microsoft.media

www.google.com.sg

videolan.org

microsoft.com

battle.net

microsoft.photos

dllinject.bj

rd8yqtu.zip

c:\users\admin\desktop\frst64.exe

c:\program files\adobe\adobe creative cloud experience\ccxprocess.exe

service.exe

epicgameslauncher.exe

node.js

c:\program files\adobe\adobe creative cloud\acc\adobe crash processor.exe

c:\program files\common files\adobe\creative cloud libraries\cclibrary.exe

discord.exe

adobecollabsync.exe

c:\users\admin\appdata\local\megasync\megasync.exe

msbuild.exe

services.exe

armsvc.exe

c:\program files\bonjour\mdnsresponder.exe

c:\program files\ipod\bin\ipodservice.exe

c:\program files\hpprintscandoctor\hpprintscandoctorservice.exe

lms.exe

jhi_service.exe

msmpeng.exe

c:\program files\nvidia corporation\nvcontainer\nvcontainer.exe

container.exe

c:\windows\runsw.exe

rtkauduservice64.exe

adobenotificationclient.exe

calculatorapp.exe

hxtsr.exe

media.pl

c:\windows\immersivecontrolpanel\systemsettings.exe

c:\windows\system32\mousocoreworker.exe

c:\windows\system32\sppextcomobj.exe

updaterstartuputility.exe

c:\users\admin\appdata\local\discord\update.exe

c:\users\admin\appdata\local\microsoft\onedrive\update\onedrivesetup.exe

c:\windows\system32\adobepdf.dll

adobearm.exe

c:\users\admin\desktop\adwcleaner.exe

c:\users\admin\desktop\esetonlinescanner.exe

c:\program files\hpprintscandoctor\hpprinterhealthmonitor.exe

intelpttekrecertification.exe

c:\program files\common files\microsoft shared\clicktorun\officec2rclient.exe

%programfiles%\rempl\remsh.exe

c:\program files\mozilla firefox\firefox.exe

c:\programdata\nvidia\nvcontainerbatteryboostcheck.log

c:\program files\nvidia corporation\nvidia geforce experience\nvidia geforce experience.exe

c:\program files\nvidia corporation\update core\nvprofileupdater64.exe

c:\program files\videolan\vlc\npvlc.dll

npspwrap.dll

npadobeaamdetect32.dll

rzsdkserver.exe

c:\windows\system32\drivers\btha2dp.sys

mpksldrv.sys

c:\windows\syswow64\drivers\pcasp60.sys

c:\windows\system32\drivers\rzmpos.sys

c:\windows\system32\drivers\tap0901.sys

c:\windows\system32\drivers\wd\wdboot.sys

c:\windows\system32\drivers\wd\wdnisdrv.sys

c:\users\admin\desktop\ata 75 overview.xlsx

c:\users\admin\appdata\roaming\microsoft\windows\start menu\programs\zoom   2023-10-16 22:25 - 2023-10-16 22:26 - 091949099 _____ c:\users\admin\desktop\iae pw1100g_b1b2_additional engine_feb23_st engineering_x.pdf

c:\users\admin\downloads\hmn-479.mp4

c:\users\admin\downloads\hmn 486 mp4.mp4

c:\program files\mozilla firefox   2023-10-11 21:36 - 2023-10-11 21:36 - 000000000 ____d c:\programdata\plug   2023-10-10 21:31 - 2023-10-10 21:31 - 000000000 ____d c:\program files\ruxim   2023-09-28 14:17 - 2023-09-28 14:20 - 033806670 _____ c:\users\admin\downloads\dfe2fb8695c001972a4e362891a6d3181672147803-640-360-921-h264.mp4

c:\users\admin\appdata\roaming\telegram desktop   2023-10-18 11:04 - 2018-02-25 21:53 - 000000000 ____d c:\users\admin\appdata\roaming\microsoft\excel   2023-10-18 09:52 - 2018-02-03 20:26 - 000000000 ____d c:\users\admin\appdata\local\packages   2023-10-18 07:18 - 2021-02-13 22:55 - 000795738 _____ c:\windows\system32\perfstringbackup.ini

c:\dumpstack.log

c:\users\public\accountpictures   2023-10-12 21:41 - 2019-12-07 17:14 - 000000000 ___rd c:\windows\immersivecontrolpanel   2023-10-12 21:40 - 2021-02-13 22:45 - 000457416 _____ c:\windows\system32\fntcache.dat

c:\windows\syswow64\msclmd.dll

c:\windows\syswow64\printconfig.dll

c:\users\admin\appdata\local\update_progress.txt

onedrivesetup.exe

c:\users\admin\appdata\local\megasync\shellextx64.dll

contextmenushim64.dll

c:\program files\winrar\rarext32.dll

c:\users\admin\appdata\local\megasync\qt5core.dll

acroiefavstub.dll

msosb.dll

c:\windows\web\wallpaper\theme1\img13.jpg

c:\program files\itunes\itunes.exe

d:\program files\nox\bin\nox.exe

mdnsresponder.exe

c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe

c:\users\admin\appdata\roaming\zoom\bin\airhost.exe

spotify.exe

msedgewebview2.exe

c:\users\admin\downloads\file_part1.zip

1.zip

rd8yqtu.zip

c:\windows\system32\tasks\isfixedsize\instance   detection origin: local machine   detection type: fastpath   detection source: real-time protection   process name: c:\windows\system32\svchost.exe

msoxmlmf.dll

192.168.1.254

172.17.5.36

8.3.0.61

2.6.0.1

3.1.0.1

1.0.0.0

12.9.4.102

3.20.2.34

1.10.0.0

http://www.google.com

http://myboeingfleet.com

HKLM-x32\...\Run

HKU\S-1-5-21-1074230309-3786456183-1573165190-1001\...\Run

HKLM\...\Print\Monitors\Adobe

HKU\S-1-5-21-1074230309-3786456183-1573165190-1001

HKLM-x32\...\Firefox\Extensions

HKLM-x32

HKLM-x32\...\AdobeGenuineService

HKU\S-1-5-21-1074230309-3786456183-1573165190-1001\...\Discord

HKLM-x32\...\GSmartControl

HKLM\...\O365HomePremRetail

HKU\S-1-5-21-1074230309-3786456183-1573165190-1001\...\OneDriveSetup.exe

HKLM\...\MozillaMaintenanceService

HKLM\...\VLC

HKLM-x32\...\World

HKU\S-1-5-21-1074230309-3786456183-1573165190-1001_Classes\CLSID

HKU\S-1-5-21-1074230309-3786456183-1573165190-1001\Software\Microsoft\Internet

HKLM\System\CurrentControlSet\Control\Session

HKU\S-1-5-21-1074230309-3786456183-1573165190-1001\Control

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer