d9312f8c6e473004f4a50b533de30bee30f7a8763ac0c567ca1b0dd2eb017afa

Analysis

max time kernel
370s
max time network
967s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
24/03/2023, 21:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

BorderlessGaming.exe
Size

2.8MB
MD5

744fc319f32b3ed3417bd93d6e3d5ddb
SHA1

ac7dcbfcfba00710666f390573fa818d641be7e1
SHA256

d9312f8c6e473004f4a50b533de30bee30f7a8763ac0c567ca1b0dd2eb017afa
SHA512

0e3027e521438aedbe9bbf9959c9487e38638a4364ae1774c690cabda3b275d1b4bd40b405fbe9ccd75c5a1f900b521b39d58c3e656f76f68e87803c638666c3
SSDEEP

49152:WkYI2jLBR5MZqMjXIU83E2eODzR9jA4Zn8aIYgm6yVYNo4TAvwNAtB/jG:+R5KvjXIU87a8IYuy2NoWAvwNwB/C

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file

Executes dropped EXE 3 IoCs

pid	Process
2764	BorderlessGaming9.5.6_admin_setup.exe
2788	BorderlessGaming9.5.6_admin_setup.tmp
2060	BorderlessGaming.exe

Loads dropped DLL 16 IoCs

pid	Process
2764	BorderlessGaming9.5.6_admin_setup.exe
2788	BorderlessGaming9.5.6_admin_setup.tmp
2788	BorderlessGaming9.5.6_admin_setup.tmp
2788	BorderlessGaming9.5.6_admin_setup.tmp
2788	BorderlessGaming9.5.6_admin_setup.tmp
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012
Legitimate hosting services abused for malware hosting/C2 1 TTPs

Web Service
T1102

Drops file in Program Files directory 54 IoCs

description	ioc	Process
File opened for modification	C:\Program Files (x86)\Borderless Gaming\es\Microsoft.Win32.TaskScheduler.resources.dll	BorderlessGaming9.5.6_admin_setup.tmp
File opened for modification	C:\Program Files (x86)\Borderless Gaming\steam_api.dll	BorderlessGaming9.5.6_admin_setup.tmp
File created	C:\Program Files (x86)\Borderless Gaming\en-US\is-I94AG.tmp	BorderlessGaming9.5.6_admin_setup.tmp
File created	C:\Program Files (x86)\Borderless Gaming\it\is-IGLHC.tmp	BorderlessGaming9.5.6_admin_setup.tmp
File opened for modification	C:\Program Files (x86)\Borderless Gaming\protobuf-net.dll	BorderlessGaming9.5.6_admin_setup.tmp
File opened for modification	C:\Program Files (x86)\Borderless Gaming\en\BorderlessGaming.resources.dll	BorderlessGaming9.5.6_admin_setup.tmp
File created	C:\Program Files (x86)\Borderless Gaming\is-4I5GI.tmp	BorderlessGaming9.5.6_admin_setup.tmp
File created	C:\Program Files (x86)\Borderless Gaming\is-732CO.tmp	BorderlessGaming9.5.6_admin_setup.tmp
File opened for modification	C:\Program Files (x86)\Borderless Gaming\de\BorderlessGaming.resources.dll	BorderlessGaming9.5.6_admin_setup.tmp
File created	C:\Program Files (x86)\Borderless Gaming\is-1O9ID.tmp	BorderlessGaming9.5.6_admin_setup.tmp
File opened for modification	C:\Program Files (x86)\Borderless Gaming\Facepunch.Steamworks.dll	BorderlessGaming9.5.6_admin_setup.tmp
File opened for modification	C:\Program Files (x86)\Borderless Gaming\DotNetZip.dll	BorderlessGaming9.5.6_admin_setup.tmp
File created	C:\Program Files (x86)\Borderless Gaming\is-O6HM5.tmp	BorderlessGaming9.5.6_admin_setup.tmp
File created	C:\Program Files (x86)\Borderless Gaming\is-36LPC.tmp	BorderlessGaming9.5.6_admin_setup.tmp
File opened for modification	C:\Program Files (x86)\Borderless Gaming\BorderlessGaming.exe	BorderlessGaming9.5.6_admin_setup.tmp
File created	C:\Program Files (x86)\Borderless Gaming\is-MN2RC.tmp	BorderlessGaming9.5.6_admin_setup.tmp
File created	C:\Program Files (x86)\Borderless Gaming\en\is-US684.tmp	BorderlessGaming9.5.6_admin_setup.tmp
File opened for modification	C:\Program Files (x86)\Borderless Gaming\fr\Microsoft.Win32.TaskScheduler.resources.dll	BorderlessGaming9.5.6_admin_setup.tmp
File opened for modification	C:\Program Files (x86)\Borderless Gaming\BorderlessGaming.Logic.dll	BorderlessGaming9.5.6_admin_setup.tmp
File created	C:\Program Files (x86)\Borderless Gaming\is-OBRK0.tmp	BorderlessGaming9.5.6_admin_setup.tmp
File created	C:\Program Files (x86)\Borderless Gaming\ru\is-IL9K3.tmp	BorderlessGaming9.5.6_admin_setup.tmp
File opened for modification	C:\Program Files (x86)\Borderless Gaming\de\Microsoft.Win32.TaskScheduler.resources.dll	BorderlessGaming9.5.6_admin_setup.tmp
File created	C:\Program Files (x86)\Borderless Gaming\de\is-E6ML3.tmp	BorderlessGaming9.5.6_admin_setup.tmp
File created	C:\Program Files (x86)\Borderless Gaming\pl\is-T4FVP.tmp	BorderlessGaming9.5.6_admin_setup.tmp
File opened for modification	C:\Program Files (x86)\Borderless Gaming\zh-CN\BorderlessGaming.resources.dll	BorderlessGaming9.5.6_admin_setup.tmp
File created	C:\Program Files (x86)\Borderless Gaming\is-NDROE.tmp	BorderlessGaming9.5.6_admin_setup.tmp
File created	C:\Program Files (x86)\Borderless Gaming\is-JTU8T.tmp	BorderlessGaming9.5.6_admin_setup.tmp
File created	C:\Program Files (x86)\Borderless Gaming\de\is-QO4G4.tmp	BorderlessGaming9.5.6_admin_setup.tmp
File opened for modification	C:\Program Files (x86)\Borderless Gaming\unins000.dat	BorderlessGaming9.5.6_admin_setup.tmp
File created	C:\Program Files (x86)\Borderless Gaming\is-GVGNK.tmp	BorderlessGaming9.5.6_admin_setup.tmp
File created	C:\Program Files (x86)\Borderless Gaming\is-70U65.tmp	BorderlessGaming9.5.6_admin_setup.tmp
File opened for modification	C:\Program Files (x86)\Borderless Gaming\Microsoft.Win32.TaskScheduler.dll	BorderlessGaming9.5.6_admin_setup.tmp
File created	C:\Program Files (x86)\Borderless Gaming\is-5R97D.tmp	BorderlessGaming9.5.6_admin_setup.tmp
File created	C:\Program Files (x86)\Borderless Gaming\is-A5C8O.tmp	BorderlessGaming9.5.6_admin_setup.tmp
File created	C:\Program Files (x86)\Borderless Gaming\fr\is-OK04O.tmp	BorderlessGaming9.5.6_admin_setup.tmp
File created	C:\Program Files (x86)\Borderless Gaming\zh-CN\is-I12MT.tmp	BorderlessGaming9.5.6_admin_setup.tmp
File opened for modification	C:\Program Files (x86)\Borderless Gaming\pl\Microsoft.Win32.TaskScheduler.resources.dll	BorderlessGaming9.5.6_admin_setup.tmp
File opened for modification	C:\Program Files (x86)\Borderless Gaming\zh-CN\Microsoft.Win32.TaskScheduler.resources.dll	BorderlessGaming9.5.6_admin_setup.tmp
File created	C:\Program Files (x86)\Borderless Gaming\is-KCGMO.tmp	BorderlessGaming9.5.6_admin_setup.tmp
File created	C:\Program Files (x86)\Borderless Gaming\is-G89SC.tmp	BorderlessGaming9.5.6_admin_setup.tmp
File created	C:\Program Files (x86)\Borderless Gaming\zh-CN\is-61SMR.tmp	BorderlessGaming9.5.6_admin_setup.tmp
File opened for modification	C:\Program Files (x86)\Borderless Gaming\it\Microsoft.Win32.TaskScheduler.resources.dll	BorderlessGaming9.5.6_admin_setup.tmp
File created	C:\Program Files (x86)\Borderless Gaming\is-HKC1O.tmp	BorderlessGaming9.5.6_admin_setup.tmp
File created	C:\Program Files (x86)\Borderless Gaming\is-EKIRT.tmp	BorderlessGaming9.5.6_admin_setup.tmp
File created	C:\Program Files (x86)\Borderless Gaming\is-9DI14.tmp	BorderlessGaming9.5.6_admin_setup.tmp
File opened for modification	C:\Program Files (x86)\Borderless Gaming\ru\Microsoft.Win32.TaskScheduler.resources.dll	BorderlessGaming9.5.6_admin_setup.tmp
File created	C:\Program Files (x86)\Borderless Gaming\es\is-QSJ6L.tmp	BorderlessGaming9.5.6_admin_setup.tmp
File created	C:\Program Files (x86)\Borderless Gaming\is-BO045.tmp	BorderlessGaming9.5.6_admin_setup.tmp
File opened for modification	C:\Program Files (x86)\Borderless Gaming\en-US\BorderlessGaming.resources.dll	BorderlessGaming9.5.6_admin_setup.tmp
File created	C:\Program Files (x86)\Borderless Gaming\unins000.dat	BorderlessGaming9.5.6_admin_setup.tmp
File created	C:\Program Files (x86)\Borderless Gaming\is-RDCLB.tmp	BorderlessGaming9.5.6_admin_setup.tmp
File created	C:\Program Files (x86)\Borderless Gaming\is-41L74.tmp	BorderlessGaming9.5.6_admin_setup.tmp
File created	C:\Program Files (x86)\Borderless Gaming\is-0RJ9P.tmp	BorderlessGaming9.5.6_admin_setup.tmp
File opened for modification	C:\Program Files (x86)\Borderless Gaming\CommandLine.dll	BorderlessGaming9.5.6_admin_setup.tmp

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1324	1260	WerFault.exe	27

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
772	chrome.exe
772	chrome.exe
2788	BorderlessGaming9.5.6_admin_setup.tmp
2788	BorderlessGaming9.5.6_admin_setup.tmp
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe
Token: SeShutdownPrivilege	772	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
2788	BorderlessGaming9.5.6_admin_setup.tmp
2060	BorderlessGaming.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
2060	BorderlessGaming.exe
772	chrome.exe
2060	BorderlessGaming.exe
772	chrome.exe
772	chrome.exe
2060	BorderlessGaming.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
772	chrome.exe
2060	BorderlessGaming.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1260 wrote to memory of 1324	1260	BorderlessGaming.exe	28
PID 1260 wrote to memory of 1324	1260	BorderlessGaming.exe	28
PID 1260 wrote to memory of 1324	1260	BorderlessGaming.exe	28
PID 1260 wrote to memory of 1324	1260	BorderlessGaming.exe	28
PID 772 wrote to memory of 1488	772	chrome.exe	30
PID 772 wrote to memory of 1488	772	chrome.exe	30
PID 772 wrote to memory of 1488	772	chrome.exe	30
PID 772 wrote to memory of 396	772	chrome.exe	32
PID 772 wrote to memory of 396	772	chrome.exe	32
PID 772 wrote to memory of 396	772	chrome.exe	32
PID 772 wrote to memory of 396	772	chrome.exe	32
PID 772 wrote to memory of 396	772	chrome.exe	32
PID 772 wrote to memory of 396	772	chrome.exe	32
PID 772 wrote to memory of 396	772	chrome.exe	32
PID 772 wrote to memory of 396	772	chrome.exe	32
PID 772 wrote to memory of 396	772	chrome.exe	32
PID 772 wrote to memory of 396	772	chrome.exe	32
PID 772 wrote to memory of 396	772	chrome.exe	32
PID 772 wrote to memory of 396	772	chrome.exe	32
PID 772 wrote to memory of 396	772	chrome.exe	32
PID 772 wrote to memory of 396	772	chrome.exe	32
PID 772 wrote to memory of 396	772	chrome.exe	32
PID 772 wrote to memory of 396	772	chrome.exe	32
PID 772 wrote to memory of 396	772	chrome.exe	32
PID 772 wrote to memory of 396	772	chrome.exe	32
PID 772 wrote to memory of 396	772	chrome.exe	32
PID 772 wrote to memory of 396	772	chrome.exe	32
PID 772 wrote to memory of 396	772	chrome.exe	32
PID 772 wrote to memory of 396	772	chrome.exe	32
PID 772 wrote to memory of 396	772	chrome.exe	32
PID 772 wrote to memory of 396	772	chrome.exe	32
PID 772 wrote to memory of 396	772	chrome.exe	32
PID 772 wrote to memory of 396	772	chrome.exe	32
PID 772 wrote to memory of 396	772	chrome.exe	32
PID 772 wrote to memory of 396	772	chrome.exe	32
PID 772 wrote to memory of 396	772	chrome.exe	32
PID 772 wrote to memory of 396	772	chrome.exe	32
PID 772 wrote to memory of 396	772	chrome.exe	32
PID 772 wrote to memory of 396	772	chrome.exe	32
PID 772 wrote to memory of 396	772	chrome.exe	32
PID 772 wrote to memory of 396	772	chrome.exe	32
PID 772 wrote to memory of 396	772	chrome.exe	32
PID 772 wrote to memory of 396	772	chrome.exe	32
PID 772 wrote to memory of 396	772	chrome.exe	32
PID 772 wrote to memory of 396	772	chrome.exe	32
PID 772 wrote to memory of 396	772	chrome.exe	32
PID 772 wrote to memory of 484	772	chrome.exe	33
PID 772 wrote to memory of 484	772	chrome.exe	33
PID 772 wrote to memory of 484	772	chrome.exe	33
PID 772 wrote to memory of 436	772	chrome.exe	34
PID 772 wrote to memory of 436	772	chrome.exe	34
PID 772 wrote to memory of 436	772	chrome.exe	34
PID 772 wrote to memory of 436	772	chrome.exe	34
PID 772 wrote to memory of 436	772	chrome.exe	34
PID 772 wrote to memory of 436	772	chrome.exe	34
PID 772 wrote to memory of 436	772	chrome.exe	34
PID 772 wrote to memory of 436	772	chrome.exe	34
PID 772 wrote to memory of 436	772	chrome.exe	34
PID 772 wrote to memory of 436	772	chrome.exe	34
PID 772 wrote to memory of 436	772	chrome.exe	34
PID 772 wrote to memory of 436	772	chrome.exe	34
PID 772 wrote to memory of 436	772	chrome.exe	34
PID 772 wrote to memory of 436	772	chrome.exe	34
PID 772 wrote to memory of 436	772	chrome.exe	34

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Users\Admin\AppData\Local\Temp\BorderlessGaming.exe
"C:\Users\Admin\AppData\Local\Temp\BorderlessGaming.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1260
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1260 -s 540
  2⤵
  - Program crash
  PID:1324

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef68e9758,0x7fef68e9768,0x7fef68e9778
  2⤵
  PID:1488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1168 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:2
  2⤵
  PID:396
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1472 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:8
  2⤵
  PID:484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1636 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:8
  2⤵
  PID:436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2232 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:1
  2⤵
  PID:948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2196 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:1
  2⤵
  PID:1472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=3704 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:2
  2⤵
  PID:2064
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=1448 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:8
  2⤵
  PID:2152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=3796 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:1
  2⤵
  PID:2192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4028 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:8
  2⤵
  PID:2212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=1376 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:8
  2⤵
  PID:2252
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4032 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:8
  2⤵
  PID:2296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=1184 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:1
  2⤵
  PID:2488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=2232 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:1
  2⤵
  PID:2696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=4568 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:1
  2⤵
  PID:2216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=4572 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:1
  2⤵
  PID:2600
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=1592 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:8
  2⤵
  PID:2408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5312 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:8
  2⤵
  PID:1888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5332 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:8
  2⤵
  PID:1980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5468 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:8
  2⤵
  PID:2400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5316 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:8
  2⤵
  PID:2688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5376 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:8
  2⤵
  PID:2632
- C:\Users\Admin\Downloads\BorderlessGaming9.5.6_admin_setup.exe
  "C:\Users\Admin\Downloads\BorderlessGaming9.5.6_admin_setup.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:2764
- - C:\Users\Admin\AppData\Local\Temp\is-Q8UMF.tmp\BorderlessGaming9.5.6_admin_setup.tmp
    "C:\Users\Admin\AppData\Local\Temp\is-Q8UMF.tmp\BorderlessGaming9.5.6_admin_setup.tmp" /SL5="$80182,3856765,82432,C:\Users\Admin\Downloads\BorderlessGaming9.5.6_admin_setup.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Drops file in Program Files directory
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of FindShellTrayWindow
    PID:2788
  - - C:\Program Files (x86)\Borderless Gaming\BorderlessGaming.exe
      "C:\Program Files (x86)\Borderless Gaming\BorderlessGaming.exe"
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of FindShellTrayWindow
      Suspicious use of SendNotifyMessage
      PID:2060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=5304 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:1
  2⤵
  PID:2608
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4108 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:8
  2⤵
  PID:1404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3628 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:8
  2⤵
  PID:2228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=26 --mojo-platform-channel-handle=5300 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:1
  2⤵
  PID:1788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3436 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:8
  2⤵
  PID:2580
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3452 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:8
  2⤵
  PID:2740
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=29 --mojo-platform-channel-handle=5380 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:1
  2⤵
  PID:2800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=30 --mojo-platform-channel-handle=4800 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:1
  2⤵
  PID:2212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=31 --mojo-platform-channel-handle=4776 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:1
  2⤵
  PID:1900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5664 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:8
  2⤵
  PID:2860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4880 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:8
  2⤵
  PID:2668
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3548 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:8
  2⤵
  PID:2324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:8
  2⤵
  PID:1580
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=36 --mojo-platform-channel-handle=2456 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:1
  2⤵
  PID:2644
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3540 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:8
  2⤵
  PID:2164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5852 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:8
  2⤵
  PID:2220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5260 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:8
  2⤵
  PID:2152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=40 --mojo-platform-channel-handle=4168 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:1
  2⤵
  PID:992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=41 --mojo-platform-channel-handle=5432 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:1
  2⤵
  PID:2272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3504 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:8
  2⤵
  PID:1572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3676 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:8
  2⤵
  PID:2260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=44 --mojo-platform-channel-handle=3956 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:1
  2⤵
  PID:372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4116 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:8
  2⤵
  PID:2264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=46 --mojo-platform-channel-handle=3456 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:1
  2⤵
  PID:2244
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3520 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:8
  2⤵
  PID:2472
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5540 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:8
  2⤵
  PID:1092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3472 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:8
  2⤵
  PID:2604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5620 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:8
  2⤵
  PID:188
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=51 --mojo-platform-channel-handle=3272 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:1
  2⤵
  PID:2588
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=52 --mojo-platform-channel-handle=3676 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:1
  2⤵
  PID:2224
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=53 --mojo-platform-channel-handle=4556 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:1
  2⤵
  PID:3060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=54 --mojo-platform-channel-handle=5384 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:1
  2⤵
  PID:2840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4140 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:8
  2⤵
  PID:2920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4004 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:8
  2⤵
  PID:2716
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=57 --mojo-platform-channel-handle=916 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:1
  2⤵
  PID:2656
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=58 --mojo-platform-channel-handle=3928 --field-trial-handle=1320,i,2320676028114737493,10543131820493448305,131072 /prefetch:1
  2⤵
  PID:2596

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:1936

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x300
1⤵
PID:2480

C:\Users\Admin\AppData\Local\Temp\Temp1_rbxfpsunlocker-x64.zip\rbxfpsunlocker.exe
"C:\Users\Admin\AppData\Local\Temp\Temp1_rbxfpsunlocker-x64.zip\rbxfpsunlocker.exe"
1⤵
PID:372

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Web Service

T1102

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Borderless Gaming\BorderlessGaming.Logic.dll

Filesize
95KB

MD5
d2cc785f9f78c69b8ed8cc6c89047a64

SHA1
554e903441b433e743438f6e952b4dfef734faf5

SHA256
3c140c5e3bbbaa6ae643d8343a1a6cb207cd67f483aaf1742266ae489e549126

SHA512
0ea69bb50b13cb9019fa7269a57610c65bda53f10bc1ab6ef53165faef1b1d900edf4a6e6161fbc85417d33ab8814bb9efd4e9a3ce3ebd69c66b1a1f0f429f48

Download Submit
C:\Program Files (x86)\Borderless Gaming\BorderlessGaming.exe

Filesize
2.8MB

MD5
744fc319f32b3ed3417bd93d6e3d5ddb

SHA1
ac7dcbfcfba00710666f390573fa818d641be7e1

SHA256
d9312f8c6e473004f4a50b533de30bee30f7a8763ac0c567ca1b0dd2eb017afa

SHA512
0e3027e521438aedbe9bbf9959c9487e38638a4364ae1774c690cabda3b275d1b4bd40b405fbe9ccd75c5a1f900b521b39d58c3e656f76f68e87803c638666c3

Download Submit
C:\Program Files (x86)\Borderless Gaming\BorderlessGaming.exe

Filesize
2.8MB

MD5
744fc319f32b3ed3417bd93d6e3d5ddb

SHA1
ac7dcbfcfba00710666f390573fa818d641be7e1

SHA256
d9312f8c6e473004f4a50b533de30bee30f7a8763ac0c567ca1b0dd2eb017afa

SHA512
0e3027e521438aedbe9bbf9959c9487e38638a4364ae1774c690cabda3b275d1b4bd40b405fbe9ccd75c5a1f900b521b39d58c3e656f76f68e87803c638666c3

Download Submit
C:\Program Files (x86)\Borderless Gaming\BorderlessGaming.exe

Filesize
2.8MB

MD5
744fc319f32b3ed3417bd93d6e3d5ddb

SHA1
ac7dcbfcfba00710666f390573fa818d641be7e1

SHA256
d9312f8c6e473004f4a50b533de30bee30f7a8763ac0c567ca1b0dd2eb017afa

SHA512
0e3027e521438aedbe9bbf9959c9487e38638a4364ae1774c690cabda3b275d1b4bd40b405fbe9ccd75c5a1f900b521b39d58c3e656f76f68e87803c638666c3

Download Submit
C:\Program Files (x86)\Borderless Gaming\BorderlessGaming.exe.config

Filesize
184B

MD5
28960c034283c54b6f70673f77fd07fa

SHA1
914b9e3f9557072ea35ec5725d046b825ef8b918

SHA256
8d65429e0b2a82c11d3edc4ea04ed200aedfea1d7ef8b984e88a8e97cff54770

SHA512
d30dd93457a306d737aac32c0944880517ed4c3e8f2d1650ffca6c1d98e892082b41b40fb89ccf75d5f03d2464b0b4f943cd4b082071f0abfe978d149bd61479

Download Submit
C:\Program Files (x86)\Borderless Gaming\CommandLine.dll

Filesize
57KB

MD5
ec0e2dd54144d6f6a317b7daa715d418

SHA1
62c2e04bba8436912d9bcec1ec4d4c7afc843a47

SHA256
4923528d3d18689d58fa30b3d822ab72a13be21a57f13e0bc59b55b864424f7a

SHA512
ccaf01f89fab001ef2ded15b352e1dd2ab3967584a8720acb7c6b7203240f9c896f7d46600b12e0e86b25b30779b1e5ed59ce97fb3f295afb11d6391670265ef

Download Submit
C:\Program Files (x86)\Borderless Gaming\DotNetZip.dll

Filesize
448KB

MD5
f292d363754984c8fbc921fa2b5e2700

SHA1
7a855f57741d91c12aef038aa4f18f259872ff3c

SHA256
aaaf2670c222cb0af424a796c4831af6258ee40da29ea81d9fc7e2fcb171f345

SHA512
be3fc49ef90a60ed6418f66a4a1196c56e97fad7519e9b0fde7d3c47711370a2b85b89ff496f896b3086744052c92f5baa31255c2db5e5a81fbc3bcc827b0041

Download Submit
C:\Program Files (x86)\Borderless Gaming\Facepunch.Steamworks.dll

Filesize
1017KB

MD5
e3752a681002136f751b21fec89669be

SHA1
f23eb0f1bfd08e3851ca2128cca40305d1970962

SHA256
4dd4a33d1e71a3d775bddd311de3bdfa8c472e5ae557f7d0df2d1c3469d03864

SHA512
a7dd21c90947535db31e2d72851d7888dd7eb430c973271cc3620b3e6c9e03af9eb3c631d30b49c14e7ecd0ffed82947dbbe110b0f3834647b0baedd2fce55eb

Download Submit
C:\Program Files (x86)\Borderless Gaming\Languages.zip

Filesize
54KB

MD5
be8519f34a516bc8fed58aa2e6f7ee22

SHA1
e0dd24cd2194f6f898031bd31458352e1d41661e

SHA256
fb27fc7584286569c0cc60f39712d487f71eb5da02b8d2fe5bf955aa70144674

SHA512
5e088a06e12e04477a49e5cac78dcffa7833aeb9e44e5de4043f2a8c2d7ae57ccaf22b8f77ffcb0a47c795ad4012f92db7fe83c0e57bd2841b7d821366d00007

Download Submit
C:\Program Files (x86)\Borderless Gaming\protobuf-net.dll

Filesize
269KB

MD5
4a4756e227c10623d81228bc4bc49c1d

SHA1
964014f538918d85f6eb6a7b4023b304067b28f7

SHA256
042b8c1c1e0eb7648b164ee48c95168c48324f1fb439cabd5f2e41db0938d807

SHA512
93d2c6f47c618dc9493f5a538cbfb5a32c1e3bb35a623b51561057245f2fa557c452ee18ae274182c3e0440b77353c5490d196f16eda142b6129e8d1108e5a04

Download Submit
C:\Program Files (x86)\Borderless Gaming\steam_api.dll

Filesize
216KB

MD5
04c58bd2e83dd1aae1ab2bff988f5451

SHA1
39274dc210b3dd8c7f0bf2d18b51df3fd4242f60

SHA256
fe302b9cf000b5b56b8f48df9a6737fc43b1c225db91306e92c779cae0d2908d

SHA512
803c0bea494f4fbbb7c7ec57d38185966a668d282da82d41cb2ef18ef5432e77655dc5799b4ce6fd1b1782099d056591bf77130bd71675468660a83cebb2f390

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
61KB

MD5
e71c8443ae0bc2e282c73faead0a6dd3

SHA1
0c110c1b01e68edfacaeae64781a37b1995fa94b

SHA256
95b0a5acc5bf70d3abdfd091d0c9f9063aa4fde65bd34dbf16786082e1992e72

SHA512
b38458c7fa2825afb72794f374827403d5946b1132e136a0ce075dfd351277cf7d957c88dc8a1e4adc3bcae1fa8010dae3831e268e910d517691de24326391a6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
4949b2df0733b2e98aeb5ccadb591cce

SHA1
7ce84493b23fc493eda08cb8320fdcd71809d628

SHA256
eab6d675c840e375f1706eacbf26ca928215d7356563e5ce5aa576b0d280324f

SHA512
4499feaaa3d31f3e0001ae313473e158866447521836106c85beeafa776161d5d87cd23583aeea3bfe87fd25d3e41f0fc435088179faaa4e866952dcf605bf9b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
317057d54cdf1841e4d1489bf50701f8

SHA1
b2d5145c47c2f718a74a10c4cce6d575516c2afb

SHA256
746709ccd5c69437344d1fe2668af53cf90e8b9c6dfd6185eab70518cebd3821

SHA512
7fcf0c092f71af31a35c23b152575ddad6ef66d015be9ba8dd9ab10f1bd352658ca4c39e50bd14dfd0ef9bb26d280b004539a32002720e8623363b145c66391c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
f4e83f28b996003bdf321cede187dceb

SHA1
83dbc7bfd5fe4c2e6674debfe6afebbc9489eb84

SHA256
db3f352d77899c673254c7f0ace522a345b259ca52995e49b93b5445faa3a2b0

SHA512
ee547826d3c010b0eedea79a812915663b400ef2df2368652a7a511f34581ba0bd4ae323cd85f070c602cfb0b557751c1349b2cca0b79a6e3e452458485b85e8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\6c5fd85a-ed52-4900-895d-ac57ee38e673.tmp

Filesize
6KB

MD5
4ed225a0ee6d58fe148cf165b54fc1e3

SHA1
6ec9e902297755bde6eb2a31abe634da46ad1e71

SHA256
631ed7913336827125d572d8640ff431eca90587fded5640c9e2bca11d5b6473

SHA512
ea2ff5bbfc34baccdd0cac142733a5162183801d7cda099ad41f8c77e5eb35500a8a3c5dcff372d1d7193478189b8861919930d0e107e87a0ff690f943d724ba

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006

Filesize
47KB

MD5
7579d25c7d1ddf4f3e2e27ab5fed443d

SHA1
eb9261a097971532002bc079558e0c88fcfdcc4f

SHA256
ba35f6571218cdd7ba0c0aebbf5489708eddcf7ccd04e43092a381bf53454213

SHA512
0f2ab60b0a50b2a9c7ae82bdb21468d869de23628fb82ee79a0226e4185c57a25e0b3a5f6a1ecca4ed05b6d0ece7fb0578bd353db8eb1cb8e287eb4ec0707292

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007

Filesize
37KB

MD5
47ae9b25af86702d77c7895ac6f6b57c

SHA1
f56f78729b99247a975620a1103cac3ee9f313a5

SHA256
9bde79a1b0866f68d6baa43f920e971b5feb35a8e0af7ffadc114366f8538224

SHA512
72b5296e3dd1c5b4c42d8c3e4a56693819779167b9f02bc2d5f5a626b519a9cf10bee59846d614c929c42094b65d13039f6024f6cb1c023e740969aaefd060c4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000009

Filesize
20KB

MD5
923a543cc619ea568f91b723d9fb1ef0

SHA1
6f4ade25559645c741d7327c6e16521e43d7e1f9

SHA256
bf7344209edb1be5a2886c425cf6334a102d76cbea1471fd50171e2ee92877cd

SHA512
a4153751761cd67465374828b0514d7773b8c4ed37779d1ecfd4f19be4faa171585c8ee0b4db59b556399d5d2b9809ba87e04d4715e9d090e1f488d02219d555

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000a

Filesize
295KB

MD5
77e1d3547542539e5fb9dddde4ade066

SHA1
a58f7a41e1dd075119223cad1852473040809b25

SHA256
60e82d3755af36c1cdaa4cab251c2edf764f3c271874ce3af1405dcd51c0e0d3

SHA512
ec100c7719878b7b8ca0834e12a49dea66f7da0a7a08d37ecac2969e684d8714a26c2c72167bb0c37899fdb6afd8ce612404ef93b19b5112cd2dc525145a3f57

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000b

Filesize
63KB

MD5
38a059fbc080b07299425dbd6c9a0de7

SHA1
d20df74f0fb27f3154324147960a848988bd570d

SHA256
6a0192e4a39c3b7445105aacbca7ab692f39ea8f848c183ee9464b8cdc70d1bd

SHA512
dd15c47ee780d9bd7e4b6459d411a259f55e65f805a7e40d9b1473a491740d7fa7d99e276266cbd1987c6583c70fb1ba2c673eb81aecaae07d7026ab72ef64f8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000010

Filesize
68KB

MD5
4e611546701fcd681e58f81e3e5933bd

SHA1
4db96729cb46796620da31644011c089e472d40e

SHA256
e6c8a796e731bd98bb173f28b32979ec608536aca15e176e81c8ef8f2a5bcf7e

SHA512
0b2582d8fe89405b601dad38097d610e8236255ee1c7ce0390ebc8b757726dcaf0e9163bf61868855bdbb0bcb451db2e325be05da5b233a9f2ebf8e1764afff7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000012

Filesize
36KB

MD5
4f584941643227707fda008dec37c6c1

SHA1
10cf8b1d3f7ba0483f80a8acc0d0dcef93123fa2

SHA256
4b799fd2818bf5342bfe0866f444973ecfbb9e3fef5c74bb5100d5d05610d0a6

SHA512
c8bdddad550f86444e676aeb50b0db80872a0cb36631b90ddb771258b15ac9b4aea0c42026d5d3c90d4394f8c088c9c086b40be80b49ff2228c576ef7bbeda57

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000013

Filesize
31KB

MD5
2b054d06e52599e616c7b04e6218638d

SHA1
ca6a2fd4529ebd24a4ac3cfbc9305e3a8ebaa9eb

SHA256
be659edc57b04425aba73ba1c1ac027754d40adcf8d3bfb0dbe4a0b3aeea189c

SHA512
a643b36c775f88e7163dbd1fcf5e8baadd0d2e20988fd59b11be9dfa668cfaeb1a981f8eba99aa822e4fa0d40e37963e8c23899a2c4add41d3c3de55e426c615

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000014

Filesize
44KB

MD5
4fbbf22f7c282962ddf375053c5cc23e

SHA1
940ff57a8da4b32e8383236dd49b0298a3226b37

SHA256
f8e68bb37b25f8e41bfa51d72050ae6f4a9ebb9664da7f150fa1ba81c94d8c4b

SHA512
f6603de2b7796268ae334d47fcad63cbb10e9528c4e41d9522a8a9129ec72838f58efe21808aa09dead2a949d34edd98423dc86b6e975f1b8d4a59277ac7b7f4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000a3

Filesize
19KB

MD5
ca7fbbfd120e3e329633044190bbf134

SHA1
d17f81e03dd827554ddd207ea081fb46b3415445

SHA256
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db

SHA512
ab85f774403008f9f493e5988a66c4f325cbcfcb9205cc3ca23b87d8a99c0e68b9aaa1bf7625b4f191dd557b78ef26bb51fe1c75e95debf236f39d9ed1b4a59f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000ab

Filesize
162KB

MD5
4043af37a3392a9db521ff9ab62d9608

SHA1
83828688e7a2259ed2f77345851a16122383b422

SHA256
ee076822f35390ee382cda71759a2eec8f4db2bc18e4e3acd586173c29dab321

SHA512
97a9d37ec02796cbca922559f384e1632c249d9955022578c14e046f2bfd9f84db113cf55899cfcf63fd318fbee050f483d04ae3156220ff2f0d364f989e680a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
79d141e520510b03686bd486bda82ff1

SHA1
26badfa092a42a57de03e51583fb8f2c0b87b17a

SHA256
7a7a23b22f0ec6651ab1e5a2e3bc1504e3f226390f282c75b4935cf61a760d18

SHA512
f996b5794eb4e9b7cafc6faafe6f9a99326b034c2709bffa8678609bf4f595d71097112de35affb6ea86d6021e0817c965b32ccca5aa543df2a740d5b050720c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
0a24f542e856bafe4d2c1f26a03f76c6

SHA1
dc91491c34a4ed108b876ce04a5326539162c5c0

SHA256
e5e222bcd0bb8f34b4f783b2cbaa8294bf9fb3511706846288043d7623897e76

SHA512
56cff539105c2e689253cc8ee6cec021bc62cd91da28db73739b2dffda45a78581f7fa9cacf8d228b7e23a591a354e381f87a659a6523eb7ecbcb425e85bb6b5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
4KB

MD5
734a27c6aa563cec0289fb0ad13507a4

SHA1
94245e51ad8e9606c34ea711637e595cfbcd8098

SHA256
e027832b5a17c7efd577f12b60c868cdfe83163b9c4d8cb9a301891161ce4771

SHA512
f4b69a0a6ff2c7224c7ead7804cda87f997aa34a7c89f24b7e036ab976916f34e011d46330441fa2ef8b331249f116d671f68729313c36cec205fab6c7e2118f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
5KB

MD5
d684ff7e94aba1d2b12f667bd11f54e3

SHA1
74c3eea5514617492dc909cc8fb0d5ea829674c5

SHA256
ab4b247a7bccf48e709e2ba6bf6ddc73518b7e47da87a3a7a72bbb0501086b50

SHA512
6eb585b456c4b8b65dfa8a57d610d197a67e816ace43648878b6bc35a6f976a0c250a8058647036875984a2ad78e3d30a0dffb72b1a4c89b0ff9bfc7d239188a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
9919c5efd097620683ba105978286b0e

SHA1
03273f9dff2ff93826a38cb09ce8e09da9360d79

SHA256
f8b51bf061a530139576cce699866575d98babc600f06813a79ae21be86af3c6

SHA512
4e32b62863aeb45d8890cbd708ade0fe12d3c1e8138e6020bd5622d89457da95be17139de89edd84b4e39716370b91a9edf17c320289720ae444fb7446be9b6a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
4KB

MD5
d9aaaed88bdd55907f087af0d2694032

SHA1
ebfa0b80930b30cc3bbe58869760a347c5c18ac3

SHA256
f134e201109bfcad13d19de09b3dddc7fb706b12fbe46f0fa27a87330d6b5fb6

SHA512
2ebd3a7a766eeb1b6f58bcb651258d4f0914f2dcafe3cdb08dc0fa60a854209990c266039f869ca86092c2ce2c870c00946142f4132c03fa4e81c36a12606fb9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
5KB

MD5
57ab0c2b0e6eb38c7730101d455d8042

SHA1
58b35c1ad4252c63be7e952c60fde7c72cf7e8af

SHA256
9cd2219bde4fe99cd8285b6a97a2cc8dbd7a7d6d16ad2ecd1899d7e29f2d3b45

SHA512
b8e1c9856d74b232148a00a6da640d306d7c451a7a05f12a3447392dd47a199c48b3ee9fa4a99ceee41e886e1653535adabbdd9ba28e169ac94e48b65139dd35

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
be3d08bfde7177f93918a46d7c6e8140

SHA1
931b035a32b051ebf16a8dcf11c935b02942da13

SHA256
95689c12124bbaa197420e9490143087e4d441e92347d2b1abb4a88df5664965

SHA512
b6e0a87e3928c9414a06319b9283c2a548cb5b968960457d78c56fea7837148753337828fdf96048a82292f33bbe32d6d6d394584c0693a6ae31ee68a071d52f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnCache\data_1

Filesize
264KB

MD5
f50f89a0a91564d0b8a211f8921aa7de

SHA1
112403a17dd69d5b9018b8cede023cb3b54eab7d

SHA256
b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

SHA512
bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\CURRENT~RF6f0ba5.TMP

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000002.dbtmp

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
4KB

MD5
36128dcae1c1d1182199a22f950059ec

SHA1
b0f0f985d90e9dbe24da1657bbd1e9f074d93969

SHA256
5046da39be36f9c08c64c4faee7068bf5494eda84287394ff1f57c6c44935d08

SHA512
82df651057754e13c8c87d3a7c12b2d9a7f6250132ce10f89cb32df4cb34689743d7396edd110190a0907c4c6cbfff4e1dec04c98372efdfbe603dd7e5146d82

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
c51c96092faa848a254544ecd6e51f91

SHA1
d37df6f05367f428c9620977a8b9b7575c718b14

SHA256
f7cc7ce0fad3e8c3eb9ae45129324d71dbc64f672f1db80c96a5f9dec3e063b2

SHA512
5bfd931efe8be498b47dc654e3965b82da8fea33082e7da5807ca882c1f5a958c6faca3a60b068de640cbd407e1b03c4053af0e7e064cae0288ad90cbdf64f49

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
5KB

MD5
c1f344da2ba2b9057c28ffb3748f7439

SHA1
fa629c44431a786ff24b075fff6898bbd8c38a7a

SHA256
76f0394d977eb20beac569439f6d34550722682d8d0568f8071c2132d2d9eaae

SHA512
1588f04b5d4544dec8570dd1a58de4af45e66df315e6f9445b47c1ca05c8fddcbaa62f8b4804011d88ad99eea51692c06a5f3214c93146b5364dbd1a0ad3f072

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
6KB

MD5
264d2ad846aa63522ea5c4aebc377d20

SHA1
c1a8123e5e86774e60809ee0410a94f3f33865ff

SHA256
4e22a4310d3689c952ac795cfa36e61ce0ac1bc68e6f19db93eede596c58f9c9

SHA512
e01460a0c62f6ad6ccc7edc51c90760c56761e6aaf920d1bfc68f7c8ecaebf079bb2d35ea94b65f2d71fda010906d104491975762c25d5fb6f368210ea002084

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
7KB

MD5
aede6e01252d022c1bb156149b333db6

SHA1
d5cbd288f3eac8453935d58f8a1b3966337c6c20

SHA256
43def31317eb119259b60fb581750e5ffb372373aca6471d47797339ae431497

SHA512
ac383a735021de3cf7d33e279373efe4fb26b57a153a6e147cbf1b4f560e03ee6702cdc5de9aa9e7d52a24fa4d44fe11874dc981861d494610bf840306630f58

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
363B

MD5
92b86aad727c2c2eaae477f024b9fe4f

SHA1
4b8175c5d1749d1178e1d56532300632879cceaf

SHA256
0ab83a131b493be4b6ea2f5f22770f72c1880739b7e0cadf2916a1b1909ce1aa

SHA512
fc21a111dfad45a5da01036010780113c13a993e04306c30c982d40e9467dca51c1210fd714cc9610f55b66258ad10fc2b4991e1d3b66ebf5039ac8ae403da4e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
1abb2f9e09a360192b512cc03ca6b146

SHA1
fb33285b425d2bc5693b9f9b8ff4e31d2a1407ae

SHA256
0c98440b9f038268548b472c6a45146f9a3a25162c1433b110085a5a11ae0379

SHA512
45209dea006c7bc897270ba28654ec41755eb8a7c3bd1c5dc6f36ca0f839c9a41b9130a8445442722dbdba9da09c0ff13c1aced1612401d96f6d08dd827c51d2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
bba1251ecc9de75f677ace6c47ee0c6c

SHA1
3ea80a349b40d4d83260d6216b1842eaac43f71d

SHA256
8e2193c1d8665950f727c85ddba8c4f4600c87c0f57889fb4f33e1ca1dc46ddb

SHA512
200c7d465eb0680d56ff9b35e9fdc4cbc9a1c5257f84a1ba317e19e34f03194058ec722433f27899e8cd56879badceacd914b7fb908b3c8e1db8d3e30fae75fe

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
04d9ab1d362e21a42f19f13d015fc8ec

SHA1
d8d793747d38c16856de37adec43fe4c56904232

SHA256
283f84dc152458036e9539714ce115fb49f2c27372eb95334aadb23762b8d29c

SHA512
9cc3e5f04eb1b5bcb39a672d1f7bea4e2ef5c30cd4652065e30dcb38fa6e99ab93890bca16a8bcc1208c46307baaf559698033c876e98d3c2a9323457d7c6d48

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
afe63bb15446b05a0d85e8a15413f463

SHA1
5cfdde2762ffc0b8ae978200da7f191509d34d3f

SHA256
0ff44685463d1041a00cff710c1daa4bd599056c92e3c772cb7a74951d96c34a

SHA512
ba26edbc60b0af2ede0bca63f608bfd1a39efe1a3c6dd114c1114e033665c5f965d80b1d088a4bce2f9bc121a09d7d289d96bb5414c186cbd1677667107d5009

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
a66353fcd25162fcb0337f5c0e193e72

SHA1
78c2ff354e98ee01d346cc22ebf4ac76dc2a4be5

SHA256
d6fee6874d1dd222b2cb4204b3428b79061fb900b7a1105924b1ffc5ba8edcdd

SHA512
33bfd33a15aa9fb331b5a579d56e52bb7a3aeec912eab79adc5d672596f173bb0d944e1f4fa8038a66b451cf6b1d992d95d9be70c87c16afff6665e7547c8851

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
c2c8c06a97e5ea7720014f06f8f344b3

SHA1
ba8a61ddb99c2f10e1c5b14c535171d4811fe09e

SHA256
1f2cdac09e6374e83cc87214ec3fc405fdae8933b49687e2bb505000b342d9cd

SHA512
440d7ca584759129d92c17616290ec761e51f14bae2d4a0d95e78ca6d42ec740127b1cb4d32f476f789cf3e787981e774730fbc35ba1bbb16feb62f6c9815c33

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
51798e3659700c9135854108eca6442b

SHA1
f2e0885f4241d8f50b12f265150c01aafdd36923

SHA256
d3fbe455632eeda446a1656acf9804f364513b9b74fadca253650367b7419b67

SHA512
a7d3c11e958ba0ca9fffeb90dc922c6f922188167314a28af71d1264dadf6c166726d43f2a8e24eabb191c5aa528b095113799bdb2d8a7d3662525473c548963

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
994dc40da09252b05203a3c49d319fcb

SHA1
e4fd468ec6d0fb56f70264eb802e23de54acdfcc

SHA256
47421b9a1005c6017731ae4f646246d9e15e4af74baac6f63e519b523e8fffd0

SHA512
42bc5c27589852ea29115bdac2bc4a1ae58a6464e7fd21abe81389eb30d7adc59e6cf26ece39cb17bb9b3f9b5066407a63b9b69f9d93107e5bdd8f0ab22a138a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
e445056cbf3ef3703cca15f65334d4b5

SHA1
62b99172f70b0d08efa3b9f0a9cbc8eb4afd8808

SHA256
452b07cd7228c96d88a1e9583e8f911fcde3393e288e7ea83080e4c290e093e6

SHA512
7b04d85dc52ea473ece6e8635f07ded2cc2b759be34854599ac17e606668309def294c0ec25cae96d5b99be4da382a727b44d1f7317f047f64e892b1e34e651f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
423ec6304c6793345ae006ee31d9b805

SHA1
ebd162ca61df323a100a565f02304344e01df7b6

SHA256
3ad1c2e22296344f9fdcef190df5da659c7449956e4ba1d5b4764b36265d3cb9

SHA512
3312e0d6bccadf01ae10e596a9d9aa069f238f08c7a06869e1c6dd9bf072acc7e66b0ac35350da448cb7ef2e48d9e142f4225c88eadf503cd36e674cb9fe5d91

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
d070bd4d0ab1d55f3645fe23662d1717

SHA1
e0b7029ac37f8b4a6af40af0a6d2c9e6011a6b1b

SHA256
db399f91364d994aa2480e1b1438745153918c5fd2b44e9284d97ebba70002f4

SHA512
50aa9299575f01b8169fd54d0366b675c0b27ceae1290ce5e8343f9222c60ea88b07c004653aad9279318a4bc7cc70efab95ef275fc0ba69209702262367ec82

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
926c48927565af92998b7b8eb5db4a4c

SHA1
a0317efad3c37bbffae5f287bbc54b9b63ddc00f

SHA256
a516720319f2d254460ab1985e8b9c0e11738e4266a4842a89391eb3f1f50ff5

SHA512
d36d3d8757e84d99ac57d0de1e4f3e567a7597cf136005ef08a4af7c891030a946ff724899b09b10a56085176f4bcc1df070df7730d4580199b8f5e7e00a34d0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
0ee0108b7e4243cdbb8d073b6a037be3

SHA1
73094913b530efbe2a7de6f55fb36769e8d89347

SHA256
3797f0e64ff29678efcf5f74dbadd3d5cec07ea01b216c581db3f073129289ac

SHA512
639d4d8662646db3d14dff4eb3a92b7dea2caaea57c3144ae8ea82fd551c70b1ea17f7007bc78cd09a40534b049e12d3e8722e223b807a6de4e336f2bfe2bb25

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
b031b61778084f770b73efd2d8096569

SHA1
d9fb3f37a9fe97353b44c39d40a8197006c6e83e

SHA256
91937add99945df983f13acb965a4bdc47e4247c6902c9aebd9edb999252f904

SHA512
feebe318533d7d1c7002a18b4a7e22020d2ffe0c3dbe6c19a114010c5212ced2d26d692c4bba2790a2ce6cdb00bfb9d911a78cf08bdadfafb4d84ddba7e16187

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
612c8cd7623ebf3d7e2e40e7bbc413c6

SHA1
45f1518f1b38c85f984b349cd83c9558cc46298d

SHA256
245f2d166559efe0193f7023991817d7189a8b4145cee4ffc67af4f60cdaeb0c

SHA512
b7b327431920602e6a2b097356aa2fa946ab66dbd46a04edf8a06bc73cf7f25262cc0029c2974b30ccdff6effeccfe19c9ec7626b282f216da2cc66e6c23dfee

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
15c8d0d0715f93cb364ac6e72d874775

SHA1
6f0df94b75e193e83fc2a08e81b95139b71318af

SHA256
fab506f732779e2b95cdf0b20d3f9a1409660cbe3f9884bce0bbca66c03d36dd

SHA512
c77d88b3854672441431cf250fbbfd83edcdb8d6d11462c3a94764c57429d6ccf8e7cf48e970d3bf514cecac60b0428a0d82fe569480c7277bb19d53b6c19360

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
2c7255ce966517118eeae9bbb02b4007

SHA1
2a1b6a53d95a0aa16d62fb34518ca2d5905a1c63

SHA256
da945697c534e252c8c772657269d0450184db2503ca9edb4c5ba2b4137d72a0

SHA512
2228f121fbd8c157dd06767b3f11c5af2df35f425238f6b90a5487068eeee2cda25ef2b5d06c6e9b6cd069c6ec5d07292932e0e79943e44a5cec4c92dce4fc06

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
571c9584664823c66e90faae140ec5b9

SHA1
4d6b1c673a48b2891d0207f9451c706be7e2e18b

SHA256
87207003d0a9d08adb78bbd010da691145c3794ee236930c8ca048df5fc35a18

SHA512
8c0e0f049e84f2d7c79241a26b3108dffcb64bac9553580762c1f08ea0055e0afc15f0d48e4b309c43c4ff39a830dd9b6ea427cfea8a43ffed1daa61ee961e0a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
b151eb342a50647d7960ce9722587bb6

SHA1
1b98210d6b2d50027294e2cd63f8561a8222573e

SHA256
66c53e7446a132f85de3fb7378feac57d47f2641d3f8fa94b54259c0ad9495d9

SHA512
afd1b560019e15b0eb295ac7fa75383d8b2e0d19239403b6546b8a1a3896441553b1c321ff6bf6ecf4b313a8808062011950bae35ccfb0e6c416795eae1181b1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
0e46ea10d2a27badbe28ba75ca56d607

SHA1
b6de52c8494e0b87ec92d3c9d5f0cdb14216ae75

SHA256
2c9ca3ef73a6006e981773eff7fcd9babd1b1d8eb90654cdfe316ff277bf1389

SHA512
b7ca73b064f70120962d588304fd43c824fc115d74a9e7b11e8490af185894190ec7c5215b40d1a1c78ea0c881b45c7a7be1de9d089ae03406b700d46194cef4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\e1ea7167-7807-4c6d-a10b-04f320f489ef.tmp

Filesize
8KB

MD5
480535d327204e766b21628ed18f7a88

SHA1
50fd82329f862ad93fe750fadbf202af98ff6da1

SHA256
357f3c5d5373d6992829b6b392c2ec82eec9022f08d9aacff12ce71847e42504

SHA512
d8ab882221869f5c18170eb5c2170f07b17eaebf76f1a7d4d814d41aba35cbe97a31f474f3fc366d626ad9275dceb3b3583272376689555ebcfde8e919124d0f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
7cfa1411e8b2090a5f55603f912e44f9

SHA1
c2500a931e67f015b08a9245a386d9b64e62d594

SHA256
c726f5911b3b6e552e3e946139e078d610f3379cf687a6a00615f03b81a4dc1f

SHA512
64ca052a355b8b9c3f095781243e95a70f46d8461cb357adfe2fe8221cfdc8312f7033e2ac32aac3b24d9e22b0a1d710b26af1770cdcc008ba782c61ccd52247

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
b92245e1cc6eb36204d842bc1c44dbbb

SHA1
194aafaa99d92bd17d80072f5b3fc14960c75ee1

SHA256
b5a49d60a244e9e0e5ce8360b889493dbb832258127ace18f90613d569019331

SHA512
34e15b4ffeed545d91360e8c1cd1315842fba10f0fc317b43d7b9aeb393698b7ab4970ac955ec51510d23a6ebf643a2fef894313e12ac0abfcaa1fe710221ec0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
af157d90f23738d4fd28955ba47baaea

SHA1
52738c0057a198997afd52f2d390328c9baeff28

SHA256
247933af137b5c72da5df18094ee68c08b90d6d041171aa9b1a2ab05f2470599

SHA512
e97cdecaa4f92eea44bf6eaf4d050249e56d7a8c52b9a54d78a552a063dfc46decc60d78c89b6b477bbf3a224b23cbd33731e5ba48d91a4c321dc1cd1ae3f40e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
cad4f124861455c2cab64787c5766d3b

SHA1
0b15cb9efdae8e834c14ac3d657ef07e38f8a838

SHA256
311654ae04387e91f159dde5f65e0d0ae828c5541f953825ef4caf412f4944f5

SHA512
2d3123047005913e7c3f6774a04f370abeef68ba6deaaa982545c1de2d99db5925b83fe22d1b475ffc887f90beeb97d7e9d7a6924118d2fd9edffc0e8c1dfad9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
820c285581aa4e8baa931763b31b5e84

SHA1
8fe69ddea8723eba5010b084063a28e23a35e67c

SHA256
282c9f7c5b4ae4022108fc93d27b732a983d858850672390a030ce918b7597fa

SHA512
262c9f1311a8526aca9136d12099ee1d34e748244510c04c6af103fad57777d45151afe9d7b2e2370e577548e8044a530064934df37f89f320886944fbcf9847

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
fd41a6e6b54cfd2c446f387dc5382834

SHA1
4fd66aca676dba0fd5af7cdc504f9694c712ab3f

SHA256
26c2c5585928b1b7b70b69375d594e83a5eba417c144f58c97ef786e166f0c5c

SHA512
88a41a92abe118adf0b77c267856254b96851961a74a5f4989794103b3077a2d48acb1ce3e902c31fcdf99c8e53ec62e8e2c8781be3daf482d50cf4165115ae9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
54a9828fe767a99bc8dfc63955b4c6a6

SHA1
2ef90cfdb7d98b76437fa94bdcef9d7c7fa15f84

SHA256
5c19304f0b98fc0995246f93bf8bf244b43349c58c1106f90534dcd6eecb93ca

SHA512
7afdbaa76cf10cddf98ce6dc8730db5d8c3840dcb5c8ef4b38ad0fb81f76c5fe2c0a18891ece3430461387b1aa876fd76bb661fe485c31ad9dedd2c9edc8b940

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
c359f00bdbe671070096a5011eb03ca7

SHA1
977d353ede0845b3eb463359982ab975e8659f14

SHA256
b932f7fecff9470e9be7b00ac3cbe5216b6df890ab9cbc1dc5851258d12d833f

SHA512
698a8097df6de17b639aead64c5eb560fc19ab9c5022fe83a9626d1a040141a73bd3be965f7d7f04be89a92b23580cdabb340ae2e4272a7c6d80df66466bd1f9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
951e81edfcf4bbc8fba1438e0eb5a0e0

SHA1
2cd5df290b31484f3df49655e93b05584265f24f

SHA256
d82e6969798ac7174e7175b1d50e870c7d04e2b50d256446af928445e536ff32

SHA512
3b65db56d1899e5de2ae529aa5736fb09a8be95ba328a97d4c68570a2f1d1d04698836900d0879059f8425e9a8463f9c896e3382a327d3ac5cc92c44b9938276

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
c3a167c99934fb17e2a36840f795415c

SHA1
7b50405df06c5448ee793db45da6b4231d383388

SHA256
70b54ec27117b013782eff407498ac9f555848231e511be6a5a064617f46772a

SHA512
58985cecf7522dc23e56f5ea54324f0c920470401cf6770a2ff9759f3ba78760269d033251d0e4aeffc8e983114fa5eb620eaadb3a3b282bf0f9a2abeeb9855f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
d5232ecc1e858809623ba96121e788a0

SHA1
31b4f645aca3f23e7e133b6c99e1082a3b39c89f

SHA256
8eeba1a9a1af06dd674b1755e951de8ac24d6eb3820bcb439f1d6201d1d684d6

SHA512
a7d02c834d69ecf383e233230acb40827146bec9f264056676e38edbdda8127163d684df297ffae8b6f86b3ac7556465bbbb517276657ad229e220266997db4e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
0b6230bb1c42bc5b432ed96fba9fcf2c

SHA1
04b3d52aacc0342e0f654f1ad3f8eaf25c88e21f

SHA256
3973aa5c0a5f91330499df078ba48030b7e69c13911b3ff78de5a0a60e8e5e17

SHA512
cf84e8b82e506e0504212060dc19c6d8e4dceee5d1d3a820d1978d2227ae32ae39df9598533f629229d89f8a0f180773ac7aef96753e9d4a31bd24020cb3c4bd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
4KB

MD5
4117d46fd4c20f0f374fed64a8324893

SHA1
51869cda2b8402b6fd825e1bdad6b119a16969ab

SHA256
7afdf24874e64a6c61e0de4c0dc206c888144e53dcb6dc0c9161d9be6209d30f

SHA512
cd7a1fcdb88777de32a82f5d3b93e9462dfcc5860643b0afdaeb398cb54a276ddb9d44749794ae4c8a57f8b54023e0f26553a7d7e3f07f89357409598e5e1e2f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
4KB

MD5
383dc61c746000051f32b074d6eef2b2

SHA1
819f678c8855258782a62c4a0508be458c5cba45

SHA256
caa6feba66f801f5d08c50aa152fd2af8c819f23ab5c37dd8e72eea8d9f5cebc

SHA512
d793eaf815c60ed6bde37de8a9e0afea4d8d43bd2183510e19a70270086f68a3527f1d412d4b5e8e720833c9f958ce8b01717198d9f2c04d91b294d16c675b70

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\000004.dbtmp

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\a078ac13-e85a-4c6f-abdb-821208cc40b3.tmp

Filesize
7KB

MD5
01d9d245a107d51f0b6dffeb386c5d90

SHA1
77a1867f94aaa56f9747f6c112096e17e8e33348

SHA256
b11d5096cb68508bdad2d84fdf36b25d51fb1e174f6f156ef7c1b8b43498f752

SHA512
6f117e909756bd5c0406511c3fb61b42cdc19037bd0fe7a2cc96858b9c4316faba79852f165f9f1ad51d7fae433d7c682a1f8f98f65d7283a239f266bd701447

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
144KB

MD5
78d2828c3d45927579d7523530a92998

SHA1
7a80a3efe016db0b63e50c3ad048ba98657a05a8

SHA256
feb12434554cdcbe3fc6c809ad4e1df91c11a140efa67a58ff87cf3703a6e7b8

SHA512
c8b041ec5bcbb77a83ac225aa0b664f8ad66c647bf8c7629990684d8626a552f13e609c5c4fa0d34cf1a8bb38838e76b5c2f59631c913d0ed7547b5611391349

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
144KB

MD5
51d26ecba6d02d5384ab453c30805ee1

SHA1
31beaae11c1714055e7c00f86e7e3be8e23399a3

SHA256
92047fe94c242435634cc3278a4decd978ae92bd3801a72b59542eaf46d68320

SHA512
b5f1c668dba2c6551ea97ccaeea066d57a63c37334e84370e6067ae8c9a2b33353a63680a85106a20a201992eef1f1470d065babba06e4420b928fbcd6be99d5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
144KB

MD5
18e5ee738a8a3428ed9373e0fe213fe2

SHA1
5090d15e55b94539e812d3203381fffbaa525635

SHA256
42482e482455c11c1fa00d5848c1c6be846bb4b33455296d9eff3533af38e8f3

SHA512
19598af1ef432ab3835e888933f7a9e59de4e730bd8dabffefe3dd0ca51b98eac08440d0cc1385a899b9cd1b1489909e7e5251ddc122a05de43dafe3acb0f3ab

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
144KB

MD5
3eafc6712f343188d5670a0f2fa53ca9

SHA1
08dce81e3a249dd67c7d8527a1ac8b14a384426a

SHA256
48cfa30a6626e2b9145d71ef40f04158725b4647f1aa80fb973c28b45e7e7c0f

SHA512
9e64cca18260f985af285b34aaba46ca6c511294a17c24a2aa248a81a5d6b247d25aea27106f097a44d755bb396a3be46c1b908b230c063e41b9fe9ee8521715

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
144KB

MD5
5711e2eea1655ad42e58a24f6cf538d1

SHA1
ca67284aea28366758ac3a8251b6c9aaf38a1c26

SHA256
bcecf9d4f8fb7497816927e393a9b3693afa0e54d984f68e9b877cce51d29eba

SHA512
280a9edd1034bff467b184e7d9e1d510acd2197f7e17fa19f510b45aa11b4ff5670ba41418efddf913610654cda44f8eafb232ec230051b2969821638916fc67

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
91KB

MD5
450eaa3630864c6a9604bf8d5e923906

SHA1
0a4de416e001afbd92cc7d858a01cfa184a37613

SHA256
5a418e3aa0801c5accbd3732e09c62e8bdeb6a0288afabab23cbd75c991353f2

SHA512
61c4dfdf275e11e97f0a1605ab7146cf9dd5b3043df27f9f88feb76890682d9600b170a4065c30479d767bebe0a617a7501860803e36e75c97c1e6763b198263

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarE632.tmp

Filesize
161KB

MD5
be2bec6e8c5653136d3e72fe53c98aa3

SHA1
a8182d6db17c14671c3d5766c72e58d87c0810de

SHA256
1919aab2a820642490169bdc4e88bd1189e22f83e7498bf8ebdfb62ec7d843fd

SHA512
0d1424ccdf0d53faf3f4e13d534e12f22388648aa4c23edbc503801e3c96b7f73c7999b760b5bef4b5e9dd923dffe21a21889b1ce836dd428420bf0f4f5327ff

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-Q8UMF.tmp\BorderlessGaming9.5.6_admin_setup.tmp

Filesize
721KB

MD5
98242be0a249553b9b4f1bdbf14cd9d3

SHA1
72fca546b10fad3cf719c5e008748ded45da1228

SHA256
a166749687ffeb6938a0a24bc431a96f054e080994b3292b07d933f67ab7002a

SHA512
08ec542ddfe1e9defa4fd67e8cefb3929bdec727f81611f98602b9057296d7afb55f845fafff578c30ebc6ab254a8be2aa150b05bd95802cbe6bd37a56e8cfd0

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-Q8UMF.tmp\BorderlessGaming9.5.6_admin_setup.tmp

Filesize
721KB

MD5
98242be0a249553b9b4f1bdbf14cd9d3

SHA1
72fca546b10fad3cf719c5e008748ded45da1228

SHA256
a166749687ffeb6938a0a24bc431a96f054e080994b3292b07d933f67ab7002a

SHA512
08ec542ddfe1e9defa4fd67e8cefb3929bdec727f81611f98602b9057296d7afb55f845fafff578c30ebc6ab254a8be2aa150b05bd95802cbe6bd37a56e8cfd0

Download Submit
C:\Users\Admin\AppData\Roaming\Andrew Sampson\Borderless Gaming\Languages\de-DE.lang

Filesize
4KB

MD5
a908de34cc5d1a32e5c905adbd54c36f

SHA1
a09d69674143b0518ad18a9f3de9cc6480b8483b

SHA256
5c1ed7ad1dd10255d0daac6eaceb9126ebddf53ddefd9edd6d26e6fcfe9c4423

SHA512
36bd24d0c13786415940ce36eeef57f9b03b600228101f91ec2326d0bcc5ba92268347daf0e616cb16769c38c6a444725541b31c5c4f07b3ebbd1b360400c8f5

Download Submit
C:\Users\Admin\AppData\Roaming\Andrew Sampson\Borderless Gaming\Languages\en-US.lang

Filesize
3KB

MD5
e6d2c2f004c8afac83623b467f08a15b

SHA1
bc1dde982d7a68ab5bdb0feafdd8d4a179f747b3

SHA256
219e753a62ed3c7fb90ddb3921557bfc5bccd3a736daad39b4eb642d2256b4e5

SHA512
46fc6b58504e5286d4c25753862a7562f83b17e6fd2394c6a5dd2212b3ca6d559c889b2c95cf48fa45a50317c0f7e3bbdcf6f505469bc45dc6739c9dbf2be0c6

Download Submit
C:\Users\Admin\AppData\Roaming\Andrew Sampson\Borderless Gaming\Languages\es-419.lang

Filesize
4KB

MD5
ab0b84ed43934cd270af6a80f5def13c

SHA1
a5c2aa40a8b3034ca90cbf76c23f0d01d3d99047

SHA256
bf04ad6e90d986687406ed36f8d985caeb5b507a928fdc27d969fa88b21e9321

SHA512
3b586ab40f2dd0b8a54da11bd29a61874be0e190e08eaf44047b7d5e25322ba26aa824923c24d1f5d9ae4970371a963afa07048b781ea4dee473fd10706735d4

Download Submit
C:\Users\Admin\AppData\Roaming\Andrew Sampson\Borderless Gaming\Languages\fr-FR.lang

Filesize
4KB

MD5
0b4c462659f700d97c9b5bcf94637eb6

SHA1
21ed213fc9cbb85bde62a28f43218f88fb782c4d

SHA256
291192a64d826d331073f0c46704fc20641f56dd018b7fe779340336afc1fe2e

SHA512
db2377e5a34c29a838135948b2cfb1afc82430c7387d973067bf65b8e6fbdecf02131fa490d92faab946cc9105d8370ef849742d715f6f91bc23c5bb62ff5198

Download Submit
C:\Users\Admin\AppData\Roaming\Andrew Sampson\Borderless Gaming\Languages\it-IT.lang

Filesize
4KB

MD5
d9d509be32230886db9f3e8bb9534de6

SHA1
119a53c7b00326844eb07d807c8885f8e753678e

SHA256
f030b1854fe48edfc973734cc5f0426c4a10817fcbfec4f5bcd28af120d00429

SHA512
7037e2bdddb65be820bff6d84406703eea7c45828a0865dc220c7fac6dc7e324887b6ff1b9493d6980be481f0d9eafd44c15a18e50459e4f2d8edd33cf25fcdd

Download Submit
C:\Users\Admin\AppData\Roaming\Andrew Sampson\Borderless Gaming\Languages\ja-JP.lang

Filesize
4KB

MD5
c7648c8d89c8663de1fa9ec90a616637

SHA1
67276de37eaa9ee254af2f0259fb6a89b743a18a

SHA256
474aaed53d0604bf17555ccbb408469403f841d65717566660c85827402e222d

SHA512
c3b328faab6fca6a41bc76a91cb489fdb464008e23b19dc346e26f92adacf361fd5c3d9fef145d06bdeba64838a3afedf21dc06935932b9c28d305707a9eccf7

Download Submit
C:\Users\Admin\AppData\Roaming\Andrew Sampson\Borderless Gaming\Languages\ko-KR.lang

Filesize
4KB

MD5
3c7b36819de2dd3a830cfa0389e4356b

SHA1
39d70df1abec4fc9318b9515727c95b0d824f69a

SHA256
e667c55d3cd296a845ecc7ac3de9e8955f1b2ad9a916dbb7779465b9f341005a

SHA512
7096f40d0140ff8beab64976d318ab340f474aa328fc58fc624e88535690bb2ec52183598ec7441cef18c3fe98df89392a13d126bdb5466cd48c9c851481795c

Download Submit
C:\Users\Admin\AppData\Roaming\Andrew Sampson\Borderless Gaming\Languages\pl-PL.lang

Filesize
4KB

MD5
74d9b28b7a9b9aefa06cc2b537ea2c72

SHA1
6f20ebcc738754ac9e41bde2c3b3696d90eb06fe

SHA256
b8b988fda43e41b17f3942e3267c9a57f474ff888a45d9885e7677a02cf945f4

SHA512
cf5b71711be22daa021b7d54a0fab49d8a7986ccd8ee9196971e4b5440233cd6bf478f325d926bbbed15d2361341c4529aa03153ea739838dc8608935fab5dcd

Download Submit
C:\Users\Admin\AppData\Roaming\Andrew Sampson\Borderless Gaming\Languages\ru-RU.lang

Filesize
5KB

MD5
0d4476a5992ea81dd2f4e083abf1d6e9

SHA1
964ee26c4d6c8285a73b76edc3079ab0926c741f

SHA256
9d2927ecfb04e3416f674366d47dfaa3fc0eff90063429b714911470c368c9bc

SHA512
3585015d832da9d6ca2d8f0f3c06d08d7199e13977820dc491a1374d4dd5a37cf9f05bcd05e2b717af81b7f33fa70c12add63749391af0fc406e3a4a092f774e

Download Submit
C:\Users\Admin\AppData\Roaming\Andrew Sampson\Borderless Gaming\Languages\sl-SI.lang

Filesize
4KB

MD5
2fc15d0fafc658521db4d45a2ff3d012

SHA1
2c885425467c8dd23e6e1c8c75af748d5020f610

SHA256
f42d91a5b925f0a6bc058ca83ca46c05e951c73e724a6a6c6c2105c898207f11

SHA512
b4cecd4e065b6a1379d7362f09b822a2d3c0161d0027a806b2f51f89b1550e86a58e11e1605885d43827fc7e251d5a6a81fd73a831edf659e1f7c1f936e553f2

Download Submit
C:\Users\Admin\AppData\Roaming\Andrew Sampson\Borderless Gaming\Languages\zh-CN.lang

Filesize
3KB

MD5
4961b813e28a208a6a902d3e71e62c27

SHA1
a3300c52ee3630d7c270c1e9dd5bb7094c705792

SHA256
b49906aa1ef0d83a6a31663d19f5f83a61c01ec116f291202ec3b32b60a772c9

SHA512
4e889226cf8a1d610cea5a2ecc21e443e445c07d3e92ab276f720d8c9ad7f600c7fac2e0eb992b8a672333797efc5f96e95aa13bdad270d57891cec63f767cb7

Download Submit
C:\Users\Admin\AppData\Roaming\Andrew Sampson\Borderless Gaming\Languages\zh-TW.lang

Filesize
4KB

MD5
33ed9ff0c219ad3a791c58c09542be9b

SHA1
1ec45cfc971a5e10ca99461f76478c96bc375f9d

SHA256
741cd8d1410a72e287637209bad08cbf3b17078b946954b67c58be8ed44dd1a4

SHA512
690d9190d0b7093e1d054dc552113e10f76f5439074df868ca76d4a34ea150c3d69adab14102d8bedf67f156d07a11739486323089e059cfc8f65ab995396fda

Download Submit
C:\Users\Admin\Downloads\Borderless-Gaming-9.5.6.zip

Filesize
4.6MB

MD5
99b88bd5ba64b3915fe49e5cee1f6a7c

SHA1
35459f93efca36cca1b1844f407b08160a63cc9e

SHA256
0e37567cdb78a02e5e7e462a3e5a9ed0a45796b7c2aedb4b8cfad46cbfe62688

SHA512
cd051dd6846e9bfc62d474364a369e8b5492f30b378e73cafd6dc28a4ab7732b3e4bb69688e1d59908a5740bd3d90aff3d863c3529da0b79ae92662459b5b1f9

Download Submit
C:\Users\Admin\Downloads\BorderlessGaming9.5.6_admin_setup.exe

Filesize
3.9MB

MD5
026e065f1d1e22bfecea6cb03460e513

SHA1
ec946f15b659258328fc8e83e9f65fd964a47714

SHA256
250d2d883cb9f5a05a60be5b74191ca357489686a979cf7832fcb4c5f0522eda

SHA512
29d8fda89350c26c283eaa2011427d5a5026f83c5cdd77db62f2c203aa6d03f02929ed428b1ce5b7fb95204b051a4b5a9f0dfef6dd427ae45cc4545fec3b14fe

Download Submit
C:\Users\Admin\Downloads\BorderlessGaming9.5.6_admin_setup.exe

Filesize
3.9MB

MD5
026e065f1d1e22bfecea6cb03460e513

SHA1
ec946f15b659258328fc8e83e9f65fd964a47714

SHA256
250d2d883cb9f5a05a60be5b74191ca357489686a979cf7832fcb4c5f0522eda

SHA512
29d8fda89350c26c283eaa2011427d5a5026f83c5cdd77db62f2c203aa6d03f02929ed428b1ce5b7fb95204b051a4b5a9f0dfef6dd427ae45cc4545fec3b14fe

Download Submit
C:\Users\Admin\Downloads\Unconfirmed 443096.crdownload

Filesize
3.9MB

MD5
026e065f1d1e22bfecea6cb03460e513

SHA1
ec946f15b659258328fc8e83e9f65fd964a47714

SHA256
250d2d883cb9f5a05a60be5b74191ca357489686a979cf7832fcb4c5f0522eda

SHA512
29d8fda89350c26c283eaa2011427d5a5026f83c5cdd77db62f2c203aa6d03f02929ed428b1ce5b7fb95204b051a4b5a9f0dfef6dd427ae45cc4545fec3b14fe

Download Submit
C:\Users\Admin\Downloads\rbxfpsunlocker-x64.zip.crdownload

Filesize
210KB

MD5
30d5c624b2cb907b074d1f5609aaf72e

SHA1
8006e58e93443bf42094100fb5ed6ba778dc386d

SHA256
050fe7c0127dbd4fdc0cecf3ba46248ba7e14d37edba1a54eac40602c130f2f8

SHA512
5ee9f6b27ffb2e2acc977c215dd170298a34876bb6c8486d3918fcb7c30d771194954aab60f0a7b26323b177253d3196b08fcf9ae730076a28c5c6317f4f0500

Download Submit
\Program Files (x86)\Borderless Gaming\BorderlessGaming.Logic.dll

Filesize
95KB

MD5
d2cc785f9f78c69b8ed8cc6c89047a64

SHA1
554e903441b433e743438f6e952b4dfef734faf5

SHA256
3c140c5e3bbbaa6ae643d8343a1a6cb207cd67f483aaf1742266ae489e549126

SHA512
0ea69bb50b13cb9019fa7269a57610c65bda53f10bc1ab6ef53165faef1b1d900edf4a6e6161fbc85417d33ab8814bb9efd4e9a3ce3ebd69c66b1a1f0f429f48

Download Submit
\Program Files (x86)\Borderless Gaming\BorderlessGaming.Logic.dll

Filesize
95KB

MD5
d2cc785f9f78c69b8ed8cc6c89047a64

SHA1
554e903441b433e743438f6e952b4dfef734faf5

SHA256
3c140c5e3bbbaa6ae643d8343a1a6cb207cd67f483aaf1742266ae489e549126

SHA512
0ea69bb50b13cb9019fa7269a57610c65bda53f10bc1ab6ef53165faef1b1d900edf4a6e6161fbc85417d33ab8814bb9efd4e9a3ce3ebd69c66b1a1f0f429f48

Download Submit
\Program Files (x86)\Borderless Gaming\BorderlessGaming.exe

Filesize
2.8MB

MD5
744fc319f32b3ed3417bd93d6e3d5ddb

SHA1
ac7dcbfcfba00710666f390573fa818d641be7e1

SHA256
d9312f8c6e473004f4a50b533de30bee30f7a8763ac0c567ca1b0dd2eb017afa

SHA512
0e3027e521438aedbe9bbf9959c9487e38638a4364ae1774c690cabda3b275d1b4bd40b405fbe9ccd75c5a1f900b521b39d58c3e656f76f68e87803c638666c3

Download Submit
\Program Files (x86)\Borderless Gaming\BorderlessGaming.exe

Filesize
2.8MB

MD5
744fc319f32b3ed3417bd93d6e3d5ddb

SHA1
ac7dcbfcfba00710666f390573fa818d641be7e1

SHA256
d9312f8c6e473004f4a50b533de30bee30f7a8763ac0c567ca1b0dd2eb017afa

SHA512
0e3027e521438aedbe9bbf9959c9487e38638a4364ae1774c690cabda3b275d1b4bd40b405fbe9ccd75c5a1f900b521b39d58c3e656f76f68e87803c638666c3

Download Submit
\Program Files (x86)\Borderless Gaming\BorderlessGaming.exe

Filesize
2.8MB

MD5
744fc319f32b3ed3417bd93d6e3d5ddb

SHA1
ac7dcbfcfba00710666f390573fa818d641be7e1

SHA256
d9312f8c6e473004f4a50b533de30bee30f7a8763ac0c567ca1b0dd2eb017afa

SHA512
0e3027e521438aedbe9bbf9959c9487e38638a4364ae1774c690cabda3b275d1b4bd40b405fbe9ccd75c5a1f900b521b39d58c3e656f76f68e87803c638666c3

Download Submit
\Program Files (x86)\Borderless Gaming\CommandLine.dll

Filesize
57KB

MD5
ec0e2dd54144d6f6a317b7daa715d418

SHA1
62c2e04bba8436912d9bcec1ec4d4c7afc843a47

SHA256
4923528d3d18689d58fa30b3d822ab72a13be21a57f13e0bc59b55b864424f7a

SHA512
ccaf01f89fab001ef2ded15b352e1dd2ab3967584a8720acb7c6b7203240f9c896f7d46600b12e0e86b25b30779b1e5ed59ce97fb3f295afb11d6391670265ef

Download Submit
\Program Files (x86)\Borderless Gaming\CommandLine.dll

Filesize
57KB

MD5
ec0e2dd54144d6f6a317b7daa715d418

SHA1
62c2e04bba8436912d9bcec1ec4d4c7afc843a47

SHA256
4923528d3d18689d58fa30b3d822ab72a13be21a57f13e0bc59b55b864424f7a

SHA512
ccaf01f89fab001ef2ded15b352e1dd2ab3967584a8720acb7c6b7203240f9c896f7d46600b12e0e86b25b30779b1e5ed59ce97fb3f295afb11d6391670265ef

Download Submit
\Program Files (x86)\Borderless Gaming\DotNetZip.dll

Filesize
448KB

MD5
f292d363754984c8fbc921fa2b5e2700

SHA1
7a855f57741d91c12aef038aa4f18f259872ff3c

SHA256
aaaf2670c222cb0af424a796c4831af6258ee40da29ea81d9fc7e2fcb171f345

SHA512
be3fc49ef90a60ed6418f66a4a1196c56e97fad7519e9b0fde7d3c47711370a2b85b89ff496f896b3086744052c92f5baa31255c2db5e5a81fbc3bcc827b0041

Download Submit
\Program Files (x86)\Borderless Gaming\DotNetZip.dll

Filesize
448KB

MD5
f292d363754984c8fbc921fa2b5e2700

SHA1
7a855f57741d91c12aef038aa4f18f259872ff3c

SHA256
aaaf2670c222cb0af424a796c4831af6258ee40da29ea81d9fc7e2fcb171f345

SHA512
be3fc49ef90a60ed6418f66a4a1196c56e97fad7519e9b0fde7d3c47711370a2b85b89ff496f896b3086744052c92f5baa31255c2db5e5a81fbc3bcc827b0041

Download Submit
\Program Files (x86)\Borderless Gaming\Facepunch.Steamworks.dll

Filesize
1017KB

MD5
e3752a681002136f751b21fec89669be

SHA1
f23eb0f1bfd08e3851ca2128cca40305d1970962

SHA256
4dd4a33d1e71a3d775bddd311de3bdfa8c472e5ae557f7d0df2d1c3469d03864

SHA512
a7dd21c90947535db31e2d72851d7888dd7eb430c973271cc3620b3e6c9e03af9eb3c631d30b49c14e7ecd0ffed82947dbbe110b0f3834647b0baedd2fce55eb

Download Submit
\Program Files (x86)\Borderless Gaming\Facepunch.Steamworks.dll

Filesize
1017KB

MD5
e3752a681002136f751b21fec89669be

SHA1
f23eb0f1bfd08e3851ca2128cca40305d1970962

SHA256
4dd4a33d1e71a3d775bddd311de3bdfa8c472e5ae557f7d0df2d1c3469d03864

SHA512
a7dd21c90947535db31e2d72851d7888dd7eb430c973271cc3620b3e6c9e03af9eb3c631d30b49c14e7ecd0ffed82947dbbe110b0f3834647b0baedd2fce55eb

Download Submit
\Program Files (x86)\Borderless Gaming\protobuf-net.dll

Filesize
269KB

MD5
4a4756e227c10623d81228bc4bc49c1d

SHA1
964014f538918d85f6eb6a7b4023b304067b28f7

SHA256
042b8c1c1e0eb7648b164ee48c95168c48324f1fb439cabd5f2e41db0938d807

SHA512
93d2c6f47c618dc9493f5a538cbfb5a32c1e3bb35a623b51561057245f2fa557c452ee18ae274182c3e0440b77353c5490d196f16eda142b6129e8d1108e5a04

Download Submit
\Program Files (x86)\Borderless Gaming\protobuf-net.dll

Filesize
269KB

MD5
4a4756e227c10623d81228bc4bc49c1d

SHA1
964014f538918d85f6eb6a7b4023b304067b28f7

SHA256
042b8c1c1e0eb7648b164ee48c95168c48324f1fb439cabd5f2e41db0938d807

SHA512
93d2c6f47c618dc9493f5a538cbfb5a32c1e3bb35a623b51561057245f2fa557c452ee18ae274182c3e0440b77353c5490d196f16eda142b6129e8d1108e5a04

Download Submit
\Program Files (x86)\Borderless Gaming\steam_api.dll

Filesize
216KB

MD5
04c58bd2e83dd1aae1ab2bff988f5451

SHA1
39274dc210b3dd8c7f0bf2d18b51df3fd4242f60

SHA256
fe302b9cf000b5b56b8f48df9a6737fc43b1c225db91306e92c779cae0d2908d

SHA512
803c0bea494f4fbbb7c7ec57d38185966a668d282da82d41cb2ef18ef5432e77655dc5799b4ce6fd1b1782099d056591bf77130bd71675468660a83cebb2f390

Download Submit
\Program Files (x86)\Borderless Gaming\unins000.exe

Filesize
732KB

MD5
d2d38dc5e66f6165e6556bc708bd3ec5

SHA1
e0d644ca4aed841ac2c9865276501d778cf9a3ad

SHA256
0ddcbf0370254d45aa7c509dc2212931f7acc570c7ece372d0fcd377359751a5

SHA512
7cb3ba585c8337efcea223c5d9a0d5694bb46e4afe7824c146910c7d0e110b258cc171dec776555e24297c74cdf50e96516e8cf0cdf3cc832fdf4f17886f0dcf

Download Submit
\Users\Admin\AppData\Local\Temp\is-Q8UMF.tmp\BorderlessGaming9.5.6_admin_setup.tmp

Filesize
721KB

MD5
98242be0a249553b9b4f1bdbf14cd9d3

SHA1
72fca546b10fad3cf719c5e008748ded45da1228

SHA256
a166749687ffeb6938a0a24bc431a96f054e080994b3292b07d933f67ab7002a

SHA512
08ec542ddfe1e9defa4fd67e8cefb3929bdec727f81611f98602b9057296d7afb55f845fafff578c30ebc6ab254a8be2aa150b05bd95802cbe6bd37a56e8cfd0

Download Submit
memory/1260-54-0x0000000000100000-0x00000000003DA000-memory.dmp

Filesize
2.9MB

Download
memory/2060-900-0x0000000004DE0000-0x0000000004E20000-memory.dmp

Filesize
256KB

Download
memory/2060-746-0x0000000000360000-0x000000000037E000-memory.dmp

Filesize
120KB

Download
memory/2060-1380-0x0000000004DE0000-0x0000000004E20000-memory.dmp

Filesize
256KB

Download
memory/2060-875-0x0000000005410000-0x0000000005514000-memory.dmp

Filesize
1.0MB

Download
memory/2060-787-0x0000000004D60000-0x0000000004DD6000-memory.dmp

Filesize
472KB

Download
memory/2060-783-0x0000000004DE0000-0x0000000004E20000-memory.dmp

Filesize
256KB

Download
memory/2060-780-0x0000000000AB0000-0x0000000000AFA000-memory.dmp

Filesize
296KB

Download
memory/2060-760-0x00000000003B0000-0x00000000003C4000-memory.dmp

Filesize
80KB

Download
memory/2060-883-0x0000000004DE0000-0x0000000004E20000-memory.dmp

Filesize
256KB

Download
memory/2060-2425-0x0000000004DE0000-0x0000000004E20000-memory.dmp

Filesize
256KB

Download
memory/2060-2424-0x0000000004DE0000-0x0000000004E20000-memory.dmp

Filesize
256KB

Download
memory/2060-742-0x0000000001040000-0x000000000131A000-memory.dmp

Filesize
2.9MB

Download
memory/2060-891-0x0000000004DE0000-0x0000000004E20000-memory.dmp

Filesize
256KB

Download
memory/2060-1359-0x0000000004DE0000-0x0000000004E20000-memory.dmp

Filesize
256KB

Download
memory/2764-641-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download
memory/2764-756-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download
memory/2788-650-0x0000000000240000-0x0000000000241000-memory.dmp

Filesize
4KB

Download
memory/2788-755-0x0000000000400000-0x00000000004C4000-memory.dmp

Filesize
784KB

Download