Zoek.exe v5.0.0.1 Updated 19-September-2016
Tool run by Krista on zo 04/12/2016 at 21:58:09,40.
Microsoft Windows 10 Home 10.0.14393  x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Krista\Downloads\zoek (1).exe [Scan all users] [Script inserted] [Checkboxes used]

==== Older Logs ======================

C:\zoek-results2016-12-01-154545.log	19410 bytes

==== Empty Folders Check ======================

C:\PROGRA~3\SoftwareDistribution deleted successfully
C:\Users\Krista\AppData\Local\VirtualStore deleted successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== Deleting Files \ Folders ======================

C:\Users\Krista\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk deleted

==== Files Recently Created / Modified ======================

====== C:\WINDOWS ====
2016-11-29 15:56:35	BCDB205132974EC3AB6F5C01DD93489B	130560	----a-w-	C:\WINDOWS\splwow64.exe
2016-11-29 15:56:31	43BF96FCF50945BE35C22206980C9068	4673304	----a-w-	C:\WINDOWS\explorer.exe
====== C:\Users\Krista\AppData\Local\Temp ====
====== Java Cache =====
====== C:\WINDOWS\SysWOW64 =====
2016-11-29 15:59:14	3F74CEE864CF43AAE5AD30FF53D7862E	712192	----a-w-	C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2016-11-29 15:59:11	F8CA7E1DCC958DEE67AB07F3671758F4	3733504	----a-w-	C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2016-11-29 15:59:08	C154CDD5F23922C5FF0BE5F68E281B99	589312	----a-w-	C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2016-11-29 15:59:08	AA977093E4B741600108FBBDC539EC8F	567808	----a-w-	C:\WINDOWS\SysWOW64\ChatApis.dll
2016-11-29 15:59:08	63CF9E094A62A787937B955D654C55DE	2005504	----a-w-	C:\WINDOWS\SysWOW64\DWrite.dll
2016-11-29 15:59:08	5E03E98E09A3A8BFA0277B2FE565B296	2257104	----a-w-	C:\WINDOWS\SysWOW64\iertutil.dll
2016-11-29 15:59:08	426B59A08D30F2EC996AABFEDF994165	850944	----a-w-	C:\WINDOWS\SysWOW64\ContactApis.dll
2016-11-29 15:59:08	355B607EF9E48A76B4E262CFDBAD4162	710144	----a-w-	C:\WINDOWS\SysWOW64\AppointmentApis.dll
2016-11-29 15:59:08	312DC38536876B54D006CD45E6193C78	858112	----a-w-	C:\WINDOWS\SysWOW64\EmailApis.dll
2016-11-29 15:59:08	309953E2C926A475986B0B8D2C945BE0	299520	----a-w-	C:\WINDOWS\SysWOW64\UserDataAccountApis.dll
2016-11-29 15:59:07	F65466308BF643DC2BEC6B70396A50FE	1263856	----a-w-	C:\WINDOWS\SysWOW64\msctf.dll
2016-11-29 15:59:07	9D2B100882C4225550374967544779B2	2646016	----a-w-	C:\WINDOWS\SysWOW64\CertEnroll.dll
2016-11-29 15:59:05	989DDA548FBD96F5D3637976022CE5D0	661504	----a-w-	C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2016-11-29 15:59:04	3EA6EBC56A17E2B9AF27459179949D56	806400	----a-w-	C:\WINDOWS\SysWOW64\D3D12.dll
2016-11-29 15:59:01	FF7E5AE7017F58120D17193022FBB621	2323728	----a-w-	C:\WINDOWS\SysWOW64\d3d10warp.dll
2016-11-29 15:59:01	80C84FDEB9891DF894AEC50F09C172B5	2276736	----a-w-	C:\WINDOWS\SysWOW64\d3d11.dll
2016-11-29 15:58:58	C3E0142EB96C1401F972A55AE2071C81	95232	----a-w-	C:\WINDOWS\SysWOW64\BluetoothApis.dll
2016-11-29 15:58:58	7EAA3FDD14CCBF400C1A762D0C305D10	315744	----a-w-	C:\WINDOWS\SysWOW64\atmfd.dll
2016-11-29 15:58:58	5121018A046FF4BB3173AFD40C09ED50	959112	----a-w-	C:\WINDOWS\SysWOW64\ole32.dll
2016-11-29 15:58:57	91359ABDA6469CE68059738547A017FB	4423680	----a-w-	C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2016-11-29 15:58:57	5523F95FE25F50D5F5E36742F31B61CB	545936	----a-w-	C:\WINDOWS\SysWOW64\fontdrvhost.exe
2016-11-29 15:58:56	64016D507616CCFFFE1A6402B9D5706B	576408	----a-w-	C:\WINDOWS\SysWOW64\wer.dll
2016-11-29 15:58:54	BD23A751D9C8965D7C81CD98919D6CC7	186424	----a-w-	C:\WINDOWS\SysWOW64\weretw.dll
2016-11-29 15:58:53	7E6A2633A085F870C85DD8B765C132D8	884224	----a-w-	C:\WINDOWS\SysWOW64\inetcomm.dll
2016-11-29 15:58:52	51D061BEC9CE0B6693B7C21546F58D2C	74752	----a-w-	C:\WINDOWS\SysWOW64\updatepolicy.dll
2016-11-29 15:58:49	7A0163029D69E39B5961635D03CA5E03	122368	----a-w-	C:\WINDOWS\SysWOW64\NPSM.dll
2016-11-29 15:58:47	346BC86522950AC3F2BBE645836BBE04	67584	----a-w-	C:\WINDOWS\SysWOW64\iscsiwmi.dll
2016-11-29 15:58:46	264529BBF1D0F2E468E21CE4BBE0FA77	65536	----a-w-	C:\WINDOWS\SysWOW64\wininetlui.dll
2016-11-29 15:58:44	99492ADCB2420614780EB00EBFE362E6	47104	----a-w-	C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll
2016-11-29 15:58:43	255DA8853C0D48A5D90CA836E8C6DE1E	58880	----a-w-	C:\WINDOWS\SysWOW64\ConfigureExpandedStorage.dll
2016-11-29 15:58:42	B3E528C20D922E67A648963C8BEA4245	109568	----a-w-	C:\WINDOWS\SysWOW64\chartv.dll
2016-11-29 15:58:40	BDF7BDD5D89F09977B6A1BE52FEA41C7	18432	----a-w-	C:\WINDOWS\SysWOW64\stdole2.tlb
2016-11-29 15:58:40	164842138751BBD9CF92640AECA0C69C	348672	----a-w-	C:\WINDOWS\SysWOW64\zipfldr.dll
2016-11-29 15:58:38	279A342558DCEB7540459417FC91CA37	37376	----a-w-	C:\WINDOWS\SysWOW64\atmlib.dll
2016-11-29 15:58:34	F3F33D11511351D96F919D8C719AAAFF	4612608	----a-w-	C:\WINDOWS\SysWOW64\Windows.Media.dll
2016-11-29 15:58:34	A09950019C01AE9C1BC1CD49958C1DC6	980824	----a-w-	C:\WINDOWS\SysWOW64\mfnetcore.dll
2016-11-29 15:58:33	8481240AD2C6B40F2D0DA073887111DF	3307520	----a-w-	C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2016-11-29 15:58:33	5D8CD9416127C1D9FDDE0E76277B7F18	951904	----a-w-	C:\WINDOWS\SysWOW64\mfsvr.dll
2016-11-29 15:58:33	1F7BCA44AD521CA0722AC787DC746C5E	1123368	----a-w-	C:\WINDOWS\SysWOW64\mfplat.dll
2016-11-29 15:58:33	0C3C22395BBA6B4F6AF5075A0FFADA86	484584	----a-w-	C:\WINDOWS\SysWOW64\AudioSes.dll
2016-11-29 15:58:32	81F3C9798F141546B2966DD211D32F43	341344	----a-w-	C:\WINDOWS\SysWOW64\msv1_0.dll
2016-11-29 15:58:30	6827B35F4AEF875532D16AE54BAA9FAE	3892352	----a-w-	C:\WINDOWS\SysWOW64\mfcore.dll
2016-11-29 15:58:28	19BB3AA2F9FFB8C307BC299FF6DDFB1D	2998272	----a-w-	C:\WINDOWS\SysWOW64\win32kfull.sys
2016-11-29 15:58:27	E5FA6F82E3DA12FFE79D624231FB6E71	12349952	----a-w-	C:\WINDOWS\SysWOW64\wmp.dll
2016-11-29 15:58:21	F6E114D3392384C0D7B4004809166D75	1255936	----a-w-	C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2016-11-29 15:58:21	84AF13FE61DC95AC2D597FCCDB46EE61	357376	----a-w-	C:\WINDOWS\SysWOW64\Geolocation.dll
2016-11-29 15:58:20	917FA3842E22439BFA78C24C1A1F64D5	116576	----a-w-	C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll
2016-11-29 15:58:20	17790525F5513FE9356F07370E6D513A	7626752	----a-w-	C:\WINDOWS\SysWOW64\twinui.dll
2016-11-29 15:58:19	C29554D34BC2B4DFBC4C5C761F786179	4312248	----a-w-	C:\WINDOWS\SysWOW64\explorer.exe
2016-11-29 15:58:19	0AED554D8EF07E5084A2DFBD860896A7	6474752	----a-w-	C:\WINDOWS\SysWOW64\mspaint.exe
2016-11-29 15:58:15	01C2988C758BD155CA88E018D02C8FA3	2748928	----a-w-	C:\WINDOWS\SysWOW64\mispace.dll
2016-11-29 15:58:14	A28E0F4E3DE1A720F8148FC47255B850	1570672	----a-w-	C:\WINDOWS\SysWOW64\ntdll.dll
2016-11-29 15:58:12	6AAF3F01481C49A6299924A44F4EAA24	1557808	----a-w-	C:\WINDOWS\SysWOW64\winmde.dll
2016-11-29 15:58:00	3E8908FCB9B3624901B4C5C4ECEBD687	2708992	----a-w-	C:\WINDOWS\SysWOW64\esent.dll
2016-11-29 15:57:56	DCA06CDE099C83F49F206E30FADB9D24	912896	----a-w-	C:\WINDOWS\SysWOW64\comdlg32.dll
2016-11-29 15:57:56	3A9383E849C3A408391B6AB32E74EFE6	508416	----a-w-	C:\WINDOWS\SysWOW64\vbscript.dll
2016-11-29 15:57:54	1AF944ED98AA15C72B1039D8CBA41CFF	1853776	----a-w-	C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2016-11-29 15:57:52	B1BA71F16535CF6619AEEEFEA302A28B	687936	----a-w-	C:\WINDOWS\SysWOW64\msvproc.dll
2016-11-29 15:57:51	EDD1E47BAF4CC905D31A1FC87C99C82F	1993216	----a-w-	C:\WINDOWS\SysWOW64\dwmcore.dll
2016-11-29 15:57:49	6004CF96404411FB6F28ADC9D20D34A3	2747392	----a-w-	C:\WINDOWS\SysWOW64\rdpcore.dll
2016-11-29 15:57:48	07C5FFA68E2A0F2C646B1D872552BD3A	1556480	----a-w-	C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2016-11-29 15:57:47	AF3F5EE938656D2F92B2CA512DCB034B	747008	----a-w-	C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll
2016-11-29 15:57:46	C962B8C0799A37CDEB09CE15BF57B62B	1360456	----a-w-	C:\WINDOWS\SysWOW64\mfnetsrc.dll
2016-11-29 15:57:46	19513A910B600F6FD639BCDD326DDB9D	254656	----a-w-	C:\WINDOWS\SysWOW64\wmpeffects.dll
2016-11-29 15:57:44	40A4D9DBA574DFC17B253BE419FF71DD	147968	----a-w-	C:\WINDOWS\SysWOW64\win32k.sys
2016-11-29 15:57:43	804E7069B4C6C01B1F4B3A2D8618C77F	422400	----a-w-	C:\WINDOWS\SysWOW64\twinapi.dll
2016-11-29 15:57:43	41CC46E479845A572E699CC7153EF015	2484736	----a-w-	C:\WINDOWS\SysWOW64\gameux.dll
2016-11-29 15:57:39	2436051F3FC09F11F3009834D6FF1465	580608	----a-w-	C:\WINDOWS\SysWOW64\hgcpl.dll
2016-11-29 15:57:38	199BB32B8878D8DDDCF7ACD40424ECE9	81408	----a-w-	C:\WINDOWS\SysWOW64\cmifw.dll
2016-11-29 15:57:35	6CBECADC72DE0693D830648FBC241227	175104	----a-w-	C:\WINDOWS\SysWOW64\wmpdxm.dll
2016-11-29 15:57:26	F0D7EBAC8AF6083293F2627868BE22B4	152064	----a-w-	C:\WINDOWS\SysWOW64\autoplay.dll
2016-11-29 15:57:26	E70DD2021CD187351EFE94ACE2B5B2CC	102912	----a-w-	C:\WINDOWS\SysWOW64\wmpshell.dll
2016-11-29 15:57:25	987F66B58641839E89F95BBF812DCE8D	34304	----a-w-	C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2016-11-29 15:57:25	3D84D07AE55418FCB30E647DF2BB419F	226304	----a-w-	C:\WINDOWS\SysWOW64\dhcpcore6.dll
2016-11-29 15:57:22	F600D5960AB95FF661A6DD600B0B4134	632832	----a-w-	C:\WINDOWS\SysWOW64\sud.dll
2016-11-29 15:57:22	8759658502B234387D2F3C2227341BF6	358912	----a-w-	C:\WINDOWS\SysWOW64\stobject.dll
2016-11-29 15:57:19	5B7C5CF39C3A4A37B42C40D5CB1F0E89	760832	----a-w-	C:\WINDOWS\SysWOW64\appwiz.cpl
2016-11-29 15:57:17	D4070F9BB8496171E5C77B6050447C6C	506880	----a-w-	C:\WINDOWS\SysWOW64\DevicePairing.dll
2016-11-29 15:57:17	93319B7E502C192C92E0CD2B97617509	288256	----a-w-	C:\WINDOWS\SysWOW64\systemcpl.dll
2016-11-29 15:57:15	A10377BA84F069F692EDB44D3CB47E65	2458112	----a-w-	C:\WINDOWS\SysWOW64\themecpl.dll
2016-11-29 15:57:13	9E0539AA914B272943B8A29D779F1C5F	896512	----a-w-	C:\WINDOWS\SysWOW64\fontext.dll
2016-11-29 15:57:12	3FDA860AF9312A76DB959D2A6BF94FF1	89088	----a-w-	C:\WINDOWS\SysWOW64\AuthExt.dll
2016-11-29 15:57:11	9D55397B7000228C59836BA5E5B44DFB	306688	----a-w-	C:\WINDOWS\SysWOW64\esentutl.exe
2016-11-29 15:56:55	9997A266FDB3EB465A2EF6363D855567	6657176	----a-w-	C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2016-11-29 15:56:50	E9B97084F697B86201B806DDCCD61A66	88576	----a-w-	C:\WINDOWS\SysWOW64\UserDeviceRegistration.Ngc.dll
2016-11-29 15:56:50	E2A881762265DB7F7B6A5A8E956A399A	156672	----a-w-	C:\WINDOWS\SysWOW64\UserDeviceRegistration.dll
2016-11-29 15:56:50	1B79E6C75FBB444D8DFAFECE2B531533	426496	----a-w-	C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Wallet.dll
2016-11-29 15:56:49	ECA98102FDA036EA3F2852A407FBCC9F	470016	----a-w-	C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2016-11-29 15:56:49	B1F0DE61FDA3999EB8A7A5C94B491D3D	180224	----a-w-	C:\WINDOWS\SysWOW64\InstallAgent.exe
2016-11-29 15:56:49	77F0F4BCE23963904F930FE2D99AE7D4	459776	----a-w-	C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
2016-11-29 15:56:49	4F323A3D28BEEA3645A51CE2EB222EC4	1430720	----a-w-	C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2016-11-29 15:56:49	3B8741F99DFF1452AAA4548A36EE6A47	223232	----a-w-	C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2016-11-29 15:56:48	F79810F082DA8542CA7BD7394223FE00	87040	----a-w-	C:\WINDOWS\SysWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll
2016-11-29 15:56:48	E6675810782667FBA2625507FF212717	1013248	----a-w-	C:\WINDOWS\SysWOW64\Windows.Web.Http.dll
2016-11-29 15:56:48	A6ED9DDE24E8A8DD91D371C30FB63195	598528	----a-w-	C:\WINDOWS\SysWOW64\Windows.Web.dll
2016-11-29 15:56:48	6A9347FAF8DFE9992E31D32BB9C4BC79	557568	----a-w-	C:\WINDOWS\SysWOW64\StoreAgent.dll
2016-11-29 15:56:48	26180577AC7731FB95D0DBEBC9840404	471552	----a-w-	C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
2016-11-29 15:56:48	238C5C54118A7807B2362CB83531182B	675840	----a-w-	C:\WINDOWS\SysWOW64\Windows.Networking.dll
2016-11-29 15:56:47	7ED19E4C5FE25DA46CBFE9D83510D40D	751104	----a-w-	C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2016-11-29 15:56:47	4A7AD501B449CED36AC774EE6A6FF0B0	117760	----a-w-	C:\WINDOWS\SysWOW64\AuthBroker.dll
2016-11-29 15:56:45	02B299257EFA78B690E5CDADEE8E17E5	1980768	----a-w-	C:\WINDOWS\SysWOW64\msxml6.dll
2016-11-29 15:56:43	49BA6CBE300A27B968467B30A92210CF	13868544	----a-w-	C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2016-11-29 15:56:42	CBB5BFC926BAA8764F57504C0CA0FC23	404992	----a-w-	C:\WINDOWS\SysWOW64\dsreg.dll
2016-11-29 15:56:40	BE82A643B205195DE633AB44811C8E0E	7469056	----a-w-	C:\WINDOWS\SysWOW64\mstscax.dll
2016-11-29 15:56:39	93A7E6EFEE6F70010663065DC9C181D7	1705976	----a-w-	C:\WINDOWS\SysWOW64\KernelBase.dll
2016-11-29 15:56:36	D135F72353B63F9329ED648B868AC821	3106304	----a-w-	C:\WINDOWS\SysWOW64\mstsc.exe
2016-11-29 15:56:10	F3157B20F2F9240F10A8FBCF909147AE	1631232	----a-w-	C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2016-11-29 15:56:00	BB8D21E3DEAA7FB1D77158D4FBCF24D5	327680	----a-w-	C:\WINDOWS\SysWOW64\daxexec.dll
2016-11-29 15:55:54	71122A72B7100C823867AE5CD27BB26F	1969912	----a-w-	C:\WINDOWS\SysWOW64\hevcdecoder.dll
2016-11-29 15:55:44	7F1F8A3AF8CDA9368966E22AE64D5C9E	1435896	----a-w-	C:\WINDOWS\SysWOW64\user32.dll
2016-11-29 15:55:38	FC815DA31E8EE168F89D29101BE8C1C1	542208	----a-w-	C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll
2016-11-29 15:55:36	39809F1A942E32FDFA115944754A180E	137216	----a-w-	C:\WINDOWS\SysWOW64\credprovs.dll
2016-11-29 15:55:32	42ADF32B96CA5291A729E3FB377B9AF4	1228288	----a-w-	C:\WINDOWS\SysWOW64\usercpl.dll
2016-11-29 15:55:28	F968F7F6E379371EC2BCCBF1738829B3	89088	----a-w-	C:\WINDOWS\SysWOW64\adsmsext.dll
2016-11-29 15:55:05	818F687B7E0E3897FB073DB045E19C5C	123904	----a-w-	C:\WINDOWS\SysWOW64\Windows.Networking.HostName.dll
2016-11-29 15:55:03	C856C469D9459E6AF98224FC6A30742B	125952	----a-w-	C:\WINDOWS\SysWOW64\apprepapi.dll
2016-11-29 15:55:03	73C3BEC894A2B2CE2C434D4995C36095	284672	----a-w-	C:\WINDOWS\SysWOW64\apprepsync.dll
2016-11-29 15:55:02	BC5396DAAD3AD832DCB0EA8902FECB52	19415040	----a-w-	C:\WINDOWS\SysWOW64\edgehtml.dll
2016-11-29 15:55:02	82204FBC3AFC6313FDD1C0BD0B2C79F2	873472	----a-w-	C:\WINDOWS\SysWOW64\aadtb.dll
2016-11-29 15:54:58	90F10B69BFC27846B34A8CF8CCABD10A	19415552	----a-w-	C:\WINDOWS\SysWOW64\mshtml.dll
2016-11-29 15:54:58	43C5C64A30CAC245FB870CB568340B76	306176	----a-w-	C:\WINDOWS\SysWOW64\ieproxy.dll
2016-11-29 15:54:57	77B047B6D08AFC1578D03BC35FD94FA4	2682880	----a-w-	C:\WINDOWS\SysWOW64\netshell.dll
2016-11-29 15:54:56	D0D95F33F633EF118A8E20DF418F81F6	141312	----a-w-	C:\WINDOWS\SysWOW64\dialclient.dll
2016-11-29 15:54:56	57D2A617BD2E8663E5B56835EC1BFFF0	142336	----a-w-	C:\WINDOWS\SysWOW64\Windows.Devices.WiFi.dll
2016-11-29 15:54:55	560958E6CF04362534E3376E30E7B092	12175360	----a-w-	C:\WINDOWS\SysWOW64\ieframe.dll
2016-11-29 15:54:52	E8D162BD3E2BBB989CB62397D65D3558	566784	----a-w-	C:\WINDOWS\SysWOW64\ShareHost.dll
2016-11-29 15:54:52	E2333F2B0B8703DDFE5AD2819F0750F5	483840	----a-w-	C:\WINDOWS\SysWOW64\Windows.Devices.AllJoyn.dll
2016-11-29 15:54:48	7631CFF6A49699635FDBEE6B9F1FD089	3196416	----a-w-	C:\WINDOWS\SysWOW64\cdp.dll
2016-11-29 15:54:48	24E4F416470BFCEBAA1333EF351EE419	1415744	----a-w-	C:\WINDOWS\SysWOW64\gdi32full.dll
2016-11-29 15:54:47	B46668B5AA4729C795EF749E2A0BA807	1247232	----a-w-	C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2016-11-29 15:54:46	B011D0A9593526FBDC99AB0C11B239E0	5685760	----a-w-	C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2016-11-29 15:54:32	6F66060C313B8C4F6667336AC937FB2B	6044160	----a-w-	C:\WINDOWS\SysWOW64\Chakra.dll
2016-11-29 15:54:28	1E6B34E44C4FEBFBC06B6CAE14E7529B	846560	----a-w-	C:\WINDOWS\SysWOW64\WinTypes.dll
2016-11-29 15:54:26	B65E65E8A58F68FCC8230E450DDD5C2B	3689984	----a-w-	C:\WINDOWS\SysWOW64\msi.dll
2016-11-29 15:54:25	E4BDE75B8A2B008D2F6E3F080FDCF51B	272720	----a-w-	C:\WINDOWS\SysWOW64\wintrust.dll
2016-11-29 15:54:25	1375FA26B9483F8C2D607E1741F3A440	822784	----a-w-	C:\WINDOWS\SysWOW64\Chakradiag.dll
2016-11-29 15:54:24	2AEE020DD3AB11153AFFBEFE5CA1ABB8	3666432	----a-w-	C:\WINDOWS\SysWOW64\jscript9.dll
2016-11-29 15:54:23	F6F5D864C91DE608518ACED43C900056	2166232	----a-w-	C:\WINDOWS\SysWOW64\combase.dll
2016-11-29 15:54:23	5D52820BCF597EAC5B109D1494B149BA	1556712	----a-w-	C:\WINDOWS\SysWOW64\crypt32.dll
2016-11-29 15:54:22	FC8718208DEC3C78D639E34312468348	691712	----a-w-	C:\WINDOWS\SysWOW64\msfeeds.dll
2016-11-29 15:54:22	58E51D527D2B82961A94FCDE12E6FED7	90624	----a-w-	C:\WINDOWS\SysWOW64\olepro32.dll
2016-11-29 15:54:22	17C406D38C3989FF3BDB17D08C1991CE	1425000	----a-w-	C:\WINDOWS\SysWOW64\d3d9.dll
2016-11-29 15:54:21	DF51C1442A3DB8ADE2B78DCDEC2419FD	636928	----a-w-	C:\WINDOWS\SysWOW64\winhttp.dll
2016-11-29 15:54:18	1D52C4BD7A501CCDBAA803DEE14E724E	198656	----a-w-	C:\WINDOWS\SysWOW64\indexeddbserver.dll
2016-11-29 15:54:17	FCD239B3E31059A27B8646DA111EE0D9	602464	----a-w-	C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2016-11-29 15:54:14	4AEDE41939612BD2F5A3CC73CDFE47F7	1509376	----a-w-	C:\WINDOWS\SysWOW64\ieapfltr.dll
2016-11-29 15:54:12	ABF355047ECEBFF79FE5224BCFF9A2E5	601712	----a-w-	C:\WINDOWS\SysWOW64\oleaut32.dll
2016-11-29 15:54:11	C8D375B53A863F5CDD3220E4F3A232D5	55808	----a-w-	C:\WINDOWS\SysWOW64\offreg.dll
2016-11-29 15:54:11	39485594314583A36ACDEF356D31D7B7	111968	----a-w-	C:\WINDOWS\SysWOW64\NetSetupApi.dll
2016-11-29 15:54:11	34D074039E3C28D0241A2FBE52C5E7A6	276832	----a-w-	C:\WINDOWS\SysWOW64\input.dll
2016-11-29 15:54:10	9ECED4DB6043F22AFC2B44EEE0A3232F	270336	----a-w-	C:\WINDOWS\SysWOW64\dxtrans.dll
2016-11-29 15:54:09	B7938AAC81C0233A39A11E7FA31BFD55	39424	----a-w-	C:\WINDOWS\SysWOW64\dtdump.exe
2016-11-29 15:54:09	02D6BCC95BDBD27BCE63972D3CBB1909	236544	----a-w-	C:\WINDOWS\SysWOW64\UIAnimation.dll
2016-11-29 15:54:04	2CE3436D4C000FA35D87849665157683	95232	----a-w-	C:\WINDOWS\SysWOW64\TSpkg.dll
2016-11-29 15:54:01	25F8B46103DE47D861456BA98518F6F8	465920	----a-w-	C:\WINDOWS\SysWOW64\LockAppBroker.dll
2016-11-29 15:54:01	2436E797EBD6F4FBFAAAEED3796658AD	79360	----a-w-	C:\WINDOWS\SysWOW64\asycfilt.dll
2016-11-29 15:54:00	DBAD85BFE615D3C006D68DC630FACBFD	76800	----a-w-	C:\WINDOWS\SysWOW64\powercfg.exe
2016-11-29 15:54:00	CB6C0BDA744854AAEFC3179958D7723B	549376	----a-w-	C:\WINDOWS\SysWOW64\ActionCenterCPL.dll
2016-11-29 15:53:58	4F513D2133F558DFD9E26154C20B3BE4	134144	----a-w-	C:\WINDOWS\SysWOW64\ErrorDetails.dll
2016-11-29 15:53:58	1AE271B3E627F399376451CA2A5425B0	63488	----a-w-	C:\WINDOWS\SysWOW64\ErrorDetailsUpdate.dll
2016-11-29 15:53:57	FDE88DD61FACA311742878CCE15657EE	126464	----a-w-	C:\WINDOWS\SysWOW64\iepeers.dll
2016-11-29 15:53:56	24ADF3F61828FEA22D88A3B81E541101	199680	----a-w-	C:\WINDOWS\SysWOW64\GlobCollationHost.dll
2016-11-29 15:53:55	A87862892C1C48F499F219E9C6D10E1B	81408	----a-w-	C:\WINDOWS\SysWOW64\mshtmled.dll
2016-11-29 15:53:55	4C0E82B2FBBBD647128CE83D2BC74642	635904	----a-w-	C:\WINDOWS\SysWOW64\jscript9diag.dll
2016-11-29 15:53:44	1C9D6D7A8056D311F21E3983E7CBF96A	584192	----a-w-	C:\WINDOWS\SysWOW64\UIRibbonRes.dll
2016-11-29 15:53:42	29B81C330268D77A8B23D697C7CD1CFA	410112	----a-w-	C:\WINDOWS\SysWOW64\SndVolSSO.dll
2016-11-29 15:53:42	1B07C7A22E790E98927F6E7C952CC34C	1595392	----a-w-	C:\WINDOWS\SysWOW64\urlmon.dll
2016-11-29 15:53:41	A85C8FEF4D839F4F2F28F7A10401DA70	20969928	----a-w-	C:\WINDOWS\SysWOW64\shell32.dll
2016-11-29 15:53:39	9A2D5638547777085AC41A24D28DE2E5	640000	----a-w-	C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2016-11-29 15:53:39	6F6040B6156104113B9D8686ED65A74B	3369984	----a-w-	C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2016-11-29 15:53:39	0800BAC03625DDA09ED5134EB226DD57	94208	----a-w-	C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
2016-11-29 15:53:29	72BEA2B2EC7D67E899AB83120AC3B96A	2256384	----a-w-	C:\WINDOWS\SysWOW64\wininet.dll
2016-11-29 15:53:28	CB8C1D493C5A801F8AF6D5328A91C570	2333184	----a-w-	C:\WINDOWS\SysWOW64\WsmSvc.dll
2016-11-29 15:53:28	B14573527A1C75447F83DECD00A24E07	33280	----a-w-	C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe
2016-11-29 15:53:25	91EFFACD1CBBB4E2F10FC6CEBA1ECC22	184320	----a-w-	C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2016-11-29 15:53:24	D03279F3764B17D469174402FD67F65E	1323008	----a-w-	C:\WINDOWS\SysWOW64\wsp_fs.dll
2016-11-29 15:53:24	7BA90CE32D9A1C6F9A434D9C3705C02A	202752	----a-w-	C:\WINDOWS\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
2016-11-29 15:53:24	6D5748534C4B97B454B3C7F43D7EF848	431616	----a-w-	C:\WINDOWS\SysWOW64\efswrt.dll
2016-11-29 15:53:24	51022991C13E9AA968424F5F8D25466C	1113600	----a-w-	C:\WINDOWS\SysWOW64\wsp_health.dll
2016-11-29 15:53:23	ED376C89C132C7DD26051EE9B689E546	182784	----a-w-	C:\WINDOWS\SysWOW64\mfsensorgroup.dll
2016-11-29 15:53:23	83563656E52E536D97F7527A9FDD7D0C	1170944	----a-w-	C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2016-11-29 15:53:23	67A6B5E9C56578342FA9A9F3811C3127	455040	----a-w-	C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2016-11-29 15:53:23	671E38CF2AD869B6D83A7DD2C91EBDA0	187904	----a-w-	C:\WINDOWS\SysWOW64\mfksproxy.dll
2016-11-29 15:53:22	B74141855782DF8B4BC10613078D8638	709120	----a-w-	C:\WINDOWS\SysWOW64\CPFilters.dll
2016-11-29 15:53:21	9C12BF4D70FDADABE83F7A117F84A9A7	492032	----a-w-	C:\WINDOWS\SysWOW64\bcastdvr.exe
2016-11-29 15:53:19	623EFE96365AE8F0EEBE6B104B18DAB2	6108672	----a-w-	C:\WINDOWS\SysWOW64\mos.dll
2016-11-29 15:53:15	B0DA5BABD745E9D07DA0B36E46C6CA8F	1456640	----a-w-	C:\WINDOWS\SysWOW64\GdiPlus.dll
2016-11-29 15:53:15	1FA30DD7A757FE41B3F5E9ECC6A1C923	1022304	----a-w-	C:\WINDOWS\SysWOW64\AppxPackaging.dll
2016-11-29 15:53:13	6A94D9784733C1F0DE2BE900CF79715E	231936	----a-w-	C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2016-11-29 15:53:09	F36A81A9D0A8C20D71C17BFF600DA060	156672	----a-w-	C:\WINDOWS\SysWOW64\BcastDVRHelper.dll
2016-11-29 15:53:05	A8D17164E37141D1FAC49843B177D5F3	5376000	----a-w-	C:\WINDOWS\SysWOW64\BingMaps.dll
2016-11-29 15:53:03	D531B49869D898A1D28D1868A615A0FE	760832	----a-w-	C:\WINDOWS\SysWOW64\NMAA.dll
2016-11-29 15:53:02	2593EAA308B8C99BB9A04A7CECEDDBB1	788624	----a-w-	C:\WINDOWS\SysWOW64\locale.nls
2016-11-29 15:53:01	C4ABAF3F9F322C968AEACFA2A9925F08	838144	----a-w-	C:\WINDOWS\SysWOW64\JpMapControl.dll
2016-11-29 15:52:57	49A6050FBE7C8D0B3C5E1A2A55E1BFC4	749920	----a-w-	C:\WINDOWS\SysWOW64\drvstore.dll
2016-11-29 15:52:52	AC1E3E0991DFA564BE304F569B01D3F2	2356736	----a-w-	C:\WINDOWS\SysWOW64\MSVidCtl.dll
2016-11-29 15:52:51	5B1DAB6FC3627A51B839C7F71C4959D7	715264	----a-w-	C:\WINDOWS\SysWOW64\MapControlCore.dll
2016-11-29 15:52:47	0E86A451C2BF6DD8C550309845473F13	596832	----a-w-	C:\WINDOWS\SysWOW64\comctl32.dll
2016-11-29 15:52:45	D1393913F0666A92EA436B6C7A0CC099	310272	----a-w-	C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2016-11-29 15:52:42	E728FB4102BF63937B40E38B8C3728B1	548352	----a-w-	C:\WINDOWS\SysWOW64\ddraw.dll
2016-11-29 15:52:42	5B3B4FBBACE6A551A7A23F2A97A708EE	731136	----a-w-	C:\WINDOWS\SysWOW64\d3d8.dll
2016-11-29 15:52:41	78AE0A7C1C49582534E5C89582E41D6C	32768	----a-w-	C:\WINDOWS\SysWOW64\efsext.dll
2016-11-29 15:52:39	C56C2252AC8BD0EC0C413FE4CBD5C6F1	772608	----a-w-	C:\WINDOWS\SysWOW64\ntshrui.dll
2016-11-29 15:52:38	7A422699B4D979DCD4253481F50F99B6	866816	----a-w-	C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll
2016-11-29 15:52:37	DDAD9B61722B2A68A437EA6087AF501E	336896	----a-w-	C:\WINDOWS\SysWOW64\msinfo32.exe
2016-11-29 15:52:26	4068054803EBC2B3F68972835137C2F3	253952	----a-w-	C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll
2016-11-29 15:52:25	A3E9AD90B35B68944CA017E5259613FF	798208	----a-w-	C:\WINDOWS\SysWOW64\authui.dll
2016-11-29 15:52:25	12A3A7E576B2598A794BDAB3E63C4CEA	140288	----a-w-	C:\WINDOWS\SysWOW64\AppCapture.dll
2016-11-29 15:52:24	03756C464D3741481D6A99B067377C7A	198144	----a-w-	C:\WINDOWS\SysWOW64\FSClient.dll
2016-11-29 15:52:23	6DF99FE819011952117D0C2ECAC46E0E	285184	----a-w-	C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll
====== C:\WINDOWS\SysWOW64\drivers =====
====== C:\WINDOWS\Sysnative =====
2016-11-29 15:59:14	9135A6B400F9B2D0E9D9957D95D21010	909824	----a-w-	C:\WINDOWS\Sysnative\Windows.UI.Search.dll
2016-11-29 15:59:13	CAD14E0AD1F03397E9B1C8733D76BEF4	1980416	----a-w-	C:\WINDOWS\Sysnative\diagtrack.dll
2016-11-29 15:59:12	FE45874BB9216243CE736C9807CE4E68	32256	----a-w-	C:\WINDOWS\Sysnative\WSManHTTPConfig.exe
2016-11-29 15:59:12	D876C567AB767258036F05E4766189FD	1054208	----a-w-	C:\WINDOWS\Sysnative\qmgr.dll
2016-11-29 15:59:12	351979684DF4DBCEA8A0838E1124C6DE	1589248	----a-w-	C:\WINDOWS\Sysnative\msdtctm.dll
2016-11-29 15:59:11	A26570B4A21AD6F4D597148D3C22274E	2716672	----a-w-	C:\WINDOWS\Sysnative\WsmSvc.dll
2016-11-29 15:59:10	BE427F0FF5D26CBEC418F699AB0B5E65	432128	----a-w-	C:\WINDOWS\Sysnative\WpAXHolder.dll
2016-11-29 15:59:10	8B11CF0C3371BDC7C115E9E1DBF6DE3A	2800128	----a-w-	C:\WINDOWS\Sysnative\netshell.dll
2016-11-29 15:59:10	70C298C6990F5A0BBF60F5C035BAA0B9	2446696	----a-w-	C:\WINDOWS\Sysnative\msxml6.dll
2016-11-29 15:59:09	DFBB31D6490F9798A16D5F16F407AE8F	3287552	----a-w-	C:\WINDOWS\Sysnative\mispace.dll
2016-11-29 15:59:09	71C446BA0E327922E81D44DC7C92A3E9	268800	----a-w-	C:\WINDOWS\Sysnative\UserMgrProxy.dll
2016-11-29 15:59:09	424A70711226098D38F09CEEE96984B6	2914304	----a-w-	C:\WINDOWS\Sysnative\CertEnroll.dll
2016-11-29 15:59:07	DF1E6557FA2D92350A0EA194523F694E	1694712	----a-w-	C:\WINDOWS\Sysnative\winmde.dll
2016-11-29 15:59:06	68CE253C68FD0A25DB4F65B03D1694FE	631296	----a-w-	C:\WINDOWS\Sysnative\NotificationController.dll
2016-11-29 15:59:06	2EB168A050569ECEBF6BAEDED2FBB0AB	998912	----a-w-	C:\WINDOWS\Sysnative\TSWorkspace.dll
2016-11-29 15:59:05	D9D6F747EFF5E427D4C3047A65603554	341936	----a-w-	C:\WINDOWS\Sysnative\wintrust.dll
2016-11-29 15:59:05	62255F0593C9967DCE38EBD4B959A823	945664	----a-w-	C:\WINDOWS\Sysnative\WpcWebFilter.dll
2016-11-29 15:59:04	A164374BB90548E6A83C94E04F8A7769	146784	----a-w-	C:\WINDOWS\Sysnative\CloudExperienceHostCommon.dll
2016-11-29 15:59:04	69125F2E2E6E7C7A246A1207246CADC5	241504	----a-w-	C:\WINDOWS\Sysnative\CloudExperienceHost.dll
2016-11-29 15:59:04	632E40D4B280A9B1F3666C7B59B8F960	160096	----a-w-	C:\WINDOWS\Sysnative\CloudExperienceHostBroker.dll
2016-11-29 15:59:03	BCB9F3F5C67DAF7FCA462CB7F63C4376	3054080	----a-w-	C:\WINDOWS\Sysnative\esent.dll
2016-11-29 15:59:03	B2BF860EBDC02527F334E9E6F0F34C30	1112928	----a-w-	C:\WINDOWS\Sysnative\AppxPackaging.dll
2016-11-29 15:59:02	BB23DF07C549E3CBE21AA0D8E2CFCF2E	396800	----a-w-	C:\WINDOWS\Sysnative\ncsi.dll
2016-11-29 15:59:02	3389B83F4D881983A3063185717F354D	836608	----a-w-	C:\WINDOWS\Sysnative\WpcRefreshTask.dll
2016-11-29 15:59:01	E010703EC49A1EBD7B90F57E0A9E6846	1322848	----a-w-	C:\WINDOWS\Sysnative\wpx.dll
2016-11-29 15:59:01	971819F3DD0996BCCB9E4330C52C4207	446896	----a-w-	C:\WINDOWS\Sysnative\ApnDatabase.xml
2016-11-29 15:59:00	A2F1C319DE3DC001611E15226FA63BE6	1365504	----a-w-	C:\WINDOWS\Sysnative\wpncore.dll
2016-11-29 15:59:00	6C159EC791FA7DE9C99DD5A099147A57	983040	----a-w-	C:\WINDOWS\Sysnative\RemoteNaturalLanguage.dll
2016-11-29 15:58:59	EDC48E91596728405D59FC3FE7B779EF	336896	----a-w-	C:\WINDOWS\Sysnative\NetworkBindingEngineMigPlugin.dll
2016-11-29 15:58:59	D5146931CF19CE678498028E9EDFCE01	1274712	----a-w-	C:\WINDOWS\Sysnative\ole32.dll
2016-11-29 15:58:59	9B9F520C72EE33EAEC857124BB800243	368640	----a-w-	C:\WINDOWS\Sysnative\nlasvc.dll
2016-11-29 15:58:58	49198C0CFB8476EF30D4F6583E75603F	1388544	----a-w-	C:\WINDOWS\Sysnative\Windows.UI.Cred.dll
2016-11-29 15:58:57	62E660B43F1159195A136AF280E0C9AB	682816	----a-w-	C:\WINDOWS\Sysnative\wer.dll
2016-11-29 15:58:56	CBC2ED420A156B17B88C3D7898521C81	252928	----a-w-	C:\WINDOWS\Sysnative\ubpm.dll
2016-11-29 15:58:56	C75B1B48BCAADEB0275C1EBE2EAE742D	539136	----a-w-	C:\WINDOWS\Sysnative\usocore.dll
2016-11-29 15:58:55	979E1E43F50D4BA6EAD46DC54EAB57BA	157696	----a-w-	C:\WINDOWS\Sysnative\credprovs.dll
2016-11-29 15:58:55	95A32323A5184D6E8A3D2FF7FA58A90C	1359360	----a-w-	C:\WINDOWS\Sysnative\usercpl.dll
2016-11-29 15:58:55	727F2875259DFB0A19004A3722DCDB9D	908640	----a-w-	C:\WINDOWS\Sysnative\drvstore.dll
2016-11-29 15:58:54	6BA66FE47BFAF223AEE6C98F28EB4D8E	2315264	----a-w-	C:\WINDOWS\Sysnative\wuaueng.dll
2016-11-29 15:58:54	57614FC8FA9899FE8990B2B99A9EC0C5	238056	----a-w-	C:\WINDOWS\Sysnative\weretw.dll
2016-11-29 15:58:53	FF190115CBA067F58C981F0A9F43ABDF	187904	----a-w-	C:\WINDOWS\Sysnative\wscsvc.dll
2016-11-29 15:58:53	086994F0B334B16A6896C7F9D8895FDB	186880	----a-w-	C:\WINDOWS\Sysnative\MusNotification.exe
2016-11-29 15:58:52	FCD1E8B95BC298E2F482E52B8A9CC2F5	226304	----a-w-	C:\WINDOWS\Sysnative\WpcTok.exe
2016-11-29 15:58:52	D09CA6A4247D8CA8008D7CC850941C67	579072	----a-w-	C:\WINDOWS\Sysnative\ddraw.dll
2016-11-29 15:58:52	72669C6C0B70C7617B32D123C72EF41C	425472	----a-w-	C:\WINDOWS\Sysnative\bcdedit.exe
2016-11-29 15:58:51	0DEC52346E0EB2FEB078FEB0384CDE1A	773720	----a-w-	C:\WINDOWS\Sysnative\oleaut32.dll
2016-11-29 15:58:48	B888C77AD1918D7D9437977B967BF7A7	93184	----a-w-	C:\WINDOWS\Sysnative\cmifw.dll
2016-11-29 15:58:48	7D1A9EE947A48B6DF60FDBA1435B337C	109056	----a-w-	C:\WINDOWS\Sysnative\dab.dll
2016-11-29 15:58:47	C18A0685310ACE5B085551677FB29955	90112	----a-w-	C:\WINDOWS\Sysnative\updatepolicy.dll
2016-11-29 15:58:47	48BB8F72BDADBE7FBA5E4380C9D7ADF6	566784	----a-w-	C:\WINDOWS\Sysnative\ActionCenterCPL.dll
2016-11-29 15:58:46	D5167593F7D56DB441A5145C99C56571	115712	----a-w-	C:\WINDOWS\Sysnative\TSpkg.dll
2016-11-29 15:58:46	97BD81719D523D1CF639E6DA1E074180	89088	----a-w-	C:\WINDOWS\Sysnative\asycfilt.dll
2016-11-29 15:58:45	02A4F1A95C02DBDA6F429DA779B24804	58880	----a-w-	C:\WINDOWS\Sysnative\Windows.Shell.Search.UriHandler.dll
2016-11-29 15:58:43	B24DF87EDB9AE2F69CB156BEC7250DA1	338944	----a-w-	C:\WINDOWS\Sysnative\fhcpl.dll
2016-11-29 15:58:43	AB2AAEF74E8EEAD99D1C66F38AA12446	278016	----a-w-	C:\WINDOWS\Sysnative\netplwiz.dll
2016-11-29 15:58:43	8C452FBF0C90155E583FF11D3905D937	369664	----a-w-	C:\WINDOWS\Sysnative\msinfo32.exe
2016-11-29 15:58:42	708099C902AD52476D40AB6F5A697015	308736	----a-w-	C:\WINDOWS\Sysnative\ActionCenter.dll
2016-11-29 15:58:41	8F8F8FA35F3CED1F869673E16D8A54E4	869888	----a-w-	C:\WINDOWS\Sysnative\wuapi.dll
2016-11-29 15:58:40	37929F180E10D1D277D1E3D22FF886AE	48640	----a-w-	C:\WINDOWS\Sysnative\wups.dll
2016-11-29 15:58:39	628A15E06770327358C80C2462261BA8	339968	----a-w-	C:\WINDOWS\Sysnative\esentutl.exe
2016-11-29 15:58:35	DE669D60B24ED116DC83DEF1A9A591F1	8156080	----a-w-	C:\WINDOWS\Sysnative\Windows.Media.Protection.PlayReady.dll
2016-11-29 15:58:32	9B142FECCBE9D402D63892B12EB1C8AC	498952	----a-w-	C:\WINDOWS\Sysnative\DolbyDecMFT.dll
2016-11-29 15:58:31	D243745884BCBC21E91AB569A0AD514E	673792	----a-w-	C:\WINDOWS\Sysnative\winlogon.exe
2016-11-29 15:58:30	D5C3E8035ED6C8A96FE1C3EFD453DE52	13441024	----a-w-	C:\WINDOWS\Sysnative\wmp.dll
2016-11-29 15:58:26	AEB4FF628102E6DE554B972229655EFD	223744	----a-w-	C:\WINDOWS\Sysnative\Windows.Networking.HostName.dll
2016-11-29 15:58:25	851CFA2D53D2356751DAE97098BC4A82	1631232	----a-w-	C:\WINDOWS\Sysnative\Windows.UI.Xaml.Resources.dll
2016-11-29 15:58:25	4D06D0976C0004975F8FD8B8432C4B46	701952	----a-w-	C:\WINDOWS\Sysnative\Windows.Networking.Connectivity.dll
2016-11-29 15:58:24	8ACBB77704C5F1AD3B21FE491577DFB1	17188352	----a-w-	C:\WINDOWS\Sysnative\Windows.UI.Xaml.dll
2016-11-29 15:58:22	8BA7A3B2A791159BD5A08D32F8D30A4B	1356352	----a-w-	C:\WINDOWS\Sysnative\ClipUp.exe
2016-11-29 15:58:22	23529A00195CE71252FEBF647E56E27D	5622088	----a-w-	C:\WINDOWS\Sysnative\sppsvc.exe
2016-11-29 15:58:16	892206A0E24EA4B6134CAC2A0F6A54BF	1600632	----a-w-	C:\WINDOWS\Sysnative\sppobjs.dll
2016-11-29 15:58:15	F78870C8520BC47B5B83083356A59316	360040	----a-w-	C:\WINDOWS\Sysnative\SystemSettingsAdminFlows.exe
2016-11-29 15:58:15	95E795E17E85BDD48A1574CFB59882E8	1554944	----a-w-	C:\WINDOWS\Sysnative\wsp_health.dll
2016-11-29 15:58:15	011C9D432E756AF6A7BFEC1E32DE0605	1913344	----a-w-	C:\WINDOWS\Sysnative\wsp_fs.dll
2016-11-29 15:58:13	EBABE2BCCBB21BEBDD5BC6B6AE1A179A	584032	----a-w-	C:\WINDOWS\Sysnative\devinv.dll
2016-11-29 15:58:13	A6A29385042B7104A797C2A72A638A04	1235296	----a-w-	C:\WINDOWS\Sysnative\aeinv.dll
2016-11-29 15:58:13	70AB367D6F0ED3C1478E4679087B0E53	137568	----a-w-	C:\WINDOWS\Sysnative\acmigration.dll
2016-11-29 15:58:13	1AEBF878B8D8638EB823CD398F148EDE	78688	----a-w-	C:\WINDOWS\Sysnative\CompatTelRunner.exe
2016-11-29 15:58:13	0701B80266B6B3D110BAFEF40347FA09	595296	----a-w-	C:\WINDOWS\Sysnative\generaltel.dll
2016-11-29 15:58:12	E02744EBE7FA55C63D30ABBA1EC91EEB	1637728	----a-w-	C:\WINDOWS\Sysnative\appraiser.dll
2016-11-29 15:58:11	70F4E5440CEECCBC0A8071128FE89946	7654912	----a-w-	C:\WINDOWS\Sysnative\mos.dll
2016-11-29 15:58:09	E3044670C8B617A95D621E4AC222F511	590336	----a-w-	C:\WINDOWS\Sysnative\efswrt.dll
2016-11-29 15:58:09	C539A88D4D53C2DE20D76B1D5C8EB77E	718848	----a-w-	C:\WINDOWS\Sysnative\Windows.Media.Playback.BackgroundMediaPlayer.dll
2016-11-29 15:58:09	BD19B0A85E7F7D70543A77C61CE21054	324608	----a-w-	C:\WINDOWS\Sysnative\Windows.ApplicationModel.LockScreen.dll
2016-11-29 15:58:09	AC5E9BE667E7F68E5A9B057503DA20B9	187904	----a-w-	C:\WINDOWS\Sysnative\dialclient.dll
2016-11-29 15:58:09	5D67D5D4CC0E50364A7A79FA66CC9DA4	509440	----a-w-	C:\WINDOWS\Sysnative\SettingsHandlers_Bluetooth.dll
2016-11-29 15:58:09	45F740736878E8C84E392B455B110199	237568	----a-w-	C:\WINDOWS\Sysnative\Windows.Web.Diagnostics.dll
2016-11-29 15:58:09	3BC06B2436C509172D1F13E109BAA408	720896	----a-w-	C:\WINDOWS\Sysnative\Windows.Media.BackgroundMediaPlayback.dll
2016-11-29 15:58:08	F3D563CF231AD62A647589A99B642262	913920	----a-w-	C:\WINDOWS\Sysnative\Windows.Networking.dll
2016-11-29 15:58:08	A0356DC83D0B5C020151ACD9C3017392	1328128	----a-w-	C:\WINDOWS\Sysnative\Windows.Web.Http.dll
2016-11-29 15:58:08	9EDC292CFA20432BE47F2840A5AB5C15	702464	----a-w-	C:\WINDOWS\Sysnative\Windows.Media.Playback.MediaPlayer.dll
2016-11-29 15:58:08	05DDFD4E50E504766028069EC42AE1DC	774656	----a-w-	C:\WINDOWS\Sysnative\Windows.Web.dll
2016-11-29 15:58:06	44F8011B39DC01607109C76DAE6AD7AF	765440	----a-w-	C:\WINDOWS\Sysnative\Windows.Devices.Sensors.dll
2016-11-29 15:58:06	19986DF1B9394BA1A20D4C62A6CEA53C	924672	----a-w-	C:\WINDOWS\Sysnative\Windows.Networking.BackgroundTransfer.dll
2016-11-29 15:58:04	FDEB82FC97ABBE8350AA918C7D8AFF50	882680	----a-w-	C:\WINDOWS\Sysnative\EditionUpgradeManagerObj.dll
2016-11-29 15:58:04	A0F3716738FA4A7B0719C463ED65B91D	742704	----a-w-	C:\WINDOWS\Sysnative\sppwinob.dll
2016-11-29 15:58:03	CA80E0CE8289060D6C3157FD463DAE3D	329216	----a-w-	C:\WINDOWS\Sysnative\wc_storage.dll
2016-11-29 15:58:03	99607AB70A9CC717523527F07943E312	561664	----a-w-	C:\WINDOWS\Sysnative\Windows.ApplicationModel.Wallet.dll
2016-11-29 15:58:03	81C56248655872C203C52E03F29DEC9F	463872	----a-w-	C:\WINDOWS\Sysnative\daxexec.dll
2016-11-29 15:58:02	4CE3CF14092DF1B265D68FDC280D6193	7792640	----a-w-	C:\WINDOWS\Sysnative\BingMaps.dll
2016-11-29 15:57:58	583EC9BF6E31D25AE6E1CE0FDEADB1FC	523776	----a-w-	C:\WINDOWS\Sysnative\MusUpdateHandlers.dll
2016-11-29 15:57:57	4C326C9D935D2F1ED904DC1715716F79	936448	----a-w-	C:\WINDOWS\Sysnative\NMAA.dll
2016-11-29 15:57:55	D27086EBF2D41BBCC2672D7B3D22FB90	232800	----a-w-	C:\WINDOWS\Sysnative\aepic.dll
2016-11-29 15:57:55	9D541C9CAA45B118439FB9D90430370A	1060864	----a-w-	C:\WINDOWS\Sysnative\JpMapControl.dll
2016-11-29 15:57:54	90D968F1B69B0074EECFCC7AA5C23021	322912	----a-w-	C:\WINDOWS\Sysnative\invagent.dll
2016-11-29 15:57:53	D176C2BFA32EF5FB52C495600338AAF9	905216	----a-w-	C:\WINDOWS\Sysnative\MapControlCore.dll
2016-11-29 15:57:53	B632A851F22428E3CEE286F38679469E	574976	----a-w-	C:\WINDOWS\Sysnative\energy.dll
2016-11-29 15:57:52	C77C187CCEC87FCC10BBC3C40A457DF2	991232	----a-w-	C:\WINDOWS\Sysnative\comdlg32.dll
2016-11-29 15:57:50	CD3507D4C72480326C128B7DF7811084	3133440	----a-w-	C:\WINDOWS\Sysnative\rdpcore.dll
2016-11-29 15:57:48	05213973D67F7FD9997BAA005FC33AB3	1029632	----a-w-	C:\WINDOWS\Sysnative\MapsStore.dll
2016-11-29 15:57:46	7FD0E0A3A683A3654CC4D81B4564EE54	292872	----a-w-	C:\WINDOWS\Sysnative\wmpeffects.dll
2016-11-29 15:57:45	E231728BC515A4B85543AF74A1FEDFCB	1282048	----a-w-	C:\WINDOWS\Sysnative\wwansvc.dll
2016-11-29 15:57:45	D2F163E37AFD3E3294AC0B71617AF6E6	323584	----a-w-	C:\WINDOWS\Sysnative\twinui.pcshell.dll
2016-11-29 15:57:45	76B73550955803632D036EF99F3688C5	1726976	----a-w-	C:\WINDOWS\Sysnative\Windows.UI.Immersive.dll
2016-11-29 15:57:44	20C387210808A0755D58EDF5A4C73462	483328	----a-w-	C:\WINDOWS\Sysnative\twinapi.dll
2016-11-29 15:57:43	4597AFDD76E4E579838F5FE80CF61B51	99328	----a-w-	C:\WINDOWS\Sysnative\adsmsext.dll
2016-11-29 15:57:41	89AC2029CAFB373A3A4248284A52CEEF	3059200	----a-w-	C:\WINDOWS\Sysnative\msi.dll
2016-11-29 15:57:39	94074A43D56655B9FE5FEF2AFD448F45	217600	----a-w-	C:\WINDOWS\Sysnative\wmpdxm.dll
2016-11-29 15:57:39	8F15AD07A36C0F9B4B825F32A8011972	313856	----a-w-	C:\WINDOWS\Sysnative\moshostcore.dll
2016-11-29 15:57:35	E936902AE86AC6BE7AF7609894D74B93	126464	----a-w-	C:\WINDOWS\Sysnative\wmpshell.dll
2016-11-29 15:57:35	CAF459B2E168FBA83E5C78A889B1A462	40448	----a-w-	C:\WINDOWS\Sysnative\efsext.dll
2016-11-29 15:57:34	8150F0265AF2215D34E5099118B8B406	881664	----a-w-	C:\WINDOWS\Sysnative\authui.dll
2016-11-29 15:57:26	D7CE49E869C7A61FF6336E6CADC8033A	161792	----a-w-	C:\WINDOWS\Sysnative\EditionUpgradeHelper.dll
2016-11-29 15:57:16	A503F84DE81A3F559BB7620764EC843E	130560	----a-w-	C:\WINDOWS\Sysnative\chartv.dll
2016-11-29 15:57:15	0AC1BD5A28FAA371EF34859FE703E515	274432	----a-w-	C:\WINDOWS\Sysnative\ListSvc.dll
2016-11-29 15:57:14	8BDB7ED5B39E7510F711CE625B4D0405	545792	----a-w-	C:\WINDOWS\Sysnative\timedate.cpl
2016-11-29 15:57:12	9316A9A9EE2EBDFB81562C421BD869AF	65024	----a-w-	C:\WINDOWS\Sysnative\OnDemandConnRouteHelper.dll
2016-11-29 15:56:53	88EDA70F6CF415EC0F5D5E11C401E9A5	1883784	----a-w-	C:\WINDOWS\Sysnative\ntdll.dll
2016-11-29 15:56:41	13662213A4DFE9F02B3DA44F89D1C672	97792	----a-w-	C:\WINDOWS\Sysnative\browserbroker.dll
2016-11-29 15:56:39	BE154D9166FC0C15308FDF3EBEC2877A	590960	----a-w-	C:\WINDOWS\Sysnative\AudioSes.dll
2016-11-29 15:56:38	3C764425AFE3AEEBB8DD4BE4FF51226C	405856	----a-w-	C:\WINDOWS\Sysnative\msv1_0.dll
2016-11-29 15:56:37	667CE851EBDF393E0131D51141C7AA13	6664192	----a-w-	C:\WINDOWS\Sysnative\mspaint.exe
2016-11-29 15:56:35	21A82A267DE3E0EC597D1C34037E6496	833024	----a-w-	C:\WINDOWS\Sysnative\win32spl.dll
2016-11-29 15:56:34	DF7DDFB4040CED82E53FB72052C50253	651264	----a-w-	C:\WINDOWS\Sysnative\Windows.Devices.AllJoyn.dll
2016-11-29 15:56:34	DD062ACA9093121AD90D799F66EA1A0D	272384	----a-w-	C:\WINDOWS\Sysnative\mfksproxy.dll
2016-11-29 15:56:33	E16D62A6B83A0B260FFC81C02F426E9B	467968	----a-w-	C:\WINDOWS\Sysnative\Geolocation.dll
2016-11-29 15:56:33	7B993290E7691C446C16A56A431669BA	942080	----a-w-	C:\WINDOWS\Sysnative\audiosrv.dll
2016-11-29 15:56:32	145ABEEB1CAA6A07D090AB760A6C5D28	2213248	----a-w-	C:\WINDOWS\Sysnative\KernelBase.dll
2016-11-29 15:56:30	79DCE27E8C4CF6701BFE49EC2446BBF6	792064	----a-w-	C:\WINDOWS\Sysnative\spoolsv.exe
2016-11-29 15:56:30	45E17A495E9F42D1A50F5DEF27E3BF2F	1643008	----a-w-	C:\WINDOWS\Sysnative\Windows.Media.Speech.dll
2016-11-29 15:56:28	9D07DB08362745285DFC43BC3B30EFF6	9131008	----a-w-	C:\WINDOWS\Sysnative\twinui.dll
2016-11-29 15:56:26	C21AE05FEF386D35EC28D029ED7E7BFC	1908224	----a-w-	C:\WINDOWS\Sysnative\AzureSettingSyncProvider.dll
2016-11-29 15:56:26	39C70F43C4E7591DD196586388244974	1107456	----a-w-	C:\WINDOWS\Sysnative\aadtb.dll
2016-11-29 15:56:25	86CD7872C6703629FA0C7597361E45B4	4749312	----a-w-	C:\WINDOWS\Sysnative\SettingsHandlers_nt.dll
2016-11-29 15:56:01	8D958808853BE6D12997F8290879820C	2390016	----a-w-	C:\WINDOWS\Sysnative\smartscreen.exe
2016-11-29 15:55:57	8CBA7957D7F7B48C0D396E40AA2FBCDA	2104320	----a-w-	C:\WINDOWS\Sysnative\wlidsvc.dll
2016-11-29 15:55:51	7C4FAE7A8D55C897E5AE681B245A005F	837632	----a-w-	C:\WINDOWS\Sysnative\wbiosrvc.dll
2016-11-29 15:55:49	0072D9AFFB4BE25A6E766A0124599073	352768	----a-w-	C:\WINDOWS\Sysnative\cloudAP.dll
2016-11-29 15:55:41	9D7710DB7EFC24E134801B3F46E6D5F4	495104	----a-w-	C:\WINDOWS\Sysnative\DataSenseHandlers.dll
2016-11-29 15:55:41	9C010096033F1A3945C7932AEFEA4E1A	631296	----a-w-	C:\WINDOWS\Sysnative\WlanMediaManager.dll
2016-11-29 15:55:37	B87E8734A026C4D755E727572254DF58	2611200	----a-w-	C:\WINDOWS\Sysnative\gameux.dll
2016-11-29 15:55:35	CDD8EDF4C35BE6D6137112F5CC7A70DA	500064	----a-w-	C:\WINDOWS\Sysnative\pcasvc.dll
2016-11-29 15:55:34	7DC311E45F5147DFE8CF64993C007B89	3400192	----a-w-	C:\WINDOWS\Sysnative\SyncCenter.dll
2016-11-29 15:55:33	751783631C10210885FD43C6513DF445	240640	----a-w-	C:\WINDOWS\Sysnative\NetworkDesktopSettings.dll
2016-11-29 15:55:33	036D826413ED8690A0F944CEDA444403	111616	----a-w-	C:\WINDOWS\Sysnative\MDMAppInstaller.exe
2016-11-29 15:55:32	CADB07325FC174669CDC70D3FCAC1C9C	154112	----a-w-	C:\WINDOWS\Sysnative\NPSM.dll
2016-11-29 15:55:32	82F99FCA5931BB62B465F5B6B1D420DD	534096	----a-w-	C:\WINDOWS\Sysnative\AudioEng.dll
2016-11-29 15:55:32	7B1488C91CB52BA774D077D602974D7C	73216	----a-w-	C:\WINDOWS\Sysnative\offreg.dll
2016-11-29 15:55:32	12BBCC45F54D25603314599D7CA90B8B	43520	----a-w-	C:\WINDOWS\Sysnative\TpmTasks.dll
2016-11-29 15:55:28	76243E7DC953026A6548EC13A497E6C1	391168	----a-w-	C:\WINDOWS\Sysnative\wuuhext.dll
2016-11-29 15:55:28	39FE25A61C8DC6AA3CC6297A8C0FD4FE	629248	----a-w-	C:\WINDOWS\Sysnative\hgcpl.dll
2016-11-29 15:55:27	C65167B7D95BA8141F4419EA2F3CC409	496128	----a-w-	C:\WINDOWS\Sysnative\SystemSettings.UserAccountsHandlers.dll
2016-11-29 15:55:26	EB4A2458F3DFDECD0A97AD4B0609F085	940032	----a-w-	C:\WINDOWS\Sysnative\fontext.dll
2016-11-29 15:55:24	7BF03B897024B13AEADB4F6D61A4D14C	655872	----a-w-	C:\WINDOWS\Sysnative\sud.dll
2016-11-29 15:55:21	C3F61671F655569BFF6064C39BEAFEF7	2512384	----a-w-	C:\WINDOWS\Sysnative\themecpl.dll
2016-11-29 15:55:20	040F0126055BE37C650132AE1F32C286	43008	----a-w-	C:\WINDOWS\Sysnative\LaunchWinApp.exe
2016-11-29 15:55:17	763266054F4E847AE6E59DD02C630B42	389632	----a-w-	C:\WINDOWS\Sysnative\stobject.dll
2016-11-29 15:55:17	08805138ABD2C17AA6ECD42826C1BEAD	347136	----a-w-	C:\WINDOWS\Sysnative\Display.dll
2016-11-29 15:55:14	94E84BD5490F614F53363C033BC74942	567296	----a-w-	C:\WINDOWS\Sysnative\DevicePairing.dll
2016-11-29 15:55:14	2DC3D53FFA0D10EB8C911AE2DB7BF4CF	337920	----a-w-	C:\WINDOWS\Sysnative\AudioEndpointBuilder.dll
2016-11-29 15:55:10	C892022800FCC059365954F37CAE0EDF	163328	----a-w-	C:\WINDOWS\Sysnative\autoplay.dll
2016-11-29 15:55:10	09B02E6207527FAC786B979D29E8D606	828416	----a-w-	C:\WINDOWS\Sysnative\appwiz.cpl
2016-11-29 15:55:07	4F222DBCF23A7496BA813AF35E92DFAA	411136	----a-w-	C:\WINDOWS\Sysnative\DeviceCenter.dll
2016-11-29 15:55:06	E5CA1CAF332FAC87D5C59441BF767568	388608	----a-w-	C:\WINDOWS\Sysnative\zipfldr.dll
2016-11-29 15:55:06	55541FF2D66B9ECBA19A7F916A53AB75	49152	----a-w-	C:\WINDOWS\Sysnative\Windows.UI.Shell.dll
2016-11-29 15:55:06	368A8F7CB6C5D664799759AD4862C9C5	717312	----a-w-	C:\WINDOWS\Sysnative\taskbarcpl.dll
2016-11-29 15:55:05	E927C800402DB05BA5B20B0F24E7B197	217088	----a-w-	C:\WINDOWS\Sysnative\DevicePairingFolder.dll
2016-11-29 15:55:05	61992063ACB136D735DD28A5FFC7C8AA	115200	----a-w-	C:\WINDOWS\Sysnative\IdCtrls.dll
2016-11-29 15:55:05	27D5AC0C9ADFAF0AC31596468C36F2B5	18432	----a-w-	C:\WINDOWS\Sysnative\stdole2.tlb
2016-11-29 15:55:03	1AB84F1CEF3ABFD49CB2C01FD7F9CBE8	176128	----a-w-	C:\WINDOWS\Sysnative\apprepapi.dll
2016-11-29 15:55:02	035F0F0664AE01624691026C784A2CA5	379904	----a-w-	C:\WINDOWS\Sysnative\apprepsync.dll
2016-11-29 15:54:56	4A6E0F73BB10D4550FAADB9070F02814	690176	----a-w-	C:\WINDOWS\Sysnative\ieproxy.dll
2016-11-29 15:54:55	16747F22F593122590CC9B21964E20EA	759296	----a-w-	C:\WINDOWS\Sysnative\msfeeds.dll
2016-11-29 15:54:54	F36DF3F346A6DD77AE9EFC5343A3A92C	1779712	----a-w-	C:\WINDOWS\Sysnative\urlmon.dll
2016-11-29 15:54:54	11EC1BFF01763C8FAD7B1424468E89F7	2750936	----a-w-	C:\WINDOWS\Sysnative\iertutil.dll
2016-11-29 15:54:52	B737F6FB33A6F79BCBC293A5B32C1C4E	410624	----a-w-	C:\WINDOWS\Sysnative\cdpsvc.dll
2016-11-29 15:54:52	39F24A37B3195802E10B552FB6D70692	8127488	----a-w-	C:\WINDOWS\Sysnative\Chakra.dll
2016-11-29 15:54:52	170F8253749208D7C431F91676CD36EC	101888	----a-w-	C:\WINDOWS\Sysnative\UserDeviceRegistration.Ngc.dll
2016-11-29 15:54:51	FB70CE0C02304DFD2FC0AA7C9250E20E	13081600	----a-w-	C:\WINDOWS\Sysnative\ieframe.dll
2016-11-29 15:54:49	A1D6EAC6622B351212AC52621ABD3D9B	771072	----a-w-	C:\WINDOWS\Sysnative\AppointmentApis.dll
2016-11-29 15:54:49	2F338D525BCA71DC06FA83E72025CBBB	748544	----a-w-	C:\WINDOWS\Sysnative\ChatApis.dll
2016-11-29 15:54:48	47A88A58D75E255E06AE6BDCE5255D21	196096	----a-w-	C:\WINDOWS\Sysnative\UserDeviceRegistration.dll
2016-11-29 15:54:48	2ED2E96B5A6744E67BFFEDAD8965881F	775168	----a-w-	C:\WINDOWS\Sysnative\GamePanel.exe
2016-11-29 15:54:48	2531EF3423A9FE1692005A41907E3BE3	339456	----a-w-	C:\WINDOWS\Sysnative\cdpusersvc.dll
2016-11-29 15:54:47	B24F3F4E95ABECA2975D7BD645E53D90	159232	----a-w-	C:\WINDOWS\Sysnative\ACPBackgroundManagerPolicy.dll
2016-11-29 15:54:45	E94A8DF41C92D40FDE139A8E127A8EC7	321536	----a-w-	C:\WINDOWS\Sysnative\PsmServiceExtHost.dll
2016-11-29 15:54:45	8B52024D3A5C3A12F1C4D75D30A976C5	805888	----a-w-	C:\WINDOWS\Sysnative\FrameServer.dll
2016-11-29 15:54:45	0ABCABC31A038B199F63D000DB41B43A	23677952	----a-w-	C:\WINDOWS\Sysnative\mshtml.dll
2016-11-29 15:54:43	98B1A71B02AACE951CCE8DA7746DD118	8075776	----a-w-	C:\WINDOWS\Sysnative\mstscax.dll
2016-11-29 15:54:43	7F08626131800B977DE92B7C0DF481A1	2669056	----a-w-	C:\WINDOWS\Sysnative\wininet.dll
2016-11-29 15:54:42	DC09A8F384BD1ADD0D2265C4BF41AEC8	1145856	----a-w-	C:\WINDOWS\Sysnative\EmailApis.dll
2016-11-29 15:54:42	C1205EEBE05A10394B3C7C22890F9263	1013760	----a-w-	C:\WINDOWS\Sysnative\ContactApis.dll
2016-11-29 15:54:42	2447BD15B41298622CC662249CD0F496	770560	----a-w-	C:\WINDOWS\Sysnative\bisrv.dll
2016-11-29 15:54:41	4D2F68E0BC1F8C8DEC9DDE1DBB6D30C7	2476544	----a-w-	C:\WINDOWS\Sysnative\DWrite.dll
2016-11-29 15:54:40	D9057CFFDCAF9C83D0C5AD5446EDAE4A	5111296	----a-w-	C:\WINDOWS\Sysnative\cdp.dll
2016-11-29 15:54:40	C20AA1C87E29746C3745FA8BD5849233	1586176	----a-w-	C:\WINDOWS\Sysnative\Windows.Globalization.dll
2016-11-29 15:54:40	018E797BA4861E98AFC7B52C471423B0	7216640	----a-w-	C:\WINDOWS\Sysnative\Windows.Data.Pdf.dll
2016-11-29 15:54:39	7722CBEFB4D140D5C443CC5D03F9778A	480768	----a-w-	C:\WINDOWS\Sysnative\dsreg.dll
2016-11-29 15:54:38	583A1B528259CD4B67BC3DE6306375AE	22563840	----a-w-	C:\WINDOWS\Sysnative\edgehtml.dll
2016-11-29 15:54:37	601046DB1D3673BBD46E044904579E50	296960	----a-w-	C:\WINDOWS\Sysnative\mfsensorgroup.dll
2016-11-29 15:54:36	CD788633B6BE81B1C6029C8E8D9ABBA8	716800	----a-w-	C:\WINDOWS\Sysnative\ShareHost.dll
2016-11-29 15:54:35	91B1285AD75D2D7024ECB76853009E30	146432	----a-w-	C:\WINDOWS\Sysnative\AuthBroker.dll
2016-11-29 15:54:35	2D79E935E05384B656D7308D2F41932B	22223968	----a-w-	C:\WINDOWS\Sysnative\shell32.dll
2016-11-29 15:54:29	F9F4CFCB3845EABF81A654001C80854C	2273792	----a-w-	C:\WINDOWS\Sysnative\AppXDeploymentServer.dll
2016-11-29 15:54:29	5417E4F1387ECD730A7A49E8924B98B5	1690112	----a-w-	C:\WINDOWS\Sysnative\AppXDeploymentExtensions.onecore.dll
2016-11-29 15:54:29	518FE9EAE640B8CBE80FE374D7DF28B9	886784	----a-w-	C:\WINDOWS\Sysnative\CPFilters.dll
2016-11-29 15:54:28	466B452A3559FDB027FEDE1EF48799AA	4746752	----a-w-	C:\WINDOWS\Sysnative\jscript9.dll
2016-11-29 15:54:26	B456F96A00545F3F2CE5EBCEC55C17B2	2186896	----a-w-	C:\WINDOWS\Sysnative\hevcdecoder.dll
2016-11-29 15:54:25	F7EFAD8D7F960B7FFF1FA5074B1ECE41	193536	----a-w-	C:\WINDOWS\Sysnative\Windows.Devices.WiFi.dll
2016-11-29 15:54:25	B463BEB111D821F590580C13878D2F30	279552	----a-w-	C:\WINDOWS\Sysnative\Windows.Devices.HumanInterfaceDevice.dll
2016-11-29 15:54:25	91793D288E1D10153A74C581A44F036B	236544	----a-w-	C:\WINDOWS\Sysnative\SettingsHandlers_Flights.dll
2016-11-29 15:54:25	15D1BB704C38EE2E975E3EBDB9C1C78D	1513472	----a-w-	C:\WINDOWS\Sysnative\win32kbase.sys
2016-11-29 15:54:24	3D5F44B1137E72725BD8A37E3F003185	429568	----a-w-	C:\WINDOWS\Sysnative\SndVolSSO.dll
2016-11-29 15:54:23	BF1ADD6D67CBC0EC8BD466B909C544C3	3496960	----a-w-	C:\WINDOWS\Sysnative\MSVidCtl.dll
2016-11-29 15:54:22	E4BBECEFAE8FC9E2C7386183056D1EF5	590848	----a-w-	C:\WINDOWS\Sysnative\vbscript.dll
2016-11-29 15:54:22	B5052EED409881591D081EB35E31FCF6	1348608	----a-w-	C:\WINDOWS\Sysnative\wifinetworkmanager.dll
2016-11-29 15:54:21	EF1BB0EF8A12C32DD88C409706B8145E	945664	----a-w-	C:\WINDOWS\Sysnative\iphlpsvc.dll
2016-11-29 15:54:20	FB81DC06FFD814CF9ED43B010D9B9386	4708864	----a-w-	C:\WINDOWS\Sysnative\ExplorerFrame.dll
2016-11-29 15:54:19	BA1AF3F03004E839BAAF9316FA96012C	227328	----a-w-	C:\WINDOWS\Sysnative\cdd.dll
2016-11-29 15:54:19	00B07EE58121543C637BAB8AA149BAF2	579072	----a-w-	C:\WINDOWS\Sysnative\LockAppBroker.dll
2016-11-29 15:54:17	00064246BCFA7740CCCFA42D00339AC7	982528	----a-w-	C:\WINDOWS\Sysnative\inetcomm.dll
2016-11-29 15:54:15	3EF6CC3C597ECE7FEDFBDB20929DE4C8	3299840	----a-w-	C:\WINDOWS\Sysnative\mstsc.exe
2016-11-29 15:54:13	DB023286233396E001A852683590178C	956416	----a-w-	C:\WINDOWS\Sysnative\AppXDeploymentExtensions.desktop.dll
2016-11-29 15:54:12	CCBAD93556C460C5C50D4DC097FA7A77	363520	----a-w-	C:\WINDOWS\Sysnative\Windows.UI.BioFeedback.dll
2016-11-29 15:54:12	9CBBEFA2957CED5ACE8319C50E02CDE9	605184	----a-w-	C:\WINDOWS\Sysnative\bcastdvr.exe
2016-11-29 15:54:12	872F8678B51B8CC724898D6E22761001	261632	----a-w-	C:\WINDOWS\Sysnative\indexeddbserver.dll
2016-11-29 15:54:11	C58F08689228B307F42E4143E99F6A5E	78336	----a-w-	C:\WINDOWS\Sysnative\iscsiwmi.dll
2016-11-29 15:54:11	7FF2BCE9A5678D979FD300889BA1AC03	81408	----a-w-	C:\WINDOWS\Sysnative\HttpsDataSource.dll
2016-11-29 15:54:10	CF7D6BF07E014BC6466BC1349153D3F0	423776	----a-w-	C:\WINDOWS\Sysnative\wifitask.exe
2016-11-29 15:54:10	28AEA9AC3951A7A981FEDD50B02CCEE0	219648	----a-w-	C:\WINDOWS\Sysnative\AudioSrvPolicyManager.dll
2016-11-29 15:54:09	E5DDBD20FDB5D66B18781E3E47EEF099	1637888	----a-w-	C:\WINDOWS\Sysnative\ieapfltr.dll
2016-11-29 15:54:01	ADC3DDB194CB9F8131902473B57EF969	72704	----a-w-	C:\WINDOWS\Sysnative\ErrorDetailsUpdate.dll
2016-11-29 15:54:01	0C4D5B1C001E5B34C759E1A96315FC62	90112	----a-w-	C:\WINDOWS\Sysnative\powercfg.exe
2016-11-29 15:54:00	F099B73C58D9DFDB3BF680208F527FEB	842240	----a-w-	C:\WINDOWS\Sysnative\ntshrui.dll
2016-11-29 15:54:00	5BB95BF277A60BC0A7C397799B7C22E6	438784	----a-w-	C:\WINDOWS\Sysnative\EncDec.dll
2016-11-29 15:53:59	2ADA0B221942ED692B172B236541C392	265728	----a-w-	C:\WINDOWS\Sysnative\dhcpcore6.dll
2016-11-29 15:53:59	2A2E51FBF9FE4E422E5A95FF141267B5	243712	----a-w-	C:\WINDOWS\Sysnative\shdocvw.dll
2016-11-29 15:53:58	832E933AA8DB9FD4733B96D8B6484D3F	541696	----a-w-	C:\WINDOWS\Sysnative\ipnathlp.dll
2016-11-29 15:53:58	7B68267D8C2646C1B330F37DA6B25D3B	139264	----a-w-	C:\WINDOWS\Sysnative\iepeers.dll
2016-11-29 15:53:58	4ADF6E0E86FA5327D6DBF066F8036874	322048	----a-w-	C:\WINDOWS\Sysnative\GlobCollationHost.dll
2016-11-29 15:53:58	3468B84ECBAE963913DD67FFCF0728B2	167936	----a-w-	C:\WINDOWS\Sysnative\ErrorDetails.dll
2016-11-29 15:53:57	456325D78DD2E8025F4F9F5E0ED0FC51	198656	----a-w-	C:\WINDOWS\Sysnative\BcastDVRHelper.dll
2016-11-29 15:53:57	26AB90DDC72EF878313AE3A597B27580	276992	----a-w-	C:\WINDOWS\Sysnative\dxtrans.dll
2016-11-29 15:53:56	EC9296E14C716E9D30D176DCF54A77BC	418304	----a-w-	C:\WINDOWS\Sysnative\Windows.UI.BlockedShutdown.dll
2016-11-29 15:53:56	E18F72DBFE45BBF8B8A38E0288F1488F	170496	----a-w-	C:\WINDOWS\Sysnative\AppCapture.dll
2016-11-29 15:53:56	7169BFC287AF53DAB322B4A8E1A082E2	314880	----a-w-	C:\WINDOWS\Sysnative\FSClient.dll
2016-11-29 15:53:55	4B3704C2E63A66E7E47485F70AE44558	88576	----a-w-	C:\WINDOWS\Sysnative\mshtmled.dll
2016-11-29 15:53:49	B0C0D4D3F1FDABB60A2906190D5B0D8C	894096	----a-w-	C:\WINDOWS\Sysnative\winresume.exe
2016-11-29 15:53:49	3076FB428B979CFBFAC36E68A3DD27BC	1051112	----a-w-	C:\WINDOWS\Sysnative\winresume.efi
2016-11-29 15:53:49	2F60C9134CE8EF8A04397EB5765E9659	1354320	----a-w-	C:\WINDOWS\Sysnative\winload.efi
2016-11-29 15:53:49	2D3B7409F1FD8E88D42F7575C758DB2E	1173496	----a-w-	C:\WINDOWS\Sysnative\winload.exe
2016-11-29 15:53:48	27A17D0AAAFCA690113935930747EF2A	92512	----a-w-	C:\WINDOWS\Sysnative\rdpudd.dll
2016-11-29 15:53:43	D7346ACC44EA20750360DF841FAE2117	7816544	----a-w-	C:\WINDOWS\Sysnative\ntoskrnl.exe
2016-11-29 15:53:42	A9C60295BC9E7C7477F7BCC83356336B	584192	----a-w-	C:\WINDOWS\Sysnative\UIRibbonRes.dll
2016-11-29 15:53:41	640658A1DD93BA36D9612A710F9C516F	1418312	----a-w-	C:\WINDOWS\Sysnative\msctf.dll
2016-11-29 15:53:39	CFC9F56A6E4862242689DD01B643482C	321024	----a-w-	C:\WINDOWS\Sysnative\NetworkUXBroker.dll
2016-11-29 15:53:39	C96C8335FD3FD6DFE1B8866E97D38E7F	748544	----a-w-	C:\WINDOWS\Sysnative\StoreAgent.dll
2016-11-29 15:53:39	C7FA0F9CD246A9B046548BB499039BEA	211968	----a-w-	C:\WINDOWS\Sysnative\InstallAgent.exe
2016-11-29 15:53:39	42C292AA69762E4C630208064E412311	113664	----a-w-	C:\WINDOWS\Sysnative\Windows.Networking.ServiceDiscovery.Dnssd.dll
2016-11-29 15:53:39	1CB218C1D60DE781649AD307BDD4423F	73216	----a-w-	C:\WINDOWS\Sysnative\Windows.StateRepositoryBroker.dll
2016-11-29 15:53:39	0C70BD1400822C375B62C48BF25042CC	122880	----a-w-	C:\WINDOWS\Sysnative\Windows.StateRepositoryClient.dll
2016-11-29 15:53:38	B1383DC57D602C97546C2BCDB4357170	1990648	----a-w-	C:\WINDOWS\Sysnative\mfmp4srcsnk.dll
2016-11-29 15:53:38	471EAC534060BAA624E948DAB7DFD0EB	3778560	----a-w-	C:\WINDOWS\Sysnative\MFMediaEngine.dll
2016-11-29 15:53:37	BB3DF8AED949BEFB5248D7F1A2846E66	936960	----a-w-	C:\WINDOWS\Sysnative\MCRecvSrc.dll
2016-11-29 15:53:37	89F4C6306FE1A29A21DBFE3287CC1885	1859264	----a-w-	C:\WINDOWS\Sysnative\Windows.ApplicationModel.Store.dll
2016-11-29 15:53:37	21766CDBBA69CE5C42AA3F666DF7F524	4474368	----a-w-	C:\WINDOWS\Sysnative\D3DCompiler_47.dll
2016-11-29 15:53:36	FD881B87C853EB2F0B8B7B5CC71D6FE3	4136960	----a-w-	C:\WINDOWS\Sysnative\Windows.StateRepository.dll
2016-11-29 15:53:36	A35CEC1EA36C5C25A907F49E53BB665C	406016	----a-w-	C:\WINDOWS\Sysnative\AppXDeploymentClient.dll
2016-11-29 15:53:35	B227E34833D54E00C02A4EDA448B85C4	6285312	----a-w-	C:\WINDOWS\Sysnative\Windows.Media.dll
2016-11-29 15:53:34	3899F54C6E8678737289D1AA75D96D86	3616768	----a-w-	C:\WINDOWS\Sysnative\win32kfull.sys
2016-11-29 15:53:33	F3DBAD47F17A815DEC36C7485A5CCA7B	1061968	----a-w-	C:\WINDOWS\Sysnative\mfsvr.dll
2016-11-29 15:53:33	C86B21E18545F2A00BE8438B3F64E5E7	1071728	----a-w-	C:\WINDOWS\Sysnative\mfnetcore.dll
2016-11-29 15:53:33	40628BFFD1C5D6B7E27D66AA36E9BDCC	1472536	----a-w-	C:\WINDOWS\Sysnative\mfplat.dll
2016-11-29 15:53:32	CC913E2DDAAA391CC49F23CC360F73ED	1490944	----a-w-	C:\WINDOWS\Sysnative\lsasrv.dll
2016-11-29 15:53:32	13F560DCCDCF5DBBFECA3FDC87A7F4C4	4130432	----a-w-	C:\WINDOWS\Sysnative\mfcore.dll
2016-11-29 15:53:27	49BF5C8182C3D2D6CD9F7EEDF1CFDB66	1840640	----a-w-	C:\WINDOWS\Sysnative\FntCache.dll
2016-11-29 15:53:26	1EB27A45995AEBC20026707A038B105C	1572768	----a-w-	C:\WINDOWS\Sysnative\gdi32full.dll
2016-11-29 15:53:24	54C31C2B815E2E26BB8158022F837C9C	983040	----a-w-	C:\WINDOWS\Sysnative\ngcsvc.dll
2016-11-29 15:53:22	AE598A72F00E8BD6D2C5CCCFD9659833	1267504	----a-w-	C:\WINDOWS\Sysnative\WinTypes.dll
2016-11-29 15:53:18	47E6107CA36990552608CC6316A58086	283488	----a-w-	C:\WINDOWS\Sysnative\DeviceCensus.exe
2016-11-29 15:53:18	1A285D1020E3D6FC310A1D68FC8CBA9C	1656832	----a-w-	C:\WINDOWS\Sysnative\GdiPlus.dll
2016-11-29 15:53:17	F8468E150EB55D038571F99476DD3262	2913104	----a-w-	C:\WINDOWS\Sysnative\combase.dll
2016-11-29 15:53:17	39833DC1C734E08593909E7C405361E9	2827864	----a-w-	C:\WINDOWS\Sysnative\d3d11.dll
2016-11-29 15:53:15	C509CCD23B086DFC9EAF86E280043672	147456	----a-w-	C:\WINDOWS\Sysnative\winsrv.dll
2016-11-29 15:53:12	9C58479C6F685B0CB9FBA560DD905B0B	1005568	----a-w-	C:\WINDOWS\Sysnative\D3D12.dll
2016-11-29 15:53:12	98326410B37312F3A57E8040250BDC32	1609920	----a-w-	C:\WINDOWS\Sysnative\d3d9.dll
2016-11-29 15:53:11	1A67F02D6CF159EE2BD0FEAB157F8F89	1851696	----a-w-	C:\WINDOWS\Sysnative\crypt32.dll
2016-11-29 15:53:10	C2A3B07F0118D61086C99BDCBAB6A6A3	817664	----a-w-	C:\WINDOWS\Sysnative\winhttp.dll
2016-11-29 15:53:10	9EFB3E971CEECAA0D825F4EA51199688	2678056	----a-w-	C:\WINDOWS\Sysnative\d3d10warp.dll
2016-11-29 15:53:10	1E94B375D3C43378CDA3000EE97654F0	4148736	----a-w-	C:\WINDOWS\Sysnative\rdpcorets.dll
2016-11-29 15:53:09	B2B0EB8BB0D741B798C691A9FED1B7B8	98816	----a-w-	C:\WINDOWS\Sysnative\BthRadioMedia.dll
2016-11-29 15:53:08	90262FC8018F7B58A99EB9C7E11419A9	2290176	----a-w-	C:\WINDOWS\Sysnative\dwmcore.dll
2016-11-29 15:53:07	ECD999D8412A3473C26B118F89DB9908	635904	----a-w-	C:\WINDOWS\Sysnative\FlightSettings.dll
2016-11-29 15:53:07	D955BB9649E4FDBE105927A751594D88	260608	----a-w-	C:\WINDOWS\Sysnative\InstallAgentUserBroker.exe
2016-11-29 15:53:07	8E64543F3A4EE52A5F9A41029F12CF48	691080	----a-w-	C:\WINDOWS\Sysnative\msvproc.dll
2016-11-29 15:53:06	CD84C41DA2B3C4F6CC4849D3A52C27A2	378720	----a-w-	C:\WINDOWS\Sysnative\atmfd.dll
2016-11-29 15:53:06	9A1CA7F4C001921A2E016F004C87E6A4	628552	----a-w-	C:\WINDOWS\Sysnative\fontdrvhost.exe
2016-11-29 15:53:06	13CB028E951A9D2A7D6B50D19F8E9D45	848736	----a-w-	C:\WINDOWS\Sysnative\NetSetupEngine.dll
2016-11-29 15:53:04	46357DDCA2C795B63DE0FFA00F2C33D4	327168	----a-w-	C:\WINDOWS\Sysnative\microsoft-windows-system-events.dll
2016-11-29 15:53:03	A6CDBB9CDEB402BF4F9DFC21C4C18D72	558080	----a-w-	C:\WINDOWS\Sysnative\wpnprv.dll
2016-11-29 15:53:03	6FAD3704C336BF87A2543EF82C987F33	120832	----a-w-	C:\WINDOWS\Sysnative\BluetoothApis.dll
2016-11-29 15:53:03	2B7AF493E824EF68527F87EC07420055	273920	----a-w-	C:\WINDOWS\Sysnative\UIAnimation.dll
2016-11-29 15:53:02	2593EAA308B8C99BB9A04A7CECEDDBB1	788624	----a-w-	C:\WINDOWS\Sysnative\locale.nls
2016-11-29 15:53:00	D65F295A049473E6A39EA9A0EA76CA32	265728	----a-w-	C:\WINDOWS\Sysnative\NetSetupSvc.dll
2016-11-29 15:52:59	C02E819A0CEF6330F06509DA8EAA15ED	811416	----a-w-	C:\WINDOWS\Sysnative\MFCaptureEngine.dll
2016-11-29 15:52:59	5757459686554B784F3CCE8C3BAF6D8B	1461200	----a-w-	C:\WINDOWS\Sysnative\user32.dll
2016-11-29 15:52:58	634B022069B02B2103F89F2B3BD07382	206848	----a-w-	C:\WINDOWS\Sysnative\win32k.sys
2016-11-29 15:52:46	E9593A867F629205B1C3997B07C83FA9	322912	----a-w-	C:\WINDOWS\Sysnative\input.dll
2016-11-29 15:52:46	55C58F16ABEEB035D1D3B9DB475EDB09	241152	----a-w-	C:\WINDOWS\Sysnative\dafBth.dll
2016-11-29 15:52:44	E6C9FBF308B8A5CA11634DFFA69E92F9	148832	----a-w-	C:\WINDOWS\Sysnative\NetSetupApi.dll
2016-11-29 15:52:42	F2EC11E6910B515B603224D431A8DD73	69632	----a-w-	C:\WINDOWS\Sysnative\wininetlui.dll
2016-11-29 15:52:23	77377F46EC1E38908FB11A48322DD085	45056	----a-w-	C:\WINDOWS\Sysnative\atmlib.dll
2016-11-27 20:21:23	E43AEE6A66067C6535C1F994BCFB93A1	391496	----a-w-	C:\WINDOWS\Sysnative\aswBoot.exe
====== C:\WINDOWS\Sysnative\drivers =====
2016-11-29 15:59:02	E6D5762958A839B119C041256149AAD6	967168	----a-w-	C:\WINDOWS\Sysnative\drivers\bthport.sys
2016-11-29 15:58:59	39591D8510CEC3BA6ED4330EE689B791	376672	----a-w-	C:\WINDOWS\Sysnative\drivers\clfs.sys
2016-11-29 15:58:56	3DFBB8B3F8BC0A91297030D0E530BA37	79200	----a-w-	C:\WINDOWS\Sysnative\drivers\crashdmp.sys
2016-11-29 15:58:53	DEA44117F9EE53EAFCE555C0A9B108C6	509280	----a-w-	C:\WINDOWS\Sysnative\drivers\storport.sys
2016-11-29 15:58:53	9CD2A4821DE379305CACB2E99AD8953A	101888	----a-w-	C:\WINDOWS\Sysnative\drivers\bowser.sys
2016-11-29 15:58:45	C1E85B4FB08B4CCF16841B165910148B	258560	----a-w-	C:\WINDOWS\Sysnative\drivers\xboxgip.sys
2016-11-29 15:58:45	25D32BE04FE0A23FDF57FD5382757672	143872	----a-w-	C:\WINDOWS\Sysnative\drivers\mrxdav.sys
2016-11-29 15:58:31	A10C7C1E69FC90620C7BF2E51302A01F	1100128	----a-w-	C:\WINDOWS\Sysnative\drivers\http.sys
2016-11-29 15:57:47	46ADD0CD4473AAEF1C68266A803F704D	714592	----a-w-	C:\WINDOWS\Sysnative\drivers\vhdmp.sys
2016-11-29 15:55:52	7C3D10BEC8B0DBA00A78C78EB10B3AE2	279904	----a-w-	C:\WINDOWS\Sysnative\drivers\sdbus.sys
2016-11-29 15:55:39	DB69C6DA8B3DDFDC547D455CA23A8250	2255712	----a-w-	C:\WINDOWS\Sysnative\drivers\ntfs.sys
2016-11-29 15:55:35	FFFBB40B9C7AD811AA6EA74A0A6168B1	187232	----a-w-	C:\WINDOWS\Sysnative\drivers\dumpsd.sys
2016-11-29 15:55:26	5157325B17E455D9DF7AFBB4B608E78A	156672	----a-w-	C:\WINDOWS\Sysnative\drivers\hidclass.sys
2016-11-29 15:54:48	5BEE032780FCE432A80E58C14CDEA965	402272	----a-w-	C:\WINDOWS\Sysnative\drivers\dxgmms1.sys
2016-11-29 15:54:41	72C828E0A21020FC6723A940A8F2F085	658272	----a-w-	C:\WINDOWS\Sysnative\drivers\dxgmms2.sys
2016-11-29 15:54:41	125C83C44EEE61E2ED5893F23AEF0FC9	2190688	----a-w-	C:\WINDOWS\Sysnative\drivers\dxgkrnl.sys
2016-11-29 15:54:20	0D1D392ED2597F295956D058D33BD7C3	144896	----a-w-	C:\WINDOWS\Sysnative\drivers\dfsc.sys
2016-11-29 15:54:16	039B5A8CBD5C75D1C46DF15F7C74D136	63328	----a-w-	C:\WINDOWS\Sysnative\drivers\dam.sys
2016-11-29 15:53:48	D5564FC81350458ED570528C4E3B1CCF	1181536	----a-w-	C:\WINDOWS\Sysnative\drivers\ndis.sys
2016-11-29 15:53:48	2CF0CB2A0ED68C5455371E84C16F9627	64352	----a-w-	C:\WINDOWS\Sysnative\drivers\MegaSas2i.sys
2016-11-29 15:53:47	101CC1FD8D48ED1EF71F0840158D0E6D	335712	----a-w-	C:\WINDOWS\Sysnative\drivers\pci.sys
2016-11-29 15:53:44	C994DF90427103CCB80F893FFD2B1CE8	557408	----a-w-	C:\WINDOWS\Sysnative\drivers\spaceport.sys
2016-11-29 15:53:05	4F25E481124059CC593B4C68BC485640	2537824	----a-w-	C:\WINDOWS\Sysnative\drivers\tcpip.sys
2016-11-29 15:53:01	323AA1953ED9C01E23F740FA891FE064	584032	----a-w-	C:\WINDOWS\Sysnative\drivers\afd.sys
2016-11-29 15:53:00	23522E5D581F7722B1B5B86737CAE39C	227328	----a-w-	C:\WINDOWS\Sysnative\drivers\ahcache.sys
2016-11-29 15:52:59	DB32758F3A7F6CCE81A5430080A2EA65	48992	----a-w-	C:\WINDOWS\Sysnative\drivers\iorate.sys
2016-11-29 15:52:53	B23596AFC687B5256CCD7DD429E2E6FB	409952	----a-w-	C:\WINDOWS\Sysnative\drivers\FWPKCLNT.SYS
2016-11-29 15:52:47	E5E5D9E317739CEE510EAF46C88A7C38	128864	----a-w-	C:\WINDOWS\Sysnative\drivers\tm.sys
2016-11-29 15:52:43	60EB6A4CE3E21887D302350631C16F26	118272	----a-w-	C:\WINDOWS\Sysnative\drivers\capimg.sys
====== C:\WINDOWS\Tasks ======
2016-11-28 19:56:17	DA7AB3BE46596402E8BA33D1BBADF5F2	214	----a-w-	C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
====== C:\WINDOWS\Temp ======
======= C:\Program Files =====
2016-11-28 20:45:41	--------	d-----w-	C:\Program Files\trend micro
======= C:\PROGRA~2 =====
======= C: =====
====== C:\Users\Krista\AppData\Roaming ======
2016-11-30 19:07:43	--------	d-----w-	C:\Users\Krista\AppData\Local\Temp
====== C:\Users\Krista ======
2016-11-28 20:44:57	8045ABB21A3BDD66A48E1ED5C0F0EF6A	1222144	----a-w-	C:\Users\Krista\Downloads\RSITx64.exe

====== C: exe-files ==
2016-12-04 21:02:57	442CEC1189EC3D6A7F2B8D9FDE0033F0	2242040	----a-w-	C:\Users\Krista\AppData\Local\Google\Chrome\User Data\SwReporter\14.83.3\software_reporter_tool.exe
2016-11-29 15:58:43	8C452FBF0C90155E583FF11D3905D937	369664	----a-w-	C:\Program Files\Common Files\microsoft shared\MSInfo\msinfo32.exe
2016-11-29 15:58:41	C384BFC7DAC22AA27E4F2974A81D8D6E	4300800	----a-w-	C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
2016-11-29 15:57:37	13C398101A5ED0CE80ADBEBA857314A8	1842176	----a-w-	C:\Program Files\Windows Media Player\setup_wm.exe
2016-11-29 15:57:34	21E5561A3B3B7A9A32E84C15D1E4F7A4	90112	----a-w-	C:\Program Files\Windows Media Player\wmlaunch.exe
2016-11-29 15:57:27	C4B56C14C70B324FCF50AA857733A0B0	1810944	----a-w-	C:\Program Files (x86)\Windows Media Player\setup_wm.exe
2016-11-29 15:57:25	08D16561E6724637D887F451A896F7F0	73216	----a-w-	C:\Program Files (x86)\Windows Media Player\wmlaunch.exe
2016-11-29 15:54:08	4B2FAC6C55B9FE2B245A1E45ABF1A19E	4500480	----a-w-	C:\Program Files\Windows NT\Accessories\wordpad.exe
2016-11-29 15:52:37	DDAD9B61722B2A68A437EA6087AF501E	336896	----a-w-	C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\msinfo32.exe
2016-11-28 20:51:55	466BED4EF0C53739C841839D181E00C5	2207224	----a-w-	C:\Users\Krista\AppData\Local\Google\Chrome\User Data\SwReporter\14.82.0\software_reporter_tool.exe
2016-11-28 20:45:41	9A2347903D6EDB84C10F288BC0578C1C	388608	----a-w-	C:\Program Files\trend micro\Krista.exe
2016-11-28 17:50:31	D2CB83A6CCD4CF0A62A7CD48CDFF84F6	44351864	----a-w-	C:\Program Files (x86)\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\54.0.2840.99\54.0.2840.99_chrome_installer.exe
=== C: other files ==
2016-11-29 15:59:02	E6D5762958A839B119C041256149AAD6	967168	----a-w-	C:\Windows\System32\drivers\bthport.sys
2016-11-29 15:58:59	39591D8510CEC3BA6ED4330EE689B791	376672	----a-w-	C:\Windows\System32\drivers\clfs.sys
2016-11-29 15:58:56	3DFBB8B3F8BC0A91297030D0E530BA37	79200	----a-w-	C:\Windows\System32\drivers\crashdmp.sys
2016-11-29 15:58:53	DEA44117F9EE53EAFCE555C0A9B108C6	509280	----a-w-	C:\Windows\System32\drivers\storport.sys
2016-11-29 15:58:53	9CD2A4821DE379305CACB2E99AD8953A	101888	----a-w-	C:\Windows\System32\drivers\bowser.sys
2016-11-29 15:58:45	C1E85B4FB08B4CCF16841B165910148B	258560	----a-w-	C:\Windows\System32\drivers\xboxgip.sys
2016-11-29 15:58:45	25D32BE04FE0A23FDF57FD5382757672	143872	----a-w-	C:\Windows\System32\drivers\mrxdav.sys
2016-11-29 15:58:31	A10C7C1E69FC90620C7BF2E51302A01F	1100128	----a-w-	C:\Windows\System32\drivers\http.sys
2016-11-29 15:57:47	46ADD0CD4473AAEF1C68266A803F704D	714592	----a-w-	C:\Windows\System32\drivers\vhdmp.sys
2016-11-29 15:55:52	7C3D10BEC8B0DBA00A78C78EB10B3AE2	279904	----a-w-	C:\Windows\System32\drivers\sdbus.sys
2016-11-29 15:55:39	DB69C6DA8B3DDFDC547D455CA23A8250	2255712	----a-w-	C:\Windows\System32\drivers\ntfs.sys
2016-11-29 15:55:35	FFFBB40B9C7AD811AA6EA74A0A6168B1	187232	----a-w-	C:\Windows\System32\drivers\dumpsd.sys
2016-11-29 15:55:26	5157325B17E455D9DF7AFBB4B608E78A	156672	----a-w-	C:\Windows\System32\drivers\hidclass.sys
2016-11-29 15:54:48	5BEE032780FCE432A80E58C14CDEA965	402272	----a-w-	C:\Windows\System32\drivers\dxgmms1.sys
2016-11-29 15:54:41	72C828E0A21020FC6723A940A8F2F085	658272	----a-w-	C:\Windows\System32\drivers\dxgmms2.sys
2016-11-29 15:54:41	125C83C44EEE61E2ED5893F23AEF0FC9	2190688	----a-w-	C:\Windows\System32\drivers\dxgkrnl.sys
2016-11-29 15:54:25	15D1BB704C38EE2E975E3EBDB9C1C78D	1513472	----a-w-	C:\Windows\System32\win32kbase.sys
2016-11-29 15:54:20	0D1D392ED2597F295956D058D33BD7C3	144896	----a-w-	C:\Windows\System32\drivers\dfsc.sys
2016-11-29 15:54:16	039B5A8CBD5C75D1C46DF15F7C74D136	63328	----a-w-	C:\Windows\System32\drivers\dam.sys
2016-11-29 15:53:48	D5564FC81350458ED570528C4E3B1CCF	1181536	----a-w-	C:\Windows\System32\drivers\ndis.sys
2016-11-29 15:53:48	2CF0CB2A0ED68C5455371E84C16F9627	64352	----a-w-	C:\Windows\System32\drivers\MegaSas2i.sys
2016-11-29 15:53:47	101CC1FD8D48ED1EF71F0840158D0E6D	335712	----a-w-	C:\Windows\System32\drivers\pci.sys
2016-11-29 15:53:44	C994DF90427103CCB80F893FFD2B1CE8	557408	----a-w-	C:\Windows\System32\drivers\spaceport.sys
2016-11-29 15:53:34	3899F54C6E8678737289D1AA75D96D86	3616768	----a-w-	C:\Windows\System32\win32kfull.sys
2016-11-29 15:53:05	4F25E481124059CC593B4C68BC485640	2537824	----a-w-	C:\Windows\System32\drivers\tcpip.sys
2016-11-29 15:53:01	323AA1953ED9C01E23F740FA891FE064	584032	----a-w-	C:\Windows\System32\drivers\afd.sys
2016-11-29 15:53:00	23522E5D581F7722B1B5B86737CAE39C	227328	----a-w-	C:\Windows\System32\drivers\ahcache.sys
2016-11-29 15:52:59	DB32758F3A7F6CCE81A5430080A2EA65	48992	----a-w-	C:\Windows\System32\drivers\iorate.sys
2016-11-29 15:52:58	634B022069B02B2103F89F2B3BD07382	206848	----a-w-	C:\Windows\System32\win32k.sys
2016-11-29 15:52:53	B23596AFC687B5256CCD7DD429E2E6FB	409952	----a-w-	C:\Windows\System32\drivers\FWPKCLNT.SYS
2016-11-29 15:52:47	E5E5D9E317739CEE510EAF46C88A7C38	128864	----a-w-	C:\Windows\System32\drivers\tm.sys
2016-11-29 15:52:43	60EB6A4CE3E21887D302350631C16F26	118272	----a-w-	C:\Windows\System32\drivers\capimg.sys

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"OneDriveSetup"="C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup"

[HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"OneDriveSetup"="C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup"

[HKEY_USERS\S-1-5-21-1842194742-782957760-2676667981-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MyDriveConnect.exe"="C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe"
"Spotify Web Helper"="C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe"
"OneDrive"="C:\Users\Krista\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background"
"HP Deskjet 3050 J610 series (NET)"="C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\ScanToPCActivationApp.exe -deviceID CN07D13KJX05HX:NW -scfn HP Deskjet 3050 J610 series (NET) -AutoStart 1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"="C:\Program Files\AVAST Software\Avast\AvastUI.exe /nogui"
"HP Software Update"="C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"MyDriveConnect.exe"="C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe"
"Spotify Web Helper"="C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe"
"OneDrive"="C:\Users\Krista\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background"
"HP Deskjet 3050 J610 series (NET)"="C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\ScanToPCActivationApp.exe -deviceID CN07D13KJX05HX:NW -scfn HP Deskjet 3050 J610 series (NET) -AutoStart 1"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"="C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe"

==== Startup Registry Enabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"BtvStack"="C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe"

==== Task Scheduler Jobs ======================

C:\WINDOWS\tasks\CreateExplorerShellUnelevatedTask.job --a-------- C:\WINDOWS\explorer.exe [02/11/2016 11:59]
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job --a-------- [Undetermined Task]
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job --a-------- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [18/04/2015 11:38]

==== Other Scheduled Tasks ======================

"C:\WINDOWS\SysNative\tasks\ACC" [C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe]
"C:\WINDOWS\SysNative\tasks\ACCAgent" [C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe]
"C:\WINDOWS\SysNative\tasks\AcerCloud" [C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe]
"C:\WINDOWS\SysNative\tasks\Adobe Acrobat Update Task" [C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe]
"C:\WINDOWS\SysNative\tasks\BacKGroundAgent" [C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe]
"C:\WINDOWS\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]
"C:\WINDOWS\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]
"C:\WINDOWS\SysNative\tasks\HPCustParticipation HP Deskjet 3050 J610 series" ["C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\HPCustPartic.exe"]
"C:\WINDOWS\SysNative\tasks\Launch Manager" ["C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe"]
"C:\WINDOWS\SysNative\tasks\OneDrive Standalone Update Task" [C:\Users\Krista\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe]
"C:\WINDOWS\SysNative\tasks\Power Management" ["C:\Program Files\Acer\Acer Power Management\ePowerTrayLauncher.exe"]
"C:\WINDOWS\SysNative\tasks\Quick Access" ["C:\Program Files\Acer\Acer Quick Access\QALauncher.exe"]
"C:\WINDOWS\SysNative\tasks\Quick Access Quick Launcher" ["C:\Program Files\Acer\Acer Quick Access\QALauncher.exe"]
"C:\WINDOWS\SysNative\tasks\SafeZone scheduled Autoupdate 1468518704" [C:\Program Files\AVAST Software\SZBrowser\launcher.exe]
"C:\WINDOWS\SysNative\tasks\SweetLabs App Platform" [%LOCALAPPDATA%\SweetLabs App Platform\Engine\ServiceHostAppUpdater.exe]
"C:\WINDOWS\SysNative\tasks\UbtFrameworkService" ["C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe"]
"C:\WINDOWS\SysNative\tasks\User_Feed_Synchronization-{B35A5093-95BE-4D35-AEDA-9D0D81D410CE}" [C:\Windows\system32\msfeedssync.exe]
"C:\WINDOWS\SysNative\tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start" [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe]
"C:\WINDOWS\SysNative\tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report" [C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe]
"C:\WINDOWS\SysNative\tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater" [C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe]
"C:\WINDOWS\SysNative\tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis" [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe]
"C:\WINDOWS\SysNative\tasks\Recovery Management\Notification" [C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe]

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"sp@avast.com"="C:\Program Files\AVAST Software\Avast\SafePrice\FF" [27/11/2016 21:21]
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"sp@avast.com"="C:\Program Files\AVAST Software\Avast\SafePrice\FF" [27/11/2016 21:21]

==== Chromium Look ======================


Google Slides - Krista\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek
Google Docs - Krista\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake
Google Drive - Krista\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf
YouTube - Krista\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo
Google Sheets - Krista\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap
Chrome Web Store Payments - Krista\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
Gmail - Krista\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia
Chrome Media Router - Krista\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://acer13.msn.com/?pc=ACJB"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://acer13.msn.com/?pc=ACJB"

==== All HKLM and HKCU SearchScopes ======================

HKLM\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKLM\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
HKLM\Wow6432Node\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKLM\Wow6432Node\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
HKCU\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
HKCU\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66} - http://www.google.com/search?q={searchTerms}
HKCU\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?PC=WCUG&FORM=WCUGDF&q={searchTerms}

==== Reset Google Chrome ======================

C:\Users\Krista\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Krista\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\Krista\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\Krista\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully

==== Empty IE Cache ======================

C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Krista\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Krista\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Krista\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Users\Krista\AppData\Local\Microsoft\Windows\INetCache\Low\IE emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\Krista\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

No Flash Cache Found

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=5973 folders=246 400577031 bytes)

==== Empty Temp Folders ======================

C:\WINDOWS\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\Users\Krista\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on zo 04/12/2016 at 22:48:47,13 ======================