Malware Analysis Report

2025-01-03 09:35

Sample ID 240604-dr6atsbc7v
Target https://bonzibuddy.tk
Tags
bootkit persistence
score
6/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
6/10

Threat Level: Shows suspicious behavior

The file https://bonzibuddy.tk was found to be: Shows suspicious behavior.

Malicious Activity Summary

bootkit persistence

Writes to the Master Boot Record (MBR)

Legitimate hosting services abused for malware hosting/C2

Suspicious use of FindShellTrayWindow

Suspicious use of SendNotifyMessage

Checks processor information in registry

Modifies data under HKEY_USERS

Modifies registry class

Suspicious use of WriteProcessMemory

Uses Task Scheduler COM API

Enumerates system info in registry

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

NTFS ADS

Suspicious use of AdjustPrivilegeToken

Suspicious use of SetWindowsHookEx

Suspicious behavior: EnumeratesProcesses

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-04 03:15

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-04 03:15

Reported

2024-06-04 03:20

Platform

win11-20240508-en

Max time kernel

273s

Max time network

282s

Command Line

"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://bonzibuddy.tk

Signatures

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A

Writes to the Master Boot Record (MBR)

bootkit persistence
Description Indicator Process Target
File opened for modification \??\PhysicalDrive0 C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133619445664356633" C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-3433428765-2473475212-4279855560-1000_Classes\Local Settings C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3433428765-2473475212-4279855560-1000\{E3964288-F99B-430C-85DF-E5AE1975AEF6} C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3433428765-2473475212-4279855560-1000_Classes\Local Settings C:\Program Files\Google\Chrome\Application\chrome.exe N/A

NTFS ADS

Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\MEMZ-virus-main.zip:Zone.Identifier C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A
N/A N/A C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3092 wrote to memory of 3880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 3880 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 5016 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 5016 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 5016 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 5016 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 5016 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 5016 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 5016 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 5016 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 5016 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 5016 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 5016 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 5016 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 5016 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 5016 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 5016 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 5016 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 5016 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 5016 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 5016 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 5016 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 5016 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 5016 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 5016 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 5016 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 5016 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 5016 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 5016 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 5016 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 5016 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 5016 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 5016 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 2428 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 2428 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 4408 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 4408 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 4408 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 4408 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 4408 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 4408 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 4408 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 4408 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 4408 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 4408 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 4408 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 4408 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 4408 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 4408 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 4408 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 4408 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 4408 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 4408 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 4408 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 4408 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 4408 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 4408 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 4408 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 4408 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 4408 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 4408 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 4408 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 4408 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 3092 wrote to memory of 4408 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe

Uses Task Scheduler COM API

persistence

Processes

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://bonzibuddy.tk

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffbba9fab58,0x7ffbba9fab68,0x7ffbba9fab78

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=300 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2128 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3020 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3032 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4504.0.1861234499\1706720067" -parentBuildID 20230214051806 -prefsHandle 1752 -prefMapHandle 1736 -prefsLen 22074 -prefMapSize 235121 -appDir "C:\Program Files\Mozilla Firefox\browser" - {82feb52b-2f5c-4ead-91b7-f6229bbd4d50} 4504 "\\.\pipe\gecko-crash-server-pipe.4504" 1852 2254031ec58 gpu

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4504.1.336334993\2142149062" -parentBuildID 20230214051806 -prefsHandle 2320 -prefMapHandle 2316 -prefsLen 22110 -prefMapSize 235121 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {0b5849cb-3344-44ba-a5e5-b3007b82c415} 4504 "\\.\pipe\gecko-crash-server-pipe.4504" 2356 2252c28a558 socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4504.2.626853763\1083013079" -childID 1 -isForBrowser -prefsHandle 3064 -prefMapHandle 3060 -prefsLen 22213 -prefMapSize 235121 -jsInitHandle 1228 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {c019a27e-c017-4070-9360-51a319d29fcc} 4504 "\\.\pipe\gecko-crash-server-pipe.4504" 3208 22543210f58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4504.3.318307575\570873361" -childID 2 -isForBrowser -prefsHandle 3584 -prefMapHandle 3580 -prefsLen 27614 -prefMapSize 235121 -jsInitHandle 1228 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {d9842658-7478-4508-9986-7fc4e759c80f} 4504 "\\.\pipe\gecko-crash-server-pipe.4504" 3596 22545a9d858 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4504.4.1764809202\848128125" -childID 3 -isForBrowser -prefsHandle 5212 -prefMapHandle 5236 -prefsLen 27695 -prefMapSize 235121 -jsInitHandle 1228 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {53049694-e419-4b39-917d-ca648ccc5589} 4504 "\\.\pipe\gecko-crash-server-pipe.4504" 5204 22547288c58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4504.5.577626143\1708069509" -childID 4 -isForBrowser -prefsHandle 5504 -prefMapHandle 5500 -prefsLen 27695 -prefMapSize 235121 -jsInitHandle 1228 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {11c1ea78-55dd-43f0-a475-233fed72a5cf} 4504 "\\.\pipe\gecko-crash-server-pipe.4504" 5516 22547287a58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4504.6.573882602\1226536512" -childID 5 -isForBrowser -prefsHandle 5660 -prefMapHandle 5668 -prefsLen 27695 -prefMapSize 235121 -jsInitHandle 1228 -jsInitLen 246560 -a11yResourceId 64 -parentBuildID 20230214051806 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {78a840e1-8c5b-4d84-8cd1-8d42be1ea7b4} 4504 "\\.\pipe\gecko-crash-server-pipe.4504" 5652 22547286858 tab

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4436 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:8

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x00000000000004EC 0x00000000000004C8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=4648 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=4852 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5020 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5168 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3468 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4300 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=4200 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=3752 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=5428 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=3096 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=5388 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=5364 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --mojo-platform-channel-handle=5476 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3428 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=1492 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=1756 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --mojo-platform-channel-handle=5424 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --mojo-platform-channel-handle=4632 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --mojo-platform-channel-handle=5304 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --mojo-platform-channel-handle=4236 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --mojo-platform-channel-handle=4868 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4968 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5944 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --mojo-platform-channel-handle=6140 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --mojo-platform-channel-handle=3172 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --mojo-platform-channel-handle=4972 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --mojo-platform-channel-handle=3820 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --mojo-platform-channel-handle=5964 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --mojo-platform-channel-handle=5972 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --mojo-platform-channel-handle=5648 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --mojo-platform-channel-handle=3036 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --mojo-platform-channel-handle=5964 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --mojo-platform-channel-handle=4308 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --mojo-platform-channel-handle=5132 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --mojo-platform-channel-handle=4928 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --mojo-platform-channel-handle=3020 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --mojo-platform-channel-handle=4884 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --mojo-platform-channel-handle=5340 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --mojo-platform-channel-handle=5436 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --mojo-platform-channel-handle=4916 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --mojo-platform-channel-handle=2172 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --mojo-platform-channel-handle=4124 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --mojo-platform-channel-handle=5656 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4388 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --mojo-platform-channel-handle=4232 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --mojo-platform-channel-handle=5312 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3068 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2312 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --mojo-platform-channel-handle=5896 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4916 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --mojo-platform-channel-handle=4896 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5984 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4320 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --mojo-platform-channel-handle=4212 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6272 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6200 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --mojo-platform-channel-handle=5668 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --mojo-platform-channel-handle=4792 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --mojo-platform-channel-handle=6248 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --mojo-platform-channel-handle=5924 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --mojo-platform-channel-handle=3280 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --mojo-platform-channel-handle=2452 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --mojo-platform-channel-handle=5544 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --mojo-platform-channel-handle=4052 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --mojo-platform-channel-handle=4888 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --mojo-platform-channel-handle=5940 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --mojo-platform-channel-handle=6296 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --mojo-platform-channel-handle=4640 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --mojo-platform-channel-handle=5608 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --mojo-platform-channel-handle=6204 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6120 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4260 --field-trial-handle=1488,i,11391770508101845516,4734673204137148339,131072 /prefetch:8

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe

"C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe"

C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe

"C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe"

C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe

"C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe"

C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe

"C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe" /watchdog

C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe

"C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe" /watchdog

C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe

"C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe" /watchdog

C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe

"C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe" /watchdog

C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe

"C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe" /watchdog

C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe

"C:\Users\Admin\Downloads\MEMZ-virus-main\MEMZ-virus-main\MEMZ.exe" /main

C:\Windows\SysWOW64\notepad.exe

"C:\Windows\System32\notepad.exe" \note.txt

Network

Country Destination Domain Proto
US 8.8.8.8:53 bonzibuddy.tk udp
US 172.67.138.185:443 bonzibuddy.tk tcp
US 172.67.138.185:443 bonzibuddy.tk udp
US 151.101.2.137:443 code.jquery.com tcp
US 8.8.8.8:53 74.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 137.2.101.151.in-addr.arpa udp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 34.117.188.166:443 contile.services.mozilla.com udp
US 8.8.8.8:53 push.services.mozilla.com udp
US 34.117.188.166:443 contile.services.mozilla.com tcp
US 34.120.5.221:443 getpocket.cdn.mozilla.net tcp
US 8.8.8.8:53 contile.services.mozilla.com udp
US 8.8.8.8:53 prod.pocket.prod.cloudops.mozgcp.net udp
US 34.160.144.191:443 prod.content-signature-chains.prod.webservices.mozgcp.net tcp
US 34.107.243.93:443 autopush.prod.mozaws.net tcp
US 44.237.65.238:443 shavar.prod.mozaws.net tcp
US 34.149.100.209:443 prod.remote-settings.prod.webservices.mozgcp.net tcp
US 34.107.243.93:443 autopush.prod.mozaws.net tcp
N/A 127.0.0.1:49739 tcp
N/A 127.0.0.1:49762 tcp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.187.196:443 www.google.com tcp
GB 142.250.200.14:443 www.youtube.com udp
GB 142.250.179.238:443 play.google.com udp
GB 142.250.179.238:443 play.google.com tcp
N/A 224.0.0.251:5353 udp
GB 142.250.200.3:443 id.google.com tcp
GB 142.250.179.246:443 i.ytimg.com tcp
GB 172.217.169.14:443 www.youtube.com tcp
GB 142.250.179.246:443 i.ytimg.com udp
GB 142.250.187.226:443 googleads.g.doubleclick.net tcp
GB 216.58.213.6:443 static.doubleclick.net tcp
GB 142.250.187.234:443 jnn-pa.googleapis.com tcp
GB 142.250.187.234:443 jnn-pa.googleapis.com udp
GB 142.250.187.226:443 googleads.g.doubleclick.net udp
FR 151.106.4.82:443 bonzi.link tcp
FR 151.106.4.82:443 bonzi.link tcp
FR 151.106.4.82:443 bonzi.link tcp
FR 151.106.4.82:443 bonzi.link tcp
GB 142.250.200.3:443 id.google.com udp
GB 142.250.179.238:443 play.google.com udp
GB 142.250.179.238:443 play.google.com tcp
FR 151.106.4.82:443 bonzi.link tcp
GB 216.58.212.195:80 www.gstatic.com tcp
FR 151.106.4.82:443 bonzi.link tcp
FR 151.106.4.82:443 bonzi.link tcp
GB 142.250.180.14:443 encrypted-vtbn0.gstatic.com tcp
GB 142.250.179.246:443 i.ytimg.com udp
GB 142.250.178.14:443 www.youtube.com tcp
GB 142.250.178.14:443 www.youtube.com tcp
GB 142.250.178.14:443 www.youtube.com tcp
GB 142.250.178.14:443 www.youtube.com tcp
GB 142.250.178.14:443 www.youtube.com tcp
GB 142.250.178.14:443 www.youtube.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 198.187.29.31:443 www.bonzibuddy.org tcp
US 198.187.29.31:443 www.bonzibuddy.org tcp
US 198.187.29.31:80 www.bonzibuddy.org tcp
US 198.187.29.31:80 www.bonzibuddy.org tcp
US 52.111.227.14:443 tcp
US 198.187.29.31:80 www.bonzibuddy.org tcp
US 198.187.29.31:443 www.bonzibuddy.org tcp
GB 172.217.169.67:443 beacons.gcp.gvt2.com tcp
GB 172.217.169.67:443 beacons.gcp.gvt2.com tcp
GB 142.250.178.14:443 www.youtube.com tcp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.200.3:443 id.google.com udp
GB 142.250.187.196:443 www.google.com udp
GB 172.217.169.14:443 www.youtube.com udp
GB 142.250.179.246:443 i.ytimg.com udp
GB 142.250.187.226:443 googleads.g.doubleclick.net udp
GB 142.250.187.234:443 jnn-pa.googleapis.com udp
GB 142.250.179.238:443 play.google.com udp
FR 91.250.81.8:443 bonzi-buddy.updatestar.com tcp
FR 91.250.81.8:443 bonzi-buddy.updatestar.com tcp
FR 91.250.81.8:443 bonzi-buddy.updatestar.com tcp
GB 172.217.169.67:443 beacons.gcp.gvt2.com udp
US 209.222.98.21:443 bonzi-buddy.soft112.com tcp
US 209.222.98.21:443 bonzi-buddy.soft112.com tcp
GB 142.250.187.238:443 accounts.youtube.com tcp
US 45.58.113.196:443 bonzi-buddy.soft112.com tcp
GB 142.250.187.226:443 googleads.g.doubleclick.net udp
GB 142.250.187.238:443 accounts.youtube.com udp
US 13.107.246.64:443 www.clarity.ms tcp
BE 74.125.71.157:443 stats.g.doubleclick.net tcp
GB 142.250.187.206:443 www.youtube.com tcp
US 20.114.190.119:443 x.clarity.ms tcp
US 52.116.53.150:443 8proof.com tcp
GB 142.250.200.27:443 storage.googleapis.com tcp
GB 142.250.200.27:443 storage.googleapis.com tcp
GB 142.250.187.238:443 accounts.youtube.com udp
GB 172.217.16.225:443 tpc.googlesyndication.com tcp
GB 172.217.16.225:443 tpc.googlesyndication.com tcp
IE 68.219.88.97:443 c.clarity.ms tcp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
US 204.79.197.237:443 c.bing.com tcp
GB 142.250.179.226:443 adclick.g.doubleclick.net tcp
GB 142.250.179.226:443 adclick.g.doubleclick.net tcp
US 172.67.135.66:443 rtb.searchsavvyhub.com tcp
US 104.21.6.205:443 rtb.searchsavvyhub.com udp
GB 142.250.200.27:443 storage.googleapis.com udp
US 151.101.130.217:443 js.sentry-cdn.com tcp
US 104.17.25.14:443 cdnjs.cloudflare.com tcp
US 104.17.25.14:443 cdnjs.cloudflare.com udp
GB 216.58.201.110:443 chromewebstore.google.com tcp
GB 216.58.201.110:443 chromewebstore.google.com tcp
GB 216.58.201.110:443 chromewebstore.google.com udp
GB 172.217.169.3:443 ssl.gstatic.com tcp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
GB 142.250.179.238:443 play.google.com udp
GB 142.250.200.14:443 www.youtube.com udp
GB 142.250.179.234:443 scone-pa.clients6.google.com tcp
GB 172.217.169.3:443 ssl.gstatic.com udp
GB 142.250.179.234:443 scone-pa.clients6.google.com udp
NL 142.250.27.84:443 accounts.google.com udp
US 192.178.49.163:443 beacons.gvt2.com tcp
US 192.178.49.163:443 beacons.gvt2.com udp
US 20.114.190.119:443 x.clarity.ms tcp
GB 142.250.187.238:443 accounts.youtube.com udp
GB 142.250.187.226:443 googleads.g.doubleclick.net udp
US 20.114.190.119:443 x.clarity.ms tcp
GB 142.250.187.238:443 accounts.youtube.com udp
US 20.114.190.119:443 x.clarity.ms tcp
GB 142.250.187.226:443 googleads.g.doubleclick.net udp
US 20.114.190.119:443 x.clarity.ms tcp
GB 142.250.187.206:443 www.youtube.com udp
US 54.147.46.253:443 sync.ipredictive.com tcp
DE 91.228.74.166:443 cms.quantserve.com tcp
GB 142.250.187.196:443 www.google.com udp
US 54.147.46.253:443 sync.ipredictive.com tcp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
US 35.190.0.66:443 ads.travelaudience.com tcp
GB 142.250.200.2:443 cm.g.doubleclick.net tcp
US 20.230.171.39:443 beacon.walmart.com tcp
US 54.156.233.134:443 sync.srv.stackadapt.com tcp
GB 142.250.200.2:443 cm.g.doubleclick.net udp
NL 178.250.1.9:443 dis.criteo.com tcp
US 174.137.133.49:443 dsp.adkernel.com tcp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
RU 77.88.21.90:443 an.yandex.ru tcp
US 174.137.133.49:443 dsp.adkernel.com tcp
US 174.137.133.49:443 dsp.adkernel.com tcp
RU 77.88.44.55:443 yandex.ru tcp
NL 193.0.160.131:443 a.rfihub.com tcp
NL 35.214.168.80:443 gtrace.mediago.io tcp
BE 23.55.97.75:443 sync.teads.tv tcp
US 8.8.8.8:53 80.168.214.35.in-addr.arpa udp
US 23.43.85.154:443 analytics.pangle-ads.com tcp
GB 142.250.187.238:443 accounts.youtube.com udp
GB 142.250.179.246:443 i.ytimg.com udp
GB 142.250.187.234:443 jnn-pa.googleapis.com udp
GB 142.250.187.226:443 googleads.g.doubleclick.net udp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.179.238:443 play.google.com udp
GB 142.250.187.206:443 www.youtube.com udp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.215:443 github.com tcp
US 185.199.109.154:443 github.githubassets.com tcp
US 185.199.109.154:443 github.githubassets.com tcp
US 185.199.109.154:443 github.githubassets.com tcp
US 185.199.109.154:443 github.githubassets.com tcp
US 185.199.109.154:443 github.githubassets.com tcp
US 185.199.109.154:443 github.githubassets.com tcp
US 185.199.108.133:443 raw.githubusercontent.com tcp
US 185.199.111.133:443 raw.githubusercontent.com tcp
GB 172.217.169.67:443 beacons.gcp.gvt2.com udp
US 140.82.113.21:443 collector.github.com tcp
US 140.82.113.21:443 collector.github.com tcp
US 185.199.109.154:443 github.githubassets.com tcp
GB 20.26.156.210:443 api.github.com tcp
GB 20.26.156.210:443 api.github.com tcp
GB 142.250.178.14:443 www.youtube.com udp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.178.14:443 www.youtube.com udp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.179.238:443 play.google.com udp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.187.196:443 www.google.com udp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
GB 172.217.16.225:443 tpc.googlesyndication.com tcp
GB 172.217.16.225:443 tpc.googlesyndication.com udp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.187.196:443 www.google.com udp
GB 142.250.187.226:443 googleads.g.doubleclick.net udp
GB 142.250.179.238:443 play.google.com udp
GB 142.250.179.238:443 play.google.com udp
NL 142.250.27.84:443 accounts.google.com udp
NL 142.250.27.84:443 accounts.google.com tcp
GB 142.250.179.238:443 play.google.com udp
GB 142.250.187.196:443 www.google.com udp
TW 64.233.189.94:443 beacons2.gvt2.com tcp
TW 64.233.189.94:443 beacons2.gvt2.com tcp
TW 64.233.189.94:443 beacons2.gvt2.com udp
GB 172.217.169.14:443 www.youtube.com udp
GB 142.250.179.238:443 play.google.com udp
GB 20.26.156.216:443 codeload.github.com tcp

Files

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\9w3t05jh.default-release\activity-stream.discovery_stream.json.tmp

MD5 e3fc86dcfb9fc5e366bc6258ab083d3c
SHA1 60f8f766b9e52f62f0b242e258fd18d74430d559
SHA256 34e9889f68501c94b827dc7e92ee1dfaa8769f00ce8a7f566ebc3373c90bc352
SHA512 61e0233c17697e3031c56c18e813edcdedf39088286dfbf5beb703536519409f1119b9f9fbf0f9d2f8e5632ba0b60178d513a4dd0b4c190532f6aaf3b00174b6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9w3t05jh.default-release\prefs-1.js

MD5 679c1d2081fa7dae5f1d5cd1d14c23f4
SHA1 6496120371092ccf7d31cda673e7460491755a3a
SHA256 00175c65d17413d7a5fd888be179c3a23eaf0f3b08f593eda8c05bed87ba2b08
SHA512 6c3ba0ac8af2fb9d21c212ba72d8cb35bb588d4c19ffa909d9f6b5152e7d80404838ee60c7dc47b0e929bb9c8a42754f26448ccddc03276c4265d1845670a7f2

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9w3t05jh.default-release\sessionstore.jsonlz4

MD5 215131b1dcb54bc87463e5169f47c787
SHA1 22a000d625da162b0ab0557e51a110dc3967b735
SHA256 fa27309d0c9262f7f2955c2dd03dfb9c96e7ba0a884bb70f1390954be3bbf476
SHA512 c4921930e461033abbbb606f77701a017f81147a32efab7c48651fdcde7c42fe31e71ba7c48b7d274490703c513d96ca88d87379840480c7a63457e1446b87f3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 1be5678d61e4e4dcca7d91df9a103864
SHA1 e50b359f6c704573b2dc961b8560467c8510accd
SHA256 8d0e84061df8ead91110fc58c554c431dadbb85473796d54647cc17edcd4b26a
SHA512 78580039d61850ae38f559e85f1d05b966224b00f848ea07815c81b8af37cfc1a144a6e9cedca4fb5cdaa64f29636827335e6379180cf4aae34457e8af513171

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 9be380cef81030c360659d2cd1f6a5fb
SHA1 bd7353a43e51aec076560df1f86a909a4918c88b
SHA256 0d7ed773084558ea0c192b476fe7da579bc34a7d350c94a57ee6ddf3beabb49c
SHA512 2c7e2e57312abfb3aad62f84acd6be29a39cfb9ce77fdd4a3660398c172e083dceef71a71ba54d9f467858f377b37dd7d09ee167a8a2a55c15a0abe4d7d0363c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000009

MD5 1b2f67dce29e1787da99419da8eecc12
SHA1 887cc1eee26327bb86b473be39583c37e7fb931a
SHA256 8f45997fae90351ebb9555e4041ae883c9c59a0069732653bab028defef06cce
SHA512 8ec21a5607efc030e1d1e7d65cdf4548d0c45bf520d0d10699c81bc75483fd29bb0aecb3aa76e086a68b905e69292c1b2beb9267c98107b4b450dbe62e851d01

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 26ffa312534c17d568cf874d5f1b9401
SHA1 053865043c5766185e748caf8f8f8c40fa2de16f
SHA256 df7be95a33b95bd1eae493986bddbc4fe4d363c1af7894673359ef38801ddf41
SHA512 5ec117da76c5a2699f3011190e9b747027518bdee82151b1e16a66fbdf8b61dc9360a36c1e42fa78da1c742994e48168353b1b8db1dd11b596f98b79bd072a21

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 ae1bccd6831ebfe5ad03b482ee266e4f
SHA1 01f4179f48f1af383b275d7ee338dd160b6f558a
SHA256 1b11047e738f76c94c9d15ee981ec46b286a54def1a7852ca1ade7f908988649
SHA512 baf7ff6747f30e542c254f46a9678b9dbf42312933962c391b79eca6fcb615e4ba9283c00f554d6021e594f18c087899bc9b5362c41c0d6f862bba7fb9f83038

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe579d59.TMP

MD5 d33a131df5dbe7d211aee8e325c37aa4
SHA1 5e29f8ddb78b1ccf2808adafb54e691220673b0d
SHA256 d84376c9304f1f3ec96005dd9238b37fdd30d6868e8acc6dfcd673627426a6e8
SHA512 b937ad90255a5b596befc8526452a0c47ffeb5a55c6a3dbaa528feaa407d6d39825f99e3356b8881fd69a1ad9f91eace5480dee33ea7ed411b04aa909c14f13e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 67931513755438020aaf67635cc81273
SHA1 3fe8a7e56e0cc7a73cb16d3d571e351df2ce43a7
SHA256 4d92c0899b926def82acdddcccc4e063849cd2072aa212773bf29597e7de6ba6
SHA512 8fac9390d14915e84da28c97c021675641d385414d081cf15e68f93710381401137fc20ccf0492bdbd7727b2b4eb0cdbb5eb9959ec72b45a5f4c8576509e98ae

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 efac627f5fe8a74cb01536bc41d6f8fa
SHA1 597d1b633eb10a4b74c2c99e8915ba4c8977966e
SHA256 e63d1ca0929cb24310d9cec3fcd0be8009103753b4b15b5a4bbd08a066c919e8
SHA512 6a7f302e12fed6fa1fe41802bd880e68b65e96c8c53853799e2ce25a29014451361357d9750da63dee2dd3d9aa7ea41b529f1253e653f11db49395026dbca048

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 674ea9eebce42e08988c81600971d95d
SHA1 138aceb71f319ee87b714e389e8b913898500be6
SHA256 4108073c1107c0244d9e705e8cb7d58d9cc17dc7cc1f9af7ff421daede3cee50
SHA512 7fb87642f54cef6e26d736c06f24165db59170f42f70294fbfccdfb16c18f191cdb46b13271dea0af321975eb56d7e9f3b632b1ddcd1cfa284d71778eded8374

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000f

MD5 aa12ea792026e66caab5841d4d0b9bab
SHA1 47beeba1239050999e8c98ded40f02ce82a78d3f
SHA256 65fe153a832452e97f5d484440a7047e314d3a83cb61ad2508fed48a820e1de1
SHA512 0b2b1bb8851c60c9d4ab1d039b990a4de5799c97c50b45f64e36a21849c14e785f69196f674ac225b1419d7f501338054074cab6203d041361a4fa1ed8802b27

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 e5e5d06550d4c155d5299db510cdca8e
SHA1 3489cf0d9b46661b587462fc915444355139409f
SHA256 96687c39b2023065fc53e3744afeacb84224f69449dbcf2fe7b53432deed8171
SHA512 4064fd581606d6018be7b60a924b81bb2c5f16b9f7ca22fb2b30d5b9eec84439ce5b9785d956e59f05acd0f08df7940842d29406ddc49b912e17e54626ee2f08

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 f2c3f97be342d557568395d0abaf8c50
SHA1 93725f25816d0489efa62e50e4c9ed4c31a8b71e
SHA256 9ab3d3bbb60bcef196835f5c0ccb7c246d61f709e8a8e69878d221a800121a82
SHA512 569d21dd1757cb3fd8b62c246e01edeb17f7b536ca65bcd094c21dda4faccafc719b7c2c390120671ddd6ca77cbd2c8653f614bb1f6af3c78db57d8ad77a5357

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 f79b40fd0f39f822becdc04a25b0cbf9
SHA1 2cca5ce4ec958d594709554a5d429a2e7d3b383c
SHA256 1d123b798cce9b280925caef9ef8a9d261a2cc6fa3231be65d4b0e98ee976836
SHA512 50c8f200016c8a075716297ace396b296d859dcb6c89584e042154b83e6e5be6f778fd1efa7d893aebcca3c682dcfb52cd45021096eda5862ede178848273ed8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 d69356da5dbef6d2e69450bc40578214
SHA1 08cc49372e722e29df386b09a4556b6061bd8518
SHA256 d78795f04392318b1b11b6150fb92d54a64cbc5a3f44ac385695a381f2108914
SHA512 f8f26d512fd31341cc3b7ed22c5efad138a2e85afc01f530b32b6e836c086d73fa96feb1aa32568977e23b9f6e1ab7efcd30749b12c8c34c46a43eb3ae33f2e7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000e

MD5 33d2dcc9ccf87d6ed728ab0c46235369
SHA1 249e080a07601d8537b242546067229f49a4aca1
SHA256 a455f1cebb519dc1861af1646224fb2cff08843469c0f346d93efb6745615c4c
SHA512 754e230d5ed0a578559702f43312b2cb2b282676a95218ec3213efb566fed6ca02034bc6dc7ba124afee6f9b766a0680a8e51ea377b998eb2a10d0b7de67f7cc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000010

MD5 87c2b09a983584b04a63f3ff44064d64
SHA1 8796d5ef1ad1196309ef582cecef3ab95db27043
SHA256 d4a4a801c412a8324a19f21511a7880815b373628e66016bc1785a5a85e0afb0
SHA512 df1f0d6f5f53306887b0b16364651bda9cdc28b8ea74b2d46b2530c6772a724422b33bbdcd7c33d724d2fd4a973e1e9dbc4b654c9c53981386c341620c337067

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000012

MD5 1ff4d2ac90899e4da5c03036d69989e0
SHA1 2041f6f52ee4eda48e0693101370e05aaac6fb38
SHA256 41858625ce6f0346bfe74ec0c0a7089a6cfb9afa9904a5bd59324186c8126119
SHA512 df9b56d420935795bd631037d4d46ce900fd7914664e1a7175d13dea402dc0c29bbe849fae48b732bcf76b4a14a9c12dd226d28c4d349471bd2a66a66dad786c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000013

MD5 d6b3e76481b9f376b49a7d0925f056b7
SHA1 dde626b31a16910cee4c7288e673fae0cb52c2b6
SHA256 170963deadbc3421e03ab036c54ea542b0a2d06ee230ce96a0865d806bd7f2a5
SHA512 931a30a8ad8a41cee81efb64eb964985090a19a6b979bd94356e2c7c63c82293f5b7e5c74e6f65839a0709ad5535e0ad24373438841cb46c6f8ced1e1f715fef

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000015

MD5 895c49f280d61715ac2d0895b0655ba0
SHA1 1cf80f6b4e688f63c95cc50b42825b4787bba6b7
SHA256 bbf9c069f64c628da18f3c84873f6b5c010468d801bacd9e2b1145b015a74171
SHA512 d30d583b9077a6b3084956b9350fb4409396a56af92c4aa79f97785716b0383cf10711830ffcde23b7424c16a51de8aee450b2c0df4da17ceb1264ccaaf828e0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000014

MD5 d2a14a707532644af375cdcf7890af1a
SHA1 e7ea9eea39b4298dfeb140df2f04aa9ed08f06a4
SHA256 a2da41d8277a55fcf976c2a369e66217ccc03a19822c556fe6ba5196a6309f52
SHA512 d634f5fcb6f923979b5e6ffbea0eae3930ff5fbc1f88da36fd08ab6ae319a2f8977a2ceb4f9f74a928951be48b1c6b1f04017ade84b5510e7ead383a5497fbe5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000018

MD5 c91d2c6c0802e4df671fb56a922465f0
SHA1 74550c35cf779f94e108950eafd736311548ffe5
SHA256 e075e1f7b40e36a3ab3ec438c8cf39093e53ab04370d075866fdf826d7f58eb4
SHA512 a16d1d0ee3395532b929112dec40646d9a56604effb3fa8f4cbdae85d39ccc35fb2c1208126c87d4930ca0bedec6550ced204e3f515c74a25748eac851e0cb24

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000019

MD5 8020829282f8d6133736f8079e5665a1
SHA1 64ee9e05894d5f726b5719c7c35c10dfa8f863d3
SHA256 4035124285f7d7e8588e4fe69bc1bfe663090e68ca6b1a6438c0cc9de22b6540
SHA512 68a01229ceb0d09a76b646db8a7641c41b98cb89e8632d6a0261437fba750b01f8b8ff29c1f70242bb3cdba1850d9e8c31c5b7ef69ce5ad2323801b4f3e0503c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001a

MD5 0a7b330d35d1f90a931ba5a5841128d4
SHA1 09bdf4c09b15a13ab725e036cf5b77bbcdb413f0
SHA256 88b3bb0764ee6edc9a3142807bf0cf44ed88ad7de857bd213102319e106701a3
SHA512 e71bce3e697d9166369751ebdaf24fc7f215b94c2ffd3448b0364bbf34de00305318a45dc042e11e0cb0dbecfc4f59db532d4a9796e54f84a5e2e1e020c939a0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 067c0f550b4d4bebae41368693c81978
SHA1 6cfe4b5cc5afb3e0a46ec1437042e99407c84c18
SHA256 5c2e172a1bb4b5d41a90cdb2f48ad9e81f648c5543c8fa3b7b9682be71499954
SHA512 6622774f599c0b3c26ac7b4aea826586091bf2baa035868cd0abec228e1e1070988f4c112906bf994f12dcf2a511c53e61fab8b5ccecde2d35063422e9534c6f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 0274a83b179fd8cf91e5078383e8d8ab
SHA1 62460c4851b7e20269eb198926c2b17fcb841175
SHA256 50b2ce4b9cdb06c77a6ed5e6f058ebc8a721648422da8020bc37159cbf7e1362
SHA512 1de6928fe2315b0083b53d7d7fdd9cc1a699627e1efbe0e02edb41995a6630b58c343653d4eb62763a749849f5b0681978cea56e059d5b6fb32d8a3db68ae9b4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 e87a8b201d630d00108316481000c384
SHA1 51403131207c5b018270a0c5c18ebdb2834d3f06
SHA256 5d79ed855ae02d05afc02dea55dda21cdb7b6b36b460d96feab1822cf1075a55
SHA512 773764468fb27628550e25d06f1df6f9742406d30fe79ff1808f1a5b9ec06d2f88835f7ab9a6ec1af22a9ca86a54e43b615f35560a16cf35a1b460a10a010a06

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 575ece1bbad6e2cd0866edb25e900b0b
SHA1 7972169feb41fc76115d2c2497e003a25dabc4cf
SHA256 98a9c4d3413a146692a405420f3263fee484cf2f1702e68705db87fbeb24c839
SHA512 f3bb1731dd7fe66f5034bf68554cfc77565221eafabefebf80ba3bc4312cd9a8b8fe338547ac9a5be75a67f6becc1c5a8f1037041664e0fba3343d29fdb5cfaa

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001

MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 a45e2f9daec6c21204d4cdcc7eca278f
SHA1 725a029687f0c293bec8034b462ac65305c445c1
SHA256 f1dc414b30512b60ace6b4350fcbc03a7f1ae959bed0b7a75634d153b7fddecb
SHA512 ae220f522581f96fb5598d254165ec660e45a983cc213ed2ab53db0344cc481bb7fd90387b9c1602c4d500606298bfa3911428fe0888484f6f947be3816890c1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 cfbd8615e3374566aecb2ca906fbeb36
SHA1 25545e644931ea75a0088447a877b4bc6e14f6dd
SHA256 0975397c07344090d20f76cae6fbaac279f0f719560e8d00a8bf805ce385c1fc
SHA512 ed9928615f6e2869453aab671c38afa966f2f82541ca6cdd57cf89abccb2318fbefad2692c616f04b1c5dcdc4cefcbf983377bc58ce4348add1610048ab90540

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 dc2736f6c2cb0826232706ec4c4a26a4
SHA1 77c859818d2a23c919a5cb037fd1bfd265b52be5
SHA256 c89bf12554a88af7c98bb863a8f1e0623cb0307ccbfca26e1bae007703b7df44
SHA512 ca349431a9c32541649694e810e4a4a792bcc61e0b7f57d2e032474ad23a62cbf76ba336abbaf0d0275cfd9e45d8051760f102fd2ca0d0cad8271411e6d981b7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 fd14f42578e6c78bc8ff5cb2a0812db7
SHA1 5c3a32904fdbf3a78c64ff720822e2e69533f44c
SHA256 966e15754dfbab3fa575f2d83bdfc5a4ff40aa4262193a3dbb480a68e6e7ad61
SHA512 ab650b1a56e2e35b9ca44e49c1dd9ee99dd3907175aef96821cdf2f60128f3e3ccfc5b96ada1a634d32f6382c7f959cefe30a14916eb86e45aba72beeea4dcd6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000017

MD5 3e25273f2b366e4d7c84d7c5d009c6c8
SHA1 de45c9d2055684d82daa56fd699284c6e5fa93ed
SHA256 8745cb233fad6811e95456db487cef510de514053d90e96c5ca8d0ff84eb3778
SHA512 0119b2e90d8547180fba7ff5fc48142b9393f67c4f8ef983dcd534fb6e0576228bf1ff3a04a15d3c5ce3e08d5799fb1ee39758b6c31b0753e0869ee1fd5625a0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001b

MD5 f6e79e8c666ef12e078f4993ae35fc22
SHA1 1000f2c61f9aa7565dde57e5aec1f8cb72df95fc
SHA256 e6462ce39a8c2270f539dd16489608626eec2f0d6e7bb3808e58894aae8827c3
SHA512 3afb0faa2b9e8d2b024424d7a13a153b391bd04cfc4e0e1a2501643e440b61ffebdaeaba431ce14551c0876e9ab8f7af26994a3efb1e2e8fe0a74fa0cb11b960

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001c

MD5 d25a202898df9f5c7d82d63c7b08e71d
SHA1 422587b364bdebf17256de63d90cd1eda62aee84
SHA256 f2521f427c1bf65d8fcb714c4004cfc089c2737d4e4d483ce7c8a2958a41bbdd
SHA512 d13445545f35549caa6e207b035cd2b0faa54b5e2f22b3887ea7677cd49dfb242425a46d809b3002c86367f1bab98aaeea755e0da24b2e1eeadaa7cf92becaf2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001d

MD5 a7418ed14731cb6dde4bb4d4d1db0aa8
SHA1 323db7b4e6fc6b75d6ce69aa2ac60515bbb97906
SHA256 cbb4c6cbc5033c23aeb6ef9980c5096dd214245857639a2ddd8d7a732415b37b
SHA512 f4ecf0118ef46df8acf143d5196115495a273240557a77cf981a4b60996c4eebba1bc1aa567e1f1c685ee9af6da83a9b17c2a78b67f843bef74cb7e0f9440ebd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG.old

MD5 8526ffaa9b7613c147686f061c9831f4
SHA1 86589badcceaeec23b276dd992abdc766cc8dfea
SHA256 14519760af849866c5a77f72209ab0e2780085f5d65d4cd6085cc0be7f9ddbed
SHA512 db38e909281b7880fb565fa46825a8d62f1968f2fb964f469a3fe76c0eb1bb8cd9d7c130fae36864a4b613921f557e3780f2649aaa32f6f96229ee0014467d2e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG.old~RFe58ddf7.TMP

MD5 407458d9679c5681d520aba9a64ab7eb
SHA1 3dfc847df099b4f5f29186dc304e024a9d1822e6
SHA256 d1feda67b3bf1f0ff263b6ebc90892a8a74cbc35aa0c7a6fff1352a49ce24d11
SHA512 c6940fe0993e23951ed4c142e1e0ee8b7da179b1fbe61ffc581370e97c724e2d8f936bedb1c658be5dde71114c7d3a4bc81aab5e68b9ae38bee89e42e0ada8ed

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 41b0bfc9d8ea19ceb3469ec366805e76
SHA1 49deaa5ff8f3c08dd57b72917d252ce43e18bdfa
SHA256 f8c65264582e047d55be7fa317b6a83982f26d3211ec1c8074e27d1285fa90f4
SHA512 d90d18bc868219a69f7a50799191ccd9899444d3d11bec9fa009f71c45ea47b6f1b60a51b323971023881e82f7d3ebc366171e11452e39e720053c7eb9d750e8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log

MD5 99e0e8cebb47f4b6ab10ac6bbec6515b
SHA1 09d2887f3b4426e2a4a7a4423b135183a9fd9958
SHA256 73a5ee76ba0a12f29f159bcee8aa21dd2199be120ca34fcc38ed7e72b3e87bf4
SHA512 45318bb306bd1e25c88974e855fc06e5b0a2f85e91f4e9d8b4fb2a13cc61b1554d93e59c279da95b1cfba24cc62d5b8bbee0b5a6f05212046b1d146e75be2349

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 564c283c6921a761991a382714ee2ca4
SHA1 88daa8f71a61591777f21052cf4ca309325e5b5e
SHA256 1cfcdc63cd4d19138ce6837b226645885a057facf21b134630d7f364d301fec8
SHA512 5be350f3d2d8b7c9715b8de5b03f1c1c49dea35d4e3e52834f16871487dbd8d6ef6f7cf59ca90a769e2666adb6512c94d98e4a6c854b2d9d4302db9982f20187

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 0723db89d1ebad522881d4c18e69d46a
SHA1 27760a00dfd85850cb3fde6c526a3f503df85db9
SHA256 08fce0fc8f85a323cc2ca172ccd4a2c98c322f3e0ecf5df8f931e9b05b391f00
SHA512 5da861162c4b3157f0b01a3dd7ced4794397987533283243a88449f4b43dafe6025d824cfee5c8f4f0ca97eca73ae86c03e5385213a5901993daf16d2bd27ebf

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 948100e4052127846b44efa9edb6b8c7
SHA1 c62c293b93ae75b2d471469d8a3b0afd7a68dc1c
SHA256 1dc3663a26c5f66eec6a798d078594cd69a3a25ab894c19ac6181a24f95bf96f
SHA512 92bdb9c536f1a792b9152f7f77b60d59b449a80b10942c69f2ffd18ab2127e930b342fca1b99c62c1d083f0684767c33009df1a7f460ec344eac451ef282b859

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 ac5bd53075354ae8f2917c9bf9921e3b
SHA1 1933d3d0736f0669f4a8440f30864901a4532016
SHA256 11c1724ec2ed9a3cdc3911f4cb7ea3da35dcc44e2f9dce5b6b1a3ccd6ed4b1dd
SHA512 3ffe75e03f4a54353345aa62b99659a888ee20c822814505a165e7831eee1bd9f4430c20f4649cfa8c35e95dcad5fd6a19515910c0216f9422dc2392741932c6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 c92bae4caf9534675975c0763979cbf5
SHA1 c8415ba971f555b6ef535161d21e7d416a33698b
SHA256 119095b600aade4ef78f46fa7d6816b6a24a58c3a38dfe12e76a72cd8c1df275
SHA512 b836972812dfa46eb00686251f243ba7a0e2444a91b7ca54d7eef40b4e3ba425a41075426ea02fc943b460e728a659cf554146d93513fed11cf0352cef896d0a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 31817cde1a15e3b5bc2609195b9ba451
SHA1 34d63c06e5a8130682e81a62c957960521973b10
SHA256 aaa4782699ebec6df2f66212dd538d3f4202cfa5f184f0ebbda58aee22aeca81
SHA512 d8da82986f89ce3bd0d42c5b5e7daf4b3a54ba84f9ee621f330216fc9bb3ae131610b92f1b9d515ad93d7dcc7fa4cc16d98e22f0706b2c6edff9359e3e7bbb06

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe594b96.TMP

MD5 f7d2b8592450c552b311114603b711ee
SHA1 c4151f888945640d20d39851b8b4e240a7a09d3b
SHA256 fbbf789f02238dba804ceacbc59ffc8107762ac9284d824e649bd29b988acbcc
SHA512 d8d82e3c1453e42b600cfa63dc53d10732773fb5603bcce22a495d35e61c55358da0bb4c1ca2c3b1aeaf6fd4d280cd34eea9f00e36bf06461e249313e4186dd6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 67903bc54f5f1b31338ee4a141b2963e
SHA1 e1de2b8e7425a072d7fa350376fd47a19ef9eaab
SHA256 ad88505b963ae8b93174e0af6815746b77e4c1b2e5ab8258e41976773e7910aa
SHA512 6e3eda6d008d6c70f9b6e61271d9f5fde43876112e90f1891f6628bdd970568a352cdb97f0c11f87373ea941b80974c739c75345a1c1e705a30f681284015ddd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\653e878a-c971-4e1d-ac46-ffc6c2777191.tmp

MD5 4b7cbe75edace7fba31131b4fb844504
SHA1 16d64cef0df338490ea7bb3d6d7ed6c5550a900f
SHA256 8ded18e7b3ccee294b515f3c5d342a29d73a7b050961a48ccaff3f591dac0cbb
SHA512 2236efe226df9361a7c8c8c3d8331a3b8d70336971b50f018a0ac1d0fcd847c7e821523089c95573f836707360f8b4ec53748e9aa59385b395b8bc62f08b188a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

MD5 60bbc192dd26ee52247b0156ee1df427
SHA1 ac903b225dfb28bb8e1648653fb5712bc205916b
SHA256 1644b5e335173640acc6e79f9212c9b84c0498308db5168a0e9a6011f02c609b
SHA512 767dd86ede9b08cbd3a048cc93f8e0a64ee0e8924ee6272a89a3da608228e722e7872d44a066c3e2a13b8a27df9b40e46a7b28498e7936fecd8c97d13c5c36b6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000046

MD5 f61f0d4d0f968d5bba39a84c76277e1a
SHA1 aa3693ea140eca418b4b2a30f6a68f6f43b4beb2
SHA256 57147f08949ababe7deef611435ae418475a693e3823769a25c2a39b6ead9ccc
SHA512 6c3bd90f709bcf9151c9ed9ffea55c4f6883e7fda2a4e26bf018c83fe1cfbe4f4aa0db080d6d024070d53b2257472c399c8ac44eefd38b9445640efa85d5c487

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 3f7c3634e3e73bbbced79dc6fc923a07
SHA1 27f275662dff51451216ddde7404ea61558640d5
SHA256 f69c2de1f209686618329fe48d7d0bbac19516ba7ebfc7f3896bc99ded57f578
SHA512 e15edf42ce1fb3f0c5e29fd5a7ef153225d06b0e5aaea3a86d416d1c6feb091553f8e2d09fe39d918ef47eb5af14b60732b94553a51f51e675446cfb3cab85a7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002c

MD5 086122a4bfb7a51510e3f0f0358446c2
SHA1 409d7940193c0a6201fb28376f9ca1ec4e09d979
SHA256 3c982a4b7283f4a728760190c40feaef16cceafab2f04f372c7848ff1b65c270
SHA512 1db1eb3cc8fa2fea162297b95d6f9d5fff99d2ddecb2e5a70eee014585f6c51550816dff2b295aa268e7040c5414c89c6c7d45f0c924a612dd98ff4e7974c309

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002f

MD5 300934bd9d1d846e6b444b11a0774f51
SHA1 f77f6dffe0980d018618f28e6483ccb287649c60
SHA256 fd5d45706703d9fc3fa4016cb50c526cc6807a21c74e9c97e5803120ec09b6e3
SHA512 907f016d03e1907d67fb8a244dd49b40eb13e171b49c92debdac5f04ece1612ccca9f94c7a6350790d4096cac5dfb792a691590082a6d8e3f2b92d2ed4f2f08e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003b

MD5 bcc4b91575004b43a8d8784b3ce12385
SHA1 d3248f3bdaea64ee97ba0196051000c31abffa38
SHA256 ccaebf2f7e94b54ccd54438896cc4c3867be5dc986527cc71f57a9404d07af41
SHA512 a1c3dc049ca0252a442cd9fcd7ca4786c43b9d0086b6a1273c224c476e613c53f4966c88b6c5350e026da1e27ec977e3ee6a9b53d33eea9995480d4b41e7e98e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 a6d93b23d40ad3ef70f9526e43a820ae
SHA1 1354dc67eb820f945bac3f821fe6542993133d3a
SHA256 7ddcab9f81ec0b4dc8b742490d2e70f370485c7dcc22ebc946ac6cbeddba04ea
SHA512 97165b0efc6afe8f2a68f63a1e28f0f11da98da68ed4dc084770154dc0abd04746378d50e02a08e049693595e418ff512f07292c38dc365ff4343fbbcd33cf35

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 8446ec4644173597f68d7fe737e57171
SHA1 7b57478493ae9214519299f2d040d2fffb8b0c9b
SHA256 54cad112d4f9c11a137795caf3558462827c32ac3031e7a9080b8fdb80b2bbca
SHA512 f6c147111b7cb65e45412a1229a26f5cd8ceb3f6c1c4e316a2083ee38cf1f515c1f6627613698bed8e4d35ac791cd8cd3ea557d282ab5b960381f10ace1cdd02

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 16346169bb48a4c31fd9dcf1bf3b7e5b
SHA1 2a0460e346348f7523f4b609ceb87eb95b0f3890
SHA256 cb9da8b7e13f6e541e847e67dd1570f68af085f10ef3fe8e4e165a336781d54e
SHA512 a38fa4f88cef675e180363aba8e22fea348165e07b743dc81a5c27402fc52dc3b4c94784aea25810f33e52d27a2ed04ae9fd53e6ce08dd0a6668d4503d86fb12

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\8195a6cb-c532-4be4-84b3-9df96bfa8012\index

MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG.old

MD5 bf4d98ee9e1107791e3fcd1b7d55a37e
SHA1 1bf5f246a09f1931c9ff6e56ed21eaf36314ae10
SHA256 aa9aed484aa7f676ec0243c310661e23876702f171e6741dcd5dfc6daf2261dc
SHA512 7fc3fa3bf23fe7d1e87727c39ede9cea4833c698fc18fa280806677e0b02dde9b121a34127dd893dd78da9e53bcf9d08070e3df3ae7b0663e30cf2dd2a0275fd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 4b998e703bc952a3851646239381af51
SHA1 b219d22c8ba45e615f4a9d9465080f9a65af27ce
SHA256 93b68a2224d7973514b2b606d3a0cb6e1b86e160a810d1044a5f62f39f0b67a9
SHA512 e4bbbcb6f4b8d70ec5110d6629951d6346dc0efeff7d44bee591f4c6bad2b88d44f9a97e9a0f318b71dd6e69bb18b3eef71c059717434057ec6f882e81fbfcac

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 ab6137321afc7096db1079b69836ceec
SHA1 f698eb52a01ad0fee3f2c2cbfa0ea14b81c79a48
SHA256 a9a8e403096c1474573611af4f498b1a5ad3779ea7bcc4f8df17b33e0ea2c7ca
SHA512 62a0fe7be5f2fe873ebd6b850005683a3b1bef45964fd2d08b5fa78f98c821341130816ad8582abdccf1f60a4e0bd9a015eb79a515a35bbbce877e27de41138e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 56389d07cf7d2ad0497762aabe4f6259
SHA1 0d3e85067c44d03bb36b4c3e35e66cd076f18842
SHA256 50050e8541f61b8c91b4962cabd1fa6c4c8b157109d5e859e7183aedbc4cba02
SHA512 8d5834d1ee34b57fd77dcba2946f7a4f5346d9b489b49a1dc7db703bf08e78869cd7c748cf71cc36f101c8b44704dafbe0b9226e9ef420d1159c3510659cb5e9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 ec28ec1ff13ce77bb47ffc8ef71499b5
SHA1 ee9df89aaa1eca73c6b9ab69bec438c5e6da3cb8
SHA256 52831246d3ebd83fab8ffcbe190971966f3b6d23bf5c9673351fb28d8c2dd586
SHA512 58feeb454370a014d2c274fc676c96b5c9da37943b8e76fc67483e2bd5df318fe668798a4f684fcd95cb4dab9fb93ee03f9e65095a933cf7f0c026e8b6c2d535

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\48308e7eddda5770_0

MD5 407702ff3a565737ee510d59b1858470
SHA1 f795ce5db03e6d7ba4dcc4651506ed11be6d0b0e
SHA256 a21b642647a02d87f7960da92bf310a712b0cb1f0f76eabe06ffa56f76332148
SHA512 8e7edd848c39d5e167e7c4344f4a1d9d5d40296ef5956917cf6224c418d7fe109781addfc7cadc871e6620c25dcb4e1611a3beb91ac6286ece39a0c1061676a3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\e5341ee5195e5ea7_0

MD5 bd04e3a50bfbf815bb6b2854661e1ce5
SHA1 8bc45cca3a201207679a8e41a975dd59fde872ac
SHA256 89b3cf4d58497f9d3028fa74e6033f47440d02eba11e62c28c5a7ac08fef3260
SHA512 04a47e473124258cb49f43e9aa3a9c87a5a49e4680e82122f829311f9dca9b6d4f1dcfbf14af3726e3b022c7885651f84cf5b38785e465ea4db6c003ad121bd5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\f5f895fa34be36c9_0

MD5 4e3e25927bf3511745d078f8b55a9f19
SHA1 ceb2ca751d6963418f1b7ab96513fb8fbde7a47f
SHA256 b4b5041a4db911746441cc5d6698ac4abb3b026a87ecd9c6ded9e0b04c763a8d
SHA512 e77d545f70aa789ecb131c814e6ddafc3298ebadaa67b618190ba84523370512c2fba3070e215cdec61395cd4e4859190d0a20859559445aca4211bba268da36

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\6866b88e53a4d2fd_0

MD5 490e009eccd251adf2537558ac0ccab1
SHA1 39b5f7246a5d8b58e84a14fc1a769256ad1fc2f0
SHA256 5a91bf707320876b19695a815c8a28ed9ea6d2e3cc48d21a0b0b923d00e15e4c
SHA512 30bdfcbd752f60929d27ec5f6274cba49d2f0fba535f75503633e0757383732935e03605da3771656b533d127066e33d61c700be66bb8d4df1f11e51a8596f15

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\97bb328f8b22d5d4_0

MD5 b136ec8f0edd07afbd9816d02f176332
SHA1 7cf09b69b6267a16147c3b86f64b0b1486d9f5b1
SHA256 d59cc8d99269dee7d012520ac92f360669fb2327189045acab8df8ff5c75a0de
SHA512 26f32fc73d89c4e7760b190931cb0d51255722768409f22ea37bb22a3598da354bcc4122828d1b0f1b3e7231ca55c322b6ecfecee04d4b21f3406674ba23d47f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\49b9abb60bc16a77_0

MD5 7f902f4fe91a0565eb1bcdd4483f14e1
SHA1 4ba520a1e8b04b7790bd909cda1752b5954db7a1
SHA256 96a95f9ed3304099e155d3b697ff512e7f330f639274edcc070566d25c94c197
SHA512 acc1d5a2bb30ba900c748529ded6770671945a752ec2a12fa1f91d364aa72e5f88bc12835b1cba94d8c84406536253d17d038498797f6bafbf9d92694d6e8cf5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0da6b4828d18cd2d_0

MD5 1c805a172e4355c5c3a642c98f00be0d
SHA1 825e7ee2f5fc43b4a28fbbb55a6595121e926fef
SHA256 babc3fb8669c6cbef74ab504cc7c9d9f0f54d4d219a18af1bb0b64c349bb74a0
SHA512 e343e1dcf9db1558c96f3de8924143482473344c6f534b4644e5f0fc0ceb4086ded1139990bdc2d7bdebc6884fab0354310be325ffd5922594aab8a9b3ca38a5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\67a2aae7525c6750_0

MD5 a9f158791fc251fde4bef4a769647e4c
SHA1 000fb28fa5f6c55892396b4e4d782a6456e091a7
SHA256 fd1c491b77c97b8903a2c875ffc07b393b2ef5993df6af8cad53337f47340ac5
SHA512 3f0f3aa97b92f983ca0646d24b04559296cf1121b047b6e56a66fb18dce5fb85459498e7a1658abdb3d0850b811a02e667c623eb7b120c43044733a6060ccfc4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\1bba8b17f84601f1_0

MD5 3ad948118a02fe88cf723ade252e234a
SHA1 dc995d44bcc139f9f51bbacc11515bc7b559a244
SHA256 ef0ea276ef1af0edadb2a631b02476f2b6e77488d2234bd9c048b5d9c0b79e18
SHA512 534f241c153a718406f1d526cd09000fcc674cb3bb7793eb36b0a2e5100b43b768edfa1734443a1f231486408d35b897540420cca5ec6a79ae38fa586551c84f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\d0cef476b9ec0c10_0

MD5 34ebc8840809f5d9ee4ff6142314cd04
SHA1 116fa5996a2ffc9e1f4b47bcea9532306493c5af
SHA256 56e86af6b0cedc41be78fb9456edb731aa93ae6172c47095bb893f73df67c70e
SHA512 f03aa8456af44c3eb35f441810b9e44f4e066f6bb021620b60dc664402cb4dc27dd008338c7e07fb7b8008b8e85ddca019704ab65182a92556303cf135004665

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\f72a2151a87e7d2f_0

MD5 4c15d0c807ac0dc1685cce49d2f50b17
SHA1 5f61a82377e22634d8b000e1d0847c77ad871e8b
SHA256 b4233e7ab0706f1279621e076f07022aea0137ca467378be62579a3a37c0309e
SHA512 b95c16814ee11df1eb4e6714a67b3054f48144ec942e4bd6fab5c9873d86548e5595ea8b1a6ca18e22aa8f503792ae1bc3c47737d9107404cd02e54e839aa28e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\ed5815d8397a0940_0

MD5 fc5b3ff9adb48bdbb159fc0cb407f874
SHA1 97670773acdb2622a9ce06c735c5341280c8a775
SHA256 abb765fb1a809011c5a7c513ab2ea39c739556a9d3910b185e21495b7f716688
SHA512 ff45e5bc48c40755533eb8fde1e18b0b05f2313a00ee7f39341b67c4241052aeb5b78d4d7f466d02c5ad5ff273887647f745b5badbdb27ea5cc7bae3a04aeb22

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\8601d5c8ed910cb1_0

MD5 c2d38874524e99f4a41d89bceb7c3dc8
SHA1 0588bedf2b0f16f3f6ec3c8c4f0dc9c7aa41449f
SHA256 07ce8f36769802ccab93d8d4f7d30d03c8d98381fcdda639c89f9ae1143f317a
SHA512 0b96d73a73b4a6a7f2c25ae1a2f8c9a8aa227ea43eb2ebc33d5cb05558f7f04a51aee3bb26405f83fc9905867164f2ac50c37d030d38f3069bcd27373cd1c2d2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\ec2cf4a63f102a70_0

MD5 116674bc43595cc449896ceab4c938d0
SHA1 7cdd8cd7e579dda0f1208017d6952f15a06c40c5
SHA256 6c036a832058af45899753790daba1678c46c9508a2b445a2c993b3893a1c68e
SHA512 e5642ecaf7ce9e337cf14aa955e83b1c0fb6556760c7915b86f64412804b140db146eac9d22def4986527efd3244d24fc0ebb2c39ab115f2e3077043fd8d5091

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 8847153ca30055c7051410aebdf39e05
SHA1 84b9a45cf9d51f4e66f9c051265fd7bce9f31967
SHA256 0d9c6b0116614287dbb3884c409810af3fb240446cb7c23a70e0ee018403cc6f
SHA512 bf7de1f287e5a3f39ef035401d3f6439cf88092fa51818b081a73f99911fb04924c34b085f039e4b4e348ca015e555497736354cdae6c717966e3df749f5e13b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG.old

MD5 249102b0c7c4160fdadb7a1c9dcdc277
SHA1 463d4a8a00b30d8d90807385d2aa57b95810235f
SHA256 d74e916c89ecda4164cca4f6b70da960e71c699134af2729bf938f1414154246
SHA512 bfd4de08201f2d38ac114b69c2eb6336f44d443957224dc0d5b9410eb733879415cf523003e38a7de84aa113b4f4c9c93cabd4b8ddaa4b1434d969f027670cf1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\335e69ddec2b9ac6_0

MD5 8c522f150d2b4c2ac4134a6c58ca1256
SHA1 bbcd8897245790e07acf1b7575bfa65f140ca79d
SHA256 ef97e088072e63e5be19bdc24618ae1cbde87110989f0532720f1a46d66a6841
SHA512 567277741d848fc0d485e7b9626238a9a18853e05d2f364282d55b1ebe21f03be2d009ef68aa95bd6a2d1c602031a98e932db10eef13b2e06832370ba83cacfd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\02deed19f413e8b6_0

MD5 b3b5d30900941d698c2a4ed90945059b
SHA1 cd4263ed561bbb91a691e83e0a2d340c24405473
SHA256 905003cad044d037ce2fbfa3a21edb6a075dc3e7a13ad03a4cbc43b04735637c
SHA512 63640796158700893f84e09e80768773f50503ce2c3fa935b2b6eb3fd4180884c13f5cfff0eb255f30c5a05da75adb14bc9c84e39ea21819e4d98c1954d7c7fa

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\b5a4cbeda3f42093_0

MD5 e5bad0cd9d77e6bf10199e1f6d35770e
SHA1 f08ae5da4725dc2ba47bd3d01c4f5f20d1da20a0
SHA256 c517daa6cf4a7d8b714a64e3361fc651f0b335df443942e41d09d7ba792e13bd
SHA512 3b0f6eeea507c47123bac4b24977b9d07c8c41f56dcd26eaf099073b743e214e771e9b13278f4beee170dc7c17642ddefc8f11a7d3387045e262602418ee013f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000063

MD5 5b8581c78fc086780bdd86bf1f7867c3
SHA1 3c639e7fed74050d74adefba6e57c8df31d41433
SHA256 f148ca7f10b8e792f5a0eb2d5185e3f6f6c66ea123bacc13470d8b76ac5a0645
SHA512 cb9e4ed077cb973d7107c98eb0fba82ff8990fe2b1c0dbbd71262010db0c560d7b6ba30598b5c67cee41fc11b72b274fa32263ccef299ba2134da3f77707bc0a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000064

MD5 729e517fd14df3b39fbcadcb40c1a934
SHA1 e69932ac75674352dad8acdd37fd8f4af119acd3
SHA256 953d0d5d13771767b1809f0c78969cfe7aa8ce9421f07baf69cd6100f106d0ad
SHA512 b2510a1f0d69bd6d9d688a9afa9e16e96098753025eb98521afcac919cc20ab8ba51e32514f4ee06b9ad18a6d43244e1367b99351577f4111621cff67e4a26cf

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00007e

MD5 344bb1a4ce9ee6d74561206781d8cdb3
SHA1 27c0ebbf7e2072c36d8944d28725dcc88dbe8163
SHA256 dabd424f9aae51284f516315f5adee581453168ee51eb0de288357d0eb19648c
SHA512 b485b13528a26cf3a2c9444ab47b52a9869da6096241eb3ed124cd1f97f35342f5a4bca3a910c6f422988ccd1f3aa2800863861a4fe3afedf86c73d058be256a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00006a

MD5 326ae3e6c7e87c3c39b5b7a20a02324d
SHA1 d887fee0d345b64c73c0d1f45171ead07ce7fb01
SHA256 b6a1437c8acafc72f0046be7ea25bb6f277a879bfe14377eecce4c233677674e
SHA512 365295f22734398100385711217c1d63f6061394745bb7f124ebe13037e0b3a402955ac865a1e45850209a512252c10b9ce3fc13b041a6904dc10e0b7622f430

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00006b

MD5 4d556c2cc10f8727638e49463b7d2a89
SHA1 257179478e9f824988c329ac72563c9aaf7bf60b
SHA256 ca0f78aad838f0e3fed01621284f941df080cf134c14768f9ae104fc47c996fb
SHA512 3146f1d3b6a0bd3ced1231d313d23591ad14a680b08f75403c79a22c52632ebd279fb05a11918b060b860751633eada4715d13b066fdf6867222f2506ad10a65

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00006d

MD5 5eab06718bb99cbf4a824536fd95885f
SHA1 e49adb0907ec1bd6b58ac99c62c9ac5b437e1c42
SHA256 17057a264ec40213381de83ed6499964e9579d9027b571b2459340318920e5ac
SHA512 d7e753e7b88f45253a5b4d57c5b742875b8feaeeb2c3125f458a8aac707827d85e86dcec189326a2033ade2043a31f702b5cdb978ffd0c592a75b95657f94341

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00006c

MD5 8f1f73a6bbe39bdf9491f7672b28db4a
SHA1 17e1b5e01c6ec0fe14e5091c4bcfebc17c0c0f79
SHA256 fc0f0e634256ad4acba4e91d7dbe8f18d90b5daa7c5868a5e2115cd45e41c92b
SHA512 ea228c4f2126a188005608488b2d980d36984a06999d8fa5a00ffdf14073e4a00d417518fb1716f664394613bbf1ea70b74ad6d12335d1afaddfab51d42538f9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 e53866edd5456b6d5944d8ba32267fc5
SHA1 dba1c610a151b57c2d073c322b114e82bd4867e7
SHA256 afb1ff4eb997bbebb40e3964fd5977207f4eff04d6f9b0be2028c7e19870c4f8
SHA512 2d4c89d43ce44597bdadac7ef189790d85282d23e57ed6089b147d2ad3c322dc5c2d82fc66192ba92db3bb2b20b4565a3e0e20cb093c37616307e50f1accff3a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 3b55ebd908f39fdc759ab21409564c5e
SHA1 8358aac088d8c64ab756ed904db2ff29c529adf3
SHA256 ab3a291cecbdb188b8ef8b4e0688c647873a19445110061f07fdbe5183969d22
SHA512 7a34d7934804842241195ef0e339f47d735fead57159a8ca6b6163e798507cf1ce522760aa90267db57f0ec70e3164a89ccfe64f203801da521d25031c31a7f4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 9e889ba8d13605f2b8da947eee5c755a
SHA1 c72cc0c1f52f7800b902dcc73ac8dba40881491f
SHA256 93a621d95646a0385b853f15996d275070be203712d3eb64686d557cf50c0a26
SHA512 7b2973bb42d692cfb168369a25263e45d5e27f2d304ada0416e4ed0b1ee278ab9242cf1bf01413e1920b441e2abbac14218402f44f77a806ca532939858350f9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\2e0686cf547d53d5_0

MD5 7cdaa67d25c88cf8627e16549fa2b08c
SHA1 1f3062512035b23502eb0e396e8472bb32777a6f
SHA256 9e658991ae7d409243852ee0f422c8f6f1964cd7fa933b8578df85efb9bc04f0
SHA512 d97ae8130d4c071d461093f72b8c619a8144b16cb4e1cdca073ab0fec6a71f16fde1addf7214a2aaf654966eefb8e84cb301d29ac959186ad45a9fdee2fbb00e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\764b1d6cf58274eb_0

MD5 a0b6b2005ec2f7a466a6dac1601171f7
SHA1 31559a50a1361bfefa0491facdfa34a6dcf23406
SHA256 03aae0e0b98c7658771c10e6d1ca636306e819f9c62b575070bd397e28030408
SHA512 4a22c0b1bbe0305a94410b631a8423e4511af0a217b3e7d9aae56fc161a8bc62252fb3dee282dc99fc0d836983f5d09a7bec99783a61b3f91436bd94d42192f3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 71b60f89a935229da476ca48e5f949ed
SHA1 a509a3736192380da19f628cb08d97568e29e90e
SHA256 29dd2d2598f1f28fa49ca25fba622b70b4b2462bee6d5fb3e5bd840d57c1637c
SHA512 3973013683a92162bc146b5f5e541adea3177315d4dd29fa62bf64dccb3c2202ff516d020f3f528930eccb0d70dd761fce0d1c052e4f232c80b1f23ee460bbe0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG.old

MD5 1f70c56930f6d19d4ce438540ef9581d
SHA1 d2a5b68808564b09ffa526705dcc8a24ec514ad7
SHA256 6d1e277c7524af64c3762b358667e3f2057284aef4fce7de733a5b9e07e99e77
SHA512 9bc1f1f532aaa61c064cf2b4dfe7525e1849833d5ad3d37be82b36179d347324c678fbd14b6e0cf9f4cbde19b87431f4f67256cf46a6961ab0f79a345c222db2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 bd8928674355cbac91e0576980cbbd31
SHA1 7f7a00582eb02877c6e4d9ccf49d1141be381426
SHA256 893163cf9eac80030d95af76999aeecd4d143369420ff9e9598ac3ffefa30b35
SHA512 988fbfab08deb358024c121300d0d1e0a74f4b90bf623795534a6bde258560b1f330b77e69c3134f54abfe9e73fdc90bdbf1f311aef2aec18f8e296d6c33769b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 950312d62659da33ac66c206a8801ff6
SHA1 02f82ea9e147e01bbb2e02ba462e087652cbc73f
SHA256 f6ec30385d39e8a646dbd9c1ffe017442930e331eeae69aded3b574a19aba533
SHA512 fdff8f98de62d2b5d6181098b8ed14230160d68eded8db4a797d5e374639b9703164ca6cb1623321202a1f3bc44e52e6d5a9133d958f597ceed3d48c3f0f69a3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5 06266599c623116d5d2bc288d1f88211
SHA1 6826cb95a705b64849e35c22b677cf59d68212ca
SHA256 805ce6dd08c76b928492f3b7e85099b975d3277ba8b853b3a012ac14e87ec1d4
SHA512 66019d06b5b332cdb728b9626561296128c99abe9826cfdb8a94e628eacdc4c73d6de9fda0090bdecdfe3165e6adf26358839f6620bc9becd448fc3461a20cd6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 caebaae0747ef49f9c8f607d1f04332b
SHA1 30395d8a551682e4036f1f5fad66968eb46c19ec
SHA256 d0a67a667c4a81472fba9280fa9f16590eca367929b20a01005a819d87306d90
SHA512 e4e867af285b8db8150cec4c1b13ff1c7c927031ea85f0c16a32ff02592912707c55c19b133d6a2f434d5e18412efd44d85c2ec4671b7d29a10b3a9eaadd1d8b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00006f

MD5 47b6e3b9a667b9dbc766575634849645
SHA1 54c7e7189111bf33c933817d0a97cefe61fe9a6d
SHA256 302ed4f6c8ac4312d71205603c4c28dd2976fafe4c05533c0a08ab3bdb531aa3
SHA512 a12b74ff45f6f9e6abf459863c299e1fafe61dcf2bea8a7331ed9547de14ed29e2deba69b104c6960db93b458f83ba6a4ba454c5514105e7ffb96da96e26e612

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000071

MD5 357b4145c3264fe69f8c412e823adeed
SHA1 5fcaf1043bb72dbc719ce56a173b3da59db7ebc9
SHA256 4bf695f9d9be4d4e815594d2b7443042ec14e4dcbaa6d35031cc0420b8009410
SHA512 974c8b0220e6490324f5eda5590d4a895d7d67b87414ca1124dd01ac92e3bec033623bec67b4441fd6b69bb9034d4ee8210ee0f92fdf0a8efb6546e62ef8f7fa

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000078

MD5 e61bd4bfaccdaf14398f3ff9cc104dcf
SHA1 58110d3b9f09c5abf3fc56442aa22c4f1a8a46d4
SHA256 f9b36f92ba29f7b29f9f4cef29d0e3474f1813a54f85142233a54ebf80d82960
SHA512 9bc996cd55f66d6427dee74f62ab471225a048e0b22164852c237fa1433f40be92f6c1d9b4305b057a496bf07a43ed2a21763ba6ede9ed44e64132db09d211c9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000079

MD5 0f3de113dc536643a187f641efae47f4
SHA1 729e48891d13fb7581697f5fee8175f60519615e
SHA256 9bef33945e76bc0012cdbd9941eab34f9472aca8e0ddbbaea52658423dc579f8
SHA512 8332bf7bd97ec1ebfc8e7fcf75132ca3f6dfd820863f2559ab22ac867aa882921f2b208ab76a6deb2e6fa2907bb0244851023af6c9960a77d3ad4101b314797f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000070

MD5 387ffb4940d5cea54966cda07a2b82a5
SHA1 7d1a337be8558a8eb66ac5a9cce8c9d88ef6569d
SHA256 772b7c4a3c0100538ebc796f22138a55853ea0bfb4c97edec54fe777c6990060
SHA512 b5d0fba043bdb3b3ad63d1c6f9d18c00bbf91351df5dc62595bd87602d120032d8ecee65b2e91b6b6c1624bfa0a46d8c5e8ee5c8eedc3f445748b433457fb360

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000074

MD5 d280de7fa628b3a08d878fd95b6f1666
SHA1 345f8efc0d30a71c6660a0e27d722e6b9d0c2263
SHA256 2455a434d02eae08bb312939b36ddbaaee39718f0ec995fbcf5ca4b6973a877d
SHA512 813840eda81fdf3a7886ee9fa92a6aa40238c43ff563e6ac70b350e73d0753ad30f73305643b979e2ece7519394f299b6c35e0d77f520328a172c55aea5e24e7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000072

MD5 4bc7fdb1eed64d29f27a427feea007b5
SHA1 62b5f0e1731484517796e3d512c5529d0af2666b
SHA256 05282cd78e71a5d9d14cc9676e20900a1d802016b721a48febec7b64e63775f6
SHA512 9900aecac98f2ca3d642a153dd5a53131b23ceec71dd9d3c59e83db24796a0db854f49629449a5c9fe4b7ca3afcdd294086f6b1ba724955551b622bc50e3ba1e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000076

MD5 dea29b34367fc971967db2e75015c378
SHA1 fb0416aafd30ff8a4bf2407ec6d1fa86a05f42aa
SHA256 b3005fb75d2fa1a9dfee0c5d26f03543704d9b73c371a3d5aedf847e9d16a0c0
SHA512 be54a7f6bfa8bca479d2282b615eb791cef7880b412a8e2c392f111a7effd2c8dc2388c5bd2df1687832518e482b8bf2bd0b97b190764a1e8a379cd0260e0971

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000073

MD5 2cb3cd4323fa9365674c6e7a82d775c7
SHA1 1b50c2182283798243b9b60535077273aea21cbe
SHA256 f5a0b1d6261441e74c38f433009eb4883b8f2f9cf6bb2c9aa49de2d4cd77fce0
SHA512 3def599ea63b7296bf242d504791390c592379f87e1a1bd3a52533c6df01e1c41b75a9ad6b012f663633f33dc8b52c5b501d34c694edc66cc9eb3b6c05404059

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00007b

MD5 8e7b638bfec7451db22d5f6d54662360
SHA1 22c4f81a1216d4b1b48b5f66bbe6aeb7c7bee595
SHA256 9ca11ec635e88ea63b7ba633594f5323cfb61ee4499c42b90f3d9968accffc6e
SHA512 024db23141f04f898cb434c7624d23265c3c1dd702f15e40b793060f38cd4be3416bafdee02a72027e41dd2c5fba47ae8765a0e62c17665e8287eb782eed1373

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 502b4a4f18e5877e82fd9abb8a00fe8b
SHA1 f5cc4cee51af89381f5e8671126d32cc53cb1efa
SHA256 34d9049fb11c86339346901b56e6e856512157eb3bafeabb378f6e23f175725b
SHA512 7a63ecd0594a298aff43ae2bad3cbc2499adc7eac1211f6fa86c6fffa811ea54af696d1113e32c4af2d1b8061717d3b62850e4dac356fc8203fd1a181998ca11

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 115c00919fe42c2852d7685d3c6c2b74
SHA1 01376004fd19000a182da6f9ad5f4b4b42a32624
SHA256 c60955aa96b329d3aac048528071be41fd8adcd12b8c8012e1cf0a9d7e5602ce
SHA512 7525e969938a2a230a5eb3e2c499f097283f8845942e17e4238e0d2112e0a10347fd68070bfa3c91c504835c441372e1d78aed9b62f6a352f4f2163b20767865

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 45bba39cb8cfb7fd2989e7c1f89bc8c8
SHA1 5226855d9d16f067070e14e0947b2561488f923e
SHA256 c12bc7bf00baa714d8cf608d7027d9f9f77ce347f3bca4dc34540bc8ef54a57a
SHA512 174a5fb377175c779507e7cde5a089356ef3222f1e11556acd202e550c92416ae4fcb8ae2a40a7acd17c478c14f873bad3c431605cf70dd5b94a1abf4bbac577

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5 e5695b266d6688696ab9fd7305d90cd8
SHA1 ef169e12e3df39cbc8d50f84276f40a71f946119
SHA256 227536e3868f480112bd0e4ad090a6c501c75ad57f85154f2c5ea7e2614f0133
SHA512 b3c77af241e1349267adea1493d4d132c1ac73f9851f9e7e909d314fbd7906225d6534eea56cd8c613ca591529f35d1a43579b03537a91d81e523983faeaa8fe

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 86f61b6ce45262d70da5188c11146927
SHA1 9f106e7a843714e80675521680787cc35ee2fcd7
SHA256 82a56fc3050a627723b4dfc9722eac517aef204a1d7d1f1ddffb21f874e5c52c
SHA512 64f3e11925af0b1dbee0c68152c60765b4e2f474165c857d9c78d090a70230a3dcfac3bd91ffaeff556d45e152be477a60a2fa434a442a01ec70f8bc3cfc8c0e