microsoft.windows

calendar.google.com

www.alibaba.com

message.alibaba.com

online.citi.com

microsoft.com

regid.1991-06.com.microsoft

mystart.lenovo.com

addons-restricted-domains@mozilla.com.xpi

lenovovantageservice.exe

c:\program files\malwarebytes\anti-malware\mbambgnativemsg.exe

msedgewebview2.exe

c:\users\wadef\appdata\local\webex\webex64\meetings\atmgr.exe

imcontroller.pl

cnmnsst2.exe

igfxcuiservicen.exe

igfxemn.exe

dax3api.exe

fn.inf

1.inf

tposd.exe

c:\windows\system32\etdctrl.exe

crashpad_handler.exe

c:\windows\system32\cmd.exe

googlecrashhandler64.exe

armsvc.exe

c:\windows\system32\driverstore\filerepository\dax3_swc_aposvc.inf

c:\program files\hpprintscandoctor\hpprintscandoctorservice.exe

esif_uf.exe

winservice.exe

intelcphdcpsvc.exe

wmiregistrationservice.exe

c:\windows\system32\driverstore\filerepository\intcoed.inf

c:\windows\system32\driverstore\filerepository\dal.inf

c:\windows\system32\driverstore\filerepository\fn.inf

c:\windows\system32\driverstore\filerepository\ibmpmdrv.inf

c:\windows\system32\driverstore\filerepository\smartstandbycomponent.inf

c:\windows\system32\litssvc.exe

presentationfontcache.exe

c:\windows\system32\fmservice64.exe

nissrv.exe

rtkauduservice64.exe

sihost.exe

svchost.exe

c:\windows\syswow64\lenovo\powermgr\powermgr.exe

windowsterminal.exe

gamebarftserver.exe

c:\windows\system32\dllhost.exe

c:\windows\system32\smartscreen.exe

brokerplugin.exe

c:\windows\syswow64\dllhost.exe

c:\users\wadef\appdata\roaming\spotify\spotify.exe

c:\windows\system32\spool\prtprocs\x64\cnmpdhl.dll

c:\windows\system32\cnmlmhl.dll

scheduleeventaction.exe

c:\program files\common files\microsoft shared\clicktorun\officec2rclient.exe

googleupdate.exe

%systemroot%\system32\musnotification.exe

installer.exe

c:\windows\syswow64\powermgrinst.exe

c:\program files\common files\mcafee\dynamicappdownloader\dadupdater.exe

c:\windows\system32\reg.exe

c:\windows\system32\drivers\lenovo\udc\data\infbackup\udcinfinstaller.exe

c:\windows\system32\smartstandbyinst.exe

c:\windows\system32\drivers\lenovo\udc\service\udcuseragent.exe

c:\program files\microsoft office\root\office16\npspwrap.dll

c:\program files\microsoft office\root\vfs\programfilesx86\microsoft office\office16\npspwrap.dll

c:\program files\malwarebytes\anti-malware\mbamservice.exe

c:\windows\system32\synahelperservice108.exe

c:\windows\system32\drivers\applelowerfilter.sys

c:\windows\system32\driverstore\filerepository\ialpss2_gpio2_tgl.inf

c:\windows\system32\driverstore\filerepository\ialpss2_i2c_tgl.inf

ibmpmdrv.sys

c:\windows\system32\drivers\mbamswissarmy.sys

c:\windows\system32\drivers\netaapl64.sys

c:\windows\system32\drivers\tap0901.sys

c:\windows\system32\drivers\wddevflt.sys

c:\windows\system32\drivers\wd\wdnisdrv.sys

c:\users\wadef\downloads\frst.txt

c:\users\wadef\downloads\seller's disclosure notice-1.pdf

c:\users\wadef\downloads\texas-motor-vehicle-bill-of-sale_2023_06_21.pdf

c:\program files\mozilla firefox  2023-06-20 18:58 - 2023-06-20 18:58 - 000675850 _____ c:\users\wadef\downloads\exected contract - 2624 bantry.pdf

c:\users\wadef\downloads\the beer truck cash flow 2023-06-20-12 13.pdf

09.pdf

c:\users\wadef\downloads\texas dps - schedule appointment.pdf

c:\windows\system32\k202_type_0_restore.txt

c:\programdata\canon  2023-06-05 05:19 - 2023-06-05 05:26 - 000000000 ____d c:\users\wadef\appdata\roaming\canon  2023-06-05 05:19 - 2023-06-05 05:19 - 009654080 _____ c:\users\wadef\downloads\mas2-win-101_5_0-ea34_2.exe

c:\users\wadef\downloads\reynolds hipaa.pdf

c:\windows\inf  2023-06-24 11:57 - 2022-02-14 10:07 - 000000000 ____d c:\programdata\mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38  2023-06-24 11:56 - 2021-05-21 09:25 - 000000000 ___rd c:\users\wadef\google drive  2023-06-24 11:55 - 2023-05-22 08:13 - 000000006 ____h c:\windows\tasks\sa.dat

c:\users\wadef\appdata\local\comms  2023-06-14 11:00 - 2023-05-22 08:13 - 000003714 _____ c:\windows\system32\tasks\googleupdatetaskmachineua  2023-06-14 11:00 - 2023-05-22 08:13 - 000003590 _____ c:\windows\system32\tasks\googleupdatetaskmachinecore  2023-06-14 02:03 - 2022-05-07 00:24 - 000000000 ____d c:\programdata\usoprivate  2023-06-14 01:49 - 2022-08-06 09:00 - 000000000 ____d c:\users\wadef\appdata\roaming\meetings  2023-06-14 01:47 - 2023-05-22 08:08 - 000471216 _____ c:\windows\system32\fntcache.dat

c:\windows\syswow64\printconfig.dll

onedrivesetup.exe

c:\program files\windowsapps\e046963f.ai

c:\program files\adobe\acrobat dc\acrobat\adnotificationmanager.exe

c:\users\wadef\appdata\local\microsoft\teams\current\teams.exe

c:\program files\google\drive\googledrivesync64.dll

c:\program files\winrar\rarext.dll

c:\program files\malwarebytes\anti-malware\mbshlext.dll

cnmpu2.dll

cns2_img.dll

c:\program files\microsoft office\root\office16\msosb.dll

c:\windows\system32\mscoree.dll

c:\program files\microsoft office\root\office16\outlook.exe

c:\users\wadef\appdata\roaming\zoom\bin_00\zoom.exe

c:\users\wadef\appdata\roaming\zoom\bin\zoom.exe

itunes.exe

msteams.exe

firefox.exe

systemsettings.exe

addition.txt

76.0.3.0

172.20.10.1

1.60.1.15

5.70.0.0

75.0.3.0

https://www.loopnet.com

https://hlmls.paragonrels.com

https://www.bizjournals.com

https://www.instagram.com

https://www.blinds.com

HKLM-x32\...\Run

HKU\S-1-5-20\...\Run

HKU\S-1-5-18\...\Run

HKLM\...\Print\Monitors\Canon

HKLM\Software\...\Authentication\Credential

HKU\S-1-5-21-2401957225-3018362449-1573189809-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension

HKLM-x32

HKLM-x32\...\Canon

HKLM-x32\...\CANONIJPLM100

HKLM\...\GIMP-2_is1

HKLM-x32\...\VantageSRV_is1

HKLM-x32\...\Microsoft

HKU\S-1-5-21-2401957225-3018362449-1573189809-1001\...\Teams

HKLM\...\MozillaMaintenanceService

HKU\S-1-5-21-2401957225-3018362449-1573189809-1001\...\Spotify

HKU\S-1-5-21-2401957225-3018362449-1573189809-1001\...\ZoomUMX

HKU\S-1-5-21-2401957225-3018362449-1573189809-1001\Software\Microsoft\Internet

HKU\S-1-5-21-2401957225-3018362449-1573189809-1001\Control