Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

rooted unable to restore

Started by b8nk1028 , A minute ago
malware hacked needhelp

  • Please log in to reply

#1
b8nk1028
Posted A minute ago

b8nk1028

    New Member

  • Member
  • Pip
  • 1 posts

i got alot of stuff going on here. new to developement but totally had a malicious packet end up installing alot of hkey's and dont know how to go about fixing. ive reset and removed a root kit but i cant get all of it even during a full fresh install
i purchased win 11 pro usb from best buy hoping to fix and it hasnt
included FRST results and there a beauty
someone help!!??!!

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 23-04-2025
Ran by Adminstrator (25-04-2025 14:15:23)
Running from C:\Users\Adminstrator\Downloads
Microsoft Windows 11 Pro Insider Preview Version Dev 27823.1000 (X64) (2025-04-02 04:04:05)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

a1b2a (S-1-5-21-2451002302-2018568227-764946658-1001 - Limited - Enabled) => C:\Users\a1b2a
Administrator (S-1-5-21-2451002302-2018568227-764946658-500 - Administrator - Enabled) => C:\Users\Administrator
Adminstrator (S-1-5-21-2451002302-2018568227-764946658-1009 - Administrator - Enabled) => C:\Users\Adminstrator
ddagentuser (S-1-5-21-2451002302-2018568227-764946658-1006 - Limited - Enabled) => C:\Users\ddagentuser
DefaultAccount (S-1-5-21-2451002302-2018568227-764946658-503 - Limited - Disabled)
DevToolsUser (S-1-5-21-2451002302-2018568227-764946658-1008 - Limited - Enabled) => C:\Users\DevToolsUser
Guest (S-1-5-21-2451002302-2018568227-764946658-501 - Limited - Disabled)
pgAgent (S-1-5-21-2451002302-2018568227-764946658-1012 - Limited - Enabled) => C:\Users\pgAgent
postgres (S-1-5-21-2451002302-2018568227-764946658-1013 - Limited - Enabled) => C:\Users\postgres
WDAGUtilityAccount (S-1-5-21-2451002302-2018568227-764946658-504 - Limited - Disabled)
WsiAccount (S-1-5-21-2451002302-2018568227-764946658-1014 - Limited - Disabled) => C:\Users\WsiAccount

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Dr.Web Anti-virus (Disabled - Up to date) {250CDD7E-926B-AEFC-24F0-E203A6F6D244}
AV: Aura (Disabled - Up to date) {37D4D9FE-559B-F7E1-E13B-A346E3D35CDB}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Dr.Web Firewall (Disabled) {1D375C5B-D804-AFA4-0FAF-4B365825953F}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

