@JaredBusch You think those "877D.lnk" shortcuts open some kind of connection that is using all those: akamai, amazonaws, and cloudfront connections?
That reminds me of when I look at network activity when Outlook or something Microsoft is having trouble connecting online, and I open that up to see what's going on... I see a ton of Akamai connections.
I would think Akamai and Amazon at the very least prevent malware from using their services. Must be something else.
But I wouldn't yet rule out a possibility of both... perhaps there is a legit reason for those cloud content delivery services such as OneDrive or something... plus, something going on with those links in the startup folder.
Don't you have something like ESET running to help protect systems?