1.sys [344376] =>.Microsoft®
O58 - SDL:2020/09/10 22:26:18 A . (.Microsoft Corporation - DirectX Graphics MMS.) -- C:\WINDOWS\System32\drivers\dxgmms2.sys [689472] =>.Microsoft®
O58 - SDL:2019/03/19 04:40:59 A . (.Microsoft Corporation - Enhanced Storage Class driver for IEEE 1667.) -- C:\WINDOWS\System32\drivers\EhStorClass.sys [69944] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:21 A . (.Microsoft Corporation - Microsoft driver for storage devices suppor.) -- C:\WINDOWS\System32\drivers\EhStorTcgDrv.sys [97808] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:26 A . (.Microsoft Corporation - Error Device Driver.) -- C:\WINDOWS\System32\drivers\errdev.sys [9728] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:48:46 A . (.Microsoft Corporation - Microsoft Extended FAT File System.) -- C:\WINDOWS\System32\drivers\exfat.sys [306176] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:48:46 A . (.Microsoft Corporation - Fast FAT File System Driver.) -- C:\WINDOWS\System32\drivers\fastfat.sys [320016] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:26 A . (.Microsoft Corporation - Floppy Disk Controller Driver.) -- C:\WINDOWS\System32\drivers\fdc.sys [26112] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:36 A . (.Microsoft Corporation - Windows sandboxing and encryption filter.) -- C:\WINDOWS\System32\drivers\filecrypt.sys [45568] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:14 A . (.Microsoft Corporation - FileInfo Filter Driver.) -- C:\WINDOWS\System32\drivers\fileinfo.sys [69944] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:14 A . (.Microsoft Corporation - File Trace Filter Driver.) -- C:\WINDOWS\System32\drivers\filetrace.sys [29184] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:48:43 A . (.Microsoft Corporation - Floppy Driver.) -- C:\WINDOWS\System32\drivers\flpydisk.sys [20992] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:49:32 A . (.Microsoft Corporation - Gestionnaire de filtres de système de fichi.) -- C:\WINDOWS\System32\drivers\fltMgr.sys [309048] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:36 A . (.Microsoft Corporation - File System Dependency Manager Mini Filter.) -- C:\WINDOWS\System32\drivers\fsdepends.sys [53048] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:17 A . (.Microsoft Corporation - File System Recognizer Driver.) -- C:\WINDOWS\System32\drivers\fs_rec.sys [28168] =>.Microsoft Windows®
O58 - SDL:2020/06/13 07:50:29 A . (.Microsoft Corporation - BitLocker Drive Encryption Driver.) -- C:\WINDOWS\System32\drivers\fvevol.sys [650552] =>.Microsoft®
O58 - SDL:2020/09/10 22:26:29 A . (.Microsoft Corporation - FWP/IPsec Kernel-Mode API.) -- C:\WINDOWS\System32\drivers\FWPKCLNT.SYS [331080] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:32 A . (.Microsoft Corporation - GPU Energy Kernel Driver.) -- C:\WINDOWS\System32\drivers\gpuenergydrv.sys [8192] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:48:42 A . (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\WINDOWS\System32\drivers\hdaudbus.sys [92160] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:48:42 A . (.Microsoft Corporation - High Definition Audio Function Driver.) -- C:\WINDOWS\System32\drivers\HdAudio.sys [357376] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:26 A . (.Microsoft Corporation - Hid Battery Driver.) -- C:\WINDOWS\System32\drivers\hidbatt.sys [30008] =>.Microsoft Windows®
O58 - SDL:2020/06/13 07:48:44 A . (.Microsoft Corporation - Pilote de miniport Bluetooth pour les périp.) -- C:\WINDOWS\System32\drivers\hidbth.sys [99840] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:48:44 A . (.Microsoft Corporation - Bibliothèque Hid Class.) -- C:\WINDOWS\System32\drivers\hidclass.sys [142336] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - I2C HID Miniport Driver.) -- C:\WINDOWS\System32\drivers\hidi2c.sys [39424] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - HID Button over Interrupt Driver.) -- C:\WINDOWS\System32\drivers\hidinterrupt.sys [40248] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:23 A . (.Microsoft Corporation - Infrared Miniport Driver for Input Devices.) -- C:\WINDOWS\System32\drivers\hidir.sys [38912] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:48:44 A . (.Microsoft Corporation - Hid Parsing Library.) -- C:\WINDOWS\System32\drivers\hidparse.sys [31232] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:48:44 A . (.Microsoft Corporation - SPI HID Miniport Driver.) -- C:\WINDOWS\System32\drivers\hidspi.sys [43520] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:48:44 A . (.Microsoft Corporation - USB Miniport Driver for Input Devices.) -- C:\WINDOWS\System32\drivers\hidusb.sys [31232] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:26 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\WINDOWS\System32\drivers\HpSAMD.sys [56848] =>.Microsoft Windows®
O58 - SDL:2020/06/13 07:49:31 A . (.Microsoft Corporation - HTTP Pile du protocole.) -- C:\WINDOWS\System32\drivers\http.sys [880952] =>.Microsoft®
O58 - SDL:2019/03/19 04:41:17 A . (.Microsoft Corporation - Microsoft Hyper-V Socket Provider.) -- C:\WINDOWS\System32\drivers\hvsocket.sys [105784] =>.Microsoft Windows®
O58 - SDL:2020/06/13 07:49:32 A . (.Microsoft Corporation - Hardware Policy Driver.) -- C:\WINDOWS\System32\drivers\hwpolicy.sys [31544] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:30 A . (.Microsoft Corporation - Microsoft VMBus Synthetic Keyboard Driver.) -- C:\WINDOWS\System32\drivers\hyperkbd.sys [21304] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:30 A . (.Microsoft Corporation - Microsoft VMBus Video Device Miniport Drive.) -- C:\WINDOWS\System32\drivers\HyperVideo.sys [33808] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - Pilote de port i8042.) -- C:\WINDOWS\System32\drivers\i8042prt.sys [99328] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:20 A . (.Intel(R) Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\iagpio.sys [28672] [Unsigned] =>.Intel(R) Corporation
O58 - SDL:2019/03/19 04:39:20 A . (.Intel(R) Corporation - Intel(R) Serial IO I2C Driver.) -- C:\WINDOWS\System32\drivers\iai2c.sys [73728] [Unsigned] =>.Intel(R) Corporation
O58 - SDL:2019/03/19 04:39:26 A . (.Intel Corporation - Intel(R) Atom(TM) Processor GPIO Controller.) -- C:\WINDOWS\System32\drivers\iaiogpio.sys [22016] [Unsigned] =>.Intel Corporation
O58 - SDL:2019/03/19 04:39:26 A . (.Intel Corporation - Intel(R) Atom(TM) Processor I2C Controller.) -- C:\WINDOWS\System32\drivers\iaioi2c.sys [57856] [Unsigned] =>.Intel Corporation
O58 - SDL:2019/03/19 04:39:27 A . (.Intel Corporation - Intel(R) Rapid Storage Technology driver (i.) -- C:\WINDOWS\System32\drivers\iaStorAVC.sys [693048] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:27 A . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\WINDOWS\System32\drivers\iaStorV.sys [333624] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:02 A . (.Microsoft Corporation - Indirect displays kernel-mode filter driver.) -- C:\WINDOWS\System32\drivers\IndirectKmd.sys [32768] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:48:43 A . (.Microsoft Corporation - Intel PCI IDE Driver.) -- C:\WINDOWS\System32\drivers\intelide.sys [17208] =>.Microsoft®
O58 - SDL:2020/06/13 07:48:43 A . (.Microsoft Corporation - Intel Power Engine Plugin.) -- C:\WINDOWS\System32\drivers\intelpep.sys [319976] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:20 A . (.Microsoft Corporation - Intel Power Limit Driver.) -- C:\WINDOWS\System32\drivers\intelpmax.sys [19456] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/10 22:26:12 A . (.Microsoft Corporation - Processor Device Driver.) -- C:\WINDOWS\System32\drivers\intelppm.sys [173896] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:30 A . (.Microsoft Corporation - Filtre de contrôle de taux d’E/S.) -- C:\WINDOWS\System32\drivers\iorate.sys [45064] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:48 A . (.Microsoft Corporation - IP FILTER DRIVER.) -- C:\WINDOWS\System32\drivers\ipfltdrv.sys [63488] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:27 A . (.Microsoft Corporation - PILOT IPMI WMI.) -- C:\WINDOWS\System32\drivers\IPMIDrv.sys [90936] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:02 A . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\drivers\ipnat.sys [187392] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:34 A . (.Microsoft Corporation - IPT Driver.) -- C:\WINDOWS\System32\drivers\ipt.sys [39944] =>.Microsoft Windows®
O58 - SDL:2020/06/13 07:48:43 A . (.Microsoft Corporation - Pilote de bus PNP ISA.) -- C:\WINDOWS\System32\drivers\isapnp.sys [47928] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:26 A . (.Avago Technologies - Avago SAS Gen3.5 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\ItSas35i.sys [121144] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - Pilote de la classe Clavier.) -- C:\WINDOWS\System32\drivers\kbdclass.sys [51000] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - Pilote de filtre clavier HID.) -- C:\WINDOWS\System32\drivers\kbdhid.sys [33280] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:30 A . (.Microsoft Corporation - Microsoft Kernel Debugger Network Miniport.) -- C:\WINDOWS\System32\drivers\kdnic.sys [26424] =>.Microsoft Windows®
O58 - SDL:2020/09/10 22:26:15 A . (.Microsoft Corporation - Network Power Dependency Broker.) -- C:\WINDOWS\System32\drivers\KNetPwrDepBroker.sys [23040] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:49:41 A . (.Microsoft Corporation - Kernel CSA Library.) -- C:\WINDOWS\System32\drivers\ks.sys [314368] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/10 22:26:28 A . (.Microsoft Corporation - Kernel Security Support Provider Interface.) -- C:\WINDOWS\System32\drivers\ksecdd.sys [109376] =>.Microsoft®
O58 - SDL:2020/09/10 22:26:27 A . (.Microsoft Corporation - Kernel Security Support Provider Interface.) -- C:\WINDOWS\System32\drivers\ksecpkg.sys [142664] =>.Microsoft®
O58 - SDL:2019/03/19 04:40:32 A . (.Microsoft Corporation - Link-Layer Topology Mapper I/O Driver.) -- C:\WINDOWS\System32\drivers\lltdio.sys [49664] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:26 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas.sys [94008] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:26 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas2i.sys [103224] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:26 A . (.Avago Technologies - Avago SAS Gen3 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas3i.sys [106296] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:26 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sss.sys [69432] =>.Microsoft Windows®
O58 - SDL:2020/06/13 07:49:41 A . (.Microsoft Corporation - Pilote de filtre de virtualisation de fichi.) -- C:\WINDOWS\System32\drivers\luafv.sys [103424] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:27 A . (.Microsoft Corporation - MA-USB Host Controller Driver.) -- C:\WINDOWS\System32\drivers\mausbhost.sys [425784] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:27 A . (.Microsoft Corporation - MA-USB IP Driver.) -- C:\WINDOWS\System32\drivers\mausbip.sys [46392] =>.Microsoft Windows®
O58 - SDL:2020/06/13 07:48:46 A . (.Microsoft Corporation - Windows Mobile Broadband Class Extension.) -- C:\WINDOWS\System32\drivers\MbbCx.sys [274432] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:46 A . (.Microsoft Corporation - Medium changer class driver.) -- C:\WINDOWS\System32\drivers\mcd.sys [17408] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:26 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\megasas.sys [52024] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:26 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\MegaSas2i.sys [64312] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:26 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\megasas35i.sys [79160] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:26 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\WINDOWS\System32\drivers\megasr.sys [464696] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:20 A . (.Microsoft Corporation - Pilote de transport Microsoft Bluetooth Avr.) -- C:\WINDOWS\System32\drivers\Microsoft.Bluetooth.AvrcpTransport.sys [46080] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - Legacy Bluetooth LE Bus Enumerator.) -- C:\WINDOWS\System32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys [73216] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:34 A . (.Microsoft Corporation - MMCSS Driver.) -- C:\WINDOWS\System32\drivers\mmcss.sys [37888] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:41:15 A . (.Microsoft Corporation - Pilote de périphérique modem.) -- C:\WINDOWS\System32\drivers\modem.sys [32256] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:48:43 A . (.Microsoft Corporation - Monitor Driver.) -- C:\WINDOWS\System32\drivers\monitor.sys [53760] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - Pilote de la classe Souris.) -- C:\WINDOWS\System32\drivers\mouclass.sys [48440] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - Pilote de filtre souris HID.) -- C:\WINDOWS\System32\drivers\mouhid.sys [24576] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:49:32 A . (.Microsoft Corporation - Gestionnaire des points de montage.) -- C:\WINDOWS\System32\drivers\mountmgr.sys [86056] =>.Microsoft®
O58 - SDL:2019/03/19 04:40:00 A . (.Microsoft Corporation - Microsoft Protection Service Driver.) -- C:\WINDOWS\System32\drivers\mpsdrv.sys [56832] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:50:04 A . (.Microsoft Corporation - Windows NT WebDav Minirdr.) -- C:\WINDOWS\System32\drivers\mrxdav.sys [122880] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/10 22:26:30 A . (.Microsoft Corporation - Minirdr SMB Windows NT.) -- C:\WINDOWS\System32\drivers\mrxsmb.sys [462648] =>.Microsoft®
O58 - SDL:2020/09/10 22:26:30 A . (.Microsoft Corporation - Longhorn SMB 2.0 Redirector.) -- C:\WINDOWS\System32\drivers\mrxsmb20.sys [205624] =>.Microsoft®
O58 - SDL:2020/06/13 07:49:32 A . (.Microsoft Corporation - Mailslot driver.) -- C:\WINDOWS\System32\drivers\msfs.sys [33592] =>.Microsoft®
O58 - SDL:2020/06/13 07:49:01 A . (.Microsoft Corporation - GPIO Class Extension Driver.) -- C:\WINDOWS\System32\drivers\msgpioclx.sys [139576] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:30 A . (.Microsoft Corporation - GPIO Button Driver.) -- C:\WINDOWS\System32\drivers\msgpiowin32.sys [40248] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:03 A . (.Microsoft Corporation - Pass-through HID to KMDF Filter Driver.) -- C:\WINDOWS\System32\drivers\mshidkmdf.sys [6144] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:48 A . (.Microsoft Corporation - Pilote direct pour interface HID-UMDF.) -- C:\WINDOWS\System32\drivers\mshidumdf.sys [9216] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:02 A . (.Microsoft Corporation - Hardware Notification Class Extension Drive.) -- C:\WINDOWS\System32\drivers\mshwnclx.sys [19968] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:48:43 A . (.Microsoft Corporation - ISA Driver.) -- C:\WINDOWS\System32\drivers\msisadrv.sys [16696] =>.Microsoft®
O58 - SDL:2020/06/13 07:48:43 A . (.Microsoft Corporation - Microsoft iSCSI Initiator Driver.) -- C:\WINDOWS\System32\drivers\msiscsi.sys [239928] =>.Microsoft®
O58 - SDL:2020/06/13 07:49:41 A . (.Microsoft Corporation - MS KS Server.) -- C:\WINDOWS\System32\drivers\mskssrv.sys [25600] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:45 A . (.Microsoft Corporation - Pilote de protocole LLDP (Link Layer Discov.) -- C:\WINDOWS\System32\drivers\mslldp.sys [60928] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:35 A . (.Microsoft Corporation - MS Proxy Clock.) -- C:\WINDOWS\System32\drivers\mspclock.sys [8192] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:35 A . (.Microsoft Corporation - MS Proxy Quality Manager.) -- C:\WINDOWS\System32\drivers\mspqm.sys [8192] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/10 22:26:28 A . (.Microsoft Corporation - Kernel Remote Procedure Call Provider.) -- C:\WINDOWS\System32\drivers\msrpc.sys [193344] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:27 A . (.Microsoft Corporation - System Management BIOS Driver.) -- C:\WINDOWS\System32\drivers\mssmbios.sys [35128] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:35 A . (.Microsoft Corporation - WDM Tee/Communication Transform Filter.) -- C:\WINDOWS\System32\drivers\mstee.sys [9216] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:26 A . (.Microsoft Corporation - Pilote HID multipoint Microsoft.) -- C:\WINDOWS\System32\drivers\MTConfig.sys [11776] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/10 22:26:30 A . (.Microsoft Corporation - Pilote de fournisseur UNC multiples.) -- C:\WINDOWS\System32\drivers\mup.sys [105784] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:26 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\WINDOWS\System32\drivers\mvumis.sys [58376] =>.Microsoft Windows®
O58 - SDL:2020/09/10 22:26:28 A . (.Microsoft Corporation - NDIS (Network Driver Interface Specificatio.) -- C:\WINDOWS\System32\drivers\ndis.sys [1069384] =>.Microsoft®
O58 - SDL:2020/09/10 22:26:49 A . (.Microsoft Corporation - Microsoft NDIS Packet Capture Filter Driver.) -- C:\WINDOWS\System32\drivers\ndiscap.sys [35328] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:49:44 A . (.Microsoft Corporation - Microsoft Network Adapter Multiplexor.) -- C:\WINDOWS\System32\drivers\NdisImPlatform.sys [109568] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/10 22:26:40 A . (.Microsoft Corporation - NDIS 3.0 connection wrapper driver.) -- C:\WINDOWS\System32\drivers\ndistapi.sys [20992] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:17 A . (.Microsoft Corporation - Pilote d’E/S du mode utilisateur NDIS.) -- C:\WINDOWS\System32\drivers\ndisuio.sys [50688] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:45 A . (.Microsoft Corporation - Énumérateur de cartes réseau virtuelles Mic.) -- C:\WINDOWS\System32\drivers\NdisVirtualBus.sys [15872] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:49:46 A . (.Microsoft Corporation - MS PPP Framing Driver (Strong Encryption).) -- C:\WINDOWS\System32\drivers\ndiswan.sys [166912] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/10 22:26:40 A . (.Microsoft Corporation - NDIS Proxy.) -- C:\WINDOWS\System32\drivers\ndproxy.sys [207872] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:53 A . (.Microsoft Corporation - Windows Network Data Usage Monitoring Drive.) -- C:\WINDOWS\System32\drivers\Ndu.sys [105984] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:17 A . (.Microsoft Corporation - Network Adapter Class Extension for WDF.) -- C:\WINDOWS\System32\drivers\NetAdapterCx.sys [130560] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:43 A . (.Microsoft Corporation - NetBIOS interface driver.) -- C:\WINDOWS\System32\drivers\netbios.sys [47928] =>.Microsoft Windows®
O58 - SDL:2020/06/13 07:49:44 A . (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS\System32\drivers\netbt.sys [247808] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:49:33 A . (.Microsoft Corporation - Network I/O Subsystem.) -- C:\WINDOWS\System32\drivers\netio.sys [398864] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:30 A . (.Microsoft Corporation - Miniport NDIS virtuel.) -- C:\WINDOWS\System32\drivers\netvsc.sys [166712] =>.Microsoft Windows®
O58 - SDL:2020/06/13 07:49:32 A . (.Microsoft Corporation - NPFS Driver.) -- C:\WINDOWS\System32\drivers\npfs.sys [66872] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:30 A . (.Microsoft Corporation - Named pipe service triggers.) -- C:\WINDOWS\System32\drivers\npsvctrig.sys [19968] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:49:33 A . (.Microsoft Corporation - NSI Proxy.) -- C:\WINDOWS\System32\drivers\nsiproxy.sys [29696] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/10 22:26:28 A . (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\WINDOWS\System32\drivers\ntfs.sys [2202936] =>.Microsoft®
O58 - SDL:2019/03/19 04:40:36 A . (.Microsoft Corporation - NTOS extension host driver.) -- C:\WINDOWS\System32\drivers\ntosext.sys [17448] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:17 A . (.Microsoft Corporation - NULL Driver.) -- C:\WINDOWS\System32\drivers\null.sys [5120] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2017/11/09 04:46:12 A . (.NVIDIA Corporation - NVIDIA HDMI Audio Driver.) -- C:\WINDOWS\System32\drivers\nvhda32v.sys [192432] =>.NVIDIA Corporation®
O58 - SDL:2019/03/19 04:39:26 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\WINDOWS\System32\drivers\nvraid.sys [119312] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:26 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\WINDOWS\System32\drivers\nvstor.sys [142352] =>.Microsoft Windows®
O58 - SDL:2020/06/13 07:48:50 A . (.Microsoft Corporation - Pilote de miniport WiFi natif.) -- C:\WINDOWS\System32\drivers\nwifi.sys [498688] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:02 A . (.Microsoft Corporation - Planificateur de paquets QoS.) -- C:\WINDOWS\System32\drivers\pacer.sys [133136] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:27 A . (.Microsoft Corporation - Pilote de port parallèle.) -- C:\WINDOWS\System32\drivers\parport.sys [82944] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:49:33 A . (.Microsoft Corporation - Partition driver.) -- C:\WINDOWS\System32\drivers\partmgr.sys [136504] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:27 A . (.Microsoft Corporation - Pilote parallèle VDM.) -- C:\WINDOWS\System32\drivers\parvdm.sys [9216] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:48:43 A . (.Microsoft Corporation - Énumérateur Plug-and-Play PCI pour NT.) -- C:\WINDOWS\System32\drivers\pci.sys [325136] =>.Microsoft®
O58 - SDL:2020/06/13 07:48:43 A . (.Microsoft Corporation - Generic PCI IDE Bus Driver.) -- C:\WINDOWS\System32\drivers\pciide.sys [14648] =>.Microsoft®
O58 - SDL:2020/06/13 07:48:43 A . (.Microsoft Corporation - PCI IDE Bus Driver Extension.) -- C:\WINDOWS\System32\drivers\pciidex.sys [41784] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:21 A . (.Microsoft Corporation - Pilote de bus PCMCIA.) -- C:\WINDOWS\System32\drivers\pcmcia.sys [98320] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:16 A . (.Microsoft Corporation - Performance Counters for Windows Driver.) -- C:\WINDOWS\System32\drivers\pcw.sys [43536] =>.Microsoft Windows®
O58 - SDL:2020/06/13 07:48:47 A . (.Microsoft Corporation - Power Dependency Coordinator Driver.) -- C:\WINDOWS\System32\drivers\pdc.sys [142648] =>.Microsoft®
O58 - SDL:2020/06/13 07:48:49 A . (.Microsoft Corporation - Protected Environment Authentication and Au.) -- C:\WINDOWS\System32\drivers\PEAuth.sys [693248] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:26 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas2i.sys [51512] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:26 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas3i.sys [59192] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:41:11 A . (.Microsoft Corporation - Pilote du moniteur de paquets.) -- C:\WINDOWS\System32\drivers\PktMon.sys [79888] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:24 A . (.Microsoft Corporation - Pilote mémoire Plug and Play.) -- C:\WINDOWS\System32\drivers\pnpmem.sys [13312] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:03 A . (.Microsoft Corporation - Port Device Class Configuration Filter Driv.) -- C:\WINDOWS\System32\drivers\portcfg.sys [18944] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:23 A . (.Microsoft Corporation - Port Class (Class Driver for Port/Miniport.) -- C:\WINDOWS\System32\drivers\portcls.sys [279552] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/10 22:26:12 A . (.Microsoft Corporation - Processor Device Driver.) -- C:\WINDOWS\System32\drivers\processr.sys [167240] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:59 A . (.Microsoft Corporation - Process Launch Monitor driver.) -- C:\WINDOWS\System32\drivers\ProcLaunchMon.sys [26888] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:45 A . (.Microsoft Corporation - Pilote du support de Microsoft Quality Wind.) -- C:\WINDOWS\System32\drivers\qwavedrv.sys [32768] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:36 A . (.Microsoft Corporation - RAM Disk Driver.) -- C:\WINDOWS\System32\drivers\ramdisk.sys [33592] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:48 A . (.Microsoft Corporation - RAS Automatic Connection Driver.) -- C:\WINDOWS\System32\drivers\rasacd.sys [12288] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:48 A . (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\rasl2tp.sys [79872] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:48 A . (.Microsoft Corporation - RAS PPPoE mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\raspppoe.sys [67584] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:48 A . (.Microsoft Corporation - Peer-to-Peer Tunneling Protocol.) -- C:\WINDOWS\System32\drivers\raspptp.sys [73728] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:48 A . (.Microsoft Corporation - RAS SSTP Miniport Call Manager.) -- C:\WINDOWS\System32\drivers\rassstp.sys [65536] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/10 22:26:30 A . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) -- C:\WINDOWS\System32\drivers\rdbss.sys [361784] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:30 A . (.Microsoft Corporation - Microsoft RDP Bus Device driver.) -- C:\WINDOWS\System32\drivers\rdpbus.sys [21504] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:50:01 A . (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RD.) -- C:\WINDOWS\System32\drivers\rdpdr.sys [131072] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:50:00 A . (.Microsoft Corporation - Microsoft RDP Video Miniport driver.) -- C:\WINDOWS\System32\drivers\rdpvideominiport.sys [23864] =>.Microsoft®
O58 - SDL:2019/03/19 04:41:18 A . (.Microsoft Corporation - ReadyBoost Driver.) -- C:\WINDOWS\System32\drivers\rdyboost.sys [218936] =>.Microsoft Windows®
O58 - SDL:2016/07/16 10:25:07 A . (.Microsoft Corporation - Registry Containment Driver.) -- C:\WINDOWS\System32\drivers\registry.sys [58368] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - Bluetooth RFCOMM Driver.) -- C:\WINDOWS\System32\drivers\rfcomm.sys [160256] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:30 A . (.Microsoft Corporation - Transport d’ordinateur virtuel Microsoft Re.) -- C:\WINDOWS\System32\drivers\RfxVmt.sys [31744] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:24 A . (.Microsoft Corporation - ResourceHub Proxy Driver.) -- C:\WINDOWS\System32\drivers\rhproxy.sys [76800] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:41:02 A . (.Microsoft Corporation - Reliable Multicast Transport.) -- C:\WINDOWS\System32\drivers\rmcast.sys [122368] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:48 A . (.Microsoft Corporation - Remote NDIS Miniport.) -- C:\WINDOWS\System32\drivers\RNDISMP.sys [25600] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:41:15 A . (.Microsoft Corporation - Legacy Non-Pnp Modem Device Driver.) -- C:\WINDOWS\System32\drivers\rootmdm.sys [8704] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:33 A . (.Microsoft Corporation - Link-Layer Topology Responder Driver for ND.) -- C:\WINDOWS\System32\drivers\rspndr.sys [64000] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:34 RA . (.Realtek - Realtek PCIe GBE Family Controller Flight.) -- C:\WINDOWS\System32\drivers\rteth.sys [45568] [Unsigned] =>.Realtek
O58 - SDL:2019/03/19 04:39:26 A . (.Microsoft Corporation - SBP-2 Protocol Driver.) -- C:\WINDOWS\System32\drivers\sbp2port.sys [88072] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:53 A . (.Microsoft Corporation - Pilote de filtre de lecteur de carte à puce.) -- C:\WINDOWS\System32\drivers\scfilter.sys [35840] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:46 A . (.Microsoft Corporation - SCSI Port Driver.) -- C:\WINDOWS\System32\drivers\scsiport.sys [144696] =>.Microsoft Windows®
O58 - SDL:2020/06/13 07:48:44 A . (.Microsoft Corporation - Pilote du bus numérique sécurisé (SD).) -- C:\WINDOWS\System32\drivers\sdbus.sys [235320] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:36 A . (.Microsoft Corporation - SD Host Controller Port Driver.) -- C:\WINDOWS\System32\drivers\sdport.sys [78136] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - Pilote de classe de stockage SD.) -- C:\WINDOWS\System32\drivers\sdstor.sys [76088] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:03 A . (.Microsoft Corporation - Serial Class Extension.) -- C:\WINDOWS\System32\drivers\SerCx.sys [65336] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:03 A . (.Microsoft Corporation - Serial Class Extension V2.) -- C:\WINDOWS\System32\drivers\SerCx2.sys [129336] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:27 A . (.Microsoft Corporation - Serial Port Enumerator.) -- C:\WINDOWS\System32\drivers\serenum.sys [17920] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:27 A . (.Microsoft Corporation - Pilote de périphérique série.) -- C:\WINDOWS\System32\drivers\serial.sys [76800] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\WINDOWS\System32\drivers\sermouse.sys [20992] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:48:43 A . (.Microsoft Corporation - SCSI Floppy Driver.) -- C:\WINDOWS\System32\drivers\sfloppy.sys [13312] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:26 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid2.sys [41488] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:26 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid4.sys [79368] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:17 A . (.Microsoft Corporation - Sleep Study Helper.) -- C:\WINDOWS\System32\drivers\SleepStudyHelper.sys [30008] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:53 A . (.Microsoft Corporation - Smart Card Driver Library.) -- C:\WINDOWS\System32\drivers\smclib.sys [17920] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/07/20 08:04:21 A . (.Microsoft Corporation - Storage Spaces Dump Driver.) -- C:\WINDOWS\System32\drivers\spacedump.sys [162104] =>.Microsoft®
O58 - SDL:2020/07/20 08:04:21 A . (.Microsoft Corporation - Storage Spaces Driver.) -- C:\WINDOWS\System32\drivers\spaceport.sys [504632] =>.Microsoft®
O58 - SDL:2019/03/19 04:40:03 A . (.Microsoft Corporation - SPB Class Extension.) -- C:\WINDOWS\System32\drivers\SpbCx.sys [64312] =>.Microsoft Windows®
O58 - SDL:2020/06/13 07:49:34 A . (.Microsoft Corporation - Pilote de serveur SMB 2.0.) -- C:\WINDOWS\System32\drivers\srv2.sys [660480] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:49:34 A . (.Microsoft Corporation - Server Network driver.) -- C:\WINDOWS\System32\drivers\srvnet.sys [224768] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:26 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\WINDOWS\System32\drivers\stexstor.sys [27152] =>.Microsoft Windows®
O58 - SDL:2020/06/13 07:48:43 A . (.Microsoft Corporation - MS AHCI Storport Miniport Driver.) -- C:\WINDOWS\System32\drivers\storahci.sys [144400] =>.Microsoft®
O58 - SDL:2020/09/10 22:26:12 A . (.Microsoft Corporation - Microsoft NVM Express Storport Miniport Dri.) -- C:\WINDOWS\System32\drivers\stornvme.sys [105272] =>.Microsoft®
O58 - SDL:2020/06/13 07:48:47 A . (.Microsoft Corporation - Microsoft Storage Port Driver.) -- C:\WINDOWS\System32\drivers\storport.sys [537920] =>.Microsoft®
O58 - SDL:2019/03/19 04:40:03 A . (.Microsoft Corporation - Filtre de qualité de service de stockage.) -- C:\WINDOWS\System32\drivers\storqosflt.sys [73744] =>.Microsoft Windows®
O58 - SDL:2020/09/10 22:26:12 A . (.Microsoft Corporation - MS UFS Storport Miniport Driver.) -- C:\WINDOWS\System32\drivers\storufs.sys [47432] =>.Microsoft®
O58 - SDL:2020/06/13 07:48:44 A . (.Microsoft Corporation - Storage VSC Driver.) -- C:\WINDOWS\System32\drivers\storvsc.sys [29712] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:46 A . (.Microsoft Corporation - WDM CODEC Class Device Driver 2.0.) -- C:\WINDOWS\System32\drivers\stream.sys [54784] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:30 A . (.Microsoft Corporation - VSC vidéo Synth3D RemoteFX Microsoft.) -- C:\WINDOWS\System32\drivers\Synth3dVsc.sys [50688] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:46 A . (.Microsoft Corporation - SCSI Tape Class Driver.) -- C:\WINDOWS\System32\drivers\tape.sys [23552] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:48:49 A . (.Microsoft Corporation - Export driver for kernel mode TPM API.) -- C:\WINDOWS\System32\drivers\tbs.sys [23864] =>.Microsoft®
O58 - SDL:2020/09/10 22:26:29 A . (.Microsoft Corporation - Pilote TCP/IP.) -- C:\WINDOWS\System32\drivers\tcpip.sys [2235192] =>.Microsoft®
O58 - SDL:2019/03/19 04:40:43 A . (.Microsoft Corporation - TCP/IP Registry Compatibility Driver.) -- C:\WINDOWS\System32\drivers\tcpipreg.sys [41984] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:17 A . (.Microsoft Corporation - TDI Wrapper.) -- C:\WINDOWS\System32\drivers\tdi.sys [32784] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:53 A . (.Microsoft Corporation - TDI Translation Driver.) -- C:\WINDOWS\System32\drivers\tdx.sys [95544] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:30 A . (.Microsoft Corporation - Terminal Server Input Driver.) -- C:\WINDOWS\System32\drivers\terminpt.sys [33832] =>.Microsoft Windows®
O58 - SDL:2020/06/13 07:49:33 A . (.Microsoft Corporation - Kernel Transaction Manager Driver.) -- C:\WINDOWS\System32\drivers\tm.sys [100152] =>.Microsoft®
O58 - SDL:2020/09/10 22:26:12 A . (.Microsoft Corporation - Pilote de périphérique TPM.) -- C:\WINDOWS\System32\drivers\tpm.sys [192312] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:36 A . (.Microsoft Corporation - Pilote de filtre pour concentrateur USB du.) -- C:\WINDOWS\System32\drivers\TsUsbFlt.sys [50688] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:48:43 A . (.Microsoft Corporation - Remote Desktop Generic USB Driver.) -- C:\WINDOWS\System32\drivers\TsUsbGD.sys [27136] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:49:44 A . (.Microsoft Corporation - Pilote d’interface de tunnel Microsoft.) -- C:\WINDOWS\System32\drivers\tunnel.sys [100864] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:48:44 A . (.Microsoft Corporation - Microsoft Uasp Driver.) -- C:\WINDOWS\System32\drivers\uaspstor.sys [57656] =>.Microsoft®
O58 - SDL:2019/03/19 04:40:03 A . (.Microsoft Corporation - USB Connector Manager KMDF Class Extension.) -- C:\WINDOWS\System32\drivers\UcmCx.sys [112128] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:03 A . (.Microsoft Corporation - UCM-TCPCI KMDF Class Extension.) -- C:\WINDOWS\System32\drivers\UcmTcpciCx.sys [129024] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - UCM-UCSI ACPI Client Driver.) -- C:\WINDOWS\System32\drivers\UcmUcsiAcpiClient.sys [23552] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:03 A . (.Microsoft Corporation - UCM-UCSI KMDF Class Extension.) -- C:\WINDOWS\System32\drivers\UcmUcsiCx.sys [78848] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:36 A . (.Microsoft Corporation - USB Controller Extension.) -- C:\WINDOWS\System32\drivers\Ucx01000.sys [196408] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:36 A . (.Microsoft Corporation - "udecx.DRIVER".) -- C:\WINDOWS\System32\drivers\Udecx.sys [35328] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:41:15 A . (.Microsoft Corporation - UDF File System Driver.) -- C:\WINDOWS\System32\drivers\udfs.sys [262144] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:03 A . (.Microsoft Corporation - USB Function Driver Class Extension.) -- C:\WINDOWS\System32\drivers\ufx01000.sys [239928] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - UFX Synopsys Client Driver.) -- C:\WINDOWS\System32\drivers\ufxsynopsys.sys [140600] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - Generic pass-through driver.) -- C:\WINDOWS\System32\drivers\umpass.sys [9216] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:03 A . (.Microsoft Corporation - USB Role-Switch Class Extension.) -- C:\WINDOWS\System32\drivers\urscx01000.sys [54072] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:48 A . (.Microsoft Corporation - Remote NDIS USB Driver.) -- C:\WINDOWS\System32\drivers\usb8023.sys [15872] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/08/12 17:22:04 A . (.Microsoft Corporation - USB Audio Class Driver.) -- C:\WINDOWS\System32\drivers\USBAUDIO.sys [134144] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:48:42 A . (.Microsoft Corporation - Microsoft USB Audio Class 2.0 Driver.) -- C:\WINDOWS\System32\drivers\usbaudio2.sys [177152] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:36 A . (.Microsoft Corporation - Universal Serial Bus Camera Driver.) -- C:\WINDOWS\System32\drivers\USBCAMD.sys [27136] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:36 A . (.Microsoft Corporation - Universal Serial Bus Camera Driver.) -- C:\WINDOWS\System32\drivers\USBCAMD2.sys [27136] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:48:44 A . (.Microsoft Corporation - USB Common Class Generic Parent Driver.) -- C:\WINDOWS\System32\drivers\usbccgp.sys [133432] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:23 A . (.Microsoft Corporation - USB Consumer IR Driver for eHome.) -- C:\WINDOWS\System32\drivers\usbcir.sys [89088] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - Universal Serial Bus Driver.) -- C:\WINDOWS\System32\drivers\usbd.sys [25400] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - EHCI eUSB Miniport Driver.) -- C:\WINDOWS\System32\drivers\usbehci.sys [73016] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - Pilote de concentrateur USB par défaut.) -- C:\WINDOWS\System32\drivers\usbhub.sys [384824] =>.Microsoft Windows®
O58 - SDL:2020/06/13 07:48:44 A . (.Microsoft Corporation - Pilote de concentrateur USB3.) -- C:\WINDOWS\System32\drivers\USBHUB3.SYS [496440] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - OHCI USB Miniport Driver.) -- C:\WINDOWS\System32\drivers\usbohci.sys [21504] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:49:19 A . (...) -- C:\WINDOWS\System32\drivers\UsbPmApi.sys [33792] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - Pilote de port USB 1.1 & 2.0.) -- C:\WINDOWS\System32\drivers\usbport.sys [381240] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:24 A . (.Microsoft Corporation - USB Printer driver.) -- C:\WINDOWS\System32\drivers\usbprint.sys [23040] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:48:43 A . (.Microsoft Corporation - USB Scanner Driver.) -- C:\WINDOWS\System32\drivers\usbscan.sys [38912] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:27 A . (.Microsoft Corporation - USB Serial Driver.) -- C:\WINDOWS\System32\drivers\usbser.sys [58880] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - Pilote de classe de stockage de masse USB.) -- C:\WINDOWS\System32\drivers\USBSTOR.SYS [105784] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - UHCI USB Miniport Driver.) -- C:\WINDOWS\System32\drivers\usbuhci.sys [24576] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:48:44 A . (.Microsoft Corporation - Pilote XHCI USB.) -- C:\WINDOWS\System32\drivers\USBXHCI.SYS [425272] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:27 A . (.Microsoft Corporation - Virtual Drive Root Enumerator.) -- C:\WINDOWS\System32\drivers\vdrvroot.sys [55608] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:17 A . (.Microsoft Corporation - Extension du vérificateur de pilotes.) -- C:\WINDOWS\System32\drivers\VerifierExt.sys [235024] =>.Microsoft Windows®
O58 - SDL:2020/06/13 07:48:44 A . (.Microsoft Corporation - VHD Miniport Driver.) -- C:\WINDOWS\System32\drivers\vhdmp.sys [564536] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:26 A . (.Microsoft Corporation - Virtual HID Framework (VHF) Driver.) -- C:\WINDOWS\System32\drivers\vhf.sys [28672] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/10 22:26:12 A . (.Microsoft Corporation - Processor Device Driver.) -- C:\WINDOWS\System32\drivers\viac7.sys [145920] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:19 A . (.Microsoft Corporation - Video Port Driver.) -- C:\WINDOWS\System32\drivers\videoprt.sys [35840] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:50:04 A . (.Microsoft Corporation - Hyper-V VMBus KMCL.) -- C:\WINDOWS\System32\drivers\vmbkmcl.sys [71992] =>.Microsoft®
O58 - SDL:2020/06/13 07:48:44 A . (.Microsoft Corporation - Pilote enfant de bus VMBus sous Microsoft H.) -- C:\WINDOWS\System32\drivers\vmbus.sys [109072] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:30 A . (.Microsoft Corporation - Microsoft VMBus HID Miniport.) -- C:\WINDOWS\System32\drivers\VMBusHID.sys [28472] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:30 A . (.Microsoft Corporation - Virtual Machine Generation Counter.) -- C:\WINDOWS\System32\drivers\vmgencounter.sys [18744] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:30 A . (.Microsoft Corporation - Virtual Machine Guest Infrastructure Driver.) -- C:\WINDOWS\System32\drivers\vmgid.sys [17208] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:30 A . (.Microsoft Corporation - Microsoft S3 Emulated Device Cap Driver.) -- C:\WINDOWS\System32\drivers\vms3cap.sys [15160] =>.Microsoft Windows®
O58 - SDL:2020/06/13 07:48:44 A . (.Microsoft Corporation - Pilote de filtre de stockage virtuel.) -- C:\WINDOWS\System32\drivers\vmstorfl.sys [42808] =>.Microsoft®
O58 - SDL:2020/06/13 07:48:43 A . (.Microsoft Corporation - Pilote du gestionnaire de volumes.) -- C:\WINDOWS\System32\drivers\volmgr.sys [66872] =>.Microsoft®
O58 - SDL:2019/03/19 04:40:56 A . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volum.) -- C:\WINDOWS\System32\drivers\volmgrx.sys [308752] =>.Microsoft Windows®
O58 - SDL:2020/06/13 07:49:34 A . (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\WINDOWS\System32\drivers\volsnap.sys [356368] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:26 A . (.Microsoft Corporation - Volume driver.) -- C:\WINDOWS\System32\drivers\volume.sys [14136] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:26 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR X86-32.) -- C:\WINDOWS\System32\drivers\vsmraid.sys [150056] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:26 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\WINDOWS\System32\drivers\VSTXRAID.SYS [277008] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:42 A . (.Microsoft Corporation - Virtual Wireless Bus Driver.) -- C:\WINDOWS\System32\drivers\vwifibus.sys [20992] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:42 A . (.Microsoft Corporation - Virtual WiFi Filter Driver.) -- C:\WINDOWS\System32\drivers\vwififlt.sys [61952] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:42 A . (.Microsoft Corporation - Virtual WiFi Miniport Driver.) -- C:\WINDOWS\System32\drivers\vwifimp.sys [34816] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:26 A . (.Microsoft Corporation - Pilote de tablette Wacom à stylet série.) -- C:\WINDOWS\System32\drivers\wacompen.sys [21504] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/10 22:26:40 A . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) -- C:\WINDOWS\System32\drivers\wanarp.sys [65024] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:52 A . (.Microsoft Corporation - Watchdog Driver.) -- C:\WINDOWS\System32\drivers\watchdog.sys [47104] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:49:19 A . (.Microsoft Corporation - Windows Container Isolation FS Filter Drive.) -- C:\WINDOWS\System32\drivers\wcifs.sys [152080] =>.Microsoft®
O58 - SDL:2019/03/19 04:40:02 A . (.Microsoft Corporation - Windows Container Name Virtualization FS Fi.) -- C:\WINDOWS\System32\drivers\wcnfs.sys [70656] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:43 A . (.Microsoft Corporation - Microsoft antimalware boot driver.) -- C:\WINDOWS\System32\drivers\WdBoot.sys [38280] =>.Microsoft®
O58 - SDL:2020/06/13 07:49:33 A . (.Microsoft Corporation - Runtime de l’infrastructure de pilotes en m.) -- C:\WINDOWS\System32\drivers\Wdf01000.sys [606520] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:43 A . (.Microsoft Corporation - Microsoft antimalware file system filter dr.) -- C:\WINDOWS\System32\drivers\WdFilter.sys [268768] =>.Microsoft®
O58 - SDL:2020/06/13 07:49:33 A . (.Microsoft Corporation - Kernel Mode Driver Framework Loader.) -- C:\WINDOWS\System32\drivers\WdfLdr.sys [47632] =>.Microsoft®
O58 - SDL:2020/06/13 07:48:50 A . (.Microsoft Corporation - WDI Driver Framework Driver.) -- C:\WINDOWS\System32\drivers\WdiWiFi.sys [654848] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:07 A . (.Microsoft Corporation - WDM Companion Filter.) -- C:\WINDOWS\System32\drivers\WdmCompanionFilter.sys [17720] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:43 A . (.Microsoft Corporation - Windows Defender Network Stream Filter.) -- C:\WINDOWS\System32\drivers\WdNisDrv.sys [47584] =>.Microsoft®
O58 - SDL:2019/03/19 04:40:17 A . (.Microsoft Corporation - Windows Error Reporting Kernel Driver.) -- C:\WINDOWS\System32\drivers\werkernel.sys [41272] =>.Microsoft Windows®
O58 - SDL:2020/06/13 07:49:18 A . (.Microsoft Corporation - WFP NDIS 6.30 Lightweight Filter Driver.) -- C:\WINDOWS\System32\drivers\wfplwfs.sys [91664] =>.Microsoft Windows®
O58 - SDL:2020/06/13 07:49:29 A . (.Microsoft Corporation - Wim file system Driver.) -- C:\WINDOWS\System32\drivers\wimmount.sys [31032] =>.Microsoft®
O58 - SDL:2019/03/19 04:40:03 A . (.Microsoft Corporation - Windows Trusted Runtime Interface Driver.) -- C:\WINDOWS\System32\drivers\WindowsTrustedRT.sys [55784] =>.Microsoft®
O58 - SDL:2019/03/19 04:39:30 A . (.Microsoft Corporation - Windows Trusted Runtime Service Proxy Drive.) -- C:\WINDOWS\System32\drivers\WindowsTrustedRTProxy.sys [15336] =>.Microsoft®
O58 - SDL:2019/03/19 04:41:16 A . (.Microsoft Corporation - Windows Hypervisor Interface Driver.) -- C:\WINDOWS\System32\drivers\winhv.sys [26936] =>.Microsoft Windows®
O58 - SDL:2020/06/13 07:48:47 A . (.Microsoft Corporation - Pilote NAT Windows.) -- C:\WINDOWS\System32\drivers\winnat.sys [196608] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:49:31 A . (.Microsoft Corporation - Windows QUIC Driver.) -- C:\WINDOWS\System32\drivers\winquic.sys [164664] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:39:29 A . (.Microsoft Corporation - Windows WinUSB Class Driver.) -- C:\WINDOWS\System32\drivers\winusb.sys [78848] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:27 A . (.Microsoft Corporation - Windows Management Interface for ACPI.) -- C:\WINDOWS\System32\drivers\wmiacpi.sys [12288] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:17 A . (.Microsoft Corporation - WMILIB WMI support library Dll.) -- C:\WINDOWS\System32\drivers\wmilib.sys [17424] =>.Microsoft Windows®
O58 - SDL:2020/06/13 07:49:28 A . (.Microsoft Corporation - Filtre de superposition Windows.) -- C:\WINDOWS\System32\drivers\wof.sys [177976] =>.Microsoft®
O58 - SDL:2019/03/19 09:19:46 A . (.Microsoft Corporation - Windows Portable Device Upper Class Filter.) -- C:\WINDOWS\System32\drivers\WpdUpFltr.sys [24376] =>.Microsoft Windows®
O58 - SDL:2019/03/19 04:40:17 A . (.Microsoft Corporation - WPP Trace Recorder.) -- C:\WINDOWS\System32\drivers\WppRecorder.sys [32776] =>.Microsoft Windows®
O58 - SDL:2020/06/13 07:49:35 A . (.Microsoft Corporation - Couche IFS Winsock2.) -- C:\WINDOWS\System32\drivers\ws2ifsl.sys [16896] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:36 A . (.Microsoft Corporation - Windows Driver Foundation - User-mode Drive.) -- C:\WINDOWS\System32\drivers\WUDFPf.sys [87552] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:36 A . (.Microsoft Corporation - Windows Driver Foundation - User-mode Drive.) -- C:\WINDOWS\System32\drivers\WUDFRd.sys [207360] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/06/13 07:48:42 A . (.Microsoft Corporation - Game Input Protocol Driver.) -- C:\WINDOWS\System32\drivers\xboxgip.sys [254976] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:20 A . (.Microsoft Corporation - XINPUT filter driver for HID.) -- C:\WINDOWS\System32\drivers\xinputhid.sys [36864] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:39:24 A . (.Marvell - NDIS6.30 Miniport Driver for Marvell Yukon.) -- C:\WINDOWS\System32\drivers\yk63x86.sys [242688] [Unsigned] =>.Marvell
O58 - SDL:2019/03/19 04:40:45 A . (.Microsoft Corporation - Windows Win16 Application Launcher.) -- C:\WINDOWS\System32\ANSI.SYS [8960] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:45 A . (.Microsoft Corporation - Windows Win16 Application Launcher.) -- C:\WINDOWS\System32\country.sys [8960] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:45 A . (.Microsoft Corporation - Windows Win16 Application Launcher.) -- C:\WINDOWS\System32\HIMEM.SYS [8960] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:45 A . (.Microsoft Corporation - Windows Win16 Application Launcher.) -- C:\WINDOWS\System32\KEY01.SYS [8960] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:45 A . (.Microsoft Corporation - Windows Win16 Application Launcher.) -- C:\WINDOWS\System32\KEYBOARD.SYS [8960] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:46 A . (.Microsoft Corporation - Windows Win16 Application Launcher.) -- C:\WINDOWS\System32\NTDOS.SYS [8960] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:46 A . (.Microsoft Corporation - Windows Win16 Application Launcher.) -- C:\WINDOWS\System32\NTDOS404.SYS [8960] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:46 A . (.Microsoft Corporation - Windows Win16 Application Launcher.) -- C:\WINDOWS\System32\NTDOS411.SYS [8960] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:46 A . (.Microsoft Corporation - Windows Win16 Application Launcher.) -- C:\WINDOWS\System32\NTDOS412.SYS [8960] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:46 A . (.Microsoft Corporation - Windows Win16 Application Launcher.) -- C:\WINDOWS\System32\NTDOS804.SYS [8960] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:46 A . (.Microsoft Corporation - Windows Win16 Application Launcher.) -- C:\WINDOWS\System32\NTIO.SYS [8960] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:46 A . (.Microsoft Corporation - Windows Win16 Application Launcher.) -- C:\WINDOWS\System32\NTIO404.SYS [8960] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:46 A . (.Microsoft Corporation - Windows Win16 Application Launcher.) -- C:\WINDOWS\System32\NTIO411.SYS [8960] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:46 A . (.Microsoft Corporation - Windows Win16 Application Launcher.) -- C:\WINDOWS\System32\NTIO412.SYS [8960] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:46 A . (.Microsoft Corporation - Windows Win16 Application Launcher.) -- C:\WINDOWS\System32\NTIO804.SYS [8960] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/10 22:26:24 A . (.Microsoft Corporation - Full/Desktop Multi-User Win32 Driver.) -- C:\WINDOWS\System32\win32k.sys [324096] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/10 22:26:18 A . (.Microsoft Corporation - Pilote du noyau Base Win32k.) -- C:\WINDOWS\System32\win32kbase.sys [2054656] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2020/09/10 22:26:24 A . (.Microsoft Corporation - Full/Desktop Win32k Kernel Driver.) -- C:\WINDOWS\System32\win32kfull.sys [2799104] [Unsigned] =>.Microsoft Corporation
O58 - SDL:2019/03/19 04:40:02 A . (.Microsoft Corporation - Win32k non session driver.) -- C:\WINDOWS\System32\win32kns.sys [20480] [Unsigned] =>.Microsoft Corporation

---\\ DERNIERS FICHIERS MODIFIÉS OU CRÉÉS (Utilisateur) (1) - 41s
O61 - LFC: 2020/10/13 09:17:39 A . (.PC Helpsoft.) -- C:\Users\marc\Downloads\PC_Cleaner.exe [6134824] {726588307C76C615C7BE4882}. =>SUP.Optional.PCHelpSoft

---\\ ASSOCIATION Shell Spawning (10) - 1s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe [Unsigned] =>.Microsoft Corporation
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe [Unsigned] =>.Microsoft Corporation
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft®
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (...) -- C:\Windows\System32\WScript.exe "%1" %* =>.Default.Value
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe [Unsigned] =>.Microsoft Corporation
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S =>.Default.Value

---\\ MENU DE DÉMARRAGE INTERNET (12) - 1s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google LLC - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google LLC®
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft®
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Microsoft Edge.) -- C:\Program Files\Microsoft\Edge\Application\msedge.exe =>.Microsoft®
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google LLC - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google LLC
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - IE Per-User Show IE Icon Utility.) -- C:\Windows\System32\ie4ushowIE.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Microsoft Edge.) -- C:\Program Files\Microsoft\Edge\Application\msedge.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google LLC - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google LLC
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Microsoft Edge.) -- C:\Program Files\Microsoft\Edge\Application\msedge.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google LLC - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google LLC
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - IE Per-User Show IE Icon Utility.) -- C:\Windows\System32\ie4ushowIE.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Microsoft Edge.) -- C:\Program Files\Microsoft\Edge\Application\msedge.exe =>.Microsoft Corporation

---\\ RECHERCHE D'INFECTION SUR NAVIGATEURS (2) - 0s
O69 - SBI: SearchScopes [HKCU]{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com/ =>.Bing.com
O69 - SBI: SearchScopes [HKLM]{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (@ieframe.dll,-12512) - http://www.bing.com/ =>.Bing.com

---\\ ÉNUMÈRE LES SERVICES DÉMARRÉS PAR Svchost (49) - 3s
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [183296] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [183296] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [210944] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [1125376] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\IKEEXT.DLL [738304] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [706048] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\System32\seclogon.dll [24064] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [114176] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [90624] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [657408] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [190976] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [349184] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [417280] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [90624] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: XblGameSave (XblGameSave) . (.Microsoft Corporation - Xbox Live Game Save Service.) -- C:\Windows\System32\XblGameSave.dll [788992] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: DmEnrollmentSvc (DmEnrollmentSvc) . (.Microsoft Corporation - DLL Windows Management Service.) -- C:\Windows\System32\Windows.Internal.Management.dll [653824] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: InstallService (InstallService) . (.Microsoft Corporation - InstallService.) -- C:\Windows\System32\InstallService.dll [1750016] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: shpamsvc (shpamsvc) . (.Microsoft Corporation - SharedPC.AccountManager.) -- C:\Windows\System32\Windows.SharedPC.AccountManager.dll [169984] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: LxpSvc (LxpSvc) . (.Microsoft Corporation - Fournit une prise en charge de l'infrastruc.) -- C:\Windows\System32\LanguageOverlayServer.dll [239616] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: TroubleshootingSvc (TroubleshootingSvc) . (.Microsoft Corporation - MitigationClient.) -- C:\Windows\System32\MitigationClient.dll [306688] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: PushToInstall (PushToInstall) . (.Microsoft Corporation - PushToInstall.) -- C:\Windows\System32\PushToInstall.dll [193536] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: XboxGipSvc (XboxGipSvc) . (.Microsoft Corporation - Xbox Gip Management Service.) -- C:\Windows\System32\XboxGipSvc.dll [55296] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [126464] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: NetSetupSvc (NetSetupSvc) . (.Microsoft Corporation - Service Configuration du réseau.) -- C:\Windows\System32\NetSetupSvc.dll [230912] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Gestionnaire d’installation de périphérique.) -- C:\Windows\System32\DeviceSetupManager.dll [207360] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: WManSvc (WManSvc) . (.Microsoft Corporation - DLL du Service de gestion de Windows.) -- C:\Windows\System32\Windows.Management.Service.dll [646656] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Service Assistant Connectivité réseau Micro.) -- C:\Windows\System32\NcaSvc.dll [140288] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: XblAuthManager (XblAuthManager) . (.Microsoft Corporation - Xbox Live Auth Manager.) -- C:\Windows\System32\XblAuthManager.dll [673280] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: NaturalAuthentication (NaturalAuthentication) . (.Microsoft Corporation - Service d’authentification naturelle.) -- C:\Windows\System32\NaturalAuth.dll [307712] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: WpnService (WpnService) . (.Microsoft Corporation - Service du système de notifications Push Wi.) -- C:\Windows\System32\WpnService.dll [227328] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [90112] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire des connexions d’accès à dista.) -- C:\Windows\System32\rasmans.dll [799232] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [403456] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [57344] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [531456] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [252928] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\System32\wuaueng.dll [2397696] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [1006592] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [197120] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Service de géolocalisation.) -- C:\Windows\System32\lfsvc.dll [38912] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Service de compte Microsoft®.) -- C:\Windows\System32\wlidsvc.dll [1661952] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: UsoSvc (UsoSvc) . (.Microsoft Corporation - Mettre à jour la session du service Orchest.) -- C:\Windows\System32\usosvc.dll [420352] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: UserManager (UserManager) . (.Microsoft Corporation - UserMgr.) -- C:\Windows\System32\usermgr.dll [1070592] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: XboxNetApiSvc (XboxNetApiSvc) . (.Microsoft Corporation - Xbox Live Networking Service.) -- C:\Windows\System32\XboxNetApiSvc.dll [1004032] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: TokenBroker (TokenBroker) . (.Microsoft Corporation - Broker à jetons.) -- C:\Windows\System32\TokenBroker.dll [1246208] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [53248] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: wisvc (wisvc) . (.Microsoft Corporation - Paramètres de vol.) -- C:\Windows\System32\flightsettings.dll [729600] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: dmwappushservice (dmwappushservice) . (.Microsoft Corporation - dmwappushsvc.) -- C:\Windows\System32\dmwappushsvc.dll [48128] [Unsigned] =>.Microsoft Corporation
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [444928] [Unsigned] =>.Microsoft Corporation

---\\ LISTE DES EXCEPTIONS PAREFEU WINDOWS (5) - 5s
O87 - FAEL: "{CF6232B2-5B86-40F3-BA2D-949F56793660}" [In-None-P6-TRUE] .(.Skype Technologies S.A. - Skype.) -- C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5c\Skype\Skype.exe =>.Skype Software Sarl®
O87 - FAEL: "{2DFDCE35-B5FE-4DCB-8864-33E662CB2C7B}" [Out-None-P6-TRUE] .(.Skype Technologies S.A. - Skype.) -- C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5c\Skype\Skype.exe =>.Skype Software Sarl®
O87 - FAEL: "{53FA0350-20E0-4256-91C4-25ECDDF0B85C}" [In-None-P17-TRUE] .(.Skype Technologies S.A. - Skype.) -- C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5c\Skype\Skype.exe =>.Skype Software Sarl®
O87 - FAEL: "{4554D445-508C-4226-B347-8EACA9639DF3}" [Out-None-P17-TRUE] .(.Skype Technologies S.A. - Skype.) -- C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5c\Skype\Skype.exe =>.Skype Software Sarl®
O87 - FAEL: "{9918AB6C-19B9-40A7-9572-714AECD42AA7}" [In-None-P17-TRUE] .(.Google LLC - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google LLC®

---\\ CODES PRODUITS LOGICIELS (31) - 2s
O90 - PUC: "00002109110000000000000000F01FEC" [HKLM] . (.Microsoft Office Professional Plus 2007.) =>.Microsoft Corporation
O90 - PUC: "000021094400C0400000000000F01FEC" [HKLM] . (.Microsoft Office InfoPath MUI (French) 2007.) =>.Microsoft Corporation
O90 - PUC: "000021095100C0400000000000F01FEC" [HKLM] . (.Microsoft Office Access MUI (French) 2007.) =>.Microsoft Corporation
O90 - PUC: "000021096100C0400000000000F01FEC" [HKLM] . (.Microsoft Office Excel MUI (French) 2007.) =>.Microsoft Corporation
O90 - PUC: "000021098100C0400000000000F01FEC" [HKLM] . (.Microsoft Office PowerPoint MUI (French) 2007.) =>.Microsoft Corporation
O90 - PUC: "000021099100C0400000000000F01FEC" [HKLM] . (.Microsoft Office Publisher MUI (French) 2007.) =>.bl.org
O90 - PUC: "00002109A100C0400000000000F01FEC" [HKLM] . (.Microsoft Office Outlook MUI (French) 2007.) =>.Microsoft Corporation
O90 - PUC: "00002109B100C0400000000000F01FEC" [HKLM] . (.Microsoft Office Word MUI (French) 2007.) =>.Microsoft Corporation
O90 - PUC: "00002109C200C0400000000000F01FEC" [HKLM] . (.Microsoft Office Proofing (French) 2007.) =>.Microsoft Corporation
O90 - PUC: "00002109E600C0400000000000F01FEC" [HKLM] . (.Microsoft Office Shared MUI (French) 2007.) =>.Microsoft Corporation
O90 - PUC: "00002109F10010400000000000F01FEC" [HKLM] . (.Microsoft Office Proof (Arabic) 2007.) =>.Microsoft Corporation
O90 - PUC: "00002109F10031400000000000F01FEC" [HKLM] . (.Microsoft Office Proof (Dutch) 2007.) =>.Microsoft Corporation
O90 - PUC: "00002109F10070400000000000F01FEC" [HKLM] . (.Microsoft Office Proof (German) 2007.) =>.Microsoft Corporation
O90 - PUC: "00002109F10090400000000000F01FEC" [HKLM] . (.Microsoft Office Proof (English) 2007.) =>.Microsoft Corporation
O90 - PUC: "00002109F100A0C00000000000F01FEC" [HKLM] . (.Microsoft Office Proof (Spanish) 2007.) =>.Microsoft Corporation
O90 - PUC: "00002109F100C0400000000000F01FEC" [HKLM] . (.Microsoft Office Proof (French) 2007.) =>.Microsoft Corporation
O90 - PUC: "099C249F6DA97064C95101128D8D958A" [HKLM] . (.Nero Launcher.) -- C:\WINDOWS\Installer\{F942C990-9AD6-4607-9C15-1021D8D859A8}\ARPPRODUCTICON.exe =>.Ahead Corporation
O90 - PUC: "1AA3BC8A7DE459E4ABA0D39C7237A9E0" [HKLM] . (.UpdateAssistant.) =>.Corel Corporation
O90 - PUC: "33FB10F5378E38B42BCC4EED4F4970E3" [HKLM] . (.Update for Windows 10 (KB4023057).) =>.Microsoft Corporation
O90 - PUC: "35588CBA077879B44BE3A50946A7B536" [HKLM] . (.Nero ControlCenter.) -- C:\WINDOWS\Installer\{ABC88553-8770-4B97-B43E-5A90647A5B63}\ARPPRODUCTICON.exe =>.Ahead Corporation
O90 - PUC: "356CFE58614C9574FB0DA000593BFFCA" [HKLM] . (.Nero Core.) -- C:\WINDOWS\Installer\{85EFC653-C416-4759-BFD0-0A0095B3FFAC}\ARPPRODUCTICON.exe =>.Ahead Corporation
O90 - PUC: "3F7620F67647D0538A8C337BE263858D" [HKLM] . (.Microsoft Visual C++ 2017 x86 Additional Runtime - 14.14.26429.) =>.Microsoft Corporation
O90 - PUC: "7040BB568CC47CD459E2E3FEFD5006A2" [HKLM] . (.Nero Update.) -- C:\WINDOWS\Installer\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}\ARPPRODUCTICON.exe =>.Ahead Corporation
O90 - PUC: "816EDCAA261447040BD1765C8E0D2733" [HKLM] . (.Nero KnowHow PLUS.) -- C:\WINDOWS\Installer\{AACDE618-4162-4074-B01D-67C5E8D07233}\ARPPRODUCTICON.exe =>.Ahead Corporation
O90 - PUC: "93CE35779303926389EB44C7D568C990" [HKLM] . (.Microsoft Visual C++ 2017 x86 Minimum Runtime - 14.14.26429.) =>.Microsoft Corporation
O90 - PUC: "A089CE062ADB6BC44A720BA745894BAC" [HKLM] . (.Google Update Helper.) =>.Google Inc.
O90 - PUC: "C025571B2A687A53689168CD7369889B" [HKLM] . (.Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030.) =>.Microsoft Corporation
O90 - PUC: "D43EEBEB2A48DDE4B8AE69CC45732136" [HKLM] . (.Nero Core Components.) =>.Ahead Corporation
O90 - PUC: "DC8A59DBF9D1DA5389A1E3975220E6BB" [HKLM] . (.Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030.) =>.Microsoft Corporation
O90 - PUC: "E5684202D17A1F74EA968171F1EB987C" [HKLM] . (.Microsoft Update Health Tools.) =>.Microsoft Corporation
O90 - PUC: "EB08AC2DF79F7C54EA6E78477239FE07" [HKLM] . (.Update for Windows 10 (KB4480730).) =>.Microsoft Corporation

---\\ PACKAGES WINDOWS INSTALLER (7) - 17s
[MD5.1766B021B0BAB4F82259974154C5A920] [WIS][2020/06/11 16:24:38] (.Google LLC - Google Update Helper.) -- C:\WINDOWS\Installer\17af20.msi [40960] =>.Google LLC
[MD5.C221760BDAF847A53B0034CA9F0FA539] [WIS][2020/10/10 15:08:20] (.Nero AG - Nero Core.) -- C:\WINDOWS\Installer\1882d40.msi [5705728] =>.Nero AG
[MD5.6F11065547CFCBB56CE9982249EC5698] [WIS][2020/10/10 15:08:22] (.Nero AG - NeroControlCenter.) -- C:\WINDOWS\Installer\1882d46.msi [3591168] =>.Nero AG
[MD5.522BCE5706D0A2E019AD61DA8F08137C] [WIS][2020/10/10 15:08:22] (.Nero AG - Nero Core Components.) -- C:\WINDOWS\Installer\1882d4d.msi [4521984] =>.Nero AG
[MD5.9F42EC3D71C1A271C05561C66EE1C077] [WIS][2020/10/10 15:08:21] (.Nero AG - Nero Update.) -- C:\WINDOWS\Installer\1882d53.msi [1473536] =>.Nero AG
[MD5.815A7C73A74D8BB20B4CAC748E8606A3] [WIS][2020/10/10 15:08:21] (.Nero AG - Nero Launcher.) -- C:\WINDOWS\Installer\1882d59.msi [3116032] =>.Nero AG
[MD5.30633A4B84C288C3B8813D73A215B5D3] [WIS][2020/10/10 15:08:21] (.Nero AG - Nero KnowHow PLUS.) -- C:\WINDOWS\Installer\1882d60.msi [2624000] =>.Nero AG

---\\ FEATURE CONTROL. (160) - 0s
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ACTIVEX_REPURPOSEDETECTION]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:OUTLOOK.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:clview.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS]:infopath.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS]:clview.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_INPUT_PROMPTS]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_INPUT_PROMPTS]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_IMG]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_IMG]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_OBJECT]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_OBJECT]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_SCRIPT]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_SCRIPT]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]:UNPUXHost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]:NeroLauncher.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]:NeroKnowHowPLUS.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_LEGACY_COMPRESSION]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:SAPfewgsrv.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:SAPGUI.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:SAPGuiIT.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:SAPLgPad.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:SAPLOGON.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:Scale_for_R3.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:clview.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_SQM_UPLOAD_FOR_APP]:ieuser.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_SQM_UPLOAD_FOR_APP]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_TELNET_PROTOCOL]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_TELNET_PROTOCOL]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_UNICODE_HANDLE_CLOSING_CALLBACK]:YahooMusicEngine.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DOCUMENT_COMPATIBLE_MODE]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_SCRIPT_PASTE_URLACTION_IF_PROMPT]:devenv.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_SCRIPT_PASTE_URLACTION_IF_PROMPT]:dexplore.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_SCRIPT_PASTE_URLACTION_IF_PROMPT]:helppane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_SCRIPT_PASTE_URLACTION_IF_PROMPT]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_FEEDS]:msfeedssync.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_FORCE_ADDR_AND_STATUS]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_FORCE_ADDR_AND_STATUS]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:OUTLOOK.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:clview.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IGNORE_XML_PROLOG]:msiexec.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IMAGING_USE_ART]:cs.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IMAGING_USE_ART]:waol.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IMAGING_USE_ART]:wm.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_INTERNET_SHELL_FOLDERS]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LEGACY_DISPPARAMS]:helppane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LEGACY_DLCONTROL_BEHAVIORS]:wlmail.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:OUTLOOK.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:clview.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTIONSPER1_0SERVER]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTIONSPERSERVER]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:OUTLOOK.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:clview.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:OUTLOOK.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:clview.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MSHTML_AUTOLOAD_IEFRAME]:mshta.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MSHTML_AUTOLOAD_IEFRAME]:outlook.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MSHTML_AUTOLOAD_IEFRAME]:sidebar.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:OUTLOOK.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:clview.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RELEASE_CALLBACK_ON_STOP_BINDING]:communicator.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ABOUT_PROTOCOL_IE7]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ABOUT_PROTOCOL_IE7]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ABOUT_PROTOCOL_IE7]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:OUTLOOK.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:clview.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:msimn.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:winmail.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:OUTLOOK.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:clview.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_OBJECT_DATA_ATTRIBUTE]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_RES_TO_LMZ]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_RES_TO_LMZ]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_RES_TO_LMZ]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:OUTLOOK.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:clview.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:OUTLOOK.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:clview.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SHIM_MSHELP_COMBINE]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SHIM_MSHELP_COMBINE]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SHOW_APP_PROTOCOL_WARN_DIALOG]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SSLUX]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SUBDOWNLOAD_LOCKDOWN]:msimn.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SUBDOWNLOAD_LOCKDOWN]:outlook.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SUBDOWNLOAD_LOCKDOWN]:winmail.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:OUTLOOK.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:clview.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_WINDOWEDSELECTCONTROL]:excel.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_WINDOWEDSELECTCONTROL]:infopath.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_WINDOWEDSELECTCONTROL]:powerpnt.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_WINDOWEDSELECTCONTROL]:winword.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:OUTLOOK.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VIEWLINKEDWEBOC_IS_UNSAFE]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_MOVESIZECHILD]:msn.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:OUTLOOK.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:OUTLOOK.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:clview.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_XSSFILTER]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_XSSFILTER]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:OUTLOOK.EXE =>.Legitimate
[HKLM\SOFTWARE\\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:clview.exe =>.Legitimate

---\\ OBSERVATEURS des évènements (119) - 57s

Application.Error: Application Error (334)
~Numéro: 12163
~Date: 10/14/2020 11:31:54 AM
~ID: 1000
~Description: Nom de l’application défaillante %1, version : %2, horodatage : 0x5f3833f3 Nom du module défaillant : %4, version : %5, horodatage : 0xf4b42c70 Code d’exception : 0xc0000409 Décalage d’erreur : 0x000db783 ID du processus défaillant : 0x13c4 Heure de
~Suggestion: Réparer ou réinstaller l'application.

Application.Error: ESENT (290)
~Numéro: 12121
~Date: 10/14/2020 09:44:05 AM
~ID: 455
~Description: %1 (%2) %3L’erreur %5 s’est produite lors de l’ouverture d’un fichier journal %4.
~Suggestion: Créer un dossier C:\Windows\system32\config\systemprofile\AppData\Local\TileDataLayer\Database

Application.Warning: Windows Search Service (1)
~Numéro: 11896
~Date: 10/13/2020 09:38:56 AM
~ID: 3036
~Description: Impossible de terminer l’analyse dans la source de contenu <%2>.Contexte : Application , Catalogue SystemIndexDétails : Une erreur interne s’est produite dans les Services HTTP Microsoft Windows (HRESULT : 0x80072ee4) (0x80072ee4)
~Suggestion: https://www.repairwin.com/fix-windows-event-3036-search-content-source-cannot-accessed-solved/

Application.Error: MsiInstaller (2)
~Numéro: 10853
~Date: 10/11/2020 08:19:21 AM
~ID: 1013
~Description: Produit : Nero BurningROM 2019 -- 1:
~Suggestion: Aucune

Application.Error: Microsoft-Windows-CAPI2 (2)
~Numéro: 10629
~Date: 10/09/2020 07:22:38 PM
~ID: 512
~Description: Le service Services de chiffrement n’a pas pu initialiser l’objet sauvegarde VSS « System Writer ».%1.

Application.Error: Microsoft-Windows-User Profiles Service (27)
~Numéro: 9528
~Date: 09/27/2020 08:30:07 AM
~ID: 1552
~Description: La ruche utilisateur est chargée par un autre processus (verrouillage de Registre) Nom du processus : %1, PID : %2, PID ProfSvc : %3.
~Suggestion: Vérifier les paramètres de connexion.

Application.Warning: Microsoft-Windows-WMI (6)
~Numéro: 8082
~Date: 09/12/2020 08:11:49 AM
~ID: 63
~Description: Un fournisseur, %1, a été inscrit dans l’espace de noms Windows Management Instrumentation %2, afin d’utiliser le compte LocalSystem. Ce compte bénéficie de privilèges et le fournisseur peut provoquer une violation de sécurité s’il ne représente pas
~Suggestion: Généralement LocalSystem n'est pas nécessaire et le contexte de sécurité NetworkServiceHost est plus approprié.

System.Error: DCOM (589)
~Numéro: 14465
~Date: 10/14/2020 10:05:53 AM
~ID: 10010
~Description: Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca

System.Error: EventLog (37)
~Numéro: 14426
~Date: 10/14/2020 09:35:00 AM
~ID: 6008
~Description: L’arrêt système précédant à %1 le %2 n’était pas prévu.

System.Error: Service Control Manager (5)
~Numéro: 14279
~Date: 10/13/2020 09:08:12 AM
~ID: 7023
~Description: Le service %1 s’est arrêté avec l’erreur : %%2147500053

System.Error: BugCheck (14)
~Numéro: 14179
~Date: 10/13/2020 05:34:23 AM
~ID: 1001
~Description: 0x0000001a (0x0000003f, 0x0003300b, 0x7e1e229e, 0x7e4c229e)C:\WINDOWS\MEMORY.DMP74f612fd-293f-4372-b418-79458e68b33c

System.Error: atapi (26)
~Numéro: 14128
~Date: 10/12/2020 10:57:45 PM
~ID: 11
~Description: Le pilote a détecté une erreur du contrôleur sur %1.

System.Warning: Display (24)
~Numéro: 14121
~Date: 10/12/2020 06:13:25 PM
~ID: 4101
~Description: Le pilote d’affichage %1 ne répondait plus.

System.Error: Microsoft-Windows-BitLocker-Driver (3)
~Numéro: 14097
~Date: 10/12/2020 02:18:38 PM
~ID: 24620
~Description: Vérification du volume chiffré : impossible de lire les informations de volume sur %2.

System.Error: Microsoft-Windows-Ntfs (10)
~Numéro: 13981
~Date: 10/11/2020 04:34:46 PM
~ID: 98
~Description: C:\Device\HarddiskVolume13

System.Error: Ntfs (22)
~Numéro: 13849
~Date: 10/10/2020 02:09:11 PM
~ID: 55
~Description: Une défaillance a été détectée dans la structure du système de fichiers sur le volume %1. Une défaillance a été détectée dans une structure d’index de système de fichiers. Le numéro de référence du fichier est 0x120000000129bd. Le nom du fichier est

System.Error: Microsoft-Windows-Kernel-General (1)
~Numéro: 13420
~Date: 10/07/2020 08:11:00 PM
~ID: 5
~Description: 0x8000002a28\??\C:\Users\marc\ntuser.dat

System.Warning: Microsoft-Windows-DNS-Client (1)
~Numéro: 13191
~Date: 10/05/2020 09:19:51 PM
~ID: 1014
~Description: La résolution du nom %1 a expiré lorsqu’aucun des serveurs DNS configurés n’a répondu.
~Suggestion: https://social.technet.microsoft.com/wiki/contents/articles/3336.event-id-1014-microsoft-windows-dns-client.aspx

System.Error: volmgr (1)
~Numéro: 12958
~Date: 10/04/2020 07:48:08 AM
~ID: 46
~Description: L'initialisation du fichier de vidage sur incident a échoué.

System.Error: Microsoft-Windows-WindowsUpdateClient (5)
~Numéro: 12721
~Date: 10/01/2020 06:40:50 PM
~ID: 20
~Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur %1 : %2.
~Suggestion: http://kb.eventtracker.com/evtpass/evtpages/EventId_20_Microsoft-Windows-WindowsUpdateClient_63351.asp

System.Error: Microsoft-Windows-Kernel-Boot (3)
~Numéro: 11624
~Date: 09/21/2020 08:30:13 AM
~ID: 29
~Description: 3221225473Une erreur irrécupérable s’est produite pendant le traitement des données de restauration.

System.Warning: Microsoft-Windows-Kernel-PnP (1)
~Numéro: 9578
~Date: 09/01/2020 02:36:42 PM
~ID: 219
~Description: Le chargement du pilote %5 a échoué pour le périphérique %2.
~Suggestion: Vérifier que le pilote a bien été chargé dans les informations système

---\\ SCAN ADDITIONNEL (18) - 7s
C:\Program Files\PC Cleaner\PCCNotifications.exe =>SUP.Optional.PCHelpSoft
C:\WINDOWS\System32\Tasks\PC Cleaner automatic scan and notifications =>SUP.Optional.PCHelpSoft
C:\Users\marc\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnglhdfndkfkpiddcmfioekcjkmojhbj =>.SUP.BrowserExtension
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\PC Cleaner_is1 =>SUP.Optional.PCHelpSoft
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PC Cleaner_is1 =>SUP.Optional.PCHelpSoft
C:\Program Files\PC Cleaner =>SUP.Optional.PCHelpSoft
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Cleaner =>SUP.Optional.PCHelpSoft
C:\Users\marc\Downloads\PC_Cleaner.exe =>SUP.Optional.PCHelpSoft
C:\Users\marc\AppData\Local\Google\Chrome\User Data\Default\File System\000 =>.SUP.Temporary.Chrome
C:\Users\marc\AppData\Local\Google\Chrome\User Data\Default\File System\001 =>.SUP.Temporary.Chrome
C:\Users\marc\AppData\Local\Google\Chrome\User Data\Default\File System\002 =>.SUP.Temporary.Chrome
C:\Users\marc\AppData\Local\Google\Chrome\User Data\Default\File System\003 =>.SUP.Temporary.Chrome
C:\Users\marc\AppData\Local\Google\Chrome\User Data\Default\File System\004 =>.SUP.Temporary.Chrome
C:\Users\marc\AppData\Local\Google\Chrome\User Data\Default\File System\005 =>.SUP.Temporary.Chrome
C:\Users\marc\AppData\Local\Google\Chrome\User Data\Default\File System\006 =>.SUP.Temporary.Chrome
C:\Users\marc\AppData\Local\Google\Chrome\User Data\Default\File System\007 =>.SUP.Temporary.Chrome
HKCU\Software\PC Cleaner =>SUP.Optional.PCHelpSoft
C:\Users\marc\AppData\Local\Google\Update =>Heuristic.Suspect

---\\ RÉCAPITULATIF DES ÉLÉMENTS TROUVÉS (6) - 0s
https://nicolascoolman.eu/forum/Topic/repaquetage-et-infection/ =>SUP.Optional.PCHelpSoft
https://nicolascoolman.eu/2017/10/05/sup-browserextension/ =>.SUP.BrowserExtension
https://nicolascoolman.eu/forum/Topic/warning-eventlogapp-evenement-dapplication/ =>Warning.EventLogApp
https://nicolascoolman.eu/forum/Topic/warning-eventlogsys-evenement-systeme/ =>Warning.EventLogSys
https://nicolascoolman.eu/forum/Topic/logiciels-potentiellement-superflus-lps/ =>.SUP.Temporary.Chrome
https://nicolascoolman.eu/2017/01/28/heuristic-suspect/ =>Heuristic.Suspect

---\\ NUMEROS DE SÉRIE
[00898D4BCDD66C4135AF2211EB8C29A7F0] [10/10/2020] (.Nero AG.) - C:\Users\marc\AppData\Roaming\Nero\NeroInstaller\2019-NBRTRIAL\Files\Nero_TuneItUp_free_2.8.0.84_setup.exe =>.Not verified
[00C01E41FF29078E6626A640C5A19A8D80] [09/10/2020] (.BurnAware.) - C:\Users\marc\Downloads\burnaware_cfree_13.8.exe =>.BurnAware
[02FA994D660DE659EE9037ECB437D766] [13/10/2020] (.Piriform Software Ltd.) - C:\Users\marc\Downloads\ccsetup572 (1).exe =>.Piriform Software Ltd
[02FA994D660DE659EE9037ECB437D766] [13/10/2020] (.Piriform Software Ltd.) - C:\Users\marc\Downloads\ccsetup572.exe =>.Piriform Software Ltd
[02FA994D660DE659EE9037ECB437D766] [22/09/2020] (.Piriform Software Ltd.) - C:\Program Files\CCleaner\CCleaner.exe =>.Piriform Software Ltd
[02FA994D660DE659EE9037ECB437D766] [22/09/2020] (.Piriform Software Ltd.) - C:\Program Files\CCleaner\uninst.exe =>.Piriform Software Ltd
[06AEA76BAC46A9E8CFE6D29E45AAF033] [11/06/2020] (.Google LLC.) - C:\Program Files\Google\Update\1.3.35.452\GoogleCrashHandler.exe =>.Google LLC
[06AEA76BAC46A9E8CFE6D29E45AAF033] [11/06/2020] (.Google LLC.) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google LLC
[0847C0D333578DAFA9934DA5A3788807] [09/10/2020] (.Canneverbe Limited.) - C:\Users\marc\Downloads\cdbxp_setup_4.5.8.7128.exe =>.Canneverbe Limited
[0847C0D333578DAFA9934DA5A3788807] [10/10/2020] (.Canneverbe Limited.) - C:\Users\marc\Downloads\cdbxp_setup_4.5.8.7128_x64_minimal.exe =>.Canneverbe Limited
[09268FAA1AD6894D179E5B87A2F06462] [14/09/2017] (.LunarG, Inc..) - C:\Program Files\VulkanRT\1.0.61.0\UninstallVulkanRT.exe =>.LunarG, Inc.
[0A01C3FF8855F008C8E4FA63973252E6] [10/10/2020] (.NCH Software, Inc..) - C:\Users\marc\Downloads\ExpressBurnGraveurDisque_FR.exe =>.NCH Software, Inc.
[0A01C3FF8855F008C8E4FA63973252E6] [20/03/2020] (.NCH Software, Inc..) - C:\Program Files\NCH Software\ExpressBurn\expressburn.exe =>.NCH Software, Inc.
[0C15BE4A15BB0903C901B1D6C265302F] [02/10/2020] (.Google LLC.) - C:\Users\marc\AppData\Local\Google\Chrome\User Data\SwReporter\85.246.200\software_reporter_tool.exe =>.Google LLC
[0C15BE4A15BB0903C901B1D6C265302F] [05/10/2020] (.Google LLC.) - C:\Program Files\Google\Chrome\Application\86.0.4240.75\elevation_service.exe =>.Google LLC
[0C15BE4A15BB0903C901B1D6C265302F] [05/10/2020] (.Google LLC.) - C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google LLC
[0C15BE4A15BB0903C901B1D6C265302F] [09/10/2020] (.Google LLC.) - C:\Program Files\Google\Chrome\Application\86.0.4240.75\Installer\chrmstp.exe =>.Google LLC
[0C15BE4A15BB0903C901B1D6C265302F] [09/10/2020] (.Google LLC.) - C:\Program Files\Google\Chrome\Application\86.0.4240.75\Installer\setup.exe =>.Google LLC
[0D2CACCD3E9EEC06738410BA31BF6595] [13/10/2020] (.Adobe Inc..) - C:\Users\marc\AppData\Local\Google\Chrome\User Data\PepperFlash\32.0.0.445\pepflashplayer.dll =>.Adobe Inc.
[1044F31AE1F93A0BB95F19AB9FAAC6BB] [14/10/2020] (.ESET, spol. s r.o..) - C:\Users\marc\AppData\Local\Google\Chrome\User Data\SwReporter\85.246.200\edls_32.dll =>.ESET, spol. s r.o.
[1044F31AE1F93A0BB95F19AB9FAAC6BB] [14/10/2020] (.ESET, spol. s r.o..) - C:\Users\marc\AppData\Local\Google\Chrome\User Data\SwReporter\85.246.200\em000_32.dll =>.ESET, spol. s r.o.
[1044F31AE1F93A0BB95F19AB9FAAC6BB] [14/10/2020] (.ESET, spol. s r.o..) - C:\Users\marc\AppData\Local\Google\Chrome\User Data\SwReporter\85.246.200\em001_32.dll =>.ESET, spol. s r.o.
[1044F31AE1F93A0BB95F19AB9FAAC6BB] [14/10/2020] (.ESET, spol. s r.o..) - C:\Users\marc\AppData\Local\Google\Chrome\User Data\SwReporter\85.246.200\em002_32.dll =>.ESET, spol. s r.o.
[1044F31AE1F93A0BB95F19AB9FAAC6BB] [14/10/2020] (.ESET, spol. s r.o..) - C:\Users\marc\AppData\Local\Google\Chrome\User Data\SwReporter\85.246.200\em003_32.dll =>.ESET, spol. s r.o.
[1044F31AE1F93A0BB95F19AB9FAAC6BB] [14/10/2020] (.ESET, spol. s r.o..) - C:\Users\marc\AppData\Local\Google\Chrome\User Data\SwReporter\85.246.200\em004_32.dll =>.ESET, spol. s r.o.
[1044F31AE1F93A0BB95F19AB9FAAC6BB] [14/10/2020] (.ESET, spol. s r.o..) - C:\Users\marc\AppData\Local\Google\Chrome\User Data\SwReporter\85.246.200\em005_32.dll =>.ESET, spol. s r.o.
[14781BC862E8DC503A559346F5DCC518] [09/11/2017] (.NVIDIA Corporation.) - C:\Windows\System32\drivers\nvhda32v.sys =>.NVIDIA Corporation
[14781BC862E8DC503A559346F5DCC518] [09/11/2017] (.NVIDIA Corporation.) - C:\Windows\System32\DriverStore\FileRepository\nv_ref_pubwu.inf_x86_f75c0b1bb78ca832\nvlddmkm.sys =>.NVIDIA Corporation
[14781BC862E8DC503A559346F5DCC518] [27/10/2017] (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe =>.NVIDIA Corporation
[14781BC862E8DC503A559346F5DCC518] [27/10/2017] (.NVIDIA Corporation.) - C:\Windows\System32\nv3dappshext.dll =>.NVIDIA Corporation
[14781BC862E8DC503A559346F5DCC518] [27/10/2017] (.NVIDIA Corporation.) - C:\Windows\System32\nvshext.dll =>.NVIDIA Corporation
[330000017BB47778D9105DF03500000000017B] [17/09/2020] (.Skype Software Sarl.) - C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5c\Skype\Skype.exe =>.Skype Software Sarl
[4D7A5E95C92E17B8E5B31A2BD0453A49] [10/10/2020] (.Nero AG.) - C:\Users\marc\Downloads\nero-burning-rom-2017_16-0-03000_fr_402162 (1).exe =>.Nero AG
[6517372405BC773A6BDE3DCA0A95D6D1] [10/10/2020] (.Nero AG.) - C:\Users\marc\AppData\Roaming\Nero\NeroInstaller\2019-NBRTRIAL\Files\Nero_BurningROM2019-20.0.01000_trial.exe =>.Nero AG
[6517372405BC773A6BDE3DCA0A95D6D1] [10/10/2020] (.Nero AG.) - C:\Users\marc\AppData\Roaming\Nero\NeroInstaller\2019-NBRTRIAL\NeroInstallation.exe =>.Nero AG
[6517372405BC773A6BDE3DCA0A95D6D1] [10/10/2020] (.Nero AG.) - C:\Users\marc\AppData\Roaming\Nero\NeroInstaller\NBR2017\NeroInstaller.exe =>.Nero AG
[6517372405BC773A6BDE3DCA0A95D6D1] [19/07/2018] (.Nero AG.) - C:\Program Files\Nero\Update\NASvc.exe =>.Nero AG
[726588307C76C615C7BE4882] [13/10/2020] (.PC HelpSoft Labs Inc.) - C:\Program Files\PC Cleaner\unins000.exe =>.Not verified
[726588307C76C615C7BE4882] [13/10/2020] (.PC HelpSoft Labs Inc.) - C:\Users\marc\Downloads\PC_Cleaner.exe =>.Not verified
[726588307C76C615C7BE4882] [28/08/2020] (.PC HelpSoft Labs Inc.) - C:\Program Files\PC Cleaner\PCCleaner.exe =>.Not verified
[726588307C76C615C7BE4882] [28/08/2020] (.PC HelpSoft Labs Inc.) - C:\Program Files\PC Cleaner\PCCNotifications.exe =>.Not verified
[7524DBFE413001B3B345768A4F60DF46] [01/10/2012] (.SEIKO EPSON Corporation.) - C:\Windows\System32\spool\drivers\w32x86\3\E_FATIJCE.EXE =>.SEIKO EPSON Corporation
[7524DBFE413001B3B345768A4F60DF46] [01/10/2012] (.SEIKO EPSON Corporation.) - C:\Windows\System32\spool\drivers\w32x86\3\E_FINSJCE.EXE =>.SEIKO EPSON Corporation

~ Unselected Options: O82,
~ End of the scan, 6395 items in 20mn24s (6231)(0)