.NET for Android Templates (x64) (HKLM\...\{84CF0EED-D93B-42CE-91EC-0F2653CAA378}) (Version: 35.0.39.0 - Microsoft Corporation) Hidden
.NET MAUI SDK (x64) (HKLM\...\{2BC0AC88-0416-4722-9169-697DED9B4920}) (Version: 9.0.14.0 - Microsoft Corporation) Hidden
.NET MAUI SDK (x64) (HKLM\...\{CFD1EB57-2D9C-41C4-B1AE-E08A51440320}) (Version: 8.0.100.0 - Microsoft Corporation) Hidden
.NET MAUI Templates (x64) (HKLM\...\{1C6A4FAC-74CB-4AA6-94E3-F224DDA45857}) (Version: 8.0.100.0 - Microsoft Corporation) Hidden
.NET MAUI Templates (x64) (HKLM\...\{9E2CB5D8-CEF7-4A76-9A46-92E87F36BB49}) (Version: 9.0.14.0 - Microsoft Corporation) Hidden
7-Zip 24.09 (x64) (HKLM\...\7-Zip) (Version: 24.09 - Igor Pavlov)
Aiseesoft AI Photo Editor 2.1.16 (HKLM-x32\...\{999F6CCF-817D-4B7C-A376-EE79B52F77CA}_is1) (Version: 2.1.16 - Aiseesoft Studio)
Anaconda3 2024.10-1 (Python 3.12.7 64-bit) (HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\Anaconda3 2024.10-1 (Python 3.12.7 64-bit)) (Version: 2024.10-1 - Anaconda, Inc.)
Android Studio (HKLM\...\Android Studio) (Version: 2024.2 - Google LLC)
AnythingLLM 1.7.8 (HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\cfb2c4c6-70ef-5070-8529-dbba19c67883) (Version: 1.7.8 - Mintplex Labs Inc)
Apple Mobile Device Support (HKLM\...\{AAFEC555-4154-4A21-9523-30B8CDE94533}) (Version: 18.0.0.33 - Apple Inc.)
Application Verifier x64 External Package (DesktopEditions) (HKLM\...\{2562C083-3923-0699-1BBE-0152A55A5725}) (Version: 10.1.26100.2454 - Microsoft) Hidden
Application Verifier x64 External Package (DesktopEditions) (HKLM\...\{C85A0AA9-2CF5-7B43-C078-4E8B7CE362D2}) (Version: 10.1.22621.3233 - Microsoft) Hidden
Application Verifier x64 External Package (HKLM\...\{8A4CD158-E6B3-6D91-D7DE-10098BC980E2}) (Version: 10.1.19041.685 - Microsoft) Hidden
Application Verifier x64 External Package (OnecoreUAP) (HKLM\...\{2C78EC40-921E-1C02-01FC-A1B6B0489B8C}) (Version: 10.1.22621.3233 - Microsoft) Hidden
Application Verifier x64 External Package (OnecoreUAP) (HKLM\...\{891F8195-3C24-A0FF-E5BE-55FB853C9E33}) (Version: 10.1.26100.2454 - Microsoft) Hidden
Aspire.Hosting.Sdk (x64) (HKLM\...\{38DB3ED9-BF3C-4FDD-9107-7492B16940BB}) (Version: 8.2.2.0 - Microsoft Corporation) Hidden
Aspire.ProjectTemplates (x64) (HKLM\...\{AAD2E07F-FA15-430B-B352-6A481EA1AFBC}) (Version: 8.2.2.0 - Microsoft Corporation) Hidden
Aura 6.0.1 (HKLM-x32\...\{3dd6b57b-53c0-4448-90c7-09e74a878837}) (Version: 6.0.1.2113 - Aura)
Aura 6.0.1 (HKLM-x32\...\AuraApp) (Version: 6.0.1 - Aura) Hidden
Aura 6.0.1x64 (HKLM\...\{5A77ABDD-5FA7-4617-AE08-880D952ECBFF}) (Version: 6.0.1.2113 - Aura) Hidden
AuraAV (HKLM\...\{E43F2902-B5C4-44B1-85D3-98BBC06FF1F5}) (Version: 10.0.0.2154 - Aura) Hidden
AuraAVDrivers (HKLM\...\{59468A1F-56A7-4CE1-B525-2099191C23C3}) (Version: 7.0.0 - Aura) Hidden
AutoHotkey (HKLM\...\AutoHotkey) (Version: 2.0.19 - AutoHotkey Foundation LLC)
Azure Connected Machine Agent (HKLM\...\{753B26C6-660F-4F09-80D0-CA3952992726}) (Version: 1.51.03008.2167 - Microsoft Corporation)
Azure Developer CLI (HKLM\...\{75C4F067-A8B5-4AE1-81C3-A4109E13F233}) (Version: 1.12.100 - Microsoft Corporation)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Burp Suite Community Edition 2025.2.3 (HKLM\...\9806-1938-4586-6531) (Version: 2025.2.3 - PortSwigger Web Security)
CardStudio 2.0 (HKLM-x32\...\{CFBF6C7B-78ED-4CC6-B463-CB168DF61A8F}) (Version: 2.5.23 - Zebra Technologies)
Claude (HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\AnthropicClaude) (Version: 0.9.2 - Anthropic PBC)
ClickOnce Bootstrapper Package for Microsoft .NET Framework (HKLM-x32\...\{BDF8C840-5B9A-4D9B-9BCA-CE4163973563}) (Version: 4.8.09256 - Microsoft Corporation) Hidden
Cloudflare WARP (HKLM\...\{05A015D7-919A-4DDF-A969-191972374075}) (Version: 25.2.460.1 - Cloudflare, Inc.)
cloudflared (HKLM-x32\...\{CA714F07-DA6F-4849-99D4-F6230C1961AA}) (Version: 2025.2.1 - cloudflare)
CMake (HKLM\...\{E9EEAF8D-AAB8-48CF-B6DB-31ADF65EF59E}) (Version: 3.31.5 - Kitware)
Cocos Dashboard (HKLM-x32\...\{5B686938-99D9-4ED6-94E2-59E5CC7C3D94}) (Version: 1.0.14.2515 - Xiamen Yaji Software Co., Ltd.) Hidden
Cocos Dashboard 1.0.14.2515 (HKLM-x32\...\Cocos Dashboard 1.0.14.2515) (Version: 1.0.14.2515 - Xiamen Yaji Software Co., Ltd.)
Cursor 0.45.14 (HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\62625861-8486-5be9-9e46-1da50df5f8ff) (Version: 0.45.14 - Cursor AI, Inc.)
Datadog Agent (HKLM\...\{ADCC1994-2F39-4F76-BE33-CC9B5F6F30BE}) (Version: 7.62.2.0 - Datadog, Inc.)
Dev-C++ (HKLM-x32\...\Dev-C++) (Version: 5.11 - Bloodshed Software)
DiagnosticsHub_CollectionService (HKLM\...\{0E5296FF-C952-4756-8C85-6E6CC9F73A20}) (Version: 17.12.35318 - Microsoft Corporation) Hidden
Discord (HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\Discord) (Version: 1.0.9059 - Discord Inc.)
Docker Desktop (HKLM\...\Docker Desktop) (Version: 4.40.0 - Docker Inc.)
Dr.Web KATANA (HKLM\...\{7599F709-61D5-44F1-996C-4DFEB1B855E0}) (Version: 2.0 - Doctor Web, Ltd.)
Entity Framework 6.5.0 Tools  for Visual Studio 2022 (HKLM-x32\...\{24B966F3-162C-429F-A075-9B11D89AE721}) (Version: 6.5.0.0 - Microsoft Corporation) Hidden
ExpressVPN (HKLM-x32\...\{c9102dec-ace2-46b8-b098-5cb7a55b7e73}) (Version: 12.95.0.9 - ExpressVPN)
ExpressVPN (HKLM-x32\...\{E5B9C3E5-889C-4F22-A959-F4B89BBD783A}) (Version: 12.95.0.9 - ExpressVPN) Hidden
Figma (HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\Figma) (Version: 125.2.3 - Figma, Inc.)
GBT_Dynamic_Lighting_Lib_UC 24.08.27.01 (HKLM\...\GBT_Dynamic_Lighting_Lib_UC) (Version: 24.08.27.01 - GIGABYTE)
GBT_RGB_Sync_Control 24.11.14.01 (HKLM\...\GBT_RGB_Sync_Control) (Version: 24.11.14.01 - GIGABYTE)
GIGABYTE Control Center 24.12.30.01 (HKLM\...\GIGABYTE Control Center) (Version: 24.12.30.01 - GIGABYTE)
Git (HKLM\...\Git_is1) (Version: 2.49.0 - The Git Development Community)
GitHub CLI (HKLM\...\{D4324C5E-AB13-410F-A9E4-55941077447E}) (Version: 2.66.1 - GitHub, Inc.)
GitHub Desktop (HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\GitHubDesktop) (Version: 3.4.19-beta2 - GitHub, Inc.)
GitHub Desktop Deployment Tool (HKLM-x32\...\{CF0DD8D9-757E-4269-A15D-D8A8B392BA76}) (Version: 3.4.17.0 - GitHub, Inc.)
GitKraken (HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\gitkraken) (Version: 11.0.0 - GitKraken)
GNU Privacy Guard (HKLM-x32\...\GnuPG) (Version: 2.4.7 - The GnuPG Project)
GnuWin32: Bzip2-1.0.5 (HKLM-x32\...\Bzip2-1.0.5_is1) (Version: 1.0.5 - GnuWin32)
GnuWin32: sed-4.2.1 (HKLM-x32\...\sed-4.2.1_is1) (Version: 4.2.1 - GnuWin)
Go Programming Language amd64 go1.24.1 (HKLM\...\{BBD247E5-0906-474C-9D90-E1B6C5874D58}) (Version: 1.24.1 - hxxps://go.dev)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 135.0.7049.97 - Google LLC)
Google Drive (HKLM\...\{6BBAE539-2232-434A-A4E5-9A33560C6283}) (Version: 107.0.3.0 - Google LLC)
Gpg4win (4.4.0) (HKLM-x32\...\Gpg4win) (Version: 4.4.0 - The Gpg4win Project)
Helix Core Apps (HKLM\...\{6DD88189-B1A1-4504-AE43-27CC7C149E6F}) (Version: 242.44.3 - Perforce Software) Hidden
Helix Core Apps (HKLM-x32\...\{878dc9b9-ce4f-4741-bff3-e147747c5056}) (Version: 242.44.3 - Perforce Software, Inc.)
heroku (HKLM-x32\...\heroku) (Version: 10.0.0 - Heroku)
icecap_collection_neutral (HKLM-x32\...\{4B62A3C5-9A7C-46B8-8675-43A5FBFB92B1}) (Version: 17.14.35906 - Microsoft Corporation) Hidden
icecap_collection_x64 (HKLM\...\{A8260553-41C8-45AA-AD27-23286A83ACDA}) (Version: 17.14.35828 - Microsoft Corporation) Hidden
icecap_collectionresources (HKLM-x32\...\{7CA1A3B6-7C60-4AD5-84E7-2E82148E5805}) (Version: 17.14.35906 - Microsoft Corporation) Hidden
icecap_collectionresourcesx64 (HKLM-x32\...\{FA506937-E98A-4351-A1E4-0B8BF66E65BA}) (Version: 17.14.35828 - Microsoft Corporation) Hidden
iCloud Outlook (HKLM\...\{76DBE4BD-97A4-4657-A75F-4DA83272360F}) (Version: 15.3.0.138 - Apple Inc.)
IIS 10.0 Express (HKLM\...\{0F4F67F8-21E1-422D-B31C-B3800F4D6E36}) (Version: 10.0.10007 - Microsoft Corporation)
IIS Express Application Compatibility Database for x64 (HKLM\...\{08274920-8908-45c2-9258-8ad67ff77b09}.sdb) (Version:  - ) Hidden
IIS Express Application Compatibility Database for x86 (HKLM\...\{ad846bae-d44b-4722-abad-f7420e08bcd9}.sdb) (Version:  - ) Hidden
Incredibuild 10.22.0 (build 14477) (HKLM-x32\...\IncrediBuild) (Version:  - Incredibuild)
Incredibuild Manager 10.22.0 (Build 2089) (HKLM-x32\...\{61524C02-6703-46C2-A4E0-F93FAB8B3E98}) (Version: 10.22.0.2089 - Incredibuild Software Ltd.)
Intel® oneAPI DPC++/C++ Compiler (HKLM-x32\...\intel.oneapi.lin.dpcpp-cpp-compiler.product.2025.0.4) (Version: 2025.0.4 - Intel Corporation)
IntelliJ IDEA Community Edition 2024.3.3 (HKLM-x32\...\IntelliJ IDEA Community Edition 2024.3.3) (Version: 243.24978.46 - JetBrains s.r.o.)
IntelliTraceProfilerProxy (HKLM\...\{F8B9E8C8-61E8-4E9E-879D-F3F498AD0230}) (Version: 15.0.21225.01 - Microsoft Corporation) Hidden
IntelliTraceProfilerProxy (HKLM-x32\...\{C8891AD2-C223-45CD-A9BE-617A68923B61}) (Version: 15.0.21225.01 - Microsoft Corporation) Hidden
Java 8 Update 451 (64-bit) (HKLM\...\{71024AE4-039E-4CA4-87B4-2F64180451F0}) (Version: 8.0.4510.10 - Oracle Corporation)
Java SE Development Kit 8 Update 441 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180441}) (Version: 8.0.4410.7 - Oracle Corporation)
Java™ SE Development Kit 23.0.2 (64-bit) (HKLM\...\{8EFDE921-88A2-5D0A-A920-0AB07B2A3181}) (Version: 23.0.2.0 - Oracle Corporation)
JetBrains dotCover 2025.1 (HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\{4056121e-0f3e-59ac-bf20-2058027a393f}) (Version: 2025.1 - JetBrains s.r.o.)
JetBrains dotMemory 2025.1 (HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\{9edcf1cd-ed5c-5960-bb6e-9267e67d8b36}) (Version: 2025.1 - JetBrains s.r.o.)
JetBrains dotPeek 2025.1 (HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\{6daf1ff4-aaaf-531a-a785-caf77fcb9d4d}) (Version: 2025.1 - JetBrains s.r.o.)
JetBrains dotTrace 2025.1 (HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\{78253502-9793-557c-93bb-22a1c1acbef8}) (Version: 2025.1 - JetBrains s.r.o.)
JetBrains ETW Host Service (x64) (HKLM\...\{63578ACB-1FE5-4040-A6B2-3D0880008F8E}) (Version: 16.43.0 - JetBrains s.r.o.)
JetBrains ReSharper in Visual Studio Community 2022 (HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\{163b839e-2b06-5722-8534-d370c6d6e90c}) (Version: 2025.1 - JetBrains s.r.o.)
JetBrains ReSharper in Visual Studio Community 2022 Preview (HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\{f7abecff-8fd0-5942-aed1-64d34d99ca52}) (Version: 2025.1 - JetBrains s.r.o.)
JetBrains Toolbox (HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\Toolbox) (Version: 2.6.1.40902 - JetBrains)
Kits Configuration Installer (HKLM-x32\...\{35E2363B-1E20-171D-89C8-99232C9162A1}) (Version: 10.1.26100.2454 - Microsoft) Hidden
Language Pack 3.2-1 (HKLM\...\Language Pack 3.2-1) (Version: 3.2-1 - EnterpriseDB)
LLVM (HKLM-x32\...\LLVM) (Version: 19.1.7 - LLVM)
LM Studio 0.3.15-beta (HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\c6dbe996-22a9-5998-b542-7abe33da3b83) (Version: 0.3.15-beta - LM Studio)
LT Browser (HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\Lambdatest LT Browser) (Version: 107.0.5304.110 - The LT Browser Authors)
Microsoft .NET 7.0 Templates 7.0.410 (x64) (HKLM\...\{178EDB94-B6ED-4597-94F1-708349DD7B1E}) (Version: 28.13.2919 - Microsoft Corporation) Hidden
Microsoft .NET 8.0 Templates 8.0.406 (x64) (HKLM\...\{B0264F57-A2E3-4D42-B052-4B5CB78FC1FD}) (Version: 32.11.17385 - Microsoft Corporation) Hidden
Microsoft .NET 8.0 Templates 8.0.408 (x64) (HKLM\...\{CF58DD24-1862-4940-B4CA-9C920D755134}) (Version: 32.11.59749 - Microsoft Corporation) Hidden
Microsoft .NET 9.0 Templates 9.0.102 (x64) (HKLM\...\{D495A8C6-191D-4CE2-91B3-05AC7A46052F}) (Version: 36.8.53199 - Microsoft Corporation) Hidden
Microsoft .NET 9.0 Templates 9.0.200 (x64) (HKLM\...\{0A4F0359-B0D3-4726-A798-B2E87DD7EA38}) (Version: 36.9.50256 - Microsoft Corporation) Hidden
Microsoft .NET 9.0 Templates 9.0.202 (x64) (HKLM\...\{3F8190BF-74E5-4C65-B853-836701C3029E}) (Version: 36.9.59058 - Microsoft Corporation) Hidden
Microsoft .NET 9.0 Templates 9.0.203 (x64) (HKLM\...\{3B38BCC0-6DDC-4E88-9253-6945EAEC2D8F}) (Version: 36.9.26685 - Microsoft Corporation) Hidden
Microsoft .NET AppHost Pack - 7.0.20 (x64) (HKLM\...\{1EE86997-97BB-4CC5-A5C9-824D4A8C4C33}) (Version: 56.80.15184 - Microsoft Corporation) Hidden
Microsoft .NET AppHost Pack - 7.0.20 (x64_arm) (HKLM\...\{004C6218-4F46-4ECD-9825-0AF4AB2299A8}) (Version: 56.80.15184 - Microsoft Corporation) Hidden
Microsoft .NET AppHost Pack - 7.0.20 (x64_arm64) (HKLM\...\{866F4150-A781-40E0-80E7-5DF0E4F36BDD}) (Version: 56.80.15184 - Microsoft Corporation) Hidden
Microsoft .NET AppHost Pack - 7.0.20 (x64_x86) (HKLM\...\{B241FC20-E3D2-4597-8B98-9B784C6526A0}) (Version: 56.80.15184 - Microsoft Corporation) Hidden
Microsoft .NET AppHost Pack - 8.0.13 (x64) (HKLM\...\{47D13968-BA6E-406D-BF16-CFF9281902C4}) (Version: 64.52.27977 - Microsoft Corporation) Hidden
Microsoft .NET AppHost Pack - 8.0.13 (x64_arm64) (HKLM\...\{B9CDB9AA-28B9-4E57-9104-51DA03F2423E}) (Version: 64.52.27977 - Microsoft Corporation) Hidden
Microsoft .NET AppHost Pack - 8.0.13 (x64_x86) (HKLM\...\{4725B2AA-4869-48E0-B954-D88AC2C5E231}) (Version: 64.52.27977 - Microsoft Corporation) Hidden
Microsoft .NET AppHost Pack - 8.0.15 (x64) (HKLM\...\{45524620-C06B-47C6-B9AE-7D4795A6087B}) (Version: 64.60.31149 - Microsoft Corporation) Hidden
Microsoft .NET AppHost Pack - 8.0.15 (x64_arm64) (HKLM\...\{455253F4-8363-4F68-B0EB-2E68C2FA7849}) (Version: 64.60.31149 - Microsoft Corporation) Hidden
Microsoft .NET AppHost Pack - 8.0.15 (x64_x86) (HKLM\...\{9E2DEF1C-86F1-4F27-B1E8-6A55EA106ADF}) (Version: 64.60.31149 - Microsoft Corporation) Hidden
Microsoft .NET AppHost Pack - 9.0.1 (x64) (HKLM\...\{051ACC3C-E8A1-4409-BFFE-56460E2EDA06}) (Version: 72.4.26282 - Microsoft Corporation) Hidden
Microsoft .NET AppHost Pack - 9.0.1 (x64_arm64) (HKLM\...\{8C97B5D8-824D-41C1-8F1D-B70B1708D3DB}) (Version: 72.4.26282 - Microsoft Corporation) Hidden
Microsoft .NET AppHost Pack - 9.0.1 (x64_x86) (HKLM\...\{ABB11EA1-8B33-4442-BF21-1CBFC3607489}) (Version: 72.4.26282 - Microsoft Corporation) Hidden
Microsoft .NET AppHost Pack - 9.0.2 (x64) (HKLM\...\{E739BB2D-9095-4714-9BEE-99C759BCD281}) (Version: 72.8.27978 - Microsoft Corporation) Hidden
Microsoft .NET AppHost Pack - 9.0.2 (x64_arm64) (HKLM\...\{F702E68A-8708-45D9-B7B6-E59C20395CFA}) (Version: 72.8.27978 - Microsoft Corporation) Hidden
Microsoft .NET AppHost Pack - 9.0.2 (x64_x86) (HKLM\...\{D418EC98-B5AE-413D-88C4-54FC4CFAD2B1}) (Version: 72.8.27978 - Microsoft Corporation) Hidden
Microsoft .NET AppHost Pack - 9.0.3 (x64) (HKLM\...\{9C4FB739-BFFA-4E0F-B07B-62140986CD13}) (Version: 72.12.29501 - Microsoft Corporation) Hidden
Microsoft .NET AppHost Pack - 9.0.3 (x64_arm64) (HKLM\...\{0BE353FE-7AE5-4F45-B4F9-85940FC0B29B}) (Version: 72.12.29501 - Microsoft Corporation) Hidden
Microsoft .NET AppHost Pack - 9.0.3 (x64_x86) (HKLM\...\{BCE8A91A-C009-4F93-8204-032AFEC2B826}) (Version: 72.12.29501 - Microsoft Corporation) Hidden
Microsoft .NET AppHost Pack - 9.0.4 (x64) (HKLM\...\{7276C992-27AE-47B3-8746-5EBB6B4A54A9}) (Version: 72.16.31125 - Microsoft Corporation) Hidden
Microsoft .NET AppHost Pack - 9.0.4 (x64_arm64) (HKLM\...\{CCD434AA-5EF8-459A-8298-2F288EA82192}) (Version: 72.16.31125 - Microsoft Corporation) Hidden
Microsoft .NET AppHost Pack - 9.0.4 (x64_x86) (HKLM\...\{D84F7645-D7A8-4D7B-AAC2-57ADE9F796BB}) (Version: 72.16.31125 - Microsoft Corporation) Hidden
Microsoft .NET CoreRuntime For CoreCon (HKLM-x32\...\{48A8F171-52F2-372B-8414-EA50617708BE}) (Version: 1.0.0.0 - Microsoft Corporation) Hidden
Microsoft .NET CoreRuntime SDK (HKLM-x32\...\{12702494-9E6A-3F5E-9441-2B7D258A639B}) (Version: 1.1.27004.0 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.6 Targeting Pack (HKLM-x32\...\{2CC6A4A7-AAC2-46C9-9DBB-3727B5954F65}) (Version: 4.6.00081 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.6.2 Targeting Pack (ENU) (HKLM-x32\...\{C80951BD-6904-474F-BBC5-03A6C777F37C}) (Version: 4.6.01590 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.6.2 Targeting Pack (HKLM-x32\...\{A18D4C2A-07A8-40E4-9797-DD324E6EA4FC}) (Version: 4.6.01590 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.7.1 Doc Redirected Targeting Pack (ENU) (HKLM-x32\...\{8F5A2690-2EBD-4017-B995-C522C9204312}) (Version: 4.7.02558 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.7.1 Targeting Pack (HKLM-x32\...\{5686C5E9-A3B3-451E-A2EA-4C246CDE5CC9}) (Version: 4.7.02558 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.7.2 Targeting Pack (ENU) (HKLM-x32\...\{B517DBD3-B542-4FC8-9957-FFB2C3E65D1D}) (Version: 4.7.03062 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.7.2 Targeting Pack (HKLM-x32\...\{1784A8CD-F7FE-47E2-A87D-1F31E7242D0D}) (Version: 4.7.03062 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.8 SDK (HKLM-x32\...\{949C0535-171C-480F-9CF4-D25C9E60FE88}) (Version: 4.8.03928 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.8 Targeting Pack (ENU) (HKLM-x32\...\{A4EA9EE5-7CFF-4C5F-B159-B9B4E5D2BDE2}) (Version: 4.8.03761 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.8 Targeting Pack (HKLM-x32\...\{BAAF5851-0759-422D-A1E9-90061B597188}) (Version: 4.8.03761 - Microsoft Corporation) Hidden
Microsoft .NET Framework Cumulative Intellisense Pack for Visual Studio (ENU) (HKLM-x32\...\{1A9C3A1A-566B-4CFA-8B27-71FC623963BE}) (Version: 4.8.09037 - Microsoft Corporation) Hidden
Microsoft .NET Host - 6.0.36 (x64) (HKLM\...\{D6932D97-36F1-40B8-9CDC-CA8365B21000}) (Version: 48.144.23141 - Microsoft Corporation) Hidden
Microsoft .NET Host - 7.0.20 (x64) (HKLM\...\{EE5EB03B-D65C-4991-848E-2C6E024326DB}) (Version: 56.80.15184 - Microsoft Corporation) Hidden
Microsoft .NET Host - 9.0.4 (x64) (HKLM\...\{9E5495E6-3E9B-41FD-8D4E-2BC1EA61A696}) (Version: 72.16.31125 - Microsoft Corporation) Hidden
Microsoft .NET Host - 9.0.4 (x86) (HKLM-x32\...\{0B031E11-168E-4188-B52E-AA436425D9FA}) (Version: 72.16.31125 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 6.0.36 (x64) (HKLM\...\{A9E32B25-994B-4856-A12B-0EBED3050410}) (Version: 48.144.23141 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 7.0.20 (x64) (HKLM\...\{B0FC828F-678C-4868-9B5B-99639758E6F3}) (Version: 56.80.15184 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 9.0.1 (x64) (HKLM\...\{E73EA6EC-66AB-4756-9B4E-98AF5D711C69}) (Version: 72.4.26282 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 9.0.2 (x64) (HKLM\...\{ADAE770F-C18C-47C2-9CA3-B67AC3789684}) (Version: 72.8.27978 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 9.0.2 (x86) (HKLM-x32\...\{8554D0AB-5FB8-4BF8-BCF8-1ADF0BAC3B26}) (Version: 72.8.27978 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 9.0.3 (x64) (HKLM\...\{0FD489DC-A3E9-4F57-9770-812CD1059FA5}) (Version: 72.12.29501 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 9.0.4 (x64) (HKLM\...\{1B002B5C-8CD6-4633-B543-2CDD484064A8}) (Version: 72.16.31125 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 9.0.4 (x86) (HKLM-x32\...\{1C61E573-6FAE-4063-87CB-294FFD037971}) (Version: 72.16.31125 - Microsoft Corporation) Hidden
Microsoft .NET Native SDK (HKLM-x32\...\{EF0C772D-F5E3-36D0-BDAB-FD378533CD40}) (Version: 15.0.24211.07 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.36 (x64) (HKLM\...\{C912E33F-956A-4921-9F55-CC11AE8F09AF}) (Version: 48.144.23141 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 7.0.20 (x64) (HKLM\...\{221BB52A-B763-4C9D-AA62-4B0B6C9AAD62}) (Version: 56.80.15184 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.13 (x64) (HKLM\...\{C7FB4EEE-D481-4AC1-B113-120A9124FE50}) (Version: 64.52.27977 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.13 (x86) (HKLM-x32\...\{ECB0072B-EAFB-4C86-846A-26C4AA8D3094}) (Version: 64.52.27977 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.15 (x64) (HKLM\...\{8731E6E3-AF96-4515-ACEC-DBFB3DF55292}) (Version: 64.60.31149 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.15 (x86) (HKLM-x32\...\{5BC8AE9F-2277-483E-BF7E-C70EF841641D}) (Version: 64.60.31149 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 9.0.1 (x64) (HKLM\...\{ABE5ADF0-4D1C-4AB3-9526-9635B0357DD1}) (Version: 72.4.26282 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 9.0.2 (x64) (HKLM\...\{0EA9922E-4285-4927-B2CE-8698286A1683}) (Version: 72.8.27978 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 9.0.2 (x86) (HKLM-x32\...\{7F57DEF0-F6B9-437F-9641-B6E8AE2FFCBF}) (Version: 72.8.27978 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 9.0.3 (x64) (HKLM\...\{102DCD41-F00B-484D-9D6B-5D2919D8FCF8}) (Version: 72.12.29501 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 9.0.4 (x64) (HKLM\...\{8BAC55BB-CCAC-428E-BCB8-C00015D37D89}) (Version: 72.16.31125 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 9.0.4 (x86) (HKLM-x32\...\{A5B1E2C0-5607-451F-85C5-A13C6D73F24A}) (Version: 72.16.31125 - Microsoft Corporation) Hidden
Microsoft .NET SDK 7.0.410 (x64) (HKLM-x32\...\{34a201b9-cccf-44b1-812c-c9e5443fd8f4}) (Version: 7.4.1024.27207 - Microsoft Corporation)
Microsoft .NET SDK 9.0.102 (x64) (HKLM-x32\...\{f38c80ed-7c21-42c4-a9d2-58226fd818b3}) (Version: 9.1.224.61103 - Microsoft Corporation)
Microsoft .NET SDK 9.0.200 (x64) from Visual Studio (HKLM\...\{B381EF1A-6981-4B8C-84E6-A142DAF6C055}) (Version: 9.2.25.7312 - Microsoft Corporation)
Microsoft .NET SDK 9.0.202 (x64) (HKLM-x32\...\{00d0fc3a-52db-40ce-81f3-15f5a76bf724}) (Version: 9.2.225.16114 - Microsoft Corporation)
Microsoft .NET SDK 9.0.203 (x64) from Visual Studio (HKLM\...\{2A7082A8-99DB-4177-A9B5-DB3944A581FD}) (Version: 9.2.325.16509 - Microsoft Corporation)
Microsoft .NET Standard Targeting Pack - 2.1.0 (x64) (HKLM\...\{A7036CFB-B403-4598-85FF-D397ABB88173}) (Version: 24.0.28113 - Microsoft Corporation) Hidden
Microsoft .NET Targeting Pack - 7.0.20 (x64) (HKLM\...\{7C8005BF-9A78-4548-9680-1C04500D689D}) (Version: 56.80.15184 - Microsoft Corporation) Hidden
Microsoft .NET Targeting Pack - 8.0.13 (x64) (HKLM\...\{001F0B8D-0A4D-4DA4-A794-49488FDAC4C4}) (Version: 64.52.27977 - Microsoft Corporation) Hidden
Microsoft .NET Targeting Pack - 8.0.13 (x86) (HKLM-x32\...\{58A03E75-687E-47F1-8417-EEB26FE3D96A}) (Version: 64.52.27977 - Microsoft Corporation) Hidden
Microsoft .NET Targeting Pack - 8.0.15 (x64) (HKLM\...\{187157C4-A642-4735-8870-FD4BC6F4DDA0}) (Version: 64.60.31149 - Microsoft Corporation) Hidden
Microsoft .NET Targeting Pack - 8.0.15 (x86) (HKLM-x32\...\{A7FBFD3B-561B-49F2-AAE7-A3DAF52ADD6E}) (Version: 64.60.31149 - Microsoft Corporation) Hidden
Microsoft .NET Targeting Pack - 9.0.1 (x64) (HKLM\...\{7D5553AE-1EBD-4494-A358-500830C66ADB}) (Version: 72.4.26282 - Microsoft Corporation) Hidden
Microsoft .NET Targeting Pack - 9.0.2 (x64) (HKLM\...\{3F3F0A09-23DB-4407-9F09-D5BC62EE4819}) (Version: 72.8.27978 - Microsoft Corporation) Hidden
Microsoft .NET Targeting Pack - 9.0.2 (x86) (HKLM-x32\...\{6520932D-C0C4-4131-BDE8-89CDF058279F}) (Version: 72.8.27978 - Microsoft Corporation) Hidden
Microsoft .NET Targeting Pack - 9.0.3 (x64) (HKLM\...\{FCD0BC0C-B9CC-4578-A757-FA44F4052B2F}) (Version: 72.12.29501 - Microsoft Corporation) Hidden
Microsoft .NET Targeting Pack - 9.0.4 (x64) (HKLM\...\{ED7A46E9-DA4F-46B4-9381-D55DCB172757}) (Version: 72.16.31125 - Microsoft Corporation) Hidden
Microsoft .NET Targeting Pack - 9.0.4 (x86) (HKLM-x32\...\{1F3B928B-FF70-46A1-8159-363D6F9778A3}) (Version: 72.16.31125 - Microsoft Corporation) Hidden
Microsoft .NET Toolset 7.0.410 (x64) (HKLM\...\{3BD81D32-906F-47B9-8653-ED55C039340A}) (Version: 28.10.35687 - Microsoft Corporation) Hidden
Microsoft .NET Toolset 9.0.102 (x64) (HKLM\...\{6CE86543-9CF6-4C50-A587-DD4535020960}) (Version: 36.8.36815 - Microsoft Corporation) Hidden
Microsoft .NET Toolset 9.0.200 (x64) (HKLM\...\{95DFE588-1425-4DB1-97D6-A420584067AC}) (Version: 36.9.17488 - Microsoft Corporation) Hidden
Microsoft .NET Toolset 9.0.202 (x64) (HKLM\...\{B1D3EF3E-62D8-431F-BDBA-0C8BE6AC4303}) (Version: 36.9.59058 - Microsoft Corporation) Hidden
Microsoft .NET Toolset 9.0.203 (x64) (HKLM\...\{E49F8029-5E27-4C68-99E4-A27FD8EF6D60}) (Version: 36.9.59453 - Microsoft Corporation) Hidden
Microsoft 365 Apps for business - en-us (HKLM\...\O365BusinessRetail - en-us) (Version: 16.0.18623.20208 - Microsoft Corporation)
Microsoft 365 Apps for enterprise - en-us (HKLM\...\O365ProPlusRetail - en-us) (Version: 16.0.18623.20208 - Microsoft Corporation)
Microsoft ASP.NET Core 7.0.20 Shared Framework (x64) (HKLM\...\{BD401329-F877-391C-9E5A-FEB423C5A196}) (Version: 7.0.20.24269 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 7.0.20 Targeting Pack (x64) (HKLM\...\{87DB9F7C-C794-39A6-93FE-D72AF734237A}) (Version: 7.0.20.24269 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 8.0.13 Shared Framework (x64) (HKLM\...\{11C645C7-83C5-3600-BFAA-2FD41AB2EF80}) (Version: 8.0.13.25066 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 8.0.13 Shared Framework (x86) (HKLM-x32\...\{AA3167D2-F77F-3113-875D-76DD876A2D1F}) (Version: 8.0.13.25066 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 8.0.13 Targeting Pack (x64) (HKLM\...\{A3679A91-6AFF-3E5A-A8A0-0F5F31755450}) (Version: 8.0.13.25066 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 8.0.13 Targeting Pack (x86) (HKLM-x32\...\{182FBEFC-1A8B-3CA6-9728-660FDDE97EE1}) (Version: 8.0.13.25066 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 8.0.15 Shared Framework (x64) (HKLM\...\{AB364897-FF45-3A19-9D65-24E56F4B4EFD}) (Version: 8.0.15.25165 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 8.0.15 Shared Framework (x86) (HKLM-x32\...\{59878A04-8C3E-3DE2-845C-812975388ADF}) (Version: 8.0.15.25165 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 8.0.15 Targeting Pack (x64) (HKLM\...\{9378101D-0C80-32D6-8A8B-88D4BB49DB10}) (Version: 8.0.15.25165 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 8.0.15 Targeting Pack (x86) (HKLM-x32\...\{0618255D-83BF-3C6E-9E63-0680D4892A58}) (Version: 8.0.15.25165 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 9.0.1 Shared Framework (x64) (HKLM\...\{332C3F8D-8B59-3ED7-86F4-F052497D83A1}) (Version: 9.0.1.24610 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 9.0.1 Targeting Pack (x64) (HKLM\...\{99053FAE-3A7C-381D-948A-6F614864781D}) (Version: 9.0.1.24610 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 9.0.2 Shared Framework (x64) (HKLM\...\{EF156D35-7E36-3D14-AD76-72DAEF8629E1}) (Version: 9.0.2.25067 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 9.0.2 Shared Framework (x86) (HKLM-x32\...\{D4D5C722-3EC1-3F06-9948-540B7C6E59A9}) (Version: 9.0.2.25067 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 9.0.2 Targeting Pack (x64) (HKLM\...\{88110011-D1AB-3FBE-80FB-CCCB74077DEA}) (Version: 9.0.2.25067 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 9.0.2 Targeting Pack (x86) (HKLM-x32\...\{AD6AFCEE-5F49-3FC6-BB4D-D0A9E76E582D}) (Version: 9.0.2.25067 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 9.0.3 Shared Framework (x64) (HKLM\...\{1C056265-B962-3D4C-9049-AD0250BD024D}) (Version: 9.0.3.25112 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 9.0.3 Targeting Pack (x64) (HKLM\...\{60C712CC-7335-3B48-9072-261601C12CDD}) (Version: 9.0.3.25112 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 9.0.4 Shared Framework (x64) (HKLM\...\{7216B32E-7D1F-371D-9CF6-0268EE8E4632}) (Version: 9.0.4.25164 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 9.0.4 Shared Framework (x86) (HKLM-x32\...\{BAB9AE3E-6994-3A13-BEE2-EAC9B9E538CA}) (Version: 9.0.4.25164 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 9.0.4 Targeting Pack (x64) (HKLM\...\{E903E78C-E41C-348B-AF22-8896697A43E9}) (Version: 9.0.4.25164 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 9.0.4 Targeting Pack (x86) (HKLM-x32\...\{69510E6C-D8FA-3652-A82A-F606ABF559E1}) (Version: 9.0.4.25164 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core Module for IIS Express (HKLM\...\{FAFEE5E3-E00A-4CE8-B495-8F66A5FAB236}) (Version: 12.2.18292.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core Module V2 for IIS Express (HKLM\...\{F0E9CE77-BF19-4BBE-B228-A42F782F82E4}) (Version: 17.0.22116.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET Diagnostic Pack for Visual Studio (HKLM-x32\...\{3D3F8A26-4D5B-3B15-91F6-73871A57FF1D}) (Version: 17.14.54.18477 - Microsoft Corporation) Hidden
Microsoft ASP.NET Packages for MVC 4 - ENU (HKLM-x32\...\{A5C1FECF-A37E-3C96-9C4C-BD7164956C46}) (Version: 17.0.40305.0 - Microsoft Corporation) Hidden
Microsoft ASP.NET Web Tools Packages 17.0 - ENU (HKLM-x32\...\{987786F9-7B57-3254-9FEA-2FF662C784B1}) (Version: 17.0.40305.0 - Microsoft Corporation) Hidden
Microsoft Azure Authoring Tools - v2.9.7 (HKLM\...\{90462BD2-DF5B-449C-A401-FCC1DC264E4E}) (Version: 2.9.8999.45 - Microsoft Corporation)
Microsoft Azure CLI (32-bit) (HKLM-x32\...\{FFD0B86A-E995-4542-9E63-DE90188AF999}) (Version: 2.70.0 - Microsoft Corporation)
Microsoft Azure Compute Emulator - v2.9.7 (HKLM\...\{04CA054C-2F40-44B0-8610-8D51EC9444FE}) (Version: 2.9.8999.43 - Microsoft Corporation) Hidden
Microsoft Azure Compute Emulator - v2.9.7 (HKLM\...\Microsoft Azure Compute Emulator - v2.9.7) (Version: 2.9.8999.43 - Microsoft Corporation)
Microsoft Azure Libraries for .NET – v2.9 (HKLM\...\{7D1D9444-B5EA-4587-A81D-47377003124F}) (Version: 3.0.2404.2502 - Microsoft Corporation)
Microsoft Azure PowerShell - April 2018 (HKLM\...\{3BA7CAA9-97BA-4528-B7E1-B640910BB149}) (Version: 5.7.0.18831 - Microsoft Corporation)
Microsoft Command Line Utilities 15 for SQL Server (HKLM\...\{41C0DB18-1790-465E-B0DD-D9CAA35CACBE}) (Version: 15.0.1300.359 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 136.0.3240.29 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 136.0.3240.29 - Microsoft Corporation) Hidden
Microsoft Exchange Web Services Managed API 2.1 (HKLM-x32\...\{24CA683D-8174-4EBF-AD4D-3F2DD7814716}) (Version: 15.0.847.30 - Microsoft Corporation) Hidden
Microsoft HTML Help Workshop Package (HKLM-x32\...\{49F425DD-2A94-4C75-94BE-4EFF866E608B}) (Version: 4.74.8702 - Microsoft Corporation) Hidden
Microsoft NetStandard SDK (HKLM-x32\...\{737FDDA7-B944-4CB5-92D9-3D56373BD301}) (Version: 15.0.51105 - Microsoft Corporation) Hidden
Microsoft ODBC Driver 17 for SQL Server (HKLM\...\{0E0F96AC-80DE-4400-A40C-429D63293651}) (Version: 17.10.6.1 - Microsoft Corporation)
Microsoft Office 32-bit Components 2013 (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing (English) 2013 (HKLM\...\{90150000-002C-0409-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - English (HKLM\...\{90150000-001F-0409-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Español (HKLM\...\{90150000-001F-0C0A-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Shared 32-bit MUI (English) 2013 (HKLM\...\{90150000-00C1-0409-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (English) 2013 (HKLM\...\{90150000-006E-0409-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Shared Setup Metadata MUI (English) 2013 (HKLM\...\{90150000-0115-0409-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 25.065.0406.0002 - Microsoft Corporation)
Microsoft Portable Library Multi-Targeting Pack (HKLM-x32\...\{0B1997C6-BB9B-3614-B2D5-87D126B2024A}) (Version: 17.0.35716.53 - Microsoft Corporation) Hidden
Microsoft Portable Library Multi-Targeting Pack Language Pack - enu (HKLM-x32\...\{E6750C4A-3E86-3507-B239-1D28890FEF69}) (Version: 17.0.35716.53 - Microsoft Corporation) Hidden
Microsoft SharePoint Designer 2013 (HKLM\...\{90150000-0017-0000-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft SharePoint Designer 2013 (HKLM\...\Office15.SharePointDesigner) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft SharePoint Designer MUI (English) 2013 (HKLM\...\{90150000-0017-0409-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft SQL Server 2019 LocalDB  (HKLM\...\{E5B3A478-C4C3-49E3-8384-A12D4B2008D4}) (Version: 15.0.4382.1 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2019 (HKLM\...\{5BC7E9EB-13E8-45DB-8A60-F2481FEB4595}) (Version: 15.0.2000.5 - Microsoft Corporation)
Microsoft Teams Meeting Add-in for Microsoft Office (HKLM\...\{A7AB73A3-CB10-4AA5-9D38-6AEFFBDE4C91}) (Version: 1.25.04401 - Microsoft)
Microsoft TestPlatform SDK Local Feed (HKLM-x32\...\{7F86DEBA-AF7D-43F2-8312-DBCB65F116A9}) (Version: 17.10.0.9037153 - Microsoft) Hidden
Microsoft UniversalWindowsPlatform SDK (HKLM-x32\...\{C756420B-C91C-4410-8092-F49C24CEF594}) (Version: 15.9.16 - Microsoft) Hidden
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.44.34823 (HKLM-x32\...\{26f4a2ee-6dfa-4c21-995a-85cc10f5e2fa}) (Version: 14.44.34823.2 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.34823 (HKLM-x32\...\{a94cf820-e827-436d-84a5-19f086747a5a}) (Version: 14.44.34823.2 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.44.34823 (HKLM\...\{33B7824E-C5BF-43B6-92D2-607F959C7712}) (Version: 14.44.34823 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Debug Runtime - 14.42.34438 (HKLM\...\{AABDA62C-7603-456F-B1A3-6A6585D3F2AC}) (Version: 14.42.34438 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.44.34823 (HKLM\...\{3CA2013B-A340-4739-B3C9-3A355006F9B1}) (Version: 14.44.34823 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.44.34823 (HKLM-x32\...\{B8824176-BFA1-4C43-8265-46E2417AD66A}) (Version: 14.44.34823 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Debug Runtime - 14.42.34438 (HKLM-x32\...\{746E9BE3-ED04-4247-A54C-A2BE25CB59FD}) (Version: 14.42.34438 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.44.34823 (HKLM-x32\...\{792A8636-9620-4B57-B158-70E2E49F0043}) (Version: 14.44.34823 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\{C931A1C6-A7BF-3737-874A-818881A37E1B}) (Version: 10.0.60915 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.60910 - Microsoft Corporation)
Microsoft Visual Studio 2019 Diagnostic Tools - amd64 (HKLM\...\{A5553FBA-A0D1-43BF-8EA6-A31E4165DEF4}) (Version: 16.0.35323 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2019 Performance Collection Tools - ENU (HKLM\...\{9592EC40-6D6C-4A58-967B-B6DCCA0306E9}) (Version: 16.0.35323 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2019 Performance Collection Tools (HKLM\...\{A34CFE66-FB38-4614-AB81-22359354D7BF}) (Version: 16.0.35323 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2019 Remote Debugger (HKLM\...\{4DBE3619-4520-3482-A9C5-2C0B71C778EB}) (Version: 16.0.35323 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2019 Remote Debugger (HKLM\...\{73D3223E-8BE0-363D-B2D0-9F896CEA30C1}) (Version: 16.0.35323 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2019 VsGraphics Remote Dependencies (HKLM\...\{F744FD17-96D6-3F98-9267-C94D7DACCD89}) (Version: 16.0.35323 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2019 VsGraphics Remote Dependencies- ENU (HKLM\...\{C6B423B2-AA6F-35EC-93B0-4D333693BAF8}) (Version: 16.0.35323 - Microsoft Corporation) Hidden
Microsoft Visual Studio Code (User) (HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\{771FD6B0-FA20-440A-A002-3B3BAC16DC50}_is1) (Version: 1.98.2 - Microsoft Corporation)
Microsoft Visual Studio Code Insiders (HKLM\...\{1287CAD5-7C8D-410D-88B9-0D1EE4A83FF2}_is1) (Version: 1.100.0 - Microsoft Corporation)
Microsoft Visual Studio Installer (HKLM\...\{6F320B93-EE3C-4826-85E0-ADF79F8D4C61}) (Version: 3.14.1041.44784 - Microsoft Corporation)
Microsoft Visual Studio Setup Configuration (HKLM-x32\...\{D07657AA-968C-4629-BD6C-1B52AF825EA7}) (Version: 3.12.2140.44225 - Microsoft Corporation) Hidden
Microsoft Visual Studio Setup WMI Provider (HKLM-x32\...\{49727420-70BA-4495-9405-31F8D711CB5A}) (Version: 3.12.2140.44225 - Microsoft Corporation) Hidden
Microsoft Web Deploy 4.0 (HKLM\...\{DE4FFB86-1944-4273-B040-92E920BD6861}) (Version: 10.0.9419 - Microsoft Corporation)
Microsoft Windows Communication Foundation Diagnostic Pack for x86 (HKLM-x32\...\{47222591-AB9A-3771-A905-E2D58D8C6A42}) (Version: 17.14.35828 - Microsoft) Hidden
Microsoft Windows Desktop Runtime - 6.0.36 (x64) (HKLM\...\{61D4736B-3325-4D4A-BD41-8BD206C6A86E}) (Version: 48.144.23186 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.36 (x64) (HKLM-x32\...\{0532b8f2-12d7-43de-95fc-7b87006758a8}) (Version: 6.0.36.34217 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 7.0.20 (x64) (HKLM\...\{72C29BED-666F-4E5E-BC49-DF44C890742E}) (Version: 56.80.15245 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.13 (x64) (HKLM\...\{852F821B-340A-4473-BA94-8FAFD5AFFE85}) (Version: 64.52.27986 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.13 (x86) (HKLM-x32\...\{F2EAB264-A8ED-419C-8714-A897DC25D755}) (Version: 64.52.27986 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.15 (x64) (HKLM\...\{0E4A7820-FDA4-4250-B7AC-E7A2F7B43B64}) (Version: 64.60.31203 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.15 (x86) (HKLM-x32\...\{81F95A7F-AD99-4C29-98B0-423B3CF41F49}) (Version: 64.60.31203 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 9.0.1 (x64) (HKLM\...\{BF2E27B7-89B1-4D5B-8D06-18FEFC91A8CB}) (Version: 72.4.26276 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 9.0.2 (x64) (HKLM\...\{C8D69A6F-6E66-4FCE-834E-31BAD63917B0}) (Version: 72.8.27988 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 9.0.2 (x86) (HKLM-x32\...\{254BD949-20BE-41A3-9DD7-37897018B6F7}) (Version: 72.8.27988 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 9.0.3 (x64) (HKLM\...\{E4F4C068-697F-4148-8CDA-738802A3A83A}) (Version: 72.12.29522 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 9.0.4 (x64) (HKLM\...\{6D5792BF-708C-485A-A59C-E38806AE6EBB}) (Version: 72.16.31142 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 9.0.4 (x86) (HKLM-x32\...\{09384242-3B1F-44E3-BF6C-ECBD16902E36}) (Version: 72.16.31142 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Targeting Pack - 7.0.20 (x64) (HKLM\...\{644C2637-F41C-49AF-97A5-C7BE2979BB88}) (Version: 56.80.15245 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Targeting Pack - 8.0.13 (x64) (HKLM\...\{E728E225-D298-4779-A382-1E7B6AB9F0B9}) (Version: 64.52.27986 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Targeting Pack - 8.0.13 (x86) (HKLM-x32\...\{B5577372-CBF1-4A5D-B59E-3D78E9ABF11C}) (Version: 64.52.27986 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Targeting Pack - 8.0.15 (x64) (HKLM\...\{9DCF7CB7-DE0A-4ED3-B870-A0D06B9A83C4}) (Version: 64.60.31203 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Targeting Pack - 8.0.15 (x86) (HKLM-x32\...\{14207F5E-3D6F-4F84-9812-D30397A99A71}) (Version: 64.60.31203 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Targeting Pack - 9.0.1 (x64) (HKLM\...\{022F4ED5-C2B0-44A7-9909-003CA5749853}) (Version: 72.4.26276 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Targeting Pack - 9.0.2 (x64) (HKLM\...\{DA19E023-0D9D-4C67-B6FD-E955DD75657E}) (Version: 72.8.27988 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Targeting Pack - 9.0.2 (x86) (HKLM-x32\...\{A89309EF-8E05-421F-B130-BD4619748E89}) (Version: 72.8.27988 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Targeting Pack - 9.0.3 (x64) (HKLM\...\{17E364FB-ECDB-49FC-9EBC-7A84F8999B9D}) (Version: 72.12.29522 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Targeting Pack - 9.0.4 (x64) (HKLM\...\{FD924B4A-14E7-4F25-AD1A-764715F8E020}) (Version: 72.16.31142 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Targeting Pack - 9.0.4 (x86) (HKLM-x32\...\{1E6BC798-24BB-475B-8B84-EA70E9121B5D}) (Version: 72.16.31142 - Microsoft Corporation) Hidden
Microsoft Workflow Debugger v1.0 for amd64 (HKLM\...\{39500313-0493-350E-8D8C-4DDF3B635E27}) (Version: 17.0.35716 - Microsoft) Hidden
Microsoft Workflow Debugger v1.0 for x86 (HKLM-x32\...\{C0157AE0-8467-37F6-939F-0C69C9AE9B59}) (Version: 17.0.35716 - Microsoft) Hidden
Microsoft Workflow Diagnostic Pack for x64 (HKLM\...\{7BDB43F7-020E-328C-AE91-ED06A1DA7B32}) (Version: 17.13.35710 - Microsoft) Hidden
Microsoft.Android.Ref.35 (x64) (HKLM\...\{6CAFF17B-03BF-45A1-B887-0527FF745736}) (Version: 35.0.39.0 - Microsoft Corporation) Hidden
Microsoft.Android.Runtime.35.android-arm (x64) (HKLM\...\{EAC048C8-91E4-4722-8055-5CE53311C3CA}) (Version: 35.0.39.0 - Microsoft Corporation) Hidden
Microsoft.Android.Runtime.35.android-arm64 (x64) (HKLM\...\{F4B3CD19-5B77-4AC6-939A-C6C914B435D5}) (Version: 35.0.39.0 - Microsoft Corporation) Hidden
Microsoft.Android.Runtime.35.android-x64 (x64) (HKLM\...\{4C0211C3-FF8A-42C4-ADD0-A069626951A7}) (Version: 35.0.39.0 - Microsoft Corporation) Hidden
Microsoft.Android.Runtime.35.android-x86 (x64) (HKLM\...\{0BDB7A7F-1E55-4F09-B139-B7B29A96C7DC}) (Version: 35.0.39.0 - Microsoft Corporation) Hidden
Microsoft.Android.Sdk.Windows (x64) (HKLM\...\{2648A56E-7BCB-4A80-A274-D62FFD4D5061}) (Version: 34.0.147.0 - Microsoft Corporation) Hidden
Microsoft.Android.Sdk.Windows (x64) (HKLM\...\{C5BF7C5A-A5EE-413A-AE84-AC0E9B4EDB00}) (Version: 35.0.39.0 - Microsoft Corporation) Hidden
Microsoft.AspNetCore.Components.WebView.Maui (x64) (HKLM\...\{CD6F584E-B62B-49C5-AF3A-B15355ADD919}) (Version: 9.0.14.0 - Microsoft Corporation) Hidden
Microsoft.iOS.Ref.net9.0_18.2 (x64) (HKLM\...\{ECAE1ABD-44E9-4450-8228-9AD76A08BA73}) (Version: 18.2.9180.0 - Microsoft Corporation) Hidden
Microsoft.iOS.Runtime.ios-arm64.net9.0_18.2 (x64) (HKLM\...\{ECA0F02A-A31E-438E-8DD7-E3FB94BE793E}) (Version: 18.2.9180.0 - Microsoft Corporation) Hidden
Microsoft.iOS.Runtime.iossimulator-arm64.net9.0_18.2 (x64) (HKLM\...\{1EABF90F-376A-4FE5-BF42-1E9103CFFF79}) (Version: 18.2.9180.0 - Microsoft Corporation) Hidden
Microsoft.iOS.Runtime.iossimulator-x64.net9.0_18.2 (x64) (HKLM\...\{62BA244D-979C-427D-989D-636C9154A93F}) (Version: 18.2.9180.0 - Microsoft Corporation) Hidden
Microsoft.iOS.Sdk.net8.0_17.0 (x64) (HKLM\...\{1F8287D7-C709-4F66-A171-98D7DCD1EA92}) (Version: 17.0.8523.0 - Microsoft Corporation) Hidden
Microsoft.iOS.Sdk.net8.0_18.0 (x64) (HKLM\...\{EA3902CF-F774-428E-8C01-10A19F494BC6}) (Version: 18.0.8319.0 - Microsoft Corporation) Hidden
Microsoft.iOS.Sdk.net9.0_18.0 (x64) (HKLM\...\{A1482205-2BF9-411C-A9BE-FD0227CB02A3}) (Version: 18.0.9617.0 - Microsoft Corporation) Hidden
Microsoft.iOS.Sdk.net9.0_18.2 (x64) (HKLM\...\{ECF67806-B979-43CC-B4E6-0ED9D821A4F1}) (Version: 18.2.9180.0 - Microsoft Corporation) Hidden
Microsoft.iOS.Templates (x64) (HKLM\...\{95B3DF4D-4D43-476B-B228-4B6A1D2A3020}) (Version: 18.2.9180.0 - Microsoft Corporation) Hidden
Microsoft.iOS.Windows.Sdk.net8.0_17.0 (x64) (HKLM\...\{7F0B49D1-DCB8-4D89-9EAB-70AF941F7087}) (Version: 17.0.8523.0 - Microsoft Corporation) Hidden
Microsoft.iOS.Windows.Sdk.net8.0_18.0 (x64) (HKLM\...\{CE0A399D-F3A2-4859-BA76-46D266ADF32D}) (Version: 18.0.8319.0 - Microsoft Corporation) Hidden
Microsoft.iOS.Windows.Sdk.net9.0_18.0 (x64) (HKLM\...\{916AB5D9-C368-4822-830E-72BBC6B2AE82}) (Version: 18.0.9617.0 - Microsoft Corporation) Hidden
Microsoft.iOS.Windows.Sdk.net9.0_18.2 (x64) (HKLM\...\{75D83B7B-E062-4672-ACFA-8F24E582489C}) (Version: 18.2.9180.0 - Microsoft Corporation) Hidden
Microsoft.MacCatalyst.Ref.net9.0_18.2 (x64) (HKLM\...\{1596A856-23E1-44E3-803C-5560206DFF18}) (Version: 18.2.9180.0 - Microsoft Corporation) Hidden
Microsoft.MacCatalyst.Runtime.maccatalyst-arm64.net9.0_18.2 (x64) (HKLM\...\{63FD5BBF-8F4A-4672-9213-05BE75B41099}) (Version: 18.2.9180.0 - Microsoft Corporation) Hidden
Microsoft.MacCatalyst.Runtime.maccatalyst-x64.net9.0_18.2 (x64) (HKLM\...\{EED09427-DC99-48BE-982A-4B85747FFF01}) (Version: 18.2.9180.0 - Microsoft Corporation) Hidden
Microsoft.MacCatalyst.Sdk.net8.0_17.0 (x64) (HKLM\...\{E4399BEB-E3A2-4ED1-8A86-FCAF6BF85C41}) (Version: 17.0.8523.0 - Microsoft Corporation) Hidden
Microsoft.MacCatalyst.Sdk.net8.0_18.0 (x64) (HKLM\...\{7C2C3D19-78DE-48C3-A059-5F5115190DBF}) (Version: 18.0.8319.0 - Microsoft Corporation) Hidden
Microsoft.MacCatalyst.Sdk.net9.0_18.0 (x64) (HKLM\...\{2A3835B8-EF0A-4A9E-B969-A80AE384FB7B}) (Version: 18.0.9617.0 - Microsoft Corporation) Hidden
Microsoft.MacCatalyst.Sdk.net9.0_18.2 (x64) (HKLM\...\{76F38CAA-640A-43B5-80A6-920989D5F192}) (Version: 18.2.9180.0 - Microsoft Corporation) Hidden
Microsoft.MacCatalyst.Templates (x64) (HKLM\...\{F8014125-A83C-43EB-95DB-AEBDA8E9E625}) (Version: 18.2.9180.0 - Microsoft Corporation) Hidden
Microsoft.Maui.Controls (x64) (HKLM\...\{CA79DDD6-F863-4EC8-8ADB-BF823D933D49}) (Version: 9.0.14.0 - Microsoft Corporation) Hidden
Microsoft.Maui.Controls.Build.Tasks (x64) (HKLM\...\{47F845DF-125E-4206-BEB0-D8E03454B07D}) (Version: 9.0.14.0 - Microsoft Corporation) Hidden
Microsoft.Maui.Controls.Compatibility (x64) (HKLM\...\{E8A2BC4A-513F-4031-8222-2E508A1BEEDB}) (Version: 9.0.14.0 - Microsoft Corporation) Hidden
Microsoft.Maui.Controls.Core (x64) (HKLM\...\{20C141C7-4387-4B6B-ADDD-8B303EC76E16}) (Version: 9.0.14.0 - Microsoft Corporation) Hidden
Microsoft.Maui.Controls.Xaml (x64) (HKLM\...\{89806D71-D58F-40DC-AF17-ECD354DB6960}) (Version: 9.0.14.0 - Microsoft Corporation) Hidden
Microsoft.Maui.Core (x64) (HKLM\...\{D752F52A-9D88-4F56-8822-F9231F698C55}) (Version: 9.0.14.0 - Microsoft Corporation) Hidden
Microsoft.Maui.Essentials (x64) (HKLM\...\{4AA1DE1D-B898-41BE-BB48-7BD8B90E07D6}) (Version: 9.0.14.0 - Microsoft Corporation) Hidden
Microsoft.Maui.Graphics (x64) (HKLM\...\{94D98D96-190A-4519-9499-D701D952D41F}) (Version: 9.0.14.0 - Microsoft Corporation) Hidden
Microsoft.Maui.Graphics.Win2D.WinUI.Desktop (x64) (HKLM\...\{B65A84D8-83C2-40F0-AE66-FCE7CA2BFA80}) (Version: 9.0.14.0 - Microsoft Corporation) Hidden
Microsoft.Maui.Resizetizer (x64) (HKLM\...\{C83D1123-0AE7-4BB5-8D6A-B648873AA578}) (Version: 9.0.14.0 - Microsoft Corporation) Hidden
Microsoft.NET.Runtime.Emscripten.Cache (x64) (HKLM\...\{B1B194F8-2B43-454A-BE1C-1166E9BC5664}) (Version: 9.0.4.0 - Microsoft Corporation) Hidden
Microsoft.NET.Runtime.Emscripten.Cache (x64) (HKLM\...\{E305664C-B123-4F93-9A6B-5C49228BDD6D}) (Version: 9.0.2.0 - Microsoft Corporation) Hidden
Microsoft.NET.Runtime.Emscripten.Node (x64) (HKLM\...\{2D0D01DF-974C-48BC-ACBC-32BC56031602}) (Version: 9.0.2.0 - Microsoft Corporation) Hidden
Microsoft.NET.Runtime.Emscripten.Node (x64) (HKLM\...\{877EE552-A76A-474F-A7CC-15092012DBC4}) (Version: 9.0.4.0 - Microsoft Corporation) Hidden
Microsoft.NET.Runtime.Emscripten.Python (x64) (HKLM\...\{19F39162-EC7E-4B45-8FFB-2978D84FD178}) (Version: 9.0.4.0 - Microsoft Corporation) Hidden
Microsoft.NET.Runtime.Emscripten.Python (x64) (HKLM\...\{95AA14A0-4616-4AB6-9C44-474CB63CC7E5}) (Version: 9.0.2.0 - Microsoft Corporation) Hidden
Microsoft.NET.Runtime.Emscripten.Sdk (x64) (HKLM\...\{623500D0-296C-4332-B172-C1E687B30F4D}) (Version: 9.0.4.0 - Microsoft Corporation) Hidden
Microsoft.NET.Runtime.Emscripten.Sdk (x64) (HKLM\...\{F986B6C9-F854-43B6-92FC-7885F3BD9EBE}) (Version: 9.0.2.0 - Microsoft Corporation) Hidden
Microsoft.NET.Runtime.MonoAOTCompiler.Task (x64) (HKLM\...\{EB80015E-2CD2-4C21-A05E-D4FADCE2A231}) (Version: 8.0.15.0 - Microsoft Corporation) Hidden
Microsoft.NET.Runtime.MonoAOTCompiler.Task (x64) (HKLM\...\{EDC02D2D-0713-4CB5-B5B0-2916ABD4F3B1}) (Version: 9.0.2.0 - Microsoft Corporation) Hidden
Microsoft.NET.Runtime.MonoAOTCompiler.Task (x64) (HKLM\...\{EDD9A803-65C2-48C5-9BF8-9D4453AF02A9}) (Version: 9.0.4.0 - Microsoft Corporation) Hidden
Microsoft.NET.Runtime.MonoTargets.Sdk (x64) (HKLM\...\{8DAE331D-3A7B-4226-B007-D34161DFE549}) (Version: 9.0.4.0 - Microsoft Corporation) Hidden
Microsoft.NET.Runtime.MonoTargets.Sdk (x64) (HKLM\...\{DBA8BE71-2F76-49D4-A750-8543A81DC2E5}) (Version: 9.0.2.0 - Microsoft Corporation) Hidden
Microsoft.NET.Runtime.MonoTargets.Sdk (x64) (HKLM\...\{EAD01922-AFFA-478D-8E31-9AB60AF2E71E}) (Version: 8.0.15.0 - Microsoft Corporation) Hidden
Microsoft.NET.Runtime.WebAssembly.Sdk (x64) (HKLM\...\{B6384845-63C9-42F1-8095-F96CD49FB80A}) (Version: 9.0.2.0 - Microsoft Corporation) Hidden
Microsoft.NET.Runtime.WebAssembly.Sdk (x64) (HKLM\...\{CEF7800E-86E3-426F-8EBB-9A79C3444D74}) (Version: 9.0.4.0 - Microsoft Corporation) Hidden
Microsoft.NET.Sdk.Android.Manifest-7.0.100 (x64) (HKLM\...\{FE768F65-89B5-40E5-9CE5-25D002197AE7}) (Version: 33.0.4 - Microsoft Corporation) Hidden
Microsoft.NET.Sdk.Android.Manifest-9.0.100 (x64) (HKLM\...\{61875DFE-9FF2-476C-8BD8-A1A936181E8D}) (Version: 35.0.50 - Microsoft Corporation) Hidden
Microsoft.NET.Sdk.Android.Manifest-9.0.100 (x64) (HKLM\...\{76737228-5B3F-4431-9C02-BC3C1B25198B}) (Version: 35.0.7 - Microsoft Corporation) Hidden
Microsoft.NET.Sdk.Android.Manifest-9.0.100 (x64) (HKLM\...\{8529E6DB-8117-4A20-9002-D2EEE2232444}) (Version: 35.0.39 - Microsoft Corporation) Hidden
Microsoft.NET.Sdk.Aspire.Manifest-8.0.100 (x64) (HKLM\...\{2E5C5364-621F-4F22-8B81-18524D6F0361}) (Version: 64.136.23253 - Microsoft Corporation) Hidden
Microsoft.NET.Sdk.iOS.Manifest-7.0.100 (x64) (HKLM\...\{543E585A-87D5-4F29-A914-7953B2F13EF2}) (Version: 16.0.0 - Microsoft Corporation) Hidden
Microsoft.NET.Sdk.iOS.Manifest-9.0.100 (x64) (HKLM\...\{736FFE9E-6571-4059-B73D-F97F07E9F98D}) (Version: 18.0.9617 - Microsoft Corporation) Hidden
Microsoft.NET.Sdk.iOS.Manifest-9.0.100 (x64) (HKLM\...\{912D1C83-D6CF-40E5-8F78-C5411FD863D4}) (Version: 18.2.9180 - Microsoft Corporation) Hidden
Microsoft.NET.Sdk.MacCatalyst.Manifest-7.0.100 (x64) (HKLM\...\{7C190DE4-5808-421D-9C41-89ED1FBE95CC}) (Version: 15.4.0 - Microsoft Corporation) Hidden
Microsoft.NET.Sdk.MacCatalyst.Manifest-9.0.100 (x64) (HKLM\...\{393886C4-81D0-4CB7-BE11-B2B974BAE978}) (Version: 18.0.9617 - Microsoft Corporation) Hidden
Microsoft.NET.Sdk.MacCatalyst.Manifest-9.0.100 (x64) (HKLM\...\{4A8E982D-BBE2-416D-9AEA-19E83018599C}) (Version: 18.2.9180 - Microsoft Corporation) Hidden
Microsoft.NET.Sdk.macOS.Manifest-7.0.100 (x64) (HKLM\...\{57816DD5-505C-46E5-A8F5-4BC85E3A7D2C}) (Version: 12.3.0 - Microsoft Corporation) Hidden
Microsoft.NET.Sdk.macOS.Manifest-9.0.100 (x64) (HKLM\...\{16C48C75-42D8-4E6A-845B-233207524190}) (Version: 15.0.9617 - Microsoft Corporation) Hidden
Microsoft.NET.Sdk.macOS.Manifest-9.0.100 (x64) (HKLM\...\{8B5EE608-D98E-485F-A425-D1CFDC00F0D5}) (Version: 15.2.9180 - Microsoft Corporation) Hidden
Microsoft.NET.Sdk.Maui.Manifest-7.0.100 (x64) (HKLM\...\{8B3894C0-B5D2-4DDF-9732-75A96EE9A834}) (Version: 7.0.49 - Microsoft Corporation) Hidden
Microsoft.NET.Sdk.Maui.Manifest-9.0.100 (x64) (HKLM\...\{3214CADE-AAED-4B9A-8927-49D866E2A758}) (Version: 9.0.0 - Microsoft Corporation) Hidden
Microsoft.NET.Sdk.Maui.Manifest-9.0.100 (x64) (HKLM\...\{F17CAC50-9902-462B-92C8-90E86C9D6346}) (Version: 9.0.14 - Microsoft Corporation) Hidden
Microsoft.NET.Sdk.tvOS.Manifest-7.0.100 (x64) (HKLM\...\{6DAE2F44-C521-4219-8BE0-D72979F8C18E}) (Version: 16.0.0 - Microsoft Corporation) Hidden
Microsoft.NET.Sdk.tvOS.Manifest-9.0.100 (x64) (HKLM\...\{23E30422-9084-439C-8E41-6AAF3F34714F}) (Version: 18.2.9180 - Microsoft Corporation) Hidden
Microsoft.NET.Sdk.tvOS.Manifest-9.0.100 (x64) (HKLM\...\{CF59BE56-B314-4B17-B3C2-8B7197681D56}) (Version: 18.0.9617 - Microsoft Corporation) Hidden
Microsoft.NET.Sdk.WebAssembly.Pack (x64) (HKLM\...\{4F6E2395-3B6C-4877-92F2-3DDC0FE9FE77}) (Version: 9.0.4.0 - Microsoft Corporation) Hidden
Microsoft.NET.Sdk.WebAssembly.Pack (x64) (HKLM\...\{7B043061-732C-475A-BF6B-E604F528205D}) (Version: 9.0.2.0 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Emscripten.Current.Manifest (x64) (HKLM\...\{0EE7607E-885A-4C77-A5C3-A5EDBB913112}) (Version: 72.48.29394 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Emscripten.Current.Manifest (x64) (HKLM\...\{B3CF18C6-580F-4C14-866C-2E0CA625642A}) (Version: 72.48.27890 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Emscripten.Current.Manifest (x64) (HKLM\...\{BFC09740-9430-427E-8275-FD56B249EFFA}) (Version: 72.48.31026 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Emscripten.Current.Manifest (x64) (HKLM\...\{ED4843DF-A375-4522-AAC8-81456F595023}) (Version: 72.44.26179 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Emscripten.net6.Manifest (x64) (HKLM\...\{21F98BAF-A45B-4D20-B640-48D7EC0061EB}) (Version: 72.48.31026 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Emscripten.net6.Manifest (x64) (HKLM\...\{275B5EA4-F533-4B10-91F0-47602EFF6913}) (Version: 56.80.15172 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Emscripten.net6.Manifest (x64) (HKLM\...\{80CED549-E591-4EDD-9006-D0907A6E687E}) (Version: 72.44.26179 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Emscripten.net6.Manifest (x64) (HKLM\...\{9BE80FDC-ECC6-4B78-85F5-54A52EEE2810}) (Version: 72.48.29394 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Emscripten.net6.Manifest (x64) (HKLM\...\{A0D98DAA-A2D0-41B6-BD3B-F2B5BD402A9D}) (Version: 72.48.27890 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Emscripten.net7.Manifest (x64) (HKLM\...\{3147923D-653F-4494-8FDC-3738E733EDB3}) (Version: 72.44.26179 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Emscripten.net7.Manifest (x64) (HKLM\...\{3D8061EE-69F1-4D9E-A065-326235AB338E}) (Version: 72.48.29394 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Emscripten.net7.Manifest (x64) (HKLM\...\{80C759F5-656E-4453-A034-23E4F57ADB94}) (Version: 72.48.27890 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Emscripten.net7.Manifest (x64) (HKLM\...\{B32BF134-7C8C-44C1-82D4-D75AFC150549}) (Version: 72.48.31026 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Emscripten.net7.Manifest (x64) (HKLM\...\{EF1C90F7-C253-491B-814C-712A5B5AF4DA}) (Version: 56.80.15172 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Emscripten.net8.Manifest (x64) (HKLM\...\{3BF99384-85F0-49DC-A595-3B5785EB053D}) (Version: 72.44.26179 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Emscripten.net8.Manifest (x64) (HKLM\...\{59BDE753-D3C9-463C-A3B1-4BDF00B3160E}) (Version: 72.48.27890 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Emscripten.net8.Manifest (x64) (HKLM\...\{D3EB7368-5E79-4BFF-9FBB-A16BE2C06376}) (Version: 72.48.29394 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Emscripten.net8.Manifest (x64) (HKLM\...\{FE6858D6-3F49-4C76-82D3-EC1CEC83AED0}) (Version: 72.48.31026 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Mono.Toolchain.Current.Manifest (x64) (HKLM\...\{03DDDDB9-5602-43BC-81E8-557096BD886A}) (Version: 72.0.29501 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Mono.Toolchain.Current.Manifest (x64) (HKLM\...\{0EAE9159-B778-420E-983E-DF8A070D96AC}) (Version: 72.0.31125 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Mono.Toolchain.Current.Manifest (x64) (HKLM\...\{ADBD362B-E092-4D12-8810-7D8B00A56134}) (Version: 72.0.26282 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Mono.Toolchain.Current.Manifest (x64) (HKLM\...\{EB1E6C33-2D14-470E-92F0-1AC893F4F860}) (Version: 72.0.27978 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Mono.Toolchain.net6.Manifest (x64) (HKLM\...\{6F6F63FE-A772-4CB6-9A09-7622FD389134}) (Version: 72.0.29501 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Mono.Toolchain.net6.Manifest (x64) (HKLM\...\{8204984B-0802-4613-9BA6-EF098ADAA4FA}) (Version: 72.0.31125 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Mono.Toolchain.net6.Manifest (x64) (HKLM\...\{AF39D638-E302-468D-A71E-D4F100AB5773}) (Version: 56.80.15184 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Mono.Toolchain.net6.Manifest (x64) (HKLM\...\{F226ABCC-6746-42D5-9DDA-5807425C0D16}) (Version: 72.0.27978 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Mono.Toolchain.net6.Manifest (x64) (HKLM\...\{F8AEBA6F-26E2-4456-8828-720EF59FDE0C}) (Version: 72.0.26282 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Mono.Toolchain.net7.Manifest (x64) (HKLM\...\{0B2EE4C0-FA16-4166-BF15-81746A15C360}) (Version: 72.0.27978 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Mono.Toolchain.net7.Manifest (x64) (HKLM\...\{49BAD91E-DFD0-4247-B885-CADC2EADC2D4}) (Version: 56.80.15184 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Mono.Toolchain.net7.Manifest (x64) (HKLM\...\{610364FC-8A10-402D-9191-5E2BBD429D7E}) (Version: 72.0.29501 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Mono.Toolchain.net7.Manifest (x64) (HKLM\...\{AC759973-4390-43D4-95A9-768F8533F3B0}) (Version: 72.0.31125 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Mono.Toolchain.net7.Manifest (x64) (HKLM\...\{C57AD08A-B3FF-46A1-933C-38902B7C79AF}) (Version: 72.0.26282 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Mono.Toolchain.net8.Manifest (x64) (HKLM\...\{0608A300-AA39-4EF0-AC85-A3F9D3A021B3}) (Version: 72.0.31125 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Mono.Toolchain.net8.Manifest (x64) (HKLM\...\{70A0FD85-9485-4387-A080-FE8178730C9B}) (Version: 72.0.27978 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Mono.Toolchain.net8.Manifest (x64) (HKLM\...\{9F958C7B-8379-4F3B-B402-0470CD697284}) (Version: 72.0.26282 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Mono.Toolchain.net8.Manifest (x64) (HKLM\...\{F3F4D342-59D7-4476-AFE8-F1A932829A19}) (Version: 72.0.29501 - Microsoft Corporation) Hidden
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm (x64) (HKLM\...\{C9C900FD-4799-4136-A59D-9F35D50C30BC}) (Version: 8.0.15.0 - Microsoft Corporation) Hidden
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm (x64) (HKLM\...\{E5A0367B-6AFB-4B22-8768-5676EE3C67C8}) (Version: 9.0.4.0 - Microsoft Corporation) Hidden
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64 (x64) (HKLM\...\{8718DA43-06EB-4ADF-99E9-F1765FED0BA6}) (Version: 8.0.15.0 - Microsoft Corporation) Hidden
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64 (x64) (HKLM\...\{BBA4663D-C27B-42E1-9810-E370B14FB3F0}) (Version: 9.0.4.0 - Microsoft Corporation) Hidden
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64 (x64) (HKLM\...\{1B26BA8D-987D-475C-80F7-348E4E547B78}) (Version: 9.0.4.0 - Microsoft Corporation) Hidden
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64 (x64) (HKLM\...\{3812DAF0-254C-4501-A95E-DC23FC73AB84}) (Version: 8.0.15.0 - Microsoft Corporation) Hidden
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86 (x64) (HKLM\...\{76FBD4F0-EB76-4EC5-B4D0-D1B9E6900877}) (Version: 9.0.4.0 - Microsoft Corporation) Hidden
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86 (x64) (HKLM\...\{B2957DD7-1123-4434-B373-E0E4716F58C3}) (Version: 8.0.15.0 - Microsoft Corporation) Hidden
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm (x64) (HKLM\...\{2AF5EA37-16DA-4967-80CE-336FEA45912A}) (Version: 9.0.4.0 - Microsoft Corporation) Hidden
Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm (x64) (HKLM\...\{ACB61105-0012-4756-9565-563B197103B8}) (Version: 9.0.2.0 - Microsoft Corporation) Hidden
Microsoft.NETCore.App.Runtime.Mono.android-arm (x64) (HKLM\...\{2F20B08A-1D3F-45CC-8E2E-9A48A7FC1B10}) (Version: 8.0.15.0 - Microsoft Corporation) Hidden
Microsoft.NETCore.App.Runtime.Mono.android-arm (x64) (HKLM\...\{A2981EC4-AA9E-4AF0-BA6A-3BB0C79E7227}) (Version: 9.0.4.0 - Microsoft Corporation) Hidden
Microsoft.NETCore.App.Runtime.Mono.android-arm64 (x64) (HKLM\...\{8EC5C3BE-2113-444C-A1B9-072875FBAA7A}) (Version: 9.0.4.0 - Microsoft Corporation) Hidden
Microsoft.NETCore.App.Runtime.Mono.android-arm64 (x64) (HKLM\...\{DC4EEC9B-D278-4D05-93B4-5FCF821271A9}) (Version: 8.0.15.0 - Microsoft Corporation) Hidden
Microsoft.NETCore.App.Runtime.Mono.android-x64 (x64) (HKLM\...\{376026F8-78F1-440E-A402-B3B93E31D0AA}) (Version: 8.0.15.0 - Microsoft Corporation) Hidden
Microsoft.NETCore.App.Runtime.Mono.android-x64 (x64) (HKLM\...\{8CE28C17-797B-4A98-813A-FC03AF6086F6}) (Version: 9.0.4.0 - Microsoft Corporation) Hidden
Microsoft.NETCore.App.Runtime.Mono.android-x86 (x64) (HKLM\...\{8343D9C5-99E2-478F-BD6F-29A5ECBDA6EE}) (Version: 8.0.15.0 - Microsoft Corporation) Hidden
Microsoft.NETCore.App.Runtime.Mono.android-x86 (x64) (HKLM\...\{FE6B3AEC-68A4-4C69-8CB4-EDA03B94E690}) (Version: 9.0.4.0 - Microsoft Corporation) Hidden
Microsoft.NETCore.App.Runtime.Mono.browser-wasm (x64) (HKLM\...\{8247881B-83DF-4B57-AC98-B878A5F4F54E}) (Version: 9.0.2.0 - Microsoft Corporation) Hidden
Microsoft.NETCore.App.Runtime.Mono.browser-wasm (x64) (HKLM\...\{B8C7AFB5-B857-411D-8A88-5DE8DF4EA746}) (Version: 9.0.4.0 - Microsoft Corporation) Hidden
Microsoft.NETCore.App.Runtime.Mono.ios-arm64 (x64) (HKLM\...\{2F18ED2A-3A75-4509-B353-EC2F7C916F62}) (Version: 9.0.4.0 - Microsoft Corporation) Hidden
Microsoft.NETCore.App.Runtime.Mono.ios-arm64 (x64) (HKLM\...\{6EFCC076-A78A-4347-AAD5-8F96B216AC5B}) (Version: 8.0.15.0 - Microsoft Corporation) Hidden
Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64 (x64) (HKLM\...\{02CBB007-CCB4-416C-A522-2328694A95FB}) (Version: 9.0.4.0 - Microsoft Corporation) Hidden
Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64 (x64) (HKLM\...\{0D3A8708-A8D2-4D72-93FD-3EF7243C60D3}) (Version: 8.0.15.0 - Microsoft Corporation) Hidden
Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64 (x64) (HKLM\...\{198E3DFA-1DC9-4E2A-9A65-C18519B2EEBB}) (Version: 9.0.4.0 - Microsoft Corporation) Hidden
Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64 (x64) (HKLM\...\{C42F8FA5-ADC0-45B9-9492-738AD80E3AE6}) (Version: 8.0.15.0 - Microsoft Corporation) Hidden
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64 (x64) (HKLM\...\{5D8608C2-2FB4-4060-9001-45055C00A3F5}) (Version: 8.0.15.0 - Microsoft Corporation) Hidden
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64 (x64) (HKLM\...\{FFF2CC4E-96B7-4081-B6E0-FA2FE49A1A3C}) (Version: 9.0.4.0 - Microsoft Corporation) Hidden
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64 (x64) (HKLM\...\{1D92262D-FA79-4301-B27E-E1238F11D3EA}) (Version: 8.0.15.0 - Microsoft Corporation) Hidden
Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64 (x64) (HKLM\...\{C0235466-283B-4DB0-A770-511E48FC2BC4}) (Version: 9.0.4.0 - Microsoft Corporation) Hidden
Migration Toolkit 55.7.0-1 (HKLM\...\Migration Toolkit 55.7.0-1) (Version: 55.7.0-1 - EnterpriseDB)
Miniforge3 24.11.3-0 (Python 3.12.8 64-bit) (HKLM\...\Miniforge3 24.11.3-0 (Python 3.12.8 64-bit)) (Version: 24.11.3-0 - conda-forge)
MongoDB 8.0.4 2008R2Plus SSL (64 bit) (HKLM\...\{CDE275B4-7DCB-4D35-AD3E-AB7A4EB36CBB}) (Version: 8.0.4 - MongoDB Inc.)
Motorola Mobile Drivers Installation 6.4.0 (HKLM\...\{27986EDD-C9EC-4B52-B92F-06D073F0AA52}) (Version: 6.4.0 - Motorola Mobility LLC)
Mozilla Firefox (x64 en-US) (HKLM\...\Mozilla Firefox 137.0.2 (x64 en-US)) (Version: 137.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 134.0.2 - Mozilla)
MSI Development Tools (HKLM-x32\...\{3891A7DE-A85F-9B4E-2B84-50162AFA1E48}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
MSI Development Tools (HKLM-x32\...\{7AAC93B0-F3D7-6B24-6B37-9E74980C1C81}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
MSI Development Tools (HKLM-x32\...\{B525DE4C-0105-A651-3F25-7DD17A6A9BE2}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Nmap 7.95 (HKLM-x32\...\Nmap) (Version: 7.95 - Nmap Project)
Node.js (HKLM\...\{6403CDE6-B8BE-41A9-9887-8D369B2086E5}) (Version: 23.11.0 - Node.js Foundation)
Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 8.7.9 - Notepad++ Team)
Npcap (HKLM-x32\...\NpcapInst) (Version: 1.79 - Nmap Project)
Npgsql 3.2.6 (HKLM-x32\...\Npgsql 3.2.6-3) (Version: 3.2.6-3 - EnterpriseDB)
NVIDIA Graphics Driver 538.92 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 538.92 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.18623.20156 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.18623.20208 - Microsoft Corporation) Hidden
Open XML SDK 2.5 for Microsoft Office (HKLM-x32\...\{3EA16E23-14D2-466A-8268-D7CD40DC46B6}) (Version: 2.5.5631 - Microsoft Corporation) Hidden
OpenSSH (HKLM\...\{75CC4F13-D9D7-45EE-A061-C367C19DC8D0}) (Version: 9.5.0.0 - Microsoft Corporation)
OpenSSL 3.4.1 Light (64-bit) (HKLM\...\OpenSSL Light (64-bit)_is1) (Version: 3.4.1 - OpenSSL Win64 Installer Team)
OpenSSL 3.4.1 Light (All architectures) (HKLM-x32\...\OpenSSL Light (All architectures)_is1) (Version: 3.4.1 - OpenSSL WinUniversal Installer Team)
OpenVPN 2.6.13-I001 amd64 (HKLM\...\{8274048B-FF59-47CC-802A-8A7E6325D2D5}) (Version: 2.6.1301 - OpenVPN, Inc.)
Oracle VirtualBox 7.1.6 (HKLM\...\{08123D53-81FD-48DF-BDD1-64FC2B977919}) (Version: 7.1.6 - Oracle and/or its affiliates)
Outils de vérification linguistique 2013 de Microsoft Office - Français (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Pandoc 3.6.4 (HKLM\...\{E21E4135-CB2E-4A4D-B039-45C9134BED5E}) (Version: 3.6.4 - John MacFarlane)
PassFab Activation Unlocker 3.0.3.8 (HKLM-x32\...\{PassFab Activation Unlocker_PF}_is1) (Version: 3.0.3.8 - Tenorshare, Inc.)
PEM-HTTPD 2.4.62 (HKLM\...\PEM-HTTPD 2.4.62-1) (Version: 2.4.62-1 - EnterpriseDB)
Perplexity 1.1.3 (HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\bf146e86-595f-5372-9f0f-5dfe3975eb52) (Version: 1.1.3 - Perplexity)
pgAgent_PG17 4.2.2 (HKLM\...\pgAgent_PG17 4.2.2-1) (Version: 4.2.2-1 - EnterpriseDB)
pgJDBC 42.7.2 (HKLM-x32\...\pgJDBC 42.7.2-1) (Version: 42.7.2-1 - EnterpriseDB)
playit (HKLM\...\{8C17366B-843B-49DC-AC1B-748DC264E06F}) (Version: 0.15.26 - Developed Methods LLC)
PostGIS Bundle 3.5.2 for PostgreSQL x64 17 (remove only) (HKLM\...\PostGIS Bundle 0 for PostgreSQL x64 17) (Version:  - )
PostgreSQL 16  (HKLM\...\PostgreSQL 16) (Version: 16.3-1 - PostgreSQL Global Development Group)
PostgreSQL 17  (HKLM\...\PostgreSQL 17) (Version: 17.4-2 - PostgreSQL Global Development Group)
Postman x86_64 11.33.0 (HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\Postman) (Version: 11.33.0 - Postman)
PowerShell 7.5.0.0-x64 (HKLM-x32\...\{e1883789-45c3-439b-885e-fd3ee7c58e84}) (Version: 7.5.0.0 - Microsoft Corporation)
PowerShell 7.6.3.0-x64 (HKLM-x32\...\{10a87cc8-198c-49d9-a419-cd0f6ed55300}) (Version: 7.6.3.0 - Microsoft Corporation)
PowerShell 7-preview-x64 (HKLM\...\{BD83E859-420D-425A-8AC6-AAC4737E58A9}) (Version: 7.6.0.3 - Microsoft Corporation) Hidden
PowerShell 7-x64 (HKLM\...\{D012DCD1-67EA-4627-938F-19FD677FC03A}) (Version: 7.5.0.0 - Microsoft Corporation)
PowerToys (Preview) (HKLM\...\{5A775AF0-704E-4912-BEF8-33C16665C3B7}) (Version: 0.88.0 - Microsoft Corporation) Hidden
PowerToys (Preview) (HKLM\...\{A9094271-C37E-4BF7-8517-ED383F0D69E6}) (Version: 0.89.0 - Microsoft Corporation) Hidden
PowerToys (Preview) x64 (HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\{c58bb425-7ca1-4341-b93f-4af6dc9186ea}) (Version: 0.89.0 - Microsoft Corporation)
PuTTY release 0.83 (64-bit) (HKLM\...\{ED41CD4E-33BB-400C-AB20-B09388DC83EF}) (Version: 0.83.0.0 - Simon Tatham)
PyCharm Community Edition 2024.3.3 (HKLM-x32\...\PyCharm Community Edition 2024.3.3) (Version: 243.24978.54 - JetBrains s.r.o.)
Python 3.11.9 (64-bit) (HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\{1da2e09b-199c-4def-9a99-93a8c1b8ddf2}) (Version: 3.11.9150.0 - Python Software Foundation)
Python 3.11.9 Add to Path (64-bit) (HKLM\...\{CD925D17-C20C-441B-AAE2-4FA5B78C978F}) (Version: 3.11.9150.0 - Python Software Foundation) Hidden
Python 3.11.9 Core Interpreter (64-bit) (HKLM\...\{B074012B-9B85-4049-BA01-A58A8C4C2236}) (Version: 3.11.9150.0 - Python Software Foundation) Hidden
Python 3.11.9 Development Libraries (64-bit) (HKLM\...\{CEE03ABD-D5F9-4104-BFA5-520711B8D71F}) (Version: 3.11.9150.0 - Python Software Foundation) Hidden
Python 3.11.9 Documentation (64-bit) (HKLM\...\{425B36E9-4EA6-47B4-88C3-E798BA903188}) (Version: 3.11.9150.0 - Python Software Foundation) Hidden
Python 3.11.9 Executables (64-bit) (HKLM\...\{C038789C-DCB5-42D3-8C51-3BC9DDB26B90}) (Version: 3.11.9150.0 - Python Software Foundation) Hidden
Python 3.11.9 pip Bootstrap (64-bit) (HKLM\...\{1D653E80-09B2-40AB-9530-7DF12E632F8A}) (Version: 3.11.9150.0 - Python Software Foundation) Hidden
Python 3.11.9 Standard Library (64-bit) (HKLM\...\{9AFDC691-40E5-4B15-835F-9A524AC4672C}) (Version: 3.11.9150.0 - Python Software Foundation) Hidden
Python 3.11.9 Tcl/Tk Support (64-bit) (HKLM\...\{57AC2A86-EC99-4E9C-9FF9-15DAA88D1FAE}) (Version: 3.11.9150.0 - Python Software Foundation) Hidden
Python 3.11.9 Test Suite (64-bit) (HKLM\...\{A9F91BE3-1B3B-4CB4-A169-19E13DD70BEA}) (Version: 3.11.9150.0 - Python Software Foundation) Hidden
Python 3.11.9 Utility Scripts (64-bit) (HKLM\...\{29CEC70F-9D96-472B-B6A1-AE7578376985}) (Version: 3.11.9150.0 - Python Software Foundation) Hidden
Python 3.13.1 Add to Path (64-bit) (HKLM\...\{95338D2D-2A7C-4C57-ABC4-39FF8568C2FF}) (Version: 3.13.1150.0 - Python Software Foundation) Hidden
Python 3.13.1 Core Interpreter (64-bit) (HKLM\...\{B7C30E07-E007-43ED-A9E1-EEDA7F57C8BC}) (Version: 3.13.1150.0 - Python Software Foundation) Hidden
Python 3.13.1 Development Libraries (64-bit) (HKLM\...\{FE9B3181-7FDD-4F6A-855A-305940D9A6E8}) (Version: 3.13.1150.0 - Python Software Foundation) Hidden
Python 3.13.1 Documentation (64-bit) (HKLM\...\{29EEEBD6-F97B-4274-A640-FD8715025124}) (Version: 3.13.1150.0 - Python Software Foundation) Hidden
Python 3.13.1 Executables (64-bit) (HKLM\...\{8AFC9846-E7A8-4817-93FD-3542456A3E52}) (Version: 3.13.1150.0 - Python Software Foundation) Hidden
Python 3.13.1 pip Bootstrap (64-bit) (HKLM\...\{2BB3559A-6DFD-453E-8B7B-E6166958D099}) (Version: 3.13.1150.0 - Python Software Foundation) Hidden
Python 3.13.1 Standard Library (64-bit) (HKLM\...\{29A3DBE6-A3D3-42C9-9338-A321F61C897A}) (Version: 3.13.1150.0 - Python Software Foundation) Hidden
Python 3.13.1 Tcl/Tk Support (64-bit) (HKLM\...\{C6718DB8-8965-4EE7-A056-1AA8F3836208}) (Version: 3.13.1150.0 - Python Software Foundation) Hidden
Python 3.13.1 Test Suite (64-bit) (HKLM\...\{7A5D8A6D-A0A9-4459-88EF-33C91DAFB0C2}) (Version: 3.13.1150.0 - Python Software Foundation) Hidden
Python Launcher (HKLM-x32\...\{7102CAE5-270C-4E81-AC25-27699156D8AE}) (Version: 3.13.1150.0 - Python Software Foundation)
R for Windows 4.4.3 (HKLM\...\R for Windows 4.4.3_is1) (Version: 4.4.3 - R Core Team)
Remote Tools for Visual Studio 2019 (HKLM-x32\...\{27fe8e53-53bf-42cf-8b5f-80502ea56037}) (Version: 16.0.35323.27 - Microsoft Corporation)
Remoted iOS Simulator for Visual Studio (HKLM-x32\...\{18CCD9D4-75BE-4AB3-8AF0-B7C00653DD9F}) (Version: 17.13.0.568 - Microsoft Corporation) Hidden
Royal TS V7 (HKLM\...\{4959A733-614C-44E8-AC0D-3E7BCAA525AC}) (Version: 7.3.50219.0 - Royal Apps GmbH)
Ruby 3.4.2-1-x64 (HKLM-x32\...\RubyInstaller-3.4-x64-mingw-ucrt_is1) (Version: 3.4.2-1 - RubyInstaller Team)
Rustup: the Rust toolchain installer (HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\Rustup) (Version: 1.27.1 - )
SamFw Tool (HKLM-x32\...\{B439569E-0B37-4DF7-A623-7EEF6645E414}_is1) (Version: 4.9 - SamFw.com)
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.7.58.0 - Samsung Electronics Co., Ltd.)
SDK ARM64 Additions (HKLM-x32\...\{8D76BDB1-68E8-B788-01A0-17FBA61C509E}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
SDK ARM64 Redistributables (HKLM-x32\...\{0356D757-9CE7-3894-A9A0-029C3121F946}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0017-0000-1000-0000000FF1CE}_Office15.SharePointDesigner_{67A083C6-0A9E-48E8-BC90-C1EDA8028ED4}) (Version:  - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0017-0409-1000-0000000FF1CE}_Office15.SharePointDesigner_{E84ED421-747D-4DD9-A1A6-7D929EA7AF46}) (Version:  - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-001F-0409-1000-0000000FF1CE}_Office15.SharePointDesigner_{835E4BED-E265-4103-AE14-0B4C70CF3FE8}) (Version:  - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}_Office15.SharePointDesigner_{1F7000D3-A917-4AD2-BA55-59E6FDAF062A}) (Version:  - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-001F-0C0A-1000-0000000FF1CE}_Office15.SharePointDesigner_{4BF13B26-3A95-4E42-900A-DEB16FDA75A0}) (Version:  - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-002C-0409-1000-0000000FF1CE}_Office15.SharePointDesigner_{C5D14A1B-6E3E-491A-96C6-ABDEEEC4E97D}) (Version:  - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-006E-0409-1000-0000000FF1CE}_Office15.SharePointDesigner_{D7E879E6-B505-4DA2-BFEE-53A55E7C8E38}) (Version:  - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.SharePointDesigner_{1931508C-C004-4983-81E3-70BE6252904B}) (Version:  - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-00C1-0409-1000-0000000FF1CE}_Office15.SharePointDesigner_{E4F470B2-3601-4E1C-B291-D6B580F53136}) (Version:  - Microsoft) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0115-0409-1000-0000000FF1CE}_Office15.SharePointDesigner_{D7E879E6-B505-4DA2-BFEE-53A55E7C8E38}) (Version:  - Microsoft) Hidden
Slack (HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\slack) (Version: 4.43.52 - Slack Technologies Inc.)
sptools_Microsoft.VisualStudio.OfficeDeveloperTools.Msi (HKLM-x32\...\{014B44FA-FC50-4492-98A2-453091BDC48B}) (Version: 17.10.35724 - Microsoft Corporation) Hidden
sptools_Microsoft.VisualStudio.Vsto.Msi (HKLM-x32\...\{4726091F-12E5-438E-98B8-30B78A39CCCF}) (Version: 17.10.35227 - Microsoft Corporation) Hidden
sptools_Microsoft.VisualStudio.Vsto.Msi.Resources (HKLM-x32\...\{D5DB0B2E-9CE5-424F-B43A-80644795F213}) (Version: 17.10.34824 - Microsoft Corporation) Hidden
sptools_Microsoft.VisualStudio.Vsto.Msi.x64 (HKLM-x32\...\{F471BF10-DB19-4D58-94C0-AA8E1F95C0BF}) (Version: 17.10.34824 - Microsoft Corporation) Hidden
Studio (HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\studio) (Version: 1.3.3 - Automattic Inc.)
Swift Build Tools (HKLM\...\{5A030697-FAC8-4AF1-947E-D718E51F7C52}) (Version: 0.0.0 - swift.org) Hidden
Swift Command Line Tools (HKLM\...\{D985C353-654A-445D-A9A9-E740305BBF78}) (Version: 0.0.0 - swift.org) Hidden
Swift Debugging Tools (HKLM\...\{E6A06A9F-5A7D-49FA-A6F2-2B36324293E8}) (Version: 0.0.0 - swift.org) Hidden
Swift Developer Toolkit 0.0.0 (HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\{1309AA0B-8984-4449-83EB-53E89D05EE51}) (Version: 0.0.0 - swift.org)
Swift IDE Integration Tools (HKLM\...\{0C3C8E0A-0834-4516-8F4B-53176E1F5B2F}) (Version: 0.0.0 - swift.org) Hidden
Swift Windows Runtime (AMD64) (HKLM\...\{A5C4E309-08FF-461B-AF12-2987DC22884B}) (Version: 0.0.0 - swift.org) Hidden
Swift Windows SDK (AMD64) (HKLM-x32\...\{BD51F42A-A772-4C8C-9F66-3F30440B8143}) (Version: 0.0.0 - swift.org) Hidden
Swift Windows SDK (ARM64) (HKLM-x32\...\{855EE8F7-6AE6-4DD3-BB20-51E6254CAB62}) (Version: 0.0.0 - swift.org) Hidden
Swift Windows SDK (X86) (HKLM-x32\...\{BF436CC6-248A-4003-A2DE-4BA002EE0F61}) (Version: 0.0.0 - swift.org) Hidden
TeamViewer (HKLM\...\TeamViewer) (Version: 15.64.3 - TeamViewer)
Telegram Desktop (HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 5.13.1 - Telegram FZ-LLC)
TeX Live 2025 (HKLM\...\TeXLive2025) (Version: 2025 - TeX Live)
TheiaIDE 1.59.1 (HKLM\...\8278baff-1a1c-5eb1-9d84-d0372d0070dc) (Version: 1.59.1 - Eclipse Theia)
Unity Hub 2.4.4 (HKLM\...\{Unity Technologies - Hub}) (Version: 2.4.4 - Unity Technologies Inc.)
Universal CRT Extension SDK (HKLM-x32\...\{1FBCBC17-4527-2340-0832-B1D49C41FF67}) (Version: 10.0.26624 - Microsoft Corporation) Hidden
Universal CRT Extension SDK (HKLM-x32\...\{4D69FB64-4443-F2DD-DE1C-F14FD98AAC59}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Universal CRT Extension SDK (HKLM-x32\...\{91D7C8C3-1959-DA64-CF80-4D2632D9FB26}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Universal CRT Extension SDK (HKLM-x32\...\{E9508840-8997-0DA6-2BF2-66913126B654}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Universal CRT Headers Libraries and Sources (HKLM-x32\...\{6B56745A-F6A4-C51C-933A-AD96C00683EA}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Universal CRT Headers Libraries and Sources (HKLM-x32\...\{8BFBEC30-33CC-13B4-849F-3B036F27466A}) (Version: 10.0.26624 - Microsoft Corporation) Hidden
Universal CRT Headers Libraries and Sources (HKLM-x32\...\{C377BE8D-7DFD-D4F4-D2C6-0DA6DA9DF877}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Universal CRT Headers Libraries and Sources (HKLM-x32\...\{D3CE43AE-FB64-9FCA-BE16-5A2F3F2B112D}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Universal CRT Redistributable (HKLM-x32\...\{0460C87B-7F4C-3170-FAC9-B7A6AE5CE4E9}) (Version: 10.0.26624 - Microsoft Corporation) Hidden
Universal CRT Redistributable (HKLM-x32\...\{1D228B5E-62E8-737B-3478-78A795EBB8EC}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Universal CRT Redistributable (HKLM-x32\...\{3B45ED55-6171-6353-AF90-FC7EDF9FD691}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Universal CRT Redistributable (HKLM-x32\...\{A57CD0A6-4297-FD30-34A4-34758B6F5F69}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Universal CRT Tools x64 (HKLM\...\{61E87F06-DC9D-0370-45F3-CC3F735A0AE0}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Universal CRT Tools x86 (HKLM-x32\...\{D46C7A45-4085-514D-41EC-5F52680A5EFE}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Universal General MIDI DLS Extension SDK (HKLM-x32\...\{A7E95C47-B5F4-110C-D27A-DECB03412B96}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Universal General MIDI DLS Extension SDK (HKLM-x32\...\{C8A20964-550E-83CC-A147-99C1EDAB2438}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Universal General MIDI DLS Extension SDK (HKLM-x32\...\{D3B0EFC4-878A-CA8C-7C79-1160CDF637D1}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Update for  (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
Update for Skype for Business 2015 (KB4484289) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.SharePointDesigner_{1C76EBD9-0A70-4094-A543-00CAA3B62113}) (Version:  - Microsoft)
USBPcap 1.5.4.0 (HKLM\...\USBPcap) (Version: 1.5.4.0 - Tomasz Mon)
vcpp_crt.redist.clickonce (HKLM-x32\...\{8469EDB3-4134-46FC-AC9B-0C62D1C3279A}) (Version: 14.44.34918 - Microsoft Corporation) Hidden
vcpp_crt.redist.clickonce (HKLM-x32\...\{E2121340-F05B-48E1-BE1D-175FA97B2FC0}) (Version: 14.29.30157 - Microsoft Corporation) Hidden
Visual C++ Compiler/Tools Premium ARM Base Package (HKLM-x32\...\{2057FFB1-A945-3986-97B2-98AF940184DA}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Compiler/Tools Premium ARM Base Resource Package (HKLM-x32\...\{E38F04B8-D1BD-3473-B018-7E3730F2DB38}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Compiler/Tools Premium X64 ARM Cross Package (HKLM-x32\...\{70DC9ED5-BECB-36D0-95FD-EFD1973EF6D3}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Compiler/Tools Premium X64 ARM Cross Resource Package (HKLM-x32\...\{D8963EFC-09D9-389A-88E9-7DDF73785A72}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Compiler/Tools Premium X64 Base Package (HKLM-x32\...\{55CAB84D-04E7-3C79-8735-8B9A9E84A8EF}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Compiler/Tools Premium X64 Base Resource Package (HKLM-x32\...\{F2CCF38E-3BDF-3949-BF1C-7698901D45CE}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Compiler/Tools Premium X64 Native Package (HKLM-x32\...\{4081C608-51D1-320D-99A1-FAAF02565CAF}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Compiler/Tools Premium X64 Native Resource Package (HKLM-x32\...\{563243CB-8BF9-31AF-8751-43D1476CCA0C}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Compiler/Tools Premium X64 X86 Cross Package (HKLM-x32\...\{5E112437-5FB2-348A-8287-41C3A53F841A}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Compiler/Tools Premium X64 X86 Cross Resource Package (HKLM-x32\...\{9FF6CD4B-56A7-3C87-A451-224DB54E993E}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Compiler/Tools Premium X86 ARM Cross Package (HKLM-x32\...\{A7835582-A211-3DA1-8095-170D12EF1556}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Compiler/Tools Premium X86 ARM Cross Resource Package (HKLM-x32\...\{79D79585-A087-390E-810F-9DCC71E0EAF2}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Compiler/Tools Premium X86 Base Package (HKLM-x32\...\{D4AC1B3B-E800-339A-8E51-5039A87D8B04}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Compiler/Tools Premium X86 Base Resource Package (HKLM-x32\...\{E3307947-0949-3753-8CFB-28F9205033D0}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Compiler/Tools Premium X86 Native Package (HKLM-x32\...\{90576CF8-49E8-3F9D-9AF8-C505DB97CEA3}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Compiler/Tools Premium X86 Native Resource Package (HKLM-x32\...\{0E0A438A-AFD0-3B16-8E94-9E8EB27339D2}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Compiler/Tools Premium X86 X64 Cross Package (HKLM-x32\...\{1B82A47F-85F4-32A0-BCDD-CD120DF55ABF}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Compiler/Tools Premium X86 X64 Cross Resource Package (HKLM-x32\...\{5971EC59-A4BE-37E9-BC15-0998CFED93E2}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Compiler/Tools X64 ARM Cross Package (HKLM-x32\...\{4AF6F442-9262-32C2-8152-06A1DA21FC4A}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Compiler/Tools X64 ARM Cross Resource Package (HKLM-x32\...\{13014F28-38B6-33FF-BAD9-72C305D95A05}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Compiler/Tools X64 Base Package (HKLM-x32\...\{8670BFEB-2C1B-3E19-B62E-734FCD2D9E2F}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Compiler/Tools X64 Base Resource Package (HKLM-x32\...\{284C23A3-84C8-3A9A-8702-575CE17A6425}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Compiler/Tools X64 Native Package (HKLM-x32\...\{AF8A22A0-37B2-3CA0-875E-944F4A0E6804}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Compiler/Tools X64 Native Resource Package (HKLM-x32\...\{01BBA464-CA6C-30FB-A7F7-95594924E906}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Compiler/Tools X64 X86 Cross Package (HKLM-x32\...\{5B2734F3-CE81-3AFE-8354-9607FADBEECE}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Compiler/Tools X64 X86 Cross Resource Package (HKLM-x32\...\{9B4D7D9D-9C71-3E29-B210-1BD2490A39C5}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Compiler/Tools X86 ARM Cross Package (HKLM-x32\...\{EB33DE16-2EC6-3529-89E4-7FA5B1D2D5D1}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Compiler/Tools X86 ARM Cross Resource Package (HKLM-x32\...\{343B4F84-37BF-3709-8788-66D4D5DCCF6F}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Compiler/Tools X86 Base Package (HKLM-x32\...\{1FD44599-2D0E-370C-B6C6-9C9B91FA83BB}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Compiler/Tools X86 Base Package (HKLM-x32\...\{ED7AF65F-76EE-381A-9805-01711DBB8037}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Compiler/Tools X86 Base Resource Package (HKLM-x32\...\{1C9E4464-BC82-35ED-9A9E-9F4CD923B9D9}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Compiler/Tools X86 Native Package (HKLM-x32\...\{8E8C384A-1170-34D3-9F8D-9A4D55DEF222}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Compiler/Tools X86 Native Resource Package (HKLM-x32\...\{0B65F64A-1DF0-3EEB-B8E0-BDDD69E23AC6}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Compiler/Tools X86 X64 Cross Package (HKLM-x32\...\{6C1738A0-E331-3821-A57C-A0E939AC68E6}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Compiler/Tools X86 X64 Cross Resource Package (HKLM-x32\...\{4DD3916A-9A5D-39CF-B451-3E4692D6FB38}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ CRT Headers Package (HKLM-x32\...\{A09F75FA-A9AB-38A2-866B-4F7F61BAE9CB}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Extra Files (HKLM-x32\...\{D50D8409-53F7-318D-A3D2-81A07FC1DC26}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Extra Resource Files (HKLM-x32\...\{7602A400-047F-3F26-BFF9-FFB6B0531146}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Library ATL ARM Package (HKLM-x32\...\{1330FFAF-1F3F-35D6-9023-23199A366FC6}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Library ATL Headers Package (HKLM-x32\...\{93474D68-27ED-3DD7-A6D8-025D90C1632C}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Library ATL Source Package (HKLM-x32\...\{69C1E0DD-F13B-37EF-89EF-BF1DD8202658}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Library ATL X64 Package (HKLM-x32\...\{934750B1-DFC7-3B26-8521-A7622976B00D}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Library ATL X86 Package (HKLM-x32\...\{8F6BF52A-CDF7-3F9E-BB8B-4BF343DF2279}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Library CRT Appx Package (HKLM-x32\...\{55B0EE43-6BCC-467B-A6BB-F511A8639D76}) (Version: 14.43.34808 - Microsoft Corporation) Hidden
Visual C++ Library CRT Appx Package (HKLM-x32\...\{C30EFB68-3527-4796-B08B-4B8C8F6A6B0A}) (Version: 14.43.34808 - Microsoft Corporation) Hidden
Visual C++ Library CRT Appx Resource Package (HKLM-x32\...\{C3FFB9D0-C05E-4D92-A76D-138A7B6EFBA7}) (Version: 14.43.34808 - Microsoft Corporation) Hidden
Visual C++ Library CRT ARM Desktop Package (HKLM-x32\...\{0B830AB1-F7E5-3132-AA33-A49755ED1FED}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Library CRT ARM OneCore For Desktop Package (HKLM-x32\...\{E935ECCE-D177-323D-BA8A-80B88726E4AC}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Library CRT ARM Redist Package (HKLM-x32\...\{02A8D242-C0B2-3037-A475-C95A110F47A1}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Library CRT ARM Store Package (HKLM-x32\...\{009D8373-7BCC-35B2-852D-F3EB4C093646}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Library CRT ARM64 Appx Package (HKLM-x32\...\{26001E31-4DAE-4529-8BB3-74220FD2DC95}) (Version: 14.43.34808 - Microsoft Corporation) Hidden
Visual C++ Library CRT Desktop Appx Package (HKLM-x32\...\{BA30E881-E398-482A-9A1E-BF754389EC35}) (Version: 14.43.34808 - Microsoft Corporation) Hidden
Visual C++ Library CRT Desktop Appx Package (HKLM-x32\...\{C91F274A-CA1F-4CDA-80A5-67ED6CF171DE}) (Version: 14.43.34808 - Microsoft Corporation) Hidden
Visual C++ Library CRT Desktop Appx Package (HKLM-x32\...\{CBD629E9-655F-4B09-B703-A9292647B4E4}) (Version: 14.43.34808 - Microsoft Corporation) Hidden
Visual C++ Library CRT Redist Resource Package (HKLM-x32\...\{6B962144-68D8-3CCA-9178-AC06EEFA8571}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Library CRT Source Package (HKLM-x32\...\{0E0F5047-DDFC-3BA6-83BB-D2E0E45031A3}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Library CRT X64 Desktop Package (HKLM-x32\...\{DF8C5ACA-152D-32EE-9119-C2DBF6CE3618}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Library CRT X64 OneCore For Desktop Package (HKLM-x32\...\{E1710F7D-0665-3D23-8BB9-01619F208F3B}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Library CRT X64 Redist Package (HKLM-x32\...\{769BF241-5671-3F04-8E5C-FC10D774F001}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Library CRT X64 Store Package (HKLM-x32\...\{3C579BBC-9933-3018-970C-9CFD1E41C899}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Library CRT X86 Desktop Package (HKLM-x32\...\{02627D43-530C-361F-8792-331624A02FB3}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Library CRT X86 OneCore For Desktop Package (HKLM-x32\...\{E83EA1FA-F66E-365A-BACD-B1FB4792BF71}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Library CRT X86 Redist Package (HKLM-x32\...\{FC74D7DA-87D4-3780-8BE2-29FBA0777714}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Library CRT X86 Store Package (HKLM-x32\...\{BDAAC32E-C6CA-3BF9-AAFD-2C69F3AD5436}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Library MFC Headers Package (HKLM-x32\...\{9F0A62FC-C133-3865-8891-B006D5B5BB62}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Library MFC MBCS Package (HKLM-x32\...\{F3D8134C-2312-35B2-8A00-0EDD5538E3E6}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Library MFC Source Package (HKLM-x32\...\{EEB7C70A-65A1-3703-BDC5-5CEBD65E830F}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Library MFC X64 Package (HKLM-x32\...\{FA8AF556-5CA8-3089-8861-B8CF2C670868}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Library MFC X86 Package (HKLM-x32\...\{2AD7AC81-D0F7-3C95-AE48-DBA08AAD3B33}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Library PGO ARM Package (HKLM-x32\...\{CF729C29-193F-3B12-BB05-A3641AFF527D}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Library PGO Headers Package (HKLM-x32\...\{A25AF121-7B85-377A-B4CB-6365D64867B6}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Library PGO X64 Package (HKLM-x32\...\{FD46E567-D16A-320F-B6F5-EBB039FC808F}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Library PGO X86 Package (HKLM-x32\...\{272A3B5D-BDBB-36A2-9BF6-674D888D9FA3}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ Library PGO X86 Package (HKLM-x32\...\{F8105EE2-F948-3226-BDEC-3544D164D7AE}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ MSBuild ARM Package (HKLM-x32\...\{CD527B8C-433E-37C2-8540-2CFEA46A2895}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ MSBuild Base Package (HKLM-x32\...\{B0DCAF6A-25F5-3514-8257-8B29C73E357D}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ MSBuild Base Resource Package (HKLM-x32\...\{181E5348-0A6C-36FE-A387-D9B5835B8784}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ MSBuild X64 Package (HKLM-x32\...\{637D4863-23B1-3093-A972-3FBCACF5C896}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual C++ MSBuild X86 Package (HKLM-x32\...\{4C537CC1-74AC-343D-B7C8-A5D2A71C7988}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Visual Studio Build Tools 2019 (HKLM-x32\...\99273866) (Version: 16.11.44 - Microsoft Corporation)
Visual Studio Community 2022 (HKLM-x32\...\f23daa5f) (Version: 17.13.6 - Microsoft Corporation)
Visual Studio Community 2022 Preview (HKLM-x32\...\ac5a44e7) (Version: 17.14.0 Preview 2.0 - Microsoft Corporation)
Visual Studio Graphics Analyzer (x64) (HKLM\...\{25354AA8-8029-3E58-8A8C-25BE7467CB12}) (Version: 16.0.35323 - Microsoft Corporation) Hidden
VS Immersive Activate Helper (HKLM-x32\...\{BE00F49A-2FA1-46E6-B30F-A2653BF7CD75}) (Version: 17.0.157.0 - Microsoft Corporation) Hidden
VS JIT Debugger (HKLM\...\{6C1EDC0A-E71D-44D2-821C-213A5CD15498}) (Version: 17.0.157.0 - Microsoft Corporation) Hidden
VS Script Debugging Common (HKLM\...\{F5796163-6EC6-488A-B2DE-E1E94477F6AD}) (Version: 17.0.157.0 - Microsoft Corporation) Hidden
VS WCF Debugging (HKLM\...\{F7F70D15-A1C1-42D5-A47F-AD0AC223C5AD}) (Version: 17.0.157.0 - Microsoft Corporation) Hidden
vs_BlendMsi (HKLM-x32\...\{1E1DA8EE-8B58-4AD6-99D1-DA8AB75D5A09}) (Version: 17.13.35710 - Microsoft Corporation) Hidden
vs_clickoncebootstrappermsi (HKLM-x32\...\{0FA12918-0281-42F2-B5AE-A936BC17F5E1}) (Version: 17.14.35906 - Microsoft Corporation) Hidden
vs_clickoncebootstrappermsires (HKLM-x32\...\{F1E93788-7852-47C4-890D-235CF0598FAD}) (Version: 17.14.35828 - Microsoft Corporation) Hidden
vs_clickoncesigntoolmsi (HKLM-x32\...\{384FDA9B-8D33-4F73-B734-1B9D08B4B93B}) (Version: 17.14.35828 - Microsoft Corporation) Hidden
vs_communitymsi (HKLM-x32\...\{375AFBC1-2264-470C-9ADE-2C0BF23328A2}) (Version: 16.11.34930 - Microsoft Corporation) Hidden
vs_communitymsires (HKLM-x32\...\{CD7FE52F-65EE-49DD-B2FA-2AA31852F78D}) (Version: 17.14.35906 - Microsoft Corporation) Hidden
vs_communitysharedmsi (HKLM-x32\...\{0E31DD9E-AAB0-4CEA-A08E-8575AEAE7163}) (Version: 17.14.35906 - Microsoft Corporation) Hidden
vs_communityx64msi (HKLM\...\{91DB6702-00D9-474B-8739-8EBABFDD1481}) (Version: 17.14.35906 - Microsoft Corporation) Hidden
vs_CoreEditorFonts (HKLM-x32\...\{1851460E-0E63-4117-B5BA-25A2F045801B}) (Version: 17.7.40001 - Microsoft Corporation)
vs_devenvsharedmsi (HKLM-x32\...\{BEF5E0C2-3AB5-4EDB-A6AE-6EAE9742096B}) (Version: 17.14.35828 - Microsoft Corporation) Hidden
vs_devenx64vmsi (HKLM\...\{47159B64-D21A-418B-9CFB-5B493F396625}) (Version: 17.14.35828 - Microsoft Corporation) Hidden
vs_filehandler_amd64 (HKLM-x32\...\{9F2A45E7-2501-46CE-8642-18170FE31440}) (Version: 17.14.35828 - Microsoft Corporation) Hidden
vs_filehandler_x86 (HKLM-x32\...\{8900C982-E53C-493F-B9A6-E9E3CC73B26B}) (Version: 17.14.35828 - Microsoft Corporation) Hidden
vs_FileTracker_Singleton (HKLM-x32\...\{4C7A87D2-E29C-4270-818A-E3A909213770}) (Version: 17.14.35828 - Microsoft Corporation) Hidden
vs_githubprotocolhandlermsi (HKLM-x32\...\{74E04B73-EA65-4420-AEDC-46B3A8F50217}) (Version: 17.14.35828 - Microsoft Corporation) Hidden
vs_Graphics_Singletonx64 (HKLM\...\{6FEB08A0-D946-4D29-A6E1-52C30DD966F1}) (Version: 17.13.35716 - Microsoft Corporation) Hidden
vs_Graphics_Singletonx86 (HKLM-x32\...\{5EE3E8D2-ED84-4D79-BF42-FF349AE1E49E}) (Version: 17.13.35716 - Microsoft Corporation) Hidden
vs_minshellinteropmsi (HKLM-x32\...\{883D29E5-9A41-4C45-A192-C10B8078BF0C}) (Version: 16.10.31306 - Microsoft Corporation) Hidden
vs_minshellinteropsharedmsi (HKLM-x32\...\{454F5EAD-4860-4321-8602-2FC088ACBC96}) (Version: 17.14.35828 - Microsoft Corporation) Hidden
vs_minshellinteropx64msi (HKLM\...\{1A0A69F4-060D-464A-90DA-36EA27646347}) (Version: 17.14.35828 - Microsoft Corporation) Hidden
vs_minshellmsi (HKLM-x32\...\{C1337DAC-D78B-4435-B795-29E8B7D5E75C}) (Version: 16.11.34902 - Microsoft Corporation) Hidden
vs_minshellmsires (HKLM-x32\...\{839A55FE-D6FE-4454-B3BF-169E371A5ADD}) (Version: 17.14.35828 - Microsoft Corporation) Hidden
vs_minshellsharedmsi (HKLM-x32\...\{C854CFCF-BF0A-4DFE-805E-C309FC79CA40}) (Version: 17.14.35828 - Microsoft Corporation) Hidden
vs_minshellx64msi (HKLM\...\{021AAEE6-F41C-495B-A269-7019146603C8}) (Version: 17.14.35828 - Microsoft Corporation) Hidden
vs_SQLClickOnceBootstrappermsi (HKLM-x32\...\{7FF936BB-9A43-4694-A56C-89F19C6B08E5}) (Version: 17.14.35828 - Microsoft Corporation) Hidden
vs_tipsmsi (HKLM-x32\...\{2B9D34C6-F456-4015-987F-60B021946F9F}) (Version: 17.14.35828 - Microsoft Corporation) Hidden
vs_vswebprotocolselectormsi (HKLM-x32\...\{6A880210-D457-4822-962E-4320971EDC5F}) (Version: 17.14.35828 - Microsoft Corporation) Hidden
WinAppDeploy (HKLM-x32\...\{01480B27-98AB-3B8E-1599-EFE7C97F7DFB}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
WinAppDeploy (HKLM-x32\...\{2ADF1977-BF31-E127-B651-AC28A8658317}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
WinAppDeploy (HKLM-x32\...\{C952A289-86CA-9322-7C44-F6E7526FD5E3}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows App Certification Kit Native Components (HKLM\...\{8C7DB821-8EBD-A39C-4C55-B0876CD9556E}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows App Certification Kit SupportedApiList x86 (HKLM-x32\...\{DE9FB02D-A51D-B710-CAE3-31079D6FCAB4}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows App Certification Kit x64 (HKLM-x32\...\{5CE89540-7607-5B94-A43C-871CB1D3EBAA}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows App Certification Kit x64 (OnecoreUAP) (HKLM-x32\...\{D23C6627-2DB8-3D66-4FCB-05BD2EB6A886}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows Desktop Extension SDK (HKLM-x32\...\{3C3D91A0-8278-3DFA-2319-AA08B997A37C}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows Desktop Extension SDK (HKLM-x32\...\{D3B54AAA-2B64-5DE2-EA64-9900152E5282}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows Desktop Extension SDK (HKLM-x32\...\{D6982C58-1FDC-FB2E-B55A-7329ADE7315C}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows Desktop Extension SDK Contracts (HKLM-x32\...\{779B6704-D2FB-9087-C7FB-0AA1586F6FCD}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows Desktop Extension SDK Contracts (HKLM-x32\...\{803DB595-AE4B-8809-2421-8B1861D0F2FD}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows Desktop Extension SDK Contracts (HKLM-x32\...\{A34A6580-86EF-A26A-33A5-80E1919B7F75}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows Driver Package - Google, Inc. (WinUSB) AndroidUsbDeviceClass  (01/06/2021 4.8.0.0) (HKLM\...\A24A5DD571B1BD4FED5E3558FDDBD8579A5EE14C) (Version: 01/06/2021 4.8.0.0 - Google, Inc.)
Windows Driver Package - Google, Inc. (WinUSB) AndroidUsbDeviceClass  (08/27/2012 7.0.0000.00004) (HKLM\...\BE156A27AFEAEA39D6A7C9D25CFA8DAFAF91756B) (Version: 08/27/2012 7.0.0000.00004 - Google, Inc.)
Windows Driver Package - HS Incorporated (massfilter_hs) USB  (10/20/2010 2.0.0.8) (HKLM\...\80E97631DA49E8B2E4C5B606C9597BC75EE612F5) (Version: 10/20/2010 2.0.0.8 - HS Incorporated)
Windows Driver Package - HTC, Corporation (HTCAND64) USB  (07/30/2015 2.0.0007.00030) (HKLM\...\C45A70BDABC1DAE5CCD49C4E701E67757AB039E6) (Version: 07/30/2015 2.0.0007.00030 - HTC, Corporation)
Windows Driver Package - LG Electronics Inc. (Andbus) USB  (11/30/2010 2.2.0.0) (HKLM\...\7972D4F247E02C0849331540773B9ABFA384B182) (Version: 11/30/2010 2.2.0.0 - LG Electronics Inc.)
Windows Driver Package - LG Electronics Inc. (AndDiag) Ports  (11/30/2010 2.2.0.0) (HKLM\...\A3F0461CF2623C40BC42C38D4C0E7319E5C458CA) (Version: 11/30/2010 2.2.0.0 - LG Electronics Inc.)
Windows Driver Package - LG Electronics Inc. (usbbus) USB  (02/17/2016 5.3.0.0) (HKLM\...\6188905E45DED139E292A4F6A3CA637A65162F4D) (Version: 02/17/2016 5.3.0.0 - LG Electronics Inc.)
Windows Driver Package - LG Electronics, Inc. (AndnetBus) USB  (01/06/2021 4.8.0.0) (HKLM\...\4F72F5ED592B4C4B69E07DA9895BAE687A32F8AA) (Version: 01/06/2021 4.8.0.0 - LG Electronics, Inc.)
Windows Driver Package - Motorola (motccgp) USB  (03/01/2013 3.4.0.0) (HKLM\...\73BEF56236CE0FD380A1692BBA70B9C6B533518B) (Version: 03/01/2013 3.4.0.0 - Motorola)
Windows Driver Package - PANTECH Co., Ltd.  (PSKTBUS) USB  (06/20/2012 4.0.21.0) (HKLM\...\31F11A15A3058696191A3708600383CAA429752E) (Version: 06/20/2012 4.0.21.0 - PANTECH Co., Ltd. )
Windows Driver Package - SAMSUNG Electronics Co., Ltd.  (dg_ssudbus) USB  (06/10/2014 2.11.10.0) (HKLM\...\7C7D77F30DA293C8D56A9D5FB8C3E70F4E17DA7F) (Version: 06/10/2014 2.11.10.0 - SAMSUNG Electronics Co., Ltd. )
Windows Driver Package - SAMSUNG Electronics Co., Ltd.  (dg_ssudbus) USB  (12/02/2015 2.12.1.0) (HKLM\...\85A33267F12961AF9ED9AE799DEDA5E62BEA236F) (Version: 12/02/2015 2.12.1.0 - SAMSUNG Electronics Co., Ltd. )
Windows Driver Package - SAMSUNG Electronics Co., Ltd.  (ssadbus) USB  (11/30/2012 5.30.14.0) (HKLM\...\C9AEC81E4D365534AF50161EDA7C9CC56B205507) (Version: 11/30/2012 5.30.14.0 - SAMSUNG Electronics Co., Ltd. )
Windows Driver Package - SAMSUNG Electronics Co., Ltd.  (ssaebus) USB  (02/05/2010 5.14.0.0) (HKLM\...\8CDE6EEFC346A059EC210060FC7B7DAA8279D584) (Version: 02/05/2010 5.14.0.0 - SAMSUNG Electronics Co., Ltd. )
Windows Driver Package - SAMSUNG Electronics Co., Ltd.  (ssudmdm) Modem  (12/02/2015 2.12.1.0) (HKLM\...\88ED314360B98E6E82E7CC3201FAEB4A9FD291B4) (Version: 12/02/2015 2.12.1.0 - SAMSUNG Electronics Co., Ltd. )
Windows Driver Package - SAMSUNG Electronics Co., Ltd.  (WinUSB) AndroidUsbDeviceClass  (12/02/2015 2.12.1.0) (HKLM\...\701281E8283E9E3681220099A9DA5013A5A437AF) (Version: 12/02/2015 2.12.1.0 - SAMSUNG Electronics Co., Ltd. )
Windows Driver Package - SHARP (shu0bus) USB  (08/11/2011 5.28.4.0) (HKLM\...\8A1FC0FFE8E99DF8171E25D8C5AFF587290A67EF) (Version: 08/11/2011 5.28.4.0 - SHARP)
Windows Espc Package (HKLM-x32\...\{AD701057-BFDE-3036-A91F-8DA6396E5381}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Windows Espc Package (HKLM-x32\...\{E3A92238-71A5-35EC-AE23-F5770FA5AB1D}) (Version: 14.0.24247 - Microsoft Corporation) Hidden
Windows IoT Extension SDK (HKLM-x32\...\{084094EF-6AC9-480A-7CC1-04199047BBDD}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows IoT Extension SDK (HKLM-x32\...\{C25508AC-1993-B2D8-1225-A80673CF7697}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows IoT Extension SDK (HKLM-x32\...\{CFF175F4-9F1D-289D-B99E-EA6AFCF28F4E}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows IoT Extension SDK Contracts (HKLM-x32\...\{497B2D49-F5C2-CA3B-05FF-22ABF39F2873}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows IoT Extension SDK Contracts (HKLM-x32\...\{8D92043C-84C1-368A-885F-5FD8B92200EC}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows IoT Extension SDK Contracts (HKLM-x32\...\{BA040A69-17D0-452D-1DEB-FBEDB85C6B8A}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows IP Over USB (HKLM-x32\...\{1D0D4879-B2B9-D59C-47A5-32299228E771}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows Mobile Extension SDK (HKLM-x32\...\{5AC8C845-8C75-B6EF-6441-7DE1633334A1}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows Mobile Extension SDK (HKLM-x32\...\{718C25EB-084C-6341-1C3E-589DA641C28F}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows Mobile Extension SDK (HKLM-x32\...\{A3D0A593-20CD-83E6-83DE-6068053F2BDF}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows Mobile Extension SDK Contracts (HKLM-x32\...\{01E7E930-A0F4-5340-5E2D-92EFC9D5821D}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows Mobile Extension SDK Contracts (HKLM-x32\...\{6D6A343D-4A60-87F2-7A45-7ECDEA7DD950}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows Mobile Extension SDK Contracts (HKLM-x32\...\{7A9E937D-9757-80CB-A6E3-F4AB6081AEA6}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK (HKLM-x32\...\{7A91E629-70C7-CB0E-E4E7-0579A40ABA0D}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows SDK AddOn (HKLM-x32\...\{E18618EC-D9DB-4BCE-B382-85ADA2CBB340}) (Version: 10.1.0.0 - Microsoft Corporation)
Windows SDK ARM Desktop Tools (HKLM-x32\...\{940042ED-CB90-8E03-BE68-DF8A76E661FD}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK ARM Desktop Tools (HKLM-x32\...\{963BD0BD-2098-D21C-AA37-39876C732819}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK ARM64 Desktop Tools (HKLM-x32\...\{88943FC0-E708-63FF-82A7-DB32C033285B}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows SDK Desktop Headers arm (HKLM-x32\...\{31D517CE-04EE-F508-87C6-A503372B02A1}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK Desktop Headers arm (HKLM-x32\...\{4BD2B107-B0D3-850C-7135-ACA153D30C78}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK Desktop Headers arm64 (HKLM-x32\...\{0B6ED986-CD2F-3502-BA9B-CDEEC4000C72}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows SDK Desktop Headers arm64 (HKLM-x32\...\{A69CD06B-FED5-81AD-3D62-38B325BAD254}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK Desktop Headers arm64 (HKLM-x32\...\{C88797F9-0AD8-E022-5BBB-596BC78D4C76}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK Desktop Headers x64 (HKLM-x32\...\{3A928615-B22E-42B6-A30A-CB7B1135F1CF}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK Desktop Headers x64 (HKLM-x32\...\{C81D239D-863A-D4B4-3562-BC8D3D7C271E}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK Desktop Headers x64 (HKLM-x32\...\{D34289DA-A25B-0C94-AD6E-B2F536F60AA0}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows SDK Desktop Headers x86 (HKLM-x32\...\{3D5981B5-ABF0-1495-7FC3-102D1C75B9C8}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK Desktop Headers x86 (HKLM-x32\...\{C32E43F0-1991-3D8C-CAEC-DF5635556936}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows SDK Desktop Headers x86 (HKLM-x32\...\{F50E3BAF-A09C-0730-319C-56221E12B747}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK Desktop Libs arm (HKLM-x32\...\{2AC29D7B-F29F-34FA-4434-C5DF1F086264}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK Desktop Libs arm (HKLM-x32\...\{2F5EB743-8C97-930F-F41E-2EC8D5D5565B}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK Desktop Libs arm64 (HKLM-x32\...\{69E8303E-E2A4-72F4-7B02-9F159983B9E7}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows SDK Desktop Libs arm64 (HKLM-x32\...\{87CB1714-C57F-13EA-8982-8F720B44BCF3}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK Desktop Libs arm64 (HKLM-x32\...\{9555AB64-6A00-776F-CA44-568E0E7B9632}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK Desktop Libs x64 (HKLM-x32\...\{170B023D-7C1B-2EF4-D3E9-B974A26752AC}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK Desktop Libs x64 (HKLM-x32\...\{67FFDF2B-3851-3383-4723-FD359EB35FA8}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows SDK Desktop Libs x64 (HKLM-x32\...\{838DC63C-34E9-9DBB-3A07-AEFC7768DC2A}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK Desktop Libs x86 (HKLM-x32\...\{24DAC073-46EA-ED5D-860A-845E8A27F426}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK Desktop Libs x86 (HKLM-x32\...\{7DD1F495-F1BF-6A30-620F-AC064DD302D8}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK Desktop Libs x86 (HKLM-x32\...\{AE11C7C5-F0D8-C564-C291-5D0321BD5B83}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows SDK Desktop Tools arm64 (HKLM-x32\...\{06E580FA-F3B2-08E9-4DC0-0AB55D985CBB}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK Desktop Tools arm64 (HKLM-x32\...\{3EB37FA5-1F6C-3B24-C653-BA4F9789D6F3}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows SDK Desktop Tools arm64 (HKLM-x32\...\{A4634E74-BFEE-CF6C-BF53-8D5E252FC574}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK Desktop Tools x64 (HKLM-x32\...\{B92141F5-B9B3-67CD-6A6D-71F5D3E11359}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows SDK Desktop Tools x64 (HKLM-x32\...\{BED088F5-660E-C8E2-9FF4-F652445CC5FA}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK Desktop Tools x64 (HKLM-x32\...\{F9BDEC71-9E56-CFBF-0AE8-E7AF032D07C7}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK Desktop Tools x86 (HKLM-x32\...\{1C966E96-8553-EF1E-A06F-A8174B3CAA60}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK Desktop Tools x86 (HKLM-x32\...\{6B266D44-C681-9183-50E2-00F281FC9018}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows SDK Desktop Tools x86 (HKLM-x32\...\{CACD4EBA-F620-A294-1B60-3CEB0954FE02}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK DirectX x64 Remote (HKLM\...\{C9240A1C-86CA-D557-FD56-652078A93E9F}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows SDK DirectX x86 Remote (HKLM-x32\...\{EC49A9C6-2655-D4FF-ADB8-CAD50569FB0F}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows SDK EULA (HKLM-x32\...\{4D49CCD8-47A7-B104-579C-6AAB2E723D5F}) (Version: 10.1.26100.2454 - Microsoft Corporations) Hidden
Windows SDK EULA (HKLM-x32\...\{A50A075D-973C-1867-4228-738205D555C8}) (Version: 10.1.19041.685 - Microsoft Corporations) Hidden
Windows SDK Facade Windows WinMD Versioned (HKLM-x32\...\{0DCC35E9-AA3D-C658-CDA6-8D7353B06360}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows SDK Facade Windows WinMD Versioned (HKLM-x32\...\{2D296649-CFBE-CF23-EA8E-E24554187B3F}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK Facade Windows WinMD Versioned (HKLM-x32\...\{7741665B-2D3B-7E24-1014-56B62296CD88}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps (HKLM-x32\...\{126ED928-7293-4A33-76D3-FC228984BA93}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Contracts (HKLM-x32\...\{2A8533B3-8D16-67E4-E729-5BB04EDD2FE4}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Contracts (HKLM-x32\...\{5F1CD2CB-9C4E-BF51-9C82-DE916CA5E4AE}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Contracts (HKLM-x32\...\{AED11588-0097-3BA4-5558-524952AB846C}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps DirectX x86 Remote (HKLM-x32\...\{0CA54C8B-6FBE-7031-D73A-5DF186A487E5}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps DirectX x86 Remote (HKLM-x32\...\{0E2FEA3B-C853-DE2A-8A04-BB7D5BF010E0}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps DirectX x86 Remote (HKLM-x32\...\{5E5BB524-BA91-E7DE-4A85-11EC531AA622}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Headers (HKLM-x32\...\{76749279-BE8A-20AF-F257-0A79E080CF7E}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Headers (HKLM-x32\...\{8E9DD3FE-3338-8012-81C5-F3AA9B617BAE}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Headers (HKLM-x32\...\{AB50FEE7-CE1C-F7E2-84FE-7DE4D5AD1DA5}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Headers OnecoreUap (HKLM-x32\...\{19356857-7B22-662D-8EE9-EBA5BB087C67}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Libs (HKLM-x32\...\{1FBBD022-F751-FE7B-54DF-9FED23892B2F}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Libs (HKLM-x32\...\{CE1B7747-A39C-46B8-EB6F-01E5262B1289}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Libs (HKLM-x32\...\{E5F00492-E168-4AAC-02EA-0CC97B33952C}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Metadata (HKLM-x32\...\{286ED432-B4B5-2E65-D102-EEBA1E6C15A8}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Metadata (HKLM-x32\...\{2CFB2180-7C20-5470-4B8A-747512A6AB70}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Metadata (HKLM-x32\...\{4A130AF9-EC97-7D26-1FB0-03A0E5CC672B}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Tools (HKLM-x32\...\{17E17D69-4145-E4CA-EC7C-1A485D2EF736}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Tools (HKLM-x32\...\{35552522-5930-E1A1-B1E9-FF78918E1543}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Tools (HKLM-x32\...\{4AC6C7FB-D848-9D68-DCB0-1376083FEA3A}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Managed Apps Libs (HKLM-x32\...\{0374E0D0-98AE-0078-841E-DE9F70EDCB90}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Managed Apps Libs (HKLM-x32\...\{DB48A5D0-FA04-8BF3-C42A-3A27CF4B4E8F}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Managed Apps Libs (HKLM-x32\...\{FF7D4409-CF59-34AE-BDC7-8A6146A9BA36}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK Modern Non-Versioned Developer Tools (HKLM-x32\...\{2AB749AF-49D4-F52F-5AC0-121224D8F57D}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows SDK Modern Versioned Developer Tools (HKLM-x32\...\{C65278B7-2A3B-2D88-1489-991195ECF5F2}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK Modern Versioned Developer Tools (HKLM-x32\...\{F3DF5E7C-DB07-AFC2-28A9-F21659702B8A}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows SDK Modern Versioned Developer Tools (HKLM-x32\...\{FC5A59F8-6BEE-FBB4-C720-47C565A92798}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK OnecoreUap Headers arm64 (HKLM-x32\...\{D25EBB27-9157-FBAF-2D90-4D70E11CBF72}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows SDK OnecoreUap Headers x64 (HKLM-x32\...\{28124292-4034-2C73-486C-872B1F3BF558}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows SDK OnecoreUap Headers x86 (HKLM-x32\...\{48501F4B-8AB9-078D-F93B-874ED8AD5542}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows SDK Redistributables (HKLM-x32\...\{343C5964-281D-8338-94CF-2596CF892AD3}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows SDK Signing Tools (HKLM-x32\...\{2DEA0B13-4C4D-E0B1-BCDC-EAE44B39C4C1}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows SDK Signing Tools (HKLM-x32\...\{56E349AC-F849-A151-269B-8CFF2D14BB14}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK Signing Tools (HKLM-x32\...\{B62A26BB-90A0-82FB-2DDC-3157ADF07833}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows Software Development Kit - Windows 10.0.19041.685 (HKLM-x32\...\{4591faf1-a2db-4a3d-bfda-aa5a4ebb1587}) (Version: 10.1.19041.685 - Microsoft Corporation)
Windows Software Development Kit - Windows 10.0.22621.3233 (HKLM-x32\...\{71684ad3-afc2-4a65-9d45-92ef58510f18}) (Version: 10.1.22621.3233 - Microsoft Corporation)
Windows Software Development Kit - Windows 10.0.26100.2454 (HKLM-x32\...\{573bc5b4-43ba-4def-8a32-29619666cd39}) (Version: 10.1.26100.2454 - Microsoft Corporation)
Windows Software Development Kit DirectX x64 Remote (HKLM\...\{5247E16E-BCF8-95AB-1653-B3F8FBF8B3F1}) (Version: 8.100.25984 - Microsoft Corporation) Hidden
Windows Software Development Kit DirectX x86 Remote (HKLM-x32\...\{A1CB8286-CFB3-A985-D799-721A0F2A27F3}) (Version: 8.100.25984 - Microsoft Corporation) Hidden
Windows Software Development Kit for Windows Store Apps DirectX x64 Remote (HKLM\...\{96F4525A-470D-F15C-796E-58D9988C3E5F}) (Version: 8.100.25984 - Microsoft Corporation) Hidden
Windows Software Development Kit for Windows Store Apps DirectX x86 Remote (HKLM-x32\...\{56AD3004-0B49-967F-F682-B05650B61A78}) (Version: 8.100.25984 - Microsoft Corporation) Hidden
Windows Subsystem for Linux (HKLM\...\{4D1F0C57-B154-4968-81B8-C8CA343B7998}) (Version: 2.4.11.0 - Microsoft Corporation) Hidden
Windows Team Extension SDK (HKLM-x32\...\{42C1CE16-8BB3-3AF9-C172-55C1AECA01BC}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows Team Extension SDK (HKLM-x32\...\{908BD5F8-E6C6-D2F6-AC09-C9F36EBC1A5F}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows Team Extension SDK (HKLM-x32\...\{CE7E4A6A-45A2-2968-4B34-D0D4CFCC0E1D}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows Team Extension SDK Contracts (HKLM-x32\...\{5F616EBF-DF09-A2DA-AB66-3A5341FA611C}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows Team Extension SDK Contracts (HKLM-x32\...\{EC8B4122-142E-3D49-3A0F-5C00F75E96A0}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
Windows Team Extension SDK Contracts (HKLM-x32\...\{FAA6B22E-702C-2AC7-05B1-197CD7CEA21D}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
windows_toolscorepkg (HKLM-x32\...\{F579C63F-13C9-4047-ABD2-F9F9C84E8FD1}) (Version: 17.13.35716 - Microsoft Corporation) Hidden
WinHTTrack Website Copier 3.49-2 (x64) (HKLM\...\WinHTTrack Website Copier_is1) (Version: 3.49.2 - HTTrack)
WinRAR 7.10 beta 3 (64-bit) (HKLM\...\WinRAR archiver) (Version: 7.10.3 - win.rar GmbH)
WinRT Intellisense Desktop - en-us (HKLM-x32\...\{1C8A7CB2-4DBF-9A3E-8BAF-A49B7BCF1031}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
WinRT Intellisense Desktop - en-us (HKLM-x32\...\{B3CFDD53-69FB-E652-4F3D-D3781CF7F66E}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
WinRT Intellisense Desktop - en-us (HKLM-x32\...\{BCF7CA0F-E53C-2A4F-B128-A751EC9A1016}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
WinRT Intellisense Desktop - Other Languages (HKLM-x32\...\{538E91F2-5231-E289-051F-DB55DE88CF56}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
WinRT Intellisense Desktop - Other Languages (HKLM-x32\...\{A75B465E-5CC5-3E4F-A167-68519D64C79C}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
WinRT Intellisense Desktop - Other Languages (HKLM-x32\...\{B42BF427-AFDB-C00F-DB60-6F51395D74A1}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - en-us (HKLM-x32\...\{3335615C-ABEB-960E-2226-4274CD28E046}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - en-us (HKLM-x32\...\{44E4AFD9-74E0-9631-4CE0-E7C779624FE2}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - en-us (HKLM-x32\...\{D6613665-34B5-ABA8-8628-C7B0FA589E9F}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - Other Languages (HKLM-x32\...\{216D5F47-257D-6284-5849-B51037875EFA}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - Other Languages (HKLM-x32\...\{5056AAC5-4AC4-6D0A-4FF7-D13C86BD9F55}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - Other Languages (HKLM-x32\...\{6430F847-9A5F-B3B8-7EEE-355F9F1CCD47}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
WinRT Intellisense Mobile - en-us (HKLM-x32\...\{443FF51E-16C3-F23B-18FC-0D1D66024B0B}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
WinRT Intellisense Mobile - en-us (HKLM-x32\...\{7E99A93A-8345-8BB6-EADB-10461E81BE0F}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
WinRT Intellisense Mobile - en-us (HKLM-x32\...\{80F97EDC-2F4C-B0A8-BD73-08E9F44C1DD0}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - en-us (HKLM-x32\...\{15E29AFF-CB19-A20B-9A81-B0765A63115F}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - en-us (HKLM-x32\...\{2392AB8B-FA6E-410C-CD54-5992E9347161}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - en-us (HKLM-x32\...\{C5BEF528-FEAA-9607-907E-0972D86AD06F}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - Other Languages (HKLM-x32\...\{5EBB309A-2974-F721-42A9-0212E54B3693}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - Other Languages (HKLM-x32\...\{F5766C7B-E0D6-D5AF-F94B-1954157BBE9B}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - Other Languages (HKLM-x32\...\{FF2B49B7-0254-3D6A-4BE0-EF4C59DBCC2B}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - en-us (HKLM-x32\...\{0AF3B821-474B-1885-473A-6E3FB4F1CF71}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - en-us (HKLM-x32\...\{577594BD-F29E-2360-88B8-BBB3D0ED3355}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - en-us (HKLM-x32\...\{94DE555A-B513-762F-D7C6-2B2922940641}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - Other Languages (HKLM-x32\...\{2BB83825-777C-DF6E-631B-1E88E4C8D475}) (Version: 10.1.26100.2454 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - Other Languages (HKLM-x32\...\{3C25B44A-1D95-9E5E-57E3-19D9AE3C3BC1}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - Other Languages (HKLM-x32\...\{8832F8ED-1035-9ABE-FD73-4E5ABAA84A5C}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Wireshark 4.4.5 x64 (HKLM-x32\...\Wireshark) (Version: 4.4.5 - The Wireshark developer community, hxxps://www.wireshark.org)
Wondershare Dr.Fone (Version 13.7.1) (HKLM-x32\...\{E8F86DA8-B8E4-42C7-AFD4-EBB692AC43FD}_is1) (Version: 13.7.1.506 - Wondershare Technology Co.,Ltd.)
Wondershare Helper Compact 2.5.3 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.5.3 - Wondershare)
Wondershare Recoverit(Build 13.5.4.3) (HKLM-x32\...\{829555DC-31E5-4FEA-B350-8FCF24CECD95}_is1) (Version: 13.5.4.3 - Wondershare Software Co.,Ltd.)
Wondershare UniConverter 15(Build 15.7.3.47) (HKLM\...\UniConverter 15_is1) (Version: 15.7.3.47 - Wondershare Software)
Workflow Manager Client 1.0 (HKLM\...\{69CD1F2D-DF68-4E23-9108-1B70783F2855}) (Version: 2.1.10525.2 - Microsoft Corporation) Hidden
Workflow Manager Tools 1.0 for Visual Studio (HKLM\...\{3274FDA3-2DBA-40F1-B7C6-B7788577FEC6}) (Version: 17.10.30122.0 - Microsoft Corporation) Hidden
WPT Redistributables (HKLM-x32\...\{336E51B9-5532-CEFC-D0DD-860ECB4D5520}) (Version: 10.1.26100.2454 - Microsoft) Hidden
WPTx64 (DesktopEditions) (HKLM-x32\...\{B7657738-DC6C-5115-D483-F58333E47F42}) (Version: 10.1.26100.2454 - Microsoft) Hidden
WPTx64 (OnecoreUAP) (HKLM-x32\...\{EA53C1F4-C36B-B9A8-6E64-CA97A99F16A7}) (Version: 10.1.26100.2454 - Microsoft) Hidden
xDB Replication Server 7.7.0 (HKLM\...\xDB Replication Server 7.7.0-1) (Version: 7.7.0-1 - EnterpriseDB)
Yubico Authenticator (HKLM\...\{F28B6712-856D-45A3-A67A-5BEDB18C2964}) (Version: 7.1.1 - Yubico AB)
ZMotif SDKs (HKLM-x32\...\ZMotif SDKs) (Version: 3.6.0.55 - Zebra Technologies)
Zoom Workplace (HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\ZoomUMX) (Version: 6.3.11 (60501) - Zoom Communications, Inc.)

