1. Rezultaty skanowania Farbar Recovery Scan Tool (FRST) (x64) Wersja: 05-04-2022
2. Uruchomiony przez Stasiu (administrator)  STASUSEK (09-04-2022 22:22:40)
3. Uruchomiony z C:\Users\Stasiu\Downloads
4. Załadowane profile: Stasiu
5. Platform: Microsoft Windows 11 Pro Wersja 22H2 22593.1 (X64) Język: Polski (Polska)
6. Domyślna przeglądarka: Brave
7. Tryb startu: Normal
8.  
9. ==================== Procesy (filtrowane) =================
10.  
11. (Załączenie wejścia w fixlist spowoduje zamknięcie procesu. Powiązany plik nie zostanie przeniesiony.)
12.  
13. (Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.111\BraveCrashHandler.exe
14. (Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.111\BraveCrashHandler64.exe
15. (C:\Program Files (x86)\Overwolf\Overwolf.exe ->) (Overwolf Ltd -> Overwolf LTD) C:\Program Files (x86)\Common Files\Overwolf\0.194.0.16\OverwolfHelper.exe
16. (C:\Program Files (x86)\Overwolf\Overwolf.exe ->) (Overwolf Ltd -> Overwolf LTD) C:\Program Files (x86)\Common Files\Overwolf\0.194.0.16\OverwolfHelper64.exe
17. (C:\Program Files (x86)\Overwolf\Overwolf.exe ->) (Overwolf Ltd -> Overwolf LTD) C:\Program Files (x86)\Overwolf\0.194.0.16\OverwolfBrowser.exe <3>
18. (C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
19. (C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCopyAccelerator.exe
20. (explorer.exe ->) (Brave Software, Inc. -> Brave Software, Inc.) C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe <14>
21. (Nvidia Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
22. (Overwolf Ltd -> Overwolf LTD) C:\Program Files (x86)\Overwolf\Overwolf.exe
23. (services.exe ->) (Broadcom Corporation -> Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe
24. (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe
25. (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\NisSrv.exe
26. (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\System32\Sgrm\SgrmBroker.exe
27. (services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>
28. (services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_0e10764edf6df74c\Display.NvContainer\NVDisplay.Container.exe <2>
29. (services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <2>
30. (Spotify AB) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.179.763.0_x86__zpdnekdrzrea0\Spotify.exe <6>
31. (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
32. (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
33. (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
34. (svchost.exe ->) (Softdeluxe) [Brak podpisu cyfrowego] C:\Program Files\Softdeluxe\Free Download Manager\helperservice.exe
35.  
36. ==================== Rejestr (filtrowane) ===================
37.  
38. (Załączenie wejścia w fixlist spowoduje usunięcie obiektu z rejestru lub przywrócenie jego domyślnej postaci. Powiązany plik nie zostanie przeniesiony.)
39.  
40. HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [881440 2020-07-31] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
41. HKLM\...\Run: [SteelSeriesGG] => C:\Program Files\SteelSeries\GG\SteelSeriesGG.exe [14824272 2021-12-16] (SteelSeries ApS -> SteelSeries ApS)
42. HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [706344 2021-06-09] (Oracle America, Inc. -> Oracle Corporation)
43. HKU\S-1-5-19\...\Run: [OneDriveSetup] => C:\Windows\System32\OneDriveSetup.exe [50312608 2022-04-03] (Microsoft Corporation -> Microsoft Corporation)
44. HKU\S-1-5-20\...\Run: [OneDriveSetup] => C:\Windows\System32\OneDriveSetup.exe [50312608 2022-04-03] (Microsoft Corporation -> Microsoft Corporation)
45. HKU\S-1-5-21-1099986154-233269724-4142777660-1001\...\Run: [Discord] => C:\Users\Stasiu\AppData\Local\Discord\Update.exe [1512608 2021-09-21] (Discord Inc. -> GitHub)
46. HKU\S-1-5-21-1099986154-233269724-4142777660-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4279208 2022-03-14] (Valve Corp. -> Valve Corporation)
47. HKU\S-1-5-21-1099986154-233269724-4142777660-1001\...\Run: [Free Download Manager] => C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe [5222400 2021-09-03] (Softdeluxe) [Brak podpisu cyfrowego]
48. HKU\S-1-5-21-1099986154-233269724-4142777660-1001\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\OverwolfLauncher.exe [1802072 2022-04-02] (Overwolf Ltd -> Overwolf Ltd.)
49. HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files\BraveSoftware\Brave-Browser\Application\100.1.37.111\Installer\chrmstp.exe [2022-04-05] (Brave Software, Inc. -> Brave Software, Inc.)
50. HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
51. HKLM\Software\...\Authentication\Credential Providers: [{f64945df-4fa9-4068-a2fb-61af319edd33}] -> C:\WINDOWS\system32\rdpcredentialprovider.dll [2022-04-03] (Microsoft Windows -> Microsoft Corporation)
52. Startup: C:\Users\Stasiu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\nano.lnk [2022-03-22]
53. ShortcutTarget: nano.lnk -> C:\Users\Stasiu\AppData\Roaming\MicrosoftWindowsFirewall\nano.vbs () [Brak podpisu cyfrowego]
54.  
55. ==================== Zaplanowane zadania (filtrowane) ============
56.  
57. (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
58.  
59. Task: {10BE8A87-EDFB-4A33-B28D-E3A2E3C77E88} - System32\Tasks\Microsoft\Windows\WlanSvc\MoProfileManagement => {085EDA12-CF4A-4944-8222-8ADCADE137CB} C:\Windows\System32\WlanMediaManager.dll [897024 2022-04-03] (Microsoft Windows -> Microsoft Corporation)
60. Task: {1137F580-1F8B-49E3-AD5E-7E83558E2728} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-06] (Microsoft Windows Publisher -> Microsoft Corporation)
61. Task: {1EF0093B-7C6E-41B3-9FC1-92F0EDFFDDD0} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\WINDOWS\System32\MbaeParserTask.exe (Brak pliku)
62. "C:\Windows\System32\Tasks\Microsoft\Windows\Security\Pwdless\IntelligentPwdlessTask" nie został odblokowany. <==== UWAGA
63. Task: {234F2D10-C2A8-48EF-9069-9D49481B44BD} - System32\Tasks\Microsoft\Windows\Security\Pwdless\IntelligentPwdlessTask
64. Task: {24C9C2D1-776B-4336-B3F3-4FA5E0717B57} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3341312 2021-12-09] (Nvidia Corporation -> NVIDIA Corporation)
65. Task: {2D310BAF-6CCE-45E9-A3BD-190F1C7497B7} - System32\Tasks\Microsoft\Windows\Management\Autopilot\DetectHardwareChange => {62B2DD2C-F129-42EE-BF59-55D3FD21C215} C:\Windows\System32\Autopilot.dll [212992 2022-04-03] (Microsoft Windows -> Microsoft Corporation)
66. Task: {365BEEC9-D156-4AAB-B632-6FD9580E0F18} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2540888 2022-04-02] (Overwolf Ltd -> Overwolf LTD)
67. Task: {53DA5411-57A6-41AD-A513-968599296234} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-06] (Microsoft Windows Publisher -> Microsoft Corporation)
68. Task: {55425174-3087-46AC-8D58-4F9A9326BAD7} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [904904 2021-12-08] (Nvidia Corporation -> NVIDIA Corporation)
69. Task: {5FB9E65A-F6D4-4E56-BBE6-0E3EBE5638FE} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-11-16] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
70. Task: {67BC3D0F-AE3B-4AD4-AFD8-1C67E9D13D75} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [162456 2021-10-06] (Brave Software, Inc. -> BraveSoftware Inc.)
71. Task: {6C5A8233-6A62-4F69-BCD8-41BEA59BDC6E} - System32\Tasks\Microsoft\Windows\CloudRestore\Restore => {B4BCFA6F-948D-46B8-BF27-E8B1117E23B3} C:\WINDOWS\system32\CloudRestoreLauncher.dll [233472 2022-04-03] (Microsoft Windows -> Microsoft Corporation)
72. Task: {6E1CDC54-D04E-487B-B8B2-4B7FB7504372} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [904904 2021-12-08] (Nvidia Corporation -> NVIDIA Corporation)
73. Task: {87AB0BB9-4CC3-42D5-B689-BB8872F1DBDB} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-06] (Microsoft Windows Publisher -> Microsoft Corporation)
74. Task: {8C5D38BD-591D-4FF1-91E8-4308625478DD} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => C:\WINDOWS\system32\MusNotification.exe (Brak pliku)
75. Task: {8EC93E43-3762-4CA0-AF77-77FEE52E4AA0} - System32\Tasks\Microsoft\Windows\Clip\LicenseImdsIntegration => C:\WINDOWS\system32\fclip.exe [446624 2022-04-03] (Microsoft Windows Publisher -> Microsoft Corporation)
76. Task: {9862FE19-0FBD-4DBB-B9D6-8A2CCFC95AAC} - System32\Tasks\Microsoft\Windows\Management\Autopilot\RemediateHardwareChange => {62B2DD2C-F129-42EE-BF59-55D3FD21C215} C:\Windows\System32\Autopilot.dll [212992 2022-04-03] (Microsoft Windows -> Microsoft Corporation)
77. Task: {A3E883D0-0A5F-42A7-BE4E-B39EBD32DE8A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-06] (Microsoft Windows Publisher -> Microsoft Corporation)
78. Task: {AB485F79-3C62-41EB-9F5E-81F3F5D20D62} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1650384 2021-12-08] (Nvidia Corporation -> NVIDIA Corporation)
79. Task: {B0E980E9-1753-4B8E-BBD3-5517B83DBCAF} - System32\Tasks\FreeDownloadManagerHelperService => C:\Program Files\Softdeluxe\Free Download Manager\helperservice.exe [144896 2021-09-03] (Softdeluxe) [Brak podpisu cyfrowego]
80. Task: {BA6EF7E1-5F94-492F-AF15-BF0DC6E200EF} - System32\Tasks\Microsoft\Windows\PI\SecureBootEncodeUEFI => C:\WINDOWS\system32\SecureBootEncodeUEFI.exe [49152 2022-04-03] (Microsoft Windows -> )
81. Task: {D58CEBC7-945D-482A-9AF7-B68492FC1F59} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1650384 2021-12-08] (Nvidia Corporation -> NVIDIA Corporation)
82. Task: {D5AFF30D-8A4F-4A58-B14D-D03725D53106} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [162456 2021-10-06] (Brave Software, Inc. -> BraveSoftware Inc.)
83. Task: {D92B46CB-AE6F-494E-BC9E-DA7128CA78B9} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1650384 2021-12-08] (Nvidia Corporation -> NVIDIA Corporation)
84. Task: {E1D01188-D1F7-4AE1-AFA2-8D48095E83FD} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1650384 2021-12-08] (Nvidia Corporation -> NVIDIA Corporation)
85. Task: {E69A4E2E-0FAF-4E39-92B9-CD43E696DB7B} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => %windir%\system32\sc.exe start InventorySvc
86. Task: {F839E627-DEC5-46E3-A6E6-E919D14F7692} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [649216 2021-12-08] (Nvidia Corporation -> NVIDIA Corporation)
87.  
88. (Załączenie wejścia w fixlist spowoduje przesunięcie pliku zadania (.job). Plik uruchamiany docelowo przez zadanie nie zostanie przeniesiony.)
89.  
90.  
91. ==================== Internet (filtrowane) ====================
92.  
93. (Załączenie wejścia w fixlist, w przypadku gdy jest to obiekt rejestru, spowoduje usunięcie go z rejestru lub przywrócenie jego domyślnej postaci.)
94.  
95. Tcpip\Parameters: [DhcpNameServer] 62.21.99.94 62.21.99.95
96. Tcpip\..\Interfaces\{b9294a30-dd2a-4f8a-bb7f-737795647c2d}: [DhcpNameServer] 62.21.99.94 62.21.99.95
97.  
98. Edge:
99. =======
100. Edge Profile: C:\Users\Stasiu\AppData\Local\Microsoft\Edge\User Data\Default [2022-03-06]
101. Edge Notifications: Default -> hxxps://meet.google.com
102.  
103. FireFox:
104. ========
105. FF Plugin: @java.com/DTPlugin,version=11.301.2 -> C:\Program Files\Java\jre1.8.0_301\bin\dtplugin\npDeployJava1.dll [2021-10-06] (Oracle America, Inc. -> Oracle Corporation)
106. FF Plugin: @java.com/JavaPlugin,version=11.301.2 -> C:\Program Files\Java\jre1.8.0_301\bin\plugin2\npjp2.dll [2021-10-06] (Oracle America, Inc. -> Oracle Corporation)
107.  
108. Brave:
109. =======
110. BRA Profile: C:\Users\Stasiu\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2022-04-09]
111. BRA Notifications: Default -> hxxps://a.captcha-smart.top; hxxps://meet.google.com
112. BRA DefaultSearchKeyword: Default -> :g
113. BRA Session Restore: Default -> [funkcja włączona]
114. BRA Extension: (Tłumacz Google) - C:\Users\Stasiu\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2022-03-09]
115. BRA Extension: (Anti Testportal) - C:\Users\Stasiu\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\dpgfbfopkfdfmlfdpmoanamopdnibhkl [2021-12-10]
116. BRA Extension: (Dokumenty Google offline) - C:\Users\Stasiu\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-03-09]
117. BRA Extension: (Brave Local Data Files Updater) - C:\Users\Stasiu\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2022-04-09]
118. BRA Extension: (Brave NTP background images) - C:\Users\Stasiu\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2022-03-10]
119. BRA Extension: (Wallet Data Files Updater) - C:\Users\Stasiu\AppData\Local\BraveSoftware\Brave-Browser\User Data\BraveWallet [2022-03-09]
120. BRA Extension: (Brave Ad Block Updater (Default)) - C:\Users\Stasiu\AppData\Local\BraveSoftware\Brave-Browser\User Data\cffkpbalmllkdoenhmdmpbkajipdjfam [2022-04-09]
121. BRA Extension: (Brave Ads Resources) - C:\Users\Stasiu\AppData\Local\BraveSoftware\Brave-Browser\User Data\fojhemdeemkcacelmecilmibcjallejo [2021-10-13]
122. BRA Extension: (Brave NTP sponsored images) - C:\Users\Stasiu\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodhafecfemgejckecbnmpobnhmoaoag [2022-04-09]
123. BRA Extension: (Brave SpeedReader Updater) - C:\Users\Stasiu\AppData\Local\BraveSoftware\Brave-Browser\User Data\jicbkmdloagakknpihibphagfckhjdih [2022-03-10]
124. BRA Extension: (Crypto Wallets) - C:\Users\Stasiu\AppData\Local\BraveSoftware\Brave-Browser\User Data\odbfpeeihdkbihmopkbjmoonfanlbfcl [2021-10-19]
125. BRA Extension: (Brave HTTPS Everywhere Updater) - C:\Users\Stasiu\AppData\Local\BraveSoftware\Brave-Browser\User Data\oofiananboodjbbmdelgdommihjbkfag [2022-04-06]
126. BRA Extension: (Brave Ad Block Updater (Oficjalne Polskie Filtry do AdBlocka, uBlocka Origin i AdGuarda)) - C:\Users\Stasiu\AppData\Local\BraveSoftware\Brave-Browser\User Data\paoecjnjjbclkgbempaeemcbeldldlbo [2022-04-09]
127.  
128. ==================== Usługi (filtrowane) ===================
129.  
130. (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
131.  
132. S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [162456 2021-10-06] (Brave Software, Inc. -> BraveSoftware Inc.)
133. S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [162456 2021-10-06] (Brave Software, Inc. -> BraveSoftware Inc.)
134. S3 dcsvc; C:\WINDOWS\system32\dcsvc.dll [794624 2022-04-03] (Microsoft Windows -> Microsoft Corporation)
135. S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [16029472 2021-10-06] (Epic Games Inc. -> Epic Games, Inc.)
136. S3 InventorySvc; C:\WINDOWS\system32\inventorysvc.dll [295200 2022-04-03] (Microsoft Windows -> Microsoft Corporation)
137. S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2540888 2022-04-02] (Overwolf Ltd -> Overwolf LTD)
138. S3 Rockstar Service; C:\Program Files\Rockstar Games\Launcher\RockstarService.exe [2406192 2021-11-11] (Rockstar Games, Inc. -> Rockstar Games)
139. S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [244160 2022-04-03] (Microsoft Windows Publisher -> Microsoft Corporation)
140. R2 SgrmBroker; C:\WINDOWS\system32\Sgrm\SgrmBroker.exe [409448 2022-04-03] (Microsoft Windows Publisher -> Microsoft Corporation)
141. S3 SteelSeriesUpdateService; C:\Program Files\SteelSeries\GG\SteelSeriesUpdateService.exe [31568 2021-12-15] (SteelSeries ApS -> )
142. R2 TextInputManagementService; C:\WINDOWS\System32\TabSvc.dll [266240 2022-04-03] (Microsoft Windows -> Microsoft Corporation)
143. S3 VBoxSDS; C:\Program Files\Oracle\VirtualBox\VBoxSDS.exe [746728 2021-11-22] (Oracle Corporation -> Oracle Corporation)
144. R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\NisSrv.exe [3116848 2022-04-06] (Microsoft Windows Publisher -> Microsoft Corporation)
145. R3 webthreatdefsvc; C:\WINDOWS\System32\webthreatdefsvc.dll [163840 2022-04-03] (Microsoft Windows -> Microsoft Corporation)
146. S2 webthreatdefusersvc; C:\WINDOWS\System32\webthreatdefusersvc.dll [135168 2022-04-03] (Microsoft Windows -> Microsoft Corporation)
147. R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe [133544 2022-04-06] (Microsoft Windows Publisher -> Microsoft Corporation)
148. R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_0e10764edf6df74c\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_0e10764edf6df74c\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
149.  
150. ===================== Sterowniki (filtrowane) ===================
151.  
152. (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
153.  
154. S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20032 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
155. S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
156. S3 AsrDrv103; C:\WINDOWS\SysWOW64\Drivers\AsrDrv103.sys [34568 2021-10-06] (ASROCK Incorporation -> ASRock Incorporation) [Brak podpisu cyfrowego]
157. S3 AsrDrv104; C:\WINDOWS\SysWOW64\Drivers\AsrDrv104.sys [34536 2021-10-06] (ASROCK Incorporation -> ASRock Incorporation) [Brak podpisu cyfrowego]
158. S3 AsrDrv104n; C:\WINDOWS\SysWOW64\Drivers\AsrDrv104n.sys [33000 2021-10-06] (ASROCK Incorporation -> ASRock Incorporation) [Brak podpisu cyfrowego]
159. R2 bfs; C:\WINDOWS\system32\drivers\bfs.sys [78112 2022-04-03] (Microsoft Windows -> Microsoft Corporation)
160. S1 EneTechIo; C:\WINDOWS\system32\drivers\ene.sys [20992 2020-05-12] (Microsoft Windows Hardware Compatibility Publisher -> )
161. S0 GenPass; C:\WINDOWS\System32\DriverStore\FileRepository\genpass.inf_amd64_c6cad405a6e4f1f8\genpass.sys [49440 2022-04-03] (Microsoft Windows -> Microsoft Corporation)
162. S3 Hsp; C:\WINDOWS\System32\drivers\Hsp.sys [114976 2022-04-03] (Microsoft Windows -> Microsoft Corporation)
163. S3 MSIO; C:\Program Files (x86)\ASRock Utility\ASRRGBLED\Bin\msio64.sys [17424 2020-01-19] (Microsoft Windows Hardware Compatibility Publisher -> MICSYS Technology Co., LTd)
164. S0 pvscsi; C:\WINDOWS\System32\drivers\pvscsii.sys [40224 2022-04-03] (Microsoft Windows -> VMware, Inc.)
165. S3 RoutePolicy; C:\WINDOWS\System32\drivers\RoutePolicy.sys [94208 2022-04-03] (Microsoft Windows -> )
166. R3 rtcx21; C:\WINDOWS\System32\DriverStore\FileRepository\rtcx21x64.inf_amd64_b5f9322caa48de2b\rtcx21x64.sys [616472 2022-02-17] (Realtek Semiconductor Corp. -> Realtek)
167. R3 ssdevfactory; C:\WINDOWS\System32\drivers\ssdevfactory.sys [47784 2021-09-03] (SteelSeries ApS -> SteelSeries ApS)
168. S3 sshid; C:\WINDOWS\System32\drivers\sshid.sys [47760 2021-09-01] (SteelSeries ApS -> SteelSeries ApS)
169. R3 SteelSeries_Sonar_VAD; C:\WINDOWS\System32\DriverStore\FileRepository\steelseries.sonar.vad.inf_amd64_991d9c8eaf1c6f0e\SteelSeries.Sonar.VAD.sys [77200 2021-11-22] (SteelSeries ApS -> Windows (R) Win 7 DDK provider)
170. S3 VBAudioVACMME; C:\WINDOWS\System32\drivers\vbaudio_cable64_win7.sys [41192 2022-01-07] (Vincent Burel -> Windows (R) Win 7 DDK provider)
171. S3 VBAudioVMVAIOMME; C:\WINDOWS\System32\drivers\vbaudio_vmvaio64_win10.sys [71712 2022-01-07] (Vincent Burel -> Windows (R) Win 7 DDK provider)
172. S3 VBoxNetAdp; C:\WINDOWS\System32\drivers\VBoxNetAdp6.sys [239672 2021-11-22] (Oracle Corporation -> Oracle Corporation)
173. R1 VBoxNetLwf; C:\WINDOWS\system32\DRIVERS\VBoxNetLwf.sys [249584 2021-11-22] (Oracle Corporation -> Oracle Corporation)
174. S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49600 2022-04-06] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
175. R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [443664 2022-04-06] (Microsoft Windows -> Microsoft Corporation)
176. R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [90384 2022-04-06] (Microsoft Windows -> Microsoft Corporation)
177. R2 wtd; C:\WINDOWS\System32\drivers\wtd.sys [118784 2022-04-03] (Microsoft Windows -> Microsoft Corporation)
178. S1 WinSetupMon; system32\DRIVERS\WinSetupMon.sys [X]
179.  
180. ==================== NetSvcs (filtrowane) ===================
181.  
182. (Załączenie wejścia w fixlist spowoduje jego usunięcie z rejestru. Powiązany plik nie zostanie przeniesiony, o ile nie zostanie załączony z osobna.)
183.  
184. NETSVC: DcSvc -> C:\Windows\system32\dcsvc.dll (Microsoft Corporation)
185.  
186. ==================== Trzy miesiące (utworzone) (filtrowane) =========
187.  
188. (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
189.  
190. 2022-04-09 22:22 - 2022-04-09 22:22 - 000023187 _____ C:\Users\Stasiu\Downloads\FRST.txt
191. 2022-04-09 22:14 - 2022-04-09 22:14 - 000798244 _____ C:\WINDOWS\system32\perfh015.dat
192. 2022-04-09 22:14 - 2022-04-09 22:14 - 000158294 _____ C:\WINDOWS\system32\perfc015.dat
193. 2022-04-09 21:57 - 2022-04-09 22:22 - 000000000 ____D C:\FRST
194. 2022-04-09 21:57 - 2022-04-09 21:57 - 002365440 _____ (Farbar) C:\Users\Stasiu\Downloads\FRST64.exe
195. 2022-04-09 21:42 - 2022-04-09 21:42 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
196. 2022-04-09 21:41 - 2022-04-09 22:14 - 001797768 _____ C:\WINDOWS\system32\PerfStringBackup.INI
197. 2022-04-09 21:40 - 2022-04-09 22:07 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
198. 2022-04-09 21:40 - 2022-04-09 21:40 - 000011433 _____ C:\WINDOWS\diagwrn.xml
199. 2022-04-09 21:40 - 2022-04-09 21:40 - 000011433 _____ C:\WINDOWS\diagerr.xml
200. 2022-04-09 21:40 - 2022-04-09 21:40 - 000003520 _____ C:\WINDOWS\system32\Tasks\BraveSoftwareUpdateTaskMachineUA
201. 2022-04-09 21:40 - 2022-04-09 21:40 - 000003438 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
202. 2022-04-09 21:40 - 2022-04-09 21:40 - 000003398 _____ C:\WINDOWS\system32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
203. 2022-04-09 21:40 - 2022-04-09 21:40 - 000003296 _____ C:\WINDOWS\system32\Tasks\BraveSoftwareUpdateTaskMachineCore
204. 2022-04-09 21:40 - 2022-04-09 21:40 - 000003244 _____ C:\WINDOWS\system32\Tasks\Overwolf Updater Task
205. 2022-04-09 21:40 - 2022-04-09 21:40 - 000003244 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d8404560965f43
206. 2022-04-09 21:40 - 2022-04-09 21:40 - 000003214 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
207. 2022-04-09 21:40 - 2022-04-09 21:40 - 000003152 _____ C:\WINDOWS\system32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
208. 2022-04-09 21:40 - 2022-04-09 21:40 - 000002984 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
209. 2022-04-09 21:40 - 2022-04-09 21:40 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
210. 2022-04-09 21:40 - 2022-04-09 21:40 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
211. 2022-04-09 21:40 - 2022-04-09 21:40 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
212. 2022-04-09 21:40 - 2022-04-09 21:40 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
213. 2022-04-09 21:40 - 2022-04-09 21:40 - 000002914 _____ C:\WINDOWS\system32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
214. 2022-04-09 21:40 - 2022-04-09 21:40 - 000002744 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
215. 2022-04-09 21:40 - 2022-04-09 21:40 - 000001916 _____ C:\WINDOWS\system32\Tasks\FreeDownloadManagerHelperService
216. 2022-04-09 21:40 - 2022-04-09 21:40 - 000000020 ___SH C:\Users\Stasiu\ntuser.ini
217. 2022-04-09 21:40 - 2022-04-09 21:40 - 000000000 ____D C:\WINDOWS\system32\Tasks\Agent Activation Runtime
218. 2022-04-09 21:38 - 2022-04-09 21:40 - 000000000 ____D C:\Windows.old
219. 2022-04-09 21:38 - 2022-04-09 21:38 - 000493264 _____ C:\WINDOWS\system32\FNTCACHE.DAT
220. 2022-04-09 21:38 - 2022-04-09 21:38 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
221. 2022-04-09 19:00 - 2022-04-09 21:38 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
222. 2022-04-09 18:58 - 2022-04-09 21:40 - 000000000 ____D C:\Users\Stasiu
223. 2022-04-09 18:58 - 2022-04-09 18:58 - 000000000 _SHDL C:\Users\Stasiu\Ustawienia lokalne
224. 2022-04-09 18:58 - 2022-04-09 18:58 - 000000000 _SHDL C:\Users\Stasiu\Szablony
225. 2022-04-09 18:58 - 2022-04-09 18:58 - 000000000 _SHDL C:\Users\Stasiu\Moje dokumenty
226. 2022-04-09 18:58 - 2022-04-09 18:58 - 000000000 _SHDL C:\Users\Stasiu\Menu Start
227. 2022-04-09 18:58 - 2022-04-09 18:58 - 000000000 _SHDL C:\Users\Stasiu\Documents\Moje wideo
228. 2022-04-09 18:58 - 2022-04-09 18:58 - 000000000 _SHDL C:\Users\Stasiu\Documents\Moje obrazy
229. 2022-04-09 18:58 - 2022-04-09 18:58 - 000000000 _SHDL C:\Users\Stasiu\Documents\Moja muzyka
230. 2022-04-09 18:58 - 2022-04-09 18:58 - 000000000 _SHDL C:\Users\Stasiu\Dane aplikacji
231. 2022-04-09 18:58 - 2022-04-09 18:58 - 000000000 _SHDL C:\Users\Stasiu\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
232. 2022-04-09 18:58 - 2022-04-09 18:58 - 000000000 _SHDL C:\Users\Stasiu\AppData\Local\Tymczasowe pliki internetowe
233. 2022-04-09 18:58 - 2022-04-09 18:58 - 000000000 _SHDL C:\Users\Stasiu\AppData\Local\Historia
234. 2022-04-09 18:58 - 2022-04-09 18:58 - 000000000 _SHDL C:\Users\Stasiu\AppData\Local\Dane aplikacji
235. 2022-04-09 18:58 - 2022-04-03 06:55 - 000001281 _____ C:\Users\Stasiu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools.lnk
236. 2022-04-09 18:58 - 2022-04-03 06:55 - 000000407 _____ C:\Users\Stasiu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\File Explorer.lnk
237. 2022-04-09 18:57 - 2022-04-09 18:57 - 000000000 ____D C:\WINDOWS\system32\SteelSeries
238. 2022-04-09 18:53 - 2022-04-09 18:53 - 000000000 ____D C:\WINDOWS\SysWOW64\FxsTmp
239. 2022-04-09 18:53 - 2022-04-09 18:53 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
240. 2022-04-09 18:53 - 2022-04-09 18:53 - 000000000 ____D C:\WINDOWS\addins
241. 2022-04-09 18:52 - 2022-04-09 18:52 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
242. 2022-04-09 18:52 - 2022-04-09 18:52 - 000000000 ____D C:\Program Files\Reference Assemblies
243. 2022-04-09 18:52 - 2022-04-09 18:52 - 000000000 ____D C:\Program Files\MSBuild
244. 2022-04-09 18:52 - 2022-04-09 18:52 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
245. 2022-04-09 18:52 - 2022-04-09 18:52 - 000000000 ____D C:\Program Files (x86)\MSBuild
246. 2022-04-09 18:41 - 2022-04-09 18:41 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
247. 2022-04-08 20:18 - 2022-04-09 21:40 - 000000000 ___DC C:\WINDOWS\Panther
248. 2022-04-03 12:30 - 2022-04-09 18:51 - 000000000 ____D C:\Program Files\Windows Photo Viewer
249. 2022-04-03 12:30 - 2022-04-09 18:51 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
250. 2022-04-03 12:30 - 2022-04-09 18:51 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
251. 2022-04-03 12:30 - 2022-04-03 12:30 - 000000000 __SHD C:\WINDOWS\BitLockerDiscoveryVolumeContents
252. 2022-04-03 12:30 - 2022-04-03 12:30 - 000000000 ___SD C:\WINDOWS\system32\AppV
253. 2022-04-03 12:30 - 2022-04-03 12:30 - 000000000 ____D C:\WINDOWS\system32\Hydrogen
254. 2022-04-03 12:30 - 2022-04-03 12:30 - 000000000 ____D C:\WINDOWS\RemotePackages
255. 2022-04-03 12:30 - 2022-04-03 12:30 - 000000000 ____D C:\WINDOWS\InboxApps
256. 2022-04-03 12:30 - 2022-04-03 12:30 - 000000000 ____D C:\ProgramData\WindowsHolographicDevices
257. 2022-04-03 12:30 - 2022-04-03 12:29 - 000023649 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
258. 2022-04-03 12:30 - 2022-04-03 06:56 - 000024935 _____ C:\WINDOWS\Professional.xml
259. 2022-04-03 12:29 - 2022-04-03 12:29 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
260. 2022-04-03 12:29 - 2022-04-03 12:29 - 000000000 ____D C:\ProgramData\ssh
261. 2022-04-03 12:29 - 2022-04-02 14:21 - 001780224 _____ C:\WINDOWS\system32\libcrypto.dll
262. 2022-04-03 12:29 - 2021-08-19 19:32 - 000146389 _____ C:\WINDOWS\system32\printmanagement.msc
263. 2022-04-03 12:28 - 2022-04-02 18:54 - 000249856 _____ (Gracenote, Inc.) C:\WINDOWS\SysWOW64\gnsdk_fp.dll
264. 2022-04-03 12:20 - 2022-04-03 12:20 - 000000000 ____D C:\WINDOWS\SysWOW64\MailContactsCalendarSync
265. 2022-04-03 12:20 - 2022-04-03 12:20 - 000000000 ____D C:\WINDOWS\system32\MailContactsCalendarSync
266. 2022-04-03 12:19 - 2022-04-09 18:51 - 000000000 ____D C:\WINDOWS\SysWOW64\winrm
267. 2022-04-03 12:19 - 2022-04-09 18:51 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN
268. 2022-04-03 12:19 - 2022-04-09 18:51 - 000000000 ____D C:\WINDOWS\SysWOW64\slmgr
269. 2022-04-03 12:19 - 2022-04-09 18:51 - 000000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
270. 2022-04-03 12:19 - 2022-04-09 18:51 - 000000000 ____D C:\WINDOWS\system32\winrm
271. 2022-04-03 12:19 - 2022-04-09 18:51 - 000000000 ____D C:\WINDOWS\system32\WCN
272. 2022-04-03 12:19 - 2022-04-09 18:51 - 000000000 ____D C:\WINDOWS\system32\slmgr
273. 2022-04-03 12:19 - 2022-04-09 18:51 - 000000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
274. 2022-04-03 12:19 - 2022-04-03 12:19 - 000343212 _____ C:\WINDOWS\system32\perfi015.dat
275. 2022-04-03 12:19 - 2022-04-03 12:19 - 000041370 _____ C:\WINDOWS\system32\perfd015.dat
276. 2022-04-03 12:19 - 2022-04-03 12:19 - 000000000 ____D C:\WINDOWS\SysWOW64\sysprep
277. 2022-04-03 12:19 - 2022-04-03 12:19 - 000000000 ____D C:\WINDOWS\SysWOW64\pl
278. 2022-04-03 12:19 - 2022-04-03 12:19 - 000000000 ____D C:\WINDOWS\SysWOW64\0409
279. 2022-04-03 12:19 - 2022-04-03 12:19 - 000000000 ____D C:\WINDOWS\system32\pl
280. 2022-04-03 12:19 - 2022-04-03 12:19 - 000000000 ____D C:\WINDOWS\system32\0409
281. 2022-04-03 12:19 - 2022-04-03 12:19 - 000000000 ____D C:\WINDOWS\DigitalLocker
282. 2022-04-03 07:12 - 2022-04-03 07:12 - 000000000 _SHDL C:\Users\Default User
283. 2022-04-03 07:12 - 2022-04-03 07:12 - 000000000 _SHDL C:\Users\All Users
284. 2022-04-03 07:02 - 2022-04-09 19:07 - 000000000 ____D C:\WINDOWS\Setup
285. 2022-04-03 07:00 - 2022-04-09 21:38 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
286. 2022-04-03 07:00 - 2022-04-03 07:13 - 000000000 ____D C:\WINDOWS\system32\Pbr
287. 2022-04-03 07:00 - 2022-04-03 06:58 - 000215943 _____ C:\WINDOWS\SysWOW64\dssec.dat
288. 2022-04-03 07:00 - 2022-04-03 06:58 - 000003683 _____ C:\WINDOWS\system32\Drivers\etc\lmhosts.sam
289. 2022-04-03 07:00 - 2022-04-03 06:58 - 000003103 _____ C:\WINDOWS\SysWOW64\mmc.exe.config
290. 2022-04-03 07:00 - 2022-04-03 06:58 - 000003103 _____ C:\WINDOWS\system32\mmc.exe.config
291. 2022-04-03 07:00 - 2022-04-03 06:58 - 000000741 _____ C:\WINDOWS\SysWOW64\NOISE.DAT
292. 2022-04-03 07:00 - 2022-04-03 06:58 - 000000741 _____ C:\WINDOWS\system32\NOISE.DAT
293. 2022-04-03 06:59 - 2022-04-09 22:08 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
294. 2022-04-03 06:59 - 2022-04-09 22:07 - 000000000 ____D C:\WINDOWS\SystemTemp
295. 2022-04-03 06:59 - 2022-04-09 21:57 - 000000000 ___RD C:\WINDOWS\PrintDialog
296. 2022-04-03 06:59 - 2022-04-09 21:57 - 000000000 ___HD C:\Program Files\WindowsApps
297. 2022-04-03 06:59 - 2022-04-09 21:57 - 000000000 ____D C:\WINDOWS\AppReadiness
298. 2022-04-03 06:59 - 2022-04-09 21:42 - 000000000 ____D C:\WINDOWS\appcompat
299. 2022-04-03 06:59 - 2022-04-09 21:40 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
300. 2022-04-03 06:59 - 2022-04-09 21:40 - 000000000 ____D C:\WINDOWS\system32\oobe
301. 2022-04-03 06:59 - 2022-04-09 21:40 - 000000000 ____D C:\Program Files\Windows NT
302. 2022-04-03 06:59 - 2022-04-09 21:40 - 000000000 ____D C:\Program Files\Windows Defender
303. 2022-04-03 06:59 - 2022-04-09 21:39 - 000000000 ____D C:\WINDOWS\system32\config\TxR
304. 2022-04-03 06:59 - 2022-04-09 21:38 - 000000000 ___RD C:\Program Files (x86)
305. 2022-04-03 06:59 - 2022-04-09 21:38 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
306. 2022-04-03 06:59 - 2022-04-09 21:38 - 000000000 ____D C:\WINDOWS\system32\spool
307. 2022-04-03 06:59 - 2022-04-09 21:38 - 000000000 ____D C:\WINDOWS\ServiceState
308. 2022-04-03 06:59 - 2022-04-09 21:38 - 000000000 ____D C:\WINDOWS\LiveKernelReports
309. 2022-04-03 06:59 - 2022-04-09 19:04 - 000000000 __RHD C:\Users\Public\Libraries
310. 2022-04-03 06:59 - 2022-04-09 19:04 - 000000000 ____D C:\ProgramData\USOPrivate
311. 2022-04-03 06:59 - 2022-04-09 19:00 - 000000000 ____D C:\WINDOWS\ServiceProfiles
312. 2022-04-03 06:59 - 2022-04-09 18:54 - 000000000 ____D C:\WINDOWS\OCR
313. 2022-04-03 06:59 - 2022-04-09 18:53 - 000000000 ____D C:\WINDOWS\system32\setup
314. 2022-04-03 06:59 - 2022-04-09 18:52 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
315. 2022-04-03 06:59 - 2022-04-09 18:52 - 000000000 ____D C:\WINDOWS\system32\MUI
316. 2022-04-03 06:59 - 2022-04-09 18:51 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
317. 2022-04-03 06:59 - 2022-04-09 18:51 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
318. 2022-04-03 06:59 - 2022-04-09 18:51 - 000000000 ___SD C:\WINDOWS\system32\F12
319. 2022-04-03 06:59 - 2022-04-09 18:51 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
320. 2022-04-03 06:59 - 2022-04-09 18:51 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
321. 2022-04-03 06:59 - 2022-04-09 18:51 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
322. 2022-04-03 06:59 - 2022-04-09 18:51 - 000000000 ____D C:\WINDOWS\system32\Sgrm
323. 2022-04-03 06:59 - 2022-04-09 18:51 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
324. 2022-04-03 06:59 - 2022-04-09 18:51 - 000000000 ____D C:\WINDOWS\system32\migwiz
325. 2022-04-03 06:59 - 2022-04-09 18:51 - 000000000 ____D C:\Program Files (x86)\Windows Defender
326. 2022-04-03 06:59 - 2022-04-03 12:31 - 000000000 ____D C:\WINDOWS\Containers
327. 2022-04-03 06:59 - 2022-04-03 12:30 - 000000000 ____D C:\WINDOWS\SystemResources
328. 2022-04-03 06:59 - 2022-04-03 12:30 - 000000000 ____D C:\WINDOWS\SystemApps
329. 2022-04-03 06:59 - 2022-04-03 12:30 - 000000000 ____D C:\WINDOWS\ShellComponents
330. 2022-04-03 06:59 - 2022-04-03 12:30 - 000000000 ____D C:\WINDOWS\security
331. 2022-04-03 06:59 - 2022-04-03 12:30 - 000000000 ____D C:\WINDOWS\schemas
332. 2022-04-03 06:59 - 2022-04-03 12:30 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
333. 2022-04-03 06:59 - 2022-04-03 12:20 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
334. 2022-04-03 06:59 - 2022-04-03 12:20 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
335. 2022-04-03 06:59 - 2022-04-03 12:20 - 000000000 ____D C:\WINDOWS\SysWOW64\gl-ES
336. 2022-04-03 06:59 - 2022-04-03 12:20 - 000000000 ____D C:\WINDOWS\SysWOW64\eu-ES
337. 2022-04-03 06:59 - 2022-04-03 12:20 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES
338. 2022-04-03 06:59 - 2022-04-03 12:20 - 000000000 ____D C:\WINDOWS\system32\vi-VN
339. 2022-04-03 06:59 - 2022-04-03 12:20 - 000000000 ____D C:\WINDOWS\system32\id-ID
340. 2022-04-03 06:59 - 2022-04-03 12:20 - 000000000 ____D C:\WINDOWS\system32\gl-ES
341. 2022-04-03 06:59 - 2022-04-03 12:20 - 000000000 ____D C:\WINDOWS\system32\eu-ES
342. 2022-04-03 06:59 - 2022-04-03 12:20 - 000000000 ____D C:\WINDOWS\system32\ca-ES
343. 2022-04-03 06:59 - 2022-04-03 12:19 - 000000000 ___SD C:\WINDOWS\system32\dsc
344. 2022-04-03 06:59 - 2022-04-03 12:19 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
345. 2022-04-03 06:59 - 2022-04-03 12:19 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
346. 2022-04-03 06:59 - 2022-04-03 12:19 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
347. 2022-04-03 06:59 - 2022-04-03 12:19 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
348. 2022-04-03 06:59 - 2022-04-03 12:19 - 000000000 ____D C:\WINDOWS\system32\Sysprep
349. 2022-04-03 06:59 - 2022-04-03 12:19 - 000000000 ____D C:\WINDOWS\system32\Dism
350. 2022-04-03 06:59 - 2022-04-03 12:19 - 000000000 ____D C:\WINDOWS\system32\Com
351. 2022-04-03 06:59 - 2022-04-03 12:19 - 000000000 ____D C:\WINDOWS\IME
352. 2022-04-03 06:59 - 2022-04-03 12:19 - 000000000 ____D C:\WINDOWS\Help
353. 2022-04-03 06:59 - 2022-04-03 12:19 - 000000000 ____D C:\WINDOWS\BrowserCore
354. 2022-04-03 06:59 - 2022-04-03 12:19 - 000000000 ____D C:\Program Files\Common Files\System
355. 2022-04-03 06:59 - 2022-04-03 12:19 - 000000000 ____D C:\Program Files (x86)\Windows NT
356. 2022-04-03 06:59 - 2022-04-03 07:13 - 000000000 __SHD C:\Program Files\Windows Sidebar
357. 2022-04-03 06:59 - 2022-04-03 07:13 - 000000000 __SHD C:\Program Files (x86)\Windows Sidebar
358. 2022-04-03 06:59 - 2022-04-03 07:13 - 000000000 ___SD C:\WINDOWS\SysWOW64\Configuration
359. 2022-04-03 06:59 - 2022-04-03 07:13 - 000000000 ___SD C:\WINDOWS\system32\Configuration
360. 2022-04-03 06:59 - 2022-04-03 07:13 - 000000000 ____D C:\WINDOWS\Web
361. 2022-04-03 06:59 - 2022-04-03 07:13 - 000000000 ____D C:\WINDOWS\SysWOW64\SMI
362. 2022-04-03 06:59 - 2022-04-03 07:13 - 000000000 ____D C:\WINDOWS\system32\winevt
363. 2022-04-03 06:59 - 2022-04-03 07:13 - 000000000 ____D C:\WINDOWS\system32\ras
364. 2022-04-03 06:59 - 2022-04-03 07:13 - 000000000 ____D C:\WINDOWS\system32\PointOfService
365. 2022-04-03 06:59 - 2022-04-03 07:13 - 000000000 ____D C:\WINDOWS\SKB
366. 2022-04-03 06:59 - 2022-04-03 07:13 - 000000000 ____D C:\WINDOWS\Resources
367. 2022-04-03 06:59 - 2022-04-03 07:13 - 000000000 ____D C:\WINDOWS\Registration
368. 2022-04-03 06:59 - 2022-04-03 07:13 - 000000000 ____D C:\WINDOWS\Provisioning
369. 2022-04-03 06:59 - 2022-04-03 07:13 - 000000000 ____D C:\WINDOWS\PLA
370. 2022-04-03 06:59 - 2022-04-03 07:13 - 000000000 ____D C:\WINDOWS\Media
371. 2022-04-03 06:59 - 2022-04-03 07:13 - 000000000 ____D C:\WINDOWS\InputMethod
372. 2022-04-03 06:59 - 2022-04-03 07:13 - 000000000 ____D C:\WINDOWS\IdentityCRL
373. 2022-04-03 06:59 - 2022-04-03 07:13 - 000000000 ____D C:\WINDOWS\Globalization
374. 2022-04-03 06:59 - 2022-04-03 07:13 - 000000000 ____D C:\WINDOWS\DiagTrack
375. 2022-04-03 06:59 - 2022-04-03 07:00 - 000000000 ___SD C:\WINDOWS\SysWOW64\Nui
376. 2022-04-03 06:59 - 2022-04-03 07:00 - 000000000 ___SD C:\WINDOWS\SysWOW64\lxss
377. 2022-04-03 06:59 - 2022-04-03 07:00 - 000000000 ___SD C:\WINDOWS\system32\UNP
378. 2022-04-03 06:59 - 2022-04-03 07:00 - 000000000 ___SD C:\WINDOWS\system32\Nui
379. 2022-04-03 06:59 - 2022-04-03 07:00 - 000000000 ___SD C:\WINDOWS\system32\lxss
380. 2022-04-03 06:59 - 2022-04-03 07:00 - 000000000 ____D C:\WINDOWS\WUModels
381. 2022-04-03 06:59 - 2022-04-03 07:00 - 000000000 ____D C:\WINDOWS\UUS
382. 2022-04-03 06:59 - 2022-04-03 07:00 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
383. 2022-04-03 06:59 - 2022-04-03 07:00 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
384. 2022-04-03 06:59 - 2022-04-03 07:00 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
385. 2022-04-03 06:59 - 2022-04-03 07:00 - 000000000 ____D C:\WINDOWS\SysWOW64\Keywords
386. 2022-04-03 06:59 - 2022-04-03 07:00 - 000000000 ____D C:\WINDOWS\SysWOW64\icsxml
387. 2022-04-03 06:59 - 2022-04-03 07:00 - 000000000 ____D C:\WINDOWS\SysWOW64\downlevel
388. 2022-04-03 06:59 - 2022-04-03 07:00 - 000000000 ____D C:\WINDOWS\SysWOW64\Bthprops
389. 2022-04-03 06:59 - 2022-04-03 07:00 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
390. 2022-04-03 06:59 - 2022-04-03 07:00 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
391. 2022-04-03 06:59 - 2022-04-03 07:00 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
392. 2022-04-03 06:59 - 2022-04-03 07:00 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
393. 2022-04-03 06:59 - 2022-04-03 07:00 - 000000000 ____D C:\WINDOWS\system32\Keywords
394. 2022-04-03 06:59 - 2022-04-03 07:00 - 000000000 ____D C:\WINDOWS\system32\icsxml
395. 2022-04-03 06:59 - 2022-04-03 07:00 - 000000000 ____D C:\WINDOWS\system32\ias
396. 2022-04-03 06:59 - 2022-04-03 07:00 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
397. 2022-04-03 06:59 - 2022-04-03 07:00 - 000000000 ____D C:\WINDOWS\system32\downlevel
398. 2022-04-03 06:59 - 2022-04-03 07:00 - 000000000 ____D C:\WINDOWS\system32\DDFs
399. 2022-04-03 06:59 - 2022-04-03 07:00 - 000000000 ____D C:\WINDOWS\system32\Bthprops
400. 2022-04-03 06:59 - 2022-04-03 07:00 - 000000000 ____D C:\WINDOWS\system32\appraiser
401. 2022-04-03 06:59 - 2022-04-03 07:00 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
402. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ___SD C:\WINDOWS\Downloaded Program Files
403. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ___RD C:\WINDOWS\Offline Web Pages
404. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ___HD C:\WINDOWS\LanguageOverlayCache
405. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
406. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\WINDOWS\WaaS
407. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\WINDOWS\Vss
408. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\WINDOWS\tracing
409. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\WINDOWS\TAPI
410. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\WINDOWS\SysWOW64\ras
411. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\WINDOWS\SysWOW64\NDF
412. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\WINDOWS\SysWOW64\Msdtc
413. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\WINDOWS\SysWOW64\Ipmi
414. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\WINDOWS\SysWOW64\InputMethod
415. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\WINDOWS\SysWOW64\inetsrv
416. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\WINDOWS\SysWOW64\IME
417. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicyUsers
418. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
419. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\WINDOWS\SysWOW64\AppLocker
420. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
421. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\WINDOWS\system32\ProximityToast
422. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\WINDOWS\system32\NDF
423. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\WINDOWS\system32\Ipmi
424. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\WINDOWS\system32\InputMethod
425. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\WINDOWS\system32\inetsrv
426. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\WINDOWS\system32\IME
427. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\WINDOWS\system32\DriverState
428. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\WINDOWS\system32\Drivers\DriverData
429. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\WINDOWS\system32\config\systemprofile
430. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\WINDOWS\system32\config\RegBack
431. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\WINDOWS\system32\config\Journal
432. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\WINDOWS\system32\AppLocker
433. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\WINDOWS\System
434. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\WINDOWS\ShellExperiences
435. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\WINDOWS\SchCache
436. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\WINDOWS\rescache
437. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\WINDOWS\Performance
438. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\WINDOWS\ModemLogs
439. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\WINDOWS\L2Schemas
440. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\WINDOWS\GameBarPresenceWriter
441. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\WINDOWS\Cursors
442. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\WINDOWS\Branding
443. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\WINDOWS\bcastdvr
444. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\ProgramData\USOShared
445. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\Program Files\ModifiableWindowsApps
446. 2022-04-03 06:59 - 2022-04-03 06:59 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
447. 2022-04-03 06:59 - 2022-04-03 06:58 - 000215943 _____ C:\WINDOWS\system32\dssec.dat
448. 2022-04-03 06:59 - 2022-04-03 06:58 - 000000858 _____ C:\WINDOWS\system32\DefaultQuestions.json
449. 2022-04-03 06:58 - 2022-04-09 22:14 - 000000000 ____D C:\WINDOWS\INF
450. 2022-04-03 06:56 - 2022-04-03 12:29 - 000569344 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr
451. 2022-04-03 06:56 - 2022-04-03 12:29 - 000524288 _____ C:\WINDOWS\system32\AssignedAccessCsp.dll
452. 2022-04-03 06:56 - 2022-04-03 12:29 - 000516096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr
453. 2022-04-03 06:56 - 2022-04-03 12:29 - 000316640 _____ C:\WINDOWS\WMSysPr9.prx
454. 2022-04-03 06:56 - 2022-04-03 12:29 - 000208896 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\WINDOWS\system32\l3codecp.acm
455. 2022-04-03 06:56 - 2022-04-03 12:29 - 000196608 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\WINDOWS\SysWOW64\l3codecp.acm
456. 2022-04-03 06:56 - 2022-04-03 12:29 - 000172032 _____ C:\WINDOWS\system32\DeviceUpdateCenterCsp.dll
457. 2022-04-03 06:56 - 2022-04-03 12:29 - 000151840 _____ C:\WINDOWS\system32\HvsiManagementApi.dll
458. 2022-04-03 06:56 - 2022-04-03 12:29 - 000147439 _____ C:\WINDOWS\SysWOW64\gpedit.msc
459. 2022-04-03 06:56 - 2022-04-03 12:29 - 000147439 _____ C:\WINDOWS\system32\gpedit.msc
460. 2022-04-03 06:56 - 2022-04-03 12:29 - 000120458 _____ C:\WINDOWS\system32\secpol.msc
461. 2022-04-03 06:56 - 2022-04-03 12:29 - 000114688 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\WINDOWS\system32\l3codeca.acm
462. 2022-04-03 06:56 - 2022-04-03 12:29 - 000100128 _____ C:\WINDOWS\SysWOW64\HvsiManagementApi.dll
463. 2022-04-03 06:56 - 2022-04-03 12:29 - 000073728 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\WINDOWS\SysWOW64\l3codeca.acm
464. 2022-04-03 06:56 - 2022-04-03 12:29 - 000057344 _____ C:\WINDOWS\system32\uwfservicingapi.dll
465. 2022-04-03 06:56 - 2022-04-03 12:29 - 000043566 _____ C:\WINDOWS\SysWOW64\rsop.msc
466. 2022-04-03 06:56 - 2022-04-03 12:29 - 000043566 _____ C:\WINDOWS\system32\rsop.msc
467. 2022-04-03 06:56 - 2022-04-03 06:56 - 004149536 _____ C:\WINDOWS\system32\rdpnanoTransport.dll
468. 2022-04-03 06:56 - 2022-04-03 06:56 - 003309056 _____ C:\WINDOWS\system32\CloudRecoveryDownloadTool.dll
469. 2022-04-03 06:56 - 2022-04-03 06:56 - 000839680 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\ir41_32original.dll
470. 2022-04-03 06:56 - 2022-04-03 06:56 - 000831488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Bubbles.scr
471. 2022-04-03 06:56 - 2022-04-03 06:56 - 000746496 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\ir50_32original.dll
472. 2022-04-03 06:56 - 2022-04-03 06:56 - 000518144 _____ C:\WINDOWS\SysWOW64\msjetoledb40.dll
473. 2022-04-03 06:56 - 2022-04-03 06:56 - 000464384 _____ (curl, hxxps://curl.se/) C:\WINDOWS\SysWOW64\curl.exe
474. 2022-04-03 06:56 - 2022-04-03 06:56 - 000434176 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
475. 2022-04-03 06:56 - 2022-04-03 06:56 - 000342016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
476. 2022-04-03 06:56 - 2022-04-03 06:56 - 000338432 _____ (Intel Corporation.) C:\WINDOWS\SysWOW64\ir41_qcxoriginal.dll
477. 2022-04-03 06:56 - 2022-04-03 06:56 - 000319488 _____ (Microsoft Corporation) C:\WINDOWS\system32\unimdm.tsp
478. 2022-04-03 06:56 - 2022-04-03 06:56 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unimdm.tsp
479. 2022-04-03 06:56 - 2022-04-03 06:56 - 000253952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ssText3d.scr
480. 2022-04-03 06:56 - 2022-04-03 06:56 - 000211938 _____ C:\WINDOWS\SysWOW64\lcphrase.tbl
481. 2022-04-03 06:56 - 2022-04-03 06:56 - 000211938 _____ C:\WINDOWS\system32\lcphrase.tbl
482. 2022-04-03 06:56 - 2022-04-03 06:56 - 000200704 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\DscCoreConfProv.dll
483. 2022-04-03 06:56 - 2022-04-03 06:56 - 000200192 _____ (Intel Corporation.) C:\WINDOWS\SysWOW64\ir50_qcoriginal.dll
484. 2022-04-03 06:56 - 2022-04-03 06:56 - 000197632 _____ (Intel(R) Corporation) C:\WINDOWS\SysWOW64\ir32_32original.dll
485. 2022-04-03 06:56 - 2022-04-03 06:56 - 000197632 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\iac25_32.ax
486. 2022-04-03 06:56 - 2022-04-03 06:56 - 000195618 _____ C:\WINDOWS\system32\C_10002.NLS
487. 2022-04-03 06:56 - 2022-04-03 06:56 - 000183808 _____ (Intel Corporation.) C:\WINDOWS\SysWOW64\ir50_qcxoriginal.dll
488. 2022-04-03 06:56 - 2022-04-03 06:56 - 000180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Mystify.scr
489. 2022-04-03 06:56 - 2022-04-03 06:56 - 000177698 _____ C:\WINDOWS\system32\C_10003.NLS
490. 2022-04-03 06:56 - 2022-04-03 06:56 - 000176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Ribbons.scr
491. 2022-04-03 06:56 - 2022-04-03 06:56 - 000173602 _____ C:\WINDOWS\system32\C_10008.NLS
492. 2022-04-03 06:56 - 2022-04-03 06:56 - 000162850 _____ C:\WINDOWS\system32\C_10001.NLS
493. 2022-04-03 06:56 - 2022-04-03 06:56 - 000146944 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\ivfsrc.ax
494. 2022-04-03 06:56 - 2022-04-03 06:56 - 000145519 _____ C:\WINDOWS\SysWOW64\perfmon.msc
495. 2022-04-03 06:56 - 2022-04-03 06:56 - 000145519 _____ C:\WINDOWS\system32\perfmon.msc
496. 2022-04-03 06:56 - 2022-04-03 06:56 - 000145127 _____ C:\WINDOWS\SysWOW64\eventvwr.msc
497. 2022-04-03 06:56 - 2022-04-03 06:56 - 000145127 _____ C:\WINDOWS\system32\eventvwr.msc
498. 2022-04-03 06:56 - 2022-04-03 06:56 - 000144384 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\SysWOW64\DscCoreConfProv.dll
499. 2022-04-03 06:56 - 2022-04-03 06:56 - 000133120 _____ C:\WINDOWS\SysWOW64\stordiag.exe
500. 2022-04-03 06:56 - 2022-04-03 06:56 - 000122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\remotesp.tsp
501. 2022-04-03 06:56 - 2022-04-03 06:56 - 000120320 _____ (Intel Corporation.) C:\WINDOWS\SysWOW64\ir41_qcoriginal.dll
502. 2022-04-03 06:56 - 2022-04-03 06:56 - 000113256 _____ C:\WINDOWS\SysWOW64\compmgmt.msc
503. 2022-04-03 06:56 - 2022-04-03 06:56 - 000102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\sqlsrv32.rll
504. 2022-04-03 06:56 - 2022-04-03 06:56 - 000094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sqlsrv32.rll
505. 2022-04-03 06:56 - 2022-04-03 06:56 - 000093702 _____ C:\WINDOWS\SysWOW64\SubRange.uce
506. 2022-04-03 06:56 - 2022-04-03 06:56 - 000093702 _____ C:\WINDOWS\system32\SubRange.uce
507. 2022-04-03 06:56 - 2022-04-03 06:56 - 000092746 _____ C:\WINDOWS\SysWOW64\services.msc
508. 2022-04-03 06:56 - 2022-04-03 06:56 - 000092746 _____ C:\WINDOWS\system32\services.msc
509. 2022-04-03 06:56 - 2022-04-03 06:56 - 000090624 _____ (Radius Inc.) C:\WINDOWS\SysWOW64\iccvid.dll
510. 2022-04-03 06:56 - 2022-04-03 06:56 - 000088064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remotesp.tsp
511. 2022-04-03 06:56 - 2022-04-03 06:56 - 000074016 _____ C:\WINDOWS\system32\Drivers\NDKPerf.sys
512. 2022-04-03 06:56 - 2022-04-03 06:56 - 000069120 _____ (Twain Working Group) C:\WINDOWS\twain_32.dll
513. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_875.NLS
514. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_870.NLS
515. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_500.NLS
516. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_21027.NLS
517. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_21025.NLS
518. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_20924.NLS
519. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_20905.NLS
520. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_20880.NLS
521. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_20871.NLS
522. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_20838.NLS
523. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_20833.NLS
524. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_20424.NLS
525. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_20423.NLS
526. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_20420.NLS
527. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_20297.NLS
528. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_20290.NLS
529. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_20285.NLS
530. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_20284.NLS
531. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_20280.NLS
532. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_20278.NLS
533. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_20277.NLS
534. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_20273.NLS
535. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_20269.NLS
536. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_20108.NLS
537. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_20107.NLS
538. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_20106.NLS
539. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_20105.NLS
540. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_1149.NLS
541. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_1148.NLS
542. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_1147.NLS
543. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_1146.NLS
544. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_1145.NLS
545. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_1144.NLS
546. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_1143.NLS
547. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_1142.NLS
548. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_1141.NLS
549. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_1140.NLS
550. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_1047.NLS
551. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_1026.NLS
552. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_10082.NLS
553. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_10081.NLS
554. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_10079.NLS
555. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_10029.NLS
556. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_10021.NLS
557. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_10017.NLS
558. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_10010.NLS
559. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_10007.NLS
560. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_10006.NLS
561. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_10005.NLS
562. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_10004.NLS
563. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_10000.NLS
564. 2022-04-03 06:56 - 2022-04-03 06:56 - 000066082 _____ C:\WINDOWS\system32\C_037.NLS
565. 2022-04-03 06:56 - 2022-04-03 06:56 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\hidphone.tsp
566. 2022-04-03 06:56 - 2022-04-03 06:56 - 000063081 _____ C:\WINDOWS\SysWOW64\certlm.msc
567. 2022-04-03 06:56 - 2022-04-03 06:56 - 000063081 _____ C:\WINDOWS\system32\certlm.msc
568. 2022-04-03 06:56 - 2022-04-03 06:56 - 000063070 _____ C:\WINDOWS\SysWOW64\certmgr.msc
569. 2022-04-03 06:56 - 2022-04-03 06:56 - 000063070 _____ C:\WINDOWS\system32\certmgr.msc
570. 2022-04-03 06:56 - 2022-04-03 06:56 - 000061440 _____ C:\WINDOWS\system32\SpectrumSyncClient.dll
571. 2022-04-03 06:56 - 2022-04-03 06:56 - 000060458 _____ C:\WINDOWS\SysWOW64\ideograf.uce
572. 2022-04-03 06:56 - 2022-04-03 06:56 - 000060458 _____ C:\WINDOWS\system32\ideograf.uce
573. 2022-04-03 06:56 - 2022-04-03 06:56 - 000060267 _____ C:\WINDOWS\system32\srms.dat
574. 2022-04-03 06:56 - 2022-04-03 06:56 - 000057856 _____ C:\WINDOWS\SysWOW64\BWContextHandler.dll
575. 2022-04-03 06:56 - 2022-04-03 06:56 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\format.com
576. 2022-04-03 06:56 - 2022-04-03 06:56 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\cliconfg.rll
577. 2022-04-03 06:56 - 2022-04-03 06:56 - 000041587 _____ C:\WINDOWS\SysWOW64\azman.msc
578. 2022-04-03 06:56 - 2022-04-03 06:56 - 000041587 _____ C:\WINDOWS\system32\azman.msc
579. 2022-04-03 06:56 - 2022-04-03 06:56 - 000037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cliconfg.rll
580. 2022-04-03 06:56 - 2022-04-03 06:56 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hidphone.tsp
581. 2022-04-03 06:56 - 2022-04-03 06:56 - 000027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mode.com
582. 2022-04-03 06:56 - 2022-04-03 06:56 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\more.com
583. 2022-04-03 06:56 - 2022-04-03 06:56 - 000024114 _____ C:\WINDOWS\SysWOW64\lcptr.tbl
584. 2022-04-03 06:56 - 2022-04-03 06:56 - 000024114 _____ C:\WINDOWS\system32\lcptr.tbl
585. 2022-04-03 06:56 - 2022-04-03 06:56 - 000024006 _____ C:\WINDOWS\SysWOW64\gb2312.uce
586. 2022-04-03 06:56 - 2022-04-03 06:56 - 000024006 _____ C:\WINDOWS\system32\gb2312.uce
587. 2022-04-03 06:56 - 2022-04-03 06:56 - 000022984 _____ C:\WINDOWS\SysWOW64\bopomofo.uce
588. 2022-04-03 06:56 - 2022-04-03 06:56 - 000022984 _____ C:\WINDOWS\system32\bopomofo.uce
589. 2022-04-03 06:56 - 2022-04-03 06:56 - 000019485 _____ C:\WINDOWS\SysWOW64\srms-apr.dat
590. 2022-04-03 06:56 - 2022-04-03 06:56 - 000019485 _____ C:\WINDOWS\system32\srms-apr.dat
591. 2022-04-03 06:56 - 2022-04-03 06:56 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tree.com
592. 2022-04-03 06:56 - 2022-04-03 06:56 - 000017363 _____ C:\WINDOWS\SysWOW64\EventViewer_EventDetails.xsl
593. 2022-04-03 06:56 - 2022-04-03 06:56 - 000017363 _____ C:\WINDOWS\system32\EventViewer_EventDetails.xsl
594. 2022-04-03 06:56 - 2022-04-03 06:56 - 000016740 _____ C:\WINDOWS\SysWOW64\ShiftJIS.uce
595. 2022-04-03 06:56 - 2022-04-03 06:56 - 000016740 _____ C:\WINDOWS\system32\ShiftJIS.uce
596. 2022-04-03 06:56 - 2022-04-03 06:56 - 000012876 _____ C:\WINDOWS\SysWOW64\korean.uce
597. 2022-04-03 06:56 - 2022-04-03 06:56 - 000012876 _____ C:\WINDOWS\system32\korean.uce
598. 2022-04-03 06:56 - 2022-04-03 06:56 - 000012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\chcp.com
599. 2022-04-03 06:56 - 2022-04-03 06:56 - 000011292 _____ C:\WINDOWS\SysWOW64\srms-apr-v.dat
600. 2022-04-03 06:56 - 2022-04-03 06:56 - 000011292 _____ C:\WINDOWS\system32\srms-apr-v.dat
601. 2022-04-03 06:56 - 2022-04-03 06:56 - 000008484 _____ C:\WINDOWS\SysWOW64\kanji_2.uce
602. 2022-04-03 06:56 - 2022-04-03 06:56 - 000008484 _____ C:\WINDOWS\system32\kanji_2.uce
603. 2022-04-03 06:56 - 2022-04-03 06:56 - 000008279 _____ C:\WINDOWS\system32\ResPriUHMImageList
604. 2022-04-03 06:56 - 2022-04-03 06:56 - 000008279 _____ C:\WINDOWS\system32\ResPriImageList
605. 2022-04-03 06:56 - 2022-04-03 06:56 - 000008279 _____ C:\WINDOWS\system32\ResPriHMImageList
606. 2022-04-03 06:56 - 2022-04-03 06:56 - 000008145 _____ C:\WINDOWS\system32\ResPriHMImageListLowCost
607. 2022-04-03 06:56 - 2022-04-03 06:56 - 000007898 _____ C:\WINDOWS\system32\ResPriLMImageList
608. 2022-04-03 06:56 - 2022-04-03 06:56 - 000007787 _____ C:\WINDOWS\system32\ResPriImageListLowCost
609. 2022-04-03 06:56 - 2022-04-03 06:56 - 000006948 _____ C:\WINDOWS\SysWOW64\kanji_1.uce
610. 2022-04-03 06:56 - 2022-04-03 06:56 - 000006948 _____ C:\WINDOWS\system32\kanji_1.uce
611. 2022-04-03 06:56 - 2022-04-03 06:56 - 000004453 _____ C:\WINDOWS\SysWOW64\odbcconf.rsp
612. 2022-04-03 06:56 - 2022-04-03 06:56 - 000004014 _____ C:\WINDOWS\SysWOW64\xwizard.dtd
613. 2022-04-03 06:56 - 2022-04-03 06:56 - 000004014 _____ C:\WINDOWS\system32\xwizard.dtd
614. 2022-04-03 06:56 - 2022-04-03 06:56 - 000003789 _____ C:\WINDOWS\SysWOW64\WwanFeatureTests.xml
615. 2022-04-03 06:56 - 2022-04-03 06:56 - 000003420 _____ C:\WINDOWS\SysWOW64\UevCustomActionTypes.tlb
616. 2022-04-03 06:56 - 2022-04-03 06:56 - 000003420 _____ C:\WINDOWS\system32\UevCustomActionTypes.tlb
617. 2022-04-03 06:56 - 2022-04-03 06:56 - 000002233 _____ C:\WINDOWS\SysWOW64\12520850.cpx
618. 2022-04-03 06:56 - 2022-04-03 06:56 - 000002151 _____ C:\WINDOWS\SysWOW64\12520437.cpx
619. 2022-04-03 06:56 - 2022-04-03 06:56 - 000001720 _____ C:\WINDOWS\system32\SyncAppvPublishingServer.vbs
620. 2022-04-03 06:56 - 2022-04-03 06:56 - 000000874 _____ C:\WINDOWS\system32\manage-bde.wsf
621. 2022-04-03 06:56 - 2022-04-03 06:56 - 000000565 _____ C:\WINDOWS\SysWOW64\NdfEventView.xml
622. 2022-04-03 06:56 - 2022-04-03 06:56 - 000000565 _____ C:\WINDOWS\system32\NdfEventView.xml
623. 2022-04-03 06:56 - 2022-04-03 06:56 - 000000263 _____ C:\WINDOWS\system32\odbcconf.rsp
624. 2022-04-03 06:56 - 2022-04-03 06:56 - 000000146 _____ C:\WINDOWS\system32\UevAppMonitor.exe.config
625. 2022-04-03 06:56 - 2022-04-03 06:56 - 000000112 _____ C:\WINDOWS\SysWOW64\MixedRealityRuntime.json
626. 2022-04-03 06:56 - 2022-04-03 06:56 - 000000112 _____ C:\WINDOWS\system32\MixedRealityRuntime.json
627. 2022-04-03 06:55 - 2022-04-03 06:55 - 004898144 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmpltfm.dll
628. 2022-04-03 06:55 - 2022-04-03 06:55 - 004355072 _____ C:\WINDOWS\system32\Windows.UI.Input.Inking.Analysis.dll
629. 2022-04-03 06:55 - 2022-04-03 06:55 - 004227116 _____ C:\WINDOWS\system32\DefaultHrtfs.bin
630. 2022-04-03 06:55 - 2022-04-03 06:55 - 003860832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmpltfm.dll
631. 2022-04-03 06:55 - 2022-04-03 06:55 - 003635200 _____ C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.Analysis.dll
632. 2022-04-03 06:55 - 2022-04-03 06:55 - 003440660 _____ C:\WINDOWS\SysWOW64\Drivers\gm.dls
633. 2022-04-03 06:55 - 2022-04-03 06:55 - 003440660 _____ C:\WINDOWS\system32\Drivers\gm.dls
634. 2022-04-03 06:55 - 2022-04-03 06:55 - 003436320 _____ (Marvell Semiconductor Inc.) C:\WINDOWS\system32\Drivers\evbda.sys
635. 2022-04-03 06:55 - 2022-04-03 06:55 - 003418912 _____ (QLogic Corporation) C:\WINDOWS\system32\Drivers\evbd0a.sys
636. 2022-04-03 06:55 - 2022-04-03 06:55 - 003170304 _____ C:\WINDOWS\SysWOW64\boot.sdi
637. 2022-04-03 06:55 - 2022-04-03 06:55 - 003170304 _____ C:\WINDOWS\system32\boot.sdi
638. 2022-04-03 06:55 - 2022-04-03 06:55 - 002570448 ____R (The ICU Project) C:\WINDOWS\system32\icu.dll
639. 2022-04-03 06:55 - 2022-04-03 06:55 - 002318336 _____ (Digimarc) C:\WINDOWS\system32\DMRCDecoder.dll
640. 2022-04-03 06:55 - 2022-04-03 06:55 - 002126336 _____ (Digimarc) C:\WINDOWS\SysWOW64\DMRCDecoder.dll
641. 2022-04-03 06:55 - 2022-04-03 06:55 - 002083568 ____R (The ICU Project) C:\WINDOWS\SysWOW64\icu.dll
642. 2022-04-03 06:55 - 2022-04-03 06:55 - 002074608 _____ C:\WINDOWS\system32\WindowManagementAPI.dll
643. 2022-04-03 06:55 - 2022-04-03 06:55 - 001849632 _____ (Chelsio Communications) C:\WINDOWS\system32\Drivers\cht4vx64.sys
644. 2022-04-03 06:55 - 2022-04-03 06:55 - 001354080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmpal.dll
645. 2022-04-03 06:55 - 2022-04-03 06:55 - 001317024 _____ C:\WINDOWS\SysWOW64\WindowManagementAPI.dll
646. 2022-04-03 06:55 - 2022-04-03 06:55 - 001219976 _____ C:\WINDOWS\system32\HrtfDspCpu.dll
647. 2022-04-03 06:55 - 2022-04-03 06:55 - 001131296 _____ (PMC-Sierra) C:\WINDOWS\system32\Drivers\adp80xx.sys
648. 2022-04-03 06:55 - 2022-04-03 06:55 - 001127200 _____ (Mellanox) C:\WINDOWS\system32\Drivers\mlx4_bus.sys
649. 2022-04-03 06:55 - 2022-04-03 06:55 - 001091936 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmcodecs.dll
650. 2022-04-03 06:55 - 2022-04-03 06:55 - 001032544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ortcengine.dll
651. 2022-04-03 06:55 - 2022-04-03 06:55 - 000987512 _____ C:\WINDOWS\SysWOW64\HrtfDspCpu.dll
652. 2022-04-03 06:55 - 2022-04-03 06:55 - 000980320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmpal.dll
653. 2022-04-03 06:55 - 2022-04-03 06:55 - 000931736 _____ (SQLite Development Team) C:\WINDOWS\system32\winsqlite3.dll
654. 2022-04-03 06:55 - 2022-04-03 06:55 - 000915296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmcodecs.dll
655. 2022-04-03 06:55 - 2022-04-03 06:55 - 000880416 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaStorAVC.sys
656. 2022-04-03 06:55 - 2022-04-03 06:55 - 000841544 _____ C:\WINDOWS\SysWOW64\locale.nls
657. 2022-04-03 06:55 - 2022-04-03 06:55 - 000841544 _____ C:\WINDOWS\system32\locale.nls
658. 2022-04-03 06:55 - 2022-04-03 06:55 - 000745552 _____ C:\WINDOWS\system32\DynamicLong.bin
659. 2022-04-03 06:55 - 2022-04-03 06:55 - 000732000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ortcengine.dll
660. 2022-04-03 06:55 - 2022-04-03 06:55 - 000704440 _____ (SQLite Development Team) C:\WINDOWS\SysWOW64\winsqlite3.dll
661. 2022-04-03 06:55 - 2022-04-03 06:55 - 000673088 _____ C:\WINDOWS\SysWOW64\mlang.dat
662. 2022-04-03 06:55 - 2022-04-03 06:55 - 000673088 _____ C:\WINDOWS\system32\mlang.dat
663. 2022-04-03 06:55 - 2022-04-03 06:55 - 000571680 _____ (LSI Corporation, Inc.) C:\WINDOWS\system32\Drivers\megasr.sys
664. 2022-04-03 06:55 - 2022-04-03 06:55 - 000554784 _____ (Mellanox) C:\WINDOWS\system32\Drivers\ibbus.sys
665. 2022-04-03 06:55 - 2022-04-03 06:55 - 000529696 _____ (QLogic Corporation) C:\WINDOWS\system32\Drivers\bxvbda.sys
666. 2022-04-03 06:55 - 2022-04-03 06:55 - 000523776 _____ (curl, hxxps://curl.se/) C:\WINDOWS\system32\curl.exe
667. 2022-04-03 06:55 - 2022-04-03 06:55 - 000515152 _____ C:\WINDOWS\system32\DynamicMedium.bin
668. 2022-04-03 06:55 - 2022-04-03 06:55 - 000407840 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaStorV.sys
669. 2022-04-03 06:55 - 2022-04-03 06:55 - 000385024 _____ C:\WINDOWS\system32\hwreqchk.dll
670. 2022-04-03 06:55 - 2022-04-03 06:55 - 000323152 _____ C:\WINDOWS\system32\DynamicShort.bin
671. 2022-04-03 06:55 - 2022-04-03 06:55 - 000315680 _____ (Chelsio Communications) C:\WINDOWS\system32\Drivers\cht4sx64.sys
672. 2022-04-03 06:55 - 2022-04-03 06:55 - 000301344 _____ (VIA Corporation) C:\WINDOWS\system32\Drivers\VSTXRAID.SYS
673. 2022-04-03 06:55 - 2022-04-03 06:55 - 000296448 _____ C:\WINDOWS\system32\CloudIdWxhExtension.dll
674. 2022-04-03 06:55 - 2022-04-03 06:55 - 000270336 _____ C:\WINDOWS\system32\CoreMas.dll
675. 2022-04-03 06:55 - 2022-04-03 06:55 - 000264704 _____ C:\WINDOWS\SysWOW64\CoreMas.dll
676. 2022-04-03 06:55 - 2022-04-03 06:55 - 000262432 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
677. 2022-04-03 06:55 - 2022-04-03 06:55 - 000255264 _____ (AMD Technologies Inc.) C:\WINDOWS\system32\Drivers\amdsbs.sys
678. 2022-04-03 06:55 - 2022-04-03 06:55 - 000217088 _____ C:\WINDOWS\system32\BthpanContextHandler.dll
679. 2022-04-03 06:55 - 2022-04-03 06:55 - 000205600 _____ (Microsemi Corportation) C:\WINDOWS\system32\Drivers\SmartSAMD.sys
680. 2022-04-03 06:55 - 2022-04-03 06:55 - 000204074 _____ C:\WINDOWS\SysWOW64\winrm.vbs
681. 2022-04-03 06:55 - 2022-04-03 06:55 - 000204074 _____ C:\WINDOWS\system32\winrm.vbs
682. 2022-04-03 06:55 - 2022-04-03 06:55 - 000196642 _____ C:\WINDOWS\system32\C_950.NLS
683. 2022-04-03 06:55 - 2022-04-03 06:55 - 000196642 _____ C:\WINDOWS\system32\C_949.NLS
684. 2022-04-03 06:55 - 2022-04-03 06:55 - 000196642 _____ C:\WINDOWS\system32\C_936.NLS
685. 2022-04-03 06:55 - 2022-04-03 06:55 - 000192512 _____ C:\WINDOWS\system32\CloudExperienceHostRedirection.dll
686. 2022-04-03 06:55 - 2022-04-03 06:55 - 000189986 _____ C:\WINDOWS\system32\C_1361.NLS
687. 2022-04-03 06:55 - 2022-04-03 06:55 - 000187938 _____ C:\WINDOWS\system32\C_20005.NLS
688. 2022-04-03 06:55 - 2022-04-03 06:55 - 000186402 _____ C:\WINDOWS\system32\C_20001.NLS
689. 2022-04-03 06:55 - 2022-04-03 06:55 - 000185378 _____ C:\WINDOWS\system32\C_20003.NLS
690. 2022-04-03 06:55 - 2022-04-03 06:55 - 000182048 _____ (Avago Technologies) C:\WINDOWS\system32\Drivers\ItSas35i.sys
691. 2022-04-03 06:55 - 2022-04-03 06:55 - 000180770 _____ C:\WINDOWS\system32\C_20932.NLS
692. 2022-04-03 06:55 - 2022-04-03 06:55 - 000180258 _____ C:\WINDOWS\system32\C_20004.NLS
693. 2022-04-03 06:55 - 2022-04-03 06:55 - 000180258 _____ C:\WINDOWS\system32\C_20000.NLS
694. 2022-04-03 06:55 - 2022-04-03 06:55 - 000180224 _____ C:\WINDOWS\system32\stordiag.exe
695. 2022-04-03 06:55 - 2022-04-03 06:55 - 000177698 _____ C:\WINDOWS\system32\C_20949.NLS
696. 2022-04-03 06:55 - 2022-04-03 06:55 - 000177664 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaLPSS2i_I2C_GLK.sys
697. 2022-04-03 06:55 - 2022-04-03 06:55 - 000177152 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaLPSS2i_I2C_CNL.sys
698. 2022-04-03 06:55 - 2022-04-03 06:55 - 000175104 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaLPSS2i_I2C_BXT_P.sys
699. 2022-04-03 06:55 - 2022-04-03 06:55 - 000173602 _____ C:\WINDOWS\system32\C_20936.NLS
700. 2022-04-03 06:55 - 2022-04-03 06:55 - 000173602 _____ C:\WINDOWS\system32\C_20002.NLS
701. 2022-04-03 06:55 - 2022-04-03 06:55 - 000171520 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaLPSS2i_I2C.sys
702. 2022-04-03 06:55 - 2022-04-03 06:55 - 000167640 _____ C:\WINDOWS\SysWOW64\chs_singlechar_pinyin.dat
703. 2022-04-03 06:55 - 2022-04-03 06:55 - 000167640 _____ C:\WINDOWS\system32\chs_singlechar_pinyin.dat
704. 2022-04-03 06:55 - 2022-04-03 06:55 - 000162850 _____ C:\WINDOWS\system32\C_932.NLS
705. 2022-04-03 06:55 - 2022-04-03 06:55 - 000162592 _____ (VIA Technologies Inc.,Ltd) C:\WINDOWS\system32\Drivers\vsmraid.sys
706. 2022-04-03 06:55 - 2022-04-03 06:55 - 000162080 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvstor.sys
707. 2022-04-03 06:55 - 2022-04-03 06:55 - 000151552 _____ C:\WINDOWS\system32\CodeIntegrityAggregator.dll
708. 2022-04-03 06:55 - 2022-04-03 06:55 - 000149056 _____ C:\WINDOWS\system32\LargeRoom.bin
709. 2022-04-03 06:55 - 2022-04-03 06:55 - 000147456 _____ C:\WINDOWS\system32\MediaFoundationAggregator.dll
710. 2022-04-03 06:55 - 2022-04-03 06:55 - 000146208 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvraid.sys
711. 2022-04-03 06:55 - 2022-04-03 06:55 - 000145622 _____ C:\WINDOWS\SysWOW64\devmgmt.msc
712. 2022-04-03 06:55 - 2022-04-03 06:55 - 000145622 _____ C:\WINDOWS\system32\devmgmt.msc
713. 2022-04-03 06:55 - 2022-04-03 06:55 - 000145059 _____ C:\WINDOWS\SysWOW64\taskschd.msc
714. 2022-04-03 06:55 - 2022-04-03 06:55 - 000145059 _____ C:\WINDOWS\system32\taskschd.msc
715. 2022-04-03 06:55 - 2022-04-03 06:55 - 000144998 _____ C:\WINDOWS\SysWOW64\lusrmgr.msc
716. 2022-04-03 06:55 - 2022-04-03 06:55 - 000144998 _____ C:\WINDOWS\system32\lusrmgr.msc
717. 2022-04-03 06:55 - 2022-04-03 06:55 - 000144909 _____ C:\WINDOWS\SysWOW64\fsmgmt.msc
718. 2022-04-03 06:55 - 2022-04-03 06:55 - 000144909 _____ C:\WINDOWS\system32\fsmgmt.msc
719. 2022-04-03 06:55 - 2022-04-03 06:55 - 000144862 _____ C:\WINDOWS\SysWOW64\tpm.msc
720. 2022-04-03 06:55 - 2022-04-03 06:55 - 000144862 _____ C:\WINDOWS\system32\tpm.msc
721. 2022-04-03 06:55 - 2022-04-03 06:55 - 000144673 _____ C:\WINDOWS\system32\WmiMgmt.msc
722. 2022-04-03 06:55 - 2022-04-03 06:55 - 000142904 _____ C:\WINDOWS\SysWOW64\slmgr.vbs
723. 2022-04-03 06:55 - 2022-04-03 06:55 - 000142904 _____ C:\WINDOWS\system32\slmgr.vbs
724. 2022-04-03 06:55 - 2022-04-03 06:55 - 000142112 _____ (Mellanox) C:\WINDOWS\system32\Drivers\ndfltr.sys
725. 2022-04-03 06:55 - 2022-04-03 06:55 - 000140064 _____ (Chelsio Communications) C:\WINDOWS\system32\Drivers\cht4dx64.sys
726. 2022-04-03 06:55 - 2022-04-03 06:55 - 000139810 _____ C:\WINDOWS\system32\C_20261.NLS
727. 2022-04-03 06:55 - 2022-04-03 06:55 - 000138092 _____ C:\WINDOWS\system32\AverageRoom.bin
728. 2022-04-03 06:55 - 2022-04-03 06:55 - 000133408 _____ (Avago Technologies) C:\WINDOWS\system32\Drivers\lsi_sas3i.sys
729. 2022-04-03 06:55 - 2022-04-03 06:55 - 000127776 _____ (PMC-Sierra, Inc.) C:\WINDOWS\system32\Drivers\arcsas.sys
730. 2022-04-03 06:55 - 2022-04-03 06:55 - 000124118 _____ C:\WINDOWS\SysWOW64\comexp.msc
731. 2022-04-03 06:55 - 2022-04-03 06:55 - 000124118 _____ C:\WINDOWS\system32\comexp.msc
732. 2022-04-03 06:55 - 2022-04-03 06:55 - 000120096 _____ (LSI Corporation) C:\WINDOWS\system32\Drivers\lsi_sas2i.sys
733. 2022-04-03 06:55 - 2022-04-03 06:55 - 000115109 _____ C:\WINDOWS\SysWOW64\WF.msc
734. 2022-04-03 06:55 - 2022-04-03 06:55 - 000115109 _____ C:\WINDOWS\system32\WF.msc
735. 2022-04-03 06:55 - 2022-04-03 06:55 - 000114688 _____ C:\WINDOWS\system32\xboxgipsynthetic.dll
736. 2022-04-03 06:55 - 2022-04-03 06:55 - 000114688 _____ C:\WINDOWS\system32\ThreatResponseEngine.dll
737. 2022-04-03 06:55 - 2022-04-03 06:55 - 000113256 _____ C:\WINDOWS\system32\compmgmt.msc
738. 2022-04-03 06:55 - 2022-04-03 06:55 - 000113152 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaLPSSi_I2C.sys
739. 2022-04-03 06:55 - 2022-04-03 06:55 - 000112128 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaLPSS2i_GPIO2_CNL.sys
740. 2022-04-03 06:55 - 2022-04-03 06:55 - 000110036 _____ C:\WINDOWS\system32\MediumRoom.bin
741. 2022-04-03 06:55 - 2022-04-03 06:55 - 000108320 _____ (Apple Inc.) C:\WINDOWS\system32\Drivers\AppleSSD.sys
742. 2022-04-03 06:55 - 2022-04-03 06:55 - 000104736 _____ (LSI Corporation) C:\WINDOWS\system32\Drivers\lsi_sas.sys
743. 2022-04-03 06:55 - 2022-04-03 06:55 - 000103200 _____ (LSI) C:\WINDOWS\system32\Drivers\3ware.sys
744. 2022-04-03 06:55 - 2022-04-03 06:55 - 000098304 _____ C:\WINDOWS\system32\dplcsp.dll
745. 2022-04-03 06:55 - 2022-04-03 06:55 - 000098304 _____ C:\WINDOWS\system32\CompatAggregator.dll
746. 2022-04-03 06:55 - 2022-04-03 06:55 - 000096256 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaLPSS2i_GPIO2_GLK.sys
747. 2022-04-03 06:55 - 2022-04-03 06:55 - 000096032 _____ (Broadcom Inc) C:\WINDOWS\system32\Drivers\megasas35i.sys
748. 2022-04-03 06:55 - 2022-04-03 06:55 - 000095408 _____ C:\WINDOWS\system32\wow64con.dll
749. 2022-04-03 06:55 - 2022-04-03 06:55 - 000094208 _____ C:\WINDOWS\system32\Drivers\RoutePolicy.sys
750. 2022-04-03 06:55 - 2022-04-03 06:55 - 000093184 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaLPSS2i_GPIO2_BXT_P.sys
751. 2022-04-03 06:55 - 2022-04-03 06:55 - 000091136 _____ (Intel(R) Corporation) C:\WINDOWS\system32\Drivers\iai2c.sys
752. 2022-04-03 06:55 - 2022-04-03 06:55 - 000090704 _____ C:\WINDOWS\system32\gatherNetworkInfo.vbs
753. 2022-04-03 06:55 - 2022-04-03 06:55 - 000090112 _____ C:\WINDOWS\system32\Windows.Internal.WaaSMedicDocked.dll
754. 2022-04-03 06:55 - 2022-04-03 06:55 - 000090112 _____ C:\WINDOWS\system32\BWContextHandler.dll
755. 2022-04-03 06:55 - 2022-04-03 06:55 - 000089761 _____ C:\WINDOWS\system32\DiskSnapshot.conf
756. 2022-04-03 06:55 - 2022-04-03 06:55 - 000085280 _____ (Broadcom Limited) C:\WINDOWS\system32\Drivers\mpi3drvi.sys
757. 2022-04-03 06:55 - 2022-04-03 06:55 - 000081920 ____R (Realtek) C:\WINDOWS\system32\Drivers\rteth.sys
758. 2022-04-03 06:55 - 2022-04-03 06:55 - 000081870 _____ C:\WINDOWS\system32\normidna.nls
759. 2022-04-03 06:55 - 2022-04-03 06:55 - 000079360 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaLPSS2i_GPIO2.sys
760. 2022-04-03 06:55 - 2022-04-03 06:55 - 000079348 _____ C:\WINDOWS\system32\normnfkc.nls
761. 2022-04-03 06:55 - 2022-04-03 06:55 - 000079136 _____ (Advanced Micro Devices) C:\WINDOWS\system32\Drivers\amdsata.sys
762. 2022-04-03 06:55 - 2022-04-03 06:55 - 000077600 _____ (Silicon Integrated Systems) C:\WINDOWS\system32\Drivers\sisraid4.sys
763. 2022-04-03 06:55 - 2022-04-03 06:55 - 000076576 _____ (Avago Technologies) C:\WINDOWS\system32\Drivers\MegaSas2i.sys
764. 2022-04-03 06:55 - 2022-04-03 06:55 - 000073728 _____ C:\WINDOWS\system32\PrintNotification.dll
765. 2022-04-03 06:55 - 2022-04-03 06:55 - 000073114 _____ C:\WINDOWS\system32\normnfkd.nls
766. 2022-04-03 06:55 - 2022-04-03 06:55 - 000072704 _____ C:\WINDOWS\SysWOW64\xboxgipsynthetic.dll
767. 2022-04-03 06:55 - 2022-04-03 06:55 - 000069788 _____ C:\WINDOWS\system32\SmallRoom.bin
768. 2022-04-03 06:55 - 2022-04-03 06:55 - 000069632 _____ C:\WINDOWS\system32\pospaymentsworker.exe
769. 2022-04-03 06:55 - 2022-04-03 06:55 - 000069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\kmddsp.tsp
770. 2022-04-03 06:55 - 2022-04-03 06:55 - 000069632 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
771. 2022-04-03 06:55 - 2022-04-03 06:55 - 000068896 _____ (Mellanox) C:\WINDOWS\system32\Drivers\winverbs.sys
772. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066594 _____ C:\WINDOWS\system32\C_874.NLS
773. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066594 _____ C:\WINDOWS\system32\C_869.NLS
774. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066594 _____ C:\WINDOWS\system32\C_866.NLS
775. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066594 _____ C:\WINDOWS\system32\C_865.NLS
776. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066594 _____ C:\WINDOWS\system32\C_864.NLS
777. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066594 _____ C:\WINDOWS\system32\C_863.NLS
778. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066594 _____ C:\WINDOWS\system32\C_862.NLS
779. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066594 _____ C:\WINDOWS\system32\C_861.NLS
780. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066594 _____ C:\WINDOWS\system32\C_860.NLS
781. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066594 _____ C:\WINDOWS\system32\C_858.NLS
782. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066594 _____ C:\WINDOWS\system32\C_857.NLS
783. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066594 _____ C:\WINDOWS\system32\C_855.NLS
784. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066594 _____ C:\WINDOWS\system32\C_852.NLS
785. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066594 _____ C:\WINDOWS\system32\C_850.NLS
786. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066594 _____ C:\WINDOWS\system32\C_775.NLS
787. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066594 _____ C:\WINDOWS\system32\C_737.NLS
788. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066594 _____ C:\WINDOWS\system32\C_720.NLS
789. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066594 _____ C:\WINDOWS\system32\C_437.NLS
790. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066082 _____ C:\WINDOWS\system32\C_708.NLS
791. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066082 _____ C:\WINDOWS\system32\C_28605.NLS
792. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066082 _____ C:\WINDOWS\system32\c_28603.nls
793. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066082 _____ C:\WINDOWS\system32\C_28599.NLS
794. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066082 _____ C:\WINDOWS\system32\C_28598.NLS
795. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066082 _____ C:\WINDOWS\system32\C_28597.NLS
796. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066082 _____ C:\WINDOWS\system32\C_28596.NLS
797. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066082 _____ C:\WINDOWS\system32\C_28595.NLS
798. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066082 _____ C:\WINDOWS\system32\C_28594.NLS
799. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066082 _____ C:\WINDOWS\system32\C_28593.NLS
800. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066082 _____ C:\WINDOWS\system32\C_28592.NLS
801. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066082 _____ C:\WINDOWS\system32\C_28591.NLS
802. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066082 _____ C:\WINDOWS\system32\C_21866.NLS
803. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066082 _____ C:\WINDOWS\system32\C_20866.NLS
804. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066082 _____ C:\WINDOWS\system32\C_20127.NLS
805. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066082 _____ C:\WINDOWS\system32\C_1258.NLS
806. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066082 _____ C:\WINDOWS\system32\C_1257.NLS
807. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066082 _____ C:\WINDOWS\system32\C_1256.NLS
808. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066082 _____ C:\WINDOWS\system32\C_1255.NLS
809. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066082 _____ C:\WINDOWS\system32\C_1254.NLS
810. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066082 _____ C:\WINDOWS\system32\C_1253.NLS
811. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066082 _____ C:\WINDOWS\system32\C_1252.NLS
812. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066082 _____ C:\WINDOWS\system32\C_1251.NLS
813. 2022-04-03 06:55 - 2022-04-03 06:55 - 000066082 _____ C:\WINDOWS\system32\C_1250.NLS
814. 2022-04-03 06:55 - 2022-04-03 06:55 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\format.com
815. 2022-04-03 06:55 - 2022-04-03 06:55 - 000064288 _____ (Avago Technologies) C:\WINDOWS\system32\Drivers\percsas3i.sys
816. 2022-04-03 06:55 - 2022-04-03 06:55 - 000062328 _____ (Microsoft Corporation) C:\WINDOWS\system32\msgsm32.acm
817. 2022-04-03 06:55 - 2022-04-03 06:55 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrnsave.scr
818. 2022-04-03 06:55 - 2022-04-03 06:55 - 000060192 _____ (Hewlett-Packard Company) C:\WINDOWS\system32\Drivers\HpSAMD.sys
819. 2022-04-03 06:55 - 2022-04-03 06:55 - 000060124 _____ C:\WINDOWS\system32\tcpmon.ini
820. 2022-04-03 06:55 - 2022-04-03 06:55 - 000059680 _____ (Marvell Semiconductor, Inc.) C:\WINDOWS\system32\Drivers\mvumis.sys
821. 2022-04-03 06:55 - 2022-04-03 06:55 - 000058192 _____ (Microsoft Corporation) C:\WINDOWS\system32\imaadp32.acm
822. 2022-04-03 06:55 - 2022-04-03 06:55 - 000057632 _____ C:\WINDOWS\system32\AppInstallerBackgroundUpdate.exe
823. 2022-04-03 06:55 - 2022-04-03 06:55 - 000057344 _____ C:\WINDOWS\system32\deploymentcsphelper.exe
824. 2022-04-03 06:55 - 2022-04-03 06:55 - 000057136 _____ C:\WINDOWS\system32\normnfc.nls
825. 2022-04-03 06:55 - 2022-04-03 06:55 - 000056672 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmmvrortc.dll
826. 2022-04-03 06:55 - 2022-04-03 06:55 - 000055376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmmvrortc.dll
827. 2022-04-03 06:55 - 2022-04-03 06:55 - 000054560 _____ (Avago Technologies) C:\WINDOWS\system32\Drivers\percsas2i.sys
828. 2022-04-03 06:55 - 2022-04-03 06:55 - 000054064 _____ (Microsoft Corporation) C:\WINDOWS\system32\msadp32.acm
829. 2022-04-03 06:55 - 2022-04-03 06:55 - 000053536 _____ C:\WINDOWS\system32\esimtool.exe
830. 2022-04-03 06:55 - 2022-04-03 06:55 - 000053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mode.com
831. 2022-04-03 06:55 - 2022-04-03 06:55 - 000050442 _____ C:\WINDOWS\system32\normnfd.nls
832. 2022-04-03 06:55 - 2022-04-03 06:55 - 000049952 _____ C:\WINDOWS\system32\SFAPE.dll
833. 2022-04-03 06:55 - 2022-04-03 06:55 - 000049152 _____ C:\WINDOWS\system32\SecureBootEncodeUEFI.exe
834. 2022-04-03 06:55 - 2022-04-03 06:55 - 000049152 _____ (Microsoft) C:\WINDOWS\system32\oflc-nz.rs
835. 2022-04-03 06:55 - 2022-04-03 06:55 - 000049152 _____ (Microsoft) C:\WINDOWS\system32\csrr.rs
836. 2022-04-03 06:55 - 2022-04-03 06:55 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\more.com
837. 2022-04-03 06:55 - 2022-04-03 06:55 - 000047682 _____ C:\WINDOWS\SysWOW64\diskmgmt.msc
838. 2022-04-03 06:55 - 2022-04-03 06:55 - 000047682 _____ C:\WINDOWS\system32\diskmgmt.msc
839. 2022-04-03 06:55 - 2022-04-03 06:55 - 000046645 _____ C:\WINDOWS\SysWOW64\ctac.json
840. 2022-04-03 06:55 - 2022-04-03 06:55 - 000046645 _____ C:\WINDOWS\system32\ctac.json
841. 2022-04-03 06:55 - 2022-04-03 06:55 - 000045800 _____ C:\WINDOWS\system32\camext.dll
842. 2022-04-03 06:55 - 2022-04-03 06:55 - 000045800 _____ (Microsoft Corporation) C:\WINDOWS\system32\msg711.acm
843. 2022-04-03 06:55 - 2022-04-03 06:55 - 000045568 _____ (Advanced Micro Devices, Inc) C:\WINDOWS\system32\Drivers\amdi2c.sys
844. 2022-04-03 06:55 - 2022-04-03 06:55 - 000045056 _____ (Microsoft) C:\WINDOWS\system32\fpb.rs
845. 2022-04-03 06:55 - 2022-04-03 06:55 - 000043131 _____ C:\WINDOWS\mib.bin
846. 2022-04-03 06:55 - 2022-04-03 06:55 - 000041688 _____ C:\WINDOWS\system32\wow64base.dll
847. 2022-04-03 06:55 - 2022-04-03 06:55 - 000041472 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
848. 2022-04-03 06:55 - 2022-04-03 06:55 - 000040960 _____ (Microsoft) C:\WINDOWS\system32\esrb.rs
849. 2022-04-03 06:55 - 2022-04-03 06:55 - 000040960 _____ (Microsoft) C:\WINDOWS\system32\cero.rs
850. 2022-04-03 06:55 - 2022-04-03 06:55 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\tree.com
851. 2022-04-03 06:55 - 2022-04-03 06:55 - 000040784 _____ C:\WINDOWS\system32\OutdoorAudioEnvironment.bin
852. 2022-04-03 06:55 - 2022-04-03 06:55 - 000040736 _____ (Silicon Integrated Systems Corp.) C:\WINDOWS\system32\Drivers\sisraid2.sys
853. 2022-04-03 06:55 - 2022-04-03 06:55 - 000040448 _____ (Microsoft) C:\WINDOWS\SysWOW64\csrr.rs
854. 2022-04-03 06:55 - 2022-04-03 06:55 - 000040224 _____ (VMware, Inc.) C:\WINDOWS\system32\Drivers\pvscsii.sys
855. 2022-04-03 06:55 - 2022-04-03 06:55 - 000039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kmddsp.tsp
856. 2022-04-03 06:55 - 2022-04-03 06:55 - 000038400 _____ (Microsoft) C:\WINDOWS\SysWOW64\oflc-nz.rs
857. 2022-04-03 06:55 - 2022-04-03 06:55 - 000038128 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaLPSSi_GPIO.sys
858. 2022-04-03 06:55 - 2022-04-03 06:55 - 000037888 _____ (Microsoft) C:\WINDOWS\SysWOW64\fpb.rs
859. 2022-04-03 06:55 - 2022-04-03 06:55 - 000036864 ____R (The ICU Project) C:\WINDOWS\system32\icuuc.dll
860. 2022-04-03 06:55 - 2022-04-03 06:55 - 000036864 _____ (Microsoft) C:\WINDOWS\system32\usk.rs
861. 2022-04-03 06:55 - 2022-04-03 06:55 - 000036864 _____ (Microsoft) C:\WINDOWS\system32\cob-au.rs
862. 2022-04-03 06:55 - 2022-04-03 06:55 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\chcp.com
863. 2022-04-03 06:55 - 2022-04-03 06:55 - 000036352 _____ (Intel(R) Corporation) C:\WINDOWS\system32\Drivers\iagpio.sys
864. 2022-04-03 06:55 - 2022-04-03 06:55 - 000033584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msgsm32.acm
865. 2022-04-03 06:55 - 2022-04-03 06:55 - 000033424 _____ C:\WINDOWS\system32\tprtdll.dll
866. 2022-04-03 06:55 - 2022-04-03 06:55 - 000033280 _____ (Microsoft) C:\WINDOWS\SysWOW64\cero.rs
867. 2022-04-03 06:55 - 2022-04-03 06:55 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrnsave.scr
868. 2022-04-03 06:55 - 2022-04-03 06:55 - 000032768 ____R (The ICU Project) C:\WINDOWS\system32\icuin.dll
869. 2022-04-03 06:55 - 2022-04-03 06:55 - 000032032 _____ (Mellanox) C:\WINDOWS\system32\Drivers\winmad.sys
870. 2022-04-03 06:55 - 2022-04-03 06:55 - 000031252 _____ C:\WINDOWS\system32\NarratorControlTemplates.xml
871. 2022-04-03 06:55 - 2022-04-03 06:55 - 000030208 _____ (Microsoft) C:\WINDOWS\SysWOW64\esrb.rs
872. 2022-04-03 06:55 - 2022-04-03 06:55 - 000029184 ____R (The ICU Project) C:\WINDOWS\SysWOW64\icuuc.dll
873. 2022-04-03 06:55 - 2022-04-03 06:55 - 000028936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imaadp32.acm
874. 2022-04-03 06:55 - 2022-04-03 06:55 - 000028672 _____ (Microsoft) C:\WINDOWS\system32\pegi-pt.rs
875. 2022-04-03 06:55 - 2022-04-03 06:55 - 000028672 _____ (Microsoft) C:\WINDOWS\system32\pegi.rs
876. 2022-04-03 06:55 - 2022-04-03 06:55 - 000028672 _____ (Microsoft) C:\WINDOWS\system32\grb.rs
877. 2022-04-03 06:55 - 2022-04-03 06:55 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctfime.ime
878. 2022-04-03 06:55 - 2022-04-03 06:55 - 000028672 _____ (Chelsio Communications) C:\WINDOWS\system32\Drivers\cht4vfx.sys
879. 2022-04-03 06:55 - 2022-04-03 06:55 - 000028392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msadp32.acm
880. 2022-04-03 06:55 - 2022-04-03 06:55 - 000027648 _____ (Microsoft) C:\WINDOWS\SysWOW64\usk.rs
881. 2022-04-03 06:55 - 2022-04-03 06:55 - 000027648 _____ (Microsoft) C:\WINDOWS\SysWOW64\cob-au.rs
882. 2022-04-03 06:55 - 2022-04-03 06:55 - 000026912 _____ (Promise Technology, Inc.) C:\WINDOWS\system32\Drivers\stexstor.sys
883. 2022-04-03 06:55 - 2022-04-03 06:55 - 000024576 ____R (The ICU Project) C:\WINDOWS\SysWOW64\icuin.dll
884. 2022-04-03 06:55 - 2022-04-03 06:55 - 000024576 _____ (Microsoft) C:\WINDOWS\system32\pcbp.rs
885. 2022-04-03 06:55 - 2022-04-03 06:55 - 000024576 _____ (Microsoft) C:\WINDOWS\system32\djctq.rs
886. 2022-04-03 06:55 - 2022-04-03 06:55 - 000022816 _____ (Advanced Micro Devices) C:\WINDOWS\system32\Drivers\amdxata.sys
887. 2022-04-03 06:55 - 2022-04-03 06:55 - 000021656 _____ C:\WINDOWS\system32\NetTrace.PLA.Diagnostics.xml
888. 2022-04-03 06:55 - 2022-04-03 06:55 - 000021152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msg711.acm
889. 2022-04-03 06:55 - 2022-04-03 06:55 - 000020268 _____ C:\WINDOWS\system32\DeliveryOptimizationMIProv.mof
890. 2022-04-03 06:55 - 2022-04-03 06:55 - 000019456 _____ (Microsoft) C:\WINDOWS\SysWOW64\pegi-pt.rs
891. 2022-04-03 06:55 - 2022-04-03 06:55 - 000019456 _____ (Microsoft) C:\WINDOWS\SysWOW64\pegi.rs
892. 2022-04-03 06:55 - 2022-04-03 06:55 - 000017920 _____ (Microsoft) C:\WINDOWS\SysWOW64\grb.rs
893. 2022-04-03 06:55 - 2022-04-03 06:55 - 000017528 _____ C:\WINDOWS\SysWOW64\camext.dll
894. 2022-04-03 06:55 - 2022-04-03 06:55 - 000016384 _____ C:\WINDOWS\SysWOW64\BrokerFileDialog.dat
895. 2022-04-03 06:55 - 2022-04-03 06:55 - 000016384 _____ C:\WINDOWS\system32\BrokerFileDialog.dat
896. 2022-04-03 06:55 - 2022-04-03 06:55 - 000014843 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
897. 2022-04-03 06:55 - 2022-04-03 06:55 - 000014336 _____ (Microsoft) C:\WINDOWS\SysWOW64\djctq.rs
898. 2022-04-03 06:55 - 2022-04-03 06:55 - 000013824 _____ (Microsoft) C:\WINDOWS\SysWOW64\pcbp.rs
899. 2022-04-03 06:55 - 2022-04-03 06:55 - 000013091 _____ C:\WINDOWS\system32\DevModeRunAsUserConfig.msc
900. 2022-04-03 06:55 - 2022-04-03 06:55 - 000012288 _____ (Microsoft) C:\WINDOWS\system32\WEB.rs
901. 2022-04-03 06:55 - 2022-04-03 06:55 - 000010576 _____ C:\WINDOWS\system32\TransformPPSToWlan.xslt
902. 2022-04-03 06:55 - 2022-04-03 06:55 - 000010429 _____ C:\WINDOWS\system32\ScavengeSpace.xml
903. 2022-04-03 06:55 - 2022-04-03 06:55 - 000009926 _____ C:\WINDOWS\SysWOW64\l_intl.nls
904. 2022-04-03 06:55 - 2022-04-03 06:55 - 000009926 _____ C:\WINDOWS\system32\l_intl.nls
905. 2022-04-03 06:55 - 2022-04-03 06:55 - 000009728 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\Drivers\bcmfn2.sys
906. 2022-04-03 06:55 - 2022-04-03 06:55 - 000009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctfime.ime
907. 2022-04-03 06:55 - 2022-04-03 06:55 - 000008192 _____ C:\WINDOWS\system32\settings.dat
908. 2022-04-03 06:55 - 2022-04-03 06:55 - 000004675 _____ C:\WINDOWS\SysWOW64\wsmanconfig_schema.xml
909. 2022-04-03 06:55 - 2022-04-03 06:55 - 000004675 _____ C:\WINDOWS\system32\wsmanconfig_schema.xml
910. 2022-04-03 06:55 - 2022-04-03 06:55 - 000004608 _____ (Microsoft) C:\WINDOWS\SysWOW64\WEB.rs
911. 2022-04-03 06:55 - 2022-04-03 06:55 - 000004148 _____ C:\WINDOWS\system32\psmodulediscoveryprovider.mof
912. 2022-04-03 06:55 - 2022-04-03 06:55 - 000003944 _____ C:\WINDOWS\system32\DetailedReading-Default.xml
913. 2022-04-03 06:55 - 2022-04-03 06:55 - 000003789 _____ C:\WINDOWS\system32\WwanFeatureTests.xml
914. 2022-04-03 06:55 - 2022-04-03 06:55 - 000003666 _____ C:\WINDOWS\SysWOW64\sysprtj.sep
915. 2022-04-03 06:55 - 2022-04-03 06:55 - 000003666 _____ C:\WINDOWS\system32\sysprtj.sep
916. 2022-04-03 06:55 - 2022-04-03 06:55 - 000003366 _____ C:\WINDOWS\SysWOW64\AppxProvisioning.xml
917. 2022-04-03 06:55 - 2022-04-03 06:55 - 000003366 _____ C:\WINDOWS\system32\AppxProvisioning.xml
918. 2022-04-03 06:55 - 2022-04-03 06:55 - 000003317 _____ C:\WINDOWS\SysWOW64\sysprint.sep
919. 2022-04-03 06:55 - 2022-04-03 06:55 - 000003317 _____ C:\WINDOWS\system32\sysprint.sep
920. 2022-04-03 06:55 - 2022-04-03 06:55 - 000002426 _____ C:\WINDOWS\SysWOW64\WsmTxt.xsl
921. 2022-04-03 06:55 - 2022-04-03 06:55 - 000002426 _____ C:\WINDOWS\system32\WsmTxt.xsl
922. 2022-04-03 06:55 - 2022-04-03 06:55 - 000002404 _____ C:\WINDOWS\SysWOW64\WimBootCompress.ini
923. 2022-04-03 06:55 - 2022-04-03 06:55 - 000002404 _____ C:\WINDOWS\system32\WimBootCompress.ini
924. 2022-04-03 06:55 - 2022-04-03 06:55 - 000002044 _____ C:\WINDOWS\system32\DeliveryOptimizationMIProvUninstall.mof
925. 2022-04-03 06:55 - 2022-04-03 06:55 - 000001820 _____ C:\WINDOWS\SysWOW64\rasctrnm.h
926. 2022-04-03 06:55 - 2022-04-03 06:55 - 000001820 _____ C:\WINDOWS\system32\rasctrnm.h
927. 2022-04-03 06:55 - 2022-04-03 06:55 - 000001688 _____ C:\WINDOWS\system32\TransformPPSToWlanCredentials.xslt
928. 2022-04-03 06:55 - 2022-04-03 06:55 - 000001673 _____ C:\WINDOWS\SysWOW64\tcpbidi.xml
929. 2022-04-03 06:55 - 2022-04-03 06:55 - 000001673 _____ C:\WINDOWS\system32\tcpbidi.xml
930. 2022-04-03 06:55 - 2022-04-03 06:55 - 000001559 _____ C:\WINDOWS\SysWOW64\WsmPty.xsl
931. 2022-04-03 06:55 - 2022-04-03 06:55 - 000001559 _____ C:\WINDOWS\system32\WsmPty.xsl
932. 2022-04-03 06:55 - 2022-04-03 06:55 - 000001369 _____ C:\WINDOWS\system32\ThirdPartyNoticesBySHS.txt
933. 2022-04-03 06:55 - 2022-04-03 06:55 - 000001281 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools.lnk
934. 2022-04-03 06:55 - 2022-04-03 06:55 - 000000724 _____ C:\WINDOWS\system32\wpr.config.xml
935. 2022-04-03 06:55 - 2022-04-03 06:55 - 000000714 _____ C:\WINDOWS\SysWOW64\RestartManager.mof
936. 2022-04-03 06:55 - 2022-04-03 06:55 - 000000714 _____ C:\WINDOWS\system32\RestartManager.mof
937. 2022-04-03 06:55 - 2022-04-03 06:55 - 000000670 ___RH C:\WINDOWS\WindowsShell.Manifest
938. 2022-04-03 06:55 - 2022-04-03 06:55 - 000000646 _____ C:\WINDOWS\SysWOW64\Drivers\gmreadme.txt
939. 2022-04-03 06:55 - 2022-04-03 06:55 - 000000646 _____ C:\WINDOWS\system32\Drivers\gmreadme.txt
940. 2022-04-03 06:55 - 2022-04-03 06:55 - 000000614 _____ C:\WINDOWS\system32\WdsUnattendTemplate.xml
941. 2022-04-03 06:55 - 2022-04-03 06:55 - 000000407 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\File Explorer.lnk
942. 2022-04-03 06:55 - 2022-04-03 06:55 - 000000176 _____ C:\WINDOWS\SysWOW64\RestartManagerUninstall.mof
943. 2022-04-03 06:55 - 2022-04-03 06:55 - 000000176 _____ C:\WINDOWS\system32\RestartManagerUninstall.mof
944. 2022-04-03 06:55 - 2022-04-03 06:55 - 000000150 _____ C:\WINDOWS\SysWOW64\pcl.sep
945. 2022-04-03 06:55 - 2022-04-03 06:55 - 000000150 _____ C:\WINDOWS\system32\pcl.sep
946. 2022-04-03 06:55 - 2022-04-03 06:55 - 000000051 _____ C:\WINDOWS\SysWOW64\pscript.sep
947. 2022-04-03 06:55 - 2022-04-03 06:55 - 000000051 _____ C:\WINDOWS\system32\pscript.sep
948. 2022-04-03 06:55 - 2022-04-03 06:55 - 000000033 _____ C:\WINDOWS\SysWOW64\winrm.cmd
949. 2022-04-03 06:55 - 2022-04-03 06:55 - 000000033 _____ C:\WINDOWS\system32\winrm.cmd
950. 2022-04-03 06:54 - 2022-04-03 06:54 - 000327680 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
951. 2022-04-03 06:53 - 2022-04-09 22:06 - 083886080 _____ C:\WINDOWS\system32\config\SOFTWARE
952. 2022-04-03 06:53 - 2022-04-09 22:06 - 016252928 _____ C:\WINDOWS\system32\config\SYSTEM
953. 2022-04-03 06:53 - 2022-04-09 22:06 - 000524288 _____ C:\WINDOWS\system32\config\DEFAULT
954. 2022-04-03 06:53 - 2022-04-09 22:06 - 000262144 _____ C:\WINDOWS\system32\config\BBI
955. 2022-04-03 06:53 - 2022-04-09 22:06 - 000131072 _____ C:\WINDOWS\system32\config\SAM
956. 2022-04-03 06:53 - 2022-04-09 22:06 - 000032768 _____ C:\WINDOWS\system32\config\SECURITY
957. 2022-04-03 06:53 - 2022-04-09 21:40 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
958. 2022-04-03 06:53 - 2022-04-09 18:55 - 000000000 ____D C:\WINDOWS\CbsTemp
959. 2022-04-03 06:53 - 2022-04-09 18:51 - 000000000 ____D C:\WINDOWS\servicing
960. 2022-04-03 06:53 - 2022-04-03 07:13 - 000000000 ____D C:\WINDOWS\system32\SMI
961. 2022-03-30 13:43 - 2022-03-30 13:43 - 000000000 ___HD C:\$WinREAgent
962. 2022-03-21 18:54 - 2022-04-09 21:38 - 000000000 ____D C:\WINDOWS\system32\gf2engine
963. 2022-03-21 18:53 - 2022-03-21 18:53 - 000000000 ___HD C:\$AV_ASW
964. 2022-03-21 18:51 - 2022-03-24 00:46 - 000000000 ____D C:\ProgramData\Avast Software
965. 2022-03-21 18:51 - 2022-03-21 18:51 - 000259872 _____ (AVAST Software) C:\Users\Stasiu\Downloads\avast_free_antivirus_setup_online.exe
966. 2022-03-21 18:48 - 2022-03-21 18:50 - 000000000 ____D C:\ProgramData\HitmanPro
967. 2022-03-21 18:41 - 2022-03-21 18:41 - 000000000 ____D C:\Users\Stasiu\AppData\Local\mbam
968. 2022-03-21 11:19 - 2022-03-24 00:46 - 1740203919 _____ C:\WINDOWS\MEMORY.DMP
969. 2022-03-20 19:04 - 2022-03-14 15:03 - 001906536 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
970. 2022-03-20 19:04 - 2022-03-14 15:03 - 001906536 _____ C:\WINDOWS\system32\vulkaninfo.exe
971. 2022-03-20 19:04 - 2022-03-14 15:03 - 001479016 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
972. 2022-03-20 19:04 - 2022-03-14 15:03 - 001479016 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
973. 2022-03-20 19:04 - 2022-03-14 15:03 - 001470664 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
974. 2022-03-20 19:04 - 2022-03-14 15:03 - 001432952 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
975. 2022-03-20 19:04 - 2022-03-14 15:03 - 001432952 _____ C:\WINDOWS\system32\vulkan-1.dll
976. 2022-03-20 19:04 - 2022-03-14 15:03 - 001213920 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
977. 2022-03-20 19:04 - 2022-03-14 15:03 - 001146216 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
978. 2022-03-20 19:04 - 2022-03-14 15:03 - 001146216 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
979. 2022-03-20 19:04 - 2022-03-14 15:00 - 000866296 _____ C:\WINDOWS\system32\nvofapi64.dll
980. 2022-03-20 19:04 - 2022-03-14 15:00 - 000688120 _____ C:\WINDOWS\SysWOW64\nvofapi.dll
981. 2022-03-20 19:04 - 2022-03-14 14:59 - 002125488 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
982. 2022-03-20 19:04 - 2022-03-14 14:59 - 001533104 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
983. 2022-03-20 19:04 - 2022-03-14 14:59 - 001182712 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
984. 2022-03-20 19:04 - 2022-03-14 14:59 - 000762872 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
985. 2022-03-20 19:04 - 2022-03-14 14:59 - 000712904 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
986. 2022-03-20 19:04 - 2022-03-14 14:59 - 000138256 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
987. 2022-03-20 19:04 - 2022-03-14 14:59 - 000051216 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhdap64.dll
988. 2022-03-20 19:04 - 2022-03-14 14:58 - 010268336 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
989. 2022-03-20 19:04 - 2022-03-14 14:58 - 008803808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
990. 2022-03-20 19:04 - 2022-03-14 14:58 - 005361352 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
991. 2022-03-20 19:04 - 2022-03-14 14:58 - 003067384 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
992. 2022-03-20 19:04 - 2022-03-14 14:58 - 001605296 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
993. 2022-03-20 19:04 - 2022-03-14 14:58 - 001059832 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
994. 2022-03-20 19:04 - 2022-03-14 14:58 - 000845792 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
995. 2022-03-20 19:04 - 2022-03-14 14:58 - 000289480 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
996. 2022-03-20 19:04 - 2022-03-14 14:57 - 005730272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
997. 2022-03-20 19:04 - 2022-03-14 14:57 - 000851656 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
998. 2022-03-20 19:04 - 2022-03-14 14:55 - 007449768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
999. 2022-03-20 19:04 - 2022-03-14 14:55 - 006331736 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
1000. 2022-03-20 19:04 - 2022-03-11 16:44 - 000092551 _____ C:\WINDOWS\system32\nvinfo.pb
1001. 2022-03-20 15:34 - 2022-03-20 15:35 - 000000000 ____D C:\Users\Stasiu\AppData\Local\luminati
1002. 2022-03-20 15:04 - 2022-03-20 15:35 - 000000000 ____D C:\Users\Stasiu\AppData\Roaming\Hola
1003. 2022-03-20 15:04 - 2022-03-20 15:04 - 000000000 ____D C:\Program Files\Hola
1004. 2022-03-20 14:58 - 2022-03-22 18:13 - 000000000 ____D C:\Users\Stasiu\AppData\Roaming\MicrosoftWindowsFirewall
1005. 2022-03-20 14:12 - 2022-03-20 14:12 - 000000000 ____D C:\Users\Stasiu\Documents\SkidRow
1006. 2022-03-20 14:12 - 2022-03-20 14:12 - 000000000 ____D C:\Users\Stasiu\AppData\LocalLow\SKS
1007. 2022-03-19 13:00 - 2022-04-09 21:38 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
1008. 2022-03-12 23:25 - 2022-04-09 22:07 - 000002325 _____ C:\Users\Stasiu\Desktop\Porofessor.gg.lnk
1009. 2022-03-12 23:25 - 2022-04-09 21:38 - 000000000 ____D C:\Users\Stasiu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf
1010. 2022-03-12 23:25 - 2022-04-07 18:16 - 000000000 ____D C:\Program Files (x86)\Overwolf
1011. 2022-03-12 23:25 - 2022-03-12 23:25 - 000000000 ____D C:\ProgramData\Overwolf
1012. 2022-03-07 00:10 - 2022-03-20 15:07 - 000000000 ____D C:\Users\Stasiu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Postal 2 PL
1013. 2022-03-07 00:00 - 2022-03-07 22:23 - 000000001 _____ C:\WINDOWS\vgkbootstatus.dat
1014. 2022-03-07 00:00 - 2022-03-07 00:00 - 000000000 ____D C:\Users\Stasiu\AppData\Local\VALORANT
1015. 2022-01-17 17:48 - 2022-03-12 13:29 - 000000032 _____ C:\Users\Stasiu\AppData\Roaming\.machineId
1016. 2022-01-17 17:46 - 2022-04-09 22:07 - 000000000 ____D C:\Users\Stasiu\AppData\Local\Overwolf
1017.  
1018. ==================== Trzy miesiące (zmodyfikowane) ==================
1019.  
1020. (Załączenie wejścia w fixlist spowoduje przeniesienie pliku/folderu.)
1021.  
1022. 2022-04-09 22:07 - 2021-10-06 17:27 - 000000000 ____D C:\ProgramData\NVIDIA
1023. 2022-04-09 22:07 - 2020-07-30 15:59 - 000012288 ___SH C:\DumpStack.log.tmp
1024. 2022-04-09 22:05 - 2020-11-04 20:21 - 000000000 ____D C:\Users\Stasiu\AppData\LocalLow\Temp
1025. 2022-04-09 22:04 - 2021-10-06 18:19 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy
1026. 2022-04-09 21:50 - 2021-10-06 19:14 - 000000000 ____D C:\Users\Stasiu\AppData\Local\D3DSCache
1027. 2022-04-09 21:40 - 2021-10-06 17:50 - 000002376 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk
1028. 2022-04-09 21:40 - 2020-07-30 16:07 - 000000000 __RHD C:\Users\Public\AccountPictures
1029. 2022-04-09 21:39 - 2021-12-18 20:29 - 000000000 ____D C:\WINDOWS\system32\Drivers\NVIDIA Corporation
1030. 2022-04-09 21:38 - 2022-01-05 00:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TLauncher
1031. 2022-04-09 21:38 - 2021-12-29 17:11 - 000000000 ____D C:\Users\Stasiu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
1032. 2022-04-09 21:38 - 2021-11-18 15:48 - 000000000 ____D C:\WINDOWS\system32\DTS
1033. 2022-04-09 21:38 - 2021-10-28 20:19 - 000000000 ____D C:\Users\Stasiu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Visual Studio Code
1034. 2022-04-09 21:38 - 2021-10-09 14:22 - 000000000 ____D C:\WINDOWS\system32\appmgmt
1035. 2022-04-09 21:38 - 2021-10-06 21:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Riot Games
1036. 2022-04-09 21:38 - 2021-10-06 20:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 7.2
1037. 2022-04-09 21:38 - 2021-10-06 18:19 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
1038. 2022-04-09 21:38 - 2021-10-06 18:19 - 000000000 ____D C:\WINDOWS\system32\MsDtc
1039. 2022-04-09 21:38 - 2021-10-06 18:19 - 000000000 ____D C:\WINDOWS\system32\Macromed
1040. 2022-04-09 21:38 - 2021-10-05 19:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Download Manager
1041. 2022-04-09 21:38 - 2021-09-30 16:44 - 000000000 ____D C:\Users\Stasiu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rockstar Games
1042. 2022-04-09 21:38 - 2021-03-14 12:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
1043. 2022-04-09 21:38 - 2021-03-14 12:05 - 000002454 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
1044. 2022-04-09 21:38 - 2020-12-25 19:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DM1 FPS
1045. 2022-04-09 21:38 - 2020-07-31 09:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
1046. 2022-04-09 21:38 - 2020-07-31 00:11 - 000000000 ____D C:\Users\Stasiu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
1047. 2022-04-09 21:38 - 2020-07-31 00:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
1048. 2022-04-09 21:38 - 2020-07-30 22:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Minecraft Launcher
1049. 2022-04-09 21:38 - 2020-07-30 21:42 - 000000000 ____D C:\Users\Stasiu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
1050. 2022-04-09 21:38 - 2020-07-30 21:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
1051. 2022-04-09 20:56 - 2021-10-06 19:40 - 000000000 ____D C:\Users\Stasiu\AppData\Roaming\discord
1052. 2022-04-09 20:30 - 2021-10-06 19:40 - 000000000 ____D C:\Users\Stasiu\AppData\Local\Discord
1053. 2022-04-09 19:00 - 2021-03-17 14:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASRock Utility
1054. 2022-04-09 19:00 - 2020-07-30 22:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
1055. 2022-04-09 19:00 - 2020-07-30 21:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SteelSeries
1056. 2022-04-09 18:58 - 2021-10-06 17:47 - 000000000 ____D C:\Users\Stasiu\AppData\Local\Packages
1057. 2022-04-09 16:52 - 2021-10-06 21:41 - 000000000 ____D C:\ProgramData\Riot Games
1058. 2022-04-07 22:34 - 2021-10-06 21:34 - 000000000 ____D C:\Users\Stasiu\AppData\Roaming\.minecraft
1059. 2022-04-07 22:20 - 2021-10-06 21:34 - 000000000 ____D C:\Program Files (x86)\Minecraft Launcher
1060. 2022-04-06 18:33 - 2021-10-06 17:26 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
1061. 2022-03-29 16:58 - 2021-10-06 21:21 - 000000000 ____D C:\Users\Stasiu\AppData\Local\CrashDumps
1062. 2022-03-24 19:21 - 2021-10-06 20:42 - 000000000 ____D C:\Program Files (x86)\Steam
1063. 2022-03-12 01:39 - 2021-10-06 22:52 - 000000000 ____D C:\Users\Stasiu\AppData\Local\ElevatedDiagnostics
1064. 2022-03-11 18:13 - 2021-10-06 17:47 - 000000000 ____D C:\ProgramData\Packages
1065.  
1066. ==================== Pliki w katalogu głównym wybranych folderów ========
1067.  
1068. 2022-01-17 17:48 - 2022-03-12 13:29 - 000000032 _____ () C:\Users\Stasiu\AppData\Roaming\.machineId
1069. 2022-01-07 16:30 - 2022-01-07 16:30 - 000007379 _____ () C:\Users\Stasiu\AppData\Roaming\VoiceMeeterDefault.xml
1070.  
1071. ==================== SigCheckExt =========================
1072.  
1073. 2022-04-09 21:57 - 2022-04-09 21:57 - 002365440 _____ (Farbar) C:\Users\Stasiu\Downloads\FRST64.exe
1074.  
1075. ==================== SigCheck ============================
1076.  
1077. (Brak automatycznej naprawy dla plików które nie przeszły weryfikacji.)
1078.  
1079.  
1080. ==================== BCD ================================
1081.  
1082. Firmware Boot Manager
1083. ---------------------
1084. identifier              {fwbootmgr}
1085. displayorder            {bootmgr}
1086.                         {abdf1e97-d274-11ea-aab8-85e6c26c33c3}
1087. timeout                 1
1088.  
1089. Windows Boot Manager
1090. --------------------
1091. identifier              {bootmgr}
1092. device                  partition=\Device\HarddiskVolume1
1093. path                    \EFI\MICROSOFT\BOOT\BOOTMGFW.EFI
1094. description             Windows Boot Manager
1095. locale                  pl-PL
1096. inherit                 {globalsettings}
1097. flightsigning           Yes
1098. default                 {current}
1099. resumeobject            {bd56ea12-6057-11ec-98dc-985d02afab46}
1100. displayorder            {current}
1101. toolsdisplayorder       {memdiag}
1102. timeout                 30
1103.  
1104. Firmware Application (101fffff)
1105. -------------------------------
1106. identifier              {abdf1e97-d274-11ea-aab8-85e6c26c33c3}
1107. description             Hard Drive
1108.  
1109. Windows Setup
1110. -------------
1111. identifier              {7254a080-1510-4e85-ac0f-e7fb3d444736}
1112. device                  ramdisk=[C:]\$WINDOWS.~BT\Sources\SafeOS\winre.wim,{bd56ea14-6057-11ec-98dc-985d02afab46}
1113. bootstatdevice          partition=C:
1114. custom:11000083         partition=C:
1115. path                    \windows\system32\winload.efi
1116. description             Windows Rollback
1117. locale                  pl-PL
1118. bootstatfilepath        \$WINDOWS.~BT\Sources\SafeOS\bootstat.dat
1119. inherit                 {bootloadersettings}
1120. restartonfailure        No
1121. osdevice                ramdisk=[C:]\$WINDOWS.~BT\Sources\SafeOS\winre.wim,{bd56ea14-6057-11ec-98dc-985d02afab46}
1122. custom:21000152         partition=C:
1123. systemroot              \windows
1124. nx                      OptIn
1125. bootmenupolicy          Standard
1126. bootstatuspolicy        AlwaysDisplayStartupFailures
1127. winpe                   Yes
1128.  
1129. Windows Boot Loader
1130. -------------------
1131. identifier              {bd56e9fc-6057-11ec-98dc-985d02afab46}
1132. device                  ramdisk=[unknown]\Recovery\WindowsRE\Winre.wim,{bd56e9fd-6057-11ec-98dc-985d02afab46}
1133. path                    \windows\system32\winload.efi
1134. description             Windows Recovery Environment
1135. locale                  pl-PL
1136. inherit                 {bootloadersettings}
1137. displaymessage          Recovery
1138. osdevice                ramdisk=[unknown]\Recovery\WindowsRE\Winre.wim,{bd56e9fd-6057-11ec-98dc-985d02afab46}
1139. systemroot              \windows
1140. nx                      OptIn
1141. bootmenupolicy          Standard
1142. winpe                   Yes
1143.  
1144. Windows Boot Loader
1145. -------------------
1146. identifier              {bd56ea10-6057-11ec-98dc-985d02afab46}
1147. device                  ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{bd56ea11-6057-11ec-98dc-985d02afab46}
1148. path                    \windows\system32\winload.efi
1149. description             Windows Recovery Environment
1150. locale                  pl-PL
1151. inherit                 {bootloadersettings}
1152. displaymessage          Recovery
1153. osdevice                ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{bd56ea11-6057-11ec-98dc-985d02afab46}
1154. systemroot              \windows
1155. nx                      OptIn
1156. bootmenupolicy          Standard
1157. winpe                   Yes
1158.  
1159. Windows Boot Loader
1160. -------------------
1161. identifier              {current}
1162. device                  partition=C:
1163. path                    \WINDOWS\system32\winload.efi
1164. description             Windows 11
1165. locale                  pl-PL
1166. inherit                 {bootloadersettings}
1167. recoverysequence        {bd56ea15-6057-11ec-98dc-985d02afab46}
1168. displaymessageoverride  Recovery
1169. recoveryenabled         Yes
1170. isolatedcontext         Yes
1171. flightsigning           Yes
1172. allowedinmemorysettings 0x15000075
1173. osdevice                partition=C:
1174. systemroot              \WINDOWS
1175. resumeobject            {bd56ea12-6057-11ec-98dc-985d02afab46}
1176. nx                      OptIn
1177. bootmenupolicy          Standard
1178.  
1179. Windows Boot Loader
1180. -------------------
1181. identifier              {bd56ea15-6057-11ec-98dc-985d02afab46}
1182. device                  ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{bd56ea16-6057-11ec-98dc-985d02afab46}
1183. path                    \windows\system32\winload.efi
1184. description             Windows Recovery Environment
1185. locale                  pl-PL
1186. inherit                 {bootloadersettings}
1187. displaymessage          Recovery
1188. osdevice                ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{bd56ea16-6057-11ec-98dc-985d02afab46}
1189. systemroot              \windows
1190. nx                      OptIn
1191. bootmenupolicy          Standard
1192. winpe                   Yes
1193.  
1194. Resume from Hibernate
1195. ---------------------
1196. identifier              {bd56ea0d-6057-11ec-98dc-985d02afab46}
1197. device                  partition=C:
1198. path                    \WINDOWS\system32\winresume.efi
1199. description             Windows Resume Application
1200. locale                  pl-PL
1201. inherit                 {resumeloadersettings}
1202. recoverysequence        {bd56ea10-6057-11ec-98dc-985d02afab46}
1203. recoveryenabled         Yes
1204. isolatedcontext         Yes
1205. allowedinmemorysettings 0x15000075
1206. filedevice              partition=C:
1207. custom:21000026         partition=C:
1208. filepath                \hiberfil.sys
1209. bootmenupolicy          Standard
1210. debugoptionenabled      No
1211.  
1212. Resume from Hibernate
1213. ---------------------
1214. identifier              {bd56ea12-6057-11ec-98dc-985d02afab46}
1215. device                  partition=C:
1216. path                    \WINDOWS\system32\winresume.efi
1217. description             Windows Resume Application
1218. locale                  pl-PL
1219. inherit                 {resumeloadersettings}
1220. recoverysequence        {bd56ea15-6057-11ec-98dc-985d02afab46}
1221. recoveryenabled         Yes
1222. isolatedcontext         Yes
1223. allowedinmemorysettings 0x15000075
1224. filedevice              partition=C:
1225. custom:21000026         partition=C:
1226. filepath                \hiberfil.sys
1227. bootmenupolicy          Standard
1228. debugoptionenabled      No
1229.  
1230. Windows Memory Tester
1231. ---------------------
1232. identifier              {memdiag}
1233. device                  partition=\Device\HarddiskVolume1
1234. path                    \EFI\Microsoft\Boot\memtest.efi
1235. description             Diagnostyka pami©ci systemu Windows
1236. locale                  pl-PL
1237. inherit                 {globalsettings}
1238. badmemoryaccess         Yes
1239.  
1240. EMS Settings
1241. ------------
1242. identifier              {emssettings}
1243. bootems                 No
1244.  
1245. Debugger Settings
1246. -----------------
1247. identifier              {dbgsettings}
1248. debugtype               Local
1249.  
1250. RAM Defects
1251. -----------
1252. identifier              {badmemory}
1253.  
1254. Global Settings
1255. ---------------
1256. identifier              {globalsettings}
1257. inherit                 {dbgsettings}
1258.                         {emssettings}
1259.                         {badmemory}
1260.  
1261. Boot Loader Settings
1262. --------------------
1263. identifier              {bootloadersettings}
1264. inherit                 {globalsettings}
1265.                         {hypervisorsettings}
1266.  
1267. Hypervisor Settings
1268. -------------------
1269. identifier              {hypervisorsettings}
1270. hypervisordebugtype     Serial
1271. hypervisordebugport     1
1272. hypervisorbaudrate      115200
1273.  
1274. Resume Loader Settings
1275. ----------------------
1276. identifier              {resumeloadersettings}
1277. inherit                 {globalsettings}
1278.  
1279. Device options
1280. --------------
1281. identifier              {bd56ea11-6057-11ec-98dc-985d02afab46}
1282. description             Windows Recovery
1283. ramdisksdidevice        partition=\Device\HarddiskVolume4
1284. ramdisksdipath          \Recovery\WindowsRE\boot.sdi
1285.  
1286. Device options
1287. --------------
1288. identifier              {bd56ea14-6057-11ec-98dc-985d02afab46}
1289. description             Windows Setup
1290. ramdisksdidevice        partition=C:
1291. ramdisksdipath          \$WINDOWS.~BT\Sources\SafeOS\boot.sdi
1292.  
1293. Device options
1294. --------------
1295. identifier              {bd56ea16-6057-11ec-98dc-985d02afab46}
1296. description             Windows Recovery
1297. ramdisksdidevice        partition=\Device\HarddiskVolume4
1298. ramdisksdipath          \Recovery\WindowsRE\boot.sdi
1299.  
1300. ==================== Koniec  FRST.txt ========================