Quantcast
Viewing all articles
Browse latest Browse all 2798

"Hacktool" Windows Defender

Recently a friend of mine hopped on my Girlfriends computer and within 5 minutes he landed on malicious webpage where you get Locked and cant leave the page with Various warnings and Red Text. Something I have experienced many times in my years. I decided to run windows Defender as a pre-caution and noticed some exclusions had been made. After Removing exclusions these are the 2 entries I found and Removed using Windows Defender.
Again unfortunately I already Removed the Entires I'm just unsure if anything else needs to be done.
I think I have access to a boot or re-install USB. Its been a couple years since i've used it though.
Thanks again TSF you guys are amazing.

2 Entrys : HackTool:Win32/AutoKMS
HackTool:Win64/AutoKMS
Affected items : file: C:\WINDOWS\system32\SppExtComObjHook.dll


HackTool:Win32/AutoKMS
HackTool:Win64/AutoKMS

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 23-10-2019
Ran by Jaez (administrator) on DESKTOP-FJ79U2C (23-10-2019 12:45:02)
Running from C:\Users\Jaez\Desktop
Loaded Profiles: Jaez (Available Profiles: Jaez)
Platform: Windows 10 Pro Version 1903 18362.418 (X64) Language: English (United States)
Default browser: FF
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(IDSA Production signing key -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe
(IDSA Production signing key -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSATray.exe
(IDSA Production signing key -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAUpdateService.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_353320edb98da643\igfxCUIService.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_353320edb98da643\igfxEM.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bf9afe57cbde0e11\IntelCpHDCPSvc.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bf9afe57cbde0e11\IntelCpHeciSvc.exe
(Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Ivaylo Beltchev -> IvoSoft) [File not signed] C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\Jaez\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.19092.399.0_x64__8wekyb3d8bbwe\YourPhone.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Windows Hardware Compatibility Publisher -> Fortemedia) C:\Windows\System32\FMService64.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1910.4-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1910.4-0\NisSrv.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(ND_Apps -> Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe
(Skype) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.85.0_x64__kzf8qxf38zg5c\SkypeApp.exe
(Skype) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.85.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
(Smart Sound Technology -> Intel) C:\Windows\System32\cAVS\Intel(R) Audio Service\IntelAudioService.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [163640 2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [878368 2019-05-29] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [Intel Driver & Support Assistant] => C:\Program Files (x86)\Intel\Driver and Support Assistant\DSATray.exe [138088 2019-10-16] (IDSA Production signing key -> Intel)
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-03-18] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-03-18] (Microsoft Windows -> Microsoft Corporation)
IFEO\SppExtComObj.exe: [Debugger] SppExtComObjPatcher.exe

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {04034FFB-D135-42AD-916C-E4FA7FE980F7} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132 => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [18168 2017-07-13] (Intel(R) Software Asset Manager -> Intel Corporation)
Task: {1946302B-AD72-4C2A-9F27-4C59348D79BD} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\MpCmdRun.exe [469928 2019-10-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {32D0E64D-68C6-4B63-8CE2-333427B35280} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [18168 2017-07-13] (Intel(R) Software Asset Manager -> Intel Corporation)
Task: {7FC22C12-F173-4842-9D5C-3BC43E37BC46} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\MpCmdRun.exe [469928 2019-10-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {BC0ECE94-26F8-4D4C-A2D4-B11B6E1E1689} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\MpCmdRun.exe [469928 2019-10-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {DB99AED4-FDDF-4F7A-BA48-C01E119B60F5} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\MpCmdRun.exe [469928 2019-10-18] (Microsoft Windows Publisher -> Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.200.1
Tcpip\..\Interfaces\{403972e6-ab28-47f2-be46-2e25504e269b}: [DhcpNameServer] 192.168.200.1
Tcpip\..\Interfaces\{74678490-9548-4ec0-a953-02384ad08202}: [DhcpNameServer] 192.168.200.1

Internet Explorer:
==================
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]