Packages:
=========
@{MicrosoftWindows.55182690.Taskbar_1000.27818.1000.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\Windows\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-04-02] (Microsoft Windows)
Aura Desktop Collector -> C:\Program Files\WindowsApps\AuraDesktopCollector_1.0.0.34_x64__k39x8bfgayfx4 [2025-04-07] (Aura) [Startup Task]
Dev Home Azure Extension -> C:\Program Files\WindowsApps\Microsoft.Windows.DevHomeAzureExtension_0.1300.624.0_x64__8wekyb3d8bbwe [2025-02-19] (Microsoft Corporation)
Dev Home GitHub Extension -> C:\Program Files\WindowsApps\Microsoft.Windows.DevHomeGitHubExtension_0.1800.625.0_x64__8wekyb3d8bbwe [2025-02-19] (Microsoft Corporation)
Dolby Access OEM -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAccessOEM_3.26.3000.0_x64__rz1tebttyb220 [2025-03-18] (Dolby Laboratories)
FleetShellExt -> C:\Users\Adminstrator\AppData\Local\Programs\Fleet [2025-04-21] ()
Hyper-VEM -> C:\Program Files\WindowsApps\56049DakhamaMehdi.HyperVEM_3.0.0.0_x64__zpzhp6ngr1dc6 [2025-04-05] (Dakhama Mehdi)
iCloud -> C:\Program Files\WindowsApps\AppleInc.iCloud_15.3.146.0_x64__nzyj5cx40ttqa [2025-03-27] (Apple Inc.) [Startup Task]
Ink.Handwriting.en-US.1.0 -> C:\Program Files\WindowsApps\Microsoft.Ink.Handwriting.en-US.1.0_0.780.13.0_x64__8wekyb3d8bbwe [2025-02-28] (Microsoft Corporation)
Ink.Handwriting.en-US.1.0 -> C:\Program Files\WindowsApps\Microsoft.Ink.Handwriting.en-US.1.0_0.780.13.0_x86__8wekyb3d8bbwe [2025-02-28] (Microsoft Corporation)
Ink.Handwriting.Main.en-US.1.0 -> C:\Program Files\WindowsApps\Microsoft.Ink.Handwriting.Main.en-US.1.0.1_0.780.13.0_x64__8wekyb3d8bbwe [2025-02-28] (Microsoft Corporation)
Julia -> C:\Program Files\WindowsApps\JuliaComputingInc.Julia_1.17.13.0_x64__b0ra4bp6jsp6c [2025-03-27] (Julia Computing, Inc.)
LinkedIn -> C:\Program Files\WindowsApps\7EE7776C.LinkedInforWindows_3.0.42.0_x64__w1wdnht996qgy [2025-04-11] (LinkedIn) [Startup Task]
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.44.0_x64__8wekyb3d8bbwe [2025-01-28] (Microsoft Corp.)
Microsoft.DevHomeMicrosoftGameDevExtension -> C:\Program Files\WindowsApps\Microsoft.DevHomeMicrosoftGameDevExtension_0.500.669.0_x64__8wekyb3d8bbwe [2025-02-19] (Microsoft Corporation)
Microsoft.StartExperiencesApp -> C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.1.327.0_x64__8wekyb3d8bbwe [2025-04-20] (Microsoft Corporation)
Notepad++ -> C:\Program Files\Notepad++\contextMenu [2025-04-03] (Notepad++)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.967.0_x64__56jybvy8sckqj [2025-01-18] (NVIDIA Corp.)
OfficePushNotificationsUtility -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE16 [2025-04-23] ()
PowerShell -> C:\Program Files\WindowsApps\Microsoft.PowerShell_7.5.0.0_x64__8wekyb3d8bbwe [2025-02-27] (Microsoft Corporation)
PowerToys FileLocksmith Context Menu -> C:\Users\Adminstrator\AppData\Local\PowerToys\WinUI3Apps [2025-03-07] (Microsoft)
PowerToys ImageResizer Context Menu -> C:\Users\Adminstrator\AppData\Local\PowerToys [2025-03-07] (Microsoft)
PowerToys PowerRename Context Menu -> C:\Users\Adminstrator\AppData\Local\PowerToys\WinUI3Apps [2025-03-07] (Microsoft)
Remote Desktop -> C:\Program Files\WindowsApps\Microsoft.RemoteDesktop_10.2.4008.0_x64__8wekyb3d8bbwe [2025-03-01] (Microsoft Corporation)
Telegram Desktop -> C:\Program Files\WindowsApps\TelegramMessengerLLP.TelegramDesktop_5.12.3.0_x64__t4vj0pshhgkwm [2025-04-05] (Telegram Messenger LLP) [Startup Task]
Ubuntu 22.04.5 LTS -> C:\Program Files\WindowsApps\CanonicalGroupLimited.Ubuntu22.04LTS_2204.5.10021.0_x64__79rhkp1fndgsc [2025-02-03] (Canonical Group Limited)
Widgets for UniGetUI -> C:\Program Files\WindowsApps\9932MartCliment.WingetUIWidgets_0.9.1.0_x64__g91dtg5srk15g [2025-03-15] (Martí Climent)
WinAppRuntime.Main.1.5 -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Main.1.5_5001.373.1736.0_x64__8wekyb3d8bbwe [2025-04-21] (Microsoft Corp.)
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_7000.456.1632.0_x64__8wekyb3d8bbwe [2025-04-22] (Microsoft Corp.)
Winch WSL -> C:\Program Files\WindowsApps\22955VineelSai.ArchWSL_1.3.0.0_x64__qz230bc1wsk9j [2025-03-17] (Vineel Sai)
WinDbg -> C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2502.25002.0_x64__8wekyb3d8bbwe [2025-03-27] (Microsoft Corporation)
Windows Feature Experience Pack -> C:\Windows\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-04-02] (Microsoft Windows)
WinRAR -> C:\Program Files\WinRAR [2025-03-13] (win.rar GmbH)
Wintoys -> C:\Program Files\WindowsApps\11413PtruceanBogdan.Wintoys_2.0.81.0_x64__ankwhmsh70gj6 [2025-04-14] (Bogdan Pătrăucean)
WSL Toolbox Beta -> C:\Program Files\WindowsApps\51084Zentiweb.WSLToolboxBeta_0.6.22.0_x64__jf6sk3a5stknm [2025-01-16] (FalconNL93)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2451002302-2018568227-764946658-1009_Classes\CLSID\{04271989-BBB7-0097-356F-91B51021305D} -> [OneDrive] => {a52bba46-e9e1-435f-b3d9-28daa648c0f6}
CustomCLSID: HKU\S-1-5-21-2451002302-2018568227-764946658-1009_Classes\CLSID\{0440049F-D1DC-4E46-B27B-98393D79486B}\InprocServer32 -> C:\Users\Adminstrator\AppData\Local\PowerToys\WinUI3Apps\PowerToys.PowerRenameExt.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2451002302-2018568227-764946658-1009_Classes\CLSID\{10144713-1526-46C9-88DA-1FB52807A9FF}\InprocServer32 -> C:\Users\Adminstrator\AppData\Local\PowerToys\PowerToys.SvgThumbnailProviderCpp.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2451002302-2018568227-764946658-1009_Classes\CLSID\{14100442-9664-1407-2647-000000000000}\localserver32 -> C:\Users\ADMIN_a1b2a\AppData\Local\Wondershare\Wondershare NativePush\WsToastNotification.exe (Wondershare Technology Group Co.,Ltd -> Wondershare)
CustomCLSID: HKU\S-1-5-21-2451002302-2018568227-764946658-1009_Classes\CLSID\{2aa9162e-c906-4dd9-ad0b-3d24a8eef5a0}\InprocServer32 -> C:\Windows\System32\Windows.UI.FileExplorer.dll_ => No File
CustomCLSID: HKU\S-1-5-21-2451002302-2018568227-764946658-1009_Classes\CLSID\{45228413-d6a1-5d2d-9614-653325cc9ca1}\localserver32 -> C:\Program Files\AuraApp\6.0.1\bin\Aura.App.exe (Aura Sub, LLC -> Aura)
CustomCLSID: HKU\S-1-5-21-2451002302-2018568227-764946658-1009_Classes\CLSID\{51B4D7E5-7568-4234-B4BB-47FB3C016A69}\InprocServer32 -> C:\Users\Adminstrator\AppData\Local\PowerToys\PowerToys.ImageResizerExt.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2451002302-2018568227-764946658-1009_Classes\CLSID\{60789D87-9C3C-44AF-B18C-3DE2C2820ED3}\InprocServer32 -> C:\Users\Adminstrator\AppData\Local\PowerToys\PowerToys.MarkdownPreviewHandlerCpp.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2451002302-2018568227-764946658-1009_Classes\CLSID\{635EFA6F-08D6-4EC9-BD14-8A0FDE975159}\localserver32 -> C:\Users\Adminstrator\AppData\Local\Lambdatest\LT Browser\Application\107.0.5304.110\notification_helper.exe (The LT Browser Authors) [File not signed]
CustomCLSID: HKU\S-1-5-21-2451002302-2018568227-764946658-1009_Classes\CLSID\{6480100b-5a83-4d1e-9f69-8ae5a88e9a33}\InprocServer32 -> C:\Windows\System32\Windows.UI.FileExplorer.dll_ => No File
CustomCLSID: HKU\S-1-5-21-2451002302-2018568227-764946658-1009_Classes\CLSID\{729B72CD-B72E-4FE9-BCBF-E954B33FE699}\InprocServer32 -> C:\Users\Adminstrator\AppData\Local\PowerToys\PowerToys.QoiPreviewHandlerCpp.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2451002302-2018568227-764946658-1009_Classes\CLSID\{77257004-6F25-4521-B602-50ECC6EC62A6}\InprocServer32 -> C:\Users\Adminstrator\AppData\Local\PowerToys\PowerToys.StlThumbnailProviderCpp.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2451002302-2018568227-764946658-1009_Classes\CLSID\{84D68575-E186-46AD-B0CB-BAEB45EE29C0}\InprocServer32 -> C:\Users\Adminstrator\AppData\Local\PowerToys\WinUI3Apps\PowerToys.FileLocksmithExt.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2451002302-2018568227-764946658-1009_Classes\CLSID\{86ca1aa0-34aa-4e8b-a509-50c905bae2a2}\InprocServer32 ->  => No File
CustomCLSID: HKU\S-1-5-21-2451002302-2018568227-764946658-1009_Classes\CLSID\{A0257634-8812-4CE8-AF11-FA69ACAEAFAE}\InprocServer32 -> C:\Users\Adminstrator\AppData\Local\PowerToys\PowerToys.GcodePreviewHandlerCpp.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2451002302-2018568227-764946658-1009_Classes\CLSID\{AA3D89E3-6C53-4C52-9866-13B2069B264D} -> [hak193.github.io/idevr-idea] => C:\Users\Adminstrator\CrossDevice\hak193.github.ioidevr-idea [2025-03-13 16:49]
CustomCLSID: HKU\S-1-5-21-2451002302-2018568227-764946658-1009_Classes\CLSID\{AD856B15-D25E-4008-AFB7-AFAA55586188}\InprocServer32 -> C:\Users\Adminstrator\AppData\Local\PowerToys\PowerToys.QoiThumbnailProviderCpp.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2451002302-2018568227-764946658-1009_Classes\CLSID\{afafe5e5-19fc-a376-6c9a-9f950e18928d}\localserver32 -> C:\Users\Adminstrator\AppData\Local\PowerToys\PowerToys.PowerLauncher.exe (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2451002302-2018568227-764946658-1009_Classes\CLSID\{D8034CFA-F34B-41FE-AD45-62FCBB52A6DA}\InprocServer32 -> C:\Users\Adminstrator\AppData\Local\PowerToys\PowerToys.MonacoPreviewHandlerCpp.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2451002302-2018568227-764946658-1009_Classes\CLSID\{DD5CACDA-7C2E-4997-A62A-04A597B58F76}\localserver32 -> C:\Users\Adminstrator\AppData\Local\PowerToys\PowerToys.exe (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2451002302-2018568227-764946658-1009_Classes\CLSID\{F2847CBE-CD03-4C83-A359-1A8052C1B9D5}\InprocServer32 -> C:\Users\Adminstrator\AppData\Local\PowerToys\PowerToys.GcodeThumbnailProviderCpp.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2451002302-2018568227-764946658-1009_Classes\CLSID\{f9517764-05a4-a748-620a-95087d06a241}\localserver32 -> C:\Program Files\Cloudflare\Cloudflare WARP\Cloudflare WARP.exe (Cloudflare, Inc. -> Cloudflare)
CustomCLSID: HKU\S-1-5-21-2451002302-2018568227-764946658-1009_Classes\CLSID\{FCDD4EED-41AA-492F-8A84-31A1546226E0}\InprocServer32 -> C:\Users\Adminstrator\AppData\Local\PowerToys\PowerToys.SvgPreviewHandlerCpp.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2451002302-2018568227-764946658-1009_Classes\CLSID\{FF90D477-E32A-4BE8-8CC5-A502A97F5401}\InprocServer32 -> C:\Users\Adminstrator\AppData\Local\PowerToys\WinUI3Apps\PowerToys.NewPlus.ShellExtension.win10.dll (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [     OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\25.065.0406.0002\FileSyncShell64.dll [2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [     OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\25.065.0406.0002\FileSyncShell64.dll [2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [     OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\25.065.0406.0002\FileSyncShell64.dll [2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [     OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\25.065.0406.0002\FileSyncShell64.dll [2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [     OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\25.065.0406.0002\FileSyncShell64.dll [2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [     OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\25.065.0406.0002\FileSyncShell64.dll [2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [     OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\25.065.0406.0002\FileSyncShell64.dll [2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [    GoogleDriveCloudOverlayIconHandler] -> {A8E52322-8734-481D-A7E2-27B309EF8D56} => C:\Program Files\Google\Drive File Stream\107.0.3.0\drivefsext.dll [2025-04-21] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [    GoogleDriveMirrorBlacklistedOverlayIconHandler] -> {51EF1569-67EE-4AD6-9646-E726C3FFC8A2} => C:\Program Files\Google\Drive File Stream\107.0.3.0\drivefsext.dll [2025-04-21] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [    GoogleDrivePinnedOverlayIconHandler] -> {CFE8B367-77A7-41D7-9C90-75D16D7DC6B6} => C:\Program Files\Google\Drive File Stream\107.0.3.0\drivefsext.dll [2025-04-21] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers: [    GoogleDriveProgressOverlayIconHandler] -> {C973DA94-CBDF-4E77-81D1-E5B794FBD146} => C:\Program Files\Google\Drive File Stream\107.0.3.0\drivefsext.dll [2025-04-21] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [     OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\25.065.0406.0002\FileSyncShell64.dll [2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [     OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\25.065.0406.0002\FileSyncShell64.dll [2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [     OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\25.065.0406.0002\FileSyncShell64.dll [2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [     OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\25.065.0406.0002\FileSyncShell64.dll [2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [     OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\25.065.0406.0002\FileSyncShell64.dll [2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [     OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\25.065.0406.0002\FileSyncShell64.dll [2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [     OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\25.065.0406.0002\FileSyncShell64.dll [2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [    GoogleDriveCloudOverlayIconHandler] -> {A8E52322-8734-481D-A7E2-27B309EF8D56} => C:\Program Files\Google\Drive File Stream\107.0.3.0\drivefsext.dll [2025-04-21] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [    GoogleDriveMirrorBlacklistedOverlayIconHandler] -> {51EF1569-67EE-4AD6-9646-E726C3FFC8A2} => C:\Program Files\Google\Drive File Stream\107.0.3.0\drivefsext.dll [2025-04-21] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [    GoogleDrivePinnedOverlayIconHandler] -> {CFE8B367-77A7-41D7-9C90-75D16D7DC6B6} => C:\Program Files\Google\Drive File Stream\107.0.3.0\drivefsext.dll [2025-04-21] (Google LLC -> Google LLC.)
ShellIconOverlayIdentifiers-x32: [    GoogleDriveProgressOverlayIconHandler] -> {C973DA94-CBDF-4E77-81D1-E5B794FBD146} => C:\Program Files\Google\Drive File Stream\107.0.3.0\drivefsext.dll [2025-04-21] (Google LLC -> Google LLC.)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\25.065.0406.0002\FileSyncShell64.dll [2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2024-11-29] (Igor Pavlov) [File not signed]
ContextMenuHandlers1: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\107.0.3.0\drivefsext.dll [2025-04-21] (Google LLC -> Google LLC.)
ContextMenuHandlers1: [GpgEX] -> {CCD955E4-5C16-4A33-AFDA-A8947A94946B} => C:\Program Files (x86)\Gpg4win\bin_64\gpgex.dll [2024-11-27] (g10 Code GmbH) [File not signed]
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\25.065.0406.0002\FileSyncShell64.dll [2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2024-11-29] (Igor Pavlov) [File not signed]
ContextMenuHandlers4: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\107.0.3.0\drivefsext.dll [2025-04-21] (Google LLC -> Google LLC.)
ContextMenuHandlers4: [GpgEX] -> {CCD955E4-5C16-4A33-AFDA-A8947A94946B} => C:\Program Files (x86)\Gpg4win\bin_64\gpgex.dll [2024-11-27] (g10 Code GmbH) [File not signed]
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\25.065.0406.0002\FileSyncShell64.dll [2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\107.0.3.0\drivefsext.dll [2025-04-21] (Google LLC -> Google LLC.)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvmsoegpu.inf_amd64_c59f41123c2f233c\nvshext.dll [2024-09-11] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2024-11-29] (Igor Pavlov) [File not signed]
ContextMenuHandlers2_S-1-5-21-2451002302-2018568227-764946658-1009: [FileLocksmithExt] -> {84D68575-E186-46AD-B0CB-BAEB45EE29C0} => C:\Users\Adminstrator\AppData\Local\PowerToys\WinUI3Apps\PowerToys.FileLocksmithExt.dll [2025-02-28] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers3_S-1-5-21-2451002302-2018568227-764946658-1009: [FileLocksmithExt] -> {84D68575-E186-46AD-B0CB-BAEB45EE29C0} => C:\Users\Adminstrator\AppData\Local\PowerToys\WinUI3Apps\PowerToys.FileLocksmithExt.dll [2025-02-28] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers3_S-1-5-21-2451002302-2018568227-764946658-1009: [PowerRenameExt] -> {0440049F-D1DC-4E46-B27B-98393D79486B} => C:\Users\Adminstrator\AppData\Local\PowerToys\WinUI3Apps\PowerToys.PowerRenameExt.dll [2025-02-28] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5_S-1-5-21-2451002302-2018568227-764946658-1009: [NewPlusShellExtensionWin10] -> {FF90D477-E32A-4BE8-8CC5-A502A97F5401} => C:\Users\Adminstrator\AppData\Local\PowerToys\WinUI3Apps\PowerToys.NewPlus.ShellExtension.win10.dll [2025-02-28] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5_S-1-5-21-2451002302-2018568227-764946658-1009: [PowerRenameExt] -> {0440049F-D1DC-4E46-B27B-98393D79486B} => C:\Users\Adminstrator\AppData\Local\PowerToys\WinUI3Apps\PowerToys.PowerRenameExt.dll [2025-02-28] (Microsoft Corporation -> Microsoft Corporation)

==================== Codecs (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Drivers32: [MidisrvTransferComplete] => 1
HKLM\...\Drivers32: [midi1] => C:\Windows\System32\wdmaud2.drv [118784 2025-03-22] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Drivers32: [midi1] => C:\Windows\SysWOW64\wdmaud2.drv [74240 2025-03-22] (Microsoft Windows -> Microsoft Corporation)

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

Shortcut: C:\Users\Adminstrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JetBrains Toolbox\MPS.lnk -> C:\Users\Adminstrator\AppData\Local\Programs\MPS\bin\mps.bat ()
ShortcutWithArgument: C:\Users\Adminstrator\Desktop\brandon (Person 1) - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Default"
ShortcutWithArgument: C:\Users\Adminstrator\Desktop\Personal - Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation) -> --profile-directory="Default"
ShortcutWithArgument: C:\Users\Adminstrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\d755e1040e5d38ac\Brandon  (i-devr.com) - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 8"
ShortcutWithArgument: C:\Users\Adminstrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\B8nk - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 1"
ShortcutWithArgument: C:\Users\Adminstrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\600fb694c0849943\Emily (Work) - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 9"

==================== Loaded Modules (Whitelisted) =============

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

HKU\S-1-5-21-2451002302-2018568227-764946658-1009\Software\Classes\regfile:  <==== ATTENTION
HKU\S-1-5-21-2451002302-2018568227-764946658-1009\Software\Classes\.reg:  =>  <==== ATTENTION
HKU\S-1-5-21-2451002302-2018568227-764946658-1009\Software\Classes\.bat:  =>  <==== ATTENTION
HKU\S-1-5-21-2451002302-2018568227-764946658-1009\Software\Classes\.cmd:  =>  <==== ATTENTION

==================== Internet Explorer (Whitelisted) =============

BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2025-04-04] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_451\bin\ssv.dll [2025-04-05] (Oracle America, Inc. -> Oracle Corporation)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_451\bin\jp2ssv.dll [2025-04-05] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2025-04-04] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2018-07-19] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-04-04] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-04-04] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-04-04] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-04-04] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2021-08-17] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-04-04] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-04-04] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-04-04] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-04-04] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\sharepoint.com -> hxxps://idevr-files.sharepoint.com

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2022-05-07 01:24 - 2025-02-17 05:40 - 000001039 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1     localhost
192.168.1.201 host.docker.internal
192.168.1.200 gateway.docker.internal
127.0.0.1     kubernetes.docker.internal

2025-01-21 19:21 - 2025-04-23 13:56 - 000000444 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
172.24.128.1 DESKTOP-3VMG7E1.mshome.net # 2030 4 1 22 17 41 4 193

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Users\Adminstrator\Downloads\OpenSSH-Win64\OpenSSH-Win64;C:\Program Files\OpenSSH\;c:\Users\Adminstrator\AppData\Local\Programs\cursor\resources\app\bin;C:\Ruby34-x64\bin;C:\Program Files (x86)\Microsoft SDKs\Azure\CLI2\wbin;c:\Users\a1b2a\AppData\Local\Programs\cursor\resources\app\bin;C:\Program Files\PowerShell\7;C:\Users\Adminstrator\AppData\Local\cloud-code\installer\google-cloud-sdk\bin;C:\Users\Adminstrator\AppData\Roaming\Code\User\globalStorage\pleiades.java-extension-pack-jdk\gradle\latest\bin;C:\Users\Adminstrator\AppData\Roaming\Code\User\globalStorage\pleiades.java-extension-pack-jdk\maven\latest\bin;C:\Users\a1b2a\AppData\Roaming\Code\User\globalStorage\pleiades.java-extension-pack-jdk\java\21\bin;C:\Program Files (x86)\VMware\VMware Workstation\bin\;C:\Users\a1b2a\scoop\apps\openssh\current;C:\Users\a1b2a\AppData\Local\Programs\cursor\resources\app\bin;C:\Program Files\Common Files\Oracle\Java\javapath;C:\Program Files (x86)\Common Files\Oracle\Java\java8path;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Python313\Scripts\;C:\Python313\;C:\Windows\System32;C:\Wi;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\OpenSSL-Win64\bin;C:\Users\Adminstrator\Downloads\stripe_1.25.0_windows_x86_64;C:\Users\Adminstrator\AppData\Roaming\Python\Python313\Scripts\normalizer.exe;C:\Program Files\Git\cmd;C:\Program Files\AzureConnectedMachineAgent\;C:\Program Files\Cloudflare\Cloudflare WARP\;C:\Program Files\dotnet\;C:\Program Files\Go\bin;C:\Program Files\Pandoc\;C:\texlive\2025\bin\windows;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\PuTTY\;C:\Program Files\playit_gg\bin\;C:\Program Files\Microsoft VS Code Insiders\bin;C:\Program Files\Docker\Docker\resources\bin;C:\ProgramData\chocolatey\bin;C:\Program Files\nodejs\
HKU\S-1-5-21-2451002302-2018568227-764946658-1009\Control Panel\Desktop\\Wallpaper -> C:\Users\Adminstrator\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
HKU\S-1-5-21-2451002302-2018568227-764946658-1013\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-80-4215458991-2034252225-2287069555-1155419622-2701885083\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
DNS Servers: 8.8.8.8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: off)
Windows Firewall is enabled.

Network Binding:
=============
Wi-Fi: Intel® Wi-Fi 6 AX201 160MHz -> Netwtw10.sys
Local Area Connection: Xbox Wireless Adapter for Windows -> mt7612US_bc.sys
OpenVPN Data Channel Offload: OpenVPN Data Channel Offload -> ovpn-dco.sys
VMware Network Adapter VMnet8: VMware Virtual Ethernet Adapter for VMnet8 -> vmnetadapter.sys
Local Area Connection 2: ExpressVPN TUN Driver -> expressvpn-tun.sys
Ethernet 5: VirtualBox Host-Only Ethernet Adapter -> VBoxNetAdp6.sys
VMware Network Adapter VMnet1: VMware Virtual Ethernet Adapter for VMnet1 -> vmnetadapter.sys
vEthernet (Default Switch): Hyper-V Virtual Ethernet Adapter ->
Bluetooth Network Connection: Bluetooth Device (Personal Area Network) -> bthpan.sys
Local Area Connection 3: TAP-Windows Adapter V9 -> tap0901.sys
vEthernet (WSL (Hyper-V firewall)): Hyper-V Virtual Ethernet Adapter #2 ->

vms_vsf: Hyper-V Virtual Switch Extension Filter
oracle_VBoxNetLwf: VirtualBox NDIS6 Bridged Networking Driver
INSECURE_NPCAP: Npcap Packet Driver (NPCAP)
ms_l1vhlwf: Nested Network Virtualization
vms_vsp: Hyper-V Virtual Switch Extension Protocol

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\...\StartupApproved\Run: => "Wondershare Helper Compact.exe"
HKLM\...\StartupApproved\Run: => "UniConverterUpdateHelper"
HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\StartupApproved\Run: => "Docker Desktop"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [FPS-SpoolWorker-In-TCP] => (Allow) C:\WINDOWS\system32\spoolsvworker.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [FPS-SpoolWorker-In-TCP-V2] => (Allow) C:\WINDOWS\system32\spoolsvworker.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [FPS-SpoolWorker-In-TCP-NoScope] => (Allow) C:\WINDOWS\system32\spoolsvworker.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [FPS-SpoolWorker-In-TCP_1] => (Allow) C:\WINDOWS\system32\spoolsvworker.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [FPS-SpoolWorker-In-TCP-V2_1] => (Allow) C:\WINDOWS\system32\spoolsvworker.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{A48A7BF4-9256-4003-8D27-DFF28F976BE2}] => (Allow) LPort=22
FirewallRules: [{B1A334A3-B6E9-415E-9A22-3A61CB2F510C}] => (Allow) C:\Program Files\OpenSSH\sshd.exe (Microsoft Corporation -> )
FirewallRules: [UDP Query User{55DD0242-49BA-4245-8940-CE242DB9368E}C:\users\a1b2a\scoop\apps\openssh\9.8.1.0p1\sshd.exe] => (Allow) C:\users\a1b2a\scoop\apps\openssh\9.8.1.0p1\sshd.exe (Microsoft Corporation -> )
FirewallRules: [TCP Query User{6E87F791-F647-4B38-922E-192F9BFB74E7}C:\users\a1b2a\scoop\apps\openssh\9.8.1.0p1\sshd.exe] => (Allow) C:\users\a1b2a\scoop\apps\openssh\9.8.1.0p1\sshd.exe (Microsoft Corporation -> )
FirewallRules: [{AAA24253-5C80-4BEA-B1C2-C1EDE8EB8B9D}] => (Allow) C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2502.25002.0_x64__8wekyb3d8bbwe\arm64\EngHost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{FFBD869E-7970-42E1-8E90-5A9F57F7EA6B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2502.25002.0_x64__8wekyb3d8bbwe\arm64\EngHost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{E30E4A35-6AA8-4A71-9B0F-F4F700142F41}] => (Allow) C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2502.25002.0_x64__8wekyb3d8bbwe\amd64\EngHost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C028F370-F3D3-4669-8E27-89492FEF814B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2502.25002.0_x64__8wekyb3d8bbwe\amd64\EngHost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C85153C6-1D79-4EC1-9F1F-2F155D0C4C54}] => (Allow) C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2502.25002.0_x64__8wekyb3d8bbwe\x86\EngHost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D1C082F9-A15A-4CFE-BEE6-0D0172A8C7AA}] => (Allow) C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2502.25002.0_x64__8wekyb3d8bbwe\x86\EngHost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{4F53AE8A-C00A-448A-AE60-DFE54EF1C811}C:\users\adminstrator\appdata\local\programs\clion\bin\clion64.exe] => (Allow) C:\users\adminstrator\appdata\local\programs\clion\bin\clion64.exe (JetBrains s.r.o. -> JetBrains s.r.o.)
FirewallRules: [TCP Query User{F42936EA-4640-4C4E-BDFC-C55F4BECADB6}C:\users\adminstrator\appdata\local\programs\clion\bin\clion64.exe] => (Allow) C:\users\adminstrator\appdata\local\programs\clion\bin\clion64.exe (JetBrains s.r.o. -> JetBrains s.r.o.)
FirewallRules: [{926C9B67-DDF5-4065-875D-0766E6F7CB70}] => (Allow) C:\Program Files\Cloudflare\Cloudflare WARP\warp-svc.exe (Cloudflare, Inc. -> )
FirewallRules: [UDP Query User{02B44A16-23FC-45D2-8403-215A01A4CA70}C:\users\adminstrator\appdata\local\programs\intellij idea ultimate\jbr\bin\java.exe] => (Allow) C:\users\adminstrator\appdata\local\programs\intellij idea ultimate\jbr\bin\java.exe
FirewallRules: [TCP Query User{5BD01546-31EA-49AB-A894-1B758FB972FE}C:\users\adminstrator\appdata\local\programs\intellij idea ultimate\jbr\bin\java.exe] => (Allow) C:\users\adminstrator\appdata\local\programs\intellij idea ultimate\jbr\bin\java.exe
FirewallRules: [{72632891-98A0-48BD-A736-F1F87C3DBD8C}] => (Allow) C:\Users\Adminstrator\AppData\Roaming\Zoom\bin\airhost.exe => No File
FirewallRules: [{AC506BFF-5C51-42E0-BD0B-7090B7FCE907}] => (Allow) C:\Users\Adminstrator\AppData\Roaming\Zoom\bin\airhost.exe => No File
FirewallRules: [{2C9679F4-8576-4285-B0D8-49849E101898}] => (Allow) C:\Users\Adminstrator\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Communications, Inc.)
FirewallRules: [UDP Query User{80711942-AB7B-478B-843A-6287CA9E19E3}C:\users\adminstrator\appdata\local\jetbrains\fleet\intellij-plugin-2\fleet-backend-251.22891.tar.zst_709883904296cea06934d0e9b32c1629\bin\fleet_backend64.exe] => (Allow) C:\users\adminstrator\appdata\local\jetbrains\fleet\intellij-plugin-2\fleet-backend-251.22891.tar.zst_709883904296cea06934d0e9b32c1629\bin\fleet_backend64.exe => No File
FirewallRules: [TCP Query User{EA5B0C3C-085C-4676-B3EF-920191F2C1E5}C:\users\adminstrator\appdata\local\jetbrains\fleet\intellij-plugin-2\fleet-backend-251.22891.tar.zst_709883904296cea06934d0e9b32c1629\bin\fleet_backend64.exe] => (Allow) C:\users\adminstrator\appdata\local\jetbrains\fleet\intellij-plugin-2\fleet-backend-251.22891.tar.zst_709883904296cea06934d0e9b32c1629\bin\fleet_backend64.exe => No File
FirewallRules: [UDP Query User{8E99DDD1-98DE-41EA-8981-97DA468D4E79}C:\users\adminstrator\.cursor\extensions\sonarsource.sonarlint-vscode-4.17.0-win32-x64\jre\21.0.6-win32-x86_64.tar\bin\java.exe] => (Allow) C:\users\adminstrator\.cursor\extensions\sonarsource.sonarlint-vscode-4.17.0-win32-x64\jre\21.0.6-win32-x86_64.tar\bin\java.exe => No File
FirewallRules: [TCP Query User{C33752C8-0BE3-4065-84D8-50F4A38F08A8}C:\users\adminstrator\.cursor\extensions\sonarsource.sonarlint-vscode-4.17.0-win32-x64\jre\21.0.6-win32-x86_64.tar\bin\java.exe] => (Allow) C:\users\adminstrator\.cursor\extensions\sonarsource.sonarlint-vscode-4.17.0-win32-x64\jre\21.0.6-win32-x86_64.tar\bin\java.exe => No File
FirewallRules: [UDP Query User{A74D0C03-7E09-4E63-9EA7-BF08646C42D3}C:\program files (x86)\jetbrains\intellij idea community edition 2024.3.3\bin\idea64.exe] => (Allow) C:\program files (x86)\jetbrains\intellij idea community edition 2024.3.3\bin\idea64.exe (JetBrains s.r.o. -> JetBrains s.r.o.)
FirewallRules: [TCP Query User{2265BE31-D2EF-4BD6-B741-2958994BECB3}C:\program files (x86)\jetbrains\intellij idea community edition 2024.3.3\bin\idea64.exe] => (Allow) C:\program files (x86)\jetbrains\intellij idea community edition 2024.3.3\bin\idea64.exe (JetBrains s.r.o. -> JetBrains s.r.o.)
FirewallRules: [{F92BBA3F-9C81-4756-AE95-AE27B771AE31}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe (Broadcom Inc -> VMware, Inc.)
FirewallRules: [{8A13A686-CE52-448A-94EF-07B3206EA4B1}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe (Broadcom Inc -> VMware, Inc.)
FirewallRules: [UDP Query User{58AC7862-0E0C-4B3B-80FC-DA420E89D0DE}C:\users\adminstrator\appdata\local\programs\intellij idea ultimate\bin\idea64.exe] => (Allow) C:\users\adminstrator\appdata\local\programs\intellij idea ultimate\bin\idea64.exe (JetBrains s.r.o. -> JetBrains s.r.o.)
FirewallRules: [TCP Query User{7ADFE137-3591-462A-9725-A6656B3EA378}C:\users\adminstrator\appdata\local\programs\intellij idea ultimate\bin\idea64.exe] => (Allow) C:\users\adminstrator\appdata\local\programs\intellij idea ultimate\bin\idea64.exe (JetBrains s.r.o. -> JetBrains s.r.o.)
FirewallRules: [UDP Query User{168F7662-0B94-4E27-8FF7-B02B3BA954E2}C:\program files\cloudflare\cloudflare warp\warp-diag.exe] => (Allow) C:\program files\cloudflare\cloudflare warp\warp-diag.exe (Cloudflare, Inc. -> )
FirewallRules: [TCP Query User{9DDC50E3-86AB-4684-B052-A4D4E1961CF3}C:\program files\cloudflare\cloudflare warp\warp-diag.exe] => (Allow) C:\program files\cloudflare\cloudflare warp\warp-diag.exe (Cloudflare, Inc. -> )
FirewallRules: [UDP Query User{3F727F11-2042-4460-B446-B72329B80E05}C:\users\adminstrator\appdata\local\programs\datagrip\bin\datagrip64.exe] => (Allow) C:\users\adminstrator\appdata\local\programs\datagrip\bin\datagrip64.exe (JetBrains s.r.o. -> JetBrains s.r.o.)
FirewallRules: [TCP Query User{F6A4283B-342F-4671-B99F-AF0F987FF62C}C:\users\adminstrator\appdata\local\programs\datagrip\bin\datagrip64.exe] => (Allow) C:\users\adminstrator\appdata\local\programs\datagrip\bin\datagrip64.exe (JetBrains s.r.o. -> JetBrains s.r.o.)
FirewallRules: [UDP Query User{CD462043-F453-4B5E-B1B1-4E0EBB9D3EB4}C:\users\adminstrator\appdata\local\programs\writerside\bin\writerside64.exe] => (Allow) C:\users\adminstrator\appdata\local\programs\writerside\bin\writerside64.exe (JetBrains s.r.o. -> JetBrains s.r.o.)
FirewallRules: [TCP Query User{429183B5-D085-4243-8BA8-504BBAD88C1E}C:\users\adminstrator\appdata\local\programs\writerside\bin\writerside64.exe] => (Allow) C:\users\adminstrator\appdata\local\programs\writerside\bin\writerside64.exe (JetBrains s.r.o. -> JetBrains s.r.o.)
FirewallRules: [UDP Query User{83166452-D6B8-497D-B85F-FDBFCBE78E5B}C:\users\adminstrator\appdata\local\studio\app-1.3.3\studio.exe] => (Allow) C:\users\adminstrator\appdata\local\studio\app-1.3.3\studio.exe (Automattic, Inc. -> Automattic Inc.)
FirewallRules: [TCP Query User{BB7DAB0D-1714-4D7B-8ED1-44A7E38C6385}C:\users\adminstrator\appdata\local\studio\app-1.3.3\studio.exe] => (Allow) C:\users\adminstrator\appdata\local\studio\app-1.3.3\studio.exe (Automattic, Inc. -> Automattic Inc.)
FirewallRules: [UDP Query User{49EC0612-C699-4C60-B739-DEDD68E127FA}C:\programdata\chocolatey\lib\adb\tools\platform-tools\adb.exe] => (Allow) C:\programdata\chocolatey\lib\adb\tools\platform-tools\adb.exe (Google LLC -> )
FirewallRules: [TCP Query User{238D682C-7C71-4C9E-A7AD-F3AA7FBCC75E}C:\programdata\chocolatey\lib\adb\tools\platform-tools\adb.exe] => (Allow) C:\programdata\chocolatey\lib\adb\tools\platform-tools\adb.exe (Google LLC -> )
FirewallRules: [UDP Query User{FFCB07A7-0B55-4EC8-9439-BEAD3FF61E26}C:\users\adminstrator\.vscode\extensions\redhat.java-1.39.0-win32-x64\jre\21.0.5-win32-x86_64\bin\java.exe] => (Allow) C:\users\adminstrator\.vscode\extensions\redhat.java-1.39.0-win32-x64\jre\21.0.5-win32-x86_64\bin\java.exe => No File
FirewallRules: [TCP Query User{D7692B5E-DC5E-4DC6-8B15-877FBBEBC78F}C:\users\adminstrator\.vscode\extensions\redhat.java-1.39.0-win32-x64\jre\21.0.5-win32-x86_64\bin\java.exe] => (Allow) C:\users\adminstrator\.vscode\extensions\redhat.java-1.39.0-win32-x64\jre\21.0.5-win32-x86_64\bin\java.exe => No File
FirewallRules: [UDP Query User{5080B5B9-668C-4D42-B7AE-EBD381A51540}C:\users\adminstrator\appdata\local\programs\microsoft vs code\code.exe] => (Allow) C:\users\adminstrator\appdata\local\programs\microsoft vs code\code.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{58A8B571-0208-4E40-9BF1-6DF6D7FA330C}C:\users\adminstrator\appdata\local\programs\microsoft vs code\code.exe] => (Allow) C:\users\adminstrator\appdata\local\programs\microsoft vs code\code.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{2B2727D6-3C06-4D46-8484-56AACC0E48C1}] => (Allow) LPort=12292
FirewallRules: [{BA66D5EE-DB50-44F1-A223-DDFDFB8DC88E}] => (Allow) C:\Program Files\Unity Hub\Unity Hub.exe (Unity Technologies Aps -> Unity Technologies Inc.)
FirewallRules: [UDP Query User{2E07A308-BCA4-4CD1-8D2F-73EF8B8D0708}C:\users\a1b2a\.vscode\extensions\sonarsource.sonarlint-vscode-4.15.0-win32-x64\jre\21.0.5-win32-x86_64.tar\bin\java.exe] => (Allow) C:\users\a1b2a\.vscode\extensions\sonarsource.sonarlint-vscode-4.15.0-win32-x64\jre\21.0.5-win32-x86_64.tar\bin\java.exe => No File
FirewallRules: [TCP Query User{2DD8D704-C740-48E7-9C85-94E9BFA417B9}C:\users\a1b2a\.vscode\extensions\sonarsource.sonarlint-vscode-4.15.0-win32-x64\jre\21.0.5-win32-x86_64.tar\bin\java.exe] => (Allow) C:\users\a1b2a\.vscode\extensions\sonarsource.sonarlint-vscode-4.15.0-win32-x64\jre\21.0.5-win32-x86_64.tar\bin\java.exe => No File
FirewallRules: [UDP Query User{CF342960-8772-4D01-8D5C-1D135FE05001}C:\users\a1b2a\.vscode\extensions\redhat.java-1.39.0-win32-x64\jre\21.0.5-win32-x86_64\bin\java.exe] => (Allow) C:\users\a1b2a\.vscode\extensions\redhat.java-1.39.0-win32-x64\jre\21.0.5-win32-x86_64\bin\java.exe => No File
FirewallRules: [TCP Query User{2426FB4F-78E7-4E02-8E53-17C0E82E2C51}C:\users\a1b2a\.vscode\extensions\redhat.java-1.39.0-win32-x64\jre\21.0.5-win32-x86_64\bin\java.exe] => (Allow) C:\users\a1b2a\.vscode\extensions\redhat.java-1.39.0-win32-x64\jre\21.0.5-win32-x86_64\bin\java.exe => No File
FirewallRules: [{48E6BA34-E018-4892-BD7B-3BEDDBA2BA44}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{D90C5EDC-CFA5-484C-8FC9-7D0E92665402}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{847C31A7-2C34-44C2-8D65-2F81C82A19D8}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{BAEFDD2D-D327-4B99-AC2B-1B1F9C39A976}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{23E39954-8394-401D-B7A6-CB369D88DF25}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{F370A2E8-AD17-4F86-8F4C-15664DB2A1E0}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{A4FC99EE-6E9E-4EF1-846A-18AE682D3C38}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{52643E04-1A8D-486D-AEA4-A2C0C573EE1A}] => (Allow) C:\Program Files\GIGABYTE\Control Center\GCC.exe (GIGA-BYTE TECHNOLOGY CO., LTD. -> )
FirewallRules: [TCP Query User{5445268F-7A3A-4206-AA26-AF848A07BFEC}C:\program files\docker\docker\resources\com.docker.backend.exe] => (Allow) C:\program files\docker\docker\resources\com.docker.backend.exe (Docker Inc -> )
FirewallRules: [UDP Query User{C4B5606D-ED82-4A1B-B5A6-EC9FC24BD0BB}C:\program files\docker\docker\resources\com.docker.backend.exe] => (Allow) C:\program files\docker\docker\resources\com.docker.backend.exe (Docker Inc -> )
FirewallRules: [TCP Query User{9B8B183D-63C2-4787-96FC-604ED90398DC}C:\users\a1b2a\appdata\local\programs\microsoft vs code\code.exe] => (Allow) C:\users\a1b2a\appdata\local\programs\microsoft vs code\code.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{F11C39FA-025E-43CC-81A1-79FA0364E045}C:\users\a1b2a\appdata\local\programs\microsoft vs code\code.exe] => (Allow) C:\users\a1b2a\appdata\local\programs\microsoft vs code\code.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{0B0D3CC5-81E8-4BE8-B8A1-3F84C8DB8C30}] => (Allow) LPort=57209
FirewallRules: [{580DBB62-A6EE-4B7C-A397-73B32E05100F}] => (Allow) LPort=57210
FirewallRules: [{D5A0E9F0-4D68-4A9E-A70A-17452271112C}] => (Allow) LPort=57211
FirewallRules: [{78C48DB7-E9FA-43C0-ACFC-C7B6824F2F4D}] => (Allow) LPort=57212
FirewallRules: [{992F83D1-576F-4800-8F0D-6235B1F5ACBB}] => (Allow) LPort=57213
FirewallRules: [{5E19B263-4337-42FD-A070-BECE1AD00027}] => (Allow) LPort=57214
FirewallRules: [{94BBDD52-5A4A-4C07-8C7E-307FBEBADEEF}] => (Allow) LPort=57215
FirewallRules: [{69725040-5A4E-4000-BBA0-E37574E5CE55}] => (Allow) LPort=57216
FirewallRules: [{0D55D61C-4BA8-4ECC-B04B-33F1076D6A67}] => (Allow) LPort=57217
FirewallRules: [{84E44960-629F-4B27-94CB-933ABFEF5457}] => (Allow) LPort=57218
FirewallRules: [{8EAA88E4-0DAE-4E7A-9367-E94C477F4698}] => (Allow) LPort=57209
FirewallRules: [{2BD94327-C878-44AF-B796-E9855CBD4853}] => (Allow) LPort=57210
FirewallRules: [{CC83FF2E-4435-4D99-93FE-03120C126D54}] => (Allow) LPort=57211
FirewallRules: [{C5EF4ABB-02D0-4A8F-97C2-4B8CBA295E7E}] => (Allow) LPort=57212
FirewallRules: [{9353E3CA-2CD6-4CEE-83EB-F10FF984F4D0}] => (Allow) LPort=57213
FirewallRules: [{7C021FBA-E5D2-49A7-ADE2-52751F10FE4A}] => (Allow) LPort=57214
FirewallRules: [{7118D635-07CD-4FD4-A90D-ACFA0CA802DC}] => (Allow) LPort=57215
FirewallRules: [{48F3F62F-2061-4BCD-A6D4-664A6482C85C}] => (Allow) LPort=57216
FirewallRules: [{1D459E95-F9A9-403A-A709-C04A6C613888}] => (Allow) LPort=57217
FirewallRules: [{A905241B-47B2-4A39-AEA7-038912D2A552}] => (Allow) LPort=57218
FirewallRules: [{3B827499-CC8C-4492-8825-583D2EFD5828}] => (Allow) LPort=23007
FirewallRules: [{E840AFC0-3862-4426-926E-C4EFA27E20AC}] => (Allow) LPort=23008
FirewallRules: [{499A1298-259E-4966-898A-69A08DC4E1C6}] => (Allow) LPort=33009
FirewallRules: [{17EE7B75-B18B-4C9F-9E1C-4720D9F5A13A}] => (Allow) LPort=33010
FirewallRules: [{B18919BD-0E9A-406D-AD4D-C174412B5C2C}] => (Allow) LPort=33011
FirewallRules: [{2FA18B57-8173-4643-882C-6F7F3C8A15CA}] => (Allow) LPort=43012
FirewallRules: [{A47F46F7-67F7-4130-B5E3-8EED2D6AB208}] => (Allow) LPort=43013
FirewallRules: [{2A4DF913-F53E-44A5-B158-2C61CD265464}] => (Allow) LPort=53014
FirewallRules: [{FF179F02-91EB-4F44-91F3-36AE23A2791D}] => (Allow) LPort=53015
FirewallRules: [{8D90A298-63F1-4B98-81CE-525DCE33787F}] => (Allow) LPort=53016
FirewallRules: [{811BE569-3311-4FCD-A396-EFEAB9949503}] => (Allow) LPort=23007
FirewallRules: [{0AAFFB6B-E4D6-486F-A1D1-8123C2991F78}] => (Allow) LPort=23008
FirewallRules: [{C64F9E0C-B9FF-445C-8F3F-D7302C23BAD9}] => (Allow) LPort=33009
FirewallRules: [{5AEADE2B-40F7-4D59-8A30-62118FEEEE0C}] => (Allow) LPort=33010
FirewallRules: [{8F5414E3-72F6-43A2-8729-8361720E33D5}] => (Allow) LPort=33011
FirewallRules: [{867F6E02-113C-4929-B402-26EA72D33EBB}] => (Allow) LPort=43012
FirewallRules: [{6A1B5F17-1A29-456D-A82D-45DDBDC50538}] => (Allow) LPort=43013
FirewallRules: [{B9470D13-5B29-425B-A1F8-0F8075F2EADF}] => (Allow) LPort=53014
FirewallRules: [{FFEB9918-C65E-40AA-A143-FD9A868B226C}] => (Allow) LPort=53015
FirewallRules: [{D3200928-4720-4D37-94D4-1F6FC4AD3523}] => (Allow) LPort=53016
FirewallRules: [{FFBA08C7-5546-4FB0-BE57-D30916DE8A1D}] => (Allow) LPort=50053
FirewallRules: [{E4038607-5291-4B9E-964F-AFB5126B79CE}] => (Allow) LPort=50053
FirewallRules: [{05DDA7A6-6EE4-46D3-BCB6-4F76C7E13F55}] => (Allow) C:\Users\a1b2a\Downloads\ultdata-android_11738041949901702301.exe (Tenorshare Co., Ltd. -> Tenorshare Co., Ltd.)
FirewallRules: [{17C8E139-153F-489A-95BD-3B6A76D4EAFE}] => (Allow) C:\Users\a1b2a\Downloads\ultdata-android_11738041949901702301.exe (Tenorshare Co., Ltd. -> Tenorshare Co., Ltd.)
FirewallRules: [TCP Query User{E50AC8AB-FA7E-4C81-9BCD-74421F07F933}C:\program files\nodejs\node.exe] => (Allow) C:\program files\nodejs\node.exe (OpenJS Foundation -> Node.js)
FirewallRules: [UDP Query User{4A19DE56-70F6-43F0-B074-488F74BE7C43}C:\program files\nodejs\node.exe] => (Allow) C:\program files\nodejs\node.exe (OpenJS Foundation -> Node.js)
FirewallRules: [{AC103F82-A3BC-4C3C-AA53-0D51A9DD4DF7}] => (Allow) C:\program files (x86)\wondershare\drfone\drfonetoolkit.exe (Wondershare Technology Group Co.,Ltd -> Wondershare) [File not signed]
FirewallRules: [TCP Query User{2C54AEBC-2BD6-4731-9C45-73B9CDE77407}C:\program files\mozilla firefox\firefox.exe] => (Allow) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{1B69B082-BB87-4742-93EB-B843CD40F053}C:\program files\mozilla firefox\firefox.exe] => (Allow) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{C8B8D4E6-D076-49BC-9967-3B88DEE55804}] => (Allow) LPort=8000
FirewallRules: [{FA731B2C-2018-4961-BAAC-8B335624B6A9}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{9377227B-7AF3-45FD-B2C0-BA94A5754D0E}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{2C40B2C2-241F-4F6F-99DA-5E812D724ED4}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{4EA43DC4-DBC8-4DFB-A679-04BE31B8DD10}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{DD224FE1-A3F5-41E6-BC7E-709A679BA896}] => (Allow) C:\Users\a1b2a\Downloads\activation-unlock_11738819086479894601.exe (Tenorshare Co., Ltd. -> PassFab Co., Ltd.)
FirewallRules: [{CBC39A27-7529-4FD6-870B-5B4BEDCDDE0A}] => (Allow) C:\Users\a1b2a\Downloads\activation-unlock_11738819086479894601.exe (Tenorshare Co., Ltd. -> PassFab Co., Ltd.)
FirewallRules: [{4DC41160-7DFA-45EC-AFAE-EA0154896889}] => (Allow) C:\Users\ADMIN_a1b2a\AppData\Local\Wondershare\Wondershare NativePush\WsToastNotification.exe (Wondershare Technology Group Co.,Ltd -> Wondershare)
FirewallRules: [{A60C8584-F256-436E-B64C-4A9636302D1B}] => (Allow) LPort=31104
FirewallRules: [{A41DE8AE-18C4-41EC-9993-6C57FD6FD87F}] => (Allow) LPort=50052
FirewallRules: [{9E5A49EE-DBBC-46F9-909C-6DBE9DAD32BE}] => (Allow) LPort=31100
FirewallRules: [{68E9DE45-7D03-4D95-A897-12ED06DFA4B3}] => (Allow) LPort=8000
FirewallRules: [{C9D60C73-4627-408C-823F-A13B459761CD}] => (Allow) LPort=5672
FirewallRules: [{2859BE89-325F-4EB9-A1E7-1C4CBCFF04FC}] => (Allow) LPort=31105
FirewallRules: [{9D4402FB-8888-4607-A56C-CC8957591B47}] => (Allow) LPort=31106
FirewallRules: [{784D3080-C703-465E-8634-7B58DCEF4014}] => (Allow) LPort=31107
FirewallRules: [{F2842C70-C204-4FE4-A130-22C9748E421C}] => (Allow) LPort=31108
FirewallRules: [{CA386CE7-C119-4E95-9FB9-E6139AE7BB11}] => (Allow) LPort=31109
FirewallRules: [{79D50405-5101-44B5-850B-96E75624C187}] => (Allow) LPort=31110
FirewallRules: [{57AAE2BB-86A2-4F68-83E7-B991D7CF77E7}] => (Allow) LPort=31111
FirewallRules: [{CEC698A9-D360-4C5D-BFE1-ED3D41FF689E}] => (Allow) LPort=31112
FirewallRules: [{C5EB1985-8F6B-4445-8956-1E098920F6BA}] => (Allow) LPort=31113
FirewallRules: [{B71BCF9E-563E-46DC-A7B4-66A367728D56}] => (Allow) C:\Program Files (x86)\Incredibuild\Manager\Manager.exe (INCREDIBUILD SOFTWARE LTD -> Node.js)
FirewallRules: [{4E99E4D6-DCC6-4F2B-8996-E1DBE75AC2FB}] => (Allow) C:\Program Files (x86)\Incredibuild\Manager\ManagerService.exe (INCREDIBUILD SOFTWARE LTD -> Incredibuild Software Ltd.)
FirewallRules: [TCP Query User{9EAE522B-8A62-42FC-8A93-BBD6C127BC7E}C:\users\a1b2a\appdata\local\programs\cursor\cursor.exe] => (Allow) C:\users\a1b2a\appdata\local\programs\cursor\cursor.exe (Todesktop Limited -> Cursor AI, Inc.)
FirewallRules: [UDP Query User{E163996E-9F2E-449D-BE37-386FC1BDBE4A}C:\users\a1b2a\appdata\local\programs\cursor\cursor.exe] => (Allow) C:\users\a1b2a\appdata\local\programs\cursor\cursor.exe (Todesktop Limited -> Cursor AI, Inc.)
FirewallRules: [TCP Query User{73C87BB5-16E2-4ACE-9EF3-80FB2C4AAF1B}C:\programdata\a1b2a\postman\app-11.32.3\postman.exe] => (Allow) C:\programdata\a1b2a\postman\app-11.32.3\postman.exe (Postman, Inc. -> Postman)
FirewallRules: [UDP Query User{B9A7E0D7-6B03-47E1-88F2-39A6F9E485B5}C:\programdata\a1b2a\postman\app-11.32.3\postman.exe] => (Allow) C:\programdata\a1b2a\postman\app-11.32.3\postman.exe (Postman, Inc. -> Postman)
FirewallRules: [TCP Query User{C13D45CA-FE6F-4BE6-868F-1B9E9048E652}C:\users\a1b2a\.cursor\extensions\redhat.java-1.39.0-win32-x64\jre\21.0.5-win32-x86_64\bin\java.exe] => (Allow) C:\users\a1b2a\.cursor\extensions\redhat.java-1.39.0-win32-x64\jre\21.0.5-win32-x86_64\bin\java.exe
FirewallRules: [UDP Query User{030B3D8B-34B1-4022-9417-CC258DF152A6}C:\users\a1b2a\.cursor\extensions\redhat.java-1.39.0-win32-x64\jre\21.0.5-win32-x86_64\bin\java.exe] => (Allow) C:\users\a1b2a\.cursor\extensions\redhat.java-1.39.0-win32-x64\jre\21.0.5-win32-x86_64\bin\java.exe
FirewallRules: [TCP Query User{6F1DBB2E-B4CC-4DC6-A50C-B0DA72A80B1E}C:\users\a1b2a\.cursor\extensions\sonarsource.sonarlint-vscode-4.15.0-win32-x64\jre\21.0.5-win32-x86_64.tar\bin\java.exe] => (Allow) C:\users\a1b2a\.cursor\extensions\sonarsource.sonarlint-vscode-4.15.0-win32-x64\jre\21.0.5-win32-x86_64.tar\bin\java.exe
FirewallRules: [UDP Query User{BB76C287-4CF7-4B61-8A96-C19BA93260D3}C:\users\a1b2a\.cursor\extensions\sonarsource.sonarlint-vscode-4.15.0-win32-x64\jre\21.0.5-win32-x86_64.tar\bin\java.exe] => (Allow) C:\users\a1b2a\.cursor\extensions\sonarsource.sonarlint-vscode-4.15.0-win32-x64\jre\21.0.5-win32-x86_64.tar\bin\java.exe
FirewallRules: [TCP Query User{8E817EDB-BD20-4FC1-B1F2-BBE09F9C6ACF}C:\program files\edb\pem\httpd\apache\bin\httpd.exe] => (Allow) C:\program files\edb\pem\httpd\apache\bin\httpd.exe (Apache Software Foundation) [File not signed]
FirewallRules: [UDP Query User{DDC8C679-AAB6-4068-A60A-161772AF3A16}C:\program files\edb\pem\httpd\apache\bin\httpd.exe] => (Allow) C:\program files\edb\pem\httpd\apache\bin\httpd.exe (Apache Software Foundation) [File not signed]
FirewallRules: [TCP Query User{003F5923-B193-478D-BB39-7012EE76ED3D}C:\users\adminstrator\.vscode\extensions\redhat.java-1.40.0-win32-x64\jre\21.0.6-win32-x86_64\bin\java.exe] => (Allow) C:\users\adminstrator\.vscode\extensions\redhat.java-1.40.0-win32-x64\jre\21.0.6-win32-x86_64\bin\java.exe => No File
FirewallRules: [UDP Query User{F30D705D-1165-4778-888B-D42291F2AC7B}C:\users\adminstrator\.vscode\extensions\redhat.java-1.40.0-win32-x64\jre\21.0.6-win32-x86_64\bin\java.exe] => (Allow) C:\users\adminstrator\.vscode\extensions\redhat.java-1.40.0-win32-x64\jre\21.0.6-win32-x86_64\bin\java.exe => No File
FirewallRules: [TCP Query User{DE455273-D008-461F-BE88-96E4E740DAFA}C:\users\a1b2a\.vscode\extensions\sonarsource.sonarlint-vscode-4.16.0-win32-x64\jre\21.0.6-win32-x86_64.tar\bin\java.exe] => (Allow) C:\users\a1b2a\.vscode\extensions\sonarsource.sonarlint-vscode-4.16.0-win32-x64\jre\21.0.6-win32-x86_64.tar\bin\java.exe
FirewallRules: [UDP Query User{A575B1B0-26C3-4991-B57F-6145D4831E97}C:\users\a1b2a\.vscode\extensions\sonarsource.sonarlint-vscode-4.16.0-win32-x64\jre\21.0.6-win32-x86_64.tar\bin\java.exe] => (Allow) C:\users\a1b2a\.vscode\extensions\sonarsource.sonarlint-vscode-4.16.0-win32-x64\jre\21.0.6-win32-x86_64.tar\bin\java.exe
FirewallRules: [TCP Query User{28D5C99F-F082-4CE2-8418-D73388B60059}C:\users\a1b2a\.vscode\extensions\redhat.java-1.40.0-win32-x64\jre\21.0.6-win32-x86_64\bin\java.exe] => (Allow) C:\users\a1b2a\.vscode\extensions\redhat.java-1.40.0-win32-x64\jre\21.0.6-win32-x86_64\bin\java.exe
FirewallRules: [UDP Query User{962C2A9D-B958-4358-AF04-0AB6AA05BC40}C:\users\a1b2a\.vscode\extensions\redhat.java-1.40.0-win32-x64\jre\21.0.6-win32-x86_64\bin\java.exe] => (Allow) C:\users\a1b2a\.vscode\extensions\redhat.java-1.40.0-win32-x64\jre\21.0.6-win32-x86_64\bin\java.exe
FirewallRules: [{EB94E41C-75CD-4CCC-9CC5-5B139E565E07}] => (Allow) C:\Program Files\WindowsApps\MicrosoftCorporationII.Windows365_2.0.360.0_x64__8wekyb3d8bbwe\msrdc\msrdc.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{9E0F3EDB-EA62-487B-8092-810B541FED93}] => (Allow) C:\Program Files\WindowsApps\MicrosoftCorporationII.Windows365_2.0.360.0_x64__8wekyb3d8bbwe\msrdc\msrdc.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{14AD83E3-96B2-4F2D-BEF1-6059AB924EE0}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25017.203.3370.1174_x64__8wekyb3d8bbwe\ms-teams.exe => No File
FirewallRules: [{645DE059-4B38-462B-8787-051F9642A402}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25017.203.3370.1174_x64__8wekyb3d8bbwe\ms-teams.exe => No File
FirewallRules: [TCP Query User{C0C3090E-5C9C-45B5-B248-CD05A1E79CBE}C:\users\adminstrator\.vscode\extensions\sonarsource.sonarlint-vscode-4.16.0-win32-x64\jre\21.0.6-win32-x86_64.tar\bin\java.exe] => (Allow) C:\users\adminstrator\.vscode\extensions\sonarsource.sonarlint-vscode-4.16.0-win32-x64\jre\21.0.6-win32-x86_64.tar\bin\java.exe => No File
FirewallRules: [UDP Query User{4176768C-BA77-4552-9732-22162775A2DD}C:\users\adminstrator\.vscode\extensions\sonarsource.sonarlint-vscode-4.16.0-win32-x64\jre\21.0.6-win32-x86_64.tar\bin\java.exe] => (Allow) C:\users\adminstrator\.vscode\extensions\sonarsource.sonarlint-vscode-4.16.0-win32-x64\jre\21.0.6-win32-x86_64.tar\bin\java.exe => No File
FirewallRules: [{688F7136-40F3-4B13-8093-F4545649AC84}] => (Allow) LPort=51100
FirewallRules: [TCP Query User{A7D10D87-AC89-42F6-8235-47594E3E7150}C:\users\adminstrator\.vscode\extensions\sonarsource.sonarlint-vscode-4.17.0-win32-x64\jre\21.0.6-win32-x86_64.tar\bin\java.exe] => (Allow) C:\users\adminstrator\.vscode\extensions\sonarsource.sonarlint-vscode-4.17.0-win32-x64\jre\21.0.6-win32-x86_64.tar\bin\java.exe => No File
FirewallRules: [UDP Query User{DB2B972A-0682-4B33-9916-DEDBBE46CDA1}C:\users\adminstrator\.vscode\extensions\sonarsource.sonarlint-vscode-4.17.0-win32-x64\jre\21.0.6-win32-x86_64.tar\bin\java.exe] => (Allow) C:\users\adminstrator\.vscode\extensions\sonarsource.sonarlint-vscode-4.17.0-win32-x64\jre\21.0.6-win32-x86_64.tar\bin\java.exe => No File
FirewallRules: [TCP Query User{8259DD4E-D7AD-4923-BB78-AB666B71E49E}C:\users\adminstrator\appdata\local\programs\pycharm professional\bin\pycharm64.exe] => (Allow) C:\users\adminstrator\appdata\local\programs\pycharm professional\bin\pycharm64.exe (JetBrains s.r.o. -> JetBrains s.r.o.)
FirewallRules: [UDP Query User{929956CB-529F-48C8-8848-F9654C8FAE9C}C:\users\adminstrator\appdata\local\programs\pycharm professional\bin\pycharm64.exe] => (Allow) C:\users\adminstrator\appdata\local\programs\pycharm professional\bin\pycharm64.exe (JetBrains s.r.o. -> JetBrains s.r.o.)
FirewallRules: [TCP Query User{44614222-B81D-4963-97F4-787EED812F89}C:\users\adminstrator\appdata\local\programs\cursor\cursor.exe] => (Allow) C:\users\adminstrator\appdata\local\programs\cursor\cursor.exe (Anysphere, Inc. -> Anysphere)
FirewallRules: [UDP Query User{4971EA8C-40FF-4791-B311-9CE48F3ADC56}C:\users\adminstrator\appdata\local\programs\cursor\cursor.exe] => (Allow) C:\users\adminstrator\appdata\local\programs\cursor\cursor.exe (Anysphere, Inc. -> Anysphere)
FirewallRules: [TCP Query User{B7E4CAF5-29ED-4E77-B798-B76CFE2AB3EB}C:\users\adminstrator\.cursor\extensions\redhat.java-1.40.0-win32-x64\jre\21.0.6-win32-x86_64\bin\java.exe] => (Allow) C:\users\adminstrator\.cursor\extensions\redhat.java-1.40.0-win32-x64\jre\21.0.6-win32-x86_64\bin\java.exe => No File
FirewallRules: [UDP Query User{3DE58DF5-C249-4118-ADF8-EA59268D334F}C:\users\adminstrator\.cursor\extensions\redhat.java-1.40.0-win32-x64\jre\21.0.6-win32-x86_64\bin\java.exe] => (Allow) C:\users\adminstrator\.cursor\extensions\redhat.java-1.40.0-win32-x64\jre\21.0.6-win32-x86_64\bin\java.exe => No File
FirewallRules: [TCP Query User{BF907118-E2D6-4777-A162-2FD44638ABA7}C:\users\adminstrator\appdata\local\programs\rubymine\bin\rubymine64.exe] => (Allow) C:\users\adminstrator\appdata\local\programs\rubymine\bin\rubymine64.exe (JetBrains s.r.o. -> JetBrains s.r.o.)
FirewallRules: [UDP Query User{335F8D60-D204-41B8-B9A6-5F15F14E9219}C:\users\adminstrator\appdata\local\programs\rubymine\bin\rubymine64.exe] => (Allow) C:\users\adminstrator\appdata\local\programs\rubymine\bin\rubymine64.exe (JetBrains s.r.o. -> JetBrains s.r.o.)
FirewallRules: [TCP Query User{CA38B1F7-E70D-470D-B070-407AB60AA9F8}C:\users\adminstrator\appdata\local\programs\anythingllm\anythingllm.exe] => (Allow) C:\users\adminstrator\appdata\local\programs\anythingllm\anythingllm.exe (Mintplex Labs Inc) [File not signed]
FirewallRules: [UDP Query User{84FE79D5-985B-4A7D-A306-89B0DF3A832E}C:\users\adminstrator\appdata\local\programs\anythingllm\anythingllm.exe] => (Allow) C:\users\adminstrator\appdata\local\programs\anythingllm\anythingllm.exe (Mintplex Labs Inc) [File not signed]
FirewallRules: [TCP Query User{52CA5C2D-AAA3-4C41-BB70-8282E42C1349}C:\program files (x86)\jetbrains\pycharm community edition 2024.3.3\bin\pycharm64.exe] => (Allow) C:\program files (x86)\jetbrains\pycharm community edition 2024.3.3\bin\pycharm64.exe (JetBrains s.r.o. -> JetBrains s.r.o.)
FirewallRules: [UDP Query User{9F241A9B-5F01-441E-BB1D-C64B38B0CB10}C:\program files (x86)\jetbrains\pycharm community edition 2024.3.3\bin\pycharm64.exe] => (Allow) C:\program files (x86)\jetbrains\pycharm community edition 2024.3.3\bin\pycharm64.exe (JetBrains s.r.o. -> JetBrains s.r.o.)
FirewallRules: [TCP Query User{972C4A3B-5AD4-4EA6-BAF7-36D22BD46003}C:\users\adminstrator\appdata\local\programs\mps\jbr\bin\javaw.exe] => (Allow) C:\users\adminstrator\appdata\local\programs\mps\jbr\bin\javaw.exe
FirewallRules: [UDP Query User{4DF62EFF-BDDD-4AE4-935A-89846B32C59D}C:\users\adminstrator\appdata\local\programs\mps\jbr\bin\javaw.exe] => (Allow) C:\users\adminstrator\appdata\local\programs\mps\jbr\bin\javaw.exe
FirewallRules: [TCP Query User{B0510A79-3D6E-4D10-B536-14E96753F492}C:\users\adminstrator\appdata\local\programs\lm studio\lm studio.exe] => (Allow) C:\users\adminstrator\appdata\local\programs\lm studio\lm studio.exe (Element Labs Inc. -> LM Studio)
FirewallRules: [UDP Query User{B1ED79D5-3DB1-4634-B7F8-1CE779C10142}C:\users\adminstrator\appdata\local\programs\lm studio\lm studio.exe] => (Allow) C:\users\adminstrator\appdata\local\programs\lm studio\lm studio.exe (Element Labs Inc. -> LM Studio)
FirewallRules: [{AA5C84B8-0C3C-470F-AAAB-30BB25C7D099}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{18FCB2CF-5AD3-4721-BA10-E5074E985EEE}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{044093A3-3A4A-4BCE-9F59-F4851A93551A}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{1E547C75-D9F5-4BC8-B7DA-2B026AF7C673}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [TCP Query User{3B9322AD-CBD6-4D85-8BEB-77FF980647F5}C:\users\adminstrator\.cursor\extensions\redhat.java-1.41.0-win32-x64\jre\21.0.6-win32-x86_64\bin\java.exe] => (Allow) C:\users\adminstrator\.cursor\extensions\redhat.java-1.41.0-win32-x64\jre\21.0.6-win32-x86_64\bin\java.exe => No File
FirewallRules: [UDP Query User{898CA81E-18CC-486A-89F9-6B7AF8293B09}C:\users\adminstrator\.cursor\extensions\redhat.java-1.41.0-win32-x64\jre\21.0.6-win32-x86_64\bin\java.exe] => (Allow) C:\users\adminstrator\.cursor\extensions\redhat.java-1.41.0-win32-x64\jre\21.0.6-win32-x86_64\bin\java.exe => No File
FirewallRules: [TCP Query User{9B6EE718-D6C9-4F5D-8973-02FE20F89E75}C:\users\adminstrator\appdata\local\programs\perplexity\perplexity.exe] => (Allow) C:\users\adminstrator\appdata\local\programs\perplexity\perplexity.exe (PERPLEXITY AI, INC. -> Perplexity)
FirewallRules: [UDP Query User{3C135C38-993D-4A4A-8EFB-247F02C61847}C:\users\adminstrator\appdata\local\programs\perplexity\perplexity.exe] => (Allow) C:\users\adminstrator\appdata\local\programs\perplexity\perplexity.exe (PERPLEXITY AI, INC. -> Perplexity)
FirewallRules: [{62CD4D03-BC19-4A6D-AE55-A30403051BAD}] => (Allow) C:\Program Files\WindowsApps\AuraDesktopCollector_1.0.0.34_x64__k39x8bfgayfx4\Services\AuraDesktopCollectorService.exe (Aura Sub, LLC -> )
FirewallRules: [{498B0783-BBD0-47E4-881B-C5322F96F239}] => (Allow) C:\Program Files\WindowsApps\AuraDesktopCollector_1.0.0.34_x64__k39x8bfgayfx4\Services\AuraDesktopCollectorService.exe (Aura Sub, LLC -> )
FirewallRules: [{CB9A58AF-8857-4DA4-95F0-CF9ADFE058B7}] => (Allow) C:\program files\edb\pem\httpd\apache\bin\httpd.exe (Apache Software Foundation) [File not signed]
FirewallRules: [{3DAA1282-D1FD-446F-A412-7B6D0D92EC21}] => (Allow) C:\program files\edb\pem\httpd\apache\bin\httpd.exe (Apache Software Foundation) [File not signed]
FirewallRules: [TCP Query User{65DA10F3-FB35-49C1-A65A-31C5806788A4}C:\program files\burpsuitecommunity\burpsuitecommunity.exe] => (Allow) C:\program files\burpsuitecommunity\burpsuitecommunity.exe (PortSwigger Ltd -> PortSwigger Web Security)
FirewallRules: [UDP Query User{F89AF360-D41E-42B5-841D-49BBA2FE9112}C:\program files\burpsuitecommunity\burpsuitecommunity.exe] => (Allow) C:\program files\burpsuitecommunity\burpsuitecommunity.exe (PortSwigger Ltd -> PortSwigger Web Security)
FirewallRules: [{5065A4AA-C4E6-4049-9335-7F8705A2E687}] => (Allow) C:\Program Files\DrWeb\dwservice.exe (DOCTOR WEB, LTD -> Doctor Web, Ltd.)
FirewallRules: [{EE7E01D5-5DF1-4FDE-A9BF-B5D28F776A1B}] => (Allow) C:\Program Files\DrWeb\spideragent.exe (DOCTOR WEB, LTD -> Doctor Web, Ltd.)
FirewallRules: [TCP Query User{A9A72846-ADBD-4EAF-A310-3BE3CB752CB1}C:\users\a1b2a\.vscode\extensions\redhat.java-1.41.1-win32-x64\jre\21.0.6-win32-x86_64\bin\java.exe] => (Block) C:\users\a1b2a\.vscode\extensions\redhat.java-1.41.1-win32-x64\jre\21.0.6-win32-x86_64\bin\java.exe
FirewallRules: [UDP Query User{D77E44A7-D251-4720-BB9C-BF0080D20517}C:\users\a1b2a\.vscode\extensions\redhat.java-1.41.1-win32-x64\jre\21.0.6-win32-x86_64\bin\java.exe] => (Block) C:\users\a1b2a\.vscode\extensions\redhat.java-1.41.1-win32-x64\jre\21.0.6-win32-x86_64\bin\java.exe
FirewallRules: [TCP Query User{18E67E25-FCDC-4717-90F1-59BF679A4967}C:\program files\microsoft vs code insiders\code - insiders.exe] => (Allow) C:\program files\microsoft vs code insiders\code - insiders.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{3F6C0A31-A6E1-4E7F-81CA-4C6678D84034}C:\program files\microsoft vs code insiders\code - insiders.exe] => (Allow) C:\program files\microsoft vs code insiders\code - insiders.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{89E5094A-3A09-4B78-A73F-704336253F48}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25094.303.3554.9058_x64__8wekyb3d8bbwe\ms-teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{DCD2779C-9F40-4316-A448-B7DC39445E00}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25094.303.3554.9058_x64__8wekyb3d8bbwe\ms-teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{7E3F8E57-AE7A-4CF1-B33A-B2C80F9788BB}C:\users\adminstrator\.julia\juliaup\julia-1.11.5+0.x64.w64.mingw32\bin\julia.exe] => (Allow) C:\users\adminstrator\.julia\juliaup\julia-1.11.5+0.x64.w64.mingw32\bin\julia.exe (JuliaHub, Inc. -> )
FirewallRules: [UDP Query User{391F10A9-ADEA-42B2-9833-0D27B27A882E}C:\users\adminstrator\.julia\juliaup\julia-1.11.5+0.x64.w64.mingw32\bin\julia.exe] => (Allow) C:\users\adminstrator\.julia\juliaup\julia-1.11.5+0.x64.w64.mingw32\bin\julia.exe (JuliaHub, Inc. -> )
FirewallRules: [TCP Query User{42A25B92-F1ED-4355-A333-056CF4B8179A}C:\users\adminstrator\.cursor\extensions\redhat.java-1.41.1-win32-x64\jre\21.0.6-win32-x86_64\bin\java.exe] => (Allow) C:\users\adminstrator\.cursor\extensions\redhat.java-1.41.1-win32-x64\jre\21.0.6-win32-x86_64\bin\java.exe
FirewallRules: [UDP Query User{78EBE6D0-77F5-46D4-A6A7-20E63506FCD3}C:\users\adminstrator\.cursor\extensions\redhat.java-1.41.1-win32-x64\jre\21.0.6-win32-x86_64\bin\java.exe] => (Allow) C:\users\adminstrator\.cursor\extensions\redhat.java-1.41.1-win32-x64\jre\21.0.6-win32-x86_64\bin\java.exe
FirewallRules: [{46694275-47F1-458D-94A4-2932DC5A4CE0}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\136.0.3240.29\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{9E9E137F-FF44-48A8-94C3-EC1CB90F256E}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [TCP Query User{EFA4EFBB-916A-45D4-890B-DEE7E3A86864}C:\program files\aiseesoft studio\aiseesoft ai photo editor\aiseesoft ai photo editor.exe] => (Allow) C:\program files\aiseesoft studio\aiseesoft ai photo editor\aiseesoft ai photo editor.exe (RayShare Co., Ltd -> Aiseesoft)
FirewallRules: [UDP Query User{DC1427BF-A312-43C9-936B-96C7420DF012}C:\program files\aiseesoft studio\aiseesoft ai photo editor\aiseesoft ai photo editor.exe] => (Allow) C:\program files\aiseesoft studio\aiseesoft ai photo editor\aiseesoft ai photo editor.exe (RayShare Co., Ltd -> Aiseesoft)
FirewallRules: [TCP Query User{0275763D-573F-459C-979D-44BE5B443CB0}C:\windows\system32\dllhost.exe] => (Allow) C:\windows\system32\dllhost.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [UDP Query User{E468B907-9052-4DE2-B8E3-1E35327AECD5}C:\windows\system32\dllhost.exe] => (Allow) C:\windows\system32\dllhost.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [TCP Query User{13EFB5E1-2160-491F-BE4F-39406C1135D6}C:\users\adminstrator\.vscode\extensions\redhat.java-1.41.1-win32-x64\jre\21.0.6-win32-x86_64\bin\java.exe] => (Allow) C:\users\adminstrator\.vscode\extensions\redhat.java-1.41.1-win32-x64\jre\21.0.6-win32-x86_64\bin\java.exe
FirewallRules: [UDP Query User{532DB81B-E474-4C52-9955-6E60E0B6B583}C:\users\adminstrator\.vscode\extensions\redhat.java-1.41.1-win32-x64\jre\21.0.6-win32-x86_64\bin\java.exe] => (Allow) C:\users\adminstrator\.vscode\extensions\redhat.java-1.41.1-win32-x64\jre\21.0.6-win32-x86_64\bin\java.exe

