Malware Analysis Report

2024-09-11 06:47

Sample ID 240522-savkbsfa95
Target https://github.com/pankoza2-pl/trojan-leaks
Tags
bootkit discovery evasion exploit persistence
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

Threat Level: Known bad

The file https://github.com/pankoza2-pl/trojan-leaks was found to be: Known bad.

Malicious Activity Summary

bootkit discovery evasion exploit persistence

Modifies WinLogon for persistence

Disables Task Manager via registry modification

Disables RegEdit via registry modification

Possible privilege escalation attempt

Downloads MZ/PE file

Checks computer location settings

Executes dropped EXE

Modifies file permissions

Legitimate hosting services abused for malware hosting/C2

Writes to the Master Boot Record (MBR)

Drops file in Program Files directory

Enumerates physical storage devices

Modifies data under HKEY_USERS

Opens file in notepad (likely ransom note)

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Runs ping.exe

Suspicious use of WriteProcessMemory

Checks SCSI registry key(s)

Enumerates system info in registry

Modifies registry class

Suspicious behavior: EnumeratesProcesses

Suspicious use of SendNotifyMessage

Suspicious use of FindShellTrayWindow

Suspicious use of AdjustPrivilegeToken

MITRE ATT&CK Matrix V13

Initial Access
TA0001
Execution
TA0002
Persistence
TA0003
Boot or Logon Autostart Execution
T1547
Winlogon Helper DLL
T1547.004
Pre-OS Boot
T1542
Bootkit
T1542.003
Privilege Escalation
TA0004
Boot or Logon Autostart Execution
T1547
Winlogon Helper DLL
T1547.004
Defense Evasion
TA0005
Modify Registry
T1112
File and Directory Permissions Modification
T1222
Pre-OS Boot
T1542
Bootkit
T1542.003
Credential Access
TA0006
Discovery
TA0007
Query Registry
T1012
System Information Discovery
T1082
Peripheral Device Discovery
T1120
Remote System Discovery
T1018
Lateral Movement
TA0008
Collection
TA0009
Exfiltration
TA0010
Command and Control
TA0011
Web Service
T1102
Impact
TA0040
Resource Development
TA0042
Reconnaissance
TA0043

Analysis: static1

Detonation Overview

Reported

2024-05-22 14:55

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-05-22 14:55

Reported

2024-05-22 15:14

Platform

win10v2004-20240508-en

Max time kernel

1088s

Max time network

1090s

Command Line

"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://github.com/pankoza2-pl/trojan-leaks

Signatures

Modifies WinLogon for persistence

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell = "satan" C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A

Disables RegEdit via registry modification

evasion
Description Indicator Process Target
Set value (int) \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools = "1" C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A

Disables Task Manager via registry modification

evasion

Downloads MZ/PE file

Possible privilege escalation attempt

exploit
Description Indicator Process Target
N/A N/A C:\Windows\system32\takeown.exe N/A
N/A N/A C:\Windows\system32\icacls.exe N/A
N/A N/A C:\Windows\system32\takeown.exe N/A
N/A N/A C:\Windows\system32\icacls.exe N/A
N/A N/A C:\Windows\system32\takeown.exe N/A
N/A N/A C:\Windows\system32\icacls.exe N/A

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\sphenoidale GDI.exe N/A
N/A N/A C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A

Modifies file permissions

discovery
Description Indicator Process Target
N/A N/A C:\Windows\system32\takeown.exe N/A
N/A N/A C:\Windows\system32\icacls.exe N/A
N/A N/A C:\Windows\system32\takeown.exe N/A
N/A N/A C:\Windows\system32\icacls.exe N/A
N/A N/A C:\Windows\system32\takeown.exe N/A
N/A N/A C:\Windows\system32\icacls.exe N/A

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A

Writes to the Master Boot Record (MBR)

bootkit persistence
Description Indicator Process Target
File opened for modification \??\PhysicalDrive0 C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files\Temp\mirror_snd.wav C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
File opened for modification C:\Program Files\Temp\plg.wav C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
File opened for modification C:\Program Files\Temp\wind_short.wav C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
File opened for modification C:\Program Files\Temp\static_color.wav C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
File opened for modification C:\Program Files\Temp\stretch.wav C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
File opened for modification C:\Program Files\Temp\tunnel.wav C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
File opened for modification C:\Program Files\Temp\wind_snd.wav C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
File opened for modification C:\Program Files\Temp\clutterus_ico.ico C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
File opened for modification C:\Program Files\Temp\crossHD_medium.ico C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
File opened for modification C:\Program Files\Temp\crossHD_small.ico C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
File opened for modification C:\Program Files\Temp\rainbow_snd.wav C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
File opened for modification C:\Program Files\Temp\invert_snd.wav C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
File opened for modification C:\Program Files\Temp\wind_edit.wav C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A

Enumerates physical storage devices

Checks SCSI registry key(s)

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000 C:\Windows\system32\taskmgr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A C:\Windows\system32\taskmgr.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName C:\Windows\system32\taskmgr.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133608633610408166" C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Opens file in notepad (likely ransom note)

ransomware
Description Indicator Process Target
N/A N/A C:\Windows\System32\NOTEPAD.EXE N/A

Runs ping.exe

Description Indicator Process Target
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
N/A N/A C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
N/A N/A C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
N/A N/A C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
N/A N/A C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
N/A N/A C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
N/A N/A C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
N/A N/A C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
N/A N/A C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
N/A N/A C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
N/A N/A C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
N/A N/A C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
N/A N/A C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
N/A N/A C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
N/A N/A C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
N/A N/A C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
N/A N/A C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
N/A N/A C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
N/A N/A C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
N/A N/A C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
N/A N/A C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
N/A N/A C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
N/A N/A C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
N/A N/A C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
N/A N/A C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
N/A N/A C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
N/A N/A C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
N/A N/A C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
N/A N/A C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
N/A N/A C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
N/A N/A C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
N/A N/A C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
N/A N/A C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
N/A N/A C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
N/A N/A C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A
N/A N/A C:\Users\Admin\Downloads\Clutt6.6.6.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 5076 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 3240 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 1416 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 1416 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 1416 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 1416 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 1416 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 1416 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 1416 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 1416 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 1416 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 1416 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 1416 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 1416 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 1416 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 1416 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 1416 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 1416 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 1416 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 1416 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 1416 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 1416 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 1416 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 1416 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 1416 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 1416 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 1416 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 1416 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 1416 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 1416 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 1416 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 1416 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 1416 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 704 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 704 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 3424 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 3424 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 3424 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 3424 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 3424 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 3424 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 3424 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 3424 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 3424 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 3424 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 3424 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 3424 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 3424 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 3424 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 3424 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 3424 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 3424 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 3424 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 3424 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 3424 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 3424 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 3424 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 3424 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 3424 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 3424 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 3424 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 3424 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 3424 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 5076 wrote to memory of 3424 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe

Processes

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://github.com/pankoza2-pl/trojan-leaks

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0xfc,0x100,0x104,0x40,0x108,0x7ff9496eab58,0x7ff9496eab68,0x7ff9496eab78

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1592 --field-trial-handle=1904,i,5338569170096974972,17520779175667368176,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 --field-trial-handle=1904,i,5338569170096974972,17520779175667368176,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2260 --field-trial-handle=1904,i,5338569170096974972,17520779175667368176,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3028 --field-trial-handle=1904,i,5338569170096974972,17520779175667368176,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3036 --field-trial-handle=1904,i,5338569170096974972,17520779175667368176,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4040,i,10373433614523925616,13586256558317053467,262144 --variations-seed-version --mojo-platform-channel-handle=4104 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4388 --field-trial-handle=1904,i,5338569170096974972,17520779175667368176,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4520 --field-trial-handle=1904,i,5338569170096974972,17520779175667368176,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4536 --field-trial-handle=1904,i,5338569170096974972,17520779175667368176,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4748 --field-trial-handle=1904,i,5338569170096974972,17520779175667368176,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4820 --field-trial-handle=1904,i,5338569170096974972,17520779175667368176,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4764 --field-trial-handle=1904,i,5338569170096974972,17520779175667368176,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4968 --field-trial-handle=1904,i,5338569170096974972,17520779175667368176,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4900 --field-trial-handle=1904,i,5338569170096974972,17520779175667368176,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4760 --field-trial-handle=1904,i,5338569170096974972,17520779175667368176,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5032 --field-trial-handle=1904,i,5338569170096974972,17520779175667368176,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=4668 --field-trial-handle=1904,i,5338569170096974972,17520779175667368176,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=4244 --field-trial-handle=1904,i,5338569170096974972,17520779175667368176,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4744 --field-trial-handle=1904,i,5338569170096974972,17520779175667368176,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4672 --field-trial-handle=1904,i,5338569170096974972,17520779175667368176,131072 /prefetch:8

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x510 0x514

C:\Users\Admin\Downloads\sphenoidale GDI.exe

"C:\Users\Admin\Downloads\sphenoidale GDI.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3252 --field-trial-handle=1904,i,5338569170096974972,17520779175667368176,131072 /prefetch:8

C:\Windows\system32\taskmgr.exe

"C:\Windows\system32\taskmgr.exe" /4

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3284 --field-trial-handle=1904,i,5338569170096974972,17520779175667368176,131072 /prefetch:8

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Program Files\7-Zip\7zG.exe

"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\" -an -ai#7zMap970:82:7zEvent19110

C:\Program Files\7-Zip\7zG.exe

"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\Solaris2.0\" -ad -an -ai#7zMap25147:82:7zEvent16860

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=4924 --field-trial-handle=1904,i,5338569170096974972,17520779175667368176,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --mojo-platform-channel-handle=4800 --field-trial-handle=1904,i,5338569170096974972,17520779175667368176,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4852 --field-trial-handle=1904,i,5338569170096974972,17520779175667368176,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5572 --field-trial-handle=1904,i,5338569170096974972,17520779175667368176,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --mojo-platform-channel-handle=5596 --field-trial-handle=1904,i,5338569170096974972,17520779175667368176,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --mojo-platform-channel-handle=5348 --field-trial-handle=1904,i,5338569170096974972,17520779175667368176,131072 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=1392,i,10373433614523925616,13586256558317053467,262144 --variations-seed-version --mojo-platform-channel-handle=1408 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --mojo-platform-channel-handle=3348 --field-trial-handle=1904,i,5338569170096974972,17520779175667368176,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5516 --field-trial-handle=1904,i,5338569170096974972,17520779175667368176,131072 /prefetch:8

C:\Program Files\7-Zip\7zG.exe

"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\" -an -ai#7zMap23217:120:7zEvent12913

C:\Windows\System32\NOTEPAD.EXE

"C:\Windows\System32\NOTEPAD.EXE" C:\Users\Admin\Downloads\Solaris2.0\Source_Code\Solaris.bat

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Downloads\Solaris2.0\Source_Code\Solaris.bat" "

C:\Windows\system32\PING.EXE

PING localhost -n 10

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Downloads\Solaris2.0\Solaris2.0\Source_Code\Solaris.bat" "

C:\Windows\system32\PING.EXE

PING localhost -n 10

C:\Windows\system32\NOTEPAD.EXE

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Downloads\README!.txt

C:\Users\Admin\Downloads\Clutt6.6.6.exe

"C:\Users\Admin\Downloads\Clutt6.6.6.exe"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /k takeown /f C:\Windows\System32 && icacls C:\Windows\System32 /grant "%username%:F" && takeown /f C:\Windows\System32\drivers && icacls C:\Windows\System32\drivers /grant "%username%:F" && takeown /f C:\Windows\System32\Boot && icacls C:\Windows\System32\Boot /grant "%username%:F" && exit

C:\Windows\system32\takeown.exe

takeown /f C:\Windows\System32

C:\Windows\system32\icacls.exe

icacls C:\Windows\System32 /grant "Admin:F"

C:\Windows\system32\takeown.exe

takeown /f C:\Windows\System32\drivers

C:\Windows\system32\icacls.exe

icacls C:\Windows\System32\drivers /grant "Admin:F"

C:\Windows\system32\takeown.exe

takeown /f C:\Windows\System32\Boot

C:\Windows\system32\icacls.exe

icacls C:\Windows\System32\Boot /grant "Admin:F"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --mojo-platform-channel-handle=3408 --field-trial-handle=1904,i,5338569170096974972,17520779175667368176,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --mojo-platform-channel-handle=3320 --field-trial-handle=1904,i,5338569170096974972,17520779175667368176,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --mojo-platform-channel-handle=4140 --field-trial-handle=1904,i,5338569170096974972,17520779175667368176,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5680 --field-trial-handle=1904,i,5338569170096974972,17520779175667368176,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5588 --field-trial-handle=1904,i,5338569170096974972,17520779175667368176,131072 /prefetch:8

Network

Country Destination Domain Proto
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 240.221.184.93.in-addr.arpa udp
US 8.8.8.8:53 232.168.11.51.in-addr.arpa udp
US 8.8.8.8:53 215.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 234.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 github.githubassets.com udp
US 8.8.8.8:53 avatars.githubusercontent.com udp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.154:443 github.githubassets.com tcp
US 185.199.108.133:443 avatars.githubusercontent.com tcp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 user-images.githubusercontent.com udp
US 8.8.8.8:53 154.108.199.185.in-addr.arpa udp
US 8.8.8.8:53 133.108.199.185.in-addr.arpa udp
US 8.8.8.8:53 71.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 content-autofill.googleapis.com udp
GB 142.250.200.10:443 content-autofill.googleapis.com tcp
US 8.8.8.8:53 collector.github.com udp
US 140.82.114.21:443 collector.github.com tcp
GB 142.250.200.10:443 content-autofill.googleapis.com udp
US 185.199.108.154:443 github.githubassets.com tcp
US 8.8.8.8:53 10.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 21.114.82.140.in-addr.arpa udp
US 8.8.8.8:53 api.github.com udp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 210.156.26.20.in-addr.arpa udp
N/A 224.0.0.251:5353 udp
NL 23.62.61.160:443 www.bing.com tcp
US 8.8.8.8:53 160.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 149.220.183.52.in-addr.arpa udp
US 8.8.8.8:53 157.123.68.40.in-addr.arpa udp
US 8.8.8.8:53 15.164.165.52.in-addr.arpa udp
US 8.8.8.8:53 57.169.31.20.in-addr.arpa udp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 api.github.com udp
US 8.8.8.8:53 content-autofill.googleapis.com udp
GB 20.26.156.210:443 api.github.com tcp
GB 142.250.178.10:443 content-autofill.googleapis.com udp
US 8.8.8.8:53 raw.githubusercontent.com udp
US 185.199.108.133:443 raw.githubusercontent.com tcp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 55.36.223.20.in-addr.arpa udp
US 8.8.8.8:53 11.173.189.20.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
US 8.8.8.8:53 encrypted-tbn0.gstatic.com udp
GB 142.250.178.14:443 encrypted-tbn0.gstatic.com tcp
US 8.8.8.8:53 196.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 195.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 play.google.com udp
GB 142.250.179.238:443 play.google.com udp
GB 142.250.179.238:443 play.google.com tcp
US 8.8.8.8:53 consent.google.com udp
GB 142.250.187.238:443 consent.google.com tcp
US 8.8.8.8:53 238.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 scratch.mit.edu udp
US 151.101.194.133:443 scratch.mit.edu tcp
US 151.101.194.133:443 scratch.mit.edu tcp
US 8.8.8.8:53 133.194.101.151.in-addr.arpa udp
US 8.8.8.8:53 cdn.scratch.mit.edu udp
US 151.101.2.133:443 cdn.scratch.mit.edu tcp
US 151.101.2.133:443 cdn.scratch.mit.edu tcp
US 151.101.2.133:443 cdn.scratch.mit.edu tcp
US 151.101.2.133:443 cdn.scratch.mit.edu tcp
US 151.101.2.133:443 cdn.scratch.mit.edu tcp
US 151.101.2.133:443 cdn.scratch.mit.edu tcp
US 8.8.8.8:53 cdn2.scratch.mit.edu udp
US 8.8.8.8:53 uploads.scratch.mit.edu udp
GB 142.250.178.10:443 content-autofill.googleapis.com udp
US 8.8.8.8:53 133.2.101.151.in-addr.arpa udp
US 8.8.8.8:53 104.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 216.239.34.36:443 region1.google-analytics.com tcp
US 8.8.8.8:53 36.34.239.216.in-addr.arpa udp
US 216.239.34.36:443 region1.google-analytics.com udp
US 8.8.8.8:53 api.scratch.mit.edu udp
US 151.101.2.133:443 api.scratch.mit.edu tcp
US 151.101.2.133:443 api.scratch.mit.edu tcp
US 8.8.8.8:53 projects.scratch.mit.edu udp
US 8.8.8.8:53 assets.scratch.mit.edu udp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
US 192.178.49.195:443 beacons.gcp.gvt2.com tcp
US 8.8.8.8:53 195.49.178.192.in-addr.arpa udp
US 192.178.49.195:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.179.238:443 play.google.com udp
US 8.8.8.8:53 i.ytimg.com udp
GB 142.250.178.22:443 i.ytimg.com tcp
GB 142.250.178.22:443 i.ytimg.com tcp
GB 142.250.178.22:443 i.ytimg.com tcp
GB 142.250.178.22:443 i.ytimg.com tcp
US 8.8.8.8:53 www.youtube.com udp
GB 142.250.178.22:443 i.ytimg.com udp
US 8.8.8.8:53 22.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 static.doubleclick.net udp
GB 216.58.212.194:443 googleads.g.doubleclick.net tcp
GB 216.58.213.6:443 static.doubleclick.net tcp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
GB 142.250.187.234:443 jnn-pa.googleapis.com tcp
GB 216.58.212.194:443 googleads.g.doubleclick.net udp
GB 142.250.187.234:443 jnn-pa.googleapis.com udp
GB 142.250.179.238:443 www.youtube.com udp
GB 142.250.179.238:443 www.youtube.com tcp
US 8.8.8.8:53 194.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 6.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 234.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 encrypted-vtbn0.gstatic.com udp
GB 142.250.180.14:443 encrypted-vtbn0.gstatic.com tcp
GB 142.250.180.14:443 encrypted-vtbn0.gstatic.com udp
GB 142.250.178.14:443 www.youtube.com udp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 content-autofill.googleapis.com udp
US 8.8.8.8:53 collector.github.com udp
US 140.82.112.22:443 collector.github.com tcp
US 8.8.8.8:53 api.github.com udp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 22.112.82.140.in-addr.arpa udp
US 192.178.49.195:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 api.github.com udp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
GB 172.217.169.35:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 e2c41.gcp.gvt2.com udp
US 8.8.8.8:53 beacons.gvt2.com udp
GB 172.217.169.3:443 beacons.gvt2.com tcp
GB 35.214.42.68:443 e2c41.gcp.gvt2.com tcp
GB 35.214.42.68:443 e2c41.gcp.gvt2.com tcp
GB 172.217.169.3:443 beacons.gvt2.com udp
US 8.8.8.8:53 35.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 3.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 68.42.214.35.in-addr.arpa udp
US 8.8.8.8:53 beacons2.gvt2.com udp
SG 74.125.130.94:443 beacons2.gvt2.com tcp
SG 74.125.130.94:443 beacons2.gvt2.com tcp
SG 74.125.130.94:443 beacons2.gvt2.com udp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
GB 172.217.169.35:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 94.130.125.74.in-addr.arpa udp
US 8.8.8.8:53 beacons.gvt2.com udp
GB 172.217.169.3:443 beacons.gvt2.com udp
SG 74.125.130.94:443 beacons2.gvt2.com udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.187.196:443 www.google.com udp
US 8.8.8.8:53 region1.google-analytics.com udp
US 216.239.34.36:443 region1.google-analytics.com udp
US 8.8.8.8:53 i.ytimg.com udp
GB 142.250.178.22:443 i.ytimg.com udp
US 8.8.8.8:53 www.youtube.com udp
GB 172.217.169.78:443 www.youtube.com udp
GB 172.217.169.78:443 www.youtube.com tcp
US 8.8.8.8:53 78.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 play.google.com udp
GB 142.250.179.238:443 play.google.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 216.58.213.2:443 googleads.g.doubleclick.net udp
US 8.8.8.8:53 jnn-pa.googleapis.com udp
GB 142.250.200.42:443 jnn-pa.googleapis.com udp
US 8.8.8.8:53 2.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 42.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 collector.github.com udp
US 140.82.114.21:443 collector.github.com tcp
US 8.8.8.8:53 api.github.com udp
GB 20.26.156.210:443 api.github.com tcp
GB 20.26.156.210:443 api.github.com tcp
GB 20.26.156.215:443 github.com tcp
GB 172.217.169.35:443 beacons.gcp.gvt2.com udp
US 8.8.8.8:53 beacons.gcp.gvt2.com udp
GB 172.217.169.35:443 beacons.gcp.gvt2.com udp

Files

\??\pipe\crashpad_5076_SMHSZNNLAPPRHJDK

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 dcbe2a3db1a2687476615c901d100afb
SHA1 e1fc5c08bc374d3698bee63e5d58a6e715786ec7
SHA256 e9560a80bcbe4fba204e3325c85b0e0b135f6bf69379159d07b732d0fc118784
SHA512 61f9f7f2dd04c8998f5977f9b4ca56aec73463f96e9315e9e5f7e884a9375c329d1e9d8be70cb1b385e7d4c7a96bb3c07776c278e4fd5e306ba4e65fae54c835

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 8916684cd338f200159e8417df41ade5
SHA1 e5d0238bf40e9958838186dbbfe48bea4b80e339
SHA256 4cf396e7a52678e5d22718afdd58983026bde3005e7c6ec194e0335b4654eb2d
SHA512 306bf786a2591583828f36fb5150b7ae94d40fa35f57d5e6b2fcb2bbef08589ffad924c404168f3421eaf9a13f7a827542bff599dec74d522e04b04edccad983

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 200b51d29c9e2f2092e0fa2e3b6612a2
SHA1 2ca01c40efbc7976f22ca72fa17d4b72d4d2aa30
SHA256 794e7d5e388addb84b3acf57287c961f1882dd21497d75c29d9b909875ab4bf5
SHA512 4600d595bcf10146b7729e8fe79edd5f7a5d6b22594ffaf0a90236205312c37da562760cf7ed9ae58b5fb72bb0d3bac2e4f96f121dd774ac0e780a837bee2e53

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 31a5250dd299be6215ddf5de5c43814a
SHA1 07d0dc6fede625afe1164351e2718c39c2a19f22
SHA256 a6017102a3bd52aa73e23224b03545e63f5d93d9cc9e328928c1fad691775894
SHA512 707d5b17b13738f1e7c46e09b4265754611b16c6b380d14042d83aa91b50b539d7f4de3c387fdb25d67755fd5fb260df6e8e9146faade90677d042bbe8c0ae4a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 58e6fddb0b827e42c6acda52c071771a
SHA1 9b913d4d9917714668d495f6bfc1efefd77125e8
SHA256 abb8b9c39cd0a31f6b697792bf98ae83283329cce5b730cbf3e5815bab6c788a
SHA512 5cc27fe6738fb0f3d201267eabafc1829f6614fd67c7e605982c6bc944b89a7f6bab3056a3c952c93a7dc2aff637b2a1b0874f4e818116e12805583cef6d2926

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 12dfc9d34e7eabf7942d77517a579d39
SHA1 9f5d538f7e92808d71eec4c488d230a13bc701bf
SHA256 fc385f5d3cf6c25a4b2d60f8cc1a9dc8a359a9439ddb1ad8347b7dec692fba23
SHA512 ade12184129a500e94ff4299f3bd9a8ddc6bcee9b4ede8691ccdf34d115be196408e451c9710ae23b4d6ff73b65266463bc345919384646876bfc853f834d286

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 4cf3f6fa6d3e5d86f652d1816bc506d5
SHA1 33c4b36b9fa4b4ea1730868d8c33410df69004f4
SHA256 5937d79418272edb5d88312a88f9234f2f7fcd695acbe047f55888946961b845
SHA512 ef19283ba5279b6f8d79922bbb950628d648cf761c8d86539cb0a0bdfbcd611d10ddcd6abbe0a8bc67c31e33cde3c9f5c63164ecec1cf489ceb937f9384b9295

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 efbb18256e3803aba074f456dc65ff69
SHA1 895e4d25cf974fb05944813331233ced94a37e50
SHA256 27bf952cd7c03a4b2d50778e95a5d56f4648b514071ebf4b94d0f431561b219d
SHA512 29749e5b3cab10ad8ea66ffb0fbdd287e533410b7ea83c750cbcd5cf5bbb750237c626ca7ddd06592e3d015b1da2eecdcbed91a1d042d80cb6a75b4d12e21237

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 86f58c28ec395772029878e05021358f
SHA1 718079a88857e54f623534a21900603cc23bb943
SHA256 f8f50463cf09cbb31d7656afe1e59cc94123dba7249afbbccfb19f42f19f0401
SHA512 7f78ceaf0d3f42dbb82b8401af9eb8e70459fba640e9cf5c066631f07aa37b8f7faa7298f0bb6dbe8dfbbccd9457c5bb2b977fc45124f04360c5b0cd2becf7d4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe596037.TMP

MD5 ef0bb8b6f494c244d373039397f7b217
SHA1 c170dfdb37f2bda0a15924efe15f0805e69df11e
SHA256 43bfca882791dc5b0cd64a992927354dff065e661b422d44b0cb8f9e38461975
SHA512 563eade57a94df684a33951b2cd2fbf100562c2321bda2ae2e71985cc5030966ba3ddf7c7e74c4226935ecb1003d18aec353cc16ad094d34236e4c8740517d53

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 719f1ec50f4fa4fecf64568cba4c43cd
SHA1 40f4959deb064fe1ce9ee818a5ff5a2172c8ac16
SHA256 81e87b2f3356297c8008373566acee89dc1d2ba6efea782515ff565bfc01c765
SHA512 7cfcf76d5374c0096e3cf883411e16267d73c192a7af95d3f72d3ce18f5b873a110304070cba06f3965b8fccb55d40b4081afaa6568f6bf7a651cdcb5b4d5417

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 e2337816621c7e35b098c4620b269e3d
SHA1 23b3d1f0ee6b7b1baf03af72478dce3f7f11cd53
SHA256 0f2dc9bd2ce94057ff69b6edb17578cdc4046e3c3f3190a1618ffd53ba8a45b8
SHA512 0915e2617636c9774749016b277b98216f44e77d4e7fd8b6ca11d7b84150ac26d49a073b59d163ee8773028f653e4818512c76e8bf286cfb36b927682eb2f0e2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 d5193ffc3e19229d61b8120716e1dcea
SHA1 6d64b90efb333998ed5ac4a91ccc24d2431d1331
SHA256 9b22d3f47454325611f5c66edb0e3a492855870db709ff8ba332a7da3fcee9d5
SHA512 34e7989e45e392e5d639a3b153a1d0dc4db78719be10e315de88ad01a0b0823445f80fff2648c68fb22d2b0ed64d3587a1ee39f23954a33211046ccf724c1b57

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 33fc9f46924400f5acb4668af056b871
SHA1 700cf837f07a7bfc4d35e95f8628821918af491c
SHA256 efdc17cf6945a9859514d8ef2db8808ae4a5b2c759fe052debf65e481111f82c
SHA512 c22320fb0cfac9e865e714d64f084d2b3dde6604783286ee3daf9aacf082d6ddcc802ce5490bacaa0e680bd8d72a1edd4d0cc11e2b02a63523fa27043f9480f1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 10c5e4b6f3c44e8fbfcc97c6a06f1397
SHA1 bdfa84f77e72fa40ea224cadc2acdcf9ba1e98ef
SHA256 384691588550968f6e867520dc807d51fd32bd0488f873dcaf5f052ba6910a0c
SHA512 1b84476df81d602f0437d339ca869446982bd4270148da9b45a4cae2b1fad929c7f1aa9d0b5e288c2f08e0291b5d02329084fd32bcca8656a18a196012e7baef

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 e45fdab4fe75fbb124ddf566d7edf22e
SHA1 fdf599a9d1433819e5a85d65fcc8728722f240c0
SHA256 22ab9146f5ee7585d42612f3cfa3f43719e51cca89f9b74376fe214866070b31
SHA512 0e28a0774d4320824363929418c7308252e6307afcd5ef4268eac32552e50bd30490706164af4a651129b305ea6fc3f44d9a3d1d835b4dca7983a2912c86fbbf

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 fdf6a4dfb26fe734d51151bb3a382d68
SHA1 ca33ebd3a531233771b4daf21d0fd57cd60d7a58
SHA256 4510ee4878f9524e2d48b863a151592bf51c330f2efcab1a145ed75c5f855b19
SHA512 6bd504b48fb0189dbd5fdc420e7fa057f66bbb53c3563a4a086a1ae9744bfbb53a267aacea1abd7263097d686ec180d80aba2eb6b4f48d14b3c7a91bb5e6cf3a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 0fd0f68a9382b2e01362c11662e30062
SHA1 26d00a9d69a6c296c2bdebd46406e281aa3ca81c
SHA256 22cbc5ea7cbba72b202fd198059a7efbb265da5c54bcb66bdbdd68bdd4bcc8be
SHA512 40b8d07f836f1afa5cfbf736b9729ca74445404c1d3cb235542b713dc678c33b0c93f0607ea133a8fa37e0ef43ec51a1798723b5e4d0fd458c5a9f7c0b3f0d96

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 cd1a31c7b0d04018046c8eefac8a280f
SHA1 94c4e2ff27c92b0c69af7da65d6ba510617aeaa2
SHA256 808297b55b92eac650729c00931297d9554f57155873a4ef02d8141a5a5ef6eb
SHA512 578461085d52c5a6555bcb73570107a3d260fa44ed65c1850e29b49da32610228fc1cb73ddff9f5e6fe2df84335e81806715eb45bf84990771f54d5c2a80eb2d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 79ec17bfe7b8024189003cfdb0a0a321
SHA1 53c383a6a08d06763f2516c4e301b5dd0b1d2aa4
SHA256 12e9c9be72e4aa7f71f5007bb3e5bb3523bacbeb8d6eebb28022cde1a93e550d
SHA512 8aece2199bfb6d80df5dc15f9f9eec01d1f30838f6008debd2347d5c1b06c1e5f0a92496c28fbfbb5c334b038f483d370ce5209ef918911481b74e8bc740bb0b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 692792ba394c072abf1f42e8554cf643
SHA1 f16ee993fb2e3ad98bebf331888d4cc74bcdf1e9
SHA256 17010f0badd7bc83ce8b8afad3a107c211c18b864ee7b61b93d83d2f28e8c8ef
SHA512 7dcdf0d3d4d241ad14d6d2c0f0075ad437af4c5bd8c8bf2cd27a9fd527051f12df1d25345f0d4a5005cb3fe83bd74e5d34527900212137262df1710a521799ed

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 8f9fe0ac2a18306e1ed84acc9e381fe3
SHA1 65b455e1796da92ba7b73c302e28eaca6956d594
SHA256 6b18343c33798e7c5bd7ddf968982e703ca7f3767b130cd3b573e0dd6c694ef3
SHA512 351790c4e61a116bd5853fb30bacdb71d26b1cc05b6e095b471231b59139aa5ea3f9d12f06baabea7615ef6cafcd39d462a9c2675ce96318a09ed456cafa8686

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 a492afd79f03fe539f8819abf299cd52
SHA1 3d54d49a4bfdd005355b1af9667170dd31f8a710
SHA256 4cd059e746325777a84ff63eed16e4b80c058f887110d4af636a1419e46f4113
SHA512 da220a1a71a3450a35bf89ed8dd8c3b33ca8dce0f7427b2c89e14dd2b7220fe410a907125f2394807c43346fc96b655bce587d426c553e7bbacd95d5e2e97107

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 65995d0581b37db093b7ccf97c6ce162
SHA1 66182b624aaf1573de1b8a439c6569dc02e9c834
SHA256 4ec23f16501e2616493308c07a1b35d9ba99d2d10b5ee57a60f8dd84d7bb24ea
SHA512 f9419dcffe4c4e635d686dc266b9fb245d7afab42767fe6d5f3de51e23e12f389eff0141e6ff1eda65a2dbca017427fa066df25dd6e5aab7dadf055b7cccbfd8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 27a92281de3e80fbb4a594e5c5f6d1ee
SHA1 25f8ece363416a5e56478a59debdbcd2236e52b2
SHA256 7a6557a366923a6c6b17e95f9182f59b85032faf9a30fc3053274b910db507a0
SHA512 b68d3658c906c55772696ed87c7acf5ca411dc9e0335d60cfe51a9460e4ec766fcc16cdb973d521b321527d274921f58bc3c48ad7710d9a91f04f5f7858f3a0a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 413ed0128f0fbd86e92aaeb1f0a95a8d
SHA1 10abdfcae198fff9f37c09740a48eac2f0ba3b9d
SHA256 d4ae331fcac4c61bd7e5d2f63e1c689a16c5052ab4eec90ed6a08e8576187aa1
SHA512 aa3125075d2f9c148f407a5f975a7e8c738bfe98f3aaf56b52c4ae6bd6922839e25fc57647daea524eb1d8b7988c010aa87ac4b667a3720a75da94de544a976c

C:\Users\Admin\Downloads\sphenoidale GDI.exe

MD5 13099517fde1e9a212f9e0cc66f36344
SHA1 357d389f133b905b64e58e5e5dbfdd8cf4cec25f
SHA256 f6dfe4cd3f4e3ef1157263f0f460def18220c8375baa2eca8b5e23b016598dcf
SHA512 0c63ad950c65d5ea5529a2496e1767d1fb480255717aa770c791e6d1dca48611b1ffa7dfd53420622ee8fa1130d747096edfd9db843fc6a9c7ef6911f1cd9dc7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 c461188ccaf0b62a5958c8536b17b332
SHA1 0bd13fa900e0d5e6e3c12f11bb803310a6a02d43
SHA256 91710fad0f1ae8fd3ca5c2b387f55c35dfeb8fef09bfd2157b07a8d9f24198b2
SHA512 eaae0a255af90bd199c5a3ff546cbb54b3748257b2a3949f9072be95b9629277ae21717dc7e4777807dfbacaf55be557ce6fdfaaba6fc6ca36e00628dd8cf980

memory/3736-669-0x0000000000400000-0x000000000040A000-memory.dmp

memory/3736-670-0x0000000000400000-0x000000000040A000-memory.dmp

memory/3736-671-0x0000000000400000-0x000000000040A000-memory.dmp

memory/3736-672-0x0000000000400000-0x000000000040A000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 f6dacb3a2c5b03a1aaa80940aba5018f
SHA1 e826fb8609e6dbd0a685c234f5f33182683530a5
SHA256 07c5c4c537f4ce8d6c033bdf575028406a684630c42edcfc5bdbc1df7ac0aa67
SHA512 383a15cb983c01fe57b8899010561e35298e3b20a989eb190bb7d4e6edd01a99b57c8eee60263d231e8a7d4c1e2501c16c1a3afca9779dd1b3751e148a5c7716

memory/3736-682-0x0000000000400000-0x000000000040A000-memory.dmp

memory/3736-683-0x0000000000400000-0x000000000040A000-memory.dmp

memory/3736-684-0x0000000000400000-0x000000000040A000-memory.dmp

memory/3736-685-0x0000000000400000-0x000000000040A000-memory.dmp

memory/3736-686-0x0000000000400000-0x000000000040A000-memory.dmp

memory/1060-689-0x0000026216610000-0x0000026216611000-memory.dmp

memory/1060-688-0x0000026216610000-0x0000026216611000-memory.dmp

memory/1060-687-0x0000026216610000-0x0000026216611000-memory.dmp

memory/1060-696-0x0000026216610000-0x0000026216611000-memory.dmp

memory/1060-695-0x0000026216610000-0x0000026216611000-memory.dmp

memory/1060-699-0x0000026216610000-0x0000026216611000-memory.dmp

memory/1060-698-0x0000026216610000-0x0000026216611000-memory.dmp

memory/1060-697-0x0000026216610000-0x0000026216611000-memory.dmp

memory/1060-694-0x0000026216610000-0x0000026216611000-memory.dmp

memory/1060-693-0x0000026216610000-0x0000026216611000-memory.dmp

memory/3736-700-0x0000000000400000-0x000000000040A000-memory.dmp

memory/3736-710-0x0000000000400000-0x000000000040A000-memory.dmp

memory/3736-711-0x0000000000400000-0x000000000040A000-memory.dmp

C:\Users\Admin\Downloads\Solaris2.0.zip

MD5 6b7d77d028d5b31dc426d1727a51e14b
SHA1 0a7280c8b5f3adefa25742eeb7be988d10d664ee
SHA256 cd0b689a82cbd70d02c42c5628879ca5239535cd1659f7d4c6f7e49f52ab2dce
SHA512 c8c6de28772b6b08b11e9f7444482c9a702c8f057180c47758b0d66306dbb47775310f4a828160574d853c94713824bc0cc7b8d614cb76092a33ea14411fc51d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 33ff47062ca234fb2884b06370f1311d
SHA1 a4c4d794f48fc973556e212a7df0439e8f8f73ed
SHA256 dd203d2584e30599e42bf602bab8bbfcd3830f3c53484f3483d6678cf7f78ff8
SHA512 83edc077cac7990f9026acfef6997e167103ff6c5e913807d21006bb219da8ae069802e4973d9492cfd5c6a24def5b592a6a22adcd6b990ff548e514c1bae0a3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 ae1bccd6831ebfe5ad03b482ee266e4f
SHA1 01f4179f48f1af383b275d7ee338dd160b6f558a
SHA256 1b11047e738f76c94c9d15ee981ec46b286a54def1a7852ca1ade7f908988649
SHA512 baf7ff6747f30e542c254f46a9678b9dbf42312933962c391b79eca6fcb615e4ba9283c00f554d6021e594f18c087899bc9b5362c41c0d6f862bba7fb9f83038

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe5e0c81.TMP

MD5 8fd9c659d1c5b95a5b5c1c6e50426334
SHA1 5889b9b8124d6bc2b0f9ad8db62e9c7688c7c7e7
SHA256 69a1d40b86c233ae6ceffbf634561e358314db284a338654ef2b694010f0429d
SHA512 4ededbc709ea0715805b948d3fe31328daa6f79a2b17f63c73d7599bd6e6c0311529314f2c9ea5e232e10486636f6ae7de8946f2342bd0b90be727a6f31e1fa0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 0fddc9ef588da4ec627ebbf3a29e347a
SHA1 ad9186555bfa4da6412cacd65fbe91f48fa506dc
SHA256 b1a30793f1210c54f2351cfdf0a3773a9b3e7d9a0ff6b96493862575bf2ca105
SHA512 9325e3ac98a4f9a89fa7e357781c0ffb3c957b77701eae11a5df217e0bb70ee99c8462cb5466dc8c440578a8523ba5d082a46688fdd233b9d268d4343b16ae9e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 737aac71911c84a1e1173882c3bb3a5c
SHA1 8a24fa8d6921ccaeb8d9fc6381b0aeca8ee754ed
SHA256 7f4babf1fff9bb98e343c16ac142115168275b4ee15c747fece85986323c8a1a
SHA512 76f93e7c6b7ff131588f0ab6151f887588776a2b1bf5730a5cbd7d0a7095002e747c2f5d64b6c4a745241758b34e81c0757015374bbc42b8bbc580b073efd63d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 ee962668017b2ab8dd7619a5787847b3
SHA1 caa867d30b493d12ce69a8da32590033d34f551e
SHA256 7dbda4605e4b1ae6a3446c9805357b68515c4145eace8ae91c99534f54e2efae
SHA512 6118d221bf9b27bc7d07496650214c6688f689025b5bbdaf4d023078ead40bcf39e5831d0fc167f0279efa2ea9c4540f09dcb1fb92ff1ffcdbd31c2513aa8a07

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 9cf6c207b6de550059d37af03a1f9739
SHA1 388deea552be6a6a9959a4dff9a827db4c30e4a6
SHA256 c3a1d2ab5f731f0f8a90f1643f87f9f660bbf78dec6f180dbdcb1c9e302f7452
SHA512 bf7cfdcf94701ffa027c00fe2d6bda393aecc79fec08fc489092882b88aef32d6c05d2dd1037f0fa50791c723b3292ff8a308d113916868377b789a9e389cae9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 38d5df7a01727e6ce4a5210baae04a31
SHA1 6ef1adda79d8b816043d70354fc6c2db03e2ee96
SHA256 7e42dc7746531fffac9d1c03e46ab03db9c209cf2eaa36d0169b00a82858661d
SHA512 cf6d83242ac381f19421af08aaa483265d679bba0703f63e4daee8bad6ed7e3ebfedd0bfe17de0a5a75e542d6ba6a22166314b5485cc12eb3b4c1a57324c661e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 f0a11bb1d75e51dbd73c70ad41f47b1f
SHA1 16b84920b8c70b34a03acf3bad2026806a9e3487
SHA256 4f06bcb2f725af5168d6b6a7cbf75c014a29084bed17f28f801741f8b9ca1acf
SHA512 e7ad28f454c3b16300b4602e26e32d7dc5728eae1bbde89aaf017fb640755c39ab97422edb1ed57c37837a2b22651f7adc7aa531cbd9ad6d594142f309abb4fd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007

MD5 13c12dd8035a11f88f36de3b9dc964a4
SHA1 25fb02df3f77368d59eac2e7a1c59fabfe9ac9b6
SHA256 f58cce418d2df873187a718cd5a0d609c711405480c1b56f004d304107c87171
SHA512 7944f16894141495458ea9957172ab4ede54eafc76c50280075ce55f9eca941ffe7c876f2ae2536d7492da0cb340aa8094681929b96a428bf9fedfa47c8dad86

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008

MD5 0f2b395cc63db1bd8a5d093e558cbdd1
SHA1 833d0657cb836d456c251473ed16dfb7d25e6ebe
SHA256 f3797115dd01a366cce0fbd7e6148b79559767164d2aa584b042d10f1ffd926d
SHA512 e8a4ada76efb453c77a38d25d2bbd3a7f03df27b85e26ba231791d65d286fe654c024b64f9d6869824db5d1cf59e4d4eb662f5a55c326e5e249144ae1a66b798

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006

MD5 a5bb3bb3eda1301f6ac876a49d4b2f62
SHA1 1786309cdc2fb5c1d29cdac00dbdf13711f19f3a
SHA256 316ba0d916f3d3d945b42e589de9a0326836664f9a06e9680bb853c828c2bf35
SHA512 f2ab2d40d2ccd43c5e5bf2150ea79d575e0d4a41381a8fba3beb47a8944adeac0bd19dacdbe237f8dd1c06fc04403f0bda3fca1ec0fc429357dc705c6db1eea4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000011

MD5 8da8f594510ea8a49c0cdca09fa89aac
SHA1 ef53c97574f8f31b785d179aaac65f5a2355d405
SHA256 0390a6ee7f795b5cb37da672d8864fa56c09fc2df9787b17b17cdf22e3f05c7b
SHA512 559cd341f9e5c108a82fa98cc08855cef83d35847fd3eaa3d4f0944a44cbe030350632303af714656e2e06ffff91be8565586efd679f06dcd828809d77cb7bd8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\94068e3028d75c6f_0

MD5 be61c8b349439aadc6aa87fd768aa9a4
SHA1 f878456b4d33959471b8e8b2738065d1c4c8687d
SHA256 2868ca1c2d27d16def477a143cf5e09dfbd803d5e623fc1bb943492a130527f9
SHA512 b5b2c3532f44ff5b9c7bc323cb6cc80d3d804d23c337e5e45bbc66159bfb3ef2d845472155895326e351ea56f26d5901e530f1f272cd7a7d3d0deddfffdafb20

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 b06d2e6cfb8ac09f74767e36e5c26053
SHA1 db71fb2df3cafa2e6051afc99b9f9dba9d303ab7
SHA256 79723b90da122bb982dd58286a2c2d6478a66d427d1c462146e848b17025a90c
SHA512 6a48b0c47787242919a0f94143d2cad30da0933e756727c9c21094dc2e893e1160361a77e2ef2bed36bf37148d11eec29e81efd6e24e1d3cb0bd6200ce61f482

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index

MD5 e1e5ea497a347138952aa52757a63499
SHA1 886b6df040580c278de71537b79e0a03bd109991
SHA256 fdec7974278d6ea38a8df4537356d0530594de5c2ea2c130f7114bd4b85f1e97
SHA512 6db6812fa3b546b0cf787bbec557c94e60d1552d5264c9706bfff5bb374b81e481227e49aa1098361c10ca048f9aa4199266f24d74b2b48ca8a7e706102d5b00

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 89e4b85133c6718d95865948f1fcd0b6
SHA1 1e70dafb9bc5496d2cc103a53937fa39771a7b5d
SHA256 6ccdc1e8bf50fddfdd2e0fc84ba47e20fa9f2e6dd2ca711ddd588d208534c3b3
SHA512 e48dc9e1443bf5b56a8ef24d3bb331eff55495d6f4d2e8c9397119cf7769547b5ee8ba9e8239390d04ba5b74652780bab0127946132419387c3f61c60877cebe

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 40e5f389f34cd3a0a4c1865cfaa3c141
SHA1 10fd57522a5355bc4beb0a743ccd1aa8425efd02
SHA256 7d89f6dcb1824ccdd4718cf469a6e2a580da399737d6d540f6b05d88d4dfaefc
SHA512 9cd6ee9b9b7444d38c030a7082921467e09c029f0e32864277e314ed59b88c65f5959ef90527342ea6f0604c44424c68913e8387b34721b06bdaf5742e1035f1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\f3369a17-e56b-4d46-ab73-1ff9e3056358.tmp

MD5 8c0205a6c7a75a5287599a43c0d5f4d9
SHA1 ad9d6df092c45ba44779a10b1412318bafc2275a
SHA256 8d61e5d64c19d11b8c53789979977b41d54d51a1e313fc2e7b577842878512f2
SHA512 c7912aa06ced37abb5d43b9d1209c9b9ff81ac21e2f4e0174d691ce97b457651935161807b39103fba22c305d13a08185322aea6645191b9d588d800305c1223

C:\Users\Admin\Downloads\clutt6.6.6 - by CYBER SOLDIER.rar

MD5 60fda8c078bd2c6c8be5246d493afec6
SHA1 339675682e1a9ac2008d5bafd9b49cd3167998dd
SHA256 72d36858e676360cd470943c3a22110324df8e4571c166dc823b09dbefb4017c
SHA512 87298877d1c4fadebd0bf40dd774619f9718eeba4b536dc9eee2abb5bc1809501798152139c47b3db204af119cc52904814c689484b400a00e1ad6e69a58aa00

C:\Users\Admin\Downloads\Solaris2.0\Source_Code\Solaris.bat

MD5 0b0ad5fbc89b3d90970ffa8fa2182534
SHA1 20e58c92f5c7c4dde7b7ca06d9b7d12579885eee
SHA256 92e0aaa554cc1c17b9257a98fc0bbf27e35225daf2aeb8d552c648720b184d69
SHA512 3cea5553f8a9b1c6425f61efc0bc61584481fda96ae35e00ae66ce395da1f02b64de215882ee19eb7cda31e880c36d9e20094a97ae5e341dbed30bc7a0c88af6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 7509e3906ff944deef9593c39dd7e34d
SHA1 46273e872aed593aa709a08e72198858fd297754
SHA256 3b6286e4a2865ec49f2115c95b58befbeb7a1babd499a64feb1372048a4a6cca
SHA512 ae00e02673af66f643dca37d704e7b2ed7c1f2715a0fcb58e1bc3236ca9171b653a27dbe97f2a9cc0b3a248a3d352dab9901d182e245fb53e9dd5c3375f18a89

C:\Users\Admin\Downloads\README!.txt

MD5 1d405029a4401746f3c611553f972194
SHA1 b768f2494fd15705a540c992fa32fb30ae7e38d3
SHA256 ba99602ca6466df52b215bd81beb0b0dfcf817b5d74deccdcac1535b7bdc5e88
SHA512 6b5386eb14c14fe9acd5ef2cc45898846d638ff23edb92ebb0b8f2b661ec7479cb962dd84ffeb01a49fd40287df6b404b98bb02455207eb768309500af0813d7

C:\Users\Admin\Downloads\Clutt6.6.6.exe

MD5 ebe2598356ddaa94e3c507a3bf3fbaaf
SHA1 12fbb71303fbad2d1d6b644d67f3d895ed417ea2
SHA256 bce721a6081d418d0e00bce7dfb5a6b957767b0138690f7e5d642181556b8296
SHA512 e541c1e25c081530b7102445d57c70ceaabb3a719ac895b1322305d3b2e0c6d8cd42dbb231285473a48c8221d94cfd3f9aab431a2aaaf551b55b060d83f87552

memory/5404-1208-0x00000000001C0000-0x0000000000650000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 54984d4b0e0d3499ad15c1ffffd94003
SHA1 990913aecb20eb2fffed8d46c0e98bf910af96b8
SHA256 071e1b80fdd154eff8f501351b545b3b809a4950436f128dd7fd6ba286c50730
SHA512 18067d58818e65087a714efb35964b9c5905bfca535b23af753d598e7beb4d7e1591ad12ff67117f69c68793ce6b97ac8c7c71feef77acee36b0138c14dad688

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 07f7eb640530d9136978bca05d72787b
SHA1 00b5916a7f36443a3c17f90d55a091e2cbfbfeaf
SHA256 1a7ae47bef5fb0bd8f623f167cb260626d1436e95a284f446447d72ccd4abb83
SHA512 7dd60874059be73f1aed957f889bd5757dec8009a3cc7aa3695ad7e1ceafc2de407b87499038de801ff548bc343d1c133e8f7adfb8ccec53703fbceb7e2e6603

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 4ad66cdd5964929b72fc93a5c7f453d7
SHA1 6773735201f169179bedfa676cb8c1ca86a56b07
SHA256 6aac51c963fa75a76a24d5d63e5510e9328e5cfb79d4f2395589d92c70b80ae5
SHA512 6e77ee8a7f7c2d0bbb08bd361a79088986b8d4988047b5a018b1dc3401b317689d221a07075eb7fc22a443152bbe5bd52bf75d6e1863f35a1fdf657bd0e780d6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 35346290ca1cca4934311f8711792063
SHA1 35e59842692a448574c93d3720f15f632447bd2e
SHA256 dfa059487bbdca45dcf1ec219faeefefd3f5de6f86bd4d9fc487cb9999711558
SHA512 23a3800b4cb941f7e48e0d28fa4659e986012b598d1ae85de1ec755d9bfbfde63723f983a55131607ae9d4c67ea3849291a7694ac51980429a0265e1bb7450cd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 c022b81e3512fadcb75824f9b6f6ae2d
SHA1 163074cb254cbb7011c2fd0e9733532a8dd72e0b
SHA256 2d888bdcfdf8af1893b860386479432a3263520b8625baefa11cb2aa987a2cbe
SHA512 2ca419e96e6e9d5f6d3ec5098b47b061ec26ad3932e418268a019d56bb60004057e1b776eec617e81cc6833211444d4bdb1ef4a01b3c36094dff981a86bbdd5d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 b6b3c35b50b8638d8ded592a3b43e1d2
SHA1 56740fe982e5fc72d94849dda9c5296a75926144
SHA256 44196e4f41c8d6ddcf5837deb51e475c9954064645477ac86d21260d7ab538c8
SHA512 b70d12acdc7795f04fe3a3dba5bd706bb2ce87a70edb3a9468143f1f93f34356663787556209e97b380d01b3c72d4a1a424cabbf5bb563fc4958c483c6a193e1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000017

MD5 87c2b09a983584b04a63f3ff44064d64
SHA1 8796d5ef1ad1196309ef582cecef3ab95db27043
SHA256 d4a4a801c412a8324a19f21511a7880815b373628e66016bc1785a5a85e0afb0
SHA512 df1f0d6f5f53306887b0b16364651bda9cdc28b8ea74b2d46b2530c6772a724422b33bbdcd7c33d724d2fd4a973e1e9dbc4b654c9c53981386c341620c337067

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000019

MD5 0ed8278b11742681d994e5f5b44b8d3d
SHA1 28711624d01da8dbd0aa4aad8629d5b0f703441e
SHA256 354730711c3ca9845bf98ec5dfb58a16e50984f9edcf0e8f432742326334f8a2
SHA512 d296ab1f1b418b125f09598ca6645d984a1cf67092a914956b8879d285ee35521b408363b47da195de79086e3be3ed9b1709bc8f9cd2e32d5dccb720a010bc8c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001a

MD5 85fc4094ea8ac3e6b3a333e3db7dfe4a
SHA1 ff58f66afdd29f6b1bce0c0ead97c4c16a296bf1
SHA256 ed1f2986116bd60fbd6ae727939d8e2db8a1b20e0b5d5a8e04fff3dd1acf99a1
SHA512 dbd582a3f199e66e206fb320f2f22a1be4e011cad0e8affb938e5139eb3dc9946fa6346421c9ad89d213aa42b9285a7c704cc8ac7c165e9e5ba89bef5c25bb0a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001b

MD5 0d36973dc39911193f92ef055cb61822
SHA1 8bb54d1d16d0fea66cac1311f9e2ec54fdeab03f
SHA256 3a1190a65811654b7f47626b385fef09d6085cc277f596394ff0364560034bfc
SHA512 034d34bb1761cbbd2602bf488df7ff4b45779df86605896a000181477b6c501c0c969a004d6295ec342752fbfa887a7ea8b0f2f55691133edef9aa46553206e1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 5138e3a25f3e028d5d1e370073ff50a1
SHA1 8142da58f2c0402e598dc3b73126cf294fc38b8f
SHA256 69c200ef52e9fcb1f7bd76fa478de630b751739aea90040cba50ab3504514904
SHA512 91df5140d10ee24c57c4479842cb86470c4d31c61c19c820e16b887d28a012e25e2edacfa97bf4d2fca5b9fbfb7ce347aa5418bcda148c3a89c7ea774d67a14c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 6a5b1d3169b844f64ccb545024e75d34
SHA1 8cf89452be4912898d4323caf788918a91d71806
SHA256 cf32ae22d762398bd660655085c4a5ecf8a0d28e38757c6fa67c8c89a788516b
SHA512 d635c8281e0d0e7e3af1c59c88b543363dfc7ea1333050e11f300946a7eaa1f289577af0d093deff5bbe1db8f63b234f974bae51bf568afdead6b5ccd56c38a5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 c49ed7a3b0202d90556877962ba24c8a
SHA1 8f8eff655ee795ee0a59f8603c81955f9e04b050
SHA256 54fa99f3ff2f1dbb0731e55220cdbd0f85cf17833352498411eb21f035005d2c
SHA512 6470a45c6f12d5121b1c67820c35096df61e5ffbcb725c022082715c7903fd601f435f5b9ef340ed1ee95a30551ce48423f25fa361b079aa50f57d681e0a4574

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000d

MD5 ea48c33e2560afec958fe8c5396344bc
SHA1 2d83e09c5784df5c427e017cd312606df8e5bbe9
SHA256 fe6b76517c4f221c3241886d04702bb1ea480827d335ad37336cea28dd9c4df3
SHA512 3757c49932afd3eda89619a96572cf6d3f940b69d499ab83c6c14782fb320fb6e69681a33e8d9872e476cf697865f1bc358a01627ea455b3d97ecc772cf85d0f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000e

MD5 69df180bb4202300ebb00bd373d91eff
SHA1 70b99ebb575e0b387b02e9e73b31ef26cfd94662
SHA256 56da7eb804d8eb2415a598a2acec8f57045b885f3bb0ae39b28624e4032d4d6b
SHA512 eee24b136348f67bfec68c7c75dd278d2cf63fa4721582345d33f601f0494beed143a7c4e3e90c2f615ddba26bf314f15eada60194be15a1f19716068f2c3dc8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000b

MD5 0f3de113dc536643a187f641efae47f4
SHA1 729e48891d13fb7581697f5fee8175f60519615e
SHA256 9bef33945e76bc0012cdbd9941eab34f9472aca8e0ddbbaea52658423dc579f8
SHA512 8332bf7bd97ec1ebfc8e7fcf75132ca3f6dfd820863f2559ab22ac867aa882921f2b208ab76a6deb2e6fa2907bb0244851023af6c9960a77d3ad4101b314797f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000c

MD5 6b528d140a964a09d3ebb5c32cd1e63a
SHA1 45a066db0228ee8d5a9514352dc6c7366c192833
SHA256 f08969d8ae8e49b96283000267f978d09b79218bb9e57037a12a19091d4a3208
SHA512 d3c281c3130735c89ddbf9b52de407da75a3d7ecbf0026e0de5995f40989883178cd59198354976aaa2aa7b47fc5f3f3856a59fe1463d4e2fdb7a27e9f10e76f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000010

MD5 0b1dfab8142eadfeffb0a3efd0067e64
SHA1 219f95edd8b49ec2ba7aa5f8984a273cdaf50e6c
SHA256 8e2ee8d51cfcc41a6a3bfa07361573142d949903c29f75de5b4d68f81a1ae954
SHA512 6d1104fd4cfe086a55a0dd3104c44c4dba9b7f01e2d620804cf62c3753a74c56b5eae4c1dc87c74664e44f58a966ba10600de74fb5557b3c6c438e52cc4decdb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000009

MD5 edcfa09e7a1dab475a9203a940c416fe
SHA1 048fdcbb3200afd7dbda15b94246f6acf00f8873
SHA256 10d021116292f209c4270815c80f74c556ab826faa6b06aa57dfa339ba94f895
SHA512 ef1508851eaecca47b3200bb8874bcb16e398e06931453a3cacf32ab2fa89b3a4dfcac176006a54c43423b6a1bb00f96f2f6f58a5c8b775274693ec52a231399

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000a

MD5 fddaf7dbdddb91037038290afe76132c
SHA1 06bbbe349407bcfe3f255476e36dae83bfd37766
SHA256 9198c07c34332636331dff3d85c36739aa080d5feb93975ea356cf4263990936
SHA512 cde416b7ede7a20438ed168a5ab5efc2fe204854474ce847a44ab51a08e7dcef662f9f86184444bff501e8ae1e263d334e5990925f9dca01e83b547227d04037

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000f

MD5 4bc7fdb1eed64d29f27a427feea007b5
SHA1 62b5f0e1731484517796e3d512c5529d0af2666b
SHA256 05282cd78e71a5d9d14cc9676e20900a1d802016b721a48febec7b64e63775f6
SHA512 9900aecac98f2ca3d642a153dd5a53131b23ceec71dd9d3c59e83db24796a0db854f49629449a5c9fe4b7ca3afcdd294086f6b1ba724955551b622bc50e3ba1e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\81037e226035aa29_0

MD5 8b631215b8091f023674e9ed5f723430
SHA1 34b8ecc9daf77cfab2340397d4fe94cca4a51620
SHA256 96a0c82260788fd9a7b4e8f3b9d6ad5641f5179b02fc1dcab87b9d4366404a04
SHA512 a17e291e78e58aeb822130db514d12b72b4615afb33336ca8fb9a479a3c5455e9295280a3bdfa3dc815360a39d06bd13e143f5d189692ae4cbd1a60dd1d0f40a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001

MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 ca388fea25d48392863840bc1316a212
SHA1 0e1518dcd862c45d4045988ad1fbcca0070e59b9
SHA256 cb1421cbade6b05f157c8b15e2ca2edb577be5bbbc94f72792f1e7c2be9f45dc
SHA512 d2d9a052003f4166a019ccd58c62974934bd5291230b2a9846dbc70e24ea21afc5ccd8ce2f7af3bf55d00c1b9793b761be404c438da594a03e517da07a1f9227

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 b91d08be33f36c09a6e17c6eda06ad6f
SHA1 03dcc2ae832c87b75ce68015b14e28a80a160748
SHA256 504dc4ab2b309155fdd972c6a228cdb9009c94ab8b9f69840fdca73ba4501041
SHA512 ab772d75bb2e18a9a420c2aafb9cf9ca6db7d390fb73f8afb194a1342e652a9bc1be8a447543600001f1b1ea342182736e181fc19ff0bdb24b1d69da86f140d2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000013

MD5 fd4cea58e6f98ad4ed2b1c6829b19170
SHA1 f37e06adfa1e67903b4d3251dee11746e5fba6e1
SHA256 004ffbf702932b91186c846d41754a583d6f3071480905698c5b22fea6cfcee0
SHA512 5767fc7f311cfd889c26de561f24bec1f8d73b111deba58153fb3920e38ba463d788116f241fdff563c8dca17b2ee91413a832bea8262d03f2f5882c4e39c281

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 16c519483dc607848a4c63394ce6c34b
SHA1 022f5ea4fc34a2150d305acab666373c034c40e9
SHA256 57395bbc0025dd862ff2ad4df937ae036e7cf0699de59f897d104794c982588e
SHA512 1ba3fc5d27b5a1c01323a005a42f9292d969e1edde1207db1677e2e86b4de51ee82044472a422d3c2eeaed4c4040274c366d90c3a176b1aa249f5714669f46cc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 95f14b082c0a7c839eebfc06417f267c
SHA1 31f86a00fbdbebad10a73b4d7a5f85911540bbfb
SHA256 92ce1b582239d344f2088476c782b2dd6c413af21ef20e7ac72bac3e4dc1d19e
SHA512 6c1803e8d712548f8c22d935e6e56ab9ddc3518f5575e303f9d64a82a0eeb6b6ebc4a2cd0e87e0cad66f636a9870632c8e976d715ef168a0ffe29c6a1fc9c73a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 52b33d5fe57633ecd9d0f540d7ae2ced
SHA1 b81ce55a38bcbe44a0e131c9143eae94cd17e84e
SHA256 6877a14cb1d207b42d70fb6f6631986c183e3f4856d15d8ea0c900d0c5f275cf
SHA512 d1aee90e611e6be14380bf1528bd126b0129058e441d441f2dc94815fc316efea3e3f7ab400aa513e253bae7f2b44ad41575530cbcf4657ec201461f3f16dea4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 e728a352567d2991b92c1491caa6bc6d
SHA1 c74bd63e09d98d1b1258eb0b52d58a10f7222b78
SHA256 ef465297f28dfa78d0e19cd77e4d103fb096f09b065be390fae5d2640e781030
SHA512 ad4a319f074194f9c0e631ee548edfc6403a854818dbcc4da5f7939b80b7ab7c2129992fd6561a7bf8cedf8536e03dbf9bcbb46cf887625ff74b2d2e26a7dee5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 d39dbaed6e1616691d3831079a56920a
SHA1 b9fc89fccebfa7c43b9cb79f5de59a065ae5173b
SHA256 05f36d1ae397df293abffb0de486adce12fac181790d6ef3ac36a04f3d2e16db
SHA512 04e8e87274495b816ebebf84c40b2ac178f5e0dfd2ce37c96b36ad0e48eea245d77a5ce7989c3a2eedc26ed79be879bad1a9044fb4c6e1cfba84587200b49a2f