videolan.org

fair-doc.zip

c:\users\budgy\desktop\frst 20230722\frst64.exe

cnqmmain.exe

concentr.exe

selfserviceplugin.exe

c:\program files\synaptics\syntp\syntphelper.exe

msedgewebview2.exe

wpspdf.exe

promecefpluginhost.exe

authmansvr.exe

cmd.exe

discord.exe

msedge.exe

c:\program files\nordvpn\nordvpn.exe

id_tray.exe

1.inf

c:\windows\syswow64\lenovo\powermgr\powermgr.exe

sharepoint.exe

c:\windows\system32\cmd.exe

c:\windows\system32\musnotifyicon.exe

c:\windows\system32\driverstore\filerepository\cui_dch.inf

igfxext.exe

c:\program files\realtek\audio\hda\ravcpl64.exe

wpscloudsvr.exe

aesm_service.exe

csrss.exe

dllhost.exe

endpointprotection.exe

evteng.exe

ibmpmsvc.exe

id_service.exe

intelaudioservice.exe

intelcphecisvc.exe

imcontroller.exe

device.exe

litssvc.exe

lsass.exe

nordupdateservice.exe

winservice.exe

regsrvc.exe

schedulerservice.exe

searchindexer.exe

securityhealthservice.exe

services.exe

sgrmbroker.exe

smartstandby.exe

socketheciserver.exe

svchost.exe

tbtsvc.exe

unsecapp.exe

usbvaccine.exe

winlogon.exe

wmiregistrationservice.exe

zaar.exe

c:\users\budgy\appdata\local\discord\update.exe

c:\program files\videolan\vlc\npvlc.dll

c:\program files\dolby\dolby dax3\api\dax3api.exe

c:\windows\system32\driverstore\filerepository\ibmpmdrv.inf

c:\windows\system32\litssvc.exe

c:\windows\syswow64\svchost.exe

c:\program files\malwarebytes\anti-malware\mbamservice.exe

c:\program files\minitool shadowmaker\schedulerservice.exe

c:\program files\nordupdater\nordupdateservice.exe

c:\program files\windows defender advanced threat protection\mssense.exe

c:\program files\oracle\virtualbox\vboxsds.exe

msmpeng.exe

updater.exe

c:\windows\system32\ammntdrv.sys

c:\windows\system32\drivers\bdnet.sys

c:\windows\system32\drivers\btha2dp.sys

c:\windows\system32\drivers\ctxusbmon.sys

entryprotect.sys

epusbfilter.sys

c:\windows\system32\drivers\mbamchameleon.sys

c:\windows\system32\drivers\mbamswissarmy.sys

c:\windows\system32\drivers\netprotection_network_filter.sys

pmdrvs.sys

c:\windows\system32\pwdspio.sys

c:\windows\system32\drivers\rtp_filter.sys

c:\windows\system32\drivers\rtump64x64.sys

c:\windows\system32\drivers\ss_conn_usb_driver2.sys

c:\windows\system32\drivers\usbncm.sys

c:\windows\system32\drivers\vboxnetlwf.sys

c:\windows\system32\drivers\wd\wdboot.sys

c:\windows\system32\drivers\wd\wdnisdrv.sys

c:\windows\system32\drivers\wireguard.sys

netprotection_network_filter2.sys

c:\users\budgy\downloads\ic-iso-31000-risk-management-plan-11044_word.dotx

c:\users\budgy\downloads\project-retrospective-facilitators-guide.pdf

c:\users\budgy\downloads\cross-functional-weekly-facilitators-guide.pdf

c:\users\budgy\downloads\rffr soa based on ism march 2023.xlsx

risk-assessment-process-information-security.pdf

c:\users\budgy\downloads\1325-article text-4123-5-10-20170712.pdf

c:\users\budgy\downloads\csu_it_masters_study_plan.xlsx

c:\users\budgy\downloads\849.pdf

c:\programdata\microsoft\windows\start menu\programs\aomei backupper  2023-06-30 09:54 - 2023-06-30 09:55 - 000172928 _____ c:\windows\system32\ammntdrv.sys

c:\users\budgy\downloads\fair-doc.zip

c:\windows\syswow64\abbakconfig.dat

c:\users\budgy\appdata\roaming\discord  2023-07-22 09:56 - 2023-04-30 16:19 - 000000000 ____d c:\users\budgy\appdata\local\malwarebytes  2023-07-22 09:56 - 2023-02-11 17:47 - 000000000 __shd c:\users\budgy\intelgraphicsprofiles  2023-07-21 12:50 - 2019-12-07 19:14 - 000000000 ____d c:\windows\livekernelreports  2023-07-21 12:48 - 2019-12-07 19:13 - 000000000 ____d c:\windows\inf  2023-07-21 11:58 - 2019-12-07 19:14 - 000000000 ___hd c:\program files\windowsapps  2023-07-21 11:58 - 2019-12-07 19:14 - 000000000 ____d c:\windows\appreadiness  2023-07-21 11:37 - 2023-02-11 14:59 - 000795738 _____ c:\windows\system32\perfstringbackup.ini

c:\windows\tasks\sa.dat

c:\windows\system32\mrt.exe

c:\windows\syswow64\printconfig.dll

c:\config.msi

c:\perflogs  2023-07-15 23:31 c:\windows\system32\config  2019-12-07 19:31 c:\windows\system32\configuration  2019-12-07 19:14 c:\windows\system32\driverstate  2023-02-11 14:57 c:\windows\system32\fxstmp  2019-12-07 19:14 c:\windows\system32\ias  2019-12-07 19:14 c:\windows\system32\msdtc  2019-12-07 19:14 c:\windows\system32\networklist  2023-07-22 11:21 c:\windows\system32\sleepstudy  2023-07-22 12:00 c:\windows\system32\sru  2023-07-21 11:39 c:\windows\system32\tasks  2023-03-04 20:39 c:\windows\system32\wdi  2023-07-21 11:58 c:\program files\windowsapps  2023-07-21 12:50 c:\windows\livekernelreports  2023-06-20 02:33 c:\windows\memory.dmp

onedrivesetup.exe

idcontextmenu.dll

c:\program files\malwarebytes\anti-malware\mbshlext.dll

cnqmmwrp.dll

bavoilax.dll

c:\windows\web\wallpaper\windows\img0.jpg

c:\program files\openshot video editor\openshot-qt.exe

c:\users\budgy\appdata\roaming\zoom\bin\zoom.exe

citrixenterprisebrowser.exe

c:\program files\google\chrome\application\chrome.exe

ntdll.dll

c:\windows\system32\ntdll.dll

addition.txt

1.0.0.35

192.168.1.1

103.86.96.100

7.10.5.0

12.0.0.0

23.5.0.4

23.5.1.83

65.0.2.15

6.7.4.46

7.5.4.2

1.4.0.59

HKLM\...\Run

HKLM\SOFTWARE\Microsoft\Windows

HKLM\Software\Microsoft\Active

HKLM\SOFTWARE\Policies\Mozilla\Firefox

HKLM\SOFTWARE\Policies\Microsoft\Edge

HKLM-x32\...\Edge\Extension

HKLM-x32\...\Adobe

HKLM-x32\...\Belarc

HKLM-x32\...\CanonQuickMenu

HKLM-x32\...\Comodo

HKU\S-1-5-21-3428103939-1962105336-1684995027-1002\...\Discord

HKLM-x32\...\Google

HKU\S-1-5-21-3428103939-1962105336-1684995027-1002

HKLM-x32\...\Microsoft

HKLM-x32\...\MT-75D7C412-925B-4AD0-90DC-5E4FEE22EAE1_is1

HKLM\...\MozillaMaintenanceService

HKLM\...\Speccy

HKLM\...\TreeSize

HKU\S-1-5-21-3428103939-1962105336-1684995027-1002\...\Kingsoft

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService

HKU\S-1-5-21-3428103939-1962105336-1684995027-1002\Control