==================== Restore Points =========================

ATTENTION: System Restore is disabled (Total:1906.66 GB) (Free:1135.92 GB) (60%)

==================== Faulty Device Manager Devices ============
Name: ExpressVPN TUN Driver
Description: ExpressVPN TUN Driver
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: ExpressVPN
Service: expressvpntun
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: VirtualBox Host-Only Ethernet Adapter
Description: VirtualBox Host-Only Ethernet Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Oracle Corporation
Service: VBoxNetAdp
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: TAP-Windows Adapter V9
Description: TAP-Windows Adapter V9
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: TAP-Windows Provider V9
Service: tap0901
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: OpenVPN Data Channel Offload
Description: OpenVPN Data Channel Offload
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: OpenVPN, Inc
Service: ovpn-dco
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: VMware Virtual Ethernet Adapter for VMnet1
Description: VMware Virtual Ethernet Adapter for VMnet1
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Broadcom Inc.
Service: VMnetAdapter
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: VMware Virtual Ethernet Adapter for VMnet8
Description: VMware Virtual Ethernet Adapter for VMnet8
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Broadcom Inc.
Service: VMnetAdapter
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: ========================

Application errors:
==================
Error: (04/25/2025 02:11:33 PM) (Source: OpenVPN GUI) (EventID: 0) (User: )
Description: Event-ID 0

Error: (04/25/2025 02:11:33 PM) (Source: OpenVPN GUI) (EventID: 0) (User: )
Description: Event-ID 0

Error: (04/25/2025 01:57:47 PM) (Source: Application Hang) (EventID: 1002) (User: NT AUTHORITY)
Description: The program msinfo32.exe version 10.0.27823.1000 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Security and Maintenance control panel.

Error: (04/25/2025 11:15:36 AM) (Source: incredibuild) (EventID: 88) (User: NT AUTHORITY)
Description: Event-ID 88

Error: (04/25/2025 11:15:36 AM) (Source: incredibuild) (EventID: 88) (User: NT AUTHORITY)
Description: Event-ID 88

Error: (04/25/2025 11:15:36 AM) (Source: incredibuild) (EventID: 88) (User: NT AUTHORITY)
Description: Event-ID 88

Error: (04/25/2025 11:15:36 AM) (Source: incredibuild) (EventID: 88) (User: NT AUTHORITY)
Description: Event-ID 88

Error: (04/25/2025 11:15:36 AM) (Source: incredibuild) (EventID: 88) (User: NT AUTHORITY)
Description: Event-ID 88


System errors:
=============
Error: (04/25/2025 01:26:00 PM) (Source: VBoxNetLwf) (EventID: 12) (User: )
Description: The driver detected an internal driver error on \Device\VBoxNetLwf.

Error: (04/25/2025 01:10:31 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-3VMG7E1)
Description: Unable to start a DCOM Server: {F3B5324B-98B2-4523-BBE5-1ABAB8B4D7D3} as Unavailable/Unavailable. The error:
"2147942403"
Happened while starting this command:
"C:\Program Files\WindowsApps\7EE7776C.LinkedInforWindows_3.0.42.0_x64__w1wdnht996qgy\LinkedIn\LinkedIn.exe" ----WindowsAppRuntimePushServer: -Embedding

Error: (04/25/2025 11:40:25 AM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-3VMG7E1)
Description: Unable to start a DCOM Server: {F3B5324B-98B2-4523-BBE5-1ABAB8B4D7D3} as Unavailable/Unavailable. The error:
"2147942403"
Happened while starting this command:
"C:\Program Files\WindowsApps\7EE7776C.LinkedInforWindows_3.0.42.0_x64__w1wdnht996qgy\LinkedIn\LinkedIn.exe" ----WindowsAppRuntimePushServer: -Embedding

Error: (04/25/2025 11:40:25 AM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-3VMG7E1)
Description: Unable to start a DCOM Server: {F3B5324B-98B2-4523-BBE5-1ABAB8B4D7D3} as Unavailable/Unavailable. The error:
"2147942403"
Happened while starting this command:
"C:\Program Files\WindowsApps\7EE7776C.LinkedInforWindows_3.0.42.0_x64__w1wdnht996qgy\LinkedIn\LinkedIn.exe" ----WindowsAppRuntimePushServer: -Embedding

Error: (04/25/2025 12:35:31 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Datadog Agent service failed to start due to the following error:
The service did not start due to a logon failure.

Error: (04/25/2025 12:35:31 AM) (Source: Service Control Manager) (EventID: 7041) (User: )
Description: The datadogagent service was unable to log on as .\ddagentuser with the currently configured password due to the following error:
Logon failure: the user has not been granted the requested logon type at this computer. Service: datadogagent
Domain and account: .\ddagentuser This service account does not have the required user right "Log on as a service." User Action Assign "Log on as a service" to the service account on this computer. You can use Local Security Settings (Secpol.msc) to do this. If this computer is a node in a cluster, check that this user right is assigned to the Cluster service account on all nodes in the cluster. If you have already assigned this user right to the service account, and the user right appears to be removed, check with your domain administrator to find out if a Group Policy object associated with this node might be removing the right.

Error: (04/25/2025 12:33:19 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The pgagent-pg17 service failed to start due to the following error:
The service did not start due to a logon failure.

Error: (04/25/2025 12:33:19 AM) (Source: Service Control Manager) (EventID: 7041) (User: )
Description: The pgagent-pg17 service was unable to log on as .\pgAgent with the currently configured password due to the following error:
Logon failure: the user has not been granted the requested logon type at this computer. Service: pgagent-pg17
Domain and account: .\pgAgent This service account does not have the required user right "Log on as a service." User Action Assign "Log on as a service" to the service account on this computer. You can use Local Security Settings (Secpol.msc) to do this. If this computer is a node in a cluster, check that this user right is assigned to the Cluster service account on all nodes in the cluster. If you have already assigned this user right to the service account, and the user right appears to be removed, check with your domain administrator to find out if a Group Policy object associated with this node might be removing the right.


Windows Defender:
================
Date: 2025-04-06 01:20:48
Description:
Microsoft Defender Antivirus has detected malware or other potentially unwanted software.
For more information please see the following:
https://go.microsoft...01&enterprise=0
Name: Trojan:Win32/Pomal!rfn
Severity: Severe
Category: Trojan
Path: file:_C:\Users\Adminstrator\AppData\Local\Temp\DN000000006569C4B6\Runtime64.dll
Detection Origin: Local machine
Detection Type: Concrete
Detection Source: Real-Time Protection
Process Name: C:\Users\Adminstrator\Downloads\Telegram Desktop\V7 CLEAN\V7 CLEAN\CraxsRat V7.0 clean by Abd.exe
Security intelligence Version: AV: 1.427.84.0, AS: 1.427.84.0, NIS: 1.427.84.0
Engine Version: AM: 1.1.25030.1, NIS: 1.1.25030.1

Date: 2025-04-06 01:18:10
Description:
Microsoft Defender Antivirus has detected malware or other potentially unwanted software.
For more information please see the following:
https://go.microsoft...34&enterprise=0
Name: Worm:Win32/AutoRun!atmn
Severity: Severe
Category: Worm
Path: file:_C:\Users\Adminstrator\Downloads\Telegram Desktop\V7 CLEAN\V7 CLEAN\res\Lib\aapt.exe
Detection Origin: Local machine
Detection Type: Concrete
Detection Source: Real-Time Protection
Process Name: C:\Windows\explorer.exe
Security intelligence Version: AV: 1.427.84.0, AS: 1.427.84.0, NIS: 0.0.0.0
Engine Version: AM: 1.1.25030.1, NIS: 0.0.0.0

Date: 2025-04-06 01:18:10
Description:
Microsoft Defender Antivirus has detected malware or other potentially unwanted software.
For more information please see the following:
https://go.microsoft...67&enterprise=0
Name: Worm:Win32/AutoRun.XXY!bit
Severity: Severe
Category: Worm
Path: file:_C:\Users\Adminstrator\Downloads\Telegram Desktop\V7 CLEAN\V7 CLEAN\res\Lib\7z.exe
Detection Origin: Local machine
Detection Type: Concrete
Detection Source: Real-Time Protection
Process Name: C:\Windows\explorer.exe
Security intelligence Version: AV: 1.427.84.0, AS: 1.427.84.0, NIS: 0.0.0.0
Engine Version: AM: 1.1.25030.1, NIS: 0.0.0.0

Date: 2025-04-06 01:18:06
Description:
Microsoft Defender Antivirus has detected malware or other potentially unwanted software.
For more information please see the following:
https://go.microsoft...10&enterprise=0
Name: Backdoor:MSIL/Bladabindi!rfn
Severity: Severe
Category: Backdoor
Path: file:_C:\Users\Adminstrator\Downloads\Telegram Desktop\V7 CLEAN\V7 CLEAN\WinMM.Net.dll
Detection Origin: Local machine
Detection Type: Concrete
Detection Source: Real-Time Protection
Process Name: C:\Windows\explorer.exe
Security intelligence Version: AV: 1.427.84.0, AS: 1.427.84.0, NIS: 0.0.0.0
Engine Version: AM: 1.1.25030.1, NIS: 0.0.0.0

Date: 2025-04-06 01:18:03
Description:
Microsoft Defender Antivirus has detected malware or other potentially unwanted software.
For more information please see the following:
https://go.microsoft...11&enterprise=0
Name: Trojan:MSIL/Malgent!MSR
Severity: Severe
Category: Trojan
Path: file:_C:\Users\Adminstrator\Downloads\Telegram Desktop\V7 CLEAN\V7 CLEAN\craxs.dll
Detection Origin: Local machine
Detection Type: Concrete
Detection Source: Real-Time Protection
Process Name: C:\Windows\explorer.exe
Security intelligence Version: AV: 1.427.84.0, AS: 1.427.84.0, NIS: 0.0.0.0
Engine Version: AM: 1.1.25030.1, NIS: 0.0.0.0

CodeIntegrity:
===============
Date: 2025-04-25 14:07:46
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\AuraAV\AMSI\AuAMSIProvider.dll that did not meet the Windows signing level requirements.


==================== Memory info ===========================

BIOS: Microsoft Corporation 23.101.140 10/10/2024
Motherboard: Microsoft Corporation Surface Book 3
Processor: Intel® Core™ i7-1065G7 CPU @ 1.30GHz
Percentage of memory in use: 67%
Total physical RAM: 32354.04 MB
Available physical RAM: 10462.15 MB
Total Virtual: 73314.04 MB
Available Virtual: 35230.88 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:1906.66 GB) (Free:1135.92 GB) (Model: KXG60PNV2T04 TOSHIBA) (Protected) NTFS
Drive g: (Google Drive) (Fixed) (Total:1906.66 GB) (Free:1079.13 GB) (Model: KXG60PNV2T04 TOSHIBA) FAT32
Drive z: (hak193) (Fixed) (Total:1023.94 GB) (Free:1013.85 GB) (Model: Microsoft Virtual Disk) (Protected) ReFS

\\?\Volume{fa3d071d-0d2e-4f92-bc6a-a674648ef2b4}\ () (Fixed) (Total:0.95 GB) (Free:0.16 GB) NTFS
\\?\Volume{3e63c294-fad6-4a69-89a7-8b6455a2094c}\ () (Fixed) (Total:0.09 GB) (Free:0.06 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Protective MBR) (Size: 1907.7 GB) (Disk ID: 00000000)

Partition: GPT.

==========================================================
Disk: 1 (Protective MBR) (Size: 1024 GB) (Disk ID: 00000000)

Partition: GPT.

==================== End of Addition.txt =======================

 

 

other FRST File

 

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 23-04-2025
Ran by Adminstrator (administrator) on DESKTOP-3VMG7E1 (Microsoft Corporation Surface Book 3) (25-04-2025 14:12:48)
Running from C:\Users\Adminstrator\Downloads\FRST64.exe
Loaded Profiles: Adminstrator & postgres & himds
Platform: Microsoft Windows 11 Pro Insider Preview Version Dev 27823.1000 (X64) Language: English (United States)
Default browser: FF
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Anthropic, PBC -> Anthropic) C:\Users\Adminstrator\AppData\Local\AnthropicClaude\app-0.9.2\claude.exe <8>
(Broadcom Inc -> VMware, Inc.) C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe
(C:\Program Files (x86)\Incredibuild\Manager\ManagerService.exe ->) (INCREDIBUILD SOFTWARE LTD -> Node.js) C:\Program Files (x86)\Incredibuild\Manager\Manager.exe
(C:\Program Files\Git\bin\bash.exe ->) (Johannes Schindelin -> ) C:\Program Files\Git\usr\bin\bash.exe <3>
(C:\Program Files\Google\Drive File Stream\107.0.3.0\GoogleDriveFS.exe ->) (Google LLC -> ) C:\Program Files\Google\Drive File Stream\107.0.3.0\crashpad_handler.exe
(C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe
(C:\Program Files\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> ) C:\Program Files\TeamViewer\crashpad_handler.exe
(C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.22.10731.0_x64__8wekyb3d8bbwe\WindowsTerminal.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.22.10731.0_x64__8wekyb3d8bbwe\OpenConsole.exe <2>
(C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.22.10731.0_x64__8wekyb3d8bbwe\WindowsTerminal.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.PowerShell_7.5.0.0_x64__8wekyb3d8bbwe\pwsh.exe
(C:\Program Files\WindowsApps\Microsoft.YourPhone_1.25041.71.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.25041.71.0_x64__8wekyb3d8bbwe\YourPhoneAppProxy.exe
(C:\Users\ADMIN_a1b2a\AppData\Local\Wondershare\Wondershare NativePush\WsNativePushService.exe ->) (Wondershare Technology Group Co.,Ltd -> Wondershare) C:\Users\ADMIN_a1b2a\AppData\Local\Wondershare\Wondershare NativePush\WsToastNotification.exe
(C:\Users\Adminstrator\AppData\Local\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\Adminstrator\AppData\Local\PowerToys\PowerToys.AlwaysOnTop.exe
(C:\Users\Adminstrator\AppData\Local\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\Adminstrator\AppData\Local\PowerToys\PowerToys.Awake.exe
(C:\Users\Adminstrator\AppData\Local\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\Adminstrator\AppData\Local\PowerToys\PowerToys.CropAndLock.exe
(C:\Users\Adminstrator\AppData\Local\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\Adminstrator\AppData\Local\PowerToys\PowerToys.FancyZones.exe
(C:\Users\Adminstrator\AppData\Local\Programs\Microsoft VS Code\Code.exe ->) () [File not signed] C:\Users\Adminstrator\.vscode\extensions\sourcery.sourcery-1.35.0-win32-x64\sourcery_binaries\install\win\sourcery.exe <2>
(C:\Users\Adminstrator\AppData\Local\Programs\Microsoft VS Code\Code.exe ->) () [File not signed] C:\Users\Adminstrator\AppData\Local\CircleCI-language-server\Data\circleci-yaml-language-server.exe
(C:\Users\Adminstrator\AppData\Local\Programs\Microsoft VS Code\Code.exe ->) () [File not signed] C:\Users\Adminstrator\AppData\Roaming\Code\User\globalStorage\deepsourcecorp.deepsource-vscode\sidekick.exe
(C:\Users\Adminstrator\AppData\Local\Programs\Microsoft VS Code\Code.exe ->) () [File not signed] C:\Users\Adminstrator\go\bin\gopls.exe <2>
(C:\Users\Adminstrator\AppData\Local\Programs\Microsoft VS Code\Code.exe ->) (.NET -> Microsoft Corporation) C:\Users\Adminstrator\.vscode\extensions\ms-dotnettools.csharp-2.72.34-win32-x64\.roslyn\Microsoft.CodeAnalysis.LanguageServer.exe
(C:\Users\Adminstrator\AppData\Local\Programs\Microsoft VS Code\Code.exe ->) (AIServiceLocalPackage) [File not signed] [File is in use] C:\Users\Adminstrator\.vscode\extensions\ms-azuretools.vscode-azure-github-copilot-0.3.193\dist\node_modules\aidriver\win-x64\AIServiceLocalPackage.exe
(C:\Users\Adminstrator\AppData\Local\Programs\Microsoft VS Code\Code.exe ->) (Codeium (Exafunction, Inc.) -> Exafunction) C:\Users\Adminstrator\.vscode\extensions\codeium.codeium-1.42.7\dist\c2d78b189732d0db86e3055e1a49c2a75d623a38\language_server_windows_x64.exe <2>
(C:\Users\Adminstrator\AppData\Local\Programs\Microsoft VS Code\Code.exe ->) (Eclipse.org Foundation, Inc. -> Eclipse Adoptium) C:\Users\Adminstrator\.vscode\extensions\sonarsource.sonarlint-vscode-4.20.2-win32-x64\jre\21.0.6-win32-x86_64.tar\bin\java.exe
(C:\Users\Adminstrator\AppData\Local\Programs\Microsoft VS Code\Code.exe ->) (Johannes Schindelin -> The Git Development Community) C:\Program Files\Git\bin\bash.exe <3>
(C:\Users\Adminstrator\AppData\Local\Programs\Microsoft VS Code\Code.exe ->) (Microsoft Corporation -> ) C:\Users\Adminstrator\.vscode\extensions\ms-python.python-2025.2.0-win32-x64\python-env-tools\bin\pet.exe
(C:\Users\Adminstrator\AppData\Local\Programs\Microsoft VS Code\Code.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\Adminstrator\.vscode\extensions\ms-vscode.cpptools-1.25.0-win32-x64\bin\cpptools.exe
(C:\Users\Adminstrator\AppData\Local\Programs\Microsoft VS Code\Code.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe <2>
(C:\Users\Adminstrator\AppData\Local\Programs\Microsoft VS Code\Code.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe <5>
(C:\Users\Adminstrator\AppData\Local\Programs\Microsoft VS Code\Code.exe ->) (OpenJS Foundation -> Node.js) C:\Users\Adminstrator\AppData\Local\aws\toolkits\language-servers\AmazonQ-Workspace\0.1.47\node.exe
(DriverStore\FileRepository\cui_dch.inf_amd64_60c238a4ddc866b7\igfxCUIServiceN.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_60c238a4ddc866b7\igfxEMN.exe
(DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_e75a3d1c39bebe3f\DAX3API.exe ->) (Dolby Laboratories, Inc. -> Dolby Laboratories) C:\Windows\System32\DriverStore\FileRepository\DAX3_S~1.INF\DAX3API.exe
(Eclipse.org Foundation, Inc. -> Eclipse Adoptium) C:\Users\Adminstrator\.vscode\extensions\redhat.java-1.41.1-win32-x64\jre\21.0.6-win32-x86_64\bin\java.exe <3>
(explorer.exe ->) (Cloudflare, Inc. -> Cloudflare) C:\Program Files\Cloudflare\Cloudflare WARP\Cloudflare WARP.exe
(explorer.exe ->) (DOCTOR WEB, LTD -> Doctor Web, Ltd.) C:\Program Files\DrWeb\spideragent.exe
(explorer.exe ->) (Figma, Inc. -> ) C:\Users\Adminstrator\AppData\Local\FigmaAgent\figma_agent.exe
(explorer.exe ->) (Google LLC -> Google LLC.) C:\Program Files\Google\Drive File Stream\107.0.3.0\GoogleDriveFS.exe <7>
(explorer.exe ->) (JetBrains s.r.o. -> JetBrains) C:\Users\Adminstrator\AppData\Local\JetBrains\Toolbox\bin\jetbrains-toolbox.exe
(explorer.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2503.11.0_x64__8wekyb3d8bbwe\Notepad\Notepad.exe
(explorer.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.22.10731.0_x64__8wekyb3d8bbwe\WindowsTerminal.exe
(explorer.exe ->) (Microsoft Corporation -> ) C:\Windows\AzureArcSetup\Systray\AzureArcSysTray.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\lync.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\25.065.0406.0002\Microsoft.SharePoint.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\Adminstrator\AppData\Local\PowerToys\PowerToys.PowerLauncher.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\Adminstrator\AppData\Local\PowerToys\WinUI3Apps\PowerToys.Peek.UI.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\Adminstrator\AppData\Local\Programs\Microsoft VS Code\Code.exe <25>
(Expressco Services LLC -> ExpressVPN) C:\Program Files (x86)\ExpressVPN\expressvpn-ui\ExpressVPNNotificationService.exe
(INCREDIBUILD SOFTWARE LTD -> Incredibuild Software Ltd.) C:\Program Files (x86)\Incredibuild\xgTrayIcon.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <7>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\MSTeams_25094.303.3554.9058_x64__8wekyb3d8bbwe\ms-teams.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\msinfo32.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <66>
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(services.exe ->) () [File not signed] C:\Program Files\edb\EnterpriseDB-xDBReplicationServer\scripts\ServiceWrapper.exe <2>
(services.exe ->) (Apache Software Foundation) [File not signed] C:\Program Files\edb\pem\httpd\apache\bin\httpd.exe <2>
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (Aura Sub, LLC -> Aura) C:\Program Files\AuraApp\6.0.1\bin\Aura.Service.exe
(services.exe ->) (Aura Sub, LLC -> Av.Sdk.ProtectedService) C:\Program Files\AuraAV\ProtectedService\Av.Sdk.ProtectedService.exe
(services.exe ->) (Broadcom Inc -> VMware, Inc.) C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe
(services.exe ->) (Broadcom Inc -> VMware, Inc.) C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe
(services.exe ->) (Broadcom Inc -> VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
(services.exe ->) (Broadcom Inc -> VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
(services.exe ->) (Cloudflare, Inc. -> ) C:\Program Files\Cloudflare\Cloudflare WARP\warp-svc.exe
(services.exe ->) (DOCTOR WEB, LTD -> Doctor Web, Ltd.) C:\Program Files\DrWeb\dwcloudhost.exe
(services.exe ->) (DOCTOR WEB, LTD -> Doctor Web, Ltd.) C:\Program Files\DrWeb\dwservice.exe
(services.exe ->) (Dolby Laboratories, Inc. -> Dolby Laboratories) C:\Windows\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_e75a3d1c39bebe3f\DAX3API.exe
(services.exe ->) (Expressco Services LLC -> ExpressVPN) C:\Program Files (x86)\ExpressVPN\services\ExpressVPN.AppService.exe
(services.exe ->) (Expressco Services LLC -> ExpressVPN) C:\Program Files (x86)\ExpressVPN\services\ExpressVPN.SystemService.exe
(services.exe ->) (Expressco Services LLC -> ExpressVPN) C:\Program Files (x86)\ExpressVPN\services\ExpressVPN.VpnService.exe
(services.exe ->) (INCREDIBUILD SOFTWARE LTD -> Incredibuild Software Ltd.) C:\Program Files (x86)\Incredibuild\BuildService.exe
(services.exe ->) (INCREDIBUILD SOFTWARE LTD -> Incredibuild Software Ltd.) C:\Program Files (x86)\Incredibuild\CoordinatorService.exe
(services.exe ->) (INCREDIBUILD SOFTWARE LTD -> Incredibuild Software Ltd.) C:\Program Files (x86)\Incredibuild\LicenseService.exe
(services.exe ->) (INCREDIBUILD SOFTWARE LTD -> Incredibuild Software Ltd.) C:\Program Files (x86)\Incredibuild\Manager\ManagerService.exe
(services.exe ->) (Incredibuild Software Ltd.) [File not signed] C:\Program Files (x86)\Incredibuild\EPS\endpointService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_60c238a4ddc866b7\igfxCUIServiceN.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_884878e25316eb06\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\DriverStore\FileRepository\intcoed.inf_amd64_943ac983dea9b81b\AS\IAS\IntelAudioService.exe
(services.exe ->) (JetBrains s.r.o. -> JetBrains s.r.o) C:\Program Files\JetBrains\ETW Host\16\JetBrains.Etw.Collector.Host.exe
(services.exe ->) (Microsoft Corporation -> ) C:\Program Files\AzureConnectedMachineAgent\ExtensionService2\GC\gc_extension_service.exe
(services.exe ->) (Microsoft Corporation -> ) C:\Program Files\AzureConnectedMachineAgent\GCArcService2\GC\gc_arc_service.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\AzureConnectedMachineAgent\arcproxy.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\AzureConnectedMachineAgent\himds.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WSL\wslservice.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\System32\SurfaceUsbHubFwUpdateV2Service.exe
(services.exe ->) (Microsoft Windows -> ) C:\Windows\System32\OpenSSH\sshd.exe
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\WebManagement.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Doctor Web, Ltd.) C:\Program Files\DrWeb\wsc-service.exe
(services.exe ->) (MongoDB, Inc) [File not signed] C:\Program Files\MongoDB\Server\8.0\bin\mongod.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvmsoegpu.inf_amd64_c59f41123c2f233c\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (OpenVPN Inc. -> The OpenVPN Project) C:\Program Files\OpenVPN\bin\openvpnserv.exe
(services.exe ->) (OpenVPN Inc. -> The OpenVPN project) C:\Program Files\OpenVPN\bin\openvpnserv2.exe
(services.exe ->) (Pango LLC -> AnchorFree Inc.) C:\Program Files\AuraApp\6.0.1\bin\UnifiedSDK.Service\UnifiedSDK.Service.exe
(services.exe ->) (PostgreSQL Global Development Group) [File not signed] C:\Program Files\PostgreSQL\16\bin\pg_ctl.exe
(services.exe ->) (PostgreSQL Global Development Group) [File not signed] C:\Program Files\PostgreSQL\17\bin\pg_ctl.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\hdxsstmd3a.inf_amd64_f91909e580af72a1\RtkAudUService64.exe <2>
(services.exe ->) (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(services.exe ->) (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
(services.exe ->) (Wondershare Technology Group Co.,Ltd -> ) C:\ProgramData\Wondershare\wsServices\ElevationService.exe
(services.exe ->) (Wondershare Technology Group Co.,Ltd -> Wondershare) C:\ProgramData\Wondershare\Service\InstallAssistService.exe
(services.exe ->) (Wondershare Technology Group Co.,Ltd -> Wondershare) C:\Users\ADMIN_a1b2a\AppData\Local\Wondershare\Wondershare NativePush\WsNativePushService.exe
(services.exe ->) (wondershare) [File not signed] C:\ProgramData\Wondershare\wsServices\WsidService.exe
(sihost.exe ->) (Aura Sub, LLC -> ) C:\Program Files\WindowsApps\AuraDesktopCollector_1.0.0.34_x64__k39x8bfgayfx4\services\AuraDesktopCollectorService.exe
(sihost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Copilot_1.25041.125.0_x64__8wekyb3d8bbwe\Copilot.exe
(sihost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25032.50.0_x64__cw5n1h2txyewy\CrossDeviceService.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_6.1.5.0_x64__8wekyb3d8bbwe\Microsoft.Notes.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.1.327.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\Adminstrator\AppData\Local\PowerToys\PowerToys.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.8401.0.0_x64__cw5n1h2txyewy\WidgetBoard.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\prevhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\Microsoft.AAD.BrokerPlugin.exe
(Wondershare Technology Co.,Ltd -> Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
Failed to access process -> AggregatorHost.exe
Failed to access process -> cmd.exe
Failed to access process -> cmd.exe
Failed to access process -> cmd.exe
Failed to access process -> cmd.exe
Failed to access process -> conhost.exe
Failed to access process -> conhost.exe
Failed to access process -> conhost.exe
Failed to access process -> conhost.exe
Failed to access process -> conhost.exe
Failed to access process -> cscript.exe
Failed to access process -> cscript.exe
Failed to access process -> csrss.exe
Failed to access process -> csrss.exe
Failed to access process -> dasHost.exe
Failed to access process -> dasHost.exe
Failed to access process -> dllhost.exe
Failed to access process -> dwm.exe
Failed to access process -> fontdrvhost.exe
Failed to access process -> fontdrvhost.exe
Failed to access process -> ISM.exe
Failed to access process -> java.exe
Failed to access process -> java.exe
Failed to access process -> NetCfgNotifyObjectHost.exe
Failed to access process -> NgcIso.exe
Failed to access process -> postgres.exe
Failed to access process -> postgres.exe
Failed to access process -> postgres.exe
Failed to access process -> postgres.exe
Failed to access process -> postgres.exe
Failed to access process -> postgres.exe
Failed to access process -> postgres.exe
Failed to access process -> postgres.exe
Failed to access process -> postgres.exe
Failed to access process -> postgres.exe
Failed to access process -> postgres.exe
Failed to access process -> postgres.exe
Failed to access process -> postgres.exe
Failed to access process -> postgres.exe
Failed to access process -> powershell.exe
Failed to access process -> wlanext.exe
Failed to access process -> WmiPrvSE.exe
Failed to access process -> WmiPrvSE.exe
Failed to access process -> WUDFHost.exe
Failed to access process -> WUDFHost.exe
Failed to access process -> WUDFHost.exe
Failed to access process -> WUDFHost.exe
Failed to access process -> WUDFHost.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AzureArcSetup] => C:\WINDOWS\AzureArcSetup\Systray\AzureArcSysTray.exe [1039392 2025-04-02] (Microsoft Corporation -> )
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\hdxsstmd3a.inf_amd64_f91909e580af72a1\RtkAudUService64.exe [835680 2021-10-13] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [SurfaceDTX.exe] => C:\WINDOWS\System32\SurfaceDTX.exe [822744 2020-10-21] (Microsoft Corporation -> )
HKLM\...\Run: [UniConverterUpdateHelper] => C:\Program Files\Wondershare\Wondershare UniConverter 15 for Windows\WSVCUUpdateHelper.exe (No File)
HKLM\...\Run: [SpIDerAgent] => C:\Program Files\DrWeb\spideragent.exe [23216424 2025-04-23] (DOCTOR WEB, LTD -> Doctor Web, Ltd.)
HKLM-x32\...\Run: [ExpressVPNNotificationService] => C:\Program Files (x86)\ExpressVPN\expressvpn-ui\ExpressVPNNotificationServiceStarter.exe [381224 2024-11-26] (Expressco Services LLC -> ExpressVPN)
HKLM-x32\...\Run: [IncrediBuild Agent Monitor] => C:\Program Files (x86)\Incredibuild\BuildTrayIcon.exe [210800 2025-01-16] (INCREDIBUILD SOFTWARE LTD -> Incredibuild Software Ltd.)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2133216 2017-03-23] (Wondershare Technology Co.,Ltd -> Wondershare)
HKLM-x32\...\Run: [GitHubDesktopDeployment] => C:\Program Files (x86)\GitHub Desktop Deployment\GitHubDesktopDeploymentTool.exe [172919768 2025-02-13] (GitHub, Inc. -> GitHub, Inc.)
HKLM-x32\...\Run: [vmware-tray.exe] => C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe [114040 2024-11-28] (Broadcom Inc -> VMware, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [752208 2025-04-05] (Oracle America, Inc. -> Oracle Corporation)
HKLM\...\Policies\Explorer: [SettingsPageVisibility] hide:windowsdefender;
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender Security Center: Restriction <==== ATTENTION
HKLM\Software\Policies\...\system: [RunAsPPL] 0
HKLM\Software\Policies\...\system: [EnableSmartScreen] 0
HKLM\SYSTEM\...\Terminal Server: [fDenyTSConnections] = 0 <==== ATTENTION
HKU\S-1-5-19\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\107.0.3.0\GoogleDriveFS.exe [65821280 2025-04-21] (Google LLC -> Google LLC.)
HKU\S-1-5-20\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\107.0.3.0\GoogleDriveFS.exe [65821280 2025-04-21] (Google LLC -> Google LLC.)
HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\Run: [OPENVPN-GUI] => C:\Program Files\OpenVPN\bin\openvpn-gui.exe [1164056 2025-01-15] (OpenVPN Inc. -> )
HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\Run: [MicrosoftEdgeAutoLaunch_EEB4F45D594347DD8BA24CA4E05C7F46] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --win-session-start [4347968 2025-04-21] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [5014344 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\Run: [Discord] => C:\Users\Adminstrator\AppData\Local\Discord\Update.exe [1526504 2024-09-04] (Discord Inc. -> GitHub)
HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\Run: [JetBrains Toolbox] => C:\Users\Adminstrator\AppData\Local\JetBrains\Toolbox\bin\jetbrains-toolbox.exe [938896 2025-04-23] (JetBrains s.r.o. -> JetBrains)
HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\Run: [Lync] => C:\Program Files\Microsoft Office\root\Office16\lync.exe [26503824 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\Run: [Claude] => C:\Users\Adminstrator\AppData\Local\AnthropicClaude\claude.exe [363112 2025-04-10] (Anthropic, PBC -> Anthropic)
HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\107.0.3.0\GoogleDriveFS.exe [65821280 2025-04-21] (Google LLC -> Google LLC.)
HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\Run: [electron.app.LM Studio] => C:\Users\Adminstrator\AppData\Local\Programs\LM Studio\LM Studio.exe [188938368 2025-04-02] (Element Labs Inc. -> LM Studio)
HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\Run: [Figma Agent] => C:\Users\Adminstrator\AppData\Local\FigmaAgent\figma_agent.exe [9134104 2025-04-06] (Figma, Inc. -> )
HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\Run: [Docker Desktop] => C:\Program Files\Docker\Docker\Docker Desktop.exe [4103536 2025-04-14] (Docker Inc -> )
HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\Run: [Microsoft.Lists] => C:\Program Files\Microsoft OneDrive\25.065.0406.0002\Microsoft.SharePoint.exe [1033032 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2451002302-2018568227-764946658-1009\...\Run: [com.squirrel.slack.slack] => C:\Users\Adminstrator\AppData\Local\slack\slack.exe [307504 2025-04-17] (Slack Technologies, LLC -> Slack Technologies Inc.)
HKU\S-1-5-21-2451002302-2018568227-764946658-1013\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\107.0.3.0\GoogleDriveFS.exe [65821280 2025-04-21] (Google LLC -> Google LLC.)
HKU\S-1-5-80-4215458991-2034252225-2287069555-1155419622-2701885083\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\107.0.3.0\GoogleDriveFS.exe [65821280 2025-04-21] (Google LLC -> Google LLC.)
HKU\S-1-5-18\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\107.0.3.0\GoogleDriveFS.exe [65821280 2025-04-21] (Google LLC -> Google LLC.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [>OpenVPN_UserSetup] -> reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Run /f /v OPENVPN-GUI /t REG_SZ /d "C:\Program Files\OpenVPN\bin\openvpn-gui.exe"
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\135.0.7049.97\Installer\chrmstp.exe [2025-04-23] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\PLAP Providers: [{4fbb8b67-cf02-4982-a7a8-3dd06a2c2ebd}] -> C:\Program Files\OpenVPN\bin\libopenvpn_plap.dll [2025-01-15] (OpenVPN Inc. -> )
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Cloudflare WARP.lnk [2025-03-21]
ShortcutTarget: Cloudflare WARP.lnk -> C:\Program Files\Cloudflare\Cloudflare WARP\Cloudflare WARP.exe (Cloudflare, Inc. -> Cloudflare)
GroupPolicy: Restriction ? <==== ATTENTION
GroupPolicy\User: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

"C:\Windows\System32\Tasks\Microsoft\Windows\Security\Pwdless\IntelligentPwdlessTask" Access Denied. <==== ATTENTION
Task: {689B37EF-ABB0-4C8F-B9B5-FFA31E25B9A9} - System32\Tasks\Aura service start timeout handler => C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe [454656 2025-03-22] (Microsoft Windows -> Microsoft Corporation) -> -command "$serviceName = 'Aura Service 6.0.1' $service = Get-Service -Name $serviceName if ($service -eq $null) {   return } if ($service.StartType -ne [System.ServiceProcess.ServiceStartMode]::Automatic) {   return } if ($service.Status -ne [System.ServiceProcess.ServiceControllerStat (the data entry has 175 more characters).
Task: {58C5CE15-B7FF-4777-BE19-7DD26D2B6D25} - System32\Tasks\azcmagent => C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe [454656 2025-03-22] (Microsoft Windows -> Microsoft Corporation) -> -File "C:\Program Files\AzureConnectedMachineAgent\azcmagent_check_updates.ps1"
Task: {722EA7B8-3D77-4D19-B885-1EF21453E992} - System32\Tasks\ETW Host Service Updater v16 => C:\Program Files\JetBrains\ETW Host\16\Updater\EtwHostServiceUpdater.exe [193536 2025-02-04] (JetBrains s.r.o.) [File not signed]
Task: {58C04457-D43A-438E-ACF8-2829DE617A88} - System32\Tasks\GCC => C:\Program Files\GIGABYTE\Control Center\GCC.exe [35405928 2024-12-04] (GIGA-BYTE TECHNOLOGY CO., LTD. -> ) -> C:\Program Files\GIGABYTE\Control Center\\-b
Task: {912E2AD8-4CA4-43D0-8609-0DA1257171E4} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem137.0.7129.0{85FFB317-5960-4299-BD41-6AEC6CED0596} => C:\Program Files (x86)\Google\GoogleUpdater\137.0.7129.0\updater.exe [7375968 2025-04-17] (Google LLC -> Google LLC)
Task: {F8147EC6-D186-4DC9-8119-D81FA87782B5} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [1626328 2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {AE587964-1D27-4066-A774-0E9401DD5193} - System32\Tasks\Microsoft\Office\Office Apps Prewarm => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [315600 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {54BAEA7C-65AA-4787-B6D6-580877C9B7E0} - System32\Tasks\Microsoft\Office\Office Apps Prewarm Recurring => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [315600 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {3124EE81-AA24-439F-B4F6-4B3ADF675E2C} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [29107976 2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {6030DEC1-9FE8-4CD5-B8F4-0912F7A3C7BB} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\opushutil.exe [68360 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {2E6987EF-6EA1-4A26-A76C-ADBFEC8C60BA} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [29107976 2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {FB2A33E9-5C88-4E8C-B5D4-2D2FCF6EE57E} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [315600 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {83279819-83F0-4B74-BD9E-A6A9D0989C66} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [315600 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {EF8956F5-C647-4001-8706-F5A94A6747C0} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [204400 2025-04-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {0C78ED43-CCF9-46A4-88F9-C1007328CD2F} - System32\Tasks\Microsoft\Office\Office Serviceability Manager => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\officesvcmgr.exe [4536784 2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {7B29FB29-40F8-453F-8860-7B1356FF4773} - System32\Tasks\Microsoft\VisualStudio\Updates\BackgroundDownload => C:\Program Files (x86)\Microsoft Visual Studio\Installer\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service\BackgroundDownload.exe [255552 2025-03-22] (Microsoft Corporation -> Microsoft)
Task: {AC56FC26-7186-46F7-A67C-43002CDDCFD5} - System32\Tasks\Microsoft\VisualStudio\Updates\UpdateConfiguration_S-1-5-21-2451002302-2018568227-764946658-1001 => C:\Program Files (x86)\Microsoft Visual Studio\Installer\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service\VSIXConfigurationUpdater.exe [25688 2025-03-22] (Microsoft Corporation -> Microsoft)
Task: {6132257C-A287-408D-A3B5-B3F1A17467ED} - System32\Tasks\Microsoft\VisualStudio\Updates\UpdateConfiguration_S-1-5-21-2451002302-2018568227-764946658-1005 => C:\Program Files (x86)\Microsoft Visual Studio\Installer\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service\VSIXConfigurationUpdater.exe [25688 2025-03-22] (Microsoft Corporation -> Microsoft)
Task: {5CEAAA98-E88E-4971-8487-428EE309BE2C} - System32\Tasks\Microsoft\VisualStudio\Updates\UpdateConfiguration_S-1-5-21-2451002302-2018568227-764946658-1006 => C:\Program Files (x86)\Microsoft Visual Studio\Installer\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service\VSIXConfigurationUpdater.exe [25688 2025-03-22] (Microsoft Corporation -> Microsoft)
Task: {665FAA21-D495-493A-B09A-F6B0F66B73E0} - System32\Tasks\Microsoft\VisualStudio\Updates\UpdateConfiguration_S-1-5-21-2451002302-2018568227-764946658-1008 => C:\Program Files (x86)\Microsoft Visual Studio\Installer\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service\VSIXConfigurationUpdater.exe [25688 2025-03-22] (Microsoft Corporation -> Microsoft)
Task: {67B422D4-B7C6-4711-8C9C-385932B8F3EE} - System32\Tasks\Microsoft\VisualStudio\Updates\UpdateConfiguration_S-1-5-21-2451002302-2018568227-764946658-1009 => C:\Program Files (x86)\Microsoft Visual Studio\Installer\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service\VSIXConfigurationUpdater.exe [25688 2025-03-22] (Microsoft Corporation -> Microsoft)
Task: {C58E5E28-BD0C-473E-ACEB-7422A2B4DD29} - System32\Tasks\Microsoft\VisualStudio\Updates\UpdateConfiguration_S-1-5-21-2451002302-2018568227-764946658-1010 => C:\Program Files (x86)\Microsoft Visual Studio\Installer\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service\VSIXConfigurationUpdater.exe [25688 2025-03-22] (Microsoft Corporation -> Microsoft)
Task: {0041A6AC-EB3E-485C-98C8-103CA39B8252} - System32\Tasks\Microsoft\VisualStudio\Updates\UpdateConfiguration_S-1-5-21-2451002302-2018568227-764946658-1012 => C:\Program Files (x86)\Microsoft Visual Studio\Installer\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service\VSIXConfigurationUpdater.exe [25688 2025-03-22] (Microsoft Corporation -> Microsoft)
Task: {E554ABFF-C776-4410-943E-53EA47EA2DAE} - System32\Tasks\Microsoft\VisualStudio\Updates\UpdateConfiguration_S-1-5-21-2451002302-2018568227-764946658-1013 => C:\Program Files (x86)\Microsoft Visual Studio\Installer\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service\VSIXConfigurationUpdater.exe [25688 2025-03-22] (Microsoft Corporation -> Microsoft)
Task: {3BBCA41C-9EA4-469E-867F-EAD7779F94B0} - System32\Tasks\Microsoft\VisualStudio\Updates\UpdateConfiguration_S-1-5-21-2451002302-2018568227-764946658-1014 => C:\Program Files (x86)\Microsoft Visual Studio\Installer\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service\VSIXConfigurationUpdater.exe [25688 2025-03-22] (Microsoft Corporation -> Microsoft)
Task: {4915E4D7-2462-442C-BE75-D3DD14399E63} - System32\Tasks\Microsoft\VisualStudio\Updates\UpdateConfiguration_S-1-5-21-2451002302-2018568227-764946658-500 => C:\Program Files (x86)\Microsoft Visual Studio\Installer\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service\VSIXConfigurationUpdater.exe [25688 2025-03-22] (Microsoft Corporation -> Microsoft)
Task: {58411FFB-419C-4F64-8CE4-DC2D65D514F3} - System32\Tasks\Microsoft\VisualStudio\VSIX Auto Update => C:\Program Files (x86)\Microsoft Visual Studio\Installer\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service\VSIXAutoUpdate.exe [66624 2025-03-22] (Microsoft Corporation -> Microsoft)
Task: {594040EA-BEFF-4D65-9747-644E605AAB39} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\AppInstallerUpdater => C:\Windows\System32\rundll32.exe [90112 2025-03-22] (Microsoft Windows -> Microsoft Corporation) -> %windir%\system32\AppxDeploymentClient.dll,ScheduleAppInstallerBackgroundUpdate
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe  (No File)
Task: {FCFAAB2C-3DD8-4A4B-8239-D32ED710FA95} - System32\Tasks\Microsoft\Windows\Management\Connectivity\ESIMPM => C:\WINDOWS\system32\esimpm.exe [512000 2025-03-22] (Microsoft Windows -> )
Task: {6D32CD91-5A6C-4971-8D48-A308FD3A1B28} - System32\Tasks\Microsoft\Windows\NetworkExperimentation => {584CA087-4DF3-4121-AB78-995558E3F28D} C:\Windows\System32\NetworkExperimentation.dll [495616 2025-03-22] (Microsoft Windows -> )
Task: {04A7F431-AB35-47D9-8B62-2B7ABE4FD29B} - System32\Tasks\Microsoft\Windows\PCRPF\PCR Prediction Framework Firmware Update Task => C:\Windows\System32\rundll32.exe [90112 2025-03-22] (Microsoft Windows -> Microsoft Corporation) -> %windir%\system32\pcrpf.dll,NotifyFirmwareUpdateStaged
Task: {8D1B94CF-5800-4516-B20F-7210041C031C} - System32\Tasks\Microsoft\Windows\PI\SecureBootEncodeUEFI => %WINDIR%\system32\SecureBootEncodeUEFI.exe  (No File)
Task: {E2926F9A-FE6D-43BD-AF57-C4B75C11E34B} - System32\Tasks\Microsoft\Windows\Servicing\OOBEFodSetup => %windir%\system32\OOBEFodSetup.exe  (No File)
Task: {B1FA364F-CCE3-40F0-A50B-610BEEC9DD9E} - System32\Tasks\Microsoft\Windows\UNP\RunUpdateNotificationMgr => %windir%\System32\UNP\UpdateNotificationMgr.exe  (No File)
Task: {9C414A3A-8612-4B3A-BEF7-46BB8DE22056} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (No File)
Task: {F886766B-E327-41EF-8545-91B15EF4B312} - System32\Tasks\Microsoft\Windows\WindowsAI\Recall\InitialConfiguration => {709FD5EF-7296-4154-BD3A-E9830FCFA60A} C:\WINDOWS\system32\ShellConfigTask.dll [225280 2025-03-22] (Microsoft Windows -> Microsoft Corporation)
Task: {C44FFC71-6C61-44CF-8AFF-11FD21E34519} - System32\Tasks\Microsoft\Windows\WindowsAI\Recall\PolicyConfiguration => {0BE6820D-B667-4CB6-931B-C153A77DA895} C:\WINDOWS\system32\ShellConfigTask.dll [225280 2025-03-22] (Microsoft Windows -> Microsoft Corporation)
Task: {4B9120E3-D260-45C4-828D-C8376BBF7009} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-2451002302-2018568227-764946658-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [695360 2025-04-17] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {360E5E81-95FD-4D8D-9317-CB14ADC0E0DC} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-2451002302-2018568227-764946658-500 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [695360 2025-04-17] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {8EB9578E-06FB-41DF-BCD7-65BFBC2B0226} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34880 2025-04-17] (Mozilla Corporation -> Mozilla Foundation)
Task: {1169EC63-DFBB-4262-AEA1-51BE13854480} - System32\Tasks\npcapwatchdog => C:\Program Files\Npcap\CheckStatus.bat [815 2022-11-22] () [File not signed]
Task: {0FB597E9-475D-4D29-B7F7-221FB595EAE9} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4223832 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {74E51093-53A9-48A6-83CD-9D965E53F4A3} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2451002302-2018568227-764946658-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4223832 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {BC77D628-0B1D-4397-BF45-DD5F89FC2282} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2451002302-2018568227-764946658-1005 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4223832 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {C8D60EF6-5C35-421D-BF19-F2F6D5910A12} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2451002302-2018568227-764946658-1006 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4223832 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {49FCEE5C-F987-4E26-9B8B-2A91E1CDB0C0} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2451002302-2018568227-764946658-1008 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4223832 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {030D414D-92D0-467A-9011-645238055D9D} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2451002302-2018568227-764946658-1009 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4223832 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {41F48831-855A-4687-AD9D-29BD37118600} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2451002302-2018568227-764946658-1010 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4223832 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {F2440F56-7D21-4CCD-B944-309B7EABC836} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2451002302-2018568227-764946658-1012 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4223832 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {E9FEF537-D3A7-4288-9D64-8EF2E99BCB8A} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2451002302-2018568227-764946658-1013 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4223832 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {8EFEFC16-09F8-4C6D-8E72-A3A662F789C3} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2451002302-2018568227-764946658-1014 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4223832 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {6300EB76-8F9A-4BB4-959A-9E1C6830F913} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2451002302-2018568227-764946658-500 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4223832 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {C8B4149C-9D5C-422E-9315-0AC66D6DC4E4} - System32\Tasks\OneDrive Startup Task-S-1-5-21-2451002302-2018568227-764946658-1001 => C:\Program Files\Microsoft OneDrive\25.065.0406.0002\OneDriveLauncher.exe [679232 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {97541C28-C17F-4ABB-B504-0C1E5B90FDD6} - System32\Tasks\OneDrive Startup Task-S-1-5-21-2451002302-2018568227-764946658-1005 => C:\Program Files\Microsoft OneDrive\25.065.0406.0002\OneDriveLauncher.exe [679232 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {FA34B1AE-7FB4-476D-AD8C-757777377B79} - System32\Tasks\OneDrive Startup Task-S-1-5-21-2451002302-2018568227-764946658-1006 => C:\Program Files\Microsoft OneDrive\25.065.0406.0002\OneDriveLauncher.exe [679232 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {3DE47A46-7523-4DC7-AFC4-5E9B49D7ECED} - System32\Tasks\OneDrive Startup Task-S-1-5-21-2451002302-2018568227-764946658-1008 => C:\Program Files\Microsoft OneDrive\25.065.0406.0002\OneDriveLauncher.exe [679232 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {1098251B-8E5B-4AF8-B802-67A268678AEA} - System32\Tasks\OneDrive Startup Task-S-1-5-21-2451002302-2018568227-764946658-1009 => C:\Program Files\Microsoft OneDrive\25.065.0406.0002\OneDriveLauncher.exe [679232 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {90E830D9-B27E-4469-9840-1099C6F07826} - System32\Tasks\OneDrive Startup Task-S-1-5-21-2451002302-2018568227-764946658-1010 => C:\Program Files\Microsoft OneDrive\25.065.0406.0002\OneDriveLauncher.exe [679232 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {EDFA3FB9-DAA4-48A2-90A7-5EFF2B8014A3} - System32\Tasks\OneDrive Startup Task-S-1-5-21-2451002302-2018568227-764946658-1012 => C:\Program Files\Microsoft OneDrive\25.065.0406.0002\OneDriveLauncher.exe [679232 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {873D1EDB-A4EB-405E-A2E1-5D1240BF9FDE} - System32\Tasks\OneDrive Startup Task-S-1-5-21-2451002302-2018568227-764946658-1013 => C:\Program Files\Microsoft OneDrive\25.065.0406.0002\OneDriveLauncher.exe [679232 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {7C6D9CA2-06A2-4492-BF5B-2E5F6E2FCA27} - System32\Tasks\OneDrive Startup Task-S-1-5-21-2451002302-2018568227-764946658-1014 => C:\Program Files\Microsoft OneDrive\25.065.0406.0002\OneDriveLauncher.exe [679232 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {D91693E1-638E-4C2D-A22A-63FABAC1CCCB} - System32\Tasks\OneDrive Startup Task-S-1-5-21-2451002302-2018568227-764946658-500 => C:\Program Files\Microsoft OneDrive\25.065.0406.0002\OneDriveLauncher.exe [679232 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {E7F69539-0C6B-4635-BB50-B6F878C7B81A} - System32\Tasks\PowerToys\Autorun for Adminstrator => C:\Users\Adminstrator\AppData\Local\PowerToys\PowerToys.exe [1246232 2025-02-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {42E67341-029A-40C0-B3DF-B066AFF8F521} - System32\Tasks\ZoomUpdateTaskUser-S-1-5-21-2451002302-2018568227-764946658-1009 => C:\Users\Adminstrator\AppData\Roaming\Zoom\bin\Zoom.exe [407864 2025-03-13] (Zoom Video Communications, Inc. -> Zoom Communications, Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: [S-1-5-21-2451002302-2018568227-764946658-1009] => Proxy is enabled.
ProxyServer: [S-1-5-21-2451002302-2018568227-764946658-1009] => hxxp://localhost:8080
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.3.1
Tcpip\..\Interfaces\{0a991f90-5176-4097-861c-05c58c0e2847}: [DhcpNameServer] 100.96.1.1
Tcpip\..\Interfaces\{1bacc5a7-6a06-4654-8197-922757ee7491}: [DhcpNameServer] 192.168.44.1
Tcpip\..\Interfaces\{600ed53f-d6c1-48a5-b4d5-00176a882ae3}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{a74a428b-2234-4cea-a639-2f3df6438337}: [DhcpNameServer] 192.168.64.44
Tcpip\..\Interfaces\{c8103d0f-dd48-4e05-b392-3b0aa49ca252}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{c8103d0f-dd48-4e05-b392-3b0aa49ca252}: [DhcpNameServer] 192.168.3.1
Tcpip\..\Interfaces\{c8103d0f-dd48-4e05-b392-3b0aa49ca252}\C496E6B63797370303235353: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{c8103d0f-dd48-4e05-b392-3b0aa49ca252}\C496E6B63797370303235353: [DhcpDomain] nycap.rr.com
Tcpip\..\Interfaces\{c8103d0f-dd48-4e05-b392-3b0aa49ca252}\E45445745414252373: [DhcpNameServer] 192.168.1.1
ManualProxies: 1hxxp://localhost:8080 <==== ATTENTION

Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Adminstrator\AppData\Local\Microsoft\Edge\User Data\Default [2025-04-25]
Edge Notifications: Default -> hxxps://web.telegram.org; hxxps://www.facebook.com
Edge Extension: (Google Docs Offline) - C:\Users\Adminstrator\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-03-31]
Edge Extension: (Edge relevant text changes) - C:\Users\Adminstrator\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2025-02-17]
Edge Extension: (JetBrains Toolbox Extension) - C:\Users\Adminstrator\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\offnedcbhjldheanlbojaefbfbllddna [2025-03-07]
Edge Profile: C:\Users\Adminstrator\AppData\Local\Microsoft\Edge\User Data\Profile 1 [2025-03-13]
Edge Extension: (FlowCrypt: Encrypt Gmail with PGP) - C:\Users\Adminstrator\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\bnjglocicdkmhmoohhfkfkbbkejdhdgc [2025-03-13]
Edge Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Adminstrator\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\elhekieabhbkpmcefcoobjddigjcaadp [2025-02-17]
Edge Extension: (Google Docs Offline) - C:\Users\Adminstrator\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-03-13]
Edge Extension: (Tampermonkey) - C:\Users\Adminstrator\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\iikmkjmpaadaobahmlepeloendndfphd [2025-02-17]
Edge Extension: (Edge relevant text changes) - C:\Users\Adminstrator\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2025-02-17]
Edge Profile: C:\Users\Adminstrator\AppData\Local\Microsoft\Edge\User Data\Profile 2 [2025-03-16]
Edge Extension: (Google Docs Offline) - C:\Users\Adminstrator\AppData\Local\Microsoft\Edge\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-03-02]
Edge Extension: (Edge relevant text changes) - C:\Users\Adminstrator\AppData\Local\Microsoft\Edge\User Data\Profile 2\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2025-03-02]
Edge Profile: C:\Users\Adminstrator\AppData\Local\Microsoft\Edge\User Data\Profile 3 [2025-03-13]
Edge Extension: (Google Docs Offline) - C:\Users\Adminstrator\AppData\Local\Microsoft\Edge\User Data\Profile 3\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-03-11]
Edge Extension: (Edge relevant text changes) - C:\Users\Adminstrator\AppData\Local\Microsoft\Edge\User Data\Profile 3\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2025-03-11]
Edge Profile: C:\Users\Adminstrator\AppData\Local\Microsoft\Edge\User Data\Profile 4 [2025-03-12]
Edge Extension: (MetaMask) - C:\Users\Adminstrator\AppData\Local\Microsoft\Edge\User Data\Profile 4\Extensions\ejbalbakoplchlghecdalmeeeajnimhm [2025-03-11]
Edge Extension: (Google Docs Offline) - C:\Users\Adminstrator\AppData\Local\Microsoft\Edge\User Data\Profile 4\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-03-11]
Edge Extension: (Edge relevant text changes) - C:\Users\Adminstrator\AppData\Local\Microsoft\Edge\User Data\Profile 4\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2025-03-11]

FireFox:
========
FF DefaultProfile: prhmzaus.default
FF ProfilePath: C:\Users\Adminstrator\AppData\Roaming\Mozilla\Firefox\Profiles\prhmzaus.default [2025-02-22]
FF ProfilePath: C:\Users\Adminstrator\AppData\Roaming\Mozilla\Firefox\Profiles\254ogs59.default-release [2025-04-25]
FF NetworkProxy: Mozilla\Firefox\Profiles\254ogs59.default-release -> http", "localhost"
FF Notifications: Mozilla\Firefox\Profiles\254ogs59.default-release -> hxxps://app.neo.space; hxxps://mail.google.com; hxxps://neo.space; hxxps://meet.google.com
FF Extension: (React Developer Tools) - C:\Users\Adminstrator\AppData\Roaming\Mozilla\Firefox\Profiles\254ogs59.default-release\Extensions\@react-devtools.xpi [2025-04-11]
FF Extension: (VT4Browsers) - C:\Users\Adminstrator\AppData\Roaming\Mozilla\Firefox\Profiles\254ogs59.default-release\Extensions\[email protected] [2025-04-05]
FF Extension: (Port Authority) - C:\Users\Adminstrator\AppData\Roaming\Mozilla\Firefox\Profiles\254ogs59.default-release\Extensions\{6c00218c-707a-4977-84cf-36df1cef310f}.xpi [2025-04-14]
FF Extension: (ClearURLs) - C:\Users\Adminstrator\AppData\Roaming\Mozilla\Firefox\Profiles\254ogs59.default-release\Extensions\{74145f27-f039-47ce-a470-a662b129930a}.xpi [2025-04-11]
FF Extension: (Aura) - C:\Users\Adminstrator\AppData\Roaming\Mozilla\Firefox\Profiles\254ogs59.default-release\Extensions\{7eac736e-bef2-462b-bdac-334f7f91e338}.xpi [2025-04-22]
FF Extension: (charlesproxy4hackerone) - C:\Users\Adminstrator\AppData\Roaming\Mozilla\Firefox\Profiles\254ogs59.default-release\Extensions\{8a993d06-294d-4f74-b25c-463ad1d4e8ad}.xpi [2025-04-14]
FF Plugin: @java.com/DTPlugin,version=11.451.0 -> C:\Program Files\Java\jre1.8.0_451\bin\dtplugin\npDeployJava1.dll [2025-04-05] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.451.0 -> C:\Program Files\Java\jre1.8.0_451\bin\plugin2\npjp2.dll [2025-04-05] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2025-04-04] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2025-04-04] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2025-04-04] (Microsoft Corporation -> Microsoft Corporation)

Chrome:
=======
CHR DefaultProfile: Profile 9
CHR Profile: C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Default [2025-03-30]
CHR Extension: (Perplexity.ai) - C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnaffjbjpgiagpondjlnneblepbdchol [2025-03-23]
CHR Extension: (Google Docs Offline) - C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-03-30]
CHR Extension: (Application Launcher For Drive (by Google)) - C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2025-03-17]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2025-02-20]
CHR Profile: C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Guest Profile [2025-03-14]
CHR Profile: C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 1 [2025-04-25]
CHR Notifications: Profile 1 -> hxxps://business.facebook.com; hxxps://ko-fi.com; hxxps://mail.google.com; hxxps://www.blackbox.ai; hxxps://www.facebook.com
CHR Extension: (Exodus Web3 Wallet) - C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aholpfdialjgjfhomihkjbmgjidlcdno [2025-03-29]
CHR Extension: (GitKraken) - C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\egmopflbpgdjmmkeabegohajillnebco [2025-02-21]
CHR Extension: (Google Docs Offline) - C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-04-23]
CHR Extension: (What is My IP Address) - C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\hifpalbhcjmldgojdgpkmboodljlabmf [2025-02-21]
CHR Extension: (X-Forwarded-For Header) - C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\hkghghbnihliadkabmlcmcgmffllglin [2025-04-14]
CHR Extension: (html.to.design) - C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ldnheaepmnmbjjjahokphckbpgciiaed [2025-04-06]
CHR Extension: (Application Launcher For Drive (by Google)) - C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2025-03-12]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2025-02-21]
CHR Extension: (Email Extractor - Free & Unlimited) - C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ombjflplbadmkbbhhdekeaofjibkongn [2025-03-12]
CHR Profile: C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 11 [2025-04-11]
CHR Extension: (Google Docs Offline) - C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 11\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-03-26]
CHR Extension: (Application Launcher For Drive (by Google)) - C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 11\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2025-03-26]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 11\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2025-03-26]
CHR Profile: C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 12 [2025-04-10]
CHR Extension: (Google Docs Offline) - C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 12\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-04-10]
CHR Extension: (Application Launcher For Drive (by Google)) - C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 12\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2025-04-10]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 12\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2025-04-10]
CHR Profile: C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 2 [2025-04-14]
CHR Notifications: Profile 2 -> hxxps://www.blackbox.ai
CHR Extension: (Google Docs Offline) - C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-03-25]
CHR Extension: (Application Launcher For Drive (by Google)) - C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2025-03-23]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2025-02-22]
CHR Extension: (JetBrains Toolbox Extension) - C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\offnedcbhjldheanlbojaefbfbllddna [2025-02-26]
CHR Profile: C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 3 [2025-04-10]
CHR Notifications: Profile 3 -> hxxps://www.blackbox.ai
CHR Extension: (FlowCrypt: Encrypt Gmail with PGP) - C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\bnjglocicdkmhmoohhfkfkbbkejdhdgc [2025-03-13]
CHR Extension: (Google Docs Offline) - C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-03-25]
CHR Extension: (Application Launcher For Drive (by Google)) - C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2025-03-12]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2025-03-09]
CHR Profile: C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 5 [2025-04-11]
CHR Notifications: Profile 5 -> hxxps://www.youtube.com
CHR Extension: (Google Docs Offline) - C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-03-30]
CHR Extension: (Application Launcher For Drive (by Google)) - C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2025-03-13]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2025-03-10]
CHR Profile: C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 6 [2025-04-14]
CHR Extension: (Google Docs Offline) - C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-03-25]
CHR Extension: (Application Launcher For Drive (by Google)) - C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2025-03-12]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2025-03-10]
CHR Profile: C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 8 [2025-04-24]
CHR Notifications: Profile 8 -> hxxps://www.blackbox.ai
CHR Extension: (Google Docs Offline) - C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-03-25]
CHR Extension: (Application Launcher For Drive (by Google)) - C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2025-03-12]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2025-03-12]
CHR Profile: C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 9 [2025-04-25]
CHR Notifications: Profile 9 -> hxxps://www.blackbox.ai
CHR Extension: (Google Docs Offline) - C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-03-29]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2025-03-13]
CHR Profile: C:\Users\Adminstrator\AppData\Local\Google\Chrome\User Data\System Profile [2025-03-21]
CHR HKU\S-1-5-21-2451002302-2018568227-764946658-1009\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S4 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [103776 2024-10-02] (Apple Inc. -> Apple Inc.)
R2 ArcProxy; C:\Program Files\AzureConnectedMachineAgent\arcproxy.exe [24906792 2025-03-28] (Microsoft Corporation -> Microsoft Corporation)
R2 Aura.Service_6.0.1; C:\Program Files\AuraApp\6.0.1\bin\Aura.Service.exe [95936 2025-04-04] (Aura Sub, LLC -> Aura)
R3 Aura.Vpn.Service; C:\Program Files\AuraApp\6.0.1\bin\UnifiedSDK.Service\UnifiedSDK.Service.exe [73298608 2025-02-25] (Pango LLC -> AnchorFree Inc.)
R2 AuraAV.Service; C:\Program Files\AuraAV\ProtectedService\Av.Sdk.ProtectedService.exe [37952 2024-12-11] (Aura Sub, LLC -> Av.Sdk.ProtectedService)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13863152 2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
R2 CloudflareWARP; C:\Program Files\Cloudflare\Cloudflare WARP\warp-svc.exe [47013952 2025-03-13] (Cloudflare, Inc. -> )
S3 com.docker.service; C:\Program Files\Docker\Docker\com.docker.service [38256 2025-04-14] (Docker Inc -> Docker Inc.)
S3 datadog-process-agent; C:\Program Files\Datadog\Datadog Agent\bin\agent\process-agent.exe [81458336 2025-02-10] (Datadog, Inc -> Datadog, Inc.)
S3 datadog-security-agent; C:\Program Files\Datadog\Datadog Agent\bin\agent\security-agent.exe [82656928 2025-02-10] (Datadog, Inc -> Datadog, Inc.)
S3 datadog-system-probe; C:\Program Files\Datadog\Datadog Agent\bin\agent\system-probe.exe [43203184 2025-02-10] (Datadog, Inc -> Datadog, Inc.)
S3 datadog-trace-agent; C:\Program Files\Datadog\Datadog Agent\bin\agent\trace-agent.exe [29844640 2025-02-10] (Datadog, Inc -> Datadog, Inc.)
S2 datadogagent; C:\Program Files\Datadog\Datadog Agent\bin\agent.exe [136244296 2025-02-10] (Datadog, Inc -> Datadog, Inc.)
R2 DFWSIDService; C:\ProgramData\Wondershare\wsServices\WsidService.exe [3941888 2024-09-26] (wondershare) [File not signed]
R2 DolbyDAXAPI; C:\WINDOWS\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_e75a3d1c39bebe3f\DAX3API.exe [2363432 2023-05-19] (Dolby Laboratories, Inc. -> Dolby Laboratories)
R2 DrWebAVService; C:\Program Files\DrWeb\dwservice.exe [16884520 2025-04-08] (DOCTOR WEB, LTD -> Doctor Web, Ltd.)
R2 DrWebCldSvc; C:\Program Files\DrWeb\dwcloudhost.exe [1566992 2025-04-08] (DOCTOR WEB, LTD -> Doctor Web, Ltd.)
R2 DrWebWscService; C:\Program Files\DrWeb\wsc-service.exe [6340928 2025-04-08] (Microsoft Windows Hardware Compatibility Publisher -> Doctor Web, Ltd.)
R2 ElevationService; C:\ProgramData\Wondershare\wsServices\ElevationService.exe [934648 2024-09-26] (Wondershare Technology Group Co.,Ltd -> )
R2 ExpressVPN App Service; C:\Program Files (x86)\ExpressVPN\services\ExpressVPN.AppService.exe [439080 2024-11-26] (Expressco Services LLC -> ExpressVPN)
R2 ExpressVPN System Service; C:\Program Files (x86)\ExpressVPN\services\ExpressVPN.SystemService.exe [439080 2024-11-26] (Expressco Services LLC -> ExpressVPN)
R2 ExpressVPN VPN Service; C:\Program Files (x86)\ExpressVPN\services\ExpressVPN.VpnService.exe [439080 2024-11-26] (Expressco Services LLC -> ExpressVPN)
R2 ExtensionService; C:\Program Files\AzureConnectedMachineAgent\ExtensionService2\GC\gc_extension_service.exe [351272 2025-03-28] (Microsoft Corporation -> )
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\25.065.0406.0002\FileSyncHelper.exe [3587904 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
R2 GCArcService; C:\Program Files\AzureConnectedMachineAgent\GCArcService2\GC\gc_arc_service.exe [351272 2025-03-28] (Microsoft Corporation -> )
R2 himds; C:\Program Files\AzureConnectedMachineAgent\himds.exe [18679880 2025-03-28] (Microsoft Corporation -> Microsoft Corporation)
S3 IncrediBuild BuildCache; C:\Program Files (x86)\Incredibuild\BuildCacheService.exe [14172016 2025-01-16] (INCREDIBUILD SOFTWARE LTD -> Incredibuild Software Ltd.)
R2 Incredibuild CoordinatorService; C:\Program Files (x86)\Incredibuild\CoordinatorService.exe [10669936 2025-01-16] (INCREDIBUILD SOFTWARE LTD -> Incredibuild Software Ltd.)
R2 Incredibuild Endpoint Service; C:\Program Files (x86)\Incredibuild\EPS\endpointService.exe [14680064 2025-01-12] (Incredibuild Software Ltd.) [File not signed]
R2 Incredibuild LicenseService; C:\Program Files (x86)\Incredibuild\LicenseService.exe [10526064 2025-01-16] (INCREDIBUILD SOFTWARE LTD -> Incredibuild Software Ltd.)
R2 Incredibuild Manager; C:\Program Files (x86)\Incredibuild\Manager\ManagerService.exe [3604088 2025-01-15] (INCREDIBUILD SOFTWARE LTD -> Incredibuild Software Ltd.)
R2 Incredibuild_Agent; C:\Program Files (x86)\Incredibuild\BuildService.exe [2172024 2025-01-16] (INCREDIBUILD SOFTWARE LTD -> Incredibuild Software Ltd.)
R2 IntelAudioService; C:\WINDOWS\System32\DriverStore\FileRepository\intcoed.inf_amd64_943ac983dea9b81b\AS\IAS\IntelAudioService.exe [402488 2022-08-11] (Intel Corporation -> Intel)
R2 IpOverUsbSvc; C:\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [15928 2024-11-16] (Microsoft Corporation -> Microsoft Corporation)
R2 JetBrainsEtwHost.16; C:\Program Files\JetBrains\ETW Host\16\JetBrains.Etw.Collector.Host.exe [1011112 2025-02-04] (JetBrains s.r.o. -> JetBrains s.r.o)
S3 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25020.1009-0\MpDefenderCoreService.exe [1968320 2025-04-01] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 midisrv; C:\WINDOWS\system32\midisrv.exe [380928 2025-03-22] (Microsoft Windows -> Microsoft Corporation)
R2 MongoDB; C:\Program Files\MongoDB\Server\8.0\bin\mongod.exe [75501568 2024-11-28] (MongoDB, Inc) [File not signed]
S4 msvsmon160; C:\Program Files\Microsoft Visual Studio 16.0\Common7\IDE\Remote Debugger\x64\rdbgservice.exe [232544 2024-09-23] (Microsoft Corporation -> Microsoft Corporation)
R2 NativePushService; C:\Users\ADMIN_a1b2a\AppData\Local\Wondershare\Wondershare NativePush\WsNativePushService.exe [595864 2024-03-20] (Wondershare Technology Group Co.,Ltd -> Wondershare)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvmsoegpu.inf_amd64_c59f41123c2f233c\Display.NvContainer\NVDisplay.Container.exe [1274888 2024-09-11] (NVIDIA Corporation -> NVIDIA Corporation)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\25.065.0406.0002\OneDriveUpdaterService.exe [3841360 2025-04-22] (Microsoft Corporation -> Microsoft Corporation)
R2 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv2.exe [24504 2025-01-15] (OpenVPN Inc. -> The OpenVPN project)
R2 OpenVPNServiceInteractive; C:\Program Files\OpenVPN\bin\openvpnserv.exe [66328 2025-01-15] (OpenVPN Inc. -> The OpenVPN Project)
R2 PEMHTTPD-x64; C:\Program Files\edb\pem\httpd\apache\bin\httpd.exe [31232 2024-10-09] (Apache Software Foundation) [File not signed]
S2 pgagent-pg17; C:\Program Files\PostgreSQL\17\bin\pgagent.exe [266240 2024-11-05] () [File not signed]
R2 postgresql-x64-16; C:\Program Files\PostgreSQL\16\bin\pg_ctl.exe [122368 2024-05-08] (PostgreSQL Global Development Group) [File not signed]
R2 postgresql-x64-17; C:\Program Files\PostgreSQL\17\bin\pg_ctl.exe [129536 2025-04-15] (PostgreSQL Global Development Group) [File not signed]
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [909584 2025-03-21] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2022-09-14] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
R2 ss_conn_service2; C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [920768 2022-09-14] (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.)
R2 SurfaceUsbHubFwUpdateV2Service; C:\WINDOWS\System32\SurfaceUsbHubFwUpdateV2Service.exe [1484088 2020-02-27] (Microsoft Corporation -> Microsoft Corporation)
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [22178608 2025-03-14] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
S3 VBoxSDS; C:\Program Files\Oracle\VirtualBox\VBoxSDS.exe [763024 2025-01-21] (Oracle America, Inc. -> Oracle and/or its affiliates)
R2 VMAuthdService; C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe [77168 2024-11-28] (Broadcom Inc -> VMware, Inc.)
R2 VMnetDHCP; C:\WINDOWS\SysWOW64\vmnetdhcp.exe [373112 2024-11-28] (Broadcom Inc -> VMware, Inc.)
R2 VMUSBArbService; C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe [1009112 2024-07-19] (Broadcom Inc -> VMware, Inc.)
R2 VMware NAT Service; C:\WINDOWS\SysWOW64\vmnat.exe [420208 2024-11-28] (Broadcom Inc -> VMware, Inc.)
S3 VmwareAutostartService; C:\Program Files (x86)\VMware\VMware Workstation\vmware-autostart.exe [64888 2024-11-28] (Broadcom Inc -> )
S3 VSInstallerElevationService; C:\Program Files (x86)\Microsoft Visual Studio\Installer\VSInstallerElevationService.exe [42584 2025-03-22] (Microsoft Corporation -> Microsoft)
S3 VSStandardCollectorService150; C:\Program Files\Microsoft Visual Studio 16.0\Team Tools\DiagnosticsHub\Collector\StandardCollector.Service.exe [142464 2024-09-03] (Microsoft Corporation -> Microsoft Corporation)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25020.1009-0\NisSrv.exe [4464024 2025-04-01] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25020.1009-0\MsMpEng.exe [270040 2025-04-01] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 Wondershare InstallAssist; C:\ProgramData\Wondershare\Service\InstallAssistService.exe [497384 2025-03-11] (Wondershare Technology Group Co.,Ltd -> Wondershare)
R2 Publication Service; C:\Program Files\edb\EnterpriseDB-xDBReplicationServer\scripts\ServiceWrapper.exe runservice -n "Publication Service" -c "C:\Program Files\edb\EnterpriseDB-xDBReplicationServer\bin\runPubServer.bat" -w "C:\Program Files\edb\EnterpriseDB-xDBReplicationServer\bin"
R2 Subscription Service; C:\Program Files\edb\EnterpriseDB-xDBReplicationServer\scripts\ServiceWrapper.exe runservice -n "Subscription Service" -c "C:\Program Files\edb\EnterpriseDB-xDBReplicationServer\bin\runSubServer.bat" -w "C:\Program Files\edb\EnterpriseDB-xDBReplicationServer\bin"

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AcpiAudioCompositor; C:\WINDOWS\System32\DriverStore\FileRepository\acpiaudiocompositor.inf_amd64_5487a6b658d70575\AcpiAudioCompositor.sys [98304 2025-03-22] (Microsoft Windows -> Microsoft Corporation)
S1 aehd; C:\WINDOWS\system32\DRIVERS\aehd.sys [403080 2025-01-30] (Google LLC -> Google LLC)
S3 AmdPPM; C:\WINDOWS\System32\DriverStore\FileRepository\cpu.inf_amd64_e500da6d0654e8af\amdppm.sys [270560 2025-03-22] (Microsoft Windows -> Microsoft Corporation)
R0 AuActMonDrv; C:\WINDOWS\System32\drivers\AuActMonDrv.sys [55024 2025-04-06] (Microsoft Windows Hardware Compatibility Publisher -> Aura)
R3 aura_netfilter2; C:\WINDOWS\System32\drivers\aura_netfilter2.sys [94600 2025-04-06] (Pango Inc. -> Pango Inc)
S0 AuSecPPLElm; C:\WINDOWS\System32\drivers\AuSecPPLElm.sys [21544 2025-04-06] (Microsoft Windows Early Launch Anti-malware Publisher -> Windows ® Win 7 DDK provider)
R3 CAD; C:\WINDOWS\System32\DriverStore\FileRepository\chargearbitration.inf_amd64_cc13203d31f3aecc\CAD.sys [98528 2025-03-22] (Microsoft Windows -> Microsoft Corporation)
S3 CmBatt; C:\WINDOWS\System32\DriverStore\FileRepository\cmbatt.inf_amd64_7b5edde88abc31f3\CmBatt.sys [94208 2025-03-22] (Microsoft Windows -> Microsoft Corporation)
S0 cxltype3; C:\WINDOWS\System32\DriverStore\FileRepository\cxltype3.inf_amd64_5616e007a7164044\cxltype3.sys [98528 2025-03-22] (Microsoft Windows -> Microsoft Corporation)
S4 ddnpm; C:\Program Files\Datadog\Datadog Agent\bin\agent\driver\ddnpm.sys [279440 2024-07-01] (Datadog, Inc -> Datadog, Inc.)
S4 ddprocmon; C:\Program Files\Datadog\Datadog Agent\bin\agent\driver\ddprocmon.sys [245160 2024-09-10] (Datadog, Inc -> Datadog, Inc.)
S0 DwELAM; C:\WINDOWS\System32\drivers\dwelam.sys [35304 2025-04-08] (Microsoft Windows Early Launch Anti-malware Publisher -> Doctor Web, Ltd.)
R0 DwProt; C:\WINDOWS\System32\drivers\dwprot.sys [1230312 2025-04-08] (Microsoft Windows Hardware Compatibility Publisher -> Doctor Web, Ltd.)
S3 expressvpntun; C:\WINDOWS\System32\drivers\expressvpn-tun.sys [41976 2024-11-26] (Expressco Services LLC -> ExpressVPN)
R0 fse; C:\WINDOWS\System32\drivers\fse.sys [213216 2025-03-22] (Microsoft Windows -> Microsoft Corporation)
R2 googledrivefs31626; C:\Program Files\Google\Drive File Stream\Drivers\31626\googledrivefs31626.sys [384096 2025-03-12] (Microsoft Windows Hardware Compatibility Publisher -> Google, Inc.)
R2 hcmon; C:\WINDOWS\system32\DRIVERS\hcmon.sys [72144 2024-07-19] (Microsoft Windows Hardware Compatibility Publisher -> VMware, Inc.)
S3 HidBatt; C:\WINDOWS\System32\DriverStore\FileRepository\hidbatt.inf_amd64_5931178ae06d837f\HidBatt.sys [65760 2025-03-22] (Microsoft Windows -> Microsoft Corporation)
R0 intelpep; C:\WINDOWS\System32\DriverStore\FileRepository\intelpep.inf_amd64_6b0325b4cb0badf6\intelpep.sys [639240 2025-03-22] (Microsoft Windows Hardware Abstraction Layer Publisher -> Microsoft Corporation)
S3 intelpmax; C:\WINDOWS\System32\DriverStore\FileRepository\intelpmax.inf_amd64_58d8f22ea78eeef2\intelpmax.sys [65536 2025-03-22] (Microsoft Windows -> Microsoft Corporation)
R0 IntelPMT; C:\WINDOWS\System32\DriverStore\FileRepository\intelpmt.inf_amd64_6239d71e7e1d544f\IntelPMT.sys [82184 2025-03-22] (Microsoft Windows Hardware Abstraction Layer Publisher -> Microsoft Corporation)
R3 intelppm; C:\WINDOWS\System32\DriverStore\FileRepository\cpu.inf_amd64_e500da6d0654e8af\intelppm.sys [299232 2025-03-22] (Microsoft Windows -> Microsoft Corporation)
R3 KernelFSFormatter; C:\Windows\System32\Drivers\KernelFSFormatter.sys [1249504 2025-03-22] (Microsoft Windows -> Microsoft Corporation)
S3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [278960 2025-04-01] (Microsoft Windows -> Microsoft Corporation)
S2 l1vhlwf; C:\WINDOWS\System32\drivers\l1vhlwf.sys [135392 2025-03-22] (Microsoft Windows -> Microsoft Corporation)
S3 Netaapl; C:\WINDOWS\System32\drivers\netaapl64.sys [32352 2017-11-28] (Microsoft Windows Hardware Compatibility Publisher -> Apple Inc.)
R1 npcap; C:\WINDOWS\system32\DRIVERS\npcap.sys [69984 2024-01-18] (WDKTestCert Nmap,133147429230506937 -> Insecure.Com LLC.)
S3 ovpn-dco; C:\WINDOWS\System32\drivers\ovpn-dco.sys [92664 2024-05-22] (WDKTestCert lev,133391533294737317 -> OpenVPN, Inc)
S3 PlutonHeci; C:\WINDOWS\System32\DriverStore\FileRepository\pluton-heci.inf_amd64_717d3aa5b14d5470\pluton-heci.sys [65760 2025-03-22] (Microsoft Windows -> Microsoft Corporation)
S3 PlutonHsp2; C:\WINDOWS\System32\DriverStore\FileRepository\plutonhsp2.inf_amd64_bc7e1704231f9ad4\PlutonHsp2.sys [57568 2025-03-22] (Microsoft Windows -> Microsoft Corporation)
S3 Processor; C:\WINDOWS\System32\DriverStore\FileRepository\cpu.inf_amd64_e500da6d0654e8af\processr.sys [274656 2025-03-22] (Microsoft Windows -> Microsoft Corporation)
S3 SdcaHid; C:\WINDOWS\System32\DriverStore\FileRepository\sdcahid.inf_amd64_6f0f59dd588574f8\SdcaHid.sys [159744 2025-03-22] (Microsoft Windows -> Microsoft Corporation)
S3 SdcaMfd; C:\WINDOWS\System32\DriverStore\FileRepository\sdcamfd.inf_amd64_2ea1f9a6fc6df8d2\SdcaMfd.sys [167936 2025-03-22] (Microsoft Windows -> Microsoft Corporation)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [50720 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 SurfaceHotPlug; C:\WINDOWS\System32\DriverStore\FileRepository\surfacehotplug.inf_amd64_6663c41ad8659601\SurfaceHotPlug.sys [526352 2023-10-30] (Microsoft Corporation -> Microsoft Corporation)
R3 SurfaceHpmi; C:\WINDOWS\System32\drivers\SurfaceHpmi.sys [226552 2020-02-20] (Microsoft Corporation -> Microsoft Corporation)
R3 SurfaceIhvCpuSmfClient; C:\WINDOWS\System32\DriverStore\FileRepository\surfaceihvcpusmfclient.inf_amd64_e363aec461435bf4\SurfaceIhvCpuSmfClient.sys [473816 2023-12-18] (Microsoft Corporation -> Microsoft Corporation)
R3 SurfaceIhvGpuPowerControllerDriver; C:\WINDOWS\System32\drivers\SurfaceIhvGpuPowerControllerDriver.sys [277328 2020-02-14] (Microsoft Corporation -> Microsoft Corporation)
R3 SurfacePowerTrackerCore; C:\WINDOWS\System32\DriverStore\FileRepository\surfacepowertrackercore.inf_amd64_0c56c2f655a7e9d9\SurfacePowerTrackerCore.sys [472704 2023-10-30] (Microsoft Corporation -> Microsoft Corporation)
R3 SurfaceSerialHubDriver; C:\WINDOWS\System32\DriverStore\FileRepository\surfaceserialhubdriver.inf_amd64_f531483c52451822\SurfaceSerialHubDriver.sys [366056 2021-03-06] (Microsoft Corporation -> Microsoft Corporation)
R3 SurfaceSmfBaseThermalClient; C:\WINDOWS\System32\drivers\SurfaceSmfBaseThermalClient.sys [283976 2020-02-14] (Windows OEM Test Cert 2017 (TEST ONLY) -> Microsoft Corporation)
R3 SurfaceSmfClient; C:\WINDOWS\System32\DriverStore\FileRepository\surfacesmfclient.inf_amd64_1fe844d8e782afe5\SurfaceSmfClient.sys [341488 2021-08-17] (Microsoft Corporation -> Microsoft Corporation)
R3 SurfaceSmfDisplayClient; C:\WINDOWS\System32\DriverStore\FileRepository\surfacesmfdisplayclient.inf_amd64_a3bd5dcd17bf04fa\SurfaceSmfDisplayClient.sys [261464 2021-09-25] (Microsoft Corporation -> Microsoft Corporation)
R3 SurfaceStorageFwUpdate; C:\WINDOWS\System32\DriverStore\FileRepository\surfacestoragefwupdate.inf_amd64_eb571fbd99760c85\SurfaceStorageFwUpdate.sys [10340256 2022-03-16] (Microsoft Corporation -> Microsoft Corporation)
R3 SurfaceSystemManagementFrameworkDriver; C:\WINDOWS\System32\DriverStore\FileRepository\surfacesystemmanagementframeworkdriver.inf_amd64_0ef1c9363e5e5493\SurfaceSystemManagementFrameworkDriver.sys [579480 2021-07-15] (Microsoft Corporation -> Microsoft Corporation)
R3 SurfaceSystemTelemetry; C:\WINDOWS\System32\DriverStore\FileRepository\surfacesystemtelemetrydriver.inf_amd64_e3bef63cf1f4acf1\SurfaceSystemTelemetryDriver.sys [578168 2024-05-17] (Microsoft Corporation -> Microsoft Corporation)
R3 SurfaceThermalPolicy; C:\WINDOWS\System32\drivers\SurfaceThermalPolicy.sys [274472 2020-02-14] (Microsoft Corporation -> Microsoft Corporation)
R3 SurfaceTimeAlarmAcpiFilter; C:\WINDOWS\System32\DriverStore\FileRepository\surfacetimealarmacpifilter.inf_amd64_ee1670ce010f327d\SurfaceTimeAlarmAcpiFilter.sys [230008 2020-02-20] (Windows OEM Test Cert 2017 (TEST ONLY) -> Microsoft Corporation)
R3 SurfaceUsbHubFwUpdateV2; C:\WINDOWS\System32\drivers\SurfaceUsbHubFwUpdateV2.sys [52024 2020-02-27] (Microsoft Corporation -> Microsoft Corporation)
S3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [41000 2025-02-12] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
S3 ThermalFilter; C:\WINDOWS\System32\DriverStore\FileRepository\c_thermal.inf_amd64_7c34e5c3a8eee121\ThermalFilter.sys [65800 2025-03-22] (Microsoft Windows Hardware Abstraction Layer Publisher -> Microsoft Corporation)
S3 usb-platformdetection; C:\WINDOWS\System32\DriverStore\FileRepository\usb-platformdetection.inf_amd64_2f0a763a5638376c\usb-platformdetection.sys [49152 2025-03-22] (Microsoft Windows -> )
R3 USBPcap; C:\WINDOWS\system32\DRIVERS\USBPcap.sys [52872 2020-05-22] (Tomasz Moń -> USBPcap)
S3 VBoxNetAdp; C:\WINDOWS\system32\DRIVERS\VBoxNetAdp6.sys [246224 2025-01-21] (Oracle America, Inc. -> Oracle and/or its affiliates)
R1 VBoxNetLwf; C:\WINDOWS\system32\DRIVERS\VBoxNetLwf.sys [256536 2025-01-21] (Oracle America, Inc. -> Oracle and/or its affiliates)
R1 VBoxSup; C:\WINDOWS\System32\drivers\VBoxSup.sys [1052984 2025-01-21] (Oracle America, Inc. -> Oracle and/or its affiliates)
R1 VBoxUSBMon; C:\WINDOWS\System32\drivers\VBoxUSBMon.sys [195576 2025-01-21] (Oracle America, Inc. -> Oracle and/or its affiliates)
S3 vkrnlintvsc; C:\WINDOWS\System32\DriverStore\FileRepository\wvkrnlintvsc.inf_amd64_cf4ecab31c90afae\vkrnlintvsc.sys [73952 2025-03-22] (Microsoft Windows -> Microsoft Corporation)
R3 vkrnlintvsp; C:\WINDOWS\System32\DriverStore\FileRepository\wvkrnlintvsp.inf_amd64_70950cdca57d01ed\vkrnlintvsp.sys [73952 2025-03-22] (Microsoft Windows -> Microsoft Corporation)
R3 vmbuspipe; C:\WINDOWS\system32\drivers\vmbuspipe.sys [86016 2025-03-22] (Microsoft Windows -> Microsoft Corporation)
S3 vmbusproxy; C:\WINDOWS\system32\drivers\vmbusproxy.sys [114688 2025-03-22] (Microsoft Windows -> Microsoft Corporation)
R0 vmci; C:\WINDOWS\System32\drivers\vmci.sys [106424 2024-07-18] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom Inc.)
S3 VMnetAdapter; C:\WINDOWS\System32\drivers\vmnetadapter.sys [31288 2024-11-28] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom Inc.)
R4 VMnetBridge; C:\WINDOWS\system32\DRIVERS\vmnetbridge.sys [53704 2024-11-28] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom Inc.)
R2 VMnetuserif; C:\WINDOWS\system32\DRIVERS\vmnetuserif.sys [30664 2024-11-28] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom Inc.)
R2 vmx86; C:\WINDOWS\system32\DRIVERS\vmx86.sys [100920 2024-11-28] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom Inc.)
R0 vsock; C:\WINDOWS\System32\DRIVERS\vsock.sys [91176 2024-07-18] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom Inc.)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [20016 2025-04-01] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [601520 2025-04-01] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [100744 2025-04-01] (Microsoft Windows -> Microsoft Corporation)
S3 wini3ctarget; C:\WINDOWS\System32\DriverStore\FileRepository\wini3ctarget.inf_amd64_86b29f721b5a12cb\wini3ctarget.sys [69856 2025-03-22] (Microsoft Windows -> Microsoft Corporation)
S3 wintun; C:\WINDOWS\System32\drivers\wintun.sys [29592 2025-04-17] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC)
S3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_90c319025d4c5ace\WSDPrint.sys [57344 2025-03-22] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-04-25 14:12 - 2025-04-25 14:14 - 000085173 _____ C:\Users\Adminstrator\Downloads\FRST.txt
2025-04-25 14:12 - 2025-04-25 14:13 - 000000000 ____D C:\FRST
2025-04-25 14:12 - 2025-04-25 14:12 - 002405376 _____ (Farbar) C:\Users\Adminstrator\Downloads\FRST64.exe
2025-04-25 14:05 - 2025-04-25 14:05 - 002097664 _____ (Farbar) C:\Users\Adminstrator\Downloads\FRST.exe
2025-04-25 12:50 - 2025-04-25 12:50 - 000000000 ____D C:\Users\Adminstrator\Downloads\contract-master
2025-04-25 12:49 - 2025-04-25 12:49 - 015061104 _____ C:\Users\Adminstrator\Downloads\contract-master.zip
2025-04-25 12:42 - 2025-04-25 12:42 - 000009662 _____ C:\Users\Adminstrator\Downloads\venues.php.0001.4856.bak
2025-04-25 02:13 - 2025-04-25 02:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Node.js
2025-04-25 02:13 - 2025-04-25 02:13 - 000000000 ____D C:\Program Files\nodejs
2025-04-25 02:12 - 2025-04-25 02:12 - 031625216 _____ C:\Users\Adminstrator\Downloads\node-v23.11.0-x64.msi
2025-04-25 01:37 - 2025-04-25 01:39 - 000000000 ____D C:\Users\Adminstrator\i-devr-builder
2025-04-25 00:11 - 2025-04-25 00:11 - 000000027 _____ C:\Users\Adminstrator\.wslconfig.txt
2025-04-25 00:11 - 2025-04-25 00:11 - 000000000 _____ C:\Users\Adminstrator\.wslconfig
2025-04-24 08:32 - 2025-04-24 08:32 - 000188245 _____ C:\Users\Adminstrator\Downloads\watermark-removed(1).jpeg
2025-04-24 07:10 - 2025-04-24 07:33 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Picwand
2025-04-24 07:10 - 2025-04-24 07:13 - 000001429 _____ C:\Users\Public\Desktop\Aiseesoft AI Photo Editor.lnk
2025-04-24 07:10 - 2025-04-24 07:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Aiseesoft
2025-04-24 07:10 - 2025-04-24 07:10 - 000000000 ____D C:\Program Files\Aiseesoft Studio
2025-04-24 07:09 - 2025-04-24 07:09 - 003139888 _____ ( ) C:\Users\Adminstrator\Downloads\ai-photo-editor.exe
2025-04-23 21:57 - 2025-04-23 21:57 - 000000000 ____D C:\ProgramData\boost_interprocess
2025-04-23 18:48 - 2025-04-23 18:49 - 351419104 _____ (PostgreSQL Global Development Group) C:\Users\Adminstrator\Downloads\postgresql-17.4-2-windows-x64.exe
2025-04-23 18:45 - 2025-04-23 18:45 - 000000218 _____ C:\Users\Adminstrator\.recently-used.xbel
2025-04-23 16:21 - 2025-04-23 16:21 - 000000000 ____D C:\Users\Adminstrator\.gitpod-flex
2025-04-23 15:55 - 2025-04-23 15:55 - 000000000 ____D C:\Users\Adminstrator\Downloads\blackboxai-intellij-extension-2.0.3
2025-04-23 15:54 - 2025-04-23 15:54 - 107121461 _____ C:\Users\Adminstrator\Downloads\blackboxai-intellij-extension-2.0.3.zip
2025-04-23 11:08 - 2025-04-23 11:09 - 000008193 _____ C:\Users\Adminstrator\Documents\cards_data-export-2025-04-12-05-04(AutoRecovered).csv
2025-04-23 11:06 - 2025-04-23 11:06 - 000012316 _____ C:\Users\Adminstrator\Downloads\Untitled-1.ipynb
2025-04-21 15:35 - 2025-04-23 11:08 - 000000897 _____ C:\Users\Adminstrator\Cell output 1 [DW].csv
2025-04-21 15:13 - 2025-04-21 15:13 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\conda
2025-04-21 14:11 - 2025-04-21 14:11 - 000005510 _____ C:\Users\Adminstrator\Downloads\wagon-scm-1.0-alpha-3.jar
2025-04-21 10:30 - 2025-04-21 10:30 - 000089789 _____ C:\Users\Adminstrator\Documents\Cart.aspx.pdf
2025-04-21 09:22 - 2025-04-21 09:22 - 000050710 _____ C:\Users\Adminstrator\Downloads\maven-wrapper-0.5.5.jar
2025-04-21 09:10 - 2025-04-21 09:10 - 009913780 _____ C:\Users\Adminstrator\Downloads\gk_3.0.3_windows_386.zip
2025-04-21 08:54 - 2025-04-21 08:55 - 000000000 ____D C:\Users\Adminstrator\Documents\AutoHotkey
2025-04-21 08:51 - 2025-04-21 08:51 - 000002228 _____ C:\Users\Adminstrator\Desktop\Nmap - Zenmap GUI.lnk
2025-04-21 08:51 - 2025-04-21 08:51 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Nmap
2025-04-21 08:50 - 2025-04-21 08:51 - 000000000 ____D C:\Program Files (x86)\Nmap
2025-04-21 08:50 - 2025-04-21 08:50 - 000002242 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoHotkey Window Spy.lnk
2025-04-21 08:50 - 2025-04-21 08:50 - 000001352 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoHotkey Dash.lnk
2025-04-21 08:50 - 2025-04-21 08:50 - 000000000 ____D C:\WINDOWS\ShellNew
2025-04-21 08:50 - 2025-04-21 08:50 - 000000000 ____D C:\Program Files\AutoHotkey
2025-04-19 23:13 - 2025-04-19 23:13 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\pylint
2025-04-19 23:09 - 2025-04-19 23:09 - 000000000 ____D C:\Users\ADMIN_Adminstrator\URL-Seeker
2025-04-19 23:06 - 2025-04-20 13:44 - 000000000 ____D C:\Users\Adminstrator\URL-Seeker
2025-04-19 22:31 - 2025-04-19 22:31 - 000001041 _____ C:\Users\Adminstrator\Desktop\chocolatey.license.xml
2025-04-19 22:29 - 2025-04-19 22:30 - 000001041 _____ C:\Users\Adminstrator\Downloads\chocolatey.license.xml.txt
2025-04-19 20:34 - 2025-04-19 20:34 - 000000000 ____D C:\Users\Adminstrator\Desktop\scriptss
2025-04-19 18:16 - 2025-04-19 20:28 - 000000000 ____D C:\Users\Adminstrator\scripts
2025-04-19 17:44 - 2025-04-19 20:17 - 000000000 ____D C:\Users\Adminstrator\.julia
2025-04-19 16:25 - 2025-04-19 16:25 - 000057577 _____ C:\Users\Adminstrator\Downloads\auction-[21.03.2025] WORLD MIX Cards from scam purchases VHQ-export-2025-04-19-20-25.csv
2025-04-19 03:29 - 2025-04-25 02:33 - 000000000 ____D C:\WINDOWS\CbsTemp
2025-04-18 15:36 - 2025-04-18 15:36 - 000237866 _____ C:\Users\Adminstrator\Downloads\DIFFERENCE BETWEEN FAIRFIELD INN AND COMFORT INN.pdf
2025-04-18 13:00 - 2025-04-18 13:00 - 000000251 _____ C:\Users\Adminstrator\Documents\cards2.txt
2025-04-18 12:21 - 2025-04-18 12:21 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Sun
2025-04-18 12:21 - 2025-04-18 12:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2025-04-17 19:03 - 2025-04-17 19:03 - 000005529 _____ C:\Users\Adminstrator\Downloads\device_1743805665765_brouillard@[email protected]_[Boston_(MA)] (1).ovpn
2025-04-17 18:57 - 2025-04-23 15:13 - 000000000 ____D C:\Program Files\Mozilla Firefox
2025-04-16 11:24 - 2025-04-16 11:24 - 000000440 __RSH C:\ProgramData\ntuser.pol
2025-04-15 15:36 - 2025-04-15 15:36 - 000043207 _____ C:\Users\Adminstrator\Downloads\order-form-3-2.pdf
2025-04-15 07:25 - 2025-04-15 07:25 - 000001086 _____ C:\Users\Adminstrator\Downloads\xna7jd.cert
2025-04-15 06:18 - 2025-04-15 06:18 - 000000000 ____D C:\Users\Adminstrator\amazon-s3-presigned-urls-aws-sam
2025-04-15 05:48 - 2025-04-15 05:48 - 000000000 _____ C:\Users\Adminstrator\mercurial.ini
2025-04-15 05:46 - 2025-04-15 05:46 - 000000000 ____D C:\WINDOWS\system32\project
2025-04-15 05:21 - 2025-04-15 05:21 - 000000000 ____D C:\Users\Adminstrator\Desktop\GodMode.{ED7BA470-8E54-465E-825C-99712043E01C}
2025-04-15 05:06 - 2025-04-15 05:06 - 006255586 _____ C:\Users\Adminstrator\Downloads\terraform-provider-cloudconnexa_1.0.1_windows_386.zip
2025-04-15 00:27 - 2025-04-15 00:27 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\docker-desktop
2025-04-15 00:27 - 2025-04-15 00:27 - 000000000 ____D C:\Users\Adminstrator\.azure
2025-04-14 17:49 - 2025-04-14 17:49 - 000002142 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Docker Desktop.lnk
2025-04-14 17:43 - 2025-04-14 17:49 - 000000000 ____D C:\Program Files\Docker
2025-04-14 17:35 - 2025-04-14 17:35 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\.anaconda
2025-04-14 17:33 - 2025-04-14 17:33 - 000003632 _____ C:\WINDOWS\system32\Tasks\azcmagent
2025-04-14 17:13 - 2025-04-14 17:35 - 000000000 ____D C:\Users\Adminstrator\.conda
2025-04-14 17:13 - 2025-04-14 17:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Anaconda (anaconda3)
2025-04-14 17:10 - 2025-04-22 14:20 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2451002302-2018568227-764946658-1014
2025-04-14 17:10 - 2025-04-22 14:20 - 000003546 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-2451002302-2018568227-764946658-1014
2025-04-14 17:05 - 2025-04-14 17:14 - 000000000 ____D C:\Users\Adminstrator\anaconda3
2025-04-14 16:56 - 2025-04-14 16:56 - 005235218 _____ C:\Users\Adminstrator\Downloads\GHHC-HACKBAR.apk
2025-04-14 15:22 - 2025-04-14 15:22 - 003893607 _____ C:\Users\Adminstrator\Downloads\retouched.jpeg
2025-04-14 15:20 - 2025-04-14 15:20 - 000165602 _____ C:\Users\Adminstrator\Downloads\watermark-removed.jpeg
2025-04-14 14:12 - 2025-04-14 14:15 - 996695888 _____ (Anaconda, Inc.) C:\Users\Adminstrator\Downloads\Anaconda3-2024.10-1-Windows-x86_64.exe
2025-04-14 14:07 - 2025-04-14 14:07 - 000000000 ____D C:\Users\Adminstrator\.ipython
2025-04-14 14:06 - 2025-04-14 14:06 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\jupyter
2025-04-14 12:52 - 2025-04-14 12:53 - 558251376 _____ (Docker Inc.) C:\Users\Adminstrator\Downloads\Docker Desktop Installer(1).exe
2025-04-14 11:35 - 2025-04-14 11:35 - 000000000 ____D C:\Users\Administrator\AppData\Local\CrashDumps
2025-04-13 19:26 - 2025-04-14 17:02 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Code - Insiders
2025-04-13 19:26 - 2025-04-13 19:26 - 000000000 ____D C:\Users\Adminstrator\.vscode-insiders
2025-04-13 19:11 - 2025-04-13 19:11 - 000000000 __SHD C:\Users\WsiAccount\IntelGraphicsProfiles
2025-04-13 19:11 - 2025-04-13 19:11 - 000000000 ___SD C:\Users\WsiAccount\AppData\Roaming\Microsoft\SystemCertificates
2025-04-13 19:11 - 2025-04-13 19:11 - 000000000 ___SD C:\Users\WsiAccount\AppData\Roaming\Microsoft\Protect
2025-04-13 19:11 - 2025-04-13 19:11 - 000000000 ___SD C:\Users\WsiAccount\AppData\Roaming\Microsoft\Crypto
2025-04-13 19:11 - 2025-04-13 19:11 - 000000000 ___SD C:\Users\WsiAccount\AppData\Roaming\Microsoft\Credentials
2025-04-13 19:11 - 2025-04-13 19:11 - 000000000 ____D C:\Users\WsiAccount\AppData\Roaming\Microsoft\Windows
2025-04-13 19:11 - 2025-04-13 19:11 - 000000000 ____D C:\Users\WsiAccount\AppData\Roaming\Microsoft\Vault
2025-04-13 19:11 - 2025-04-13 19:11 - 000000000 ____D C:\Users\WsiAccount\AppData\Roaming\Microsoft\Spelling
2025-04-13 19:11 - 2025-04-13 19:11 - 000000000 ____D C:\Users\WsiAccount\AppData\LocalLow\Intel
2025-04-13 19:11 - 2025-04-13 19:11 - 000000000 ____D C:\Users\WsiAccount\AppData\Local\ToastNotificationManagerCompat
2025-04-13 19:11 - 2025-04-13 19:11 - 000000000 ____D C:\Users\WsiAccount\AppData\Local\TeamViewer
2025-04-13 19:11 - 2025-04-13 19:11 - 000000000 ____D C:\Users\WsiAccount\AppData\Local\Packages
2025-04-13 19:11 - 2025-04-13 19:11 - 000000000 ____D C:\Users\WsiAccount\AppData\Local\ConnectedDevicesPlatform
2025-04-13 19:11 - 2025-04-13 19:11 - 000000000 ____D C:\Users\WsiAccount\AppData\Local\AuraApp
2025-04-13 19:11 - 2025-04-13 19:11 - 000000000 ____D C:\Users\WsiAccount
2025-04-13 19:11 - 2025-04-02 00:02 - 000000000 ____D C:\Users\WsiAccount\AppData\Roaming\Microsoft\Network
2025-04-13 19:11 - 2025-03-03 13:23 - 000000000 ____D C:\Users\WsiAccount\AppData\Local\Microsoft Help
2025-04-13 19:11 - 2025-01-20 12:23 - 000000000 ___RD C:\Users\WsiAccount\OneDrive
2025-04-13 17:24 - 2025-04-13 17:24 - 000000000 ____D C:\WINDOWS\symbols
2025-04-13 17:22 - 2025-04-13 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\2052
2025-04-13 17:22 - 2025-04-13 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\1042
2025-04-13 17:22 - 2025-04-13 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\1041
2025-04-13 17:22 - 2025-04-13 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\1031
2025-04-13 17:22 - 2025-04-13 17:22 - 000000000 ____D C:\WINDOWS\SysWOW64\1028
2025-04-13 17:22 - 2025-04-13 17:22 - 000000000 ____D C:\WINDOWS\system32\2052
2025-04-13 17:22 - 2025-04-13 17:22 - 000000000 ____D C:\WINDOWS\system32\1042
2025-04-13 17:22 - 2025-04-13 17:22 - 000000000 ____D C:\WINDOWS\system32\1041
2025-04-13 17:22 - 2025-04-13 17:22 - 000000000 ____D C:\WINDOWS\system32\1031
2025-04-13 17:22 - 2025-04-13 17:22 - 000000000 ____D C:\WINDOWS\system32\1028
2025-04-13 17:20 - 2025-04-13 17:22 - 000000000 ____D C:\Users\Administrator\AppData\Roaming\Code - Insiders
2025-04-13 17:20 - 2025-04-13 17:21 - 000000000 ____D C:\Users\Administrator\.dotnet
2025-04-13 17:20 - 2025-04-13 17:20 - 000000000 ____D C:\Users\Administrator\.vscode-insiders
2025-04-13 17:18 - 2025-04-13 17:18 - 000001753 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2022.lnk
2025-04-13 17:18 - 2025-04-13 17:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio Code - Insiders
2025-04-13 17:17 - 2025-04-13 17:18 - 000000000 ____D C:\Program Files\Microsoft VS Code Insiders
2025-04-13 16:45 - 2025-04-13 16:45 - 000000000 ____D C:\Users\Administrator\source
2025-04-13 16:45 - 2025-04-13 16:45 - 000000000 ____D C:\Users\Administrator\AppData\Local\IdentityNexusIntegration
2025-04-13 16:45 - 2025-04-13 16:45 - 000000000 ____D C:\Users\Administrator\AppData\Local\.IdentityService
2025-04-13 16:38 - 2025-04-13 16:38 - 000000000 ____D C:\Users\Administrator\AppData\Local\NVIDIA
2025-04-13 16:38 - 2025-04-13 16:38 - 000000000 ____D C:\Users\Administrator\AppData\Local\DBG
2025-04-13 16:01 - 2025-04-13 16:01 - 000000000 ____D C:\Users\Administrator\Doctor Web
2025-04-13 16:00 - 2025-04-13 16:00 - 000000000 ____D C:\Users\Administrator\AppData\Local\TeamViewer
2025-04-13 16:00 - 2025-04-13 16:00 - 000000000 ____D C:\Users\Administrator\AppData\Local\AuraApp
2025-04-13 15:44 - 2025-04-13 15:44 - 000000000 ____D C:\Users\a1b2a\AppData\Local\aws
2025-04-13 15:44 - 2025-04-13 15:44 - 000000000 ____D C:\Users\a1b2a\.codeium
2025-04-13 15:27 - 2025-04-13 15:44 - 000000000 ____D C:\Users\a1b2a\AppData\Local\sourcery
2025-04-13 15:27 - 2025-04-13 15:27 - 000000000 ____D C:\Users\a1b2a\AppData\Roaming\sourcery
2025-04-13 15:18 - 2025-04-13 15:18 - 000000000 ____D C:\Users\a1b2a\Doctor Web
2025-04-13 15:15 - 2025-04-13 15:15 - 000000000 ____D C:\Users\a1b2a\AppData\Local\TeamViewer
2025-04-13 15:03 - 2025-04-13 15:06 - 000000000 ____D C:\Users\a1b2a\AppData\Local\AuraApp
2025-04-12 18:45 - 2025-04-15 17:31 - 000008177 _____ C:\Users\Adminstrator\Downloads\cards_data-export-2025-04-12-22-45.csv.csv
2025-04-12 01:04 - 2025-04-12 01:04 - 000008177 _____ C:\Users\Adminstrator\Downloads\cards_data-export-2025-04-12-05-04.csv.csv
2025-04-11 23:10 - 2025-04-11 23:10 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Microsoft\Paint
2025-04-11 09:41 - 2025-04-11 09:41 - 000531464 _____ C:\Users\Adminstrator\Downloads\refined-github-25.4.8-for-local-testing-only.zip
2025-04-11 09:41 - 2025-04-11 09:41 - 000000000 ____D C:\Users\Adminstrator\Downloads\refined-github-25.4.8-for-local-testing-only
2025-04-11 09:38 - 2025-04-11 09:40 - 2386739200 _____ C:\Users\Adminstrator\Downloads\Fedora-Workstation-Live-42_Beta-1.4.x86_64.iso
2025-04-11 09:07 - 2025-04-11 09:07 - 000001295 _____ C:\Users\Adminstrator\Desktop\i-devr.com Secure WebDisk.lnk
2025-04-11 09:06 - 2025-04-11 09:06 - 000003344 _____ C:\Users\Adminstrator\Downloads\i-devr.com Secure WebDisk.vbs
2025-04-11 07:46 - 2025-04-11 07:46 - 000000226 _____ C:\Users\Adminstrator\Downloads\passwd
2025-04-11 07:31 - 2025-04-11 07:31 - 001013760 _____ C:\Users\Adminstrator\Downloads\i-devr(1).com_1743011828
2025-04-11 06:26 - 2025-04-11 06:26 - 000018599 _____ C:\Users\Adminstrator\Downloads\services.html
2025-04-11 06:26 - 2025-04-11 06:26 - 000015212 _____ C:\Users\Adminstrator\Downloads\about.html
2025-04-11 06:26 - 2025-04-11 06:26 - 000014225 _____ C:\Users\Adminstrator\Downloads\contact.html
2025-04-11 06:26 - 2025-04-11 06:26 - 000010449 _____ C:\Users\Adminstrator\Downloads\index(3).html
2025-04-11 05:39 - 2025-04-11 05:39 - 000044514 _____ C:\Users\Adminstrator\Downloads\Profile.pdf
2025-04-11 04:26 - 2025-04-11 04:26 - 000000000 ____D C:\Users\Adminstrator\radare2
2025-04-10 21:22 - 2025-04-10 21:22 - 000000000 ____D C:\Users\Adminstrator\Downloads\wordpress-6.7.2
2025-04-10 21:21 - 2025-04-10 21:21 - 028410097 _____ C:\Users\Adminstrator\Downloads\wordpress-6.7.2.zip
2025-04-10 14:38 - 2025-04-10 14:38 - 001085827 _____ C:\Users\Adminstrator\Downloads\EIN'S 2025.pdf
2025-04-10 14:37 - 2025-04-10 14:37 - 009771797 _____ C:\Users\Adminstrator\Downloads\july-2020-990-index.csv
2025-04-10 14:33 - 2025-04-10 14:33 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Telegram Desktop UWP
2025-04-10 09:12 - 2025-04-10 09:12 - 000001360 _____ C:\Users\Adminstrator\Downloads\localhost-localdomain.pem
2025-04-08 17:59 - 2025-04-08 17:59 - 000000000 ____D C:\Program Files\Common Files\AV
2025-04-08 17:57 - 2025-04-08 17:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dr.Web
2025-04-08 03:40 - 2025-04-08 03:40 - 000006188 _____ C:\Users\Adminstrator\Downloads\index (1).html
2025-04-08 03:31 - 2025-04-11 06:31 - 000000000 ____D C:\Users\Adminstrator\Downloads\enterprise-cpn-system
2025-04-08 03:30 - 2025-04-08 03:30 - 000221140 _____ C:\Users\Adminstrator\Downloads\enterprise-cpn-system.zip
2025-04-08 02:13 - 2025-04-08 02:13 - 000001678 _____ C:\Users\Adminstrator\Downloads\NEWkeyPair1.pem
2025-04-08 02:12 - 2025-04-08 02:12 - 000001679 _____ C:\Users\Adminstrator\Downloads\LightsailDefaultKey-us-east-1 (1).pem
2025-04-08 01:43 - 2025-04-08 03:32 - 000000000 _____ C:\Users\Adminstrator\graph TD.txt
2025-04-08 01:42 - 2025-04-08 01:42 - 000000000 ____D C:\Users\Adminstrator\CPNJ
2025-04-07 21:47 - 2025-04-08 12:32 - 000000000 ____D C:\Program Files\Common Files\Doctor Web
2025-04-07 21:10 - 2025-04-23 11:04 - 000000000 ____D C:\Program Files\DrWeb
2025-04-07 21:10 - 2025-04-08 17:57 - 000264592 _____ (Doctor Web, Ltd.) C:\WINDOWS\system32\Drivers\dwsguard64.dll
2025-04-07 21:10 - 2025-04-08 17:57 - 000235440 _____ (Doctor Web, Ltd.) C:\WINDOWS\system32\Drivers\dwsguard32.dll
2025-04-07 21:08 - 2025-04-25 00:33 - 000000000 ____D C:\ProgramData\Doctor Web
2025-04-07 21:07 - 2025-04-07 21:07 - 049098360 _____ (Doctor Web, Ltd.) C:\Users\Adminstrator\Downloads\drweb-1.0-katana.exe
2025-04-07 16:36 - 2025-04-08 18:00 - 000000000 ____D C:\Users\Adminstrator\Doctor Web
2025-04-07 16:36 - 2025-04-07 16:36 - 023732320 _____ C:\Users\Adminstrator\Downloads\dwsysinfo.exe
2025-04-07 10:28 - 2025-04-07 10:28 - 000000000 ____D C:\Users\Adminstrator\.osquery
2025-04-06 18:21 - 2025-04-06 18:21 - 000688640 _____ C:\Users\Adminstrator\Downloads\cip2000.xls
2025-04-06 18:21 - 2025-04-06 18:21 - 000085504 _____ C:\Users\Adminstrator\Downloads\CMR_SA_1_6_11.xlsx
2025-04-06 18:21 - 2025-04-06 18:21 - 000085504 _____ C:\Users\Adminstrator\Downloads\CMR_SA_1_6_11 (1).xlsx
2025-04-06 17:56 - 2025-04-06 17:56 - 001993216 _____ C:\Users\Adminstrator\Downloads\PSDEPT.xls
2025-04-06 17:56 - 2025-04-06 17:56 - 000477184 _____ C:\Users\Adminstrator\Downloads\NonOpenMarketPOs-FY16.xls
2025-04-06 17:54 - 2025-04-25 12:59 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Microsoft\Excel
2025-04-06 17:54 - 2025-04-06 17:54 - 000461824 _____ C:\Users\Adminstrator\Downloads\pi_fellowship_database_edited.xls
2025-04-06 17:52 - 2025-04-06 17:52 - 001611776 _____ C:\Users\Adminstrator\Downloads\1999_2005_mediation_case_law_dataset_4_20_07.xls
2025-04-06 15:44 - 2025-04-06 15:44 - 000001678 _____ C:\Users\Adminstrator\Downloads\lightsailawskey.pem
2025-04-06 15:40 - 2025-04-06 15:40 - 000001679 _____ C:\Users\Adminstrator\Downloads\LightsailDefaultKey-us-east-1.pem
2025-04-06 10:52 - 2025-04-06 19:24 - 000000000 ____D C:\Users\Adminstrator\Downloads\cports-x64
2025-04-06 10:52 - 2025-04-06 10:52 - 000131911 _____ C:\Users\Adminstrator\Downloads\cports-x64.zip
2025-04-06 10:30 - 2025-04-07 16:42 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\BurpSuite
2025-04-06 10:21 - 2025-04-06 10:21 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\FigmaAgent
2025-04-06 10:20 - 2025-04-24 14:00 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Figma
2025-04-06 10:20 - 2025-04-06 10:20 - 119126040 _____ (Figma, Inc.) C:\Users\Adminstrator\Downloads\FigmaSetup.exe
2025-04-06 10:20 - 2025-04-06 10:20 - 000001318 _____ C:\Users\Adminstrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Figma.lnk
2025-04-06 10:20 - 2025-04-06 10:20 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\Figma
2025-04-06 09:11 - 2025-04-07 11:08 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\install4j
2025-04-06 09:11 - 2025-04-06 09:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Burp Suite Community Edition
2025-04-06 09:11 - 2025-04-06 09:11 - 000000000 ____D C:\Program Files\BurpSuiteCommunity
2025-04-06 09:06 - 2025-04-06 09:06 - 326173656 _____ (PortSwigger Web Security) C:\Users\Adminstrator\Downloads\burpsuite_community_windows-x64_v2025_2_3.exe
2025-04-06 04:20 - 2025-04-06 04:20 - 004401316 _____ C:\Users\Adminstrator\Downloads\IDevr Business Docs (2).pdf
2025-04-06 04:19 - 2025-04-06 04:19 - 004401316 _____ C:\Users\Adminstrator\Downloads\IDevr Business Docs (1).pdf
2025-04-06 04:18 - 2025-04-06 04:18 - 000014059 _____ C:\Users\Adminstrator\Downloads\CP575Notice_1739826974321 (2).pdf
2025-04-06 02:15 - 2025-04-06 02:15 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\TeamViewer
2025-04-06 01:55 - 2025-04-06 01:55 - 000000000 ____D C:\CraxsRat_Bilder
2025-04-06 01:42 - 2025-04-07 21:11 - 000000000 ____D C:\Users\Adminstrator\.VirtualBox
2025-04-06 01:34 - 2025-04-06 01:34 - 000002031 _____ C:\Users\Public\Desktop\Playit.gg.lnk
2025-04-06 01:34 - 2025-04-06 01:34 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\playit_gg
2025-04-06 01:34 - 2025-04-06 01:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Playit.gg
2025-04-06 01:34 - 2025-04-06 01:34 - 000000000 ____D C:\Program Files\playit_gg
2025-04-06 01:33 - 2025-04-06 01:33 - 002568192 _____ C:\Users\Adminstrator\Downloads\playit-windows-x86_64-signed.msi
2025-04-06 01:31 - 2025-04-06 01:31 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\apktool
2025-04-06 01:26 - 2025-04-06 01:26 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\EVLF_-
2025-04-06 01:21 - 2025-04-06 01:24 - 000000000 ____D C:\AuLiveUpdate
2025-04-06 01:20 - 2025-04-06 01:24 - 000000000 ____D C:\ProgramData\AuraAV
2025-04-06 01:20 - 2025-04-06 01:22 - 000000000 ____D C:\Program Files\AuraAV
2025-04-06 01:20 - 2025-04-06 01:20 - 000000000 ___HD C:\~!-
2025-04-06 01:20 - 2025-04-06 01:20 - 000000000 ___HD C:\!-
2025-04-06 01:20 - 2022-08-10 09:49 - 000002226 ____H C:\!-SCPGT03.JPEG
2025-04-06 01:20 - 2019-09-13 11:10 - 000027321 ____H C:\!-SCPGT04.PDF
2025-04-06 01:20 - 2017-12-27 09:46 - 000008280 ____H C:\!-SCPGT02.XLSX
2025-04-06 00:40 - 2025-04-06 00:40 - 000005492 _____ C:\WINDOWS\system32\Tasks\Aura service start timeout handler
2025-04-06 00:40 - 2025-04-06 00:40 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\AuraApp
2025-04-06 00:39 - 2025-04-06 00:39 - 000094600 _____ (Pango Inc) C:\WINDOWS\system32\Drivers\aura_netfilter2.sys
2025-04-06 00:39 - 2025-04-06 00:39 - 000001165 _____ C:\Users\Public\Desktop\Aura.lnk
2025-04-06 00:39 - 2025-04-06 00:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Aura
2025-04-06 00:39 - 2025-04-06 00:39 - 000000000 ____D C:\Program Files\AuraApp
2025-04-06 00:38 - 2025-04-06 00:40 - 000000000 ____D C:\ProgramData\AuraApp
2025-04-06 00:38 - 2025-04-06 00:38 - 000812096 _____ (Aura) C:\Users\Adminstrator\Downloads\AuraSetup.exe
2025-04-06 00:10 - 2025-04-06 00:10 - 000009861 _____ C:\Users\Adminstrator\Downloads\mail.i-devr.com Email Setup.vbs
2025-04-05 23:59 - 2025-04-05 23:59 - 000001143 _____ C:\Users\Public\Desktop\Oracle VirtualBox.lnk
2025-04-05 23:59 - 2025-04-05 23:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VirtualBox
2025-04-05 23:59 - 2025-04-05 23:59 - 000000000 ____D C:\Program Files\Oracle
2025-04-05 23:56 - 2025-04-05 23:57 - 123016232 _____ (Oracle and/or its affiliates) C:\Users\Adminstrator\Downloads\VirtualBox-7.1.6-167084-Win.exe
2025-04-05 23:56 - 2025-04-05 23:57 - 022973241 _____ C:\Users\Adminstrator\Downloads\Oracle_VirtualBox_Extension_Pack-7.1.6.vbox-extpack
2025-04-05 23:21 - 2025-04-05 23:27 - 000000000 ____D C:\Users\Adminstrator\Sherlock
2025-04-05 21:14 - 2025-04-05 21:14 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\GitHub
2025-04-05 21:13 - 2025-04-05 21:16 - 000000000 ____D C:\Users\Adminstrator\actions-runner
2025-04-05 19:13 - 2025-04-05 19:13 - 000008977 _____ C:\Users\Adminstrator\Downloads\index(2).html
2025-04-05 17:52 - 2025-04-05 17:52 - 000009653 _____ C:\Users\Adminstrator\Downloads\20061128-wicket-1.x-examples-Form-RefreshingView
2025-04-05 15:47 - 2025-04-05 15:47 - 000003666 _____ C:\Users\Adminstrator\Downloads\index(1).html
2025-04-05 13:55 - 2025-04-05 13:55 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\pypoetry
2025-04-05 13:52 - 2025-04-05 13:52 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\poetry
2025-04-05 13:47 - 2025-04-05 13:47 - 000000000 ____D C:\Users\Adminstrator\Downloads\google-cloud-code
2025-04-05 13:46 - 2025-04-05 13:47 - 240509462 _____ C:\Users\Adminstrator\Downloads\google-cloud-code.zip
2025-04-05 03:23 - 2025-04-06 01:15 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\TeamViewer
2025-04-05 02:58 - 2025-04-05 02:58 - 000000000 ___SD C:\WINDOWS\system32\containers
2025-04-05 02:58 - 2025-04-05 02:58 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IIS
2025-04-05 02:58 - 2025-04-05 02:58 - 000000000 ____D C:\WINDOWS\SysWOW64\BestPractices
2025-04-05 02:58 - 2025-04-05 02:58 - 000000000 ____D C:\WINDOWS\ADAM
2025-04-05 02:58 - 2025-04-05 02:58 - 000000000 ____D C:\Program Files\Hyper-V
2025-04-05 02:58 - 2025-04-05 02:58 - 000000000 ____D C:\inetpub
2025-04-05 02:29 - 2025-04-05 02:29 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\pypa
2025-04-05 02:25 - 2025-04-25 00:33 - 000000000 ____D C:\Program Files\TeamViewer
2025-04-05 02:25 - 2025-04-05 02:25 - 000000889 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer.lnk
2025-04-05 02:25 - 2025-04-05 02:25 - 000000877 _____ C:\Users\Public\Desktop\TeamViewer.lnk
2025-04-04 20:46 - 2025-04-04 20:46 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Microsoft\HTML Help
2025-04-04 19:30 - 2025-04-04 19:30 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\@forge
2025-04-04 19:30 - 2025-04-04 19:30 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\forge-cli-nodejs
2025-04-04 19:26 - 2025-04-04 19:26 - 030916608 _____ C:\Users\Adminstrator\Downloads\node-v22.14.0-x64.msi
2025-04-04 19:09 - 2025-04-04 19:11 - 000000000 ____D C:\Users\Adminstrator\Documents\Visual Studio 2022 Preview
2025-04-04 18:58 - 2025-04-04 18:58 - 003831808 _____ C:\Users\Adminstrator\Downloads\putty-64bit-0.83-installer.msi
2025-04-04 18:50 - 2025-04-04 18:50 - 000000464 _____ C:\Users\Adminstrator\Ovpnkey
2025-04-04 18:50 - 2025-04-04 18:50 - 000000111 _____ C:\Users\Adminstrator\Ovpnkey.pub
2025-04-04 18:33 - 2025-04-04 18:33 - 000005576 _____ C:\Users\Adminstrator\Downloads\connector01_london.ovpn
2025-04-04 18:30 - 2025-04-04 18:30 - 000005529 _____ C:\Users\Adminstrator\Downloads\device_1743805665765_brouillard@[email protected]_[Boston_(MA)].ovpn
2025-04-04 18:19 - 2025-04-04 18:19 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2025-04-03 23:25 - 2024-09-11 02:47 - 000849112 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2025-04-03 23:25 - 2024-09-11 02:47 - 000849112 _____ C:\WINDOWS\system32\vulkaninfo.exe
2025-04-03 23:25 - 2024-09-11 02:47 - 000713944 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2025-04-03 23:25 - 2024-09-11 02:47 - 000713944 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2025-04-03 23:25 - 2024-09-11 02:47 - 000653528 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2025-04-03 23:25 - 2024-09-11 02:47 - 000637144 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2025-04-03 23:25 - 2024-09-11 02:44 - 000948384 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2025-04-03 23:25 - 2024-09-11 02:44 - 000669352 _____ C:\WINDOWS\system32\nvofapi64.dll
2025-04-03 23:25 - 2024-09-11 02:44 - 000504480 _____ C:\WINDOWS\SysWOW64\nvofapi.dll
2025-04-03 23:25 - 2024-09-11 02:43 - 014520968 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2025-04-03 23:25 - 2024-09-11 02:43 - 012066416 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2025-04-03 23:25 - 2024-09-11 02:43 - 002167816 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2025-04-03 23:25 - 2024-09-11 02:43 - 001621648 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2025-04-03 23:25 - 2024-09-11 02:43 - 001537656 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2025-04-03 23:25 - 2024-09-11 02:43 - 001195144 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2025-04-03 23:25 - 2024-09-11 02:43 - 000992928 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2025-04-03 23:25 - 2024-09-11 02:43 - 000784392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2025-04-03 23:25 - 2024-09-11 02:43 - 000768680 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2025-04-03 23:25 - 2024-09-11 02:43 - 000459384 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2025-04-03 23:25 - 2024-09-11 02:42 - 007859792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2025-04-03 23:25 - 2024-09-11 02:42 - 006738656 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2025-04-03 23:25 - 2024-09-11 02:42 - 006190728 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2025-04-03 23:25 - 2024-09-11 02:42 - 005858936 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2025-04-03 23:25 - 2024-09-11 02:42 - 005550200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcudadebugger.dll
2025-04-03 23:25 - 2024-09-11 02:42 - 003483272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2025-04-03 23:25 - 2024-09-11 02:42 - 000853640 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2025-04-03 23:25 - 2024-09-11 02:08 - 000108742 _____ C:\WINDOWS\system32\nvinfo.pb
2025-04-03 19:20 - 2025-04-03 19:20 - 000000000 ____D C:\Users\Adminstrator\.ideaLibSources
2025-04-03 15:35 - 2025-04-03 15:35 - 000000000 ____D C:\Users\Adminstrator\.ollama
2025-04-03 15:34 - 2025-04-03 15:34 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\prisma-nodejs
2025-04-03 15:34 - 2025-04-03 15:34 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\checkpoint-nodejs
2025-04-03 15:32 - 2025-04-03 16:10 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\anythingllm-desktop
2025-04-03 15:32 - 2025-04-03 15:32 - 000000000 ____D C:\Users\Adminstrator\Downloads\github-actions-manager-2024.3.6
2025-04-03 15:30 - 2025-04-03 15:30 - 000642922 _____ C:\Users\Adminstrator\Downloads\github-actions-manager-2024.3.6.zip
2025-04-03 15:22 - 2025-04-21 09:50 - 000000000 ____D C:\Users\Adminstrator\Downloads\ckeditor5-builder-44.3.0
2025-04-03 15:21 - 2025-04-03 15:21 - 000012297 _____ C:\Users\Adminstrator\Downloads\ckeditor5-builder-44.3.0.zip
2025-04-03 14:35 - 2025-04-03 14:35 - 000002445 _____ C:\Users\Adminstrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AnythingLLM.lnk
2025-04-03 14:35 - 2025-04-03 14:35 - 000002437 _____ C:\Users\Adminstrator\Desktop\AnythingLLM.lnk
2025-04-03 14:35 - 2025-04-03 14:35 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\anythingllm-desktop-updater
2025-04-03 14:24 - 2025-04-25 11:59 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\LM Studio
2025-04-03 14:24 - 2025-04-25 00:35 - 000000000 ____D C:\Users\Adminstrator\.lmstudio
2025-04-03 14:24 - 2025-04-04 22:50 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\lm-studio-updater
2025-04-03 14:24 - 2025-04-03 14:24 - 000002447 _____ C:\Users\Adminstrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LM Studio.lnk
2025-04-03 14:24 - 2025-04-03 14:24 - 000002439 _____ C:\Users\Adminstrator\Desktop\LM Studio.lnk
2025-04-03 14:24 - 2025-04-03 14:24 - 000000031 _____ C:\Users\Adminstrator\.lmstudio-home-pointer
2025-04-03 06:51 - 2025-04-03 06:51 - 000000865 _____ C:\Users\Public\Desktop\Notepad++.lnk
2025-04-03 06:50 - 2025-04-03 06:50 - 006703352 _____ (Don HO [email protected]) C:\Users\Adminstrator\Downloads\npp.8.7.9.Installer.x64.exe
2025-04-03 06:49 - 2025-04-03 06:49 - 006371448 _____ (Don HO [email protected]) C:\Users\Adminstrator\Downloads\npp.8.7.9.Installer.arm64.exe
2025-04-03 05:16 - 2025-04-03 05:16 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\GitHub CLI
2025-04-03 04:40 - 2025-04-03 04:41 - 482359808 _____ (LM Studio) C:\Users\Adminstrator\Downloads\LM-Studio-0.3.14-5-x64.exe
2025-04-02 19:08 - 2025-04-02 19:09 - 347841744 _____ (Mintplex Labs Inc) C:\Users\Adminstrator\Downloads\AnythingLLMDesktop.exe
2025-04-02 19:07 - 2025-04-02 19:07 - 000000000 ____D C:\Users\Adminstrator\.texlive2025
2025-04-02 19:06 - 2025-04-16 11:07 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Docker Desktop
2025-04-02 12:13 - 2025-04-02 20:35 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\Windows Performance Analyzer
2025-04-02 12:13 - 2025-04-02 12:13 - 000000000 ____D C:\Users\Adminstrator\Documents\WPA Files
2025-04-02 12:13 - 2025-04-02 12:13 - 000000000 ____D C:\SymCache
2025-04-02 12:12 - 2025-04-02 12:12 - 000000000 ____D C:\Users\Adminstrator\Documents\TelegramBots-4.7
2025-04-02 12:11 - 2025-04-02 12:11 - 000035087 _____ C:\Users\Adminstrator\Downloads\updated resume Brandon Brouillard.pdf
2025-04-02 11:15 - 2025-04-02 11:15 - 000002675 _____ C:\Users\Adminstrator\ca_userkeys
2025-04-02 11:15 - 2025-04-02 11:15 - 000000583 _____ C:\Users\Adminstrator\ca_userkeys.pub
2025-04-02 03:46 - 2025-04-02 03:53 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2025-04-02 03:45 - 2025-04-02 03:45 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2025-04-02 03:45 - 2025-04-01 23:54 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2025-04-02 03:43 - 2025-04-02 03:43 - 000000000 ____D C:\WINDOWS\SysWOW64\ipam
2025-04-02 03:43 - 2025-04-02 03:43 - 000000000 ____D C:\WINDOWS\system32\ipam
2025-04-02 03:42 - 2025-04-02 03:42 - 000001151 _____ C:\WINDOWS\system32\ClusterUpdateUI.exe.config
2025-04-02 03:42 - 2025-04-02 03:42 - 000000000 ____D C:\WINDOWS\Cluster
2025-04-02 03:42 - 2025-04-02 03:41 - 000001315 _____ C:\WINDOWS\DfsrAdmin.exe.config
2025-04-02 03:42 - 2025-04-02 03:41 - 000001311 _____ C:\WINDOWS\system32\DfsMgmt.dll.config
2025-04-02 03:40 - 2025-04-02 03:53 - 000000000 ____D C:\Program Files (x86)\MSBuild
2025-04-02 03:40 - 2025-04-02 03:40 - 000000000 ____D C:\Program Files\Reference Assemblies
2025-04-02 03:40 - 2025-04-02 03:40 - 000000000 ____D C:\Program Files\MSBuild
2025-04-02 03:40 - 2025-04-02 03:40 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2025-04-02 03:39 - 2025-04-02 03:39 - 000000000 ____D C:\WINDOWS\AzureArcSetup
2025-04-02 03:38 - 2025-04-02 03:38 - 000000764 _____ C:\WINDOWS\system32\dsac.exe.config
2025-04-02 03:38 - 2025-04-02 03:38 - 000000000 __RSD C:\WINDOWS\SysWOW64\WindowsDevicePortal
2025-04-02 03:38 - 2025-04-02 03:38 - 000000000 __RSD C:\WINDOWS\system32\WindowsDevicePortal
2025-04-02 03:38 - 2025-04-02 03:38 - 000000000 ___RD C:\WINDOWS\WebManagement
2025-04-02 03:35 - 2025-04-02 03:35 - 000000000 ____D C:\Program Files\Update Services
2025-04-02 03:33 - 2025-04-02 03:33 - 000000000 ____D C:\WINDOWS\system32\ServerManagerInternal
2025-04-02 03:33 - 2025-04-02 03:33 - 000000000 ____D C:\WINDOWS\system32\BestPractices
2025-04-02 03:33 - 2025-04-02 03:33 - 000000000 ____D C:\WINDOWS\ADFS
2025-04-02 03:33 - 2025-04-02 03:33 - 000000000 ____D C:\Program Files\CMAK
2025-04-02 03:33 - 2025-04-02 03:33 - 000000000 ____D C:\Program Files (x86)\CMAK
2025-04-02 03:29 - 2025-04-02 03:29 - 000000000 ____D C:\WINDOWS\system32\zh-sg
2025-04-02 03:29 - 2025-04-02 03:29 - 000000000 ____D C:\WINDOWS\system32\en-sg
2025-04-02 03:29 - 2025-04-02 03:29 - 000000000 ____D C:\WINDOWS\system32\en-au
2025-04-02 00:07 - 2025-04-02 00:07 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2025-04-02 00:04 - 2025-04-25 00:37 - 000624498 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2025-04-02 00:03 - 2025-04-25 00:33 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2025-04-02 00:03 - 2025-04-25 00:33 - 000000000 ____D C:\WINDOWS\system32\Tasks\PowerToys
2025-04-02 00:03 - 2025-04-22 14:20 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2451002302-2018568227-764946658-1013
2025-04-02 00:03 - 2025-04-22 14:20 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2451002302-2018568227-764946658-1012
2025-04-02 00:03 - 2025-04-22 14:20 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2451002302-2018568227-764946658-1010
2025-04-02 00:03 - 2025-04-22 14:20 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2451002302-2018568227-764946658-1009
2025-04-02 00:03 - 2025-04-22 14:20 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2451002302-2018568227-764946658-1008
2025-04-02 00:03 - 2025-04-22 14:20 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2451002302-2018568227-764946658-1006
2025-04-02 00:03 - 2025-04-22 14:20 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2451002302-2018568227-764946658-1005
2025-04-02 00:03 - 2025-04-22 14:20 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2451002302-2018568227-764946658-1001
2025-04-02 00:03 - 2025-04-22 14:20 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2451002302-2018568227-764946658-500
2025-04-02 00:03 - 2025-04-22 14:20 - 000003546 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-2451002302-2018568227-764946658-1013
2025-04-02 00:03 - 2025-04-22 14:20 - 000003546 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-2451002302-2018568227-764946658-1012
2025-04-02 00:03 - 2025-04-22 14:20 - 000003546 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-2451002302-2018568227-764946658-1010
2025-04-02 00:03 - 2025-04-22 14:20 - 000003546 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-2451002302-2018568227-764946658-1009
2025-04-02 00:03 - 2025-04-22 14:20 - 000003546 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-2451002302-2018568227-764946658-1008
2025-04-02 00:03 - 2025-04-22 14:20 - 000003546 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-2451002302-2018568227-764946658-1006
2025-04-02 00:03 - 2025-04-22 14:20 - 000003546 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-2451002302-2018568227-764946658-1005
2025-04-02 00:03 - 2025-04-22 14:20 - 000003546 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-2451002302-2018568227-764946658-1001
2025-04-02 00:03 - 2025-04-22 14:20 - 000003540 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-2451002302-2018568227-764946658-500
2025-04-02 00:03 - 2025-04-22 14:20 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2025-04-02 00:03 - 2025-04-07 21:22 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2025-04-02 00:03 - 2025-04-05 12:45 - 000003536 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2025-04-02 00:03 - 2025-04-05 12:45 - 000003412 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2025-04-02 00:03 - 2025-04-02 00:03 - 000003378 _____ C:\WINDOWS\system32\Tasks\ZoomUpdateTaskUser-S-1-5-21-2451002302-2018568227-764946658-1009
2025-04-02 00:03 - 2025-04-02 00:03 - 000002634 _____ C:\WINDOWS\system32\Tasks\GCC
2025-04-02 00:03 - 2025-04-02 00:03 - 000002486 _____ C:\WINDOWS\system32\Tasks\ETW Host Service Updater v16
2025-04-02 00:03 - 2025-04-02 00:03 - 000002160 _____ C:\WINDOWS\system32\Tasks\npcapwatchdog
2025-04-02 00:03 - 2025-04-02 00:03 - 000000000 ____D C:\WINDOWS\system32\Tasks\GoogleSystem
2025-04-02 00:02 - 2025-04-02 00:02 - 000000000 ____D C:\Users\postgres\AppData\Roaming\Microsoft\Network
2025-04-02 00:02 - 2025-04-02 00:02 - 000000000 ____D C:\Users\postgres\AppData\Roaming\Microsoft\Crypto
2025-04-02 00:02 - 2025-04-02 00:02 - 000000000 ____D C:\Users\pgAgent\AppData\Roaming\Microsoft\Network
2025-04-02 00:02 - 2025-04-02 00:02 - 000000000 ____D C:\Users\DevToolsUser\AppData\Roaming\Microsoft\Network
2025-04-02 00:02 - 2025-04-02 00:02 - 000000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Network
2025-04-02 00:02 - 2025-04-02 00:02 - 000000000 ____D C:\Users\ddagentuser\AppData\Roaming\Microsoft\Network
2025-04-02 00:02 - 2025-04-02 00:02 - 000000000 ____D C:\Users\Administrator\AppData\Roaming\Microsoft\SystemCertificates
2025-04-02 00:02 - 2025-04-02 00:02 - 000000000 ____D C:\Users\Administrator\AppData\Roaming\Microsoft\Network
2025-04-02 00:02 - 2025-04-02 00:02 - 000000000 ____D C:\Users\Administrator\AppData\Roaming\Microsoft\Crypto
2025-04-02 00:01 - 2025-04-02 00:01 - 000000000 ____D C:\Users\a1b2a\AppData\Roaming\Microsoft\SystemCertificates
2025-04-02 00:01 - 2025-04-02 00:01 - 000000000 ____D C:\Users\a1b2a\AppData\Roaming\Microsoft\Network
2025-04-02 00:01 - 2025-04-02 00:01 - 000000000 ____D C:\Users\a1b2a\AppData\Roaming\Microsoft\Crypto
2025-04-01 23:59 - 2025-04-01 23:59 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Microsoft\SystemCertificates
2025-04-01 23:59 - 2025-04-01 23:59 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Microsoft\Network
2025-04-01 23:59 - 2025-04-01 23:59 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Microsoft\Crypto
2025-04-01 23:58 - 2025-04-01 23:58 - 000000000 ____D C:\Users\ADMIN_Adminstrator\AppData\Roaming\Microsoft\SystemCertificates
2025-04-01 23:58 - 2025-04-01 23:58 - 000000000 ____D C:\Users\ADMIN_Adminstrator\AppData\Roaming\Microsoft\Network
2025-04-01 23:58 - 2025-04-01 23:58 - 000000000 ____D C:\Users\ADMIN_Adminstrator\AppData\Roaming\Microsoft\Crypto
2025-04-01 23:58 - 2025-04-01 23:58 - 000000000 ____D C:\Users\ADMIN_a1b2a\AppData\Roaming\Microsoft\SystemCertificates
2025-04-01 23:58 - 2025-04-01 23:58 - 000000000 ____D C:\Users\ADMIN_a1b2a\AppData\Roaming\Microsoft\Network
2025-04-01 23:58 - 2025-04-01 23:58 - 000000000 ____D C:\Users\ADMIN_a1b2a\AppData\Roaming\Microsoft\Crypto
2025-04-01 23:54 - 2025-04-25 01:38 - 000000000 ____D C:\Users\Adminstrator
2025-04-01 23:54 - 2025-04-23 18:44 - 000000000 ____D C:\Users\postgres
2025-04-01 23:54 - 2025-04-19 23:09 - 000000000 ____D C:\Users\ADMIN_Adminstrator
2025-04-01 23:54 - 2025-04-16 20:07 - 000000000 ____D C:\Users\Administrator
2025-04-01 23:54 - 2025-04-13 16:23 - 000000000 ____D C:\Users\a1b2a
2025-04-01 23:54 - 2025-04-13 16:00 - 000000000 ____D C:\Users\Administrator\AppData\Roaming\Microsoft\Windows
2025-04-01 23:54 - 2025-04-13 15:06 - 000000000 ____D C:\Users\a1b2a\AppData\Roaming\Microsoft\Windows
2025-04-01 23:54 - 2025-04-05 05:10 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Microsoft\Windows
2025-04-01 23:54 - 2025-04-02 00:02 - 000000000 ____D C:\Users\pgAgent
2025-04-01 23:54 - 2025-04-02 00:02 - 000000000 ____D C:\Users\DevToolsUser
2025-04-01 23:54 - 2025-04-02 00:02 - 000000000 ____D C:\Users\ddagentuser
2025-04-01 23:54 - 2025-04-02 00:02 - 000000000 ____D C:\Users\ADMIN_a1b2a
2025-04-01 23:54 - 2025-04-01 23:58 - 000000000 ____D C:\Users\ADMIN_Adminstrator\AppData\Roaming\Microsoft\Windows
2025-04-01 23:54 - 2025-04-01 23:58 - 000000000 ____D C:\Users\ADMIN_a1b2a\AppData\Roaming\Microsoft\Windows
2025-04-01 23:54 - 2025-04-01 23:56 - 000000000 ____D C:\Users\postgres\AppData\Roaming\Microsoft\Windows
2025-04-01 23:54 - 2025-04-01 23:56 - 000000000 ____D C:\Users\pgAgent\AppData\Roaming\Microsoft\Windows
2025-04-01 23:54 - 2025-04-01 23:56 - 000000000 ____D C:\Users\DevToolsUser\AppData\Roaming\Microsoft\Windows
2025-04-01 23:54 - 2025-04-01 23:56 - 000000000 ____D C:\Users\ddagentuser\AppData\Roaming\Microsoft\Windows
2025-04-01 23:54 - 2025-04-01 23:56 - 000000000 ____D C:\Users\Administrator\AppData\Roaming\Microsoft\Spelling
2025-04-01 23:54 - 2025-04-01 23:56 - 000000000 ____D C:\Users\a1b2a\AppData\Roaming\Microsoft\Spelling
2025-04-01 23:54 - 2025-04-01 23:55 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Microsoft\Spelling
2025-04-01 23:54 - 2025-04-01 23:55 - 000000000 ____D C:\Users\ADMIN_Adminstrator\AppData\Roaming\Microsoft\Spelling
2025-04-01 23:54 - 2025-04-01 23:55 - 000000000 ____D C:\Users\ADMIN_a1b2a\AppData\Roaming\Microsoft\Spelling
2025-04-01 23:54 - 2025-03-22 03:24 - 000000000 ____D C:\Users\postgres\AppData\Roaming\Microsoft\Spelling
2025-04-01 23:54 - 2025-03-22 03:24 - 000000000 ____D C:\Users\pgAgent\AppData\Roaming\Microsoft\Spelling
2025-04-01 23:54 - 2025-03-22 03:24 - 000000000 ____D C:\Users\DevToolsUser\AppData\Roaming\Microsoft\Spelling
2025-04-01 23:54 - 2025-03-22 03:24 - 000000000 ____D C:\Users\ddagentuser\AppData\Roaming\Microsoft\Spelling
2025-04-01 23:53 - 2025-04-25 11:40 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2025-04-01 23:53 - 2025-04-16 20:17 - 000001623 _____ C:\WINDOWS\system32\config\VSMIDK
2025-04-01 23:53 - 2025-04-01 23:53 - 000535848 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2025-04-01 13:35 - 2025-04-01 13:35 - 000010526 _____ C:\Users\Adminstrator\Downloads\form-submission.pdf
2025-04-01 13:31 - 2025-04-01 13:31 - 000450014 _____ C:\Users\Adminstrator\Downloads\OnePay _ Direct Deposit Form.pdf
2025-04-01 13:14 - 2025-04-01 13:18 - 000214413 _____ C:\Users\Adminstrator\Downloads\confidentiality-form-fillable.pdf
2025-04-01 03:10 - 2025-04-01 03:10 - 001013760 _____ C:\Users\Adminstrator\Downloads\i-devr.com_1743011828
2025-04-01 03:09 - 2025-04-01 03:09 - 000245598 _____ C:\Users\Adminstrator\Downloads\i-devr.com_1743011828.gz
2025-04-01 03:08 - 2025-04-02 03:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeX Live 2025
2025-04-01 02:40 - 2025-04-01 02:40 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\aws
2025-04-01 00:19 - 2025-04-01 00:19 - 000000000 ____D C:\texlive
2025-04-01 00:15 - 2025-04-01 00:15 - 029637721 _____ C:\Users\Adminstrator\Downloads\install-tl-windows.exe
2025-03-31 23:51 - 2025-03-31 23:51 - 004414284 _____ C:\Users\Adminstrator\Downloads\OpenSSH-Win32.zip
2025-03-31 23:51 - 2025-03-31 23:51 - 000000000 ____D C:\Users\Adminstrator\Downloads\OpenSSH-Win32
2025-03-31 14:40 - 2025-03-31 14:40 - 000000000 ____D C:\Program Files\OpenSSH
2025-03-31 12:48 - 2025-03-31 12:48 - 000000000 ____D C:\Users\Adminstrator\.idlerc
2025-03-31 10:26 - 2025-04-18 13:00 - 000000000 ____D C:\Users\Adminstrator\openssh-portable
2025-03-31 10:25 - 2025-03-31 10:25 - 000000000 ____D C:\Users\Adminstrator\Downloads\OpenSSH-Win64
2025-03-31 10:24 - 2025-03-31 10:25 - 005092272 _____ C:\Users\Adminstrator\Downloads\OpenSSH-Win64.zip
2025-03-29 08:52 - 2025-03-29 08:52 - 000000000 ____D C:\Users\Adminstrator\.pm2
2025-03-29 08:41 - 2025-03-29 08:41 - 000000000 ____D C:\Users\Adminstrator\Downloads\L3MON-1.2.2
2025-03-29 08:24 - 2025-03-29 08:24 - 158570592 _____ (Oracle Corporation) C:\Users\Adminstrator\Downloads\jdk-8u441-windows-x64.exe
2025-03-29 08:17 - 2025-03-29 08:18 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\fnm
2025-03-29 07:35 - 2025-03-29 07:36 - 019576287 _____ C:\Users\Adminstrator\Downloads\L3MON-1.2.2.tar.gz
2025-03-29 06:54 - 2025-03-29 06:54 - 000346741 _____ C:\Users\Adminstrator\Downloads\Flux_Dev_A_modern_sleek_logo_for_Omnisig_a_programming_and_dev_1.jpeg
2025-03-29 06:53 - 2025-03-29 06:53 - 000345500 _____ C:\Users\Adminstrator\Downloads\Flux_Dev_A_modern_sleek_and_professional_business_logo_for_omn_2.jpeg
2025-03-29 06:53 - 2025-03-29 06:53 - 000265698 _____ C:\Users\Adminstrator\Downloads\Flux_Dev_A_modern_sleek_and_professional_business_logo_for_omn_1.jpeg
2025-03-29 06:53 - 2025-03-29 06:53 - 000215037 _____ C:\Users\Adminstrator\Downloads\Flux_Dev_A_modern_sleek_and_professional_business_logo_for_omn_3.jpeg
2025-03-28 22:28 - 2025-04-01 13:28 - 000000000 ____D C:\Users\Adminstrator\Downloads\Phone Link
2025-03-28 21:40 - 2025-03-28 21:40 - 001304576 _____ C:\Users\Adminstrator\Desktop\indeed.pdf
2025-03-28 21:26 - 2025-03-28 21:26 - 000320698 _____ C:\Users\Adminstrator\Desktop\paying too much.pdf
2025-03-28 21:26 - 2025-03-28 21:26 - 000000000 ____D C:\Users\Adminstrator\AppData\LocalLow\Temp
2025-03-28 19:14 - 2025-03-28 19:14 - 000000000 ____D C:\Users\Adminstrator\Downloads\gk_3.0.0_windows_386
2025-03-28 19:09 - 2025-03-28 19:09 - 009897501 _____ C:\Users\Adminstrator\Downloads\gk_3.0.0_windows_386.zip
2025-03-28 19:08 - 2025-03-28 19:08 - 000323345 _____ C:\Users\Adminstrator\Downloads\maphre insurance bill.PDF
2025-03-28 17:41 - 2025-03-28 17:41 - 000323345 _____ C:\Users\Adminstrator\Downloads\Invoice_4782339719.PDF
2025-03-28 16:56 - 2025-03-28 16:56 - 000003466 _____ C:\Users\Adminstrator\Downloads\the domain is https___i-devr.com.md
2025-03-28 14:57 - 2025-03-28 14:57 - 000029576 _____ C:\Users\Adminstrator\Downloads\internal.ubuntu-24.04.json
2025-03-28 13:54 - 2025-03-28 13:54 - 003420783 _____ C:\Users\Adminstrator\Downloads\stripe-java-28.4.0.zip
2025-03-28 12:35 - 2025-03-28 12:35 - 000000000 _____ C:\Users\Adminstrator\Desktop\passwords.txt
2025-03-28 12:14 - 2025-03-28 12:14 - 000128133 _____ C:\Users\Adminstrator\Downloads\l8AA4s_f.json
2025-03-28 01:53 - 2025-03-28 01:53 - 000000509 _____ C:\Users\Adminstrator\.gitconfig
2025-03-28 01:52 - 2025-03-28 01:53 - 000000347 _____ C:\Users\Adminstrator\.gitcookies
2025-03-28 00:09 - 2025-03-28 00:09 - 000000449 _____ C:\Users\Adminstrator\Downloads\stop.xbm
2025-03-28 00:06 - 2025-03-28 00:06 - 000005189 _____ C:\Users\Adminstrator\Downloads\test_lookup.pl
2025-03-28 00:06 - 2025-03-28 00:06 - 000002378 _____ C:\Users\Adminstrator\Downloads\preferences.pl
2025-03-28 00:06 - 2025-03-28 00:06 - 000000927 _____ C:\Users\Adminstrator\Downloads\cookie.set.CGI.pl
2025-03-28 00:06 - 2025-03-28 00:06 - 000000000 _____ C:\Users\Adminstrator\Downloads\All About Reptiles.doc.1
2025-03-28 00:05 - 2025-03-28 00:05 - 000000476 _____ C:\Users\Adminstrator\Downloads\printenv.pl
2025-03-28 00:05 - 2025-03-28 00:05 - 000000465 _____ C:\Users\Adminstrator\Downloads\pull.pl
2025-03-28 00:05 - 2025-03-28 00:05 - 000000366 _____ C:\Users\Adminstrator\Downloads\print.stdin.pl
2025-03-28 00:05 - 2025-03-28 00:05 - 000000355 _____ C:\Users\Adminstrator\Downloads\print_query.pl
2025-03-28 00:03 - 2025-03-28 00:03 - 000015770 _____ C:\Users\Adminstrator\Downloads\mailto.pl
2025-03-28 00:02 - 2025-03-28 00:02 - 000015054 _____ C:\Users\Adminstrator\Downloads\cgi-lib.pl
2025-03-28 00:02 - 2025-03-28 00:02 - 000001814 _____ C:\Users\Adminstrator\Downloads\cookie.set.pl
2025-03-28 00:02 - 2025-03-28 00:02 - 000001468 _____ C:\Users\Adminstrator\Downloads\coutwords-1.pl
2025-03-28 00:01 - 2025-03-28 00:01 - 000004096 _____ C:\Users\Adminstrator\Downloads\password.dbm.dir
2025-03-28 00:01 - 2025-03-28 00:01 - 000002059 _____ C:\Users\Adminstrator\Downloads\password.dbm.pag
2025-03-28 00:01 - 2025-03-28 00:01 - 000001620 _____ C:\Users\Adminstrator\Downloads\pictutil.pl
2025-03-28 00:01 - 2025-03-28 00:01 - 000000586 _____ C:\Users\Adminstrator\Downloads\print.binary.stdin.pl
2025-03-28 00:01 - 2025-03-28 00:01 - 000000000 _____ C:\Users\Adminstrator\Downloads\Readme.txt.1
2025-03-27 23:55 - 2025-03-27 23:55 - 000005324 _____ C:\Users\Adminstrator\Downloads\path_info.cgi
2025-03-27 23:32 - 2025-03-27 23:32 - 000053130 _____ C:\Users\Adminstrator\Downloads\common.xsl
2025-03-27 21:53 - 2025-04-14 01:49 - 000000000 ___DC C:\WINDOWS\Panther
2025-03-27 21:20 - 2025-03-27 21:20 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\vnc
2025-03-27 20:54 - 2025-03-27 20:54 - 000005005 _____ C:\Users\Adminstrator\Downloads\EDB-ID_52094.txt
2025-03-27 19:34 - 2025-03-27 19:34 - 000120126 _____ C:\Users\Adminstrator\Downloads\1033 General Information _ Mass.gov.pdf
2025-03-27 19:30 - 2025-03-27 19:30 - 000116073 _____ C:\Users\Adminstrator\Desktop\1033 General Information _ Mass.gov.pdf
2025-03-27 10:31 - 2025-03-27 10:35 - 156196264 _____ (OBS Project) C:\Users\Adminstrator\Downloads\OBS-Studio-31.0.2-Windows-Installer.exe
2025-03-27 03:15 - 2025-04-13 19:15 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Microsoft\MMC
2025-03-27 01:56 - 2025-03-27 01:56 - 000000000 ____D C:\Users\Adminstrator\Desktop\vscode-server-stable-linux-x64
2025-03-27 01:49 - 2025-03-27 01:49 - 000000000 _____ C:\Users\Adminstrator\Desktop\usernames.txt
2025-03-26 23:18 - 2025-03-26 23:18 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubuntu-22.04
2025-03-26 23:14 - 2025-03-26 23:14 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\Symbols
2025-03-26 22:54 - 2025-03-26 22:54 - 000000000 ____D C:\Users\Adminstrator\.wallaby
2025-03-26 22:54 - 2025-03-26 22:54 - 000000000 ____D C:\Users\Adminstrator\.quokka
2025-03-26 22:49 - 2025-03-26 22:49 - 000000000 ____D C:\Users\Adminstrator\Desktop\.mypy_cache
2025-03-26 22:48 - 2025-03-27 01:49 - 000001622 _____ C:\Users\Adminstrator\Desktop\# brute_force_cpanel_advanced.py
2025-03-26 21:39 - 2025-03-26 21:39 - 000002244 _____ C:\Users\Adminstrator\Downloads\User_Download_26032025_213914.csv
2025-03-26 16:47 - 2025-03-26 16:47 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Windows Azure Powershell
2025-03-26 04:02 - 2025-03-26 04:02 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\kotlin
2025-03-26 04:00 - 2025-04-21 09:12 - 000000000 ____D C:\Users\Adminstrator\.m2

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-04-25 14:14 - 2025-03-22 03:24 - 000000000 ____D C:\WINDOWS\SystemTemp
2025-04-25 14:14 - 2025-02-04 18:50 - 000000000 ____D C:\Program Files (x86)\Incredibuild
2025-04-25 14:12 - 2025-03-22 03:23 - 000000000 ____D C:\WINDOWS\INF
2025-04-25 14:06 - 2025-03-22 03:24 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-04-25 13:48 - 2025-02-20 13:28 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\cloud-code
2025-04-25 13:29 - 2025-03-04 21:05 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Claude
2025-04-25 11:59 - 2025-03-25 22:31 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Slack
2025-04-25 11:41 - 2025-03-22 03:24 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2025-04-25 11:40 - 2025-02-17 07:57 - 239075328 _____ C:\hak193.vhdx
2025-04-25 02:14 - 2025-02-20 13:29 - 000000000 ____D C:\Users\Adminstrator\.sonarlint
2025-04-25 01:48 - 2025-03-16 07:54 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\sourcery
2025-04-25 01:46 - 2025-02-20 22:10 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\deepsource
2025-04-25 01:38 - 2025-02-19 15:21 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Code
2025-04-25 00:45 - 2025-02-17 07:00 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\D3DSCache
2025-04-25 00:36 - 2025-02-18 04:16 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\discord
2025-04-25 00:35 - 2025-01-16 19:28 - 000000000 ___RD C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2025-04-25 00:34 - 2025-02-18 04:16 - 000002323 _____ C:\Users\Adminstrator\Desktop\Discord.lnk
2025-04-25 00:34 - 2025-02-18 04:16 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\Discord
2025-04-25 00:33 - 2025-03-22 04:00 - 000000000 ____D C:\ProgramData\ssh
2025-04-25 00:33 - 2025-03-22 03:24 - 000000000 ____D C:\WINDOWS\ServiceState
2025-04-25 00:33 - 2025-03-22 03:24 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-04-25 00:33 - 2025-02-26 17:42 - 000000000 ___RD C:\ProgramData\VMware
2025-04-25 00:33 - 2025-02-17 07:00 - 000000000 __SHD C:\Users\Adminstrator\IntelGraphicsProfiles
2025-04-25 00:33 - 2025-01-18 13:54 - 000008030 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2025-04-25 00:33 - 2025-01-15 22:58 - 000000000 ___RD C:\ProgramData\NVIDIA
2025-04-25 00:33 - 2025-01-15 22:45 - 000000000 ____D C:\Intel
2025-04-25 00:32 - 2025-03-22 03:22 - 001310720 _____ C:\WINDOWS\system32\config\BBI
2025-04-25 00:32 - 2025-02-17 22:08 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\kleopatra
2025-04-25 00:23 - 2025-02-28 16:05 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\wsl
2025-04-25 00:00 - 2025-03-16 12:17 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\Cloudflare
2025-04-24 23:57 - 2025-02-18 04:00 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\CrashDumps
2025-04-24 23:45 - 2025-02-15 21:25 - 000000000 ___RD C:\ProgramData\Cloudflare
2025-04-24 19:03 - 2025-02-26 00:23 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\JetBrains
2025-04-24 14:07 - 2025-02-17 22:08 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\gnupg
2025-04-24 14:03 - 2025-02-18 19:10 - 000000000 ____D C:\Program Files (x86)\JetBrains
2025-04-24 08:03 - 2025-02-21 20:04 - 000000000 ____D C:\Users\Adminstrator\Downloads\Telegram Desktop
2025-04-24 08:02 - 2025-02-26 00:27 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\JetBrains
2025-04-24 07:53 - 2025-02-26 00:24 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JetBrains Toolbox
2025-04-24 07:40 - 2025-02-26 02:23 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JetBrains
2025-04-23 22:09 - 2025-02-17 07:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PostGIS Bundle 0 for PostgreSQL x64 17
2025-04-23 18:44 - 2025-02-17 00:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Postgres Plus Add-ons
2025-04-23 16:08 - 2025-03-23 04:45 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Perplexity
2025-04-23 16:03 - 2025-03-23 04:45 - 000002385 _____ C:\Users\Adminstrator\Desktop\Perplexity.lnk
2025-04-23 15:16 - 2025-02-17 07:00 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\Packages
2025-04-23 15:14 - 2025-03-22 03:24 - 000000000 ___HD C:\Program Files\WindowsApps
2025-04-23 15:14 - 2025-01-16 00:08 - 000002247 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2025-04-23 15:14 - 2025-01-16 00:08 - 000002206 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2025-04-23 15:13 - 2025-01-24 17:15 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2025-04-23 15:13 - 2025-01-20 12:23 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2025-04-23 13:56 - 2025-01-21 19:21 - 000000444 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics
2025-04-23 11:25 - 2025-01-18 15:38 - 000000000 ____D C:\Program Files\Microsoft Office
2025-04-22 14:20 - 2025-01-18 15:42 - 000002132 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2025-04-22 03:24 - 2025-03-24 16:09 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GitKraken
2025-04-22 03:24 - 2025-03-24 16:09 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\GitKraken
2025-04-22 03:24 - 2025-03-24 16:09 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\gitkraken
2025-04-22 03:24 - 2025-01-15 22:33 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-04-22 03:24 - 2025-01-15 22:33 - 000002276 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2025-04-21 15:16 - 2025-01-25 18:08 - 000000000 ___RD C:\ProgramData\miniforge3
2025-04-21 14:36 - 2025-01-15 22:35 - 000000000 ____D C:\ProgramData\Packages
2025-04-21 09:07 - 2025-01-24 17:15 - 000001065 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2025-04-21 09:06 - 2025-03-24 16:09 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\.gitkraken
2025-04-21 09:01 - 2025-03-24 16:09 - 000000000 ____D C:\Users\Adminstrator\.gk
2025-04-21 09:01 - 2025-02-25 22:37 - 000000000 ____D C:\Users\Adminstrator\.gnupg
2025-04-21 08:44 - 2025-03-12 18:39 - 000002173 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive.lnk
2025-04-21 08:44 - 2025-03-12 18:39 - 000002008 _____ C:\Users\ADMIN_Adminstrator\Desktop\Google Slides.lnk
2025-04-21 08:44 - 2025-03-12 18:39 - 000002008 _____ C:\Users\ADMIN_Adminstrator\Desktop\Google Sheets.lnk
2025-04-21 08:44 - 2025-03-12 18:39 - 000001996 _____ C:\Users\ADMIN_Adminstrator\Desktop\Google Docs.lnk
2025-04-20 13:15 - 2025-02-17 07:00 - 000000000 ___SD C:\Users\Adminstrator\AppData\Roaming\Microsoft\Credentials
2025-04-19 23:17 - 2025-03-04 21:25 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Cursor
2025-04-19 22:37 - 2025-01-17 05:15 - 000000000 ____D C:\ProgramData\ChocolateyHttpCache
2025-04-19 22:35 - 2025-01-17 05:15 - 000000000 ____D C:\ProgramData\chocolatey
2025-04-19 20:29 - 2025-02-18 18:06 - 000000000 ____D C:\Program Files\Notepad++
2025-04-19 18:23 - 2025-03-16 07:58 - 000000000 ____D C:\Users\Adminstrator\.codeium
2025-04-18 15:23 - 2025-03-01 13:40 - 000002436 ____H C:\Users\Adminstrator\Documents\Default.rdp
2025-04-18 12:59 - 2025-02-27 13:56 - 000000000 ____D C:\Users\Adminstrator\Desktop\bin
2025-04-18 12:21 - 2025-01-29 14:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit
2025-04-18 12:21 - 2025-01-27 08:26 - 000000000 ____D C:\Program Files\Java
2025-04-17 16:15 - 2025-03-25 22:31 - 000002281 _____ C:\Users\Adminstrator\Desktop\Slack.lnk
2025-04-17 16:15 - 2025-03-25 22:31 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Slack Technologies Inc
2025-04-17 16:15 - 2025-03-25 22:31 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\slack
2025-04-16 20:21 - 2025-01-17 06:45 - 000000000 ____D C:\git-sdk-64
2025-04-16 11:08 - 2025-02-24 17:32 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Docker
2025-04-16 11:08 - 2025-02-24 17:32 - 000000000 ____D C:\Users\Adminstrator\.docker
2025-04-15 15:20 - 2025-03-23 04:45 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\perplexity-updater
2025-04-15 05:45 - 2025-01-17 05:16 - 000000000 ____D C:\Python313
2025-04-15 05:28 - 2025-01-21 16:38 - 000000000 ____D C:\ProgramData\DockerDesktop
2025-04-15 05:21 - 2025-03-22 03:22 - 000029386 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2025-04-15 01:02 - 2025-02-17 20:06 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Microsoft\Word
2025-04-15 01:00 - 2025-02-20 10:19 - 000000000 ____D C:\Users\Adminstrator\myModule
2025-04-15 00:30 - 2025-03-03 08:34 - 000000000 ____D C:\Users\Administrator\AppData\Local\Packages
2025-04-15 00:30 - 2025-02-14 08:03 - 000002546 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WSL Settings.lnk
2025-04-15 00:30 - 2025-02-14 08:02 - 000002599 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WSL.lnk
2025-04-15 00:27 - 2025-02-24 17:32 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\Docker
2025-04-15 00:22 - 2025-02-17 07:00 - 000000000 ___RD C:\Users\Adminstrator\OneDrive
2025-04-15 00:20 - 2025-02-17 19:46 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\GitHub Desktop
2025-04-14 17:32 - 2025-01-27 23:29 - 000000000 ____D C:\Program Files\AzureConnectedMachineAgent
2025-04-14 17:11 - 2025-03-03 08:34 - 000000000 ___RD C:\Users\Administrator\OneDrive
2025-04-14 17:02 - 2025-02-21 16:59 - 000000000 ____D C:\Users\Adminstrator\Documents\GitHub
2025-04-14 14:07 - 2025-03-16 16:13 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Python
2025-04-14 01:12 - 2025-02-17 19:46 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\GitHubDesktop
2025-04-14 01:11 - 2025-02-17 19:46 - 000002461 _____ C:\Users\Adminstrator\Desktop\GitHub Desktop.lnk
2025-04-14 01:11 - 2025-02-17 19:46 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GitHub, Inc
2025-04-14 01:11 - 2025-02-17 19:46 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\SquirrelTemp
2025-04-14 00:05 - 2025-03-03 08:43 - 000000000 ____D C:\Users\Administrator\AppData\Local\Cloudflare
2025-04-13 17:24 - 2025-03-22 03:24 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2025-04-13 17:23 - 2025-02-04 18:48 - 000000000 ____D C:\Program Files (x86)\Android
2025-04-13 17:22 - 2025-03-03 08:34 - 000000000 ____D C:\Users\Administrator\AppData\Local\D3DSCache
2025-04-13 17:22 - 2025-02-04 18:40 - 000000000 ____D C:\WINDOWS\SysWOW64\3082
2025-04-13 17:22 - 2025-02-04 18:40 - 000000000 ____D C:\WINDOWS\SysWOW64\1055
2025-04-13 17:22 - 2025-02-04 18:40 - 000000000 ____D C:\WINDOWS\SysWOW64\1049
2025-04-13 17:22 - 2025-02-04 18:40 - 000000000 ____D C:\WINDOWS\SysWOW64\1046
2025-04-13 17:22 - 2025-02-04 18:40 - 000000000 ____D C:\WINDOWS\SysWOW64\1045
2025-04-13 17:22 - 2025-02-04 18:40 - 000000000 ____D C:\WINDOWS\SysWOW64\1040
2025-04-13 17:22 - 2025-02-04 18:40 - 000000000 ____D C:\WINDOWS\SysWOW64\1036
2025-04-13 17:22 - 2025-02-04 18:40 - 000000000 ____D C:\WINDOWS\SysWOW64\1029
2025-04-13 17:22 - 2025-02-04 18:40 - 000000000 ____D C:\WINDOWS\system32\3082
2025-04-13 17:22 - 2025-02-04 18:40 - 000000000 ____D C:\WINDOWS\system32\1055
2025-04-13 17:22 - 2025-02-04 18:40 - 000000000 ____D C:\WINDOWS\system32\1049
2025-04-13 17:22 - 2025-02-04 18:40 - 000000000 ____D C:\WINDOWS\system32\1046
2025-04-13 17:22 - 2025-02-04 18:40 - 000000000 ____D C:\WINDOWS\system32\1045
2025-04-13 17:22 - 2025-02-04 18:40 - 000000000 ____D C:\WINDOWS\system32\1040
2025-04-13 17:22 - 2025-02-04 18:40 - 000000000 ____D C:\WINDOWS\system32\1036
2025-04-13 17:22 - 2025-02-04 18:40 - 000000000 ____D C:\WINDOWS\system32\1029
2025-04-13 17:22 - 2025-02-04 18:35 - 000000000 ____D C:\WINDOWS\SysWOW64\1033
2025-04-13 17:22 - 2025-02-04 18:35 - 000000000 ____D C:\WINDOWS\system32\1033
2025-04-13 17:20 - 2025-02-04 18:36 - 000000000 ____D C:\Program Files (x86)\dotnet
2025-04-13 17:20 - 2025-01-17 16:35 - 000000000 ____D C:\Program Files\dotnet
2025-04-13 17:00 - 2025-03-10 17:19 - 000000000 ____D C:\Users\Administrator\AppData\Roaming\NuGet
2025-04-13 16:45 - 2025-03-10 17:18 - 000000000 ____D C:\Users\Administrator\Documents\Visual Studio 2022
2025-04-13 16:37 - 2025-03-03 08:34 - 000000000 __SHD C:\Users\Administrator\IntelGraphicsProfiles
2025-04-13 16:02 - 2025-03-03 08:34 - 000000000 ____D C:\Users\Administrator\AppData\Local\Google
2025-04-13 16:00 - 2025-01-15 20:25 - 000000000 __RHD C:\Users\Public\AccountPictures
2025-04-13 15:57 - 2025-01-16 01:24 - 000000000 ____D C:\Users\a1b2a\AppData\Roaming\Code
2025-04-13 15:46 - 2025-02-04 13:22 - 000000000 ____D C:\Users\a1b2a\AppData\Local\deepsource
2025-04-13 15:46 - 2025-01-31 03:47 - 000000000 ____D C:\Users\a1b2a\.gk
2025-04-13 15:46 - 2025-01-28 15:51 - 000000000 ____D C:\Users\a1b2a\AppData\Local\cloud-code
2025-04-13 15:45 - 2025-01-29 06:01 - 000000000 ____D C:\Users\a1b2a\.sonarlint
2025-04-13 15:45 - 2025-01-15 20:25 - 000000000 ____D C:\Users\a1b2a\AppData\Local\D3DSCache
2025-04-13 15:42 - 2025-01-21 19:21 - 000000000 ____D C:\Users\a1b2a\AppData\Local\CrashDumps
2025-04-13 15:34 - 2025-01-15 20:25 - 000000000 ____D C:\Users\a1b2a\AppData\Local\Packages
2025-04-13 15:32 - 2025-01-21 16:45 - 000000000 ____D C:\Users\a1b2a\AppData\Roaming\Docker Desktop
2025-04-13 15:27 - 2025-01-16 00:08 - 000000000 ____D C:\Users\a1b2a\AppData\Local\Google
2025-04-13 15:25 - 2025-02-15 21:26 - 000000000 ____D C:\Users\a1b2a\AppData\Local\Cloudflare
2025-04-13 15:24 - 2025-01-21 16:45 - 000000000 ____D C:\Users\a1b2a\.docker
2025-04-13 15:24 - 2025-01-21 16:38 - 000000000 ____D C:\Users\a1b2a\AppData\Roaming\Docker
2025-04-13 15:23 - 2025-02-17 01:07 - 000000000 ____D C:\Users\a1b2a\AppData\Roaming\Signal
2025-04-13 15:19 - 2025-01-16 00:07 - 000000000 ____D C:\Users\a1b2a\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Visual Studio Code
2025-04-13 15:19 - 2025-01-15 20:27 - 000000000 ___RD C:\Users\a1b2a\OneDrive
2025-04-13 15:15 - 2025-01-15 23:25 - 000000000 __SHD C:\Users\a1b2a\IntelGraphicsProfiles
2025-04-13 15:15 - 2025-01-15 22:48 - 000000000 ___SD C:\Users\a1b2a\AppData\Roaming\Microsoft\Protect
2025-04-11 14:52 - 2025-02-28 15:24 - 000000000 ____D C:\Users\Adminstrator\IdeaProjects
2025-04-11 09:28 - 2025-02-24 17:45 - 000007577 _____ C:\Users\Adminstrator\.bash_history
2025-04-11 06:30 - 2025-02-19 13:10 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\.IdentityService
2025-04-10 09:33 - 2025-02-17 22:08 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\gnupg
2025-04-10 02:00 - 2025-03-04 21:05 - 000002392 _____ C:\Users\Adminstrator\Desktop\Claude.lnk
2025-04-10 02:00 - 2025-03-04 21:05 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Anthropic
2025-04-10 02:00 - 2025-03-04 21:05 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\AnthropicClaude
2025-04-08 11:40 - 2025-03-22 03:24 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2025-04-06 00:38 - 2025-01-17 05:15 - 000000000 ____D C:\ProgramData\Package Cache
2025-04-05 14:18 - 2025-02-17 07:00 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\PlaceholderTileLogoFolder
2025-04-05 13:57 - 2025-03-04 10:27 - 000000000 ____D C:\Users\Adminstrator\diesels
2025-04-05 03:17 - 2025-03-22 03:25 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2025-04-05 03:04 - 2025-03-22 03:24 - 000000000 ____D C:\WINDOWS\Registration
2025-04-05 02:58 - 2025-03-22 03:24 - 000000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2025-04-05 02:58 - 2025-03-22 03:24 - 000000000 ____D C:\WINDOWS\system32\inetsrv
2025-04-05 02:58 - 2025-03-22 03:24 - 000000000 ____D C:\WINDOWS\schemas
2025-04-05 02:58 - 2025-03-22 03:24 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2025-04-04 22:47 - 2025-03-13 16:49 - 000000000 ____D C:\Users\Adminstrator\CrossDevice
2025-04-04 22:42 - 2025-01-15 22:33 - 000012288 ___SH C:\DumpStack.log.tmp
2025-04-04 22:41 - 2025-02-28 12:12 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Notepad++
2025-04-04 22:41 - 2025-02-27 15:21 - 000000000 ____D C:\Program Files\Hashicorp Boundary
2025-04-04 19:43 - 2025-02-20 08:53 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\npm
2025-04-04 19:29 - 2025-02-20 08:52 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\npm-cache
2025-04-04 19:13 - 2025-03-01 07:05 - 000000000 ____D C:\Users\Adminstrator\Documents\ssh
2025-04-04 19:11 - 2025-02-21 17:00 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Google
2025-04-04 19:11 - 2025-02-17 07:00 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\Google
2025-04-04 18:58 - 2025-03-01 07:03 - 000000456 _____ C:\Users\Adminstrator\AppData\Local\PUTTY.RND
2025-04-04 18:58 - 2025-02-18 20:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PuTTY (64-bit)
2025-04-04 18:58 - 2025-02-18 20:02 - 000000000 ____D C:\Program Files\PuTTY
2025-04-04 18:19 - 2025-02-18 17:59 - 000000000 ____D C:\Users\Adminstrator\Documents\PowerShell
2025-04-04 14:28 - 2025-02-17 07:00 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\ConnectedDevicesPlatform
2025-04-04 00:43 - 2025-03-22 03:24 - 000000000 ____D C:\WINDOWS\appcompat
2025-04-03 23:26 - 2025-01-15 22:58 - 000000000 ____D C:\WINDOWS\system32\Drivers\NVIDIA Corporation
2025-04-03 23:01 - 2025-02-17 07:00 - 000000000 ___SD C:\Users\Adminstrator\AppData\Roaming\Microsoft\Protect
2025-04-03 15:32 - 2025-02-20 08:52 - 000000000 ____D C:\Users\Adminstrator\node_modules
2025-04-03 06:51 - 2025-02-18 18:06 - 000000877 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++.lnk
2025-04-02 13:52 - 2025-01-17 05:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Kits
2025-04-02 03:53 - 2025-03-25 00:42 - 000000000 ____D C:\WINDOWS\SysWOW64\Npcap
2025-04-02 03:53 - 2025-03-25 00:42 - 000000000 ____D C:\WINDOWS\system32\Npcap
2025-04-02 03:53 - 2025-03-23 01:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pandoc
2025-04-02 03:53 - 2025-03-22 23:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinHTTrack
2025-04-02 03:53 - 2025-03-22 18:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Go Programming Language
2025-04-02 03:53 - 2025-03-22 04:00 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2025-04-02 03:53 - 2025-03-22 03:26 - 000000000 ____D C:\WINDOWS\Setup
2025-04-02 03:53 - 2025-03-22 03:24 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2025-04-02 03:53 - 2025-03-22 03:24 - 000000000 ____D C:\WINDOWS\system32\spool
2025-04-02 03:53 - 2025-03-22 03:24 - 000000000 ____D C:\WINDOWS\system32\NDF
2025-04-02 03:53 - 2025-03-22 03:24 - 000000000 ____D C:\WINDOWS\system32\Drivers\DriverData
2025-04-02 03:53 - 2025-03-22 03:24 - 000000000 ____D C:\WINDOWS\system32\AppLocker
2025-04-02 03:53 - 2025-03-22 03:24 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2025-04-02 03:53 - 2025-03-21 16:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CardStudio2
2025-04-02 03:53 - 2025-03-21 11:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cloudflare
2025-04-02 03:53 - 2025-03-18 14:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Git
2025-04-02 03:53 - 2025-03-15 04:02 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2025-04-02 03:53 - 2025-03-13 09:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Yubico Authenticator
2025-04-02 03:53 - 2025-03-11 02:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenSSL
2025-04-02 03:53 - 2025-03-08 04:08 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2025-04-02 03:53 - 2025-03-06 04:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ruby 3.4.2-1-x64
2025-04-02 03:53 - 2025-03-05 23:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R
2025-04-02 03:53 - 2025-03-04 23:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Eclipse Theia
2025-04-02 03:53 - 2025-03-04 06:00 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2025-04-02 03:53 - 2025-03-01 17:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2025-04-02 03:53 - 2025-02-26 17:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VMware
2025-04-02 03:53 - 2025-02-18 20:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bloodshed Dev-C++
2025-04-02 03:53 - 2025-02-18 19:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JetBrains
2025-04-02 03:53 - 2025-02-18 18:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2025-04-02 03:53 - 2025-02-17 01:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Postgres Enterprise Manager
2025-04-02 03:53 - 2025-02-17 00:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel oneAPI 2025
2025-04-02 03:53 - 2025-02-16 23:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PostgreSQL 17
2025-04-02 03:53 - 2025-02-13 10:33 - 000000000 ____D C:\WINDOWS\system32\Visual Studio 2022
2025-04-02 03:53 - 2025-02-12 17:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenVPN
2025-04-02 03:53 - 2025-02-11 02:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Datadog
2025-04-02 03:53 - 2025-02-10 07:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CocosDashboard
2025-04-02 03:53 - 2025-02-10 07:08 - 000000000 ____D C:\Program Files\IIS
2025-04-02 03:53 - 2025-02-06 00:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PassFab Activation Unlocker
2025-04-02 03:53 - 2025-02-04 21:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LLVM
2025-04-02 03:53 - 2025-02-04 20:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CMake
2025-04-02 03:53 - 2025-02-04 18:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IncrediBuild
2025-04-02 03:53 - 2025-02-04 17:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2025-04-02 03:53 - 2025-01-30 16:26 - 000000000 ____D C:\WINDOWS\system32\vscode-remote-fs
2025-04-02 03:53 - 2025-01-30 13:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Android Studio
2025-04-02 03:53 - 2025-01-27 12:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerShell
2025-04-02 03:53 - 2025-01-26 14:47 - 000000000 ____D C:\WINDOWS\system32\venv
2025-04-02 03:53 - 2025-01-25 18:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Miniforge3
2025-04-02 03:53 - 2025-01-20 12:23 - 000000000 ____D C:\WINDOWS\system32\%userprofile%
2025-04-02 03:53 - 2025-01-18 15:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools
2025-04-02 03:53 - 2025-01-17 07:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Perforce
2025-04-02 03:53 - 2025-01-17 05:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2019
2025-04-02 03:53 - 2025-01-17 05:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Python 3.13
2025-04-02 03:53 - 2022-05-07 02:10 - 000000000 ____D C:\WINDOWS\system32\Hydrogen
2025-04-02 03:53 - 2022-05-07 01:24 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2025-04-02 03:53 - 2022-05-07 01:24 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy
2025-04-02 03:53 - 2022-05-07 01:24 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2025-04-02 03:52 - 2025-03-22 03:24 - 000000000 __RHD C:\Users\Public\Libraries
2025-04-02 03:47 - 2025-03-24 16:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zebra Technologies
2025-04-02 03:47 - 2025-02-10 07:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Azure
2025-04-02 03:47 - 2025-02-04 18:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2015
2025-04-02 03:47 - 2025-02-04 18:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2022
2025-04-02 03:47 - 2025-01-28 00:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2025-04-02 03:47 - 2025-01-26 15:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE
2025-04-02 03:47 - 2025-01-23 20:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GnuWin32
2025-04-02 03:47 - 2022-05-07 01:24 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2025-04-02 03:47 - 2022-05-07 01:24 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2025-04-02 03:44 - 2025-03-22 03:24 - 000000000 ___SD C:\WINDOWS\system32\lxss
2025-04-02 03:38 - 2025-03-22 03:24 - 000000000 ____D C:\WINDOWS\SystemApps
2025-04-02 03:36 - 2025-03-22 03:24 - 000000000 ____D C:\WINDOWS\SysWOW64\qps-plocm
2025-04-02 03:36 - 2025-03-22 03:24 - 000000000 ____D C:\WINDOWS\SysWOW64\qps-ploc
2025-04-02 03:36 - 2025-03-22 03:24 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2025-04-02 03:36 - 2025-03-22 03:24 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2025-04-02 03:36 - 2025-03-22 03:24 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2025-04-02 03:36 - 2025-03-22 03:24 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2025-04-02 03:36 - 2025-03-22 03:24 - 000000000 ____D C:\WINDOWS\system32\qps-plocm
2025-04-02 03:36 - 2025-03-22 03:24 - 000000000 ____D C:\WINDOWS\system32\qps-ploc
2025-04-02 03:36 - 2025-03-22 03:24 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2025-04-02 03:36 - 2025-03-22 03:24 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2025-04-02 03:36 - 2025-03-22 03:24 - 000000000 ____D C:\WINDOWS\system32\et-EE
2025-04-02 03:36 - 2025-03-22 03:24 - 000000000 ____D C:\WINDOWS\system32\es-MX
2025-04-02 03:35 - 2025-03-22 04:00 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2025-04-02 03:29 - 2025-03-22 03:24 - 000000000 ____D C:\WINDOWS\system32\id-ID
2025-04-02 02:41 - 2025-03-22 03:24 - 000000000 ____D C:\WINDOWS\system32\WebThreatDefSvc
2025-04-02 00:19 - 2025-03-22 03:24 - 000000000 ____D C:\ProgramData\USOPrivate
2025-04-02 00:03 - 2025-03-22 03:24 - 000000000 ___RD C:\Program Files\Windows Defender
2025-04-01 23:56 - 2025-03-22 03:24 - 000000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows
2025-04-01 23:56 - 2025-03-13 17:19 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom
2025-04-01 23:56 - 2025-03-07 08:42 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PowerToys (Preview)
2025-04-01 23:56 - 2025-03-03 08:44 - 000000000 ____D C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GitHub, Inc
2025-04-01 23:56 - 2025-02-18 19:54 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Python 3.11
2025-04-01 23:56 - 2025-02-18 18:02 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Visual Studio Code
2025-04-01 23:56 - 2025-02-15 02:47 - 000000000 ____D C:\Users\a1b2a\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Postman
2025-04-01 23:56 - 2025-02-04 21:19 - 000000000 ____D C:\Users\a1b2a\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PowerToys (Preview)
2025-04-01 23:56 - 2025-02-04 17:18 - 000000000 ____D C:\Users\a1b2a\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2025-04-01 23:56 - 2025-02-04 13:34 - 000000000 ____D C:\Users\a1b2a\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSYS2
2025-04-01 23:56 - 2025-02-04 05:07 - 000000000 ____D C:\Users\a1b2a\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MongoDB Inc
2025-04-01 23:56 - 2025-01-31 03:47 - 000000000 ____D C:\Users\a1b2a\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GitKraken
2025-04-01 23:56 - 2025-01-23 14:27 - 000000000 ____D C:\Users\a1b2a\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GitHub, Inc
2025-04-01 23:56 - 2025-01-23 09:28 - 000000000 ____D C:\Users\a1b2a\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubuntu-18.04
2025-04-01 23:56 - 2025-01-22 00:40 - 000000000 ____D C:\Users\a1b2a\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\kali-linux
2025-04-01 23:55 - 2025-02-22 23:20 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Automattic Inc
2025-04-01 23:55 - 2025-02-18 20:24 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Postman
2025-04-01 23:55 - 2025-02-18 04:16 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
2025-04-01 23:55 - 2025-02-17 20:04 - 000000000 ____D C:\Users\ADMIN_Adminstrator\AppData\Local\Packages
2025-04-01 23:55 - 2025-02-10 14:59 - 000000000 ____D C:\Users\ADMIN_a1b2a\AppData\Local\Packages
2025-04-01 23:54 - 2025-03-08 21:47 - 000000000 ____D C:\WINDOWS\Firmware
2025-03-31 23:12 - 2025-03-23 23:38 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2025-03-29 08:50 - 2025-02-20 08:52 - 000086968 _____ C:\Users\Adminstrator\package-lock.json
2025-03-28 22:50 - 2025-02-17 20:06 - 000000000 ____D C:\Users\Adminstrator\AppData\Roaming\Microsoft\Office
2025-03-28 21:24 - 2025-03-07 08:38 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\Microsoft_Corporation
2025-03-28 19:05 - 2025-01-16 19:27 - 000001320 _____ C:\Users\a1b2a\Desktop\Tor Browser.lnk
2025-03-27 05:06 - 2025-03-11 03:20 - 000000000 ____D C:\Users\Adminstrator\AppData\Local\DBG

==================== Files in the root of some directories ========

2025-01-28 11:39 - 2025-01-28 11:57 - 000000185 _____ () C:\Users\a1b2a\script.js
2025-03-01 07:03 - 2025-04-04 18:58 - 000000456 _____ () C:\Users\Adminstrator\AppData\Local\PUTTY.RND

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================


  • 0

Advertisements

Back to Virus, Spyware, Malware Removal · Next Unread Topic →




Similar Topics


Also tagged with one or more of these keywords: malware, hacked, needhelp

2 user(s) are reading this topic

1 members, 1 guests, 0 anonymous users


    b8nk1028
  1. Geeks to Go Community
  2. → Security
  3. → Virus, Spyware, Malware Removal

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP