Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 29-03-2020 Ran by [removed] (administrator) on DESKTOP-QVUMEON (MicroElectronics G353) (01-04-2020 16:25:28) Running from C:\Users\[removed]\Downloads [removed] Platform: Windows 10 Pro Version 1909 18363.752 (X64) Language: English (United States) Default browser: FF Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Corsair.Service.CpuIdRemote64.exe (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Corsair.Service.DisplayAdapter.exe (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Corsair.Service.exe (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\iCUE.exe (Discord Inc. -> Discord Inc.) C:\Users\misfi\AppData\Local\Discord\app-0.0.306\Discord.exe (Discord Inc. -> Discord Inc.) C:\Users\misfi\AppData\Local\Discord\app-0.0.306\Discord.exe (Discord Inc. -> Discord Inc.) C:\Users\misfi\AppData\Local\Discord\app-0.0.306\Discord.exe (Discord Inc. -> Discord Inc.) C:\Users\misfi\AppData\Local\Discord\app-0.0.306\Discord.exe (Discord Inc. -> Discord Inc.) C:\Users\misfi\AppData\Local\Discord\app-0.0.306\Discord.exe (Discord Inc. -> Discord Inc.) C:\Users\misfi\AppData\Local\Discord\app-0.0.306\Discord.exe (Electronic Arts, Inc. -> Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe (Intel(R) Extreme Tuning Utility -> Intel(R) Corporation) C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe (Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe (Intel(R) Wireless Connectivity Solutions -> Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel(R) Wireless Connectivity Solutions -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel(R) Wireless Connectivity Solutions -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (Locktime Software s.r.o. -> Locktime Software) C:\Program Files\Locktime Software\NetLimiter 4\NLSvc.exe (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub.exe (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub.exe (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub_agent.exe (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub_updater.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_1.39.6001.0_x64__8wekyb3d8bbwe\GamingServices.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_1.39.6001.0_x64__8wekyb3d8bbwe\GamingServicesNet.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeSH.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\msiexec.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2003.8-0\MsMpEng.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2003.8-0\NisSrv.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> ) C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe (NZXT, Inc. -> ) C:\Program Files (x86)\NZXT\CAM\CAM.Desktop.exe (NZXT, Inc. -> NZXT) C:\Program Files (x86)\NZXT\CAM\Launcher\CAM.exe (NZXT, Inc. -> NZXT) C:\Program Files (x86)\NZXT\CAM\Launcher\CAM.exe (NZXT, Inc. -> NZXT) C:\Program Files (x86)\NZXT\CAM\Launcher\CAM.exe (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe ==================== Registry (Whitelisted) =================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [746440 2018-11-13] (Realtek Semiconductor Corp. -> Realtek Semiconductor) HKLM-x32\...\Run: [CORSAIR iCUE Software] => C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\iCUE Launcher.exe [405032 2019-09-30] (Corsair Memory, Inc. -> Corsair Memory, Inc.) HKLM-x32\...\Run: [TeamsMachineUninstallerLocalAppData] => C:\Users\misfi\AppData\Local\Microsoft\Teams\Update.exe [1790704 2019-11-08] (Microsoft 3rd Party Application Component -> Microsoft Corporation) HKLM-x32\...\Run: [ConnectionCenter] => C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [555920 2018-08-20] (Citrix Systems, Inc. -> Citrix Systems, Inc.) HKLM-x32\...\Run: [Redirector] => C:\Program Files (x86)\Citrix\ICA Client\redirector.exe [402320 2018-08-20] (Citrix Systems, Inc. -> Citrix Systems, Inc.) HKU\S-1-5-21-2825346925-3975081358-1914956935-1002\...\Run: [Discord] => C:\Users\misfi\AppData\Local\Discord\app-0.0.306\Discord.exe [90950968 2020-02-24] (Discord Inc. -> Discord Inc.) HKU\S-1-5-21-2825346925-3975081358-1914956935-1002\...\Run: [CAM] => C:\Program Files (x86)\NZXT\CAM\Launcher\CAM.exe [67662912 2019-07-29] (NZXT, Inc. -> NZXT) HKU\S-1-5-21-2825346925-3975081358-1914956935-1002\...\Run: [Steam] => D:\Programs\Steam Programs\steam.exe [3370272 2020-03-26] (Valve -> Valve Corporation) HKU\S-1-5-21-2825346925-3975081358-1914956935-1002\...\Run: [LGHUB] => C:\Program Files\LGHUB\lghub.exe [71464072 2020-01-31] (Logitech Inc -> Logitech, Inc.) HKU\S-1-5-21-2825346925-3975081358-1914956935-1002\...\Run: [NetLimiter] => C:\Program Files\Locktime Software\NetLimiter 4\nlclientapp.exe [88440 2020-01-17] (Locktime Software s.r.o. -> Locktime Software) HKU\S-1-5-21-2825346925-3975081358-1914956935-1002\...\Run: [EpicGamesLauncher] => D:\Program Files\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [31734672 2020-03-30] (Epic Games Inc. -> Epic Games, Inc.) Startup: C:\Users\misfi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\[removed] [2020-03-22] ShortcutTarget: [removed] -> C:\Program Files (x86)\FAHClient\HideConsole.exe (No File) FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION ==================== Scheduled Tasks (Whitelisted) ============ (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {00D7F6C3-8144-4DCC-AFBB-FA213B974E3A} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2167920 2020-03-18] (Microsoft Corporation -> Microsoft Corporation) Task: {02DCD098-9279-41E9-81EC-D198CAF2EB5D} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [914456 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation) Task: {202D268A-1AB1-4C9E-A4B4-1CFC9460DDC0} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\sdxhelper.exe [150272 2020-03-18] (Microsoft Corporation -> Microsoft Corporation) Task: {35127552-BF0D-49A1-B9E1-6D9BA8A85A5E} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe /NOUACCHECK Task: {3D5D6D0C-752F-4022-BB55-7F2A1406D779} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [653848 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation) Task: {42E35905-C72C-4606-A796-21D491F7796A} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [914456 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation) Task: {4F31CAE9-BF98-4C8D-86C0-C0A3A366591C} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2350176 2020-03-18] (Microsoft Corporation -> Microsoft Corporation) Task: {55056D3C-84B5-42EA-929C-638C49209D7A} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2167920 2020-03-18] (Microsoft Corporation -> Microsoft Corporation) Task: {562DCBC5-2234-4CC0-AD43-F3C9A366746F} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1134104 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation) Task: {60A5D718-D3D5-4556-AB9C-8A249BEFF3B6} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [858480 2019-12-05] (NVIDIA Corporation -> NVIDIA Corporation) Task: {763D3B7E-8888-4C2A-B649-9FD1CB162D3B} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [858480 2019-12-05] (NVIDIA Corporation -> NVIDIA Corporation) Task: {7C2C46FA-DEFC-42F3-9686-4A4BFDE89A37} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2003.8-0\MpCmdRun.exe [480272 2020-03-24] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {8CC3AB36-AF85-4120-9B58-F4DB3ADB92B2} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1134104 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation) Task: {96DC9030-6B20-4E7D-871B-F9999789592B} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\sdxhelper.exe [150272 2020-03-18] (Microsoft Corporation -> Microsoft Corporation) Task: {9C250ACF-6351-4193-8CD4-094F5FD6195F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2003.8-0\MpCmdRun.exe [480272 2020-03-24] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {A47C5D30-F585-45BD-A02A-8F96E518A248} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe [781808 2019-04-21] (MICRO-STAR INTERNATIONAL CO., LTD. -> ) Task: {ABC542C0-F682-41FC-B72E-FD01CE68FF17} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2003.8-0\MpCmdRun.exe [480272 2020-03-24] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {B23AEDDD-5E4A-40F7-8DCF-05A1420A0F04} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2003.8-0\MpCmdRun.exe [480272 2020-03-24] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {B837C24F-0FEB-4DF8-9084-A4CFCA30CFF5} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [6292336 2020-01-28] (Microsoft Corporation -> Microsoft Corporation) Task: {BA57EA66-9295-4555-99EB-B1FDD5CC5C27} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [6292336 2020-01-28] (Microsoft Corporation -> Microsoft Corporation) Task: {BB5A6D00-FCF7-4064-BD3E-76352F3974C8} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1134104 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation) Task: {D1051C4B-1C58-477E-B2CB-E198BB512AE3} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [27367496 2019-10-25] (Microsoft Corporation -> Microsoft Corporation) Task: {DE2B306D-5882-48F1-A23D-BFECA7136395} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3302880 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation) Task: {DF3DE74A-DC7C-4FF1-AFF3-84DE8C20D3DE} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1242704 2020-02-25] (Adobe Inc. -> Adobe Systems) Task: {E37509E2-E4AC-44DF-B9B0-8C099B9CDEDB} - System32\Tasks\ViGEmBusUpdater => C:\Program Files\Nefarius Software Solutions\ViGEm Bus Driver\ViGEmBusUpdater.exe [888344 2019-12-28] (Nefarius Software Solutions e.U. -> Nefarius Software Solutions e.U.) Task: {E74F9CA9-284E-4FC7-89F0-1D165AEC99F4} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [27367496 2019-10-25] (Microsoft Corporation -> Microsoft Corporation) Task: {F0AC06F6-E767-4F73-8C36-5A289B7C381B} - System32\Tasks\CAM.Desktop => C:\Program Files (x86)\NZXT\CAM\CAM.Desktop.exe [344128 2019-07-29] (NZXT, Inc. -> ) Task: {F2440B9D-C3CA-4950-865A-B4DF230CF106} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1134104 2019-12-08] (NVIDIA Corporation -> NVIDIA Corporation) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) ==================== Internet (All) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Winsock: Catalog5 01 C:\WINDOWS\SysWOW64\napinsp.dll [54784 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog5 02 C:\WINDOWS\SysWOW64\pnrpnsp.dll [70656 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog5 03 C:\WINDOWS\SysWOW64\pnrpnsp.dll [70656 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog5 04 C:\WINDOWS\SysWOW64\mswsock.dll [324920 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog5 05 C:\WINDOWS\SysWOW64\winrnr.dll [23552 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog5 06 C:\WINDOWS\SysWOW64\NLAapi.dll [70144 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog5 07 C:\WINDOWS\SysWOW64\wshbth.dll [50688 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9 01 C:\WINDOWS\SysWOW64\mswsock.dll [324920 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9 02 C:\WINDOWS\SysWOW64\mswsock.dll [324920 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9 03 C:\WINDOWS\SysWOW64\mswsock.dll [324920 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9 04 C:\WINDOWS\SysWOW64\mswsock.dll [324920 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9 05 C:\WINDOWS\SysWOW64\mswsock.dll [324920 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9 06 C:\WINDOWS\SysWOW64\mswsock.dll [324920 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9 07 C:\WINDOWS\SysWOW64\mswsock.dll [324920 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9 08 C:\WINDOWS\SysWOW64\mswsock.dll [324920 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9 09 C:\WINDOWS\SysWOW64\mswsock.dll [324920 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9 10 C:\WINDOWS\SysWOW64\mswsock.dll [324920 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9 11 C:\WINDOWS\SysWOW64\mswsock.dll [324920 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9 12 C:\WINDOWS\SysWOW64\mswsock.dll [324920 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9 13 C:\WINDOWS\SysWOW64\mswsock.dll [324920 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9 14 C:\WINDOWS\SysWOW64\mswsock.dll [324920 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog5-x64 01 C:\Windows\system32\napinsp.dll [68096 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog5-x64 02 C:\Windows\system32\pnrpnsp.dll [86528 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog5-x64 03 C:\Windows\system32\pnrpnsp.dll [86528 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog5-x64 04 C:\Windows\System32\mswsock.dll [407544 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog5-x64 05 C:\Windows\System32\winrnr.dll [31232 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog5-x64 06 C:\Windows\system32\NLAapi.dll [93184 2020-03-06] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog5-x64 07 C:\Windows\system32\wshbth.dll [64000 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9-x64 01 C:\Windows\system32\mswsock.dll [407544 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9-x64 02 C:\Windows\system32\mswsock.dll [407544 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9-x64 03 C:\Windows\system32\mswsock.dll [407544 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9-x64 04 C:\Windows\system32\mswsock.dll [407544 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9-x64 05 C:\Windows\system32\mswsock.dll [407544 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9-x64 06 C:\Windows\system32\mswsock.dll [407544 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9-x64 07 C:\Windows\system32\mswsock.dll [407544 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9-x64 08 C:\Windows\system32\mswsock.dll [407544 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9-x64 09 C:\Windows\system32\mswsock.dll [407544 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9-x64 10 C:\Windows\system32\mswsock.dll [407544 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9-x64 11 C:\Windows\system32\mswsock.dll [407544 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9-x64 12 C:\Windows\system32\mswsock.dll [407544 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9-x64 13 C:\Windows\system32\mswsock.dll [407544 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Winsock: Catalog9-x64 14 C:\Windows\system32\mswsock.dll [407544 2019-03-18] (Microsoft Windows -> Microsoft Corporation) Tcpip\..\Interfaces\{4d7c7339-90bf-4204-8a06-de6a53398f49}: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{52b2e234-5535-403c-a126-d53a5e39f780}: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{53d24ec8-2bd0-4c43-9be8-30b874e46c5b}: [NameServer] 8.8.8.8,8.8.4.4 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/p/?LinkId=255141 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/p/?LinkId=255141 HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/p/?LinkId=255141 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/p/?LinkId=255141 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\System32\blank.htm HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKU\S-1-5-21-2825346925-3975081358-1914956935-1002\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm HKU\S-1-5-21-2825346925-3975081358-1914956935-1002\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKU\S-1-5-21-2825346925-3975081358-1914956935-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://oem17win10.msn.com/?PC=NMTE HKU\S-1-5-21-2825346925-3975081358-1914956935-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://OEM17WIN10.MSN.COM/?PC=NMTE HKU\S-1-5-21-2825346925-3975081358-1914956935-1002\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = www.microcentertech.com HKU\S-1-5-21-2825346925-3975081358-1914956935-1002\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = www.microcentertech.com URLSearchHook: HKU\S-1-5-21-2825346925-3975081358-1914956935-1002 - Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\System32\ieframe.dll (Microsoft Windows -> Microsoft Corporation) URLSearchHook: HKU\S-1-5-21-2825346925-3975081358-1914956935-1002 - Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll (Microsoft Windows -> Microsoft Corporation) SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC SearchScopes: HKU\S-1-5-21-2825346925-3975081358-1914956935-1002 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02 BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2020-01-28] (Microsoft Corporation -> Microsoft Corporation) BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2020-01-28] (Microsoft Corporation -> Microsoft Corporation) Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll [2020-03-25] (Microsoft Windows -> Microsoft Corporation) Handler-x32: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll [2020-03-25] (Microsoft Windows -> Microsoft Corporation) Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\System32\urlmon.dll [2020-03-06] (Microsoft Windows -> Microsoft Corporation) Handler-x32: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\SysWOW64\urlmon.dll [2020-03-06] (Microsoft Windows -> Microsoft Corporation) Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\System32\msvidctl.dll [2019-03-18] (Microsoft Windows -> Microsoft Corporation) Handler-x32: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\SysWOW64\msvidctl.dll [2019-03-18] (Microsoft Windows -> Microsoft Corporation) Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll [2020-03-06] (Microsoft Windows -> Microsoft Corporation) Handler-x32: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll [2020-03-06] (Microsoft Windows -> Microsoft Corporation) Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll [2020-03-06] (Microsoft Windows -> Microsoft Corporation) Handler-x32: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll [2020-03-06] (Microsoft Windows -> Microsoft Corporation) Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll [2020-03-06] (Microsoft Windows -> Microsoft Corporation) Handler-x32: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll [2020-03-06] (Microsoft Windows -> Microsoft Corporation) Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll [2020-03-06] (Microsoft Windows -> Microsoft Corporation) Handler-x32: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll [2020-03-06] (Microsoft Windows -> Microsoft Corporation) Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll [2019-03-18] (Microsoft Windows -> Microsoft Corporation) Handler-x32: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll [2019-03-18] (Microsoft Windows -> Microsoft Corporation) Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll [2020-03-25] (Microsoft Windows -> Microsoft Corporation) Handler-x32: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll [2020-03-25] (Microsoft Windows -> Microsoft Corporation) Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll [2020-03-06] (Microsoft Windows -> Microsoft Corporation) Handler-x32: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll [2020-03-06] (Microsoft Windows -> Microsoft Corporation) Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll [2020-03-25] (Microsoft Windows -> Microsoft Corporation) Handler-x32: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll [2020-03-25] (Microsoft Windows -> Microsoft Corporation) Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\System32\inetcomm.dll [2019-03-18] (Microsoft Windows -> Microsoft Corporation) Handler-x32: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\SysWOW64\inetcomm.dll [2019-03-18] (Microsoft Windows -> Microsoft Corporation) Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll [2020-03-06] (Microsoft Windows -> Microsoft Corporation) Handler-x32: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll [2020-03-06] (Microsoft Windows -> Microsoft Corporation) Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll [2019-03-18] (Microsoft Windows -> Microsoft Corporation) Handler-x32: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll [2019-03-18] (Microsoft Windows -> Microsoft Corporation) Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-01-28] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-01-28] (Microsoft Corporation -> Microsoft Corporation) Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-01-28] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-01-28] (Microsoft Corporation -> Microsoft Corporation) Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-01-28] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-01-28] (Microsoft Corporation -> Microsoft Corporation) Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-01-28] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-01-28] (Microsoft Corporation -> Microsoft Corporation) Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll [2020-03-25] (Microsoft Windows -> Microsoft Corporation) Handler-x32: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll [2020-03-25] (Microsoft Windows -> Microsoft Corporation) Handler: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\System32\tbauth.dll [2020-03-25] (Microsoft Windows -> Microsoft Corporation) Handler-x32: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll [2020-03-25] (Microsoft Windows -> Microsoft Corporation) Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\msvidctl.dll [2019-03-18] (Microsoft Windows -> Microsoft Corporation) Handler-x32: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\SysWOW64\msvidctl.dll [2019-03-18] (Microsoft Windows -> Microsoft Corporation) Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll [2020-03-25] (Microsoft Windows -> Microsoft Corporation) Handler-x32: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll [2020-03-25] (Microsoft Windows -> Microsoft Corporation) Handler: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\System32\tbauth.dll [2020-03-25] (Microsoft Windows -> Microsoft Corporation) Handler-x32: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll [2020-03-25] (Microsoft Windows -> Microsoft Corporation) Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll [2019-03-18] (Microsoft Windows -> Microsoft Corporation) Filter-x32: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWOW64\mscoree.dll [2019-03-18] (Microsoft Windows -> Microsoft Corporation) Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll [2019-03-18] (Microsoft Windows -> Microsoft Corporation) Filter-x32: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWOW64\mscoree.dll [2019-03-18] (Microsoft Windows -> Microsoft Corporation) Filter-x32: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-08-20] (Citrix Systems, Inc. -> Citrix Systems, Inc.) Filter-x32: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-08-20] (Citrix Systems, Inc. -> Citrix Systems, Inc.) Filter-x32: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-08-20] (Citrix Systems, Inc. -> Citrix Systems, Inc.) Filter-x32: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-08-20] (Citrix Systems, Inc. -> Citrix Systems, Inc.) Filter-x32: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-08-20] (Citrix Systems, Inc. -> Citrix Systems, Inc.) Filter-x32: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-08-20] (Citrix Systems, Inc. -> Citrix Systems, Inc.) Filter-x32: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-08-20] (Citrix Systems, Inc. -> Citrix Systems, Inc.) Filter-x32: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-08-20] (Citrix Systems, Inc. -> Citrix Systems, Inc.) Filter-x32: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-08-20] (Citrix Systems, Inc. -> Citrix Systems, Inc.) Filter-x32: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-08-20] (Citrix Systems, Inc. -> Citrix Systems, Inc.) Filter-x32: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-08-20] (Citrix Systems, Inc. -> Citrix Systems, Inc.) Filter-x32: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-08-20] (Citrix Systems, Inc. -> Citrix Systems, Inc.) Filter-x32: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-08-20] (Citrix Systems, Inc. -> Citrix Systems, Inc.) Filter-x32: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-08-20] (Citrix Systems, Inc. -> Citrix Systems, Inc.) Filter-x32: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-08-20] (Citrix Systems, Inc. -> Citrix Systems, Inc.) Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll [2019-03-18] (Microsoft Windows -> Microsoft Corporation) Filter-x32: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWOW64\mscoree.dll [2019-03-18] (Microsoft Windows -> Microsoft Corporation) Filter-x32: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-08-20] (Citrix Systems, Inc. -> Citrix Systems, Inc.) Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLMF.DLL [2020-01-28] (Microsoft Corporation -> Microsoft Corporation) Filter-x32: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\MSOXMLMF.DLL [2020-01-28] (Microsoft Corporation -> Microsoft Corporation) StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe Edge: ====== Edge Extension: (AutoFormFill) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [2019-03-19] Edge Extension: (BookReader) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [2019-03-19] Edge Extension: (LearningTools) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [2019-03-19] Edge Extension: (PinJSAPI) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [2019-03-19] FireFox: ======== FF DefaultProfile: 64on43rx.default FF ProfilePath: C:\Users\misfi\AppData\Roaming\Mozilla\Firefox\Profiles\64on43rx.default [2020-04-01] FF NewTab: Mozilla\Firefox\Profiles\64on43rx.default -> hxxps://privatesearch.adaware.com/?gd=SY1001470&d=200321 FF ProfilePath: C:\Users\misfi\AppData\Roaming\Mozilla\Firefox\Profiles\oowq5ggu.default-release-1584804676275 [2020-04-01] FF Extension: (Facebook Container) - C:\Users\misfi\AppData\Roaming\Mozilla\Firefox\Profiles\oowq5ggu.default-release-1584804676275\Extensions\@contain-facebook.xpi [2020-03-21] FF Extension: (DoH Roll-Out) - C:\Program Files\Mozilla Firefox\browser\features\[removed] [2020-02-21] [not signed] FF Extension: (Form Autofill) - C:\Program Files\Mozilla Firefox\browser\features\[removed] [2020-03-10] [not signed] FF Extension: (Firefox Screenshots) - C:\Program Files\Mozilla Firefox\browser\features\[removed] [2020-03-10] [not signed] FF Extension: (WebCompat Reporter) - C:\Program Files\Mozilla Firefox\browser\features\[removed] [2020-03-10] [not signed] FF Extension: (Web Compat) - C:\Program Files\Mozilla Firefox\browser\features\[removed] [2020-03-10] [not signed] FF HKLM\...\Mozilla Firefox 74.0\Extensions: [Components] - C:\Program Files\Mozilla Firefox\components => not found FF HKLM\...\Mozilla Firefox 74.0\Extensions: [Plugins] - C:\Program Files\Mozilla Firefox\plugins => not found FF HKU\S-1-5-21-2825346925-3975081358-1914956935-1002\...\Mozilla Firefox 74.0\Extensions: [Components] - C:\Program Files\Mozilla Firefox\components => not found FF HKU\S-1-5-21-2825346925-3975081358-1914956935-1002\...\Mozilla Firefox 74.0\Extensions: [Plugins] - C:\Program Files\Mozilla Firefox\plugins => not found FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2020-01-28] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @Citrix.com/npican -> C:\Program Files (x86)\Citrix\ICA Client\npicaN.dll [2018-08-20] (Citrix Systems, Inc. -> Citrix Systems, Inc.) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2020-01-28] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2020-01-28] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-03-05] (Adobe Inc. -> Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-2825346925-3975081358-1914956935-1002: SkypeForBusinessPlugin-16.2 -> C:\Users\misfi\AppData\Local\Microsoft\SkypeForBusinessPlugin\16.2.0.511\npGatewayNpapi.dll [2019-08-03] (Microsoft Corporation -> Microsoft Corporation) FF Plugin HKU\S-1-5-21-2825346925-3975081358-1914956935-1002: SkypeForBusinessPlugin64-16.2 -> C:\Users\misfi\AppData\Local\Microsoft\SkypeForBusinessPlugin\16.2.0.511\npGatewayNpapi-x64.dll [2019-08-03] (Microsoft Corporation -> Microsoft Corporation) StartMenuInternet: Firefox-308046B0AF4A39CB - "C:\Program Files\Mozilla Firefox\firefox.exe" FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\channel-prefs.js [2019-08-13] Chrome: ======= CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] ==================== Services (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11642744 2019-10-25] (Microsoft Corporation -> Microsoft Corporation) R2 CorsairService; C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Corsair.Service.exe [53288 2019-09-30] (Corsair Memory, Inc. -> Corsair Memory, Inc.) S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [803440 2019-11-12] (EasyAntiCheat Oy -> EasyAntiCheat Ltd) R2 GamingServices; C:\Program Files\WindowsApps\Microsoft.GamingServices_1.39.6001.0_x64__8wekyb3d8bbwe\GamingServices.exe [21640 2020-03-26] (Microsoft Corporation -> Microsoft Corporation) R2 GamingServicesNet; C:\Program Files\WindowsApps\Microsoft.GamingServices_1.39.6001.0_x64__8wekyb3d8bbwe\GamingServicesNet.exe [21640 2020-03-26] (Microsoft Corporation -> Microsoft Corporation) R2 ibtsiva; C:\WINDOWS\system32\ibtsiva.exe [529912 2019-05-15] (Intel(R) Wireless Connectivity Solutions -> Intel Corporation) R2 LGHUBUpdaterService; C:\Program Files\LGHUB/lghub_updater.exe [9847944 2020-01-31] (Logitech Inc -> Logitech, Inc.) S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [6933272 2020-03-21] (Malwarebytes Inc -> Malwarebytes) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268968 2018-02-07] (Intel(R) Wireless Connectivity Solutions -> ) R2 nlsvc; C:\Program Files\Locktime Software\NetLimiter 4\NLSvc.exe [309112 2020-01-17] (Locktime Software s.r.o. -> Locktime Software) R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [858480 2019-12-05] (NVIDIA Corporation -> NVIDIA Corporation) S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [858480 2019-12-05] (NVIDIA Corporation -> NVIDIA Corporation) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2495280 2020-03-16] (Electronic Arts, Inc. -> Electronic Arts) R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3445552 2020-03-16] (Electronic Arts, Inc. -> Electronic Arts) R2 RtkAudioUniversalService; C:\WINDOWS\System32\RtkAudUService64.exe [746440 2018-11-13] (Realtek Semiconductor Corp. -> Realtek Semiconductor) S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5930136 2020-03-25] (Microsoft Windows Publisher -> Microsoft Corporation) S3 ViGEmBusUpdater; C:\Program Files\Nefarius Software Solutions\ViGEm Bus Driver\ViGEmBusUpdater.exe [888344 2019-12-28] (Nefarius Software Solutions e.U. -> Nefarius Software Solutions e.U.) R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2003.8-0\NisSrv.exe [3294680 2020-03-24] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2003.8-0\MsMpEng.exe [103168 2020-03-24] (Microsoft Windows Publisher -> Microsoft Corporation) R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe [18264 2017-09-27] (Intel(R) Extreme Tuning Utility -> Intel(R) Corporation) R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3851432 2018-02-07] (Intel(R) Wireless Connectivity Solutions -> Intel® Corporation) R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000 ===================== Drivers (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.) S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [231936 2019-09-29] (Microsoft Corporation) [File not signed] R2 CorsairLLAccess3B84E98236B28D4E075D5737DF9F567A1FB76E8A; C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\CorsairLLAccess64.sys [20472 2019-09-23] (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.) R3 CorsairVBusDriver; C:\WINDOWS\System32\drivers\CorsairVBusDriver.sys [45968 2019-09-23] (Microsoft Windows Hardware Compatibility Publisher -> Corsair) R3 CorsairVHidDriver; C:\WINDOWS\System32\drivers\CorsairVHidDriver.sys [21904 2019-09-23] (Microsoft Windows Hardware Compatibility Publisher -> Corsair) R3 cpuz148; C:\WINDOWS\temp\cpuz148\cpuz148_x64.sys [44648 2020-04-01] (CPUID S.A.R.L.U. -> CPUID) R3 e1dexpress; C:\WINDOWS\System32\DriverStore\FileRepository\e1d65x64.inf_amd64_135962ae3158f28d\e1d65x64.sys [567880 2019-02-04] (Intel(R) INTELND1820 -> Intel Corporation) R3 gameflt; C:\WINDOWS\System32\DriverStore\FileRepository\gameflt.inf_amd64_1b1c9965dc1c6f0f\gameflt.sys [71000 2019-12-13] (Microsoft Windows -> Microsoft Corporation) R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [186360 2019-05-15] (Intel(R) Wireless Connectivity Solutions -> Intel Corporation) R2 iocbios2; C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [38424 2017-09-15] (Intel Corporation -> Intel Corporation) R2 LGHUBTemperatureService; C:\ProgramData\LGHUB\depots\35872\driver_cpu_temperature\logi_core_temp.sys [25448 2020-01-31] (Logitech Inc. -> Logitech) R3 logi_joy_bus_enum; C:\WINDOWS\system32\drivers\logi_joy_bus_enum.sys [38136 2019-09-13] (Logitech Inc -> Logitech) R3 logi_joy_vir_hid; C:\WINDOWS\system32\drivers\logi_joy_vir_hid.sys [20624 2019-09-13] (WDKTestCert sqa,131523902232810150 -> Logitech, Inc.) R3 logi_joy_xlcore; C:\WINDOWS\system32\drivers\logi_joy_xlcore.sys [66808 2019-09-13] (Logitech Inc -> Logitech) S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [20936 2020-03-21] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes) S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248968 2020-03-26] (Malwarebytes Inc -> Malwarebytes) R3 Netwtw04; C:\WINDOWS\System32\drivers\Netwtw04.sys [8614888 2018-01-17] (Intel(R) Wireless Connectivity Solutions -> Intel Corporation) R0 nldrv; C:\WINDOWS\System32\drivers\nldrv.sys [181976 2020-01-16] (Locktime Software s.r.o. -> Locktime Software) R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_63268710a2dc3648\nvlddmkm.sys [23439080 2020-03-18] (NVIDIA Corporation -> NVIDIA Corporation) S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30336 2019-12-07] (NVIDIA Corporation -> NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [69840 2019-04-17] (NVIDIA Corporation -> NVIDIA Corporation) R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [75600 2019-09-05] (NVIDIA Corporation -> NVIDIA Corporation) R3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [14024 2017-08-27] (MICRO-STAR INTERNATIONAL CO., LTD. -> ) R3 UcmCxUcsiNvppc; C:\WINDOWS\system32\DRIVERS\UcmCxUcsiNvppc.sys [715224 2019-09-05] (NVIDIA Corporation -> NVIDIA Corporation) R3 ViGEmBus; C:\WINDOWS\System32\drivers\ViGEmBus.sys [69168 2019-04-04] (Microsoft Windows Hardware Compatibility Publisher -> Benjamin Höglinger-Stelzer) S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [45960 2020-03-24] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [391392 2020-03-24] (Microsoft Windows -> Microsoft Corporation) R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [59104 2020-03-24] (Microsoft Windows -> Microsoft Corporation) R3 WinRing0_1_2_0; C:\Program Files (x86)\NZXT\CAM\OpenHardwareMonitorLib.sys [14544 2020-04-01] (Noriyuki MIYAZAKI -> OpenLibSys.org) R3 Xvdd; C:\WINDOWS\System32\DriverStore\FileRepository\xvdd.inf_amd64_5ef00c58b02692b7\xvdd.sys [492376 2020-02-21] (Microsoft Windows -> Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One month (created) =================== (If an entry is included in the fixlist, the file/folder will be moved.) 2020-04-01 16:17 - 2020-04-01 16:18 - 000007188 _____ C:\Users\misfi\Downloads\Fixlog.txt 2020-04-01 14:09 - 2020-04-01 14:09 - 000159377 _____ C:\Users\misfi\Documents\FRST.txt 2020-04-01 14:09 - 2020-04-01 14:09 - 000040937 _____ C:\Users\misfi\Documents\Addition.txt 2020-04-01 14:05 - 2020-04-01 16:25 - 000051355 _____ C:\Users\misfi\Downloads\FRST.txt 2020-04-01 14:05 - 2020-04-01 14:05 - 000000000 ____D C:\Users\misfi\Downloads\FRST-OlderVersion 2020-04-01 14:03 - 2020-04-01 14:03 - 000000000 ____D C:\Users\misfi\AppData\Local\VirtualStore 2020-03-30 21:29 - 2020-04-01 16:19 - 000000000 ____D C:\Users\misfi\Desktop\9343b833-e7af-42ea-8a61-31bc41eefe2b 2020-03-28 20:20 - 2020-03-28 20:20 - 000000000 ____D C:\Users\misfi\AppData\Local\PeerDistRepub 2020-03-27 22:35 - 2020-03-27 22:35 - 000000000 ____D C:\Users\misfi\ansel 2020-03-27 19:22 - 2020-03-30 21:25 - 000000000 ____D C:\Users\misfi\.Origin 2020-03-27 19:22 - 2020-03-27 19:22 - 000000000 ____D C:\Users\misfi\.QtWebEngineProcess 2020-03-27 10:27 - 2020-04-01 16:25 - 000000000 ____D C:\FRST 2020-03-27 10:26 - 2020-04-01 14:05 - 002280448 _____ (Farbar) C:\Users\misfi\Downloads\FRST64.exe 2020-03-26 16:36 - 2020-04-01 13:59 - 000000000 _____ C:\WINDOWS\system32\last.dump 2020-03-26 16:31 - 2020-04-01 15:39 - 000000000 ____D C:\Users\misfi\AppData\Local\Spotify 2020-03-26 16:31 - 2020-03-26 16:31 - 000001843 _____ C:\Users\misfi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2020-03-26 16:25 - 2020-03-26 16:25 - 000892416 _____ (Spotify Ltd) C:\Users\misfi\Downloads\SpotifySetup.exe 2020-03-26 15:38 - 2020-03-26 15:38 - 000000000 ____D C:\Program Files\DIFX 2020-03-26 12:50 - 2020-03-26 12:50 - 000248968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys 2020-03-26 12:50 - 2020-03-26 12:50 - 000214496 ____N (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys 2020-03-25 20:31 - 2020-03-25 20:31 - 003153872 _____ (philandro Software GmbH) C:\Users\misfi\Downloads\AnyDesk.exe 2020-03-25 18:16 - 2020-03-25 18:16 - 000077182 _____ C:\Users\misfi\Downloads\Apex Legends Updated AHK (Bypass)_[unknowncheats.me]_(1).rar 2020-03-25 18:16 - 2020-03-25 18:16 - 000000000 ____D C:\Users\misfi\Documents\Apex Legends Updated AHK (Bypass)_[unknowncheats.me]_(1) 2020-03-25 18:16 - 2019-03-24 18:49 - 000000000 ____D C:\Users\misfi\Downloads\Source Code No Recoil 2020-03-25 18:14 - 2020-03-25 18:14 - 000000000 ____D C:\Users\misfi\Downloads\Apex Legends Updated AHK (Bypass)_[unknowncheats.me]_ 2020-03-25 18:13 - 2020-03-25 18:13 - 000077182 _____ C:\Users\misfi\Downloads\Apex Legends Updated AHK (Bypass)_[unknowncheats.me]_.rar 2020-03-25 18:09 - 2020-03-25 18:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoHotkey 2020-03-25 18:09 - 2020-03-25 18:09 - 000000000 ____D C:\Program Files\AutoHotkey 2020-03-25 16:09 - 2020-03-25 16:09 - 001610240 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll 2020-03-25 16:09 - 2020-03-25 16:09 - 000321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbadmin.exe 2020-03-25 16:09 - 2020-03-25 16:09 - 000179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.XamlHost.dll 2020-03-25 16:09 - 2020-03-25 16:09 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.XamlHost.dll 2020-03-25 16:08 - 2020-03-25 16:09 - 025444352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 022636544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 019813376 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 018027008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 017790464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 014818816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 009930552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2020-03-25 16:08 - 2020-03-25 16:08 - 008013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 007849216 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 007604584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 007017472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 006525424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 006168064 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 004563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe 2020-03-25 16:08 - 2020-03-25 16:08 - 004129416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 003977216 _____ (Microsoft Corporation) C:\WINDOWS\system32\tellib.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 003799552 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 003753472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 003742544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneCoreUAPCommonProxyStub.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 003728384 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2020-03-25 16:08 - 2020-03-25 16:08 - 003708928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 003586872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2020-03-25 16:08 - 2020-03-25 16:08 - 003547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 003109376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 002986808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2020-03-25 16:08 - 2020-03-25 16:08 - 002871608 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe 2020-03-25 16:08 - 2020-03-25 16:08 - 002800128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2020-03-25 16:08 - 2020-03-25 16:08 - 002768440 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 002494744 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 002369576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.AppAgent.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 002188600 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 002143232 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcDesktopMonSvc.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 002126144 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 002114560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 002087168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 001960448 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 001945600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 001942528 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 001918976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 001835008 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 001783296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 001762816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 001757096 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2020-03-25 16:08 - 2020-03-25 16:08 - 001726264 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 001719808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 001659408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft.Uev.AppAgent.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 001587712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 001545216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe 2020-03-25 16:08 - 2020-03-25 16:08 - 001512832 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2020-03-25 16:08 - 2020-03-25 16:08 - 001497600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 001495864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 001480192 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocoreworker.exe 2020-03-25 16:08 - 2020-03-25 16:08 - 001477112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 001427456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 001413704 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 001397560 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2020-03-25 16:08 - 2020-03-25 16:08 - 001386296 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 001378528 _____ (Microsoft Corporation) C:\WINDOWS\system32\webservices.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 001368576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 001368576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 001300280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys 2020-03-25 16:08 - 2020-03-25 16:08 - 001264640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe 2020-03-25 16:08 - 2020-03-25 16:08 - 001263856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe 2020-03-25 16:08 - 2020-03-25 16:08 - 001261808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 001257472 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 001245184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 001243648 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 001136128 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 001127424 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcRefreshTask.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 001083904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 001081856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 001077264 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2020-03-25 16:08 - 2020-03-25 16:08 - 001071616 _____ (Microsoft Corporation) C:\WINDOWS\system32\BTAGService.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 001055376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 001011200 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000993280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000980832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webservices.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000974336 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000924672 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000915192 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000912896 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000893952 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000892416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000879616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Service.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000874512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2020-03-25 16:08 - 2020-03-25 16:08 - 000865280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000865280 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000840704 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Language.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000811320 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000785920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000759272 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskschd.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000747320 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000744960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.Office2013CustomActions.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000729600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FlightSettings.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000722072 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BTAGService.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000684560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000673704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000665088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000654912 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000647680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000638480 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000637240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys 2020-03-25 16:08 - 2020-03-25 16:08 - 000632832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000628408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000618296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2020-03-25 16:08 - 2020-03-25 16:08 - 000604984 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000589384 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2020-03-25 16:08 - 2020-03-25 16:08 - 000555008 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl 2020-03-25 16:08 - 2020-03-25 16:08 - 000550400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2020-03-25 16:08 - 2020-03-25 16:08 - 000538160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000529408 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe 2020-03-25 16:08 - 2020-03-25 16:08 - 000524264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Enumeration.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000516096 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe 2020-03-25 16:08 - 2020-03-25 16:08 - 000515600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000514560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft.Uev.Office2013CustomActions.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000513576 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000507152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskschd.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000498688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000491008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000487784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000477496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS 2020-03-25 16:08 - 2020-03-25 16:08 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000465208 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000459688 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe 2020-03-25 16:08 - 2020-03-25 16:08 - 000456504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys 2020-03-25 16:08 - 2020-03-25 16:08 - 000456192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl 2020-03-25 16:08 - 2020-03-25 16:08 - 000452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe 2020-03-25 16:08 - 2020-03-25 16:08 - 000441144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2020-03-25 16:08 - 2020-03-25 16:08 - 000437560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys 2020-03-25 16:08 - 2020-03-25 16:08 - 000416016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000415760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000410112 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000406480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Enumeration.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\es.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000381440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncbservice.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000355328 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcApi.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\es.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe 2020-03-25 16:08 - 2020-03-25 16:08 - 000324408 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys 2020-03-25 16:08 - 2020-03-25 16:08 - 000323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcommdlg.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000297272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys 2020-03-25 16:08 - 2020-03-25 16:08 - 000278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcTok.exe 2020-03-25 16:08 - 2020-03-25 16:08 - 000277864 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe 2020-03-25 16:08 - 2020-03-25 16:08 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000259776 _____ (Microsoft Corporation) C:\WINDOWS\system32\logoncli.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateDeploymentProvider.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000251704 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000251392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys 2020-03-25 16:08 - 2020-03-25 16:08 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasrad.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000231912 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\IndexedDbLegacy.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000211256 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageComponentsInstaller.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Win32CompatibilityAppraiserCSP.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000193848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys 2020-03-25 16:08 - 2020-03-25 16:08 - 000190048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logoncli.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000187392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasrad.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000185952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000178192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys 2020-03-25 16:08 - 2020-03-25 16:08 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IndexedDbLegacy.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatialAudioLicenseSrv.exe 2020-03-25 16:08 - 2020-03-25 16:08 - 000164368 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe 2020-03-25 16:08 - 2020-03-25 16:08 - 000163840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000152408 _____ (Microsoft Corporation) C:\WINDOWS\system32\KerbClientShared.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000151352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\scmbus.sys 2020-03-25 16:08 - 2020-03-25 16:08 - 000147696 _____ (Microsoft Corporation) C:\WINDOWS\system32\smss.exe 2020-03-25 16:08 - 2020-03-25 16:08 - 000142544 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingUI.exe 2020-03-25 16:08 - 2020-03-25 16:08 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\slc.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000127064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000123952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KerbClientShared.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slc.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000115120 _____ (Microsoft Corporation) C:\WINDOWS\system32\phoneactivate.exe 2020-03-25 16:08 - 2020-03-25 16:08 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000102216 _____ (Microsoft Corporation) C:\WINDOWS\system32\changepk.exe 2020-03-25 16:08 - 2020-03-25 16:08 - 000101888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppc.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Custom.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000093712 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000089912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys 2020-03-25 16:08 - 2020-03-25 16:08 - 000089536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000088352 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasacct.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000084280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys 2020-03-25 16:08 - 2020-03-25 16:08 - 000076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\autopilot.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000071680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Custom.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000071480 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.EnrollmentStatusTracking.ConfigProvider.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\keepaliveprovider.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000066624 _____ (Microsoft Corporation) C:\WINDOWS\system32\iumcrypt.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasacct.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcadm.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbauth.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudNotifications.exe 2020-03-25 16:08 - 2020-03-25 16:08 - 000059192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storufs.sys 2020-03-25 16:08 - 2020-03-25 16:08 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\audioresourceregistrar.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcalua.exe 2020-03-25 16:08 - 2020-03-25 16:08 - 000050544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudNotifications.exe 2020-03-25 16:08 - 2020-03-25 16:08 - 000050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\iaspolcy.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbauth.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000047208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2020-03-25 16:08 - 2020-03-25 16:08 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.Office2010CustomActions.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.Common.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpgradeResultsUI.exe 2020-03-25 16:08 - 2020-03-25 16:08 - 000040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iaspolcy.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcProxyStubs.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerCookies.exe 2020-03-25 16:08 - 2020-03-25 16:08 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft.Uev.Office2010CustomActions.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000036152 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe 2020-03-25 16:08 - 2020-03-25 16:08 - 000033080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hwpolicy.sys 2020-03-25 16:08 - 2020-03-25 16:08 - 000031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wksprtPS.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ias.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\KNetPwrDepBroker.sys 2020-03-25 16:08 - 2020-03-25 16:08 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmintegrator.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerCookies.exe 2020-03-25 16:08 - 2020-03-25 16:08 - 000028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\flpydisk.sys 2020-03-25 16:08 - 2020-03-25 16:08 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ias.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Custom.ps.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\slcext.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\sbservicetrigger.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000021520 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slcext.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sfloppy.sys 2020-03-25 16:08 - 2020-03-25 16:08 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wksprtPS.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Custom.ps.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaevts.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMAlertListener.ProxyStub.dll 2020-03-25 16:08 - 2020-03-25 16:08 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DMAlertListener.ProxyStub.dll 2020-03-23 16:34 - 2020-03-18 23:11 - 001729232 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe 2020-03-23 16:34 - 2020-03-18 23:11 - 001729232 _____ C:\WINDOWS\system32\vulkaninfo.exe 2020-03-23 16:34 - 2020-03-18 23:11 - 001329360 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe 2020-03-23 16:34 - 2020-03-18 23:11 - 001329360 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe 2020-03-23 16:34 - 2020-03-18 23:11 - 001078992 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll 2020-03-23 16:34 - 2020-03-18 23:11 - 001078992 _____ C:\WINDOWS\system32\vulkan-1.dll 2020-03-23 16:34 - 2020-03-18 23:11 - 000937680 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll 2020-03-23 16:34 - 2020-03-18 23:11 - 000937680 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll 2020-03-23 16:34 - 2020-03-18 23:11 - 000450464 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll 2020-03-23 16:34 - 2020-03-18 23:11 - 000348048 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll 2020-03-23 16:34 - 2020-03-18 23:10 - 011945072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll 2020-03-23 16:34 - 2020-03-18 23:10 - 010285680 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll 2020-03-23 16:34 - 2020-03-18 23:10 - 000817056 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmcumd.dll 2020-03-23 16:34 - 2020-03-18 23:10 - 000676448 _____ C:\WINDOWS\system32\nvofapi64.dll 2020-03-23 16:34 - 2020-03-18 23:10 - 000544352 _____ C:\WINDOWS\SysWOW64\nvofapi.dll 2020-03-23 16:34 - 2020-03-18 23:09 - 017600912 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2020-03-23 16:34 - 2020-03-18 23:09 - 015157664 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2020-03-23 16:34 - 2020-03-18 23:09 - 005856656 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2020-03-23 16:34 - 2020-03-18 23:09 - 005158304 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2020-03-23 16:34 - 2020-03-18 23:09 - 002072992 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2020-03-23 16:34 - 2020-03-18 23:09 - 001723280 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6444575.dll 2020-03-23 16:34 - 2020-03-18 23:09 - 001564904 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2020-03-23 16:34 - 2020-03-18 23:09 - 001483168 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6444575.dll 2020-03-23 16:34 - 2020-03-18 23:09 - 001480936 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2020-03-23 16:34 - 2020-03-18 23:09 - 001351568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll 2020-03-23 16:34 - 2020-03-18 23:09 - 001142176 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2020-03-23 16:34 - 2020-03-18 23:09 - 001049488 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll 2020-03-23 16:34 - 2020-03-18 23:09 - 000811424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll 2020-03-23 16:34 - 2020-03-18 23:09 - 000679840 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll 2020-03-23 16:34 - 2020-03-18 23:09 - 000546720 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll 2020-03-23 16:34 - 2020-03-18 01:51 - 000039824 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll 2020-03-23 15:59 - 2020-03-23 15:59 - 000075144 _____ C:\Users\misfi\Documents\SmartFile - Confirmation UNEMPLOYMENT.html 2020-03-23 15:59 - 2020-03-23 15:59 - 000000000 ____D C:\Users\misfi\Documents\SmartFile - Confirmation UNEMPLOYMENT_files 2020-03-23 11:28 - 2020-03-23 11:28 - 000028966 _____ C:\Users\misfi\Documents\SLC University of Utah-Mayo Clinic User Training 3-3-2020.xlsx 2020-03-23 10:41 - 2020-03-23 10:44 - 000028926 _____ C:\Users\misfi\Documents\Stanford System Teardown Expense 2-26-2020.xlsx 2020-03-21 14:37 - 2020-04-01 13:24 - 000002590 _____ C:\WINDOWS\system32\Tasks\CreateExplorerShellUnelevatedTask 2020-03-20 19:34 - 2020-03-25 16:49 - 000000000 ____D C:\Users\misfi\AppData\Local\Warframe 2020-03-20 19:11 - 2020-03-20 19:11 - 000000220 _____ C:\Users\misfi\Desktop\Warframe.url 2020-03-20 09:16 - 2020-03-20 10:19 - 000000000 ____D C:\Users\misfi\AppData\Local\Citrix 2020-03-20 09:16 - 2020-03-20 09:34 - 000000000 ____D C:\Users\misfi\AppData\Roaming\ICAClient 2020-03-20 09:16 - 2020-03-20 09:16 - 000001507 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Citrix Receiver.lnk 2020-03-20 09:16 - 2020-03-20 09:16 - 000000000 ____D C:\ProgramData\Citrix 2020-03-20 09:16 - 2020-03-20 09:16 - 000000000 ____D C:\Program Files (x86)\Citrix 2020-03-20 09:11 - 2020-03-20 09:11 - 026985448 _____ (TeamViewer Germany GmbH) C:\Users\misfi\Downloads\TeamViewer_Setup(1).exe 2020-03-19 15:34 - 2020-03-21 09:34 - 000000000 ____D C:\Users\misfi\AppData\Local\Ubisoft Game Launcher 2020-03-19 15:34 - 2020-03-19 15:34 - 000000000 ____D C:\ProgramData\Ubisoft 2020-03-18 14:46 - 2020-03-18 16:00 - 000000000 ____D C:\Users\misfi\AppData\Local\EpicGamesLauncher 2020-03-18 14:46 - 2020-03-18 14:46 - 000000000 ____D C:\Users\misfi\AppData\Local\UnrealEngineLauncher 2020-03-18 14:45 - 2020-03-18 14:46 - 000000000 ____D C:\ProgramData\Epic 2020-03-18 14:45 - 2020-03-18 14:45 - 000000921 _____ C:\Users\Public\Desktop\Epic Games Launcher.lnk 2020-03-18 14:45 - 2020-03-18 14:45 - 000000921 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk 2020-03-18 14:45 - 2020-03-18 14:45 - 000000921 _____ C:\ProgramData\Desktop\Epic Games Launcher.lnk 2020-03-18 11:54 - 2020-03-28 00:41 - 000000000 ____D C:\Users\misfi\Documents\Shadow of the Tomb Raider 2020-03-18 11:54 - 2020-03-18 11:54 - 000000000 ____D C:\Users\misfi\AppData\Roaming\Eidos Montreal 2020-03-17 13:04 - 2020-03-17 13:04 - 000067569 _____ C:\Users\misfi\Downloads\7forallmankind_label_1Z59WA999091878333(1).pdf 2020-03-16 15:57 - 2020-03-16 15:57 - 019850240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 011607552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 009711616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 007905784 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 007755776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 007263992 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 006084344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 005911040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 005764664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 004898144 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmpltfm.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 004855808 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 004580352 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 003860832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmpltfm.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 003819520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 003488768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 003263488 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 002956688 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 002870272 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 002715648 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2020-03-16 15:57 - 2020-03-16 15:57 - 002698040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2020-03-16 15:57 - 2020-03-16 15:57 - 002561536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 002305536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 002289152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 002224952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 002180408 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 002072664 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 002031104 _____ C:\WINDOWS\system32\rdpnano.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 001999952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 001867816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 001835128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 001770552 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 001764336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 001751040 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 001697792 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 001665416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 001664896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 001657120 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 001647072 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 001581056 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 001555904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 001490640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 001484600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 001458688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 001417976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 001413632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 001354080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmpal.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 001284096 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 001282944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 001214976 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 001153024 _____ (Microsoft Corporation) C:\WINDOWS\system32\windowsperformancerecordercontrol.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 001149712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe 2020-03-16 15:57 - 2020-03-16 15:57 - 001108040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 001098720 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 001097728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 001091936 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmcodecs.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 001088000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 001032544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ortcengine.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000980320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmpal.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000952416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000915296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmcodecs.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000898048 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdmDiagnostics.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000895488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000883712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000877232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windowsperformancerecordercontrol.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000851968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe 2020-03-16 15:57 - 2020-03-16 15:57 - 000835584 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000772096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2020-03-16 15:57 - 2020-03-16 15:57 - 000757632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000739328 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscsvc.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000734720 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpksetup.exe 2020-03-16 15:57 - 2020-03-16 15:57 - 000732000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ortcengine.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000705536 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000680448 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000680184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000670720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe 2020-03-16 15:57 - 2020-03-16 15:57 - 000669496 _____ (Microsoft Corporation) C:\WINDOWS\system32\computecore.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000668672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsecedit.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000636848 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxs.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000613888 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000595968 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe 2020-03-16 15:57 - 2020-03-16 15:57 - 000562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000561464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys 2020-03-16 15:57 - 2020-03-16 15:57 - 000551824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxs.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000535552 _____ (Microsoft Corporation) C:\WINDOWS\system32\usosvc.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000532480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000525312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsecedit.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000510768 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe 2020-03-16 15:57 - 2020-03-16 15:57 - 000455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\upnphost.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000444416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe 2020-03-16 15:57 - 2020-03-16 15:57 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000380416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000379904 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000338432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe 2020-03-16 15:57 - 2020-03-16 15:57 - 000329216 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiagnosticLogCSP.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000328192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\upnphost.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacEncoder.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000283136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000279040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000277504 _____ (Microsoft Corporation) C:\WINDOWS\system32\scecli.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\netman.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000248064 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe 2020-03-16 15:57 - 2020-03-16 15:57 - 000239616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacEncoder.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000233472 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000221200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe 2020-03-16 15:57 - 2020-03-16 15:57 - 000214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scecli.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000211968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFilterHost.exe 2020-03-16 15:57 - 2020-03-16 15:57 - 000206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndiswan.sys 2020-03-16 15:57 - 2020-03-16 15:57 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000199480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe 2020-03-16 15:57 - 2020-03-16 15:57 - 000193592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngOnline.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000165504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcmnutils.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAppInstaller.exe 2020-03-16 15:57 - 2020-03-16 15:57 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000146712 _____ (Microsoft Corporation) C:\WINDOWS\system32\profext.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000141824 _____ (Microsoft Corporation) C:\WINDOWS\system32\provpackageapidll.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceMetadataRetrievalClient.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000131896 _____ (Microsoft Corporation) C:\WINDOWS\system32\DTUHandler.exe 2020-03-16 15:57 - 2020-03-16 15:57 - 000130112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmcmnutils.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssitlb.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000120560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\profext.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000114176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys 2020-03-16 15:57 - 2020-03-16 15:57 - 000113152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssitlb.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AxInstSv.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFolders.exe 2020-03-16 15:57 - 2020-03-16 15:57 - 000102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe 2020-03-16 15:57 - 2020-03-16 15:57 - 000084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterpriseresourcemanager.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvSysprep.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\CustomInstallExec.exe 2020-03-16 15:57 - 2020-03-16 15:57 - 000071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpremove.exe 2020-03-16 15:57 - 2020-03-16 15:57 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\udhisapi.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\enterpriseresourcemanager.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssprxy.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AxInstUI.exe 2020-03-16 15:57 - 2020-03-16 15:57 - 000058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\udhisapi.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000056672 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmmvrortc.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000055376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmmvrortc.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscntrs.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000042296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe 2020-03-16 15:57 - 2020-03-16 15:57 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\upnpcont.exe 2020-03-16 15:57 - 2020-03-16 15:57 - 000038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxstrace.exe 2020-03-16 15:57 - 2020-03-16 15:57 - 000035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\upnpcont.exe 2020-03-16 15:57 - 2020-03-16 15:57 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxstrace.exe 2020-03-16 15:57 - 2020-03-16 15:57 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmproxy.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimsg.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimsg.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000019768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.exe 2020-03-16 15:57 - 2020-03-16 15:57 - 000017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmsprep.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\MUILanguageCleanup.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\LangCleanupSysprepAction.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpksetupproxyserv.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimg32.dll 2020-03-16 15:57 - 2020-03-16 15:57 - 000007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimg32.dll 2020-03-16 15:53 - 2020-02-10 22:48 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe 2020-03-16 15:53 - 2020-02-10 22:37 - 000492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe 2020-03-11 20:18 - 2020-03-11 20:18 - 000109560 _____ C:\Users\misfi\Downloads\TQ03565030-1, Kameron Clayton, Massachusetts Eye & Ear Infirmary.pdf 2020-03-11 13:56 - 2020-03-11 13:56 - 000209883 _____ C:\Users\misfi\Downloads\THO-RMA036615_return label.pdf 2020-03-10 10:47 - 2020-03-11 11:03 - 000000000 ____D C:\Program Files\Mozilla Firefox 2020-03-06 20:10 - 2020-03-06 20:10 - 025900544 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 007259648 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 006436352 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 006285312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 005112832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 005040640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 004538880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 004348408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 004140544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 004048896 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 003971808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2020-03-06 20:10 - 2020-03-06 20:10 - 003371720 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 003243296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 002875904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 002773568 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2020-03-06 20:10 - 2020-03-06 20:10 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2020-03-06 20:10 - 2020-03-06 20:10 - 002740736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\directml.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 002584008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 002315680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 002307584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 002259872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 002021888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 001985104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 001972536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys 2020-03-06 20:10 - 2020-03-06 20:10 - 001854976 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 001823232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 001743888 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 001729024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 001688064 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 001684992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 001540096 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 001482040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys 2020-03-06 20:10 - 2020-03-06 20:10 - 001412096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 001396152 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 001394168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 001366128 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2020-03-06 20:10 - 2020-03-06 20:10 - 001319936 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 001283600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi 2020-03-06 20:10 - 2020-03-06 20:10 - 001273856 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 001264128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 001260544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpsharercom.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 001218632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe 2020-03-06 20:10 - 2020-03-06 20:10 - 001190912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Graphics.Display.DisplayEnhancementService.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 001182448 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2020-03-06 20:10 - 2020-03-06 20:10 - 001080832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 001071184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Taskmgr.exe 2020-03-06 20:10 - 2020-03-06 20:10 - 001031680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 001012792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 001007672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 001000960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\refsutil.exe 2020-03-06 20:10 - 2020-03-06 20:10 - 000983896 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000935040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Taskmgr.exe 2020-03-06 20:10 - 2020-03-06 20:10 - 000929144 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe 2020-03-06 20:10 - 2020-03-06 20:10 - 000923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000892696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000845312 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2020-03-06 20:10 - 2020-03-06 20:10 - 000843776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000796904 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000783480 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe 2020-03-06 20:10 - 2020-03-06 20:10 - 000776488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000769552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000748032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000741392 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000710144 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbc32.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000691712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000661816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys 2020-03-06 20:10 - 2020-03-06 20:10 - 000654336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000627216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000605896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sechost.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000604160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbc32.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000599552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000592896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000576512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\csc.sys 2020-03-06 20:10 - 2020-03-06 20:10 - 000568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.UXRes.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000562688 _____ (Microsoft Corporation) C:\WINDOWS\system32\iprtrmgr.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000526848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidprov.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000522384 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe 2020-03-06 20:10 - 2020-03-06 20:10 - 000518656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000516096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iprtrmgr.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprdim.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000489984 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000478792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sechost.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\slui.exe 2020-03-06 20:10 - 2020-03-06 20:10 - 000457216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cldflt.sys 2020-03-06 20:10 - 2020-03-06 20:10 - 000448000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000435200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv 2020-03-06 20:10 - 2020-03-06 20:10 - 000403456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprdim.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000382976 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000358912 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmsvc.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000355840 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsDocumentTargetPrint.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000353960 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000327680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000320312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000309248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys 2020-03-06 20:10 - 2020-03-06 20:10 - 000308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000307712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000307712 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcomapi.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000291840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys 2020-03-06 20:10 - 2020-03-06 20:10 - 000287232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcomapi.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000260920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys 2020-03-06 20:10 - 2020-03-06 20:10 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000251392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsDocumentTargetPrint.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmWmiPl.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000234984 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ddpchunk.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000213984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditionUpgradeManagerObj.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\notepad.exe 2020-03-06 20:10 - 2020-03-06 20:10 - 000181248 _____ (Microsoft Corporation) C:\WINDOWS\notepad.exe 2020-03-06 20:10 - 2020-03-06 20:10 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallServiceTasks.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtm.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000168448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditionUpgradeHelper.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000166400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MicrosoftAccountTokenProvider.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000164776 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmapi.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtm.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\notepad.exe 2020-03-06 20:10 - 2020-03-06 20:10 - 000146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceUpdateAgent.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000145208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CscMig.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmAuto.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnpclean.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000136328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\omadmapi.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\NdisImPlatform.sys 2020-03-06 20:10 - 2020-03-06 20:10 - 000133944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000133256 _____ (Microsoft Corporation) C:\WINDOWS\system32\profapi.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000120048 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpenWith.exe 2020-03-06 20:10 - 2020-03-06 20:10 - 000118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Taskbar.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000107832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000107520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GraphicsCapture.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000105832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpenWith.exe 2020-03-06 20:10 - 2020-03-06 20:10 - 000102760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\profapi.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000098104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\crashdmp.sys 2020-03-06 20:10 - 2020-03-06 20:10 - 000097080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseDesktopAppMgmtCSP.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000089616 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceReactivation.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3api.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3msm.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000074752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000068408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceReactivation.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManMigrationPlugin.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iemigplugin.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000063288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthHost.exe 2020-03-06 20:10 - 2020-03-06 20:10 - 000061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmRes.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmapi.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe 2020-03-06 20:10 - 2020-03-06 20:10 - 000042336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbs.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afunix.sys 2020-03-06 20:10 - 2020-03-06 20:10 - 000037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmtask.exe 2020-03-06 20:10 - 2020-03-06 20:10 - 000037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsmprovhost.exe 2020-03-06 20:10 - 2020-03-06 20:10 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe 2020-03-06 20:10 - 2020-03-06 20:10 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe 2020-03-06 20:10 - 2020-03-06 20:10 - 000032056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys 2020-03-06 20:10 - 2020-03-06 20:10 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Drivers\afunix.sys 2020-03-06 20:10 - 2020-03-06 20:10 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmAgent.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wci.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\msauserext.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msauserext.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\pacjsworker.exe 2020-03-06 20:10 - 2020-03-06 20:10 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsmplpxy.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchTM.exe 2020-03-06 20:10 - 2020-03-06 20:10 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iprtprio.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchTM.exe 2020-03-06 20:10 - 2020-03-06 20:10 - 000009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iprtprio.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCertResources.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tier2punctuations.dll 2020-03-06 20:10 - 2020-03-06 20:10 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin 2020-03-06 20:10 - 2020-03-06 20:10 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin 2020-03-06 20:10 - 2020-03-06 20:10 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin 2020-03-06 20:10 - 2020-03-06 20:10 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin 2020-03-06 20:10 - 2020-03-06 20:10 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin 2020-03-06 20:10 - 2020-03-06 20:10 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin 2020-03-06 20:10 - 2020-03-06 20:10 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin 2020-03-06 20:10 - 2020-03-06 20:10 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin 2020-03-06 20:10 - 2020-03-06 20:10 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin 2020-03-06 20:10 - 2020-03-06 20:10 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin 2020-03-06 20:10 - 2020-03-06 20:10 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin 2020-03-06 20:10 - 2020-03-06 20:10 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin 2020-03-06 20:09 - 2020-03-06 20:10 - 000201744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys 2020-03-06 20:09 - 2020-03-06 20:09 - 004622280 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2020-03-06 20:09 - 2020-03-06 20:09 - 004471296 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 003260928 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 003143168 _____ (Microsoft Corporation) C:\WINDOWS\system32\directml.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 002808832 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 002522112 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 002474496 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 002453504 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 002157056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 001885184 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 001609216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 001481216 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpsharercom.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 001428992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys 2020-03-06 20:09 - 2020-03-06 20:09 - 001180160 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 001092096 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 001057792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 001027000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000945384 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000916480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000914944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000863232 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000833616 _____ (Microsoft Corporation) C:\WINDOWS\system32\pkeyhelper.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000802304 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000782848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000749568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000649728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidprov.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000642216 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000540672 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv 2020-03-06 20:09 - 2020-03-06 20:09 - 000531768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS 2020-03-06 20:09 - 2020-03-06 20:09 - 000433152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountExtension.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000429880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys 2020-03-06 20:09 - 2020-03-06 20:09 - 000355000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys 2020-03-06 20:09 - 2020-03-06 20:09 - 000337920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Acx01000.sys 2020-03-06 20:09 - 2020-03-06 20:09 - 000291328 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceDirectoryClient.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmWmiPl.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountCloudAP.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3svc.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnservice.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000254776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mssecflt.sys 2020-03-06 20:09 - 2020-03-06 20:09 - 000250896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys 2020-03-06 20:09 - 2020-03-06 20:09 - 000239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsbas.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\TetheringMgr.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallServiceTasks.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountTokenProvider.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000224056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelppm.sys 2020-03-06 20:09 - 2020-03-06 20:09 - 000222520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ataport.sys 2020-03-06 20:09 - 2020-03-06 20:09 - 000208696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\processr.sys 2020-03-06 20:09 - 2020-03-06 20:09 - 000201528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdppm.sys 2020-03-06 20:09 - 2020-03-06 20:09 - 000199992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdk8.sys 2020-03-06 20:09 - 2020-03-06 20:09 - 000183608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys 2020-03-06 20:09 - 2020-03-06 20:09 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000180232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys 2020-03-06 20:09 - 2020-03-06 20:09 - 000174592 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmAuto.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000174392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys 2020-03-06 20:09 - 2020-03-06 20:09 - 000151568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbus.sys 2020-03-06 20:09 - 2020-03-06 20:09 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\GraphicsCapture.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000141840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys 2020-03-06 20:09 - 2020-03-06 20:09 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\TelephonyInteractiveUser.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000128312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe 2020-03-06 20:09 - 2020-03-06 20:09 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys 2020-03-06 20:09 - 2020-03-06 20:09 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys 2020-03-06 20:09 - 2020-03-06 20:09 - 000103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3msm.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssecuser.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS 2020-03-06 20:09 - 2020-03-06 20:09 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3api.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManMigrationPlugin.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\monitor.sys 2020-03-06 20:09 - 2020-03-06 20:09 - 000067112 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsManagementServiceWinRt.ProxyStub.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000066336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlrmdr.exe 2020-03-06 20:09 - 2020-03-06 20:09 - 000061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmRes.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000056632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pciidex.sys 2020-03-06 20:09 - 2020-03-06 20:09 - 000054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAProfileNotificationHandler.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000048256 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbs.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsmprovhost.exe 2020-03-06 20:09 - 2020-03-06 20:09 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\cellulardatacapabilityhandler.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiredNetworkCSP.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManHTTPConfig.exe 2020-03-06 20:09 - 2020-03-06 20:09 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthMini.SYS 2020-03-06 20:09 - 2020-03-06 20:09 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmAgent.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\FaxPrinterInstaller.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000030008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\atapi.sys 2020-03-06 20:09 - 2020-03-06 20:09 - 000029712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tbs.sys 2020-03-06 20:09 - 2020-03-06 20:09 - 000028936 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmbuspipe.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\autopilotdiag.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000019984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelide.sys 2020-03-06 20:09 - 2020-03-06 20:09 - 000019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpnotify.exe 2020-03-06 20:09 - 2020-03-06 20:09 - 000016912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pciide.sys 2020-03-06 20:09 - 2020-03-06 20:09 - 000015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsmplpxy.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCertResources.dll 2020-03-06 20:09 - 2020-03-06 20:09 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\TelephonyInteractiveUserRes.dll 2020-03-04 15:16 - 2020-03-04 15:16 - 000018524 _____ C:\Users\misfi\Documents\combined_fractaline_1920x1080_updated_forskimpy_Trophy.txt 2020-03-04 12:33 - 2020-03-25 18:09 - 000000000 ____D C:\WINDOWS\ShellNew 2020-03-04 10:54 - 2020-03-04 10:54 - 000127378 _____ C:\Users\misfi\Documents\U of Utah- Mayo Clinic Utpal Saha Service Report 3-4-2020.pdf ==================== One month (modified) ================== (If an entry is included in the fixlist, the file/folder will be moved.) 2020-04-01 16:25 - 2019-09-29 21:00 - 000840852 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2020-04-01 16:25 - 2019-03-18 22:50 - 000000000 ____D C:\WINDOWS\INF 2020-04-01 16:24 - 2019-08-26 20:14 - 000000000 ____D C:\Program Files (x86)\Google 2020-04-01 16:21 - 2018-12-04 23:30 - 000000000 ____D C:\ProgramData\NVIDIA 2020-04-01 16:19 - 2019-09-29 20:56 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2020-04-01 16:19 - 2019-09-26 15:54 - 000000000 ____D C:\Users\misfi\AppData\Local\LGHUB 2020-04-01 16:19 - 2019-09-14 17:34 - 000000000 ____D C:\Program Files (x86)\MSI Afterburner 2020-04-01 16:19 - 2019-09-13 00:36 - 000000000 ____D C:\Users\misfi\AppData\Roaming\LGHUB 2020-04-01 16:19 - 2019-08-27 00:36 - 000308736 _____ C:\WINDOWS\SysWOW64\NVAPIHelper.dll 2020-04-01 16:19 - 2019-08-27 00:36 - 000000000 ____D C:\Users\misfi\AppData\Roaming\CAM 2020-04-01 16:19 - 2019-08-26 20:19 - 000000000 ____D C:\Users\misfi\AppData\Roaming\Discord 2020-04-01 16:19 - 2019-08-26 20:11 - 000000000 ____D C:\Users\misfi\AppData\LocalLow\Mozilla 2020-04-01 16:19 - 2019-03-18 22:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2020-04-01 16:18 - 2019-09-29 20:56 - 000003142 _____ C:\WINDOWS\system32\Tasks\MSIAfterburner 2020-04-01 16:18 - 2019-03-18 22:37 - 000524288 _____ C:\WINDOWS\system32\config\BBI 2020-04-01 16:18 - 2018-12-04 23:25 - 000000000 ____D C:\WINDOWS\system32\Temp 2020-04-01 16:07 - 2019-11-02 21:05 - 000000000 ____D C:\Users\misfi\AppData\Roaming\Spotify 2020-04-01 14:03 - 2019-03-18 22:52 - 000000000 ___HD C:\Program Files\WindowsApps 2020-04-01 14:03 - 2019-03-18 22:52 - 000000000 ____D C:\WINDOWS\AppReadiness 2020-04-01 14:00 - 2019-03-18 22:37 - 000032768 _____ C:\WINDOWS\system32\config\ELAM 2020-04-01 13:24 - 2019-09-29 20:56 - 000003482 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task 2020-04-01 13:24 - 2019-09-29 20:56 - 000003398 _____ C:\WINDOWS\system32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2020-04-01 13:24 - 2019-09-29 20:56 - 000003196 _____ C:\WINDOWS\system32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2020-04-01 13:24 - 2019-09-29 20:56 - 000003152 _____ C:\WINDOWS\system32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2020-04-01 13:24 - 2019-09-29 20:56 - 000002984 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2020-04-01 13:24 - 2019-09-29 20:56 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2020-04-01 13:24 - 2019-09-29 20:56 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2020-04-01 13:24 - 2019-09-29 20:56 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2020-04-01 13:24 - 2019-09-29 20:56 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2020-04-01 13:24 - 2019-09-29 20:56 - 000002914 _____ C:\WINDOWS\system32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2020-04-01 13:24 - 2019-09-29 20:56 - 000002894 _____ C:\WINDOWS\system32\Tasks\ViGEmBusUpdater 2020-04-01 13:24 - 2019-09-29 20:56 - 000002862 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2825346925-3975081358-1914956935-1002 2020-04-01 13:24 - 2019-09-29 20:56 - 000002856 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2825346925-3975081358-1914956935-500 2020-04-01 13:24 - 2019-09-29 20:56 - 000002744 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2020-04-01 13:24 - 2019-09-29 20:56 - 000002584 _____ C:\WINDOWS\system32\Tasks\CAM.Desktop 2020-03-31 23:55 - 2020-01-28 19:12 - 000000000 ____D C:\Users\misfi\AppData\Roaming\Origin 2020-03-31 19:17 - 2020-01-28 19:12 - 000000000 ____D C:\Users\misfi\AppData\Local\Origin 2020-03-31 19:17 - 2020-01-28 19:12 - 000000000 ____D C:\ProgramData\Origin 2020-03-30 23:10 - 2019-08-27 09:36 - 000000000 ____D C:\Users\misfi\AppData\Roaming\DS4Windows 2020-03-30 21:25 - 2020-02-09 15:42 - 000000000 __SHD C:\AI_RecycleBin 2020-03-30 21:25 - 2019-09-29 20:53 - 000000000 ____D C:\Users\misfi 2020-03-30 21:21 - 2019-08-26 23:22 - 000000000 ____D C:\Users\misfi\AppData\Local\NVIDIA Corporation 2020-03-30 21:21 - 2018-12-04 23:30 - 000000000 ____D C:\ProgramData\NVIDIA Corporation 2020-03-30 12:42 - 2019-09-29 20:51 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2020-03-28 00:41 - 2019-08-31 14:35 - 000000000 ____D C:\Users\misfi\AppData\Local\CrashDumps 2020-03-27 22:36 - 2019-08-27 00:39 - 000000000 ____D C:\Users\misfi\AppData\Local\D3DSCache 2020-03-27 19:22 - 2020-02-22 16:54 - 000000000 ____D C:\Program Files (x86)\Origin 2020-03-26 16:37 - 2019-12-13 12:22 - 000052360 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameplatformservices.dll 2020-03-26 16:37 - 2019-10-18 13:50 - 000031672 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamemodcontrol.exe 2020-03-26 16:37 - 2019-09-30 02:58 - 001340856 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgameruntime.dll 2020-03-26 16:37 - 2019-09-30 02:58 - 000149432 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameconfighelper.dll 2020-03-26 16:37 - 2019-09-30 02:58 - 000088504 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingservicesproxy.dll 2020-03-26 15:38 - 2019-08-26 23:22 - 000000000 ____D C:\ProgramData\Package Cache 2020-03-26 12:31 - 2019-08-26 23:22 - 000000000 ____D C:\Users\misfi\AppData\Local\NVIDIA 2020-03-25 16:14 - 2019-09-29 20:51 - 000440656 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2020-03-25 16:13 - 2019-03-19 00:23 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection 2020-03-25 16:13 - 2019-03-18 22:52 - 000000000 ____D C:\WINDOWS\SystemResources 2020-03-25 16:13 - 2019-03-18 22:52 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation 2020-03-25 16:13 - 2019-03-18 22:52 - 000000000 ____D C:\WINDOWS\ShellExperiences 2020-03-25 16:13 - 2019-03-18 22:52 - 000000000 ____D C:\WINDOWS\Provisioning 2020-03-25 16:13 - 2019-03-18 22:52 - 000000000 ____D C:\WINDOWS\PolicyDefinitions 2020-03-25 16:13 - 2019-03-18 22:52 - 000000000 ____D C:\WINDOWS\bcastdvr 2020-03-25 16:13 - 2019-03-18 22:37 - 000000000 ____D C:\WINDOWS\CbsTemp 2020-03-24 21:55 - 2018-12-04 23:26 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd 2020-03-23 16:35 - 2019-06-20 13:09 - 000000000 ____D C:\temp 2020-03-23 16:35 - 2019-03-18 22:52 - 000000000 ____D C:\WINDOWS\Help 2020-03-23 14:28 - 2019-08-27 22:09 - 000000000 ____D C:\Users\misfi\AppData\Local\Packages 2020-03-22 15:41 - 2019-03-18 22:52 - 000000000 ____D C:\WINDOWS\LiveKernelReports 2020-03-22 15:35 - 2020-01-16 14:59 - 000000000 ____D C:\Users\misfi\AppData\Roaming\TeamViewer 2020-03-22 15:35 - 2019-09-29 20:33 - 000000000 ___DC C:\WINDOWS\Panther 2020-03-22 12:55 - 2019-09-29 20:53 - 000002374 _____ C:\Users\misfi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2020-03-22 12:55 - 2019-08-26 20:11 - 000000000 ___RD C:\Users\misfi\OneDrive 2020-03-21 09:24 - 2020-01-13 20:53 - 000153312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys 2020-03-21 09:24 - 2020-01-13 20:53 - 000020936 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys 2020-03-20 08:54 - 2019-08-27 09:25 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2020-03-18 23:09 - 2019-09-16 03:44 - 000655264 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll 2020-03-18 20:06 - 2019-09-16 03:44 - 004927048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll 2020-03-18 20:05 - 2019-09-16 03:44 - 004196160 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2020-03-18 14:46 - 2019-09-29 11:33 - 000000000 ____D C:\Users\misfi\AppData\Local\UnrealEngine 2020-03-18 11:00 - 2019-08-27 08:35 - 000000000 ____D C:\Program Files\Microsoft Office 2020-03-18 01:51 - 2019-09-16 03:44 - 001682368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll 2020-03-18 01:51 - 2019-09-16 03:44 - 000223120 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys 2020-03-18 01:51 - 2019-09-16 03:44 - 000056618 _____ C:\WINDOWS\system32\nvinfo.pb 2020-03-17 22:00 - 2018-12-04 23:30 - 005581800 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2020-03-17 22:00 - 2018-12-04 23:30 - 002632680 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2020-03-17 22:00 - 2018-12-04 23:30 - 001759216 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2020-03-17 22:00 - 2018-12-04 23:30 - 001172464 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2020-03-17 22:00 - 2018-12-04 23:30 - 000446264 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2020-03-17 22:00 - 2018-12-04 23:30 - 000121144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2020-03-17 22:00 - 2018-12-04 23:30 - 000074736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2020-03-16 16:11 - 2019-08-27 22:09 - 000000000 ___RD C:\Users\misfi\3D Objects 2020-03-16 16:11 - 2018-12-04 23:28 - 000000000 __RHD C:\Users\Public\AccountPictures 2020-03-16 16:10 - 2019-03-18 22:52 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs 2020-03-16 16:10 - 2019-03-18 22:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism 2020-03-16 16:10 - 2019-03-18 22:52 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform 2020-03-16 16:10 - 2019-03-18 22:52 - 000000000 ____D C:\WINDOWS\system32\Dism 2020-03-16 16:10 - 2019-03-18 22:37 - 000000000 ____D C:\WINDOWS\servicing 2020-03-16 15:59 - 2019-08-26 20:13 - 000000000 ____D C:\WINDOWS\system32\MRT 2020-03-16 15:58 - 2019-08-26 20:13 - 121542864 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2020-03-16 00:39 - 2018-12-04 23:30 - 008997147 _____ C:\WINDOWS\system32\nvcoproc.bin 2020-03-11 11:03 - 2019-08-26 20:11 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2020-03-11 10:15 - 2019-08-26 20:11 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2020-03-06 20:12 - 2019-03-18 22:52 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2020-03-06 20:12 - 2019-03-18 22:52 - 000000000 ____D C:\WINDOWS\SysWOW64\setup 2020-03-06 20:12 - 2019-03-18 22:52 - 000000000 ____D C:\WINDOWS\system32\setup 2020-03-06 20:12 - 2019-03-18 22:52 - 000000000 ____D C:\WINDOWS\system32\oobe 2020-03-06 20:12 - 2019-03-18 22:52 - 000000000 ____D C:\Program Files\Windows Defender ==================== SigCheck ============================ (There is no automatic fix for files that do not pass verification.) ==================== End of FRST.txt ========================