bitdefender.com

microsoft.com

hydra.sdk.windows

battle.net

valorant.live

microsoft.photos

www.openssl.org

greatmarlowschool-files.sharepoint.com

system.windows

ms.internal.culturepreservingexecutioncontext.run

windows.media

bdtbe@bitdefender.com

frst.txt

steamwebhelper.exe

discoverysrv.exe

c:\program files\bitdefender\bitdefender security\bdagent.exe

c:\program files\bitdefender\bitdefender security\bdwtxag.exe

c:\program files\nvidia corporation\nvcontainer\nvcontainer.exe

c:\program files\nvidia corporation\nvidia geforce experience\nvidia share.exe

c:\users\alastair\appdata\local\programs\opera gx\opera.exe

sbadgyfx.exe

explorer.exe

apcent.exe

googlecrashhandler.exe

msedge.exe

ledkeeper.exe

helper.exe

adjustservice.exe

c:\program files\bitdefender agent\redline\bdredline.exe

c:\program files\bitdefender\bitdefender vpn\bdvpnservice.exe

ctaudsvc.exe

expressvpn.sys

vpnservice.exe

gcloud.exe

c:\program files\common files\microsoft shared\clicktorun\officeclicktorun.exe

gamingservicesnet.exe

mysticlight2_service.exe

c:\windows\system32\iprosetmonitor.exe

c:\windows\system32\driverstore\filerepository\nv_dispi.inf

c:\windows\system32\driverstore\filerepository\realtekservice.inf

nortonsecurity.exe

svchost.exe

c:\windows\system32\dllhost.exe

c:\windows\system32\securityhealthhost.exe

c:\windows\system32\wlanext.exe

c:\windows\syswow64\muachost.exe

c:\program files\bitdefender\bitdefender vpn\bdvpnapp.exe

expressvpnnotificationservicestarter.exe

c:\program files\microsoft onedrive\onedrive.exe

c:\program files\ccleaner\ccleaner64.exe

c:\users\alastair\appdata\local\programs\opera gx\assistant\browser_assistant.exe

c:\users\alastair\appdata\local\medal\update.exe

overwolflauncher.exe

c:\windows\system32\cnmlmbr.dll

c:\program files\microsoft office\root\office16\onenotem.exe

c:\program files\microsoft office\root\office16\msoia.exe

c:\program files\common files\av\norton security\upgrade.exe

c:\program files\ccleaner\ccleanerbugreport.exe

c:\program files\ccleaner\ccupdate.exe

c:\program files\microsoft onedrive\onedrivestandaloneupdater.exe

graphicscardenginestarter.exe

c:\windows\system32\omadmclient.exe

sensord.exe

c:\program files\common files\microsoft shared\clicktorun\officesvcmgr.exe

c:\program files\nvidia corporation\update core\nvprofileupdater64.exe

c:\windows\system32\eosnotify.exe

c:\program files\amd\cnext\cnext\rsservcmd.exe

c:\program files\ccleaner\ccleaner.exe

nvnodejslauncher.exe

c:\program files\amd\cnext\cnext\cncmd.exe

c:\program files\nvidia corporation\nvidia geforce experience\nvidia geforce experience.exe

setup.exe

c:\program files\bluestacks_nxt\bluestackshelper.exe

updates.json

c:\program files\videolan\vlc\npvlc.dll

c:\program files\microsoft office\root\vfs\programfilesx86\microsoft office\office16\npspwrap.dll

c:\windows\system32\applechargersrv.exe

c:\windows\brltty\bin\brltty.exe

easyanticheat_eos.exe

filesynchelper.exe

c:\windows\system32\lxss\wslclient.dll

msicommservice.exe

msiddrservice.exe

msisuperioservice.exe

onedriveupdaterservice.exe

c:\program files\windows defender advanced threat protection\mssense.exe

nissrv.exe

c:\windows\system32\drivers\afxfilt.sys

c:\windows\system32\amdryzenmasterdriver.sys

amdsafd.sys

c:\windows\system32\drivers\applecharger.sys

c:\windows\system32\drivers\atc.sys

c:\windows\system32\drivers\bdelam.sys

c:\windows\system32\drivers\bduefiscan.sys

bhdrvx64.sys

c:\windows\system32\drivers\btha2dp.sys

ccsetx64.sys

c:\windows\system32\drivers\ctiio64.sys

c:\windows\system32\drivers\ene.sys

c:\windows\system32\drivers\expressvpn-tun.sys

c:\windows\system32\drivers\gemma.sys

idsvia64.sys

c:\windows\system32\drivers\msio64.sys

c:\windows\system32\drivers\mtkwl6ex.sys

c:\windows\system32\driverstore\filerepository\nvmoduletracker.inf

srtsp64.sys

symefasi64.sys

c:\windows\system32\drivers\symevent64x86.sys

ironx64.sys

c:\windows\system32\drivers\tap0901.sys

c:\windows\system32\drivers\tapwindscribe0901.sys

c:\windows\system32\drivers\usbcharger.sys

c:\windows\system32\drivers\vlflt.sys

c:\windows\system32\drivers\wd\wdfilter.sys

c:\windows\system32\drivers\windscribesplittunnel.sys

wpctrldrv.sys

nahimic_mirroring.sys

c:\users\alastair\downloads\frst64.exe

c:\windows\system32\vulkaninfo.exe

c:\windows\syswow64\vulkaninfo.exe

c:\windows\system32\vulkan-1-999-0-0-0.dll

c:\windows\syswow64\opencl.dll

c:\windows\syswow64\vulkan-1.dll

c:\windows\system32\nvofapi64.dll

c:\windows\syswow64\nvfbc.dll

c:\windows\syswow64\nvifr.dll

c:\windows\system32\nvidia-smi.exe

c:\windows\syswow64\nvcuvid.dll

c:\windows\syswow64\nvcuda.dll

c:\windows\system32\nvcuda.dll

c:\windows\system32\nvcpl.dll

c:\windows\system32\drivers\rt640x64.sys

c:\windows\system32\drivers\bt_ram_code_mt7961_1_2_hdr_ccn21.bin

c:\windows\system32\drivers\bt_ram_code_mt7902_1_1_hdr.bin

c:\windows\system32\drivers\bt_ram_code_mt7922_1_1_hdr_ccn21.bin

c:\windows\system32\drivers\mtkbt0.dat

c:\windows\system32\drivers\mtkwl2_2.dat

c:\windows\system32\drivers\mtkwl1.dat

c:\windows\system32\drivers\wifi_ram_code_mt7922_1.bin

c:\windows\system32\drivers\wifi_mt7922_patch_mcu_1_1_hdr.bin

c:\windows\system32\drivers\wifi_mt7961_patch_mcu_1_2_hdr.bin

c:\windows\system32\drivers\mtkwl1_2.dat

c:\users\alastair\downloads\snowsgiving_gift_dec_5.zip

c:\programdata\microsoft\windows\start menu\programs\creative 2022-11-24 17:19 - 2015-05-29 17:57 - 000089600 _____ c:\windows\system32\cmdrtr64.dll

c:\windows\syswow64\cmdrtr.dll

c:\windows\lastgood.tmp

c:\windows\system32\drivers\rtaiodat.dat

c:\users\alastair\appdata\local\citra 2022-12-10 16:15 - 2020-06-04 14:04 - 000000000 ____d c:\users\alastair 2022-12-10 15:59 - 2019-01-04 19:11 - 000000000 ____d c:\users\alastair\appdata\local\d3dscache 2022-12-10 15:36 - 2022-08-22 22:03 - 000000000 ____d c:\programdata\boost_interprocess 2022-12-10 13:55 - 2019-12-07 09:14 - 000000000 ____d c:\windows\system32\ndf 2022-12-10 12:25 - 2022-06-24 11:40 - 000000000 ____d c:\programdata\nvidia 2022-12-10 11:38 - 2020-06-04 14:03 - 000000000 ____d c:\windows\system32\sleepstudy 2022-12-10 11:23 - 2020-06-04 14:09 - 000005816 _____ c:\windows\system32\perfstringbackup.ini

c:\dumpstack.log

c:\windows\syswow64\nvapi.dll

c:\windows\system32\xgamecontrol.exe

c:\windows\system32\xgameruntime.dll

c:\windows\system32\gamingservicesproxy.dll

c:\windows\system32\gamingtcuihelpers.dll

c:\windows\system32\vmickrnl.dll

c:\windows\system32\bash.exe

c:\windows\system32\drivers\lxss.sys

c:\windows\system32\windowssandboxclient.exe

c:\windows\system32\vmcomputeproxy.dll

c:\windows\system32\wcsetupagent.exe

c:\windows\system32\p9np.dll

c:\windows\syswow64\p9np.dll

c:\windows\system32\drivers\vfpext.sys

c:\windows\system32\vmemulatedstorage.dll

c:\windows\system32\vmserial.dll

c:\windows\system32\vmsynthnic.dll

c:\windows\system32\vmsynthstor.dll

c:\windows\system32\vmsmb.dll

c:\windows\system32\vfpctrl.exe

c:\windows\system32\vmdynmem.dll

c:\windows\system32\vmcrashdump.dll

c:\windows\system32\vmsynthfcvdev.dll

c:\windows\system32\gpupvdev.dll

c:\windows\system32\vmtpm.dll

c:\windows\system32\hvc.exe

c:\windows\system32\vmhgs.dll

c:\windows\system32\vfpapi.dll

c:\windows\system32\sbresources.dll

c:\windows\system32\drivers\vmbusr.sys

c:\windows\system32\tpmengum.dll

c:\windows\system32\netmgmtif.dll

c:\windows\system32\nmbind.exe

c:\windows\system32\vrdumed.dll

c:\windows\system32\vmusrv.dll

c:\windows\system32\vmvirtio.dll

c:\windows\system32\drivers\hvsocketcontrol.sys

c:\windows\system32\hypervsysprepprovider.dll

c:\windows\system32\remotefilebrowse.dll

c:\windows\system32\vmsifcore.dll

c:\windows\system32\vmwpevents.dll

c:\windows\system32\hgattest.dll

c:\windows\system32\vmconnect.exe

c:\windows\system32\hgsclientwmi.dll

c:\windows\system32\vmmsprox.dll

c:\windows\system32\vmstaging.dll

c:\windows\system32\vmplatformca.exe

c:\windows\system32\attestationwmiprovider.dll

c:\windows\system32\hgclientserviceps.dll

c:\windows\system32\f1db7d81-95be-4911-935a-8ab71629112a_vmsvcext_sys.dll

c:\windows\system32\drivers\vhdparser.sys

c:\windows\system32\drivers\passthruparser.sys

c:\windows\system32\f989b52d-f928-44a3-9bf1-bf0c1da6a0d6_hyperv-devicevirtualization.dll

c:\windows\system32\c4d66f00-b6f0-4439-ac9b-c5ea13fe54d7_hyperv-computecore.dll

c:\windows\system32\gameinputredist.dll

c:\users\alastair\appdata\local\cur4b8c.tmp

c:\users\alastair\appdata\local\curb0e8.tmp

c:\users\alastair\appdata\local\curbf0c.tmp

onedrivesetup.exe

filesyncshell64.dll

bushell.dll

navshext.dll

chrome_proxy.exe

bdr_info.dll

libegl.dll

c:\users\alastair\appdata\local\citra\canary-mingw\libbrotlicommon.dll

c:\users\alastair\appdata\local\citra\canary-mingw\libbz2-1.dll

c:\users\alastair\appdata\local\citra\canary-mingw\libgraphite2.dll

c:\users\alastair\appdata\local\citra\canary-mingw\libjpeg-8.dll

c:\users\alastair\appdata\local\citra\canary-mingw\libpcre2-8-0.dll

c:\users\alastair\appdata\local\citra\canary-mingw\libssp-0.dll

c:\users\alastair\appdata\local\citra\canary-mingw\sdl2.dll

ctloadrs.dll

c:\users\alastair\appdata\local\citra\canary-mingw\avformat-58.dll

c:\users\alastair\appdata\local\citra\canary-mingw\swresample-3.dll

c:\users\alastair\appdata\local\citra\canary-mingw\libiconv-2.dll

yccv3.dll

chrome_elf.dll

0-0.dll

c:\users\alastair\appdata\local\citra\canary-mingw\libssl-1_1-x64.dll

c:\users\alastair\appdata\local\citra\canary-mingw\imageformats\qico.dll

c:\users\alastair\appdata\local\citra\canary-mingw\mediaservice\dsengine.dll

c:\users\alastair\appdata\local\citra\canary-mingw\qt5core.dll

c:\users\alastair\appdata\local\citra\canary-mingw\qt5multimedia.dll

c:\users\alastair\appdata\local\citra\canary-mingw\qt5widgets.dll

osvi.dll

v2.bin

c:\program files\bitdefender\bitdefender security\bdtbie.dll

c:\program files\microsoft office\root\office16\ochelper.dll

c:\program files\bitdefender\bitdefender security\antispam32\bdtbie.dll

c:\program files\microsoft office\root\vfs\programfilesx86\microsoft office\office16\ochelper.dll

c:\program files\microsoft office\root\vfs\programfilesx86\microsoft office\office16\msosb.dll

c:\users\alastair\appdata\local\microsoft\teams\current\teams.exe

redprelauncher.exe

c:\program files\microsoft office\root\office16\outlook.exe

c:\users\alastair\appdata\roaming\zoom\bin\zoom.exe

theforest.exe

ddlc.exe

summer.exe

skyrimselauncher.exe

guide.exe

game.exe

c:\users\alastair\onedrive\desktop\davinci\bmdpaneld.exe

c:\users\alastair\onedrive\desktop\davinci\jlcooperpaneldaemon.exe

c:\users\alastair\onedrive\desktop\davinci\tangentpaneldaemon.exe

c:\users\alastair\onedrive\desktop\davinci\fuscript.exe

portal2.exe

launcherpatcher.exe

c:\program files\bluestacks_nxt\hd-player.exe

overwolfbrowser.exe

c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe

kernelbase.dll

system.dll

threading.exe

c:\users\alastair\onedrive\pictures\synapse-launcher-11-17-21\synapse launcher.exe

symamsi.dll

798df635edf977b6135915f4e3c513ef

26.0.1.233

22.20.5.39

10.251.0.1

8.8.8.8

100.64.100.1

3.26.0.154

1.0.0.83

7.0.4.4

25.0.2.14

0.18.50.21

22.80.1.1

1.0.3.9

1.0.1.8

1.0.8.0

1.0.0.0

12.37.0.85

26.2.0.1

21.90.3.2

3.68.0.0

0.212.1.5

2.1.5.1

2.10.91.91

1.0.61.0

13.57.56.210

172.18.48.1

0.208.1.2

10.51.1.252

10.51.1.144

https://download.bitdefender.com/windows/desktop/connect/antitracker/updates.json

https://greatmarlowschool-files.sharepoint.com

HKLM-x32\...\Run

HKU\S-1-5-21-1557300725-8673328-3402350074-1001\...\Run

HKLM\...\Windows

HKLM\Software\Microsoft\Active

HKLM\...\Firefox\Extensions

HKLM-x32\...\Firefox\Extensions

HKLM\...\Chrome\Extension

HKU\S-1-5-21-1557300725-8673328-3402350074-1001

HKLM-x32

HKLM-x32\...\InstallShield_

HKLM-x32\...\Battle.net

HKLM\...\BlueStacks_nxt

HKLM\...\CCleaner

HKU\S-1-5-21-1557300725-8673328-3402350074-1001\...\Discord

HKLM\...\Genshin

HKLM\...\PROSetDX

HKLM-x32\...\Microsoft

HKU\S-1-5-21-1557300725-8673328-3402350074-1001\...\Teams

HKU\S-1-5-21-1557300725-8673328-3402350074-1001\...\798df635edf977b6135915f4e3c513ef

HKLM-x32\...\Overwatch

HKU\S-1-5-21-1557300725-8673328-3402350074-1001\...\playway-launcher

HKLM-x32\...\roblox-player-admin

HKLM-x32\...\Rockstar

HKU\S-1-5-21-1557300725-8673328-3402350074-1001\...\Spotify

HKLM-x32\...\TreeSize

HKU\S-1-5-21-1557300725-8673328-3402350074-1001\...\Riot

HKLM\...\57979c68-f490-55b8-8fed-8b017a5af2fe

HKLM\...\VulkanRT1.1.70.0

HKU\S-1-5-21-1557300725-8673328-3402350074-1001\...\ZoomUMX

HKLM\Software\Microsoft\Internet

HKU\S-1-5-21-1557300725-8673328-3402350074-1001\...\sharepoint.com

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System

HKLM\...\StartupApproved\Run

HKU\S-1-5-21-1557300725-8673328-3402350074-1001\...\StartupApproved\StartupFolder