Description	Indicator	Process	Target
File opened for modification	C:\Windows\system32\services.msc	C:\Windows\system32\mmc.exe	N/A
File opened for modification	C:\Windows\system32\services.msc	C:\Windows\system32\mmc.exe	N/A

Drops file in Windows directory

Description	Indicator	Process	Target
File opened for modification	C:\Windows\Cursors\move_r.cur	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\diagnostics\system\Bluetooth\de-DE\CL_LocalizationData.psd1	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\diagnostics\system\IEBrowseWeb\es-ES\DiagPackage.dll.mui	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\Fonts\Candaral.ttf	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\INF\mdmpsion.inf	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\Boot\EFI\sk-SK\bootmgfw.efi.mui	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\diagnostics\system\PCW\DiagPackage.diagpkg	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\Help\mui\0409\cliconf.chm	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\Boot\PCAT\hr-HR\bootmgr.exe.mui	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\diagnostics\system\Printer\fr-FR\DiagPackage.dll.mui	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\diagnostics\system\Speech\fr-FR\CL_LocalizationData.psd1	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\diagnostics\system\WindowsUpdate\RC_DataStore.ps1	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\INF\c_dot4.inf	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\diagnostics\system\BITS\fr-FR\DiagPackage.dll.mui	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\diagnostics\system\WindowsUpdate\cl_windowsupdate.ps1	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\INF\mdmsmart.inf	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\diagnostics\system\Video\RS_viddrv_displaytopology.ps1	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\Cursors\lnwse.cur	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\Fonts\app850.fon	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\INF\dc1-controller.inf	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\INF\MSDTCB~1.0\040C\_TransactionBridgePerfCounters_D.ini	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\Cursors\help_i.cur	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\diagnostics\system\Printer\RS_RestartSpoolerService.ps1	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\Help\mui\0409\mmc.CHM	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\INF\c_computeaccelerator.inf	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\INF\netloop.inf	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\Fonts\ebrima.ttf	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\diagnostics\system\Bluetooth\RS_OtherIssue.ps1	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\diagnostics\system\IEBrowseWeb\ja-JP\DiagPackage.dll.mui	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\diagnostics\system\Power\it-IT\DiagPackage.dll.mui	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\INF\dc21x4vm.inf	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\Boot\PCAT\de-DE\bootmgr.exe.mui	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\Cursors\size1_r.cur	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\Cursors\size2_r.cur	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\diagnostics\system\Power\de-DE\Power_Troubleshooter.psd1	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\Fonts\vgasyst.fon	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\INF\mdmkortx.inf	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\Cursors\arrow_l.cur	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\diagnostics\index\NetworkDiagnostics_4_NetworkAdapter.xml	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\INF\megasas2i.inf	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\Branding\Basebrd\basebrd.dll	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\Branding\Basebrd\it-IT\basebrd.dll.mui	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\Cursors\person_im.cur	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\Boot\PCAT\nb-NO\bootmgr.exe.mui	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\diagnostics\system\IEBrowseWeb\ja-JP\RS_DisableAddon.psd1	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\diagnostics\system\IESecurity\fr-FR\RS_Blockpopups.psd1	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\diagnostics\system\Power\fr-FR\RS_DisableUSBSelective.psd1	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\diagnostics\system\WINDOW~1\TS_NetworkCacheCorrupted.ps1	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\Boot\PCAT\fr-FR\memtest.exe.mui	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\diagnostics\system\PCW\it-IT\DiagPackage.dll.mui	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\ImmersiveControlPanel\appxblockmap.xml	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\ImmersiveControlPanel\images\TileSmall.contrast-white_scale-125.png	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\Boot\PCAT\en-GB\bootmgr.exe.mui	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\Boot\PCAT\sv-SE\memtest.exe.mui	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\diagnostics\index\NetworkDiagnostics_2_FileShare.xml	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\diagnostics\system\Device\DiagPackage.diagpkg	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\diagnostics\system\IESecurity\DiagPackage.dll	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\Boot\EFI\kd_02_10df.dll	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\Fonts\YuGothR.ttc	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\INF\acpidev.inf	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\INF\netrass.inf	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\diagnostics\system\Device\TS_RescanAllDevices.ps1	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\Cursors\ew.svg	C:\Windows\system32\cmd.exe	N/A
File opened for modification	C:\Windows\diagnostics\system\Networking\es-ES\DiagPackage.dll.mui	C:\Windows\system32\cmd.exe	N/A

Enumerates system info in registry

Description	Indicator	Process	Target
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A

Modifies data under HKEY_USERS

Description	Indicator	Process	Target
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133633610993811908"	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A

Modifies registry class

Description	Indicator	Process	Target
Set value (data)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2 = 3a001f44471a0359723fa74489c55595fe6b30ee260001002600efbe100000002f0283c647bcda01a830efb450bcda014a7f51d10fc3da0114000000	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (data)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 020000000100000000000000ffffffff	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (int)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByDirection = "1"	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (data)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\MRUListEx = 00000000ffffffff	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key created	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\8\Shell	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (int)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\8\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\GroupByKey:PID = "0"	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key created	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (int)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\9\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\LogicalViewMode = "3"	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (int)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\9\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\FFlags = "1092616257"	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (str)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\9\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}"	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key created	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (data)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0 = 200000001a00eebbfe23000010005d01dd0d6cb0d5458c4cf5971385463900000000	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key created	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (int)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\9\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\Mode = "1"	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key created	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (data)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 0100000000000000ffffffff	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (data)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 020202020202020202	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (data)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\3\MRUListEx = ffffffff	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (str)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\9\Shell\SniffedFolderType = "Pictures"	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key created	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\9\ComDlg	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (int)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\9\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\GroupView = "0"	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key created	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key created	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\2	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (int)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\FFlags = "1092616257"	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (data)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0\MRUListEx = ffffffff	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (int)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\8\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\GroupByDirection = "1"	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key created	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\9\Shell	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key created	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\9\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (data)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\9\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000050000001800000030f125b7ef471a10a5f102608c9eebac0a000000a0000000b474dbf787420341afbaf1b13dcd75cf64000000a000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000e0859ff2f94f6810ab9108002b27b3d90500000058000000	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (data)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02020202020202	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (data)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\MRUListEx = ffffffff	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key created	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (data)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\MRUListEx = 03000000020000000100000000000000ffffffff	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (int)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\3\NodeSlot = "9"	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (int)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\9\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\IconSize = "96"	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (int)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\LogicalViewMode = "3"	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key created	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\8\ComDlg	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (data)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 010000000200000000000000ffffffff	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (data)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\3 = 14002e80d43aad2469a5304598e1ab02f9417aa80000	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (int)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\IconSize = "48"	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key created	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (int)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0\NodeSlot = "8"	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (int)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\8\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\FFlags = "1092616257"	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (int)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\FFlags = "1"	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key created	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\8	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (int)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\8\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\IconSize = "96"	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (str)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\8\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}"	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key created	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\9	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (int)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\9\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\GroupByDirection = "1"	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key created	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key created	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (int)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\Mode = "1"	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (int)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\9\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\FFlags = "1"	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (int)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupView = "0"	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (int)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\ComDlg\{CD0FC69B-71E2-46E5-9690-5BCD9F57AAB3}\GroupByKey:PID = "0"	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key created	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\8\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (int)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\8\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\Mode = "1"	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key created	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (str)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\8\Shell\SniffedFolderType = "Pictures"	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (int)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\8\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\LogicalViewMode = "3"	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (data)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\8\ComDlg\{B3690E58-E961-423B-B687-386EBFD83239}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (int)	\REGISTRY\USER\S-1-5-21-200405930-3877336739-3533750831-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\NodeSlot = "7"	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A

Runs regedit.exe

Description	Indicator	Process	Target
N/A	N/A	C:\Windows\regedit.exe	N/A
N/A	N/A	C:\Windows\regedit.exe	N/A

Suspicious behavior: EnumeratesProcesses

Description	Indicator	Process	Target
N/A	N/A	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	N/A
N/A	N/A	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	N/A
N/A	N/A	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	N/A
N/A	N/A	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A

Suspicious behavior: GetForegroundWindowSpam

Description	Indicator	Process	Target
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description	Indicator	Process	Target
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A

Suspicious use of AdjustPrivilegeToken

Description	Indicator	Process	Target
Token: 33	N/A	C:\Windows\system32\mmc.exe	N/A
Token: SeIncBasePriorityPrivilege	N/A	C:\Windows\system32\mmc.exe	N/A
Token: 33	N/A	C:\Windows\system32\mmc.exe	N/A
Token: SeIncBasePriorityPrivilege	N/A	C:\Windows\system32\mmc.exe	N/A
Token: SeDebugPrivilege	N/A	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	N/A
Token: SeDebugPrivilege	N/A	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	N/A
Token: 33	N/A	C:\Windows\system32\mmc.exe	N/A
Token: SeIncBasePriorityPrivilege	N/A	C:\Windows\system32\mmc.exe	N/A
Token: 33	N/A	C:\Windows\system32\mmc.exe	N/A
Token: SeIncBasePriorityPrivilege	N/A	C:\Windows\system32\mmc.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A

Suspicious use of FindShellTrayWindow

Description	Indicator	Process	Target
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A

Suspicious use of SendNotifyMessage

Description	Indicator	Process	Target
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A

Suspicious use of SetWindowsHookEx

Description	Indicator	Process	Target
N/A	N/A	C:\Windows\system32\mmc.exe	N/A
N/A	N/A	C:\Windows\system32\mmc.exe	N/A
N/A	N/A	C:\Windows\system32\mmc.exe	N/A
N/A	N/A	C:\Windows\system32\mmc.exe	N/A
N/A	N/A	C:\Windows\system32\mmc.exe	N/A
N/A	N/A	C:\Windows\system32\mmc.exe	N/A
N/A	N/A	C:\Windows\system32\mmc.exe	N/A
N/A	N/A	C:\Windows\system32\mmc.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A

Suspicious use of WriteProcessMemory

Processes

C:\Users\Admin\AppData\Local\Temp\Chikara.exe

"C:\Users\Admin\AppData\Local\Temp\Chikara.exe"

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Windows\system32\cmd.exe

"C:\Windows\system32\cmd.exe"

C:\Windows\system32\takeown.exe

takeown /F Windows /R /D /Y

C:\Windows\system32\cmd.exe

"C:\Windows\system32\cmd.exe"

C:\Windows\system32\winver.exe

winver

C:\Windows\system32\UserAccountControlSettings.exe

"C:\Windows\system32\UserAccountControlSettings.exe"

C:\Windows\system32\icacls.exe

icacls C:\Windows /grant %Admin%:F /T

C:\Windows\regedit.exe

"C:\Windows\regedit.exe"

C:\Windows\system32\mmc.exe

"C:\Windows\system32\mmc.exe" "C:\Windows\system32\services.msc"

C:\Windows\regedit.exe

"C:\Windows\regedit.exe"

C:\Windows\system32\werfault.exe

werfault.exe /h /shared Global\2efd589e1e664411a21cc422e748a34e /t 2332 /p 1448

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"

C:\Windows\system32\mmc.exe

"C:\Windows\system32\mmc.exe" "C:\Windows\system32\services.msc"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffab712ab58,0x7ffab712ab68,0x7ffab712ab78

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1716 --field-trial-handle=1776,i,7424425512015785300,14831777479549063802,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2092 --field-trial-handle=1776,i,7424425512015785300,14831777479549063802,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2252 --field-trial-handle=1776,i,7424425512015785300,14831777479549063802,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3116 --field-trial-handle=1776,i,7424425512015785300,14831777479549063802,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3260 --field-trial-handle=1776,i,7424425512015785300,14831777479549063802,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4380 --field-trial-handle=1776,i,7424425512015785300,14831777479549063802,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4556 --field-trial-handle=1776,i,7424425512015785300,14831777479549063802,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4676 --field-trial-handle=1776,i,7424425512015785300,14831777479549063802,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4980 --field-trial-handle=1776,i,7424425512015785300,14831777479549063802,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5024 --field-trial-handle=1776,i,7424425512015785300,14831777479549063802,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4740 --field-trial-handle=1776,i,7424425512015785300,14831777479549063802,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=4648 --field-trial-handle=1776,i,7424425512015785300,14831777479549063802,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=5016 --field-trial-handle=1776,i,7424425512015785300,14831777479549063802,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=3468 --field-trial-handle=1776,i,7424425512015785300,14831777479549063802,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=3364 --field-trial-handle=1776,i,7424425512015785300,14831777479549063802,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=4132 --field-trial-handle=1776,i,7424425512015785300,14831777479549063802,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3312 --field-trial-handle=1776,i,7424425512015785300,14831777479549063802,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=5268 --field-trial-handle=1776,i,7424425512015785300,14831777479549063802,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5296 --field-trial-handle=1776,i,7424425512015785300,14831777479549063802,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5308 --field-trial-handle=1776,i,7424425512015785300,14831777479549063802,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=3132 --field-trial-handle=1776,i,7424425512015785300,14831777479549063802,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=3432 --field-trial-handle=1776,i,7424425512015785300,14831777479549063802,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5556 --field-trial-handle=1776,i,7424425512015785300,14831777479549063802,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --mojo-platform-channel-handle=5108 --field-trial-handle=1776,i,7424425512015785300,14831777479549063802,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3328 --field-trial-handle=1776,i,7424425512015785300,14831777479549063802,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1884 --field-trial-handle=1776,i,7424425512015785300,14831777479549063802,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --mojo-platform-channel-handle=5740 --field-trial-handle=1776,i,7424425512015785300,14831777479549063802,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --mojo-platform-channel-handle=4728 --field-trial-handle=1776,i,7424425512015785300,14831777479549063802,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5660 --field-trial-handle=1776,i,7424425512015785300,14831777479549063802,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --mojo-platform-channel-handle=5832 --field-trial-handle=1776,i,7424425512015785300,14831777479549063802,131072 /prefetch:1

Network

Country	Destination	Domain	Proto
US	8.8.8.8:53	g.bing.com	udp
US	204.79.197.237:443	g.bing.com	tcp
US	8.8.8.8:53	28.118.140.52.in-addr.arpa	udp
US	8.8.8.8:53	172.210.232.199.in-addr.arpa	udp
US	8.8.8.8:53	0.159.190.20.in-addr.arpa	udp
NL	23.62.61.75:443	www.bing.com	tcp
US	8.8.8.8:53	75.61.62.23.in-addr.arpa	udp
US	8.8.8.8:53	237.197.79.204.in-addr.arpa	udp
US	8.8.8.8:53	55.36.223.20.in-addr.arpa	udp
US	8.8.8.8:53	240.221.184.93.in-addr.arpa	udp
US	8.8.8.8:53	232.168.11.51.in-addr.arpa	udp
US	8.8.8.8:53	183.59.114.20.in-addr.arpa	udp
US	8.8.8.8:53	171.39.242.20.in-addr.arpa	udp
US	8.8.8.8:53	92.12.20.2.in-addr.arpa	udp
US	8.8.8.8:53	tse1.mm.bing.net	udp
US	150.171.27.10:443	tse1.mm.bing.net	tcp
US	150.171.27.10:443	tse1.mm.bing.net	tcp
US	8.8.8.8:53	11.227.111.52.in-addr.arpa	udp
US	8.8.8.8:53	88.156.103.20.in-addr.arpa	udp
US	8.8.8.8:53	10.27.171.150.in-addr.arpa	udp
US	8.8.8.8:53	170.253.116.51.in-addr.arpa	udp
US	8.8.8.8:53	www.google.com	udp
GB	142.250.187.196:443	www.google.com	udp
US	8.8.8.8:53	3.200.250.142.in-addr.arpa	udp
GB	142.250.187.196:443	www.google.com	tcp
US	8.8.8.8:53	196.187.250.142.in-addr.arpa	udp
US	8.8.8.8:53	202.187.250.142.in-addr.arpa	udp
US	8.8.8.8:53	195.212.58.216.in-addr.arpa	udp
US	8.8.8.8:53	play.google.com	udp
GB	172.217.169.46:443	play.google.com	udp
US	8.8.8.8:53	clients2.google.com	udp
N/A	224.0.0.251:5353		udp
GB	142.250.187.206:443	clients2.google.com	udp
US	8.8.8.8:53	46.169.217.172.in-addr.arpa	udp
US	8.8.8.8:53	206.187.250.142.in-addr.arpa	udp
US	8.8.8.8:53	tria.ge	udp
US	172.64.147.112:443	tria.ge	tcp
US	172.64.147.112:443	tria.ge	tcp
US	8.8.8.8:53	hatching.io	udp
NL	154.61.71.12:443	hatching.io	tcp
NL	154.61.71.12:443	hatching.io	tcp
NL	154.61.71.12:443	hatching.io	tcp
NL	154.61.71.12:443	hatching.io	tcp
NL	154.61.71.12:443	hatching.io	tcp
US	8.8.8.8:53	content-autofill.googleapis.com	udp
GB	142.250.200.42:443	content-autofill.googleapis.com	tcp
US	8.8.8.8:53	112.147.64.172.in-addr.arpa	udp
US	8.8.8.8:53	12.71.61.154.in-addr.arpa	udp
US	8.8.8.8:53	42.200.250.142.in-addr.arpa	udp
US	8.8.8.8:53	accounts.google.com	udp
IE	209.85.203.84:443	accounts.google.com	udp
GB	142.250.200.42:443	content-autofill.googleapis.com	udp
US	8.8.8.8:53	84.203.85.209.in-addr.arpa	udp
US	8.8.8.8:53	accounts.youtube.com	udp
GB	142.250.187.238:443	accounts.youtube.com	tcp
US	8.8.8.8:53	238.187.250.142.in-addr.arpa	udp
GB	172.217.169.46:443	play.google.com	udp
US	8.8.8.8:53	signaler-pa.googleapis.com	udp
US	8.8.8.8:53	beacons.gcp.gvt2.com	udp
GB	172.217.169.67:443	beacons.gcp.gvt2.com	tcp
GB	172.217.169.67:443	beacons.gcp.gvt2.com	tcp
GB	172.217.169.67:443	beacons.gcp.gvt2.com	tcp
US	8.8.8.8:53	beacons4.gvt2.com	udp
US	8.8.8.8:53	67.169.217.172.in-addr.arpa	udp
US	216.239.32.116:443	beacons4.gvt2.com	tcp
US	216.239.32.116:443	beacons4.gvt2.com	udp
US	8.8.8.8:53	116.32.239.216.in-addr.arpa	udp
GB	142.250.187.238:443	accounts.youtube.com	udp
US	8.8.8.8:53	accounts.google.co.uk	udp
IE	74.125.193.94:443	accounts.google.co.uk	tcp
IE	74.125.193.94:443	accounts.google.co.uk	tcp
US	8.8.8.8:53	94.193.125.74.in-addr.arpa	udp
US	8.8.8.8:53	accounts.google.com.ph	udp
IE	74.125.193.94:443	accounts.google.com.ph	tcp
GB	172.217.169.67:443	beacons.gcp.gvt2.com	udp
IE	209.85.203.84:443	accounts.google.com	udp
US	8.8.8.8:53	e2c53.gcp.gvt2.com	udp
US	35.217.93.191:443	e2c53.gcp.gvt2.com	tcp
US	8.8.8.8:53	191.93.217.35.in-addr.arpa	udp
US	8.8.8.8:53	beacons.gvt2.com	udp
GB	172.217.169.3:443	beacons.gvt2.com	tcp
US	172.64.147.112:443	tria.ge	tcp
US	8.8.8.8:53	3.169.217.172.in-addr.arpa	udp
US	172.64.147.112:443	tria.ge	tcp
US	172.64.147.112:443	tria.ge	tcp
US	172.64.147.112:443	tria.ge	tcp
GB	172.217.169.3:443	beacons.gvt2.com	udp
US	8.8.8.8:53	beacons.gcp.gvt2.com	udp
FR	216.58.215.35:443	beacons.gcp.gvt2.com	udp
US	8.8.8.8:53	35.215.58.216.in-addr.arpa	udp
US	8.8.8.8:53	google.co.uk	udp
US	8.8.8.8:53	google.com.ph	udp
GB	216.58.212.227:443	google.com.ph	tcp
US	8.8.8.8:53	227.212.58.216.in-addr.arpa	udp
IE	209.85.203.84:443	accounts.google.com	udp
US	8.8.8.8:53	beacons5.gvt3.com	udp
FR	172.217.18.195:443	beacons5.gvt3.com	tcp
US	8.8.8.8:53	195.18.217.172.in-addr.arpa	udp
US	172.64.147.112:443	tria.ge	tcp
US	172.64.147.112:443	tria.ge	tcp
US	172.64.147.112:443	tria.ge	tcp
US	172.64.147.112:443	tria.ge	tcp
FR	216.58.215.35:443	beacons.gcp.gvt2.com	udp
US	8.8.8.8:53	beacons3.gvt2.com	udp
GB	216.58.213.3:443	beacons3.gvt2.com	tcp
GB	216.58.213.3:443	beacons3.gvt2.com	udp
US	8.8.8.8:53	3.213.58.216.in-addr.arpa	udp
GB	216.58.212.227:443	google.com.ph	udp
FR	216.58.215.35:443	beacons.gcp.gvt2.com	udp
US	8.8.8.8:53	beacons2.gvt2.com	udp
FI	108.177.14.94:443	beacons2.gvt2.com	tcp
FI	108.177.14.94:443	beacons2.gvt2.com	udp
US	8.8.8.8:53	94.14.177.108.in-addr.arpa	udp
US	8.8.8.8:53	tria.ge	udp
US	104.18.40.144:443	tria.ge	tcp
US	8.8.8.8:53	144.40.18.104.in-addr.arpa	udp

Files

memory/4520-7-0x000001DFD4C30000-0x000001DFD5160000-memory.dmp

memory/4520-8-0x000001DFBC310000-0x000001DFBC346000-memory.dmp

memory/4520-9-0x000001DFD5790000-0x000001DFD5DB8000-memory.dmp

memory/4520-10-0x000001DFD5160000-0x000001DFD54C6000-memory.dmp

memory/4520-11-0x000001DFD4880000-0x000001DFD49FC000-memory.dmp

memory/4520-12-0x000001DFD5DC0000-0x000001DFD6046000-memory.dmp

memory/4520-15-0x000001DFD47E0000-0x000001DFD4846000-memory.dmp

memory/4520-14-0x000001DFBC5C0000-0x000001DFBC5E2000-memory.dmp

memory/4520-13-0x000001DFBC550000-0x000001DFBC574000-memory.dmp

memory/4520-16-0x000001DFD54D0000-0x000001DFD5536000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_yn0anriv.cvp.ps1

MD5	d17fe0a3f47be24a6453e9ef58c94641
SHA1	6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA256	96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
SHA512	5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

memory/4520-26-0x000001DFD6050000-0x000001DFD63B9000-memory.dmp

memory/4520-27-0x000001DFD5640000-0x000001DFD56A6000-memory.dmp

memory/4520-28-0x000001DFBC3E0000-0x000001DFBC3FE000-memory.dmp

memory/4520-29-0x000001DFD56B0000-0x000001DFD56FF000-memory.dmp

memory/4520-30-0x000001DFD6500000-0x000001DFD6544000-memory.dmp

memory/4520-31-0x000001DFD6550000-0x000001DFD65C6000-memory.dmp

memory/4520-32-0x000001DFD6C50000-0x000001DFD72CA000-memory.dmp

memory/4520-33-0x000001DFBC580000-0x000001DFBC59A000-memory.dmp

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\590aee7bdd69b59b.customDestinations-ms

MD5	cc1ca177ad606df30ff604b98c72aa63
SHA1	528c69911261585b4147655af13dd360b3ea9c85
SHA256	1b8a09e636056b4e862850ea0d25ba663a011a2839b8e3d78363d17a83e85f3e
SHA512	3732030bd8497b937fa01f96d8bb6e1e3f372637e9ce06b1296b70c4ea2e1e18c52b456f064c35c3c08be3397081061a37b434aadaa83c6b4fb1a9e1106f3437

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\590aee7bdd69b59b.customDestinations-ms

MD5	a2431933d4f8cda2df33d2f0467666f4
SHA1	7744064c04b86511dd1df8d42ac82666fb1797fb
SHA256	e5194b05aa8a39f4f17e0aa5bd43d84e200dd05342e8b3c09b4eb72c288894b5
SHA512	31eff1376aec289a7ddb806af3c9da921890c588641ca3b5d86dfb1e7643874bc2cbe0d230cebdebcb69aa1824be2e3a3725acadb5f92539c79b5bcb3105b970

C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\powershell.exe.log

MD5	901203052270d1b13edf1a1835cbb734
SHA1	e962d6f022434cb2cc0e86a878a31ae93a0b2a50
SHA256	6c3fd80b15be0de3065cb6fe659349cdc6fd4d4c9b1c2a633ca5ea23b3167008
SHA512	73afca06b9443caccb7052f9b7ab0a363c2689c51f716bcdba540d88ceae2486035c6c869ad385b999da16392fd58abc4c23dd1c79a8661612869c3a7780d064

memory/3636-48-0x000001A77EC30000-0x000001A77EF99000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-Interactive

MD5	44545c828bb9537436a62d22b95acec2
SHA1	3cb1b2d654c6d8c0351c9344652f2b6306649555
SHA256	0f215e1e129c2f1761af43f03461d0223b6294cfc014ff1543bdb1be823a1538
SHA512	0ec3d8d44f2cf8f596dd3bb4edc9446d3f6c4bb9de8af748bf39e3bb8f7066febb00c39439c01a73377429e701e03f8e9bd463b331f803c7e95c26cd11cd228d

memory/3636-56-0x000001A77F120000-0x000001A77F1B6000-memory.dmp

memory/3636-57-0x000001A77D590000-0x000001A77D5B2000-memory.dmp

memory/3636-58-0x000001A77FE20000-0x000001A7803C4000-memory.dmp

\??\pipe\crashpad_2164_VORGXJPVVEYADDDJ

MD5	d41d8cd98f00b204e9800998ecf8427e
SHA1	da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512	cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

MD5	d751713988987e9331980363e24189ce
SHA1	97d170e1550eee4afc0af065b78cda302a97674c
SHA256	4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512	b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5	a09f6a64d37162f48e531f13fa65928a
SHA1	b9d8dad36afac66112808e73f6ed9e903701ca68
SHA256	99bfd7d6c9b1c4b822e87902688b88d3bbde05da5eef1ac075caf70864aef48e
SHA512	0b83ad5df8a8d3df7dcb7b438f4a5e32a41bf9f997ef446e4b85ef8ec6d4c34ed660ebb8736cf137dc99084f6997225a72e27fb278eadf59a114fec84ae86f87

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5	ea2d33e637c400aa65ea57bcf826fd03
SHA1	ad71af6a5e9406af8b51ababf6cab1816481d3fd
SHA256	776235bbce08881b5276294b87cd01dfb87fe5dbc3c75de45ce1047096bc0e02
SHA512	853f60b379e7c97de43d4827645402079053351620a38232065facc1a497a9c8d42c9b2253399ec01bd86c8e1d9f3f0a3c4dcd9ba98b23f846822528d5fd3e50

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	6b3c1b12bfbe534878a27cea344111e4
SHA1	dd0abf009fdcd25d6f67bcc94dc591f47266eb7e
SHA256	fd95c144b9ca4ea0763778111f745f32165220828fec589031db9ed4d734c089
SHA512	9de0a0130115f4276709db0feb693d115e68238df9f271f21ae914def87787568aa201d14348420616de6be513015bf1f2f7300e992a215137029bef1ce271ff

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

MD5	f64a34542a4f1ec0a9fd7879b37ebe19
SHA1	ff34f76c492a9695c4370b1eb19100d3d878b172
SHA256	6971412b2fa7f5441751e4bd5525501d1f3eeaecb752775600559cb2cf8369fb
SHA512	1454e2ce18934740c21ff68fedba7dc147064bc96f0ec7cf8bfaad52a94b5ea2e88d26e143a53f26428f6d21c818a251a8cb36115eb8ca0e7d41e02c7760c3e8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	cc932a95318d79e8a9c30fcfc1f0974d
SHA1	e4d344515cdbb9b4e03bb660ab227eebc428f4a0
SHA256	25b9c54db717b2653792190719106c3ff7c91a14b68c490467f5ade8287af717
SHA512	266def7fe5b1e56bfe4a89bb3e66edf6fbb0dfc96b68c54ac8f12ac4926d5b30d2b18062aa7af8dda1469c8330f77abf7499f8cfdc69ea7b87ff7c06bff31a48

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5	359196b23a295c16d07c8121ace93a3c
SHA1	229a114a39e755712eda59fb51d9cc47ca5f3302
SHA256	58e3500941a59830754ab2cda58e9beda0fe36c9068ffe022f20539cbd37de22
SHA512	3af56358a6c4a52bb498cf71d6e036b17c949444533b645e17860a8cd89d279030fc0ded297a9ed4ee83776d1f7cd162d2a3bdec8fb4ce1e6faff40b76dc8c24

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5	4582982e068ed226cf794810e42545f8
SHA1	844f48fc17770444c1726401a86f8971ec50a753
SHA256	5deb878e47cccbe00d13952ec7c32ae59cda98860bd60685b5078e4be9a0ce20
SHA512	47edcd69b45aa58bfb44505813878b45cfa93008e065d752426203d00eea37366c731ded09fd3f20f96248d0eb950e3296b8ba6d8800df7ae73f876b9d60d91a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe64279d.TMP

MD5	ff4d3c38b9cf8db4c553af56910bf66a
SHA1	f1c88166c78fbcaeaaa8dc9ff4f9f198ab623d2f
SHA256	cbd0ca29c2dd86e89ccaac30372e912a41ca04e0e87be14588b5d9f817692460
SHA512	fe06d6f009404380de779d2b100918d46b89bf8f3ec6feaae682754edc17adf36eb2574f2dc3e151c9c77069b0a033646fcaf19117823dbce7dd9d462f7c0d2f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	1b6bc42d76265289ee0b088e0d62a896
SHA1	91711bb28a25c0b3016505db214e7692d36d6925
SHA256	c2e6d3043d4f73f97652303f2fd956b2d31a1196480ef81d3082b1f637408392
SHA512	e8c0d47fe15e16735750bdd03d48a8df617456bb1278efd97f9caab80a19da7656ad59b7e2da3d546cf0b7b612752a355f1bae3cccb7c027714693ec7fc11fbc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5	03985ae24a8e84e451bfc560ca2a5210
SHA1	01ce345166a2dfc1d0e753cb5aee1cece6f9637f
SHA256	db26c234fc65d781e05ecd8ce3cfeceb0bc42cf8618fddd45562de8d0b1d98aa
SHA512	99705beb3f2d4db87b6c25119f10ca01702524743651009b2d2d0b95a2ab566083916ad2b40a1281e1c0754a5399918356b0598014ead385e7b20d28fe860844

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	f3532f6a16bceee6479239749901aaf9
SHA1	7ab33963140800486a64c0cae5da74236892c8c1
SHA256	d517803c29e7e45cf94d5b9324e8198227093222bbb8ec85b45c1cff5b6f15c7
SHA512	af715ab38d5836718d406ae0d861c9383cfaab3afcca26e19cdac8ba1f8d37cf0fa4b2b087a4acbf5ae5f0515ba989d18a2e545c2fb882821f23b3937f546957

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	e3fbd0ce3192d1d99aae95c9e89abc40
SHA1	e70b08cf8a7f5191e93710b878cb6cba687ba860
SHA256	1a0a838fb951796494cbbc206b6124f3193e6e2a7de890dd2834b6332f90e169
SHA512	0a34e2a1f8a5f7603f296928059b5c9fe477e5a1b6e4d9a095da804101db6820eab19308afdb2be808cd46a5f42d41cdaaaff6e4c25b6681602810aed3d9707d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5	a01645cf40d0f0e2a4c87d141be6293b
SHA1	ec1a12499d7b6be898a3b93d465d3b8583f1ae7b
SHA256	465595cb78f0a10b4e52a02a01e62875202d820c45eaa8b82e44ab16a0e93fc5
SHA512	2ecb66fc6dbf9e392f1a0f22dbf43c968055a4bc73000ba53fd89ade9b4fdb938a39302fbec1f5b39d1a4e1570266b19b47364300ea806f6a01c6f853233392d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5	2a29dcdd6adf09e570da1dbeba7409a7
SHA1	d105d92646fd00c8ffd4a9691fdaddd2c4578608
SHA256	7cc44d5aad1f910c7369b5bbfcba7f20051b0aecf30e5f82abcc7adf61546a78
SHA512	530582a875be3911af735f49cd3abc7faa11f9b63ade8c2e1580a5e7a20c6bdeade435aa813430c4780e2db5e328edd6d7d16aa5940ab078b1d50e1cfbb481c2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	41a7c33bffac236d76df5bb8dbdd4f0b
SHA1	baa72c5233e5787aee1d2913f26e70248068d490
SHA256	44e5e43c0f251b4fe78dfaa3ea433b60a07e9a453ca689d874e5d965eefe00b3
SHA512	77f94d14ab902ded72ea57285c314f695fff4cd32eafb42dc6a746261f447173680aeed38ba4cec1a676e78e861a000ee944eb429f80d8e4ad172b2c6ca1a529

C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db

MD5	da72afebe32858168a298e2b6ebbdae3
SHA1	322e5f33ced4a5676e854fc3485d5358ee942520
SHA256	765cb6147a5a5d81be359288ed9562f6022a62457902561e9ed0bb0d444d8b9d
SHA512	1826d07734e91222de92e7a2f1ad0a577e724a5dde19c6cb70f055bd18169fbb4e1c950e4b27303dc780857f6e5ba4e3e9b59761c1f8a27e2e5165f59366ef35

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	7f3b6160ba624a1328fedb14ba50bdc2
SHA1	49415d3f3c1b8957e816fd49f93a7ee6407c8326
SHA256	24d83318264db4ce920ffee3226536e984fc26af1169bf12be98e0b486f431e0
SHA512	199e00bf9bdf93789a8d5817c9f237c1d5e2598cf0772e33c53cf84f158c1d4cedc17bfa063692d2ca5f591b4ea072223d0347ed14cb9df5c3676744bafb0876

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007

MD5	013978fd9c17f7ff167e3defd9e7381a
SHA1	7b2bbbe30774504989b3272d936b59accf68f724
SHA256	63de8618f77f2fc7c4da39fda412abe29ca64d54c51e7e5c6be97ceb0444c9ef
SHA512	66db7db0f400215db50a54bb5a84981de2c7717ee8b7c047cd12e9c3dc36d25e4677da9a9ae8960d983e4e0c073d4a8155f69e4a97a81576d182e2c4ecba1aa5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008

MD5	1c1441e4c0ffab4ed8d316ee1f772511
SHA1	9d21edc040fc31d521619e49c005b40f8a6d526a
SHA256	db65d7520a3ba1eb104590d3b33162d3142fff76f546192ca5e1ae0775f3d33e
SHA512	cdcbd0400832af06c761ebfa1648a3f3b24cf6efa74964a41f9625dad6f650183941efb6365957e22310592d144773016a70c380437a7c25bb59dc90f14d5377

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000c

MD5	cf699a3473c2132452c8096fd46028bd
SHA1	75afc4f148ae4872afc15c75bf0ceef08ac50c66
SHA256	bd79eba3f7f2f88aafe881a2b4c75a86a06653002259767ee4717388827a6371
SHA512	bfda14c2e28e3bc5692bb35b79b7b6eb275c6531447ef374f9855a31ea42725a11e27827af37ca9de6cfc27fa0a8833ebf1bc5fe32c12d9c17af05f18c6e9d44

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000009

MD5	1fb0c230afc70508d2a9d03e5917acd3
SHA1	52c36e5bf03aad574da62945d8ef40fa2cd4ba3d
SHA256	60ad0b7ae50f20ddbeb40f897ec40555041f93bf41c7a759967dc9dff4cc87a6
SHA512	f2e877dc3232c9387de9fffe425bfba3309c0444225595e8a0e2332c6c5774f32596167e17ceeefe7cb3b65e8abd4ca56417756694045710c51bdc60959a6e17

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000b

MD5	87737478bd71de50615d94b3e29e3c50
SHA1	0f4882084f0302621c0139893a38b2f8f731b84f
SHA256	38365aa4d49c1d2fe78bdce8e9252e4bcff80ee7465aa7a57cfe292337f9b3b1
SHA512	48e29c74621a7a8be0c1e437064a1c065ed5454808e534f4d0ef744624b89ccce293234ea7f51d50420d98655641b08947dba291582676842dd9d78cf06e05da

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000a

MD5	d6aebed852d589c8ff2695ba6c425199
SHA1	cf40e06fc7759de953ce58428603aa39aaff5c81
SHA256	376c01c8335e2b88b71fb27e63c5e11ac595e8932ae3d7423c4c5e2d57e65c11
SHA512	f6925b95b4764534f48cf43294c1d1f241266f93d38e160c01119deb4bf354eeb3a2dbc3139f3032f9cad58524971973fce73cd6d15856a6c673f21115099956

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	640265e2f8f61d171c7b4b1620927626
SHA1	d734bdd56e19802318d8ba0d58e37613891d505f
SHA256	1755779af22582ca3b586c0237712d5888d44b71edae200b503800149c677f66
SHA512	910e0c8c13c4803142b288b99acd7b16be197aa0c4dfcd94b621c47c72bd3792d114fd1492f1a3fcbea689f1dbd983666f6967aa81f9ca8de07ee180274a63a0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5	f2b10f0a1d1925e96f05ce1292686c03
SHA1	05a45aa330a0f04159282ac4f595091ee2d3b190
SHA256	3940b439fe118d6b8ae6e1bfa101063030562b6bd712c21940f0213c19b6b2ee
SHA512	5687cdc40d0dec505563368a9cf49914fa76d5224786fd422ceb9b539c6211be18f03fa640fca60e956b5d5d3eac875f763699586bcd42bbd668e054716713e5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	c39cf3f86e6031d228a338771c421b13
SHA1	c85052a658ac5697d41739732ff1d55be9f87183
SHA256	b031a3d327119833c2c85d68c4c87f2bc1af357079bc294a19d95b8c7e3e19b4
SHA512	d95db18660442d70566850c1cd19fc4ccad3cbcc18785ced056f00b9840baa8a2fd70b30b2fd089955b305ef9a94ce8c563eac36f764df9b0e9e7113f6937d54

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	78dc95083361cb30e7f10b7a9c6afefd
SHA1	08df6280fcb18deae9d4d6b0cc1a92bd07fb88fa
SHA256	04df2d83e1b879dd058b6198845dc3a89dfefa20d61205f0647f7429fb70cbe8
SHA512	2e7dbdade88d9dd8e98ede443f9984c42775d5c9b0ce6169cf8cc145713532d988657d5574b83a535fcccc69bb84235d9e90d2fcb0bfd43ea628c877b6f173fc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5	6ffe8d06ddb646c41b5a458e0da1a224
SHA1	2a17a19ca445152d660759b76fe181b9d70113f0
SHA256	538dd2bcb41fe22993a5735095dc7dfebc0170a7d6be49d7c28f5eacbb333ed6
SHA512	fd9edeb27e2d3f79795025a112efa9591194475ead91151558b98f5c4ae1f8ac51cc81834e25708d1bd935f0c876bb176710c35be07065d08b88443886b240a4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	1a2a2f37d34fd854c0c106c304b1aedb
SHA1	887b5ecb11c21ca96be52f47c878ef6623b6c057
SHA256	f2632633b3abcf219bd1a14f533bd0179f3ebfe90dd772d99c43687660cbb886
SHA512	793299daf4b5d4e489a0b14c0138fd068b8ddc017e8be9516833ec00bc76d290e14ccc50e0714d22b9826015be10015e6b393d76b446a66419568d9282dc341c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	e210656b801725a46df138bc3a762b78
SHA1	39aa7cf4a72d56ac299f3ca7d7e3a6f2f21bd57e
SHA256	edcc7c88902d415870879499e40ea28219ba1a8e22f49b0b1752998cae7f8aa2
SHA512	a2f4196cb323c99b580d8c9ee653b02ec590518c0cabc531c12e84ba51d98f18578db8e2690a19eb41ecb7327d9aa06ed2eea2a044c0f2d4fd0cfa29053869a1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5	bcb8f43106b953f25d3384a447cdc99d
SHA1	d5ed6f11b2823518bb43c37a183f79491e0047f9
SHA256	ac8c6b2d802523c54a200e3a479cd9d97f41b57e5fe964078b3c9087bf877a6b
SHA512	64705bf97cd7ce8954d16ac9009a94290e2ef812afec700634e47d42c43c906dad65f3b98aef5810a1de49cfbbfc03bfd68357c948957daf6deb614e5c117e8d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000d

MD5	88f1448d0c57a254c39fd5e6cff7b882
SHA1	892d7308969f36f410056df21eb13b9a04ff5571
SHA256	6b304f60a9a4f4f5c86f2d67222ca4fdfad281a750b716d7851a55766ef50e61
SHA512	7e670d7a839e01251157d000293d1cee5e61c50aa0d22ff4e63c07acfb9c89e9a400d361114c00e682b6d6c8489f0ed35e2d560178df07b9b3dd6c468d56d577

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000e

MD5	fcbaa3f9bf3f73a549715003e5736cbd
SHA1	ae9da01d1245956446d8b27c4b587729027f1c10
SHA256	7a1b49b465d057400f47ade27d1bb59e2ae0050e77392269b751815c9d0d9f74
SHA512	c77eeee8853acd1340b62da35b5d1ca52b8f7b94f81e9a4fa8f6cad192e2f65eff36460d3182cdfc43c29390e0fed6176883bdcd0317ee7bbe83e089954749d8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	2555ebf4c1f5c5573db5554fdc278455
SHA1	8e11dbeaa923b94c8f146afdc5c3db2fae00b04d
SHA256	d40c4290d379b6031fc2a5c085dad86c6f688e60c63ae27a9682b4abd0064607
SHA512	3090097a2a1d595c87312f9ae3a346780428baa8d7226d6f6f5a8f362a12ca69f6e1d7b69c9450c833cd648d28a49cd89755fd924ce6846b4453680d8af8def6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	e5d4fa4a1d84ec18cf0f1e0cb442ac2f
SHA1	9e797d4e59cea990eb40b5feebe07a182218cc00
SHA256	a822c672d7b7d8b6a1bb16cb7b5b5c5c2f5f305f8520b956d5aff51cc7f927e6
SHA512	bfccedd08b17da2de1052dd3b9638f73849aef6da1e91fbb27bd9d261b3c48ea72e5fb8795d9b61874a291fcfcde37ff3c559bfb2f525f1395b85e3b051e9614

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	3b2f15ad62efdc2b5145a3d808b08826
SHA1	15d815272e4aa41f6e30122c0838e3a0ed724691
SHA256	31e092f01580cf77ab39fbc7e3aa0734804831bd69fb77f45e42c506545dfd3a
SHA512	1c210f3ac5d7008dc8a1b9b4584a3c908ff5fca41cb9a035c0a46a86afc9813a69b77f918fba855e37c7c6714da722c0f6fbea30bf763c365d5ff1bb3209ad18

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5	7f03939e3de078bd637a18362e0f570b
SHA1	097263afb869267e8c4c62595f26b167ce08bf48
SHA256	8de96888d58aac06d7df79fe6417787c0f0542b97bd10655405c3641cf6c650b
SHA512	42fdcbf4675ad749b639a550005bd07870c2464cf5feb63b675c89cac654dfeb408640aa6fbf9f8a53ea8b233f0957fa31ebe604a1f0a2c396dd7d0f311fde46

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	6d276ca44c3a6b1be16158fea9b05a3b
SHA1	bd9710d40abdc4a42527149def653ffcf6acb891
SHA256	6c5e8bd3da8db7688104a8bed1f399d5bca5a1413984bb3c990bba2906f5210c
SHA512	dac476c83047a79ef495f8d1becfff881be7b97c07ed8633a13e8f5578880bb4a667320035967523f176b9f88aef11cb3cdb662cec8b90ea570d86cb9f060b0d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5	498e476761869ab0ec08d91ef989f4a1
SHA1	3a5299a654068b702db164e5b7596f01224c6245
SHA256	fe70aa67a324dcc0233206d0a270a52bb2b5161f833fbf8ea062fe60600dfc7f
SHA512	ae91157315d79aeaad39854048f52ac5f4c45e708f78b0d144812956d9fb80ca03ea92e781665172971db6fa6089573c9a73e45677ffe70386dc94a6952c0179

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	a64016e20121cd45cebf6c3b9dd518c3
SHA1	99465792ce2e4e9a96dbebf3a0e000084aa6a2ff
SHA256	da504fad7166f5f7f9a4a038e8e01ad2ca073444f3e619660fbd5bbebd3efcff
SHA512	b79b1e9104928c53cd1f1381675c7122547ecdde45d83e954ff6054972ecd726bbb66bf967adacf3c461d9eb354003d301e8513be568d3fdd0862dcf78380412

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	47e33dbfabf987c59492a0320f88a6cf
SHA1	e3de6edf3237506483d45aec1be45c33a002ea3c
SHA256	26b92d7b9579bbaaa55c88fadd32ac92072c00e84b9021448109206d133dd72a
SHA512	652e49cae9332935e3b45e7f577dbd1bcc2e71e4e47c1187c59a6caefe48f5c650f5e680aaebbce359ee9a385e528c242c15b5f9d9119845ecd91e31f36e823d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	1ea3248f26610d636f589aec5f1a3065
SHA1	20132a6a9b62ae1013ecbff385c5302977b591fb
SHA256	d18a4130874e3b0670a87b5d6efafdc8794406eee7051250fc8535ee978a95bb
SHA512	a11550d7d8abc3b8d8e41723939bd2fe7e425d0ecd21b11e8eefd80761137a76cefb5705b962fb68d4daf6182d50e6814719a39f0802d787dc3cb3d1146c51fb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	7a84d7bd9fe054b005e30bbb16e7f9ca
SHA1	cb230cfdbf1e073c917177fac514186028cfb652
SHA256	ebeaef52f97066e395ddc25e090d178f90beb38644f21788aff64a79bcd3796d
SHA512	e40ec258ccda5c410f164886bef5c684106452692998e9495d8df7fb95c03d730acd506d4e5d9781bda93032c99d9de3e69e56d2bc0b2a8068aa58c1367e3daf

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	2d0a5ce714e6d2eef5d6e570c9866a97
SHA1	553880fa82d1e4199277ef0b6375f3915f665235
SHA256	454d57074c76beb2c5948209061f021d056b1e215c25cb36bd9514203a9cc949
SHA512	d0630c41068728e4cc11c3512cc0b58df56e88733a8b27f5ccc77020ccb87b71129c83ce34fe3fa7208796650f9aeb342850b67ad9e20030e8f4a07238cad2e4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	dc18f192efc2a40b9a49217b6bc1998a
SHA1	68a36e91de282d5f1f13ba822bd37e12c92dc697
SHA256	9484f5b347c45653df1ccb1206bf90ad2ab5060e38af168a7e3ad5e336ecb7e8
SHA512	c7621853db65a3869c04a24be248fbd0b03d4ecfc2022055f3584e9a57d0050041dca39042b25247a353ba94eceeaf1071dc77a5322bcfe79a6d4947bf2b91e2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5	88674ee1576538cd92f08cacf43d2643
SHA1	48dcb5992c17335b67b05511e773b31db76a54e0
SHA256	19a0e80ac454c12f16c2db2b2aa420c66d32b94ac221b32bