Windows Defender files added during installation ============================================================================================= File accessed/modified: "C:\hiberfil.sys" File accessed/modified: "C:\pagefile.sys" File accessed/modified: "C:\swapfile.sys" File added: "C:\$Recycle.Bin\S-1-5-21-1621887801-967696625-3000357664-1000\desktop.ini" File added: "C:\$Recycle.Bin\S-1-5-21-2782264719-1357438777-249758288-1001\desktop.ini" Directory added: "C:\Program Files\Windows Defender" Directory added: "C:\Program Files\WindowsApps\Deleted" Directory added: "C:\Program Files\WindowsApps\DeletedAllUserPackages" Directory added: "C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1705.4.0_x64__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1705.4.0_x86__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.BingWeather_4.22.3254.0_neutral_~_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.BingWeather_4.22.3254.0_neutral_split.scale-100_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.BingWeather_4.22.3254.0_neutral_split.scale-150_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.BingWeather_4.22.3254.0_x64__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.12271.0_neutral_split.scale-100_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.12271.0_neutral_split.scale-125_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.12271.0_x64__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.8.15011.0_neutral_~_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.GetHelp_10.1706.10441.0_neutral_~_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.GetHelp_10.1706.10441.0_neutral_split.scale-100_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.GetHelp_10.1706.10441.0_neutral_split.scale-125_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.GetHelp_10.1706.10441.0_x64__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.Getstarted_6.9.10602.0_neutral_~_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.Getstarted_6.9.10602.0_neutral_split.scale-200_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.Getstarted_6.9.10602.0_x64__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.Messaging_2018.222.2231.0_neutral_~_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.Messaging_3.38.22001.0_neutral_split.scale-150_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.Messaging_3.38.22001.0_x64__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_2.1803.8022.0_neutral_~_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_2.1803.8022.0_x64__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_17.8918.5926.0_x64__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_2017.1219.520.0_neutral_~_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.0.1301.0_neutral_~_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.0.1301.0_neutral_split.scale-125_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.0.1301.0_x86__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_2.0.13.0_neutral_~_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_2.0.13.0_neutral_split.scale-125_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_2.0.13.0_x64__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.MSPaint_3.1803.5027.0_neutral_~_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.MSPaint_3.1803.5027.0_x64__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x64__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x86__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.NET.Native.Framework.1.7_1.7.25531.0_x64__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.NET.Native.Framework.1.7_1.7.25531.0_x86__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x64__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x86__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.NET.Native.Runtime.1.7_1.7.25531.0_x64__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.NET.Native.Runtime.1.7_1.7.25531.0_x86__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.Office.OneNote_17.8827.20991.0_x64__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.Office.OneNote_2015.8827.20991.0_neutral_~_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.OneConnect_4.1801.521.0_neutral_~_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.OneConnect_4.1801.521.0_neutral_split.scale-125_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.OneConnect_4.1801.521.0_x64__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.People_10.3.10452.0_neutral_split.scale-125_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.People_10.3.10452.0_x64__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.People_2018.215.110.0_neutral_~_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.Print3D_2.0.3621.0_neutral_~_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.Print3D_2.0.3621.0_neutral_split.scale-125_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.Print3D_2.0.3621.0_x64__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.Services.Store.Engagement_10.0.1610.0_x64__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.Services.Store.Engagement_10.0.1610.0_x86__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.13.274.0_neutral_~_kzf8qxf38zg5c" Directory added: "C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.13.274.0_neutral_split.scale-125_kzf8qxf38zg5c" Directory added: "C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.13.274.0_x64__kzf8qxf38zg5c" Directory added: "C:\Program Files\WindowsApps\Microsoft.StorePurchaseApp_11712.1801.10002.0_neutral_split.scale-100_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.StorePurchaseApp_11712.1801.10002.0_x64__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.StorePurchaseApp_11712.1801.10024.0_neutral_~_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.25426.0_x64__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.25426.0_x86__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.Wallet_2.1.18009.0_neutral_~_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.Wallet_2.1.18009.0_x64__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.WebMediaExtensions_1.0.3102.0_neutral_~_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.WebMediaExtensions_1.0.3102.0_neutral_split.scale-125_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.WebMediaExtensions_1.0.3102.0_x64__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_neutral_~_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1712.10611.0_neutral_split.scale-125_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1712.10611.0_x64__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_2018.302.1846.0_neutral_~_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1712.10601.0_neutral_split.scale-125_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1712.10601.0_x64__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_2018.302.144.0_neutral_~_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.WindowsCamera_2017.1117.80.0_neutral_~_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.WindowsCamera_2017.1117.80.0_x64__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.8827.22055.0_x64__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_2015.8827.22055.0_neutral_~_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1712.612.0_x64__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_2018.302.2011.0_neutral_~_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.WindowsMaps_2018.209.2206.0_neutral_~_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1711.10401.0_neutral_split.scale-125_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1711.10401.0_x64__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_10.1712.10611.0_neutral_split.scale-125_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_10.1712.10611.0_x64__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_2018.302.1842.0_neutral_~_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.WindowsStore_11712.1001.23.0_x64__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.WindowsStore_11712.1001.2313.0_neutral_~_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.Xbox.TCUI_1.11.28003.0_neutral_~_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.Xbox.TCUI_1.11.28003.0_x64__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.XboxApp_38.38.14002.0_neutral_~_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.XboxApp_38.38.14002.0_neutral_split.scale-125_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.XboxApp_38.38.14002.0_x64__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.XboxGameOverlay_1.26.6001.0_neutral_~_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.XboxGameOverlay_1.26.6001.0_neutral_split.scale-100_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.XboxGameOverlay_1.26.6001.0_x64__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_1.15.1001.0_neutral_~_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_1.15.1001.0_neutral_split.scale-100_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_1.15.1001.0_x64__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.XboxIdentityProvider_12.36.15002.0_neutral_~_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.XboxIdentityProvider_12.36.15002.0_x64__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.XboxSpeechToTextOverlay_1.17.29001.0_neutral_~_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.XboxSpeechToTextOverlay_1.17.29001.0_neutral_split.scale-100_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.XboxSpeechToTextOverlay_1.17.29001.0_x64__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.17112.19011.0_neutral_split.scale-125_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.17112.19011.0_x64__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.ZuneMusic_2019.17112.19011.0_neutral_~_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_neutral_split.scale-125_8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe" Directory added: "C:\Program Files\WindowsApps\Microsoft.ZuneVideo_2019.17112.19011.0_neutral_~_8wekyb3d8bbwe" File deleted: "C:\Program Files (x86)\SpyMe Tools\config.ini" File accessed/modified: "C:\Program Files (x86)\SpyMe Tools\diskscan.tmp" File accessed/modified: "C:\Program Files (x86)\SpyMe Tools\logs.txt" File deleted: "C:\Program Files (x86)\SpyMe Tools\withdefender.dsf" File deleted: "C:\Program Files (x86)\SpyMe Tools\withdefender.dsf.rdf" File deleted: "C:\Program Files (x86)\SpyMe Tools\withoutdefender.dsf" Directory added: "C:\Program Files (x86)\Windows Defender" Directory added: "C:\ProgramData\Microsoft\Crypto\PCPKSP\WindowsAIK\0507b7df9c49bfab6c69777db0a70a2a381a1667" File added: "C:\ProgramData\Microsoft\Diagnosis\EventStore.db" File added: "C:\ProgramData\Microsoft\Diagnosis\EventStore.db-shm" File added: "C:\ProgramData\Microsoft\Diagnosis\EventStore.db-wal" File added: "C:\ProgramData\Microsoft\Diagnosis\osver.txt" File added: "C:\ProgramData\Microsoft\Diagnosis\parse.dat" File added: "C:\ProgramData\Microsoft\Diagnosis\VortexSchemaRequests.dat" Directory added: "C:\ProgramData\Microsoft\Diagnosis\AsimovUploader" Directory added: "C:\ProgramData\Microsoft\Diagnosis\CustomTraceProfiles" Directory added: "C:\ProgramData\Microsoft\Diagnosis\DownloadedScenarios" Directory added: "C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings" Directory added: "C:\ProgramData\Microsoft\Diagnosis\ETLLogs" Directory added: "C:\ProgramData\Microsoft\Diagnosis\EventTranscript" Directory added: "C:\ProgramData\Microsoft\Diagnosis\FeedbackHub" Directory added: "C:\ProgramData\Microsoft\Diagnosis\LocalTraceStore" Directory added: "C:\ProgramData\Microsoft\Diagnosis\OfflineSettings" Directory added: "C:\ProgramData\Microsoft\Diagnosis\Scripts" Directory added: "C:\ProgramData\Microsoft\Diagnosis\Sideload" Directory added: "C:\ProgramData\Microsoft\Diagnosis\Siufloc" Directory added: "C:\ProgramData\Microsoft\Diagnosis\SoftLanding" Directory added: "C:\ProgramData\Microsoft\Diagnosis\SoftLandingStage" Directory added: "C:\ProgramData\Microsoft\Diagnosis\TenantStorage" Directory added: "C:\ProgramData\Microsoft\Diagnosis\WindowsAnalytics" File added: "C:\ProgramData\Microsoft\Network\Downloader\edb.chk" File added: "C:\ProgramData\Microsoft\Network\Downloader\edb.log" File added: "C:\ProgramData\Microsoft\Network\Downloader\edbres00001.jrs" File added: "C:\ProgramData\Microsoft\Network\Downloader\edbres00002.jrs" File added: "C:\ProgramData\Microsoft\Network\Downloader\edbtmp.log" File added: "C:\ProgramData\Microsoft\Network\Downloader\qmgr.db" File added: "C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm" Directory added: "C:\ProgramData\Microsoft\Provisioning\AssetCache\CellularUx" Directory added: "C:\ProgramData\Microsoft\Search\Data\Applications" Directory added: "C:\ProgramData\Microsoft\Search\Data\Temp" Directory added: "C:\ProgramData\Microsoft\SmsRouter\MessageStore" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.17134.1_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_10.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_11.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_12.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_13.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_14.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_15.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_16.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_17.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_18.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_19.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_2.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_20.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_21.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_22.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_23.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_24.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_26.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_28.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_3.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_30.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_32.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_34.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_36.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_38.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_4.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_40.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_42.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_44.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_46.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_48.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_5.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_50.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_52.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_54.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_56.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_58.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_6.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_60.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_62.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_64.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_66.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_68.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_7.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_70.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_72.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_74.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_8.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_9.rslc" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.17134.1_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.17134.1_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\F46D4000-FD22-4DB4-AC8E-4E1DDDE828FE_10.0.17134.1_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\InputApp_1000.17134.1.0_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.AAD.BrokerPlugin_1000.17134.1.0_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.AccountsControl_10.0.17134.1_neutral__cw5n1h2txyewy.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.Advertising.Xaml_10.1705.4.0_x64__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.Advertising.Xaml_10.1705.4.0_x86__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.AsyncTextService_10.0.17134.1_neutral__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.BingWeather_4.22.3254.0_neutral_split.scale-100_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.BingWeather_4.22.3254.0_neutral_split.scale-150_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.BingWeather_4.22.3254.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.BingWeather_4.22.3254.0_x64__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.BioEnrollment_10.0.17134.1_neutral__cw5n1h2txyewy.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.CredDialogHost_10.0.17134.1_neutral__cw5n1h2txyewy.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.DesktopAppInstaller_1.0.12271.0_neutral_split.scale-100_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.DesktopAppInstaller_1.0.12271.0_neutral_split.scale-125_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.DesktopAppInstaller_1.0.12271.0_x64__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.DesktopAppInstaller_1.8.15011.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.ECApp_10.0.17134.1_neutral__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.GetHelp_10.1706.10441.0_neutral_split.scale-100_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.GetHelp_10.1706.10441.0_neutral_split.scale-125_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.GetHelp_10.1706.10441.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.GetHelp_10.1706.10441.0_x64__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.Getstarted_6.9.10602.0_neutral_split.scale-200_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.Getstarted_6.9.10602.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.Getstarted_6.9.10602.0_x64__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.LockApp_10.0.17134.1_neutral__cw5n1h2txyewy.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.Messaging_2018.222.2231.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.Messaging_3.38.22001.0_neutral_split.scale-150_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.Messaging_3.38.22001.0_x64__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.Microsoft3DViewer_2.1803.8022.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.Microsoft3DViewer_2.1803.8022.0_x64__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.MicrosoftEdgeDevToolsClient_1000.17134.1.0_neutral_neutral_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.MicrosoftEdge_42.17134.1.0_neutral__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.MicrosoftOfficeHub_17.8918.5926.0_x64__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.MicrosoftOfficeHub_2017.1219.520.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.MicrosoftSolitaireCollection_4.0.1301.0_neutral_split.scale-125_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.MicrosoftSolitaireCollection_4.0.1301.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.MicrosoftSolitaireCollection_4.0.1301.0_x86__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.MicrosoftStickyNotes_2.0.13.0_neutral_split.scale-125_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.MicrosoftStickyNotes_2.0.13.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.MicrosoftStickyNotes_2.0.13.0_x64__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.MSPaint_3.1803.5027.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.MSPaint_3.1803.5027.0_x64__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x64__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x86__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.NET.Native.Framework.1.7_1.7.25531.0_x64__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.NET.Native.Framework.1.7_1.7.25531.0_x86__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x64__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x86__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.NET.Native.Runtime.1.7_1.7.25531.0_x64__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.NET.Native.Runtime.1.7_1.7.25531.0_x86__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.Office.OneNote_17.8827.20991.0_x64__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.Office.OneNote_2015.8827.20991.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.OneConnect_4.1801.521.0_neutral_split.scale-125_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.OneConnect_4.1801.521.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.OneConnect_4.1801.521.0_x64__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.People_10.3.10452.0_neutral_split.scale-125_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.People_10.3.10452.0_x64__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.People_2018.215.110.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.PPIProjection_10.0.17134.1_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.Print3D_2.0.3621.0_neutral_split.scale-125_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.Print3D_2.0.3621.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.Print3D_2.0.3621.0_x64__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.Services.Store.Engagement_10.0.1610.0_x64__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.Services.Store.Engagement_10.0.1610.0_x86__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.SkypeApp_12.13.274.0_neutral_split.scale-125_kzf8qxf38zg5c.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.SkypeApp_12.13.274.0_neutral_~_kzf8qxf38zg5c.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.SkypeApp_12.13.274.0_x64__kzf8qxf38zg5c.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.StorePurchaseApp_11712.1801.10002.0_neutral_split.scale-100_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.StorePurchaseApp_11712.1801.10002.0_x64__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.StorePurchaseApp_11712.1801.10024.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.VCLibs.140.00_14.0.25426.0_x64__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.VCLibs.140.00_14.0.25426.0_x86__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.Wallet_2.1.18009.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.Wallet_2.1.18009.0_x64__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.WebMediaExtensions_1.0.3102.0_neutral_split.scale-125_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.WebMediaExtensions_1.0.3102.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.WebMediaExtensions_1.0.3102.0_x64__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.Win32WebViewHost_10.0.17134.1_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.Windows.Apprep.ChxApp_1000.17134.1.0_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.Windows.AssignedAccessLockApp_1000.17134.1.0_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.Windows.CapturePicker_10.0.17134.1_neutral__cw5n1h2txyewy.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.Windows.CloudExperienceHost_10.0.17134.1_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.Windows.ContentDeliveryManager_10.0.17134.1_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.Windows.Cortana_1.10.7.17134_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.Windows.HolographicFirstRun_10.0.17134.1_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.Windows.OOBENetworkCaptivePortal_10.0.17134.1_neutral__cw5n1h2txyewy.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.Windows.OOBENetworkConnectionFlow_10.0.17134.1_neutral__cw5n1h2txyewy.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.Windows.ParentalControls_1000.17134.1.0_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.Windows.PeopleExperienceHost_10.0.17134.1_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.Windows.Photos_2018.18011.15918.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.Windows.PinningConfirmationDialog_1000.17134.1.0_neutral__cw5n1h2txyewy.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.Windows.SecHealthUI_10.0.17134.1_neutral__cw5n1h2txyewy.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.Windows.SecureAssessmentBrowser_10.0.17134.1_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.Windows.ShellExperienceHost_10.0.17134.1_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.WindowsAlarms_10.1712.10611.0_neutral_split.scale-125_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.WindowsAlarms_10.1712.10611.0_x64__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.WindowsAlarms_2018.302.1846.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.WindowsCalculator_10.1712.10601.0_neutral_split.scale-125_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.WindowsCalculator_10.1712.10601.0_x64__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.WindowsCalculator_2018.302.144.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.WindowsCamera_2017.1117.80.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.WindowsCamera_2017.1117.80.0_x64__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\microsoft.windowscommunicationsapps_17.8827.22055.0_x64__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\microsoft.windowscommunicationsapps_2015.8827.22055.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.WindowsFeedbackHub_1.1712.612.0_x64__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.WindowsFeedbackHub_2018.302.2011.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.WindowsMaps_2018.209.2206.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.WindowsMaps_5.1711.10401.0_neutral_split.scale-125_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.WindowsMaps_5.1711.10401.0_x64__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.WindowsSoundRecorder_10.1712.10611.0_neutral_split.scale-125_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.WindowsSoundRecorder_10.1712.10611.0_x64__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.WindowsSoundRecorder_2018.302.1842.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.WindowsStore_11712.1001.23.0_x64__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.WindowsStore_11712.1001.2313.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.Xbox.TCUI_1.11.28003.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.Xbox.TCUI_1.11.28003.0_x64__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.XboxApp_38.38.14002.0_neutral_split.scale-125_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.XboxApp_38.38.14002.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.XboxApp_38.38.14002.0_x64__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.XboxGameCallableUI_1000.17134.1.0_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.XboxGameOverlay_1.26.6001.0_neutral_split.scale-100_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.XboxGameOverlay_1.26.6001.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.XboxGameOverlay_1.26.6001.0_x64__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.XboxGamingOverlay_1.15.1001.0_neutral_split.scale-100_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.XboxGamingOverlay_1.15.1001.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.XboxGamingOverlay_1.15.1001.0_x64__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.XboxIdentityProvider_12.36.15002.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.XboxIdentityProvider_12.36.15002.0_x64__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.XboxSpeechToTextOverlay_1.17.29001.0_neutral_split.scale-100_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.XboxSpeechToTextOverlay_1.17.29001.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.XboxSpeechToTextOverlay_1.17.29001.0_x64__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.ZuneMusic_10.17112.19011.0_neutral_split.scale-125_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.ZuneMusic_10.17112.19011.0_x64__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.ZuneMusic_2019.17112.19011.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.ZuneVideo_10.17112.19011.0_neutral_split.scale-125_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Microsoft.ZuneVideo_2019.17112.19011.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\StateRepository-Deployment.srd" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\StateRepository-Deployment.srd-shm" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\StateRepository-Deployment.srd-wal" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\StateRepository-Machine.srd" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\StateRepository-Machine.srd-shm" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\StateRepository-Machine.srd-wal" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Windows.CBSPreview_10.0.17134.1_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\windows.immersivecontrolpanel_10.0.2.1000_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\ProgramData\Microsoft\Windows\AppRepository\Windows.PrintDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy.xml" Directory added: "C:\ProgramData\Microsoft\Windows\AppRepository\Families" Directory added: "C:\ProgramData\Microsoft\Windows\AppRepository\Packages" File accessed/modified: "C:\ProgramData\Microsoft\Windows\DeviceMetadataCache\dmrc.idx" Directory added: "C:\ProgramData\Microsoft\Windows\LfSvc\Cache" Directory added: "C:\ProgramData\Microsoft\Windows\LfSvc\Geofence" File added: "C:\ProgramData\Microsoft\Windows\WER\ReportArchive\NonCritical_admin_wmi_wmx_au_7a0a77f8870675b5ccf2153de598e9d72bc52_00000000_0e33b1bd\Report.wer" File added: "C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppHang_NcbService_c3fd3c3f830283a6ba0c7e839e220c16a1c8146_00000000_cab_090a0532\memory.hdmp" File added: "C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppHang_NcbService_c3fd3c3f830283a6ba0c7e839e220c16a1c8146_00000000_cab_090a0532\Report.wer" File added: "C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppHang_NcbService_c3fd3c3f830283a6ba0c7e839e220c16a1c8146_00000000_cab_090a0532\WER526.tmp.WERDataCollectionStatus.txt" File added: "C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppHang_NcbService_c3fd3c3f830283a6ba0c7e839e220c16a1c8146_00000000_cab_090a0532\WERC9CF.tmp.WERInternalMetadata.xml" File added: "C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppHang_NcbService_c3fd3c3f830283a6ba0c7e839e220c16a1c8146_00000000_cab_090a0532\WERCA6D.tmp.xml" File added: "C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppHang_NcbService_c3fd3c3f830283a6ba0c7e839e220c16a1c8146_00000000_cab_090a0532\WERCB27.tmp.csv" File added: "C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppHang_NcbService_c3fd3c3f830283a6ba0c7e839e220c16a1c8146_00000000_cab_090a0532\WERCB57.tmp.txt" File added: "C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppHang_NcbService_c3fd3c3f830283a6ba0c7e839e220c16a1c8146_00000000_cab_090a0532\WERCB96.tmp.mdmp" File added: "C:\ProgramData\Microsoft\Windows\wfp\wfpdiag.etl" File added: "C:\ProgramData\Microsoft\Windows Defender\IMpService77BDAF73-B396-481F-9042-AD358843EC24.lock" Directory added: "C:\ProgramData\Microsoft\Windows Defender\Clean Store" Directory added: "C:\ProgramData\Microsoft\Windows Defender\Definition Updates" Directory added: "C:\ProgramData\Microsoft\Windows Defender\Features" Directory added: "C:\ProgramData\Microsoft\Windows Defender\LocalCopy" Directory added: "C:\ProgramData\Microsoft\Windows Defender\Network Inspection System" Directory added: "C:\ProgramData\Microsoft\Windows Defender\Platform" Directory added: "C:\ProgramData\Microsoft\Windows Defender\Quarantine" File added: "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-2C86D44A0ECFD263762924515707EB7CB478DC1B.bin" File added: "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-2C86D44A0ECFD263762924515707EB7CB478DC1B.bin.20" File added: "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-2C86D44A0ECFD263762924515707EB7CB478DC1B.bin.55" File added: "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-2C86D44A0ECFD263762924515707EB7CB478DC1B.bin.5B" File added: "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-2C86D44A0ECFD263762924515707EB7CB478DC1B.bin.67" File added: "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-2C86D44A0ECFD263762924515707EB7CB478DC1B.bin.6C" File added: "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-2C86D44A0ECFD263762924515707EB7CB478DC1B.bin.70" File added: "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-2C86D44A0ECFD263762924515707EB7CB478DC1B.bin.79" File added: "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-2C86D44A0ECFD263762924515707EB7CB478DC1B.bin.7C" File added: "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-2C86D44A0ECFD263762924515707EB7CB478DC1B.bin.7E" File added: "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-2C86D44A0ECFD263762924515707EB7CB478DC1B.bin.80" File added: "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-2C86D44A0ECFD263762924515707EB7CB478DC1B.bin.83" File added: "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-2C86D44A0ECFD263762924515707EB7CB478DC1B.bin.87" File added: "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-2C86D44A0ECFD263762924515707EB7CB478DC1B.bin.A0" File added: "C:\ProgramData\Microsoft\Windows Defender\Scans\mpcache-2C86D44A0ECFD263762924515707EB7CB478DC1B.bin.CE" File added: "C:\ProgramData\Microsoft\Windows Defender\Scans\MpDiag.bin" File added: "C:\ProgramData\Microsoft\Windows Defender\Scans\mpenginedb.db" File added: "C:\ProgramData\Microsoft\Windows Defender\Scans\mpenginedb.db-shm" File added: "C:\ProgramData\Microsoft\Windows Defender\Scans\mpenginedb.db-wal" Directory added: "C:\ProgramData\Microsoft\Windows Defender\Scans\History" Directory added: "C:\ProgramData\Microsoft\Windows Defender\Scans\MpPayloadData" File added: "C:\ProgramData\Microsoft\Windows Defender\Support\MPDetection-20180905-193228.log" File added: "C:\ProgramData\Microsoft\Windows Defender\Support\MPLog-20180905-193228.log" File added: "C:\ProgramData\Microsoft\Windows Defender\Support\MpWppTracing-20180905-193228-00000003-ffffffff.bin" File added: "C:\ProgramData\Microsoft\Windows Defender\Support\MpWppTracing-20180905-194032-00000003-ffffffff.bin" File added: "C:\ProgramData\Microsoft\Windows Defender\Support\MpWppTracing-20180905-195112-00000003-ffffffff.bin" File added: "C:\ProgramData\Microsoft\Windows Defender\Support\MpWppTracing-20180905-195939-00000003-ffffffff.bin" Directory added: "C:\ProgramData\Microsoft\Windows NT\MSFax\ActivityLog" Directory added: "C:\ProgramData\Microsoft\Windows NT\MSFax\Common Coverpages" Directory added: "C:\ProgramData\Microsoft\Windows NT\MSFax\Inbox" Directory added: "C:\ProgramData\Microsoft\Windows NT\MSFax\Queue" Directory added: "C:\ProgramData\Microsoft\Windows NT\MSFax\SentItems" Directory added: "C:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox" File accessed/modified: "C:\ProgramData\Microsoft\Windows Security Health\Logs\SHS-09052018-195937-7-5f-17134.1.amd64fre.rs4_release.180410-1804.etl" File deleted: "C:\ProgramData\Microsoft\Windows Security Health\Logs\SHS-09052018-202447-7-5f-17134.1.amd64fre.rs4_release.180410-1804.etl" File accessed/modified: "C:\ProgramData\Microsoft\Windows Security Health\Logs\WDSC-09052018-195937-7-20-17134.1.amd64fre.rs4_release.180410-1804.etl" File deleted: "C:\ProgramData\Microsoft\Windows Security Health\Logs\WDSC-09052018-202447-7-20-17134.1.amd64fre.rs4_release.180410-1804.etl" File accessed/modified: "C:\ProgramData\regid.1991-06.com.microsoft\regid.1991-06.com.microsoft_Windows-10-Pro-for-Workstations.swidtag" Directory added: "C:\ProgramData\USOPrivate\UpdateStore" Directory added: "C:\ProgramData\WindowsHolographicDevices\SpatialStore" Directory added: "C:\Users\All Users\Microsoft\Crypto\PCPKSP\WindowsAIK\0507b7df9c49bfab6c69777db0a70a2a381a1667" File added: "C:\Users\All Users\Microsoft\Diagnosis\EventStore.db" File added: "C:\Users\All Users\Microsoft\Diagnosis\EventStore.db-shm" File added: "C:\Users\All Users\Microsoft\Diagnosis\EventStore.db-wal" File added: "C:\Users\All Users\Microsoft\Diagnosis\osver.txt" File added: "C:\Users\All Users\Microsoft\Diagnosis\parse.dat" File added: "C:\Users\All Users\Microsoft\Diagnosis\VortexSchemaRequests.dat" Directory added: "C:\Users\All Users\Microsoft\Diagnosis\AsimovUploader" Directory added: "C:\Users\All Users\Microsoft\Diagnosis\CustomTraceProfiles" Directory added: "C:\Users\All Users\Microsoft\Diagnosis\DownloadedScenarios" Directory added: "C:\Users\All Users\Microsoft\Diagnosis\DownloadedSettings" Directory added: "C:\Users\All Users\Microsoft\Diagnosis\ETLLogs" Directory added: "C:\Users\All Users\Microsoft\Diagnosis\EventTranscript" Directory added: "C:\Users\All Users\Microsoft\Diagnosis\FeedbackHub" Directory added: "C:\Users\All Users\Microsoft\Diagnosis\LocalTraceStore" Directory added: "C:\Users\All Users\Microsoft\Diagnosis\OfflineSettings" Directory added: "C:\Users\All Users\Microsoft\Diagnosis\Scripts" Directory added: "C:\Users\All Users\Microsoft\Diagnosis\Sideload" Directory added: "C:\Users\All Users\Microsoft\Diagnosis\Siufloc" Directory added: "C:\Users\All Users\Microsoft\Diagnosis\SoftLanding" Directory added: "C:\Users\All Users\Microsoft\Diagnosis\SoftLandingStage" Directory added: "C:\Users\All Users\Microsoft\Diagnosis\TenantStorage" Directory added: "C:\Users\All Users\Microsoft\Diagnosis\WindowsAnalytics" File added: "C:\Users\All Users\Microsoft\Network\Downloader\edb.chk" File added: "C:\Users\All Users\Microsoft\Network\Downloader\edb.log" File added: "C:\Users\All Users\Microsoft\Network\Downloader\edbres00001.jrs" File added: "C:\Users\All Users\Microsoft\Network\Downloader\edbres00002.jrs" File added: "C:\Users\All Users\Microsoft\Network\Downloader\edbtmp.log" File added: "C:\Users\All Users\Microsoft\Network\Downloader\qmgr.db" File added: "C:\Users\All Users\Microsoft\Network\Downloader\qmgr.jfm" Directory added: "C:\Users\All Users\Microsoft\Provisioning\AssetCache\CellularUx" Directory added: "C:\Users\All Users\Microsoft\Search\Data\Applications" Directory added: "C:\Users\All Users\Microsoft\Search\Data\Temp" Directory added: "C:\Users\All Users\Microsoft\SmsRouter\MessageStore" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.17134.1_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_10.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_11.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_12.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_13.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_14.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_15.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_16.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_17.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_18.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_19.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_2.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_20.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_21.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_22.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_23.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_24.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_26.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_28.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_3.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_30.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_32.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_34.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_36.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_38.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_4.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_40.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_42.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_44.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_46.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_48.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_5.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_50.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_52.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_54.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_56.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_58.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_6.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_60.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_62.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_64.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_66.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_68.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_7.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_70.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_72.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_74.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_8.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\52fa25b0-bd43-44ec-a46b-15b5531cbe31_S-1-5-21-1621887801-967696625-3000357664-1001_9.rslc" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.17134.1_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.17134.1_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\F46D4000-FD22-4DB4-AC8E-4E1DDDE828FE_10.0.17134.1_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\InputApp_1000.17134.1.0_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.AAD.BrokerPlugin_1000.17134.1.0_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.AccountsControl_10.0.17134.1_neutral__cw5n1h2txyewy.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.Advertising.Xaml_10.1705.4.0_x64__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.Advertising.Xaml_10.1705.4.0_x86__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.AsyncTextService_10.0.17134.1_neutral__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.BingWeather_4.22.3254.0_neutral_split.scale-100_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.BingWeather_4.22.3254.0_neutral_split.scale-150_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.BingWeather_4.22.3254.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.BingWeather_4.22.3254.0_x64__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.BioEnrollment_10.0.17134.1_neutral__cw5n1h2txyewy.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.CredDialogHost_10.0.17134.1_neutral__cw5n1h2txyewy.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.DesktopAppInstaller_1.0.12271.0_neutral_split.scale-100_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.DesktopAppInstaller_1.0.12271.0_neutral_split.scale-125_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.DesktopAppInstaller_1.0.12271.0_x64__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.DesktopAppInstaller_1.8.15011.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.ECApp_10.0.17134.1_neutral__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.GetHelp_10.1706.10441.0_neutral_split.scale-100_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.GetHelp_10.1706.10441.0_neutral_split.scale-125_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.GetHelp_10.1706.10441.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.GetHelp_10.1706.10441.0_x64__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.Getstarted_6.9.10602.0_neutral_split.scale-200_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.Getstarted_6.9.10602.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.Getstarted_6.9.10602.0_x64__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.LockApp_10.0.17134.1_neutral__cw5n1h2txyewy.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.Messaging_2018.222.2231.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.Messaging_3.38.22001.0_neutral_split.scale-150_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.Messaging_3.38.22001.0_x64__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.Microsoft3DViewer_2.1803.8022.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.Microsoft3DViewer_2.1803.8022.0_x64__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.MicrosoftEdgeDevToolsClient_1000.17134.1.0_neutral_neutral_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.MicrosoftEdge_42.17134.1.0_neutral__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.MicrosoftOfficeHub_17.8918.5926.0_x64__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.MicrosoftOfficeHub_2017.1219.520.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.MicrosoftSolitaireCollection_4.0.1301.0_neutral_split.scale-125_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.MicrosoftSolitaireCollection_4.0.1301.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.MicrosoftSolitaireCollection_4.0.1301.0_x86__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.MicrosoftStickyNotes_2.0.13.0_neutral_split.scale-125_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.MicrosoftStickyNotes_2.0.13.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.MicrosoftStickyNotes_2.0.13.0_x64__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.MSPaint_3.1803.5027.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.MSPaint_3.1803.5027.0_x64__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x64__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x86__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.NET.Native.Framework.1.7_1.7.25531.0_x64__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.NET.Native.Framework.1.7_1.7.25531.0_x86__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x64__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x86__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.NET.Native.Runtime.1.7_1.7.25531.0_x64__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.NET.Native.Runtime.1.7_1.7.25531.0_x86__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.Office.OneNote_17.8827.20991.0_x64__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.Office.OneNote_2015.8827.20991.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.OneConnect_4.1801.521.0_neutral_split.scale-125_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.OneConnect_4.1801.521.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.OneConnect_4.1801.521.0_x64__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.People_10.3.10452.0_neutral_split.scale-125_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.People_10.3.10452.0_x64__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.People_2018.215.110.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.PPIProjection_10.0.17134.1_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.Print3D_2.0.3621.0_neutral_split.scale-125_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.Print3D_2.0.3621.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.Print3D_2.0.3621.0_x64__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.Services.Store.Engagement_10.0.1610.0_x64__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.Services.Store.Engagement_10.0.1610.0_x86__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.SkypeApp_12.13.274.0_neutral_split.scale-125_kzf8qxf38zg5c.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.SkypeApp_12.13.274.0_neutral_~_kzf8qxf38zg5c.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.SkypeApp_12.13.274.0_x64__kzf8qxf38zg5c.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.StorePurchaseApp_11712.1801.10002.0_neutral_split.scale-100_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.StorePurchaseApp_11712.1801.10002.0_x64__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.StorePurchaseApp_11712.1801.10024.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.VCLibs.140.00_14.0.25426.0_x64__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.VCLibs.140.00_14.0.25426.0_x86__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.Wallet_2.1.18009.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.Wallet_2.1.18009.0_x64__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.WebMediaExtensions_1.0.3102.0_neutral_split.scale-125_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.WebMediaExtensions_1.0.3102.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.WebMediaExtensions_1.0.3102.0_x64__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.Win32WebViewHost_10.0.17134.1_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.Windows.Apprep.ChxApp_1000.17134.1.0_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.Windows.AssignedAccessLockApp_1000.17134.1.0_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.Windows.CapturePicker_10.0.17134.1_neutral__cw5n1h2txyewy.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.Windows.CloudExperienceHost_10.0.17134.1_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.Windows.ContentDeliveryManager_10.0.17134.1_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.Windows.Cortana_1.10.7.17134_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.Windows.HolographicFirstRun_10.0.17134.1_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.Windows.OOBENetworkCaptivePortal_10.0.17134.1_neutral__cw5n1h2txyewy.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.Windows.OOBENetworkConnectionFlow_10.0.17134.1_neutral__cw5n1h2txyewy.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.Windows.ParentalControls_1000.17134.1.0_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.Windows.PeopleExperienceHost_10.0.17134.1_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.Windows.Photos_2018.18011.15918.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.Windows.Photos_2018.18011.15918.0_x64__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.Windows.PinningConfirmationDialog_1000.17134.1.0_neutral__cw5n1h2txyewy.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.Windows.SecHealthUI_10.0.17134.1_neutral__cw5n1h2txyewy.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.Windows.SecureAssessmentBrowser_10.0.17134.1_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.Windows.ShellExperienceHost_10.0.17134.1_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.WindowsAlarms_10.1712.10611.0_neutral_split.scale-125_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.WindowsAlarms_10.1712.10611.0_x64__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.WindowsAlarms_2018.302.1846.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.WindowsCalculator_10.1712.10601.0_neutral_split.scale-125_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.WindowsCalculator_10.1712.10601.0_x64__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.WindowsCalculator_2018.302.144.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.WindowsCamera_2017.1117.80.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.WindowsCamera_2017.1117.80.0_x64__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\microsoft.windowscommunicationsapps_17.8827.22055.0_x64__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\microsoft.windowscommunicationsapps_2015.8827.22055.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.WindowsFeedbackHub_1.1712.612.0_x64__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.WindowsFeedbackHub_2018.302.2011.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.WindowsMaps_2018.209.2206.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.WindowsMaps_5.1711.10401.0_neutral_split.scale-125_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.WindowsMaps_5.1711.10401.0_x64__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.WindowsSoundRecorder_10.1712.10611.0_neutral_split.scale-125_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.WindowsSoundRecorder_10.1712.10611.0_x64__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.WindowsSoundRecorder_2018.302.1842.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.WindowsStore_11712.1001.23.0_x64__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.WindowsStore_11712.1001.2313.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.Xbox.TCUI_1.11.28003.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.Xbox.TCUI_1.11.28003.0_x64__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.XboxApp_38.38.14002.0_neutral_split.scale-125_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.XboxApp_38.38.14002.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.XboxApp_38.38.14002.0_x64__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.XboxGameCallableUI_1000.17134.1.0_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.XboxGameOverlay_1.26.6001.0_neutral_split.scale-100_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.XboxGameOverlay_1.26.6001.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.XboxGameOverlay_1.26.6001.0_x64__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.XboxGamingOverlay_1.15.1001.0_neutral_split.scale-100_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.XboxGamingOverlay_1.15.1001.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.XboxGamingOverlay_1.15.1001.0_x64__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.XboxIdentityProvider_12.36.15002.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.XboxIdentityProvider_12.36.15002.0_x64__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.XboxSpeechToTextOverlay_1.17.29001.0_neutral_split.scale-100_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.XboxSpeechToTextOverlay_1.17.29001.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.XboxSpeechToTextOverlay_1.17.29001.0_x64__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.ZuneMusic_10.17112.19011.0_neutral_split.scale-125_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.ZuneMusic_10.17112.19011.0_x64__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.ZuneMusic_2019.17112.19011.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.ZuneVideo_10.17112.19011.0_neutral_split.scale-125_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.ZuneVideo_10.17112.19011.0_x64__8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Microsoft.ZuneVideo_2019.17112.19011.0_neutral_~_8wekyb3d8bbwe.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\StateRepository-Deployment.srd" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\StateRepository-Deployment.srd-shm" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\StateRepository-Deployment.srd-wal" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\StateRepository-Machine.srd" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\StateRepository-Machine.srd-shm" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\StateRepository-Machine.srd-wal" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Windows.CBSPreview_10.0.17134.1_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\windows.immersivecontrolpanel_10.0.2.1000_neutral_neutral_cw5n1h2txyewy.xml" File added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Windows.PrintDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy.xml" Directory added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Families" Directory added: "C:\Users\All Users\Microsoft\Windows\AppRepository\Packages" File accessed/modified: "C:\Users\All Users\Microsoft\Windows\DeviceMetadataCache\dmrc.idx" Directory added: "C:\Users\All Users\Microsoft\Windows\LfSvc\Cache" Directory added: "C:\Users\All Users\Microsoft\Windows\LfSvc\Geofence" File added: "C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\NonCritical_admin_wmi_wmx_au_7a0a77f8870675b5ccf2153de598e9d72bc52_00000000_0e33b1bd\Report.wer" File added: "C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\AppHang_NcbService_c3fd3c3f830283a6ba0c7e839e220c16a1c8146_00000000_cab_090a0532\memory.hdmp" File added: "C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\AppHang_NcbService_c3fd3c3f830283a6ba0c7e839e220c16a1c8146_00000000_cab_090a0532\Report.wer" File added: "C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\AppHang_NcbService_c3fd3c3f830283a6ba0c7e839e220c16a1c8146_00000000_cab_090a0532\WER526.tmp.WERDataCollectionStatus.txt" File added: "C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\AppHang_NcbService_c3fd3c3f830283a6ba0c7e839e220c16a1c8146_00000000_cab_090a0532\WERC9CF.tmp.WERInternalMetadata.xml" File added: "C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\AppHang_NcbService_c3fd3c3f830283a6ba0c7e839e220c16a1c8146_00000000_cab_090a0532\WERCA6D.tmp.xml" File added: "C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\AppHang_NcbService_c3fd3c3f830283a6ba0c7e839e220c16a1c8146_00000000_cab_090a0532\WERCB27.tmp.csv" File added: "C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\AppHang_NcbService_c3fd3c3f830283a6ba0c7e839e220c16a1c8146_00000000_cab_090a0532\WERCB57.tmp.txt" File added: "C:\Users\All Users\Microsoft\Windows\WER\ReportQueue\AppHang_NcbService_c3fd3c3f830283a6ba0c7e839e220c16a1c8146_00000000_cab_090a0532\WERCB96.tmp.mdmp" File added: "C:\Users\All Users\Microsoft\Windows\wfp\wfpdiag.etl" File added: "C:\Users\All Users\Microsoft\Windows Defender\IMpService77BDAF73-B396-481F-9042-AD358843EC24.lock" Directory added: "C:\Users\All Users\Microsoft\Windows Defender\Clean Store" Directory added: "C:\Users\All Users\Microsoft\Windows Defender\Definition Updates" Directory added: "C:\Users\All Users\Microsoft\Windows Defender\Features" Directory added: "C:\Users\All Users\Microsoft\Windows Defender\LocalCopy" Directory added: "C:\Users\All Users\Microsoft\Windows Defender\Network Inspection System" Directory added: "C:\Users\All Users\Microsoft\Windows Defender\Platform" Directory added: "C:\Users\All Users\Microsoft\Windows Defender\Quarantine" File added: "C:\Users\All Users\Microsoft\Windows Defender\Scans\mpcache-2C86D44A0ECFD263762924515707EB7CB478DC1B.bin" File added: "C:\Users\All Users\Microsoft\Windows Defender\Scans\mpcache-2C86D44A0ECFD263762924515707EB7CB478DC1B.bin.20" File added: "C:\Users\All Users\Microsoft\Windows Defender\Scans\mpcache-2C86D44A0ECFD263762924515707EB7CB478DC1B.bin.55" File added: "C:\Users\All Users\Microsoft\Windows Defender\Scans\mpcache-2C86D44A0ECFD263762924515707EB7CB478DC1B.bin.5B" File added: "C:\Users\All Users\Microsoft\Windows Defender\Scans\mpcache-2C86D44A0ECFD263762924515707EB7CB478DC1B.bin.67" File added: "C:\Users\All Users\Microsoft\Windows Defender\Scans\mpcache-2C86D44A0ECFD263762924515707EB7CB478DC1B.bin.6C" File added: "C:\Users\All Users\Microsoft\Windows Defender\Scans\mpcache-2C86D44A0ECFD263762924515707EB7CB478DC1B.bin.70" File added: "C:\Users\All Users\Microsoft\Windows Defender\Scans\mpcache-2C86D44A0ECFD263762924515707EB7CB478DC1B.bin.79" File added: "C:\Users\All Users\Microsoft\Windows Defender\Scans\mpcache-2C86D44A0ECFD263762924515707EB7CB478DC1B.bin.7C" File added: "C:\Users\All Users\Microsoft\Windows Defender\Scans\mpcache-2C86D44A0ECFD263762924515707EB7CB478DC1B.bin.7E" File added: "C:\Users\All Users\Microsoft\Windows Defender\Scans\mpcache-2C86D44A0ECFD263762924515707EB7CB478DC1B.bin.80" File added: "C:\Users\All Users\Microsoft\Windows Defender\Scans\mpcache-2C86D44A0ECFD263762924515707EB7CB478DC1B.bin.83" File added: "C:\Users\All Users\Microsoft\Windows Defender\Scans\mpcache-2C86D44A0ECFD263762924515707EB7CB478DC1B.bin.87" File added: "C:\Users\All Users\Microsoft\Windows Defender\Scans\mpcache-2C86D44A0ECFD263762924515707EB7CB478DC1B.bin.A0" File added: "C:\Users\All Users\Microsoft\Windows Defender\Scans\mpcache-2C86D44A0ECFD263762924515707EB7CB478DC1B.bin.CE" File added: "C:\Users\All Users\Microsoft\Windows Defender\Scans\MpDiag.bin" File added: "C:\Users\All Users\Microsoft\Windows Defender\Scans\mpenginedb.db" File added: "C:\Users\All Users\Microsoft\Windows Defender\Scans\mpenginedb.db-shm" File added: "C:\Users\All Users\Microsoft\Windows Defender\Scans\mpenginedb.db-wal" Directory added: "C:\Users\All Users\Microsoft\Windows Defender\Scans\History" Directory added: "C:\Users\All Users\Microsoft\Windows Defender\Scans\MpPayloadData" File added: "C:\Users\All Users\Microsoft\Windows Defender\Support\MPDetection-20180905-193228.log" File added: "C:\Users\All Users\Microsoft\Windows Defender\Support\MPLog-20180905-193228.log" File added: "C:\Users\All Users\Microsoft\Windows Defender\Support\MpWppTracing-20180905-193228-00000003-ffffffff.bin" File added: "C:\Users\All Users\Microsoft\Windows Defender\Support\MpWppTracing-20180905-194032-00000003-ffffffff.bin" File added: "C:\Users\All Users\Microsoft\Windows Defender\Support\MpWppTracing-20180905-195112-00000003-ffffffff.bin" File added: "C:\Users\All Users\Microsoft\Windows Defender\Support\MpWppTracing-20180905-195939-00000003-ffffffff.bin" Directory added: "C:\Users\All Users\Microsoft\Windows NT\MSFax\ActivityLog" Directory added: "C:\Users\All Users\Microsoft\Windows NT\MSFax\Common Coverpages" Directory added: "C:\Users\All Users\Microsoft\Windows NT\MSFax\Inbox" Directory added: "C:\Users\All Users\Microsoft\Windows NT\MSFax\Queue" Directory added: "C:\Users\All Users\Microsoft\Windows NT\MSFax\SentItems" Directory added: "C:\Users\All Users\Microsoft\Windows NT\MSFax\VirtualInbox" File accessed/modified: "C:\Users\All Users\Microsoft\Windows Security Health\Logs\SHS-09052018-195937-7-5f-17134.1.amd64fre.rs4_release.180410-1804.etl" File deleted: "C:\Users\All Users\Microsoft\Windows Security Health\Logs\SHS-09052018-202447-7-5f-17134.1.amd64fre.rs4_release.180410-1804.etl" File accessed/modified: "C:\Users\All Users\Microsoft\Windows Security Health\Logs\WDSC-09052018-195937-7-20-17134.1.amd64fre.rs4_release.180410-1804.etl" File deleted: "C:\Users\All Users\Microsoft\Windows Security Health\Logs\WDSC-09052018-202447-7-20-17134.1.amd64fre.rs4_release.180410-1804.etl" File accessed/modified: "C:\Users\All Users\regid.1991-06.com.microsoft\regid.1991-06.com.microsoft_Windows-10-Pro-for-Workstations.swidtag" Directory added: "C:\Users\All Users\USOPrivate\UpdateStore" Directory added: "C:\Users\All Users\WindowsHolographicDevices\SpatialStore" File accessed/modified: "C:\Users\test\NTUSER.DAT" File accessed/modified: "C:\Users\test\ntuser.dat.LOG1" File accessed/modified: "C:\Users\test\AppData\Local\IconCache.db" Directory deleted: "C:\Users\test\AppData\Local\Comms" File accessed/modified: "C:\Users\test\AppData\Local\ConnectedDevicesPlatform\CDPGlobalSettings.cdp" File accessed/modified: "C:\Users\test\AppData\Local\ConnectedDevicesPlatform\L.test\ActivitiesCache.db" File accessed/modified: "C:\Users\test\AppData\Local\ConnectedDevicesPlatform\L.test\ActivitiesCache.db-shm" File accessed/modified: "C:\Users\test\AppData\Local\ConnectedDevicesPlatform\L.test\ActivitiesCache.db-wal" Directory deleted: "C:\Users\test\AppData\Local\D3DSCache" Directory deleted: "C:\Users\test\AppData\Local\Microsoft\CLR_v4.0" File added: "C:\Users\test\AppData\Local\Microsoft\OneDrive\logs\Personal\SyncEngine-2018-9-6.30.6172.1.aodl" File deleted: "C:\Users\test\AppData\Local\Microsoft\OneDrive\logs\Personal\SyncEngine-2018-9-6.30.6172.1.odl" File deleted: "C:\Users\test\AppData\Local\Microsoft\OneDrive\logs\Personal\SyncEngine-2018-9-6.325.6916.1.aodl" File deleted: "C:\Users\test\AppData\Local\Microsoft\OneDrive\logs\Personal\TraceArchive.6816.0313-2.etl" File accessed/modified: "C:\Users\test\AppData\Local\Microsoft\OneDrive\logs\Personal\TraceCurrent.6816.0313.etl" File accessed/modified: "C:\Users\test\AppData\Local\Microsoft\OneDrive\settings\Personal\global.ini" File accessed/modified: "C:\Users\test\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2018-09-05_200046_181c-182c.log" File deleted: "C:\Users\test\AppData\Local\Microsoft\OneDrive\setup\logs\Update_2018-09-05_202539_1b04-1af8.log" File accessed/modified: "C:\Users\test\AppData\Local\Microsoft\PenWorkspace\DiscoverCacheData.dat" File accessed/modified: "C:\Users\test\AppData\Local\Microsoft\Windows\UsrClass.dat" File accessed/modified: "C:\Users\test\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG1" File accessed/modified: "C:\Users\test\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG2" Directory deleted: "C:\Users\test\AppData\Local\Microsoft\Windows\0" File deleted: "C:\Users\test\AppData\Local\Microsoft\Windows\ActionCenterCache\windows-systemtoast-securityandmaintenance_9_0.png" File added: "C:\Users\test\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000009.db" File deleted: "C:\Users\test\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x000000000000000a.db" File deleted: "C:\Users\test\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x000000000000000b.db" File added: "C:\Users\test\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000001.db" File deleted: "C:\Users\test\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000003.db" File accessed/modified: "C:\Users\test\AppData\Local\Microsoft\Windows\Explorer\iconcache_1280.db" File accessed/modified: "C:\Users\test\AppData\Local\Microsoft\Windows\Explorer\iconcache_16.db" File accessed/modified: "C:\Users\test\AppData\Local\Microsoft\Windows\Explorer\iconcache_1920.db" File accessed/modified: "C:\Users\test\AppData\Local\Microsoft\Windows\Explorer\iconcache_256.db" File accessed/modified: "C:\Users\test\AppData\Local\Microsoft\Windows\Explorer\iconcache_2560.db" File accessed/modified: "C:\Users\test\AppData\Local\Microsoft\Windows\Explorer\iconcache_32.db" File accessed/modified: "C:\Users\test\AppData\Local\Microsoft\Windows\Explorer\iconcache_48.db" File accessed/modified: "C:\Users\test\AppData\Local\Microsoft\Windows\Explorer\iconcache_768.db" File accessed/modified: "C:\Users\test\AppData\Local\Microsoft\Windows\Explorer\iconcache_96.db" File accessed/modified: "C:\Users\test\AppData\Local\Microsoft\Windows\Explorer\iconcache_custom_stream.db" File accessed/modified: "C:\Users\test\AppData\Local\Microsoft\Windows\Explorer\iconcache_exif.db" File accessed/modified: "C:\Users\test\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db" File accessed/modified: "C:\Users\test\AppData\Local\Microsoft\Windows\Explorer\iconcache_sr.db" File accessed/modified: "C:\Users\test\AppData\Local\Microsoft\Windows\Explorer\iconcache_wide.db" File accessed/modified: "C:\Users\test\AppData\Local\Microsoft\Windows\Explorer\iconcache_wide_alternate.db" File accessed/modified: "C:\Users\test\AppData\Local\Microsoft\Windows\Explorer\thumbcache_96.db" Directory added: "C:\Users\test\AppData\Local\Microsoft\Windows\Explorer\IconCacheToDelete" File deleted: "C:\Users\test\AppData\Local\Microsoft\Windows\History\" Directory deleted: "C:\Users\test\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012018090520180906" File accessed/modified: "C:\Users\test\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db" File accessed/modified: "C:\Users\test\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db-shm" File accessed/modified: "C:\Users\test\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db-wal" File accessed/modified: "C:\Users\test\AppData\Local\Microsoft\Windows\UPPS\UPPS.bin" File accessed/modified: "C:\Users\test\AppData\Local\Microsoft\Windows\WebCache\V01.chk" File accessed/modified: "C:\Users\test\AppData\Local\Microsoft\Windows\WebCache\V01.log" File accessed/modified: "C:\Users\test\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat" File accessed/modified: "C:\Users\test\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.jfm" File accessed/modified: "C:\Users\test\AppData\Local\Packages\ActiveSync\LocalState\DiagOutputDir\SyncVerbose.etl" File accessed/modified: "C:\Users\test\AppData\Local\Packages\ActiveSync\LocalState\DiagOutputDir\UnistackCircular.etl" File accessed/modified: "C:\Users\test\AppData\Local\Packages\ActiveSync\LocalState\DiagOutputDir\UnistackCritical.etl" Directory deleted: "C:\Users\test\AppData\Local\Packages\Microsoft.BingWeather_8wekyb3d8bbwe" Directory deleted: "C:\Users\test\AppData\Local\Packages\Microsoft.DesktopAppInstaller_8wekyb3d8bbwe" Directory deleted: "C:\Users\test\AppData\Local\Packages\Microsoft.GetHelp_8wekyb3d8bbwe" Directory deleted: "C:\Users\test\AppData\Local\Packages\Microsoft.Getstarted_8wekyb3d8bbwe" Directory deleted: "C:\Users\test\AppData\Local\Packages\Microsoft.Messaging_8wekyb3d8bbwe" File accessed/modified: "C:\Users\test\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\DataStore\Data\nouser1\120712-0049\DBStore\spartan.edb" File accessed/modified: "C:\Users\test\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\DataStore\Data\nouser1\120712-0049\DBStore\spartan.jfm" File deleted: "C:\Users\test\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\Recovery\Active\RecoveryStore.{5066387A-E6CC-4C2E-9BF7-DD8DE2971A06}.dat" File added: "C:\Users\test\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\Recovery\Active\RecoveryStore.{D96DDA86-9159-478C-9B15-E113B5BF3B7F}.dat" File added: "C:\Users\test\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\Temp\~DF95C06BF09F973083.TMP" File deleted: "C:\Users\test\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\Temp\~DFD9202E33734E2DFD.TMP" File accessed/modified: "C:\Users\test\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Settings\settings.dat" File accessed/modified: "C:\Users\test\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Settings\settings.dat.LOG2" File accessed/modified: "C:\Users\test\AppData\Local\Packages\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy\Settings\settings.dat" File accessed/modified: "C:\Users\test\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AC\Microsoft\Internet Explorer\DOMStore\29P7YVDR\www.bing[1].xml" File accessed/modified: "C:\Users\test\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AppData\Indexed DB\edb.chk" File accessed/modified: "C:\Users\test\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AppData\Indexed DB\edb.log" File accessed/modified: "C:\Users\test\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AppData\Indexed DB\IndexedDB.edb" File accessed/modified: "C:\Users\test\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AppData\Indexed DB\IndexedDB.jfm" Directory added: "C:\Users\test\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{02bb3f8f-e6c4-4ef3-a52b-96b0d66c565a}" Directory deleted: "C:\Users\test\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{02db6707-f1a3-49f4-928e-1c2677efb36b}" Directory added: "C:\Users\test\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{2b17c9a5-f2f7-4f60-942b-64f92e138e0d}" Directory added: "C:\Users\test\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{409b47bb-dd77-4fc9-a91b-2e2d73331950}" Directory added: "C:\Users\test\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{5bf3f417-3d19-42ca-9c5d-612fcd1b24af}" Directory added: "C:\Users\test\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{8125edf8-02fd-4d86-b499-3b1a344212c1}" Directory added: "C:\Users\test\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{a51d6cfe-814d-4f4b-90e0-0b7cce4efb54}" Directory added: "C:\Users\test\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{b4e4c6b9-d700-4438-8bb0-3ffce7427a60}" Directory added: "C:\Users\test\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{b96855c1-db32-43c6-8eac-4b256df97d31}" Directory deleted: "C:\Users\test\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{c8a01362-b2e4-4f5c-91cf-1977954ddf93}" File deleted: "C:\Users\test\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache131806766329726641.txt" File deleted: "C:\Users\test\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache131806766717135954.txt" File deleted: "C:\Users\test\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache131806767017088030.txt" File deleted: "C:\Users\test\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache131806769194900400.txt" File deleted: "C:\Users\test\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache131806779274761551.txt" File accessed/modified: "C:\Users\test\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\Settings\settings.dat" File accessed/modified: "C:\Users\test\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\TempState\CortanaUnifiedTileModelCache.dat" File accessed/modified: "C:\Users\test\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\TempState\Traces\CortanaTrace1.etl" Directory deleted: "C:\Users\test\AppData\Local\Packages\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\AC\Microsoft" File accessed/modified: "C:\Users\test\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\Settings\settings.dat" File accessed/modified: "C:\Users\test\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\TempState\StartUnifiedTileModelCache.dat" File accessed/modified: "C:\Users\test\AppData\Local\Packages\Microsoft.WindowsAlarms_8wekyb3d8bbwe\Settings\settings.dat" File deleted: "C:\Users\test\AppData\Local\Packages\Microsoft.WindowsAlarms_8wekyb3d8bbwe\Settings\settings.dat.LOG1" File deleted: "C:\Users\test\AppData\Local\Packages\Microsoft.WindowsAlarms_8wekyb3d8bbwe\Settings\settings.dat.LOG2" Directory deleted: "C:\Users\test\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\AC\BackgroundTransferApi" File deleted: "C:\Users\test\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\AC\INetCache\" Directory deleted: "C:\Users\test\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\AC\INetCookies\ESE" Directory deleted: "C:\Users\test\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\AC\INetHistory\BackgroundTransferApi" Directory deleted: "C:\Users\test\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\AC\INetHistory\BackgroundTransferApiGroup" File deleted: "C:\Users\test\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\" File deleted: "C:\Users\test\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\HxStore.hxd" Directory deleted: "C:\Users\test\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\Files" File accessed/modified: "C:\Users\test\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat" File accessed/modified: "C:\Users\test\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat.LOG1" File accessed/modified: "C:\Users\test\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\Settings\settings.dat.LOG2" File accessed/modified: "C:\Users\test\AppData\Local\Packages\Microsoft.XboxApp_8wekyb3d8bbwe\Settings\settings.dat" File accessed/modified: "C:\Users\test\AppData\Local\Packages\Microsoft.XboxApp_8wekyb3d8bbwe\Settings\settings.dat.LOG1" Directory deleted: "C:\Users\test\AppData\Local\Temp\ir_ext_temp_0" Directory deleted: "C:\Users\test\AppData\Local\VirtualStore\Program Files (x86)" File deleted: "C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\SpyMe Tools.lnk" File deleted: "C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\withdefender.dsf.rdf.lnk" File deleted: "C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\withoutdefender.dsf.lnk" File deleted: "C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\1410124f041e9a2e.automaticDestinations-ms" File accessed/modified: "C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\5f7b5f1e01b83767.automaticDestinations-ms" File accessed/modified: "C:\Users\test\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\f01b4d95cf55d32a.automaticDestinations-ms" File deleted: "C:\Users\test\Desktop\SpyMe Tools - Shortcut.lnk" Directory deleted: "C:\Users\test\Desktop\Regshot2" File accessed/modified: "C:\Windows\bootstat.dat" File accessed/modified: "C:\Windows\WindowsUpdate.log" File added: "C:\Windows\appcompat\Programs\Amcache.hve" File added: "C:\Windows\appcompat\Programs\Amcache.hve.LOG1" File added: "C:\Windows\appcompat\Programs\Amcache.hve.LOG2" Directory added: "C:\Windows\appcompat\Programs\Install" File added: "C:\Windows\AppReadiness\S-1-5-21-1621887801-967696625-3000357664-1001" File accessed/modified: "C:\Windows\debug\PASSWD.LOG" File added: "C:\Windows\ELAMBKUP\WdBoot.sys" File accessed/modified: "C:\Windows\INF\WmiApRpl\WmiApRpl.h" File accessed/modified: "C:\Windows\INF\WmiApRpl\WmiApRpl.ini" File accessed/modified: "C:\Windows\INF\WmiApRpl\0009\WmiApRpl.ini" Directory added: "C:\Windows\InfusedApps\Applications" Directory added: "C:\Windows\InfusedApps\Frameworks" Directory added: "C:\Windows\InfusedApps\Packages" File accessed/modified: "C:\Windows\Logs\CBS\CBS.log" Directory deleted: "C:\Windows\Logs\DISM" File deleted: "C:\Windows\Logs\MeasuredBoot\0000000005-0000000000.log" File accessed/modified: "C:\Windows\Logs\NetSetup\service.0.etl" File accessed/modified: "C:\Windows\Logs\WindowsUpdate\WindowsUpdate.20180905.200024.464.1.etl" File deleted: "C:\Windows\Logs\WindowsUpdate\WindowsUpdate.20180905.202530.117.1.etl" File accessed/modified: "C:\Windows\Panther\UnattendGC\diagerr.xml" File accessed/modified: "C:\Windows\Panther\UnattendGC\diagwrn.xml" File accessed/modified: "C:\Windows\Panther\UnattendGC\setupact.log" File added: "C:\Windows\PLA\Reports\Report.System.Common.xml" File added: "C:\Windows\PLA\Reports\Report.System.Configuration.xml" File added: "C:\Windows\PLA\Reports\Report.System.CPU.xml" File added: "C:\Windows\PLA\Reports\Report.System.Diagnostics.xml" File added: "C:\Windows\PLA\Reports\Report.System.Disk.xml" File added: "C:\Windows\PLA\Reports\Report.System.Memory.xml" File added: "C:\Windows\PLA\Reports\Report.System.NetDiagFramework.xml" File added: "C:\Windows\PLA\Reports\Report.System.NetTrace.xml" File added: "C:\Windows\PLA\Reports\Report.System.Network.xml" File added: "C:\Windows\PLA\Reports\Report.System.Performance.xml" File added: "C:\Windows\PLA\Reports\Report.System.Summary.xml" File added: "C:\Windows\PLA\Reports\Report.System.Wired.xml" File added: "C:\Windows\PLA\Reports\Report.System.Wireless.xml" Directory added: "C:\Windows\PLA\Reports\en-US" File added: "C:\Windows\PLA\Rules\Rules.System.Common.xml" File added: "C:\Windows\PLA\Rules\Rules.System.Configuration.xml" File added: "C:\Windows\PLA\Rules\Rules.System.CPU.xml" File added: "C:\Windows\PLA\Rules\Rules.System.Diagnostics.xml" File added: "C:\Windows\PLA\Rules\Rules.System.Disk.xml" File added: "C:\Windows\PLA\Rules\Rules.System.Finale.xml" File added: "C:\Windows\PLA\Rules\Rules.System.Memory.xml" File added: "C:\Windows\PLA\Rules\Rules.System.NetDiagFramework.xml" File added: "C:\Windows\PLA\Rules\Rules.System.NetTrace.xml" File added: "C:\Windows\PLA\Rules\Rules.System.Network.xml" File added: "C:\Windows\PLA\Rules\Rules.System.Performance.xml" File added: "C:\Windows\PLA\Rules\Rules.System.Summary.xml" File added: "C:\Windows\PLA\Rules\Rules.System.Wired.xml" File added: "C:\Windows\PLA\Rules\Rules.System.Wireless.xml" Directory added: "C:\Windows\PLA\Rules\en-US" File added: "C:\Windows\PLA\Templates\WDAC_Diagnostics.xml" File added: "C:\Windows\PolicyDefinitions\AppHVSI.admx" File added: "C:\Windows\PolicyDefinitions\WindowsDefender.admx" File added: "C:\Windows\PolicyDefinitions\en-US\AppHVSI.adml" File added: "C:\Windows\PolicyDefinitions\en-US\WindowsDefender.adml" File added: "C:\Windows\Prefetch\AgAppLaunch.db" File added: "C:\Windows\Prefetch\AgCx_SC4.db" File added: "C:\Windows\Prefetch\AgGlFaultHistory.db" File added: "C:\Windows\Prefetch\AgGlFgAppHistory.db" File added: "C:\Windows\Prefetch\AgGlGlobalHistory.db" File added: "C:\Windows\Prefetch\AgRobust.db" File added: "C:\Windows\Prefetch\APPLICATIONFRAMEHOST.EXE-8CE9A1EE.pf" File added: "C:\Windows\Prefetch\BACKGROUNDTASKHOST.EXE-3999A4A9.pf" File added: "C:\Windows\Prefetch\BACKGROUNDTASKHOST.EXE-A00E3680.pf" File added: "C:\Windows\Prefetch\BROWSER_BROKER.EXE-EEC8D935.pf" File added: "C:\Windows\Prefetch\BYTECODEGENERATOR.EXE-62D6B3D7.pf" File added: "C:\Windows\Prefetch\BYTECODEGENERATOR.EXE-FB938A53.pf" File added: "C:\Windows\Prefetch\CHXSMARTSCREEN.EXE-9B90F534.pf" File added: "C:\Windows\Prefetch\CLIPUP.EXE-4C5C7B66.pf" File added: "C:\Windows\Prefetch\CLOUDEXPERIENCEHOSTBROKER.EXE-AB26EBC7.pf" File added: "C:\Windows\Prefetch\COMPATTELRUNNER.EXE-B7A68ECC.pf" File added: "C:\Windows\Prefetch\CONHOST.EXE-0C6456FB.pf" File added: "C:\Windows\Prefetch\CONSENT.EXE-40419367.pf" File added: "C:\Windows\Prefetch\CSRSS.EXE-F3C368CB.pf" File added: "C:\Windows\Prefetch\CTFMON.EXE-795F8130.pf" File added: "C:\Windows\Prefetch\DLLHOST.EXE-15CDDA9C.pf" File added: "C:\Windows\Prefetch\DLLHOST.EXE-4B6CB38A.pf" File added: "C:\Windows\Prefetch\DLLHOST.EXE-4F1B3E7E.pf" File added: "C:\Windows\Prefetch\DLLHOST.EXE-6389524F.pf" File added: "C:\Windows\Prefetch\DLLHOST.EXE-6A07DE60.pf" File added: "C:\Windows\Prefetch\DLLHOST.EXE-960426D8.pf" File added: "C:\Windows\Prefetch\DLLHOST.EXE-ACFEFA21.pf" File added: "C:\Windows\Prefetch\DLLHOST.EXE-C60C3853.pf" File added: "C:\Windows\Prefetch\DLLHOST.EXE-E9BDD97B.pf" File added: "C:\Windows\Prefetch\DLLHOST.EXE-FC7C086C.pf" File added: "C:\Windows\Prefetch\DRVINST.EXE-39D9EAC7.pf" File added: "C:\Windows\Prefetch\DSMUSERTASK.EXE-853A6893.pf" File added: "C:\Windows\Prefetch\DWM.EXE-314E93C5.pf" File added: "C:\Windows\Prefetch\EXPLORER.EXE-D5E97654.pf" File added: "C:\Windows\Prefetch\FILESYNCCONFIG.EXE-5E099156.pf" File added: "C:\Windows\Prefetch\FIRSTLOGONANIM.EXE-FA0BF656.pf" File added: "C:\Windows\Prefetch\FONTDRVHOST.EXE-8152304A.pf" File added: "C:\Windows\Prefetch\FSQUIRT.EXE-A8FF1DEB.pf" File added: "C:\Windows\Prefetch\IE4UINIT.EXE-693AF9DC.pf" File added: "C:\Windows\Prefetch\INSTALLWATCHPRO25.EXE-2FC31A20.pf" File added: "C:\Windows\Prefetch\IS-NQAEB.TMP-B78CB28A.pf" File added: "C:\Windows\Prefetch\LOGONUI.EXE-F639BD7E.pf" File added: "C:\Windows\Prefetch\MICROSOFTEDGE.EXE-1D9B3083.pf" File added: "C:\Windows\Prefetch\MICROSOFTEDGECP.EXE-F833ADFD.pf" File added: "C:\Windows\Prefetch\MOBSYNC.EXE-B307E1CC.pf" File added: "C:\Windows\Prefetch\MSASCUIL.EXE-ECA0FC28.pf" File added: "C:\Windows\Prefetch\NISSRV.EXE-09946424.pf" File added: "C:\Windows\Prefetch\ONEDRIVE.EXE-F7C54492.pf" File added: "C:\Windows\Prefetch\ONEDRIVESETUP.EXE-808CE70A.pf" File added: "C:\Windows\Prefetch\OOBENETWORKCONNECTIONFLOW.EXE-1724F660.pf" File added: "C:\Windows\Prefetch\PfPre_60fd0603.mkd" File added: "C:\Windows\Prefetch\PfPre_60fdcbe0.mkd" File added: "C:\Windows\Prefetch\PfSvPerfStats.bin" File added: "C:\Windows\Prefetch\PROVTOOL.EXE-D15FA5A6.pf" File added: "C:\Windows\Prefetch\RDSPNF.EXE-9A6E43D6.pf" File added: "C:\Windows\Prefetch\REGSVR32.EXE-03D3FB87.pf" File added: "C:\Windows\Prefetch\REGSVR32.EXE-B31EC963.pf" File added: "C:\Windows\Prefetch\ResPriHMStaticDb.ebd" File added: "C:\Windows\Prefetch\RUNDLL32.EXE-52A71BD0.pf" File added: "C:\Windows\Prefetch\RUNDLL32.EXE-BF72C764.pf" File added: "C:\Windows\Prefetch\RUNDLL32.EXE-FDCBB5A1.pf" File added: "C:\Windows\Prefetch\RUNTIMEBROKER.EXE-01967C76.pf" File added: "C:\Windows\Prefetch\RUNTIMEBROKER.EXE-06F07052.pf" File added: "C:\Windows\Prefetch\RUNTIMEBROKER.EXE-1B12490B.pf" File added: "C:\Windows\Prefetch\RUNTIMEBROKER.EXE-2E01110F.pf" File added: "C:\Windows\Prefetch\RUNTIMEBROKER.EXE-4551A062.pf" File added: "C:\Windows\Prefetch\RUNTIMEBROKER.EXE-5600D24D.pf" File added: "C:\Windows\Prefetch\RUNTIMEBROKER.EXE-5663F5AA.pf" File added: "C:\Windows\Prefetch\RUNTIMEBROKER.EXE-64D88A97.pf" File added: "C:\Windows\Prefetch\RUNTIMEBROKER.EXE-9B21EA9F.pf" File added: "C:\Windows\Prefetch\RUNTIMEBROKER.EXE-9FA1FE08.pf" File added: "C:\Windows\Prefetch\RUNTIMEBROKER.EXE-AB2A3448.pf" File added: "C:\Windows\Prefetch\RUNTIMEBROKER.EXE-B87D0432.pf" File added: "C:\Windows\Prefetch\RUNTIMEBROKER.EXE-C3D4FE84.pf" File added: "C:\Windows\Prefetch\RUNTIMEBROKER.EXE-E379E687.pf" File added: "C:\Windows\Prefetch\RUNTIMEBROKER.EXE-F7953C75.pf" File added: "C:\Windows\Prefetch\SEARCHFILTERHOST.EXE-44162447.pf" File added: "C:\Windows\Prefetch\SEARCHINDEXER.EXE-1CF42BC6.pf" File added: "C:\Windows\Prefetch\SEARCHPROTOCOLHOST.EXE-69C456C3.pf" File added: "C:\Windows\Prefetch\SEARCHUI.EXE-7A9DC976.pf" File added: "C:\Windows\Prefetch\SETTINGSYNCHOST.EXE-0130E42A.pf" File added: "C:\Windows\Prefetch\SETUP.EXE-A880DFEA.pf" File added: "C:\Windows\Prefetch\SGRMBROKER.EXE-32481FEB.pf" File added: "C:\Windows\Prefetch\SHELLEXPERIENCEHOST.EXE-B2CEAD5F.pf" File added: "C:\Windows\Prefetch\SIHOST.EXE-115B507F.pf" File added: "C:\Windows\Prefetch\SLUI.EXE-3E441AEE.pf" File added: "C:\Windows\Prefetch\SMARTSCREEN.EXE-EACC1250.pf" File added: "C:\Windows\Prefetch\SMSS.EXE-B5B810DB.pf" File added: "C:\Windows\Prefetch\SPEECHRUNTIME.EXE-9C54A858.pf" File added: "C:\Windows\Prefetch\SPPEXTCOMOBJ.EXE-7D45A1AB.pf" File added: "C:\Windows\Prefetch\SPPSVC.EXE-96070FE0.pf" File added: "C:\Windows\Prefetch\SPYMETOOLS.EXE-5627046C.pf" File added: "C:\Windows\Prefetch\SPYMETOOLS_INSTALLER (1).EXE-3CB9F378.pf" File added: "C:\Windows\Prefetch\SVCHOST.EXE-021F0741.pf" File added: "C:\Windows\Prefetch\SVCHOST.EXE-0EBD3699.pf" File added: "C:\Windows\Prefetch\SVCHOST.EXE-107091B0.pf" File added: "C:\Windows\Prefetch\SVCHOST.EXE-14758CE1.pf" File added: "C:\Windows\Prefetch\SVCHOST.EXE-182F6501.pf" File added: "C:\Windows\Prefetch\SVCHOST.EXE-290298E5.pf" File added: "C:\Windows\Prefetch\SVCHOST.EXE-35DD318A.pf" File added: "C:\Windows\Prefetch\SVCHOST.EXE-38C6A0A6.pf" File added: "C:\Windows\Prefetch\SVCHOST.EXE-468D398E.pf" File added: "C:\Windows\Prefetch\SVCHOST.EXE-47E93A69.pf" File added: "C:\Windows\Prefetch\SVCHOST.EXE-4BA16BD3.pf" File added: "C:\Windows\Prefetch\SVCHOST.EXE-509E2EBB.pf" File added: "C:\Windows\Prefetch\SVCHOST.EXE-51721D28.pf" File added: "C:\Windows\Prefetch\SVCHOST.EXE-54B17C1B.pf" File added: "C:\Windows\Prefetch\SVCHOST.EXE-591A658F.pf" File added: "C:\Windows\Prefetch\SVCHOST.EXE-599050F7.pf" File added: "C:\Windows\Prefetch\SVCHOST.EXE-69FAB116.pf" File added: "C:\Windows\Prefetch\SVCHOST.EXE-6CAD53BD.pf" File added: "C:\Windows\Prefetch\SVCHOST.EXE-6E1A6101.pf" File added: "C:\Windows\Prefetch\SVCHOST.EXE-79B19B0F.pf" File added: "C:\Windows\Prefetch\SVCHOST.EXE-7C1CC4AC.pf" File added: "C:\Windows\Prefetch\SVCHOST.EXE-8010DDD4.pf" File added: "C:\Windows\Prefetch\SVCHOST.EXE-849A4560.pf" File added: "C:\Windows\Prefetch\SVCHOST.EXE-87037327.pf" File added: "C:\Windows\Prefetch\SVCHOST.EXE-8DE07399.pf" File added: "C:\Windows\Prefetch\SVCHOST.EXE-96E1C1AB.pf" File added: "C:\Windows\Prefetch\SVCHOST.EXE-9CE00D4E.pf" File added: "C:\Windows\Prefetch\SVCHOST.EXE-9F82877C.pf" File added: "C:\Windows\Prefetch\SVCHOST.EXE-AE1E0CAD.pf" File added: "C:\Windows\Prefetch\SVCHOST.EXE-BC9FA7C9.pf" File added: "C:\Windows\Prefetch\SVCHOST.EXE-BE656A8E.pf" File added: "C:\Windows\Prefetch\SVCHOST.EXE-BF3D5CA5.pf" File added: "C:\Windows\Prefetch\SVCHOST.EXE-C9E3B372.pf" File added: "C:\Windows\Prefetch\SVCHOST.EXE-D0F686CF.pf" File added: "C:\Windows\Prefetch\SVCHOST.EXE-D93692D9.pf" File added: "C:\Windows\Prefetch\SVCHOST.EXE-EFBD9D1D.pf" File added: "C:\Windows\Prefetch\SVCHOST.EXE-F4C96D28.pf" File added: "C:\Windows\Prefetch\SVCHOST.EXE-FDC23B42.pf" File added: "C:\Windows\Prefetch\TASKHOSTW.EXE-2E5D4B75.pf" File added: "C:\Windows\Prefetch\TIWORKER.EXE-4D2FAA13.pf" File added: "C:\Windows\Prefetch\TRUSTEDINSTALLER.EXE-766EFF52.pf" File added: "C:\Windows\Prefetch\UNREGMP2.EXE-51519EBD.pf" File added: "C:\Windows\Prefetch\USERACCOUNTCONTROLSETTINGS.EX-381ECB63.pf" File added: "C:\Windows\Prefetch\USERINIT.EXE-5114915C.pf" File added: "C:\Windows\Prefetch\USEROOBEBROKER.EXE-65584ADF.pf" File added: "C:\Windows\Prefetch\UTILMAN.EXE-47FA7BEF.pf" File added: "C:\Windows\Prefetch\VDS.EXE-2FCA9D16.pf" File added: "C:\Windows\Prefetch\VDSLDR.EXE-50179B50.pf" File added: "C:\Windows\Prefetch\VERCLSID.EXE-AB0FD091.pf" File added: "C:\Windows\Prefetch\WERMGR.EXE-F439C551.pf" File added: "C:\Windows\Prefetch\WINDOWS.WARP.JITSERVICE.EXE-4173FF0A.pf" File added: "C:\Windows\Prefetch\WINLOGON.EXE-DEDDC9B6.pf" File added: "C:\Windows\Prefetch\WMIADAP.EXE-BB21CD77.pf" File added: "C:\Windows\Prefetch\WMIPRVSE.EXE-E8B8DD29.pf" File added: "C:\Windows\Prefetch\WWAHOST.EXE-A4A023A3.pf" File added: "C:\Windows\Prefetch\_INS5176._MP-4FE03432.pf" File added: "C:\Windows\Prefetch\_ISDEL.EXE-A26C7DB5.pf" Directory added: "C:\Windows\Prefetch\ReadyBoot" File added: "C:\Windows\Resources\Themes\aero\VSCache\Aero.msstyles_1033_120_03.mss" File added: "C:\Windows\Resources\Themes\aero\VSCache\Aero.msstyles_1033_144_05.mss" File added: "C:\Windows\Resources\Themes\aero\VSCache\Aero.msstyles_1033_144_07.mss" File added: "C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT" File added: "C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT.LOG1" File added: "C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT.LOG2" File added: "C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT{52563366-b185-11e8-8a5d-95761a7fa16a}.TM.blf" File added: "C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT{52563366-b185-11e8-8a5d-95761a7fa16a}.TMContainer00000000000000000001.regtrans-ms" File added: "C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT{52563366-b185-11e8-8a5d-95761a7fa16a}.TMContainer00000000000000000002.regtrans-ms" File added: "C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT{8ebe95f7-3dcb-11e8-a9d9-7cfe90913f50}.TM.blf" File added: "C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT{8ebe95f7-3dcb-11e8-a9d9-7cfe90913f50}.TMContainer00000000000000000001.regtrans-ms" File added: "C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT{8ebe95f7-3dcb-11e8-a9d9-7cfe90913f50}.TMContainer00000000000000000002.regtrans-ms" Directory added: "C:\Windows\ServiceProfiles\LocalService\AppData" Directory added: "C:\Windows\ServiceProfiles\LocalService\Desktop" Directory added: "C:\Windows\ServiceProfiles\LocalService\Documents" Directory added: "C:\Windows\ServiceProfiles\LocalService\Downloads" Directory added: "C:\Windows\ServiceProfiles\LocalService\Favorites" Directory added: "C:\Windows\ServiceProfiles\LocalService\Links" Directory added: "C:\Windows\ServiceProfiles\LocalService\Music" Directory added: "C:\Windows\ServiceProfiles\LocalService\Pictures" Directory added: "C:\Windows\ServiceProfiles\LocalService\Saved Games" Directory added: "C:\Windows\ServiceProfiles\LocalService\Videos" Directory added: "C:\Windows\ServiceProfiles\LocalService\winhttp" File added: "C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT" File added: "C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT.LOG1" File added: "C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT.LOG2" File added: "C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT{8ebe95f7-3dcb-11e8-a9d9-7cfe90913f50}.TM.blf" File added: "C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT{8ebe95f7-3dcb-11e8-a9d9-7cfe90913f50}.TMContainer00000000000000000001.regtrans-ms" File added: "C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT{8ebe95f7-3dcb-11e8-a9d9-7cfe90913f50}.TMContainer00000000000000000002.regtrans-ms" Directory added: "C:\Windows\ServiceProfiles\NetworkService\AppData" Directory added: "C:\Windows\ServiceProfiles\NetworkService\Desktop" Directory added: "C:\Windows\ServiceProfiles\NetworkService\Documents" Directory added: "C:\Windows\ServiceProfiles\NetworkService\Downloads" Directory added: "C:\Windows\ServiceProfiles\NetworkService\Favorites" Directory added: "C:\Windows\ServiceProfiles\NetworkService\Links" Directory added: "C:\Windows\ServiceProfiles\NetworkService\Music" Directory added: "C:\Windows\ServiceProfiles\NetworkService\Pictures" Directory added: "C:\Windows\ServiceProfiles\NetworkService\Saved Games" Directory added: "C:\Windows\ServiceProfiles\NetworkService\Videos" File added: "C:\Windows\servicing\Packages\Windows-Defender-AM-Default-Definitions-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-AM-Default-Definitions-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-AM-Default-Definitions-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-AM-Default-Definitions-Package~31bf3856ad364e35~amd64~~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-AppLayer-Group-amcore-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-AppLayer-Group-amcore-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-AppLayer-Group-amcore-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-AppLayer-Group-amcore-Package~31bf3856ad364e35~amd64~~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-AppLayer-Group-onecore-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-AppLayer-Group-onecore-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-AppLayer-Group-onecore-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-AppLayer-Group-onecore-Package~31bf3856ad364e35~amd64~~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-AppLayer-Group-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-AppLayer-Group-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-AppLayer-Group-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-AppLayer-Group-Package~31bf3856ad364e35~amd64~~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-AppLayer-Group-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-AppLayer-Group-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-AppLayer-Group-WOW64-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-AppLayer-Group-WOW64-Package~31bf3856ad364e35~amd64~~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-ApplicationGuard-Inbox-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-ApplicationGuard-Inbox-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-ApplicationGuard-Inbox-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-ApplicationGuard-Inbox-Package~31bf3856ad364e35~amd64~~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-Client-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-Client-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-Client-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-Client-Package~31bf3856ad364e35~amd64~~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-Client-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-Client-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-Client-WOW64-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-Client-WOW64-Package~31bf3856ad364e35~amd64~~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-Core-Group-amcore-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-Core-Group-amcore-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-Core-Group-amcore-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-Core-Group-amcore-Package~31bf3856ad364e35~amd64~~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-Core-Group-onecore-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-Core-Group-onecore-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-Core-Group-onecore-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-Core-Group-onecore-Package~31bf3856ad364e35~amd64~~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-Core-Group-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-Core-Group-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-Core-Group-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-Core-Group-Package~31bf3856ad364e35~amd64~~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-Core-Group-WOW64-amcore-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-Core-Group-WOW64-amcore-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-Core-Group-WOW64-amcore-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-Core-Group-WOW64-amcore-Package~31bf3856ad364e35~amd64~~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-Core-Group-WOW64-onecore-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-Core-Group-WOW64-onecore-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-Core-Group-WOW64-onecore-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-Core-Group-WOW64-onecore-Package~31bf3856ad364e35~amd64~~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-Core-Group-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-Core-Group-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-Core-Group-WOW64-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-Core-Group-WOW64-Package~31bf3856ad364e35~amd64~~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-Group-Policy-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-Group-Policy-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-Group-Policy-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-Group-Policy-Package~31bf3856ad364e35~amd64~~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-Management-Group-amcore-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-Management-Group-amcore-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-Management-Group-amcore-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-Management-Group-amcore-Package~31bf3856ad364e35~amd64~~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-Management-Group-onecore-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-Management-Group-onecore-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-Management-Group-onecore-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-Management-Group-onecore-Package~31bf3856ad364e35~amd64~~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-Management-Group-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-Management-Group-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-Management-Group-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-Management-Group-Package~31bf3856ad364e35~amd64~~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-Management-MDM-Group-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-Management-MDM-Group-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-Management-MDM-Group-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-Management-MDM-Group-Package~31bf3856ad364e35~amd64~~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-Management-Powershell-Group-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-Management-Powershell-Group-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-Management-Powershell-Group-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-Management-Powershell-Group-Package~31bf3856ad364e35~amd64~~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-Management-Powershell-Group-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-Management-Powershell-Group-WOW64-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-Management-Powershell-Group-WOW64-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-Management-Powershell-Group-WOW64-Package~31bf3856ad364e35~amd64~~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-Nis-Group-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-Nis-Group-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.mum" File added: "C:\Windows\servicing\Packages\Windows-Defender-Nis-Group-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat" File added: "C:\Windows\servicing\Packages\Windows-Defender-Nis-Group-Package~31bf3856ad364e35~amd64~~10.0.17134.1.mum" File added: "C:\Windows\servicing\Sessions\1088_772294296.back.xml" File added: "C:\Windows\servicing\Sessions\1088_772294296.xml" File added: "C:\Windows\servicing\Sessions\1536_772089984.back.xml" File added: "C:\Windows\servicing\Sessions\1536_772089984.xml" File added: "C:\Windows\servicing\Sessions\172_772068546.back.xml" File added: "C:\Windows\servicing\Sessions\172_772068546.xml" File added: "C:\Windows\servicing\Sessions\2180_772278750.back.xml" File added: "C:\Windows\servicing\Sessions\2180_772278750.xml" File added: "C:\Windows\servicing\Sessions\2792_772261015.back.xml" File added: "C:\Windows\servicing\Sessions\2792_772261015.xml" File deleted: "C:\Windows\servicing\Sessions\30688655_1475123160.back.xml" File deleted: "C:\Windows\servicing\Sessions\30688655_1475123160.xml" File deleted: "C:\Windows\servicing\Sessions\30688655_1748069464.back.xml" File deleted: "C:\Windows\servicing\Sessions\30688655_1748069464.xml" File deleted: "C:\Windows\servicing\Sessions\30688655_1775267202.back.xml" File deleted: "C:\Windows\servicing\Sessions\30688655_1775267202.xml" File deleted: "C:\Windows\servicing\Sessions\30688655_1805168274.back.xml" File deleted: "C:\Windows\servicing\Sessions\30688655_1805168274.xml" File deleted: "C:\Windows\servicing\Sessions\30688655_1831712143.back.xml" File deleted: "C:\Windows\servicing\Sessions\30688655_1831712143.xml" File deleted: "C:\Windows\servicing\Sessions\30688655_1849169061.back.xml" File deleted: "C:\Windows\servicing\Sessions\30688655_1849169061.xml" File deleted: "C:\Windows\servicing\Sessions\30688655_1874267282.back.xml" File deleted: "C:\Windows\servicing\Sessions\30688655_1874267282.xml" File deleted: "C:\Windows\servicing\Sessions\30688655_1900865899.back.xml" File deleted: "C:\Windows\servicing\Sessions\30688655_1900865899.xml" File deleted: "C:\Windows\servicing\Sessions\30688655_1914369893.back.xml" File deleted: "C:\Windows\servicing\Sessions\30688655_1914369893.xml" File deleted: "C:\Windows\servicing\Sessions\30688655_1930367979.back.xml" File deleted: "C:\Windows\servicing\Sessions\30688655_1930367979.xml" File deleted: "C:\Windows\servicing\Sessions\30688655_1947369866.back.xml" File deleted: "C:\Windows\servicing\Sessions\30688655_1947369866.xml" File deleted: "C:\Windows\servicing\Sessions\30688655_1962870113.back.xml" File deleted: "C:\Windows\servicing\Sessions\30688655_1962870113.xml" File deleted: "C:\Windows\servicing\Sessions\30688655_1980158657.back.xml" File deleted: "C:\Windows\servicing\Sessions\30688655_1980158657.xml" File deleted: "C:\Windows\servicing\Sessions\30688655_1997611560.back.xml" File deleted: "C:\Windows\servicing\Sessions\30688655_1997611560.xml" File deleted: "C:\Windows\servicing\Sessions\30688656_2849934694.back.xml" File deleted: "C:\Windows\servicing\Sessions\30688656_2849934694.xml" File deleted: "C:\Windows\servicing\Sessions\30688656_2870438835.back.xml" File deleted: "C:\Windows\servicing\Sessions\30688656_2870438835.xml" File added: "C:\Windows\servicing\Sessions\3520_772078281.back.xml" File added: "C:\Windows\servicing\Sessions\3520_772078281.xml" File added: "C:\Windows\servicing\Sessions\35952_80114484.back.xml" File added: "C:\Windows\servicing\Sessions\35952_80114484.xml" File added: "C:\Windows\servicing\Sessions\3624_772096734.back.xml" File added: "C:\Windows\servicing\Sessions\3624_772096734.xml" File added: "C:\Windows\servicing\Sessions\3636_771891015.back.xml" File added: "C:\Windows\servicing\Sessions\3636_771891015.xml" File added: "C:\Windows\servicing\Sessions\3636_772106062.back.xml" File added: "C:\Windows\servicing\Sessions\3636_772106062.xml" File added: "C:\Windows\servicing\Sessions\3972_772100781.back.xml" File added: "C:\Windows\servicing\Sessions\3972_772100781.xml" File added: "C:\Windows\servicing\Sessions\4600_772298406.back.xml" File added: "C:\Windows\servicing\Sessions\4600_772298406.xml" File added: "C:\Windows\servicing\Sessions\5684_772093734.back.xml" File added: "C:\Windows\servicing\Sessions\5684_772093734.xml" File added: "C:\Windows\servicing\Sessions\5692_772274468.back.xml" File added: "C:\Windows\servicing\Sessions\5692_772274468.xml" File added: "C:\Windows\servicing\Sessions\5808_772283046.back.xml" File added: "C:\Windows\servicing\Sessions\5808_772283046.xml" File added: "C:\Windows\servicing\Sessions\5856_772266109.back.xml" File added: "C:\Windows\servicing\Sessions\5856_772266109.xml" File added: "C:\Windows\servicing\Sessions\6032_772110250.back.xml" File added: "C:\Windows\servicing\Sessions\6032_772110250.xml" File added: "C:\Windows\servicing\Sessions\732_772074312.back.xml" File added: "C:\Windows\servicing\Sessions\732_772074312.xml" File added: "C:\Windows\servicing\Sessions\808_772269312.back.xml" File added: "C:\Windows\servicing\Sessions\808_772269312.xml" File accessed/modified: "C:\Windows\servicing\Sessions\Sessions.back.xml" File accessed/modified: "C:\Windows\servicing\Sessions\Sessions.xml" File accessed/modified: "C:\Windows\SoftwareDistribution\DataStore\DataStore.edb" File accessed/modified: "C:\Windows\SoftwareDistribution\DataStore\DataStore.jfm" File accessed/modified: "C:\Windows\SoftwareDistribution\DataStore\Logs\edb.chk" File accessed/modified: "C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log" File added: "C:\Windows\System32\winshfhc.dll" File accessed/modified: "C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Windows-Defender-Nis-Group-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat" Directory added: "C:\Windows\System32\config\Journal" Directory added: "C:\Windows\System32\config\RegBack" Directory added: "C:\Windows\System32\config\systemprofile" Directory added: "C:\Windows\System32\config\TxR" Directory added: "C:\Windows\System32\Configuration\BaseRegistration" Directory added: "C:\Windows\System32\Configuration\ConfigurationStatus" Directory added: "C:\Windows\System32\Configuration\JobLogs" Directory added: "C:\Windows\System32\Configuration\PartialConfigurations" Directory added: "C:\Windows\System32\Configuration\Registration" Directory added: "C:\Windows\System32\Configuration\Schema" File added: "C:\Windows\System32\LogFiles\WMI\CloudExperienceHostOobe.etl" File added: "C:\Windows\System32\LogFiles\WMI\LwtNetLog.etl" File added: "C:\Windows\System32\LogFiles\WMI\NtfsLog.etl" File added: "C:\Windows\System32\LogFiles\WMI\SpoolerLogger.etl.001" File added: "C:\Windows\System32\LogFiles\WMI\SpoolerLogger.etl.002" File added: "C:\Windows\System32\LogFiles\WMI\Wifi.etl" Directory added: "C:\Windows\System32\LogFiles\WMI\RtBackup" Directory added: "C:\Windows\System32\Msdtc\Trace" Directory added: "C:\Windows\System32\networklist\icons" Directory added: "C:\Windows\System32\Tasks\Microsoft" Directory added: "C:\Windows\System32\WindowsPowerShell\v1.0\Modules\Defender" File added: "C:\Windows\SysWOW64\winshfhc.dll" Directory added: "C:\Windows\SysWOW64\config\Journal" Directory added: "C:\Windows\SysWOW64\config\RegBack" Directory added: "C:\Windows\SysWOW64\config\systemprofile" Directory added: "C:\Windows\SysWOW64\config\TxR" Directory added: "C:\Windows\SysWOW64\Configuration\BaseRegistration" Directory added: "C:\Windows\SysWOW64\Configuration\ConfigurationStatus" Directory added: "C:\Windows\SysWOW64\Configuration\JobLogs" Directory added: "C:\Windows\SysWOW64\Configuration\PartialConfigurations" Directory added: "C:\Windows\SysWOW64\Configuration\Registration" Directory added: "C:\Windows\SysWOW64\Configuration\Schema" Directory added: "C:\Windows\SysWOW64\Msdtc\Trace" Directory added: "C:\Windows\SysWOW64\networklist\icons" Directory added: "C:\Windows\SysWOW64\Tasks\Microsoft" Directory added: "C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\Defender" File accessed/modified: "C:\Windows\Tasks\SA.DAT" File added: "C:\Windows\Temp\FXSAPIDebugLogFile.txt" File added: "C:\Windows\Temp\FXSTIFFDebugLogFile.txt" File added: "C:\Windows\Temp\MpCmdRun.log" File added: "C:\Windows\Temp\temEF33.tmp" Directory added: "C:\Windows\Temp\DiagTrack_alternativeTrace" Directory added: "C:\Windows\Temp\DiagTrack_aot" Directory added: "C:\Windows\Temp\DiagTrack_diag" Directory added: "C:\Windows\Temp\DiagTrack_miniTrace" File accessed/modified: "C:\Windows\WinSxS\migration.xml" File deleted: "C:\Windows\WinSxS\poqexec.log" File added: "C:\Windows\WinSxS\Backup\amd64_windows-defender-drivers_31bf3856ad364e35_10.0.17134.1_none_d64d9b975e63961c.manifest" File added: "C:\Windows\WinSxS\Backup\amd64_windows-defender-drivers_31bf3856ad364e35_10.0.17134.1_none_d64d9b975e63961c_wdboot.sys_9bae05d2" File added: "C:\Windows\WinSxS\Backup\amd64_windows-defender-drivers_31bf3856ad364e35_10.0.17134.1_none_d64d9b975e63961c_wdfilter.sys_13ccb062" File added: "C:\Windows\WinSxS\Backup\amd64_windows-defender-nis-drivers_31bf3856ad364e35_10.0.17134.1_none_2e9a18ca1a8679ad.manifest" File added: "C:\Windows\WinSxS\Backup\amd64_windows-defender-nis-drivers_31bf3856ad364e35_10.0.17134.1_none_2e9a18ca1a8679ad_wdnisdrv.sys_d6e2118a" File added: "C:\Windows\WinSxS\Backup\amd64_windows-defender-nis-service_31bf3856ad364e35_10.0.17134.1_none_03732c587c19dd6d.manifest" File added: "C:\Windows\WinSxS\Backup\amd64_windows-defender-nis-service_31bf3856ad364e35_10.0.17134.1_none_03732c587c19dd6d_nissrv.exe_f967cd63" File added: "C:\Windows\WinSxS\Backup\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc.manifest" File added: "C:\Windows\WinSxS\Backup\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc_mpasdesc.dll_24caab92" File added: "C:\Windows\WinSxS\Backup\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc_mpazsubmit.dll_aa7eaa88" File added: "C:\Windows\WinSxS\Backup\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc_mpclient.dll_0a78b638" File added: "C:\Windows\WinSxS\Backup\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc_mpcmdrun.exe_1d1038c2" File added: "C:\Windows\WinSxS\Backup\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc_mpcommu.dll_cc275570" File added: "C:\Windows\WinSxS\Backup\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc_mpoav.dll_f715ad21" File added: "C:\Windows\WinSxS\Backup\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc_mprtp.dll_0827df93" File added: "C:\Windows\WinSxS\Backup\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc_mpsvc.dll_2d2efa15" File added: "C:\Windows\WinSxS\Backup\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc_msmpcom.dll_34ead564" File added: "C:\Windows\WinSxS\Backup\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc_msmpeng.exe_2f1c6923" File added: "C:\Windows\WinSxS\Backup\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc_msmplics.dll_50e185fa" File added: "C:\Windows\WinSxS\Backup\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc_thirdpartynotices.txt_086f3c50" File added: "C:\Windows\WinSxS\Backup\amd64_windows-defender-service_31bf3856ad364e35_10.0.17134.1_none_ab26af25bff6f9dc_winshfhc.dll_c3811e1c" File accessed/modified: "C:\Windows\WinSxS\FileMaps\$$.cdf-ms" File accessed/modified: "C:\Windows\WinSxS\FileMaps\$$_elambkup_0bc02aa0c28485f3.cdf-ms" File accessed/modified: "C:\Windows\WinSxS\FileMaps\$$_policydefinitions_89130cdfc4d9c27c.cdf-ms" File accessed/modified: "C:\Windows\WinSxS\FileMaps\$$_policydefinitions_en-us_3b1c5b998da0d4ae.cdf-ms" File accessed/modified: "C:\Windows\WinSxS\FileMaps\$$_system32_21f9a9c4a2f8b514.cdf-ms" File accessed/modified: "C:\Windows\WinSxS\FileMaps\$$_system32_drivers_dc1b782427b5ee1b.cdf-ms" File accessed/modified: "C:\Windows\WinSxS\FileMaps\$$_system32_en-us_429cd25484dc6f94.cdf-ms" File accessed/modified: "C:\Windows\WinSxS\FileMaps\$$_system32_windowspowershell_v1.0_3f102d555ee05d33.cdf-ms" File accessed/modified: "C:\Windows\WinSxS\FileMaps\$$_system32_windowspowershell_v1.0_modules_a349059b05097caa.cdf-ms" File added: "C:\Windows\WinSxS\FileMaps\$$_system32_windowspowershell_v1.0_modules_defender_a180e505e2cc09ab.cdf-ms" File accessed/modified: "C:\Windows\WinSxS\FileMaps\$$_syswow64_21ffbdd2a2dd92e0.cdf-ms" File accessed/modified: "C:\Windows\WinSxS\FileMaps\$$_syswow64_windowspowershell_v1.0_19ae85881f1c4f2d.cdf-ms" File accessed/modified: "C:\Windows\WinSxS\FileMaps\$$_syswow64_windowspowershell_v1.0_modules_b001352a7f7811a4.cdf-ms" File added: "C:\Windows\WinSxS\FileMaps\$$_syswow64_windowspowershell_v1.0_modules_defender_fef0361e13dc2977.cdf-ms" File accessed/modified: "C:\Windows\WinSxS\FileMaps\programdata.cdf-ms" File accessed/modified: "C:\Windows\WinSxS\FileMaps\programdata_microsoft_fe5c6d762edd2110.cdf-ms" File added: "C:\Windows\WinSxS\FileMaps\programdata_microsoft_windows_defender_8c225bc560faa67e.cdf-ms" File added: "C:\Windows\WinSxS\FileMaps\programdata_microsoft_windows_defender_clean_store_2869cfb5407c50f8.cdf-ms" File added: "C:\Windows\WinSxS\FileMaps\programdata_microsoft_windows_defender_definition_updates_d3c2d4757cf0b9a3.cdf-ms" File added: "C:\Windows\WinSxS\FileMaps\programdata_microsoft_windows_defender_definition_updates_default_44e57bb5c1e3d0e8.cdf-ms" File added: "C:\Windows\WinSxS\FileMaps\programdata_microsoft_windows_defender_network_inspection_system_support_26123edb7728e22a.cdf-ms" File accessed/modified: "C:\Windows\WinSxS\FileMaps\program_files_ffd0cbfc813cc4f1.cdf-ms" File added: "C:\Windows\WinSxS\FileMaps\program_files_windows_defender_3e33901162166ae9.cdf-ms" File added: "C:\Windows\WinSxS\FileMaps\program_files_windows_defender_en-us_a607fb510b9fff95.cdf-ms" File added: "C:\Windows\WinSxS\FileMaps\program_files_windows_defender_offline_072b9e24a7f3689a.cdf-ms" File added: "C:\Windows\WinSxS\FileMaps\program_files_x86_windows_defender_2ba1d62d9bcc00c8.cdf-ms" File added: "C:\Windows\WinSxS\FileMaps\program_files_x86_windows_defender_en-us_7bf99e1315297778.cdf-ms" File accessed/modified: "C:\Windows\WinSxS\FileMaps\program_files_x86__676bbe2c7241b694.cdf-ms" File accessed/modified: "C:\Windows\WinSxS\FileMaps\_0000000000000000.cdf-ms" File accessed/modified: "C:\Windows\WinSxS\ManifestCache\b674d55976df4d18_blobs.bin" File deleted: "C:\Windows\WinSxS\Temp\PendingDeletes\" File deleted: "C:\Windows\WinSxS\Temp\PendingDeletes\$$DeleteMe.MpAsDlta.vdm.01d4459109213fa2.0001" File deleted: "C:\Windows\WinSxS\Temp\PendingDeletes\$$DeleteMe.MpAvBase.vdm.01d4459109213fa2.0002" File deleted: "C:\Windows\WinSxS\Temp\PendingDeletes\$$DeleteMe.MpAvDlta.vdm.01d4459109213fa2.0003" File deleted: "C:\Windows\WinSxS\Temp\PendingDeletes\$$DeleteMe.MpClient.dll.01d4459109e715ca.0005" File deleted: "C:\Windows\WinSxS\Temp\PendingDeletes\$$DeleteMe.MpCommu.dll.01d4459109e97f69.0006" File deleted: "C:\Windows\WinSxS\Temp\PendingDeletes\$$DeleteMe.MpEngine.dll.01d4459109213fa2.0004" File deleted: "C:\Windows\WinSxS\Temp\PendingDeletes\$$DeleteMe.MpRtp.dll.01d4459109ee3e48.0007" File deleted: "C:\Windows\WinSxS\Temp\PendingDeletes\$$DeleteMe.MpSvc.dll.01d4459109ee3e48.0008" File deleted: "C:\Windows\WinSxS\Temp\PendingDeletes\$$DeleteMe.MsMpEng.exe.01d4459109ee3e48.0009" Directory deleted: "C:\Windows\WinSxS\Temp\PendingDeletes\$$DeleteMe..01d4459109f300ea.000a" File deleted: "C:\Windows\WinSxS\Temp\PendingRenames\"