FireFox:
========
FF DefaultProfile: 9v0000g8.default
FF ProfilePath: C:\Users\Jaez\AppData\Roaming\Mozilla\Firefox\Profiles\9v0000g8.default [2019-05-28]
FF ProfilePath: C:\Users\Jaez\AppData\Roaming\Mozilla\Firefox\Profiles\5dxj9luo.default-release [2019-10-23]
FF DownloadDir: C:\Users\Jaez\Desktop
FF Homepage: Mozilla\Firefox\Profiles\5dxj9luo.default-release -> hxxps://www.google.com/
FF Extension: (Adblock Plus - free ad blocker) - C:\Users\Jaez\AppData\Roaming\Mozilla\Firefox\Profiles\5dxj9luo.default-release\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2019-10-23]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 DSAService; C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe [34664 2019-10-16] (IDSA Production signing key -> Intel)
R3 DSAUpdateService; C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAUpdateService.exe [105320 2019-10-16] (IDSA Production signing key -> Intel)
R2 FMAPOService; C:\WINDOWS\System32\FMService64.exe [347888 2019-06-13] (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia)
R2 ibtsiva; C:\WINDOWS\system32\ibtsiva.exe [530424 2019-04-23] (Intel(R) Wireless Connectivity Solutions -> Intel Corporation)
R2 Intel(R) PROSet Monitoring Service; C:\WINDOWS\system32\IProsetMonitor.exe [573472 2019-06-11] (ND_Apps -> Intel Corporation)
S3 Intel(R) SUR QC SAM; C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [18168 2017-07-13] (Intel(R) Software Asset Manager -> Intel Corporation)
R2 IntelAudioService; C:\WINDOWS\system32\cAVS\Intel(R) Audio Service\IntelAudioService.exe [406184 2019-05-26] (Smart Sound Technology -> Intel)
R2 RtkAudioUniversalService; C:\WINDOWS\System32\RtkAudUService64.exe [878368 2019-05-29] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5796168 2019-09-12] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\NisSrv.exe [3201616 2019-10-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\MsMpEng.exe [103168 2019-10-18] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 e1dexpress; C:\WINDOWS\System32\DriverStore\FileRepository\e1d68x64.inf_amd64_0d0901f66b76dc48\e1d68x64.sys [598112 2019-06-11] (Intel(R) INTELND1820 -> Intel Corporation)
R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [14331920 2019-04-23] (Intel(R) Wireless Connectivity Solutions -> Intel Corporation)
R3 IntcAudioBus; C:\WINDOWS\System32\drivers\IntcAudioBus.sys [283088 2019-05-26] (Smart Sound Technology -> Intel(R) Corporation)
R3 IntcOED; C:\WINDOWS\System32\drivers\IntcOED.sys [1154000 2019-05-26] (Smart Sound Technology -> Intel(R) Corporation)
R3 NAL; C:\WINDOWS\system32\Drivers\iqvw64e.sys [58304 2019-05-21] (ND_QV -> Intel Corporation )
R3 Netwtw08; C:\WINDOWS\System32\drivers\Netwtw08.sys [9122296 2019-04-29] (Intel(R) Wireless Connectivity Solutions -> Intel Corporation)
R3 RTSPER; C:\WINDOWS\System32\drivers\RtsPer.sys [878528 2018-05-13] (Realtek Semiconductor Corp. -> Realsil Semiconductor Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46472 2019-10-18] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [351968 2019-10-18] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [53984 2019-10-18] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-10-23 12:45 - 2019-10-23 12:45 - 000013048 _____ C:\Users\Jaez\Desktop\FRST.txt
2019-10-23 12:44 - 2019-10-23 12:45 - 000000000 ____D C:\FRST
2019-10-23 12:44 - 2019-10-23 12:44 - 001617920 _____ (Farbar) C:\Users\Jaez\Desktop\FRST64.exe
2019-10-23 12:28 - 2019-10-23 12:28 - 071827456 _____ C:\WINDOWS\system32\config\SOFTWARE
2019-10-23 12:19 - 2019-10-23 12:28 - 000000000 ____D C:\WINDOWS\Microsoft Antimalware
2019-10-23 11:09 - 2019-10-23 11:16 - 000000046 _____ C:\Users\Jaez\Desktop\V.txt
2019-10-23 10:52 - 2019-10-23 12:38 - 000000000 ____D C:\Users\Jaez\AppData\Local\D3DSCache
2019-10-21 03:19 - 2019-10-21 03:19 - 000001481 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Driver & Support Assistant.lnk
2019-10-11 23:51 - 2019-10-11 23:51 - 025900544 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 025443840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 022628352 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 019849216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 019811840 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 018019840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 017787392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 014816256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 009928504 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 008010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 007905000 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 007848192 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 007754240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 007600664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 007263992 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 007195648 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 007015936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 006517640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 006425600 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 006232064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 006227624 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 006164480 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 006084048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 005915648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 005865272 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwizimg.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 005764872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 005105152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 005041664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 004612520 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 004562688 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 004538880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 004481536 _____ (Microsoft Corporation) C:\WINDOWS\system32\DHolographicDisplay.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 004129616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 004046336 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 004012544 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 003964056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 003947008 _____ (Microsoft Corporation) C:\WINDOWS\system32\tellib.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 003771392 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 003742032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneCoreUAPCommonProxyStub.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 003727360 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2019-10-11 23:51 - 2019-10-11 23:51 - 003701760 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 003590968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2019-10-11 23:51 - 2019-10-11 23:51 - 003553280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 003525592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 003386880 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 003184128 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 003105280 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 002861568 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsservices.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 002821120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 002799616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2019-10-11 23:51 - 2019-10-11 23:51 - 002772032 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 002762504 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2019-10-11 23:51 - 2019-10-11 23:51 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2019-10-11 23:51 - 2019-10-11 23:51 - 002723328 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2019-10-11 23:51 - 2019-10-11 23:51 - 002703360 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 002590208 _____ C:\WINDOWS\system32\dwmscene.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 002552120 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 002494440 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 002466304 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 002456064 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 002448712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 002422592 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVCORE.DLL
2019-10-11 23:51 - 2019-10-11 23:51 - 002314648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 002284032 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 002258856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 002236144 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 002190864 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 002160640 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 002138472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVCORE.DLL
2019-10-11 23:51 - 2019-10-11 23:51 - 002132280 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 002120704 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcDesktopMonSvc.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 002120272 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 002114048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 002095104 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 002081976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 002069504 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 002000168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001957008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001952360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001942528 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001940952 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001913296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001857024 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001847808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsservices.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001845408 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001835008 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001830200 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001819136 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreShell.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001788728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001757096 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2019-10-11 23:51 - 2019-10-11 23:51 - 001748480 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001743672 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001730560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001721144 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001716752 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001692160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001687040 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001664928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001664376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001657856 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001656392 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001616784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001616608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ttdrecordcpu.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001611792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001610752 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001607680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001563648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001562424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001543168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowManagement.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001512320 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 001510752 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001505320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001501712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001482040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2019-10-11 23:51 - 2019-10-11 23:51 - 001473488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001439744 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocoreworker.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 001413704 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001412096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001394488 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 001386000 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001383856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001372160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001366128 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2019-10-11 23:51 - 2019-10-11 23:51 - 001334064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ttdrecordcpu.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001319936 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001297936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001283072 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001273392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001263616 _____ (Microsoft Corporation) C:\WINDOWS\system32\opengl32.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001261800 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001244944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001217904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 001214976 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001182240 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 001178816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001154656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001152016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001150240 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputHost.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001149712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 001098712 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001091584 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001084432 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001080320 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001072952 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 001066496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001054872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001047968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001043984 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPolicy.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001036800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001029432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ClipSp.sys
2019-10-11 23:51 - 2019-10-11 23:51 - 001023128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001012792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 001009152 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000984376 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000975872 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000960512 _____ (Microsoft Corporation) C:\WINDOWS\system32\assignedaccessmanagersvc.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000957240 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVManifest.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000952416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000944664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000939008 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000931840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2019-10-11 23:51 - 2019-10-11 23:51 - 000923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000904704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\opengl32.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000904208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000893952 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000890472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000880088 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000875008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000874296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2019-10-11 23:51 - 2019-10-11 23:51 - 000858112 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000856576 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2019-10-11 23:51 - 2019-10-11 23:51 - 000844800 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000843776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000842752 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000841216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000839680 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9on12.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000833312 _____ (Microsoft Corporation) C:\WINDOWS\system32\pkeyhelper.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000829536 _____ (Microsoft Corporation) C:\WINDOWS\system32\BioIso.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000827408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVOrchestration.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000818688 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000816648 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntStreamingManager.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000802816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000792296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputHost.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000784384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000783480 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000775768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000774672 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000772656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000759488 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskschd.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000758584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000750080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.Search.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000749568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000742912 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000741392 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000732176 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000722944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapi.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\mousocoreworker.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000702464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2019-10-11 23:51 - 2019-10-11 23:51 - 000701952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.FileExplorer.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000691712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000690176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000679880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000674072 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000673080 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000669496 _____ (Microsoft Corporation) C:\WINDOWS\system32\computecore.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000666128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000659456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AssignedAccessManager.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000656960 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11on12.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000652800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000649016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000647168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000639400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp_win.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000629248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.Search.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000617784 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000612864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000606208 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000599552 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000599040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000598024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000598016 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000596992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000595456 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000589384 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_PCDisplay.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000576512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\csc.sys
2019-10-11 23:51 - 2019-10-11 23:51 - 000568336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000558592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000551936 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000551424 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000550400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2019-10-11 23:51 - 2019-10-11 23:51 - 000546816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxdiagn.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000541696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResourceMapper.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000541480 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000539648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9on12.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000537600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000533504 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000531968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000520192 _____ (Microsoft Corporation) C:\WINDOWS\system32\usosvc.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000518656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000516408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000515896 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000513536 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000510464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000507704 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwizeng.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000507152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskschd.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000502784 _____ C:\WINDOWS\system32\AssignedAccessCsp.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000501232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp_win.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000500736 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2019-10-11 23:51 - 2019-10-11 23:51 - 000499200 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpshell.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000496640 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000495120 _____ (Microsoft Corporation) C:\WINDOWS\system32\TransportDSA.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000487576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase_enclave.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000487424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.FileExplorer.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000476672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000476672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000466416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000463272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000462848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000462136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000457216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cldflt.sys
2019-10-11 23:51 - 2019-10-11 23:51 - 000456504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2019-10-11 23:51 - 2019-10-11 23:51 - 000452408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000450560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxdiagn.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000450360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11on12.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000449888 _____ (Microsoft Corporation) C:\WINDOWS\system32\MMDevAPI.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000448000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000442704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2_32.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000441144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2019-10-11 23:51 - 2019-10-11 23:51 - 000429568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000422008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000421376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2019-10-11 23:51 - 2019-10-11 23:51 - 000417280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000415808 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000412152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000404392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000398728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000394256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVScripting.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000392704 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationControllerPS.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000387832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000383984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MMDevAPI.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000382976 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000380216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000379840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ws2_32.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000376832 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpinit.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000375720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000369664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxdiag.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000363624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\MbbCx.sys
2019-10-11 23:51 - 2019-10-11 23:51 - 000355840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicSvc.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000353792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000346624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\secproc.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000342896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ttdwriter.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000338432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000334936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapibase.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\VAN.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ComposableShellProxyStub.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000324408 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2019-10-11 23:51 - 2019-10-11 23:51 - 000315904 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenterprisediagnostics.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000315392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxdiag.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000300184 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000293344 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgmgr32.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\directxdatabaseupdater.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000285256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000284160 _____ (Microsoft Corporation) C:\WINDOWS\system32\container.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000283688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ttdwriter.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000279040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000278080 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_CapabilityAccess.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3svc.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicCapsule.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000258064 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVFileSystemMetadata.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateDeploymentProvider.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnservice.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000250880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys
2019-10-11 23:51 - 2019-10-11 23:51 - 000248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\ManageCI.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000247856 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000245248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\glu32.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000244736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndproxy.sys
2019-10-11 23:51 - 2019-10-11 23:51 - 000243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Gpu.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msltus40.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000236520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfgmgr32.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwpolicyiomgr.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallServiceTasks.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000231440 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVShNotify.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000228880 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVStreamMap.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\IndexedDbLegacy.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000225080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2019-10-11 23:51 - 2019-10-11 23:51 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2019-10-11 23:51 - 2019-10-11 23:51 - 000224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgiadaptercache.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000220472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000210744 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000202768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVStreamingUX.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000202040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\appid.sys
2019-10-11 23:51 - 2019-10-11 23:51 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000199480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Win32CompatibilityAppraiserCSP.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000195584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\container.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000193592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000186880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2019-10-11 23:51 - 2019-10-11 23:51 - 000181776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVDllSurrogate.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallServiceTasks.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000179512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2019-10-11 23:51 - 2019-10-11 23:51 - 000178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\prntvpt.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000176440 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxlib.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000176152 _____ (Microsoft Corporation) C:\WINDOWS\system32\imm32.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IndexedDbLegacy.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\sud.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000173568 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000173072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVNice.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatialAudioLicenseSrv.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000165832 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\glu32.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwbase.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000159112 _____ (Microsoft Corporation) C:\WINDOWS\system32\devobj.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000158208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2019-10-11 23:51 - 2019-10-11 23:51 - 000157184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ComposableShellProxyStub.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_AppExecutionAlias.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000152408 _____ (Microsoft Corporation) C:\WINDOWS\system32\KerbClientShared.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_BackgroundApps.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000150328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000145208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CscMig.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpatialAudioLicenseSrv.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000143808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imm32.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000140496 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sud.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000139264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prntvpt.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000137864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devobj.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmredir.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000133632 _____ (Microsoft Corporation) C:\WINDOWS\system32\appvetwclientres.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000132608 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_ForceSync.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000132408 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000132096 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudDomainJoinAUG.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000127064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000125232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KerbClientShared.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplicationControlCSP.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatecsp.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000119840 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpenWith.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000117048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bindflt.sys
2019-10-11 23:51 - 2019-10-11 23:51 - 000116904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000116224 _____ (Microsoft Corporation) C:\WINDOWS\system32\EaseOfAccessDialog.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000110080 _____ C:\WINDOWS\system32\ResBParser.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreShellExtFramework.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000105832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpenWith.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000105272 _____ (Microsoft Corporation) C:\WINDOWS\system32\icfupgd.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3msm.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000100664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmcl.sys
2019-10-11 23:51 - 2019-10-11 23:51 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\sethc.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcbuilder.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000093712 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wanarp.sys
2019-10-11 23:51 - 2019-10-11 23:51 - 000092624 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskhostw.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EaseOfAccessDialog.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3api.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000089544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicAgent.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000088352 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000084496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
2019-10-11 23:51 - 2019-10-11 23:51 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdbusenum.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvvmtransport.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcbuilder.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sethc.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\CustomInstallExec.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000073024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwm.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000066832 _____ (Microsoft Corporation) C:\WINDOWS\system32\iumcrypt.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvvmtransport.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnrollCtrl.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iemigplugin.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AssignedAccessRuntime.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\devrtl.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\audioresourceregistrar.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000056832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devrtl.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnppolicy.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeUISrv.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000053248 _____ C:\WINDOWS\system32\Drivers\UsbPmApi.sys
2019-10-11 23:51 - 2019-10-11 23:51 - 000052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringconfigsp.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnrollCtrl.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000047616 _____ C:\WINDOWS\system32\UsbPmApi.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AssignedAccessRuntime.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000047000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\cellulardatacapabilityhandler.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiredNetworkCSP.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000039304 _____ (Microsoft Corporation) C:\WINDOWS\system32\NtlmShared.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000037904 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncAppvPublishingServer.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000037176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys
2019-10-11 23:51 - 2019-10-11 23:51 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\IcsEntitlementHost.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\enrollmentapi.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000033048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NtlmShared.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicPS.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndistapi.sys
2019-10-11 23:51 - 2019-10-11 23:51 - 000027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Win32_DeviceGuard.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfapigp.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\CSystemEventsBrokerClient.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000021816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScriptRunner.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000021544 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000020944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmsgapi.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\bindflt.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000016696 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwizres.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d8thk.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDJPN.DLL
2019-10-11 23:51 - 2019-10-11 23:51 - 000013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\appvetwstreamingux.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSErrRedir.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\pacjsworker.exe
2019-10-11 23:51 - 2019-10-11 23:51 - 000011576 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxlibres.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbd106.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCertResources.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCertResources.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6r.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tier2punctuations.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6r.dll
2019-10-11 23:51 - 2019-10-11 23:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin
2019-10-11 23:51 - 2019-10-11 23:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin
2019-10-11 23:51 - 2019-10-11 23:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin
2019-10-11 23:51 - 2019-10-11 23:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin
2019-10-11 23:51 - 2019-10-11 23:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin
2019-10-11 23:51 - 2019-10-11 23:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin
2019-10-11 23:51 - 2019-10-11 23:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin
2019-10-11 23:51 - 2019-10-11 23:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin
2019-10-11 23:51 - 2019-10-11 23:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin
2019-10-11 23:51 - 2019-10-11 23:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin
2019-10-11 23:51 - 2019-10-11 23:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin
2019-10-11 23:51 - 2019-10-11 23:51 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin
2019-10-11 23:50 - 2019-10-11 23:50 - 000551952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Vid.sys
2019-10-11 23:50 - 2019-10-11 23:50 - 000436536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2019-10-11 23:50 - 2019-10-11 23:50 - 000355000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2019-10-11 23:50 - 2019-10-11 23:50 - 000223032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelppm.sys
2019-10-11 23:50 - 2019-10-11 23:50 - 000208184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\processr.sys
2019-10-11 23:50 - 2019-10-11 23:50 - 000201016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdppm.sys
2019-10-11 23:50 - 2019-10-11 23:50 - 000199480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdk8.sys
2019-10-11 23:50 - 2019-10-11 23:50 - 000151568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbus.sys
2019-10-11 23:50 - 2019-10-11 23:50 - 000079376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\uaspstor.sys
2019-10-11 23:50 - 2019-10-11 23:50 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidspi.sys
2019-10-11 23:50 - 2019-10-11 23:50 - 000052752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmstorfl.sys
2019-10-11 23:50 - 2019-10-11 23:50 - 000043536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storvsc.sys
2019-10-11 23:50 - 2019-10-11 23:50 - 000028936 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmbuspipe.dll
2019-10-11 23:46 - 2019-10-11 23:46 - 000492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2019-10-11 23:46 - 2019-10-11 23:46 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2019-10-10 14:38 - 2019-10-12 04:32 - 000000000 ____D C:\Program Files\Mozilla Firefox

==================== One month (modified) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-10-23 12:44 - 2019-03-18 21:50 - 000000000 ____D C:\WINDOWS\INF
2019-10-23 12:44 - 2016-06-23 23:25 - 000840848 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2019-10-23 12:39 - 2019-03-18 21:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-10-23 12:38 - 2019-05-29 03:31 - 000000000 ____D C:\Users\Jaez\AppData\Local\ClassicShell
2019-10-23 12:37 - 2019-05-30 15:40 - 000000134 _____ C:\WINDOWS\system32\regtest.txt
2019-10-23 12:37 - 2019-05-29 02:55 - 000000000 __SHD C:\Users\Jaez\IntelGraphicsProfiles
2019-10-23 12:37 - 2019-05-29 02:54 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2019-10-23 12:37 - 2019-05-29 02:50 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2019-10-23 12:37 - 2019-05-28 22:58 - 000000000 ____D C:\Users\Jaez\AppData\LocalLow\Mozilla
2019-10-23 11:18 - 2019-03-18 21:37 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2019-10-23 10:54 - 2019-03-18 21:52 - 000000000 ____D C:\WINDOWS\AppReadiness
2019-10-22 02:01 - 2019-03-18 21:52 - 000000000 ___HD C:\Program Files\WindowsApps
2019-10-21 03:19 - 2019-06-27 18:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2019-10-21 03:19 - 2019-05-28 22:40 - 000000000 ____D C:\Program Files (x86)\Intel
2019-10-21 03:19 - 2016-06-23 14:38 - 000000000 ____D C:\ProgramData\Package Cache
2019-10-18 22:36 - 2019-05-29 02:54 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2019-10-17 10:38 - 2019-06-04 23:13 - 000000000 ____D C:\Users\Jaez\AppData\Local\ElevatedDiagnostics
2019-10-12 04:34 - 2019-05-29 02:55 - 000000000 ___RD C:\Users\Jaez\3D Objects
2019-10-12 04:34 - 2016-04-26 23:42 - 000000000 __RHD C:\Users\Public\AccountPictures
2019-10-12 04:33 - 2019-05-29 02:50 - 000257824 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2019-10-12 04:32 - 2019-05-28 22:58 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2019-10-12 04:32 - 2019-03-18 23:23 - 000000000 ___SD C:\WINDOWS\system32\AppV
2019-10-12 04:32 - 2019-03-18 21:52 - 000000000 ___RD C:\WINDOWS\PrintDialog
2019-10-12 04:32 - 2019-03-18 21:52 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2019-10-12 04:32 - 2019-03-18 21:52 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2019-10-12 04:32 - 2019-03-18 21:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2019-10-12 04:32 - 2019-03-18 21:52 - 000000000 ____D C:\WINDOWS\SystemResources
2019-10-12 04:32 - 2019-03-18 21:52 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2019-10-12 04:32 - 2019-03-18 21:52 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2019-10-12 04:32 - 2019-03-18 21:52 - 000000000 ____D C:\WINDOWS\system32\oobe
2019-10-12 04:32 - 2019-03-18 21:52 - 000000000 ____D C:\WINDOWS\system32\migwiz
2019-10-12 04:32 - 2019-03-18 21:52 - 000000000 ____D C:\WINDOWS\system32\Dism
2019-10-12 04:32 - 2019-03-18 21:52 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2019-10-12 04:32 - 2019-03-18 21:52 - 000000000 ____D C:\WINDOWS\bcastdvr
2019-10-11 23:55 - 2019-03-18 21:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2019-10-11 23:54 - 2016-06-23 23:25 - 000000000 ____D C:\WINDOWS\system32\MRT
2019-10-11 23:53 - 2016-06-23 23:25 - 127230528 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2019-10-11 23:06 - 2019-05-28 22:58 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2019-10-10 16:25 - 2019-05-29 02:35 - 000000000 ____D C:\Users\Jaez
2019-10-08 03:59 - 2019-05-29 02:54 - 000003378 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3444296992-3315107769-1077489669-1002
2019-10-08 03:59 - 2019-05-29 02:35 - 000002364 _____ C:\Users\Jaez\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2019-10-08 03:59 - 2016-06-23 14:30 - 000000000 ___RD C:\Users\Jaez\OneDrive
2019-10-01 07:53 - 2019-07-14 17:44 - 000000000 ____D C:\WINDOWS\Firmware
2019-10-01 07:52 - 2019-05-28 22:40 - 000000000 ____D C:\Users\Jaez\Downloads\Intel Driver and Support Assistant
2019-10-01 04:37 - 2016-06-23 14:28 - 000000000 ____D C:\Users\Jaez\AppData\Local\Packages

==================== SigCheck ===============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ============================

Attached Files
Image may be NSFW.
Clik here to view.
File Type: txt
Addition.txt (19.3 KB)

Viewing all articles
Browse latest Browse all 2798

Trending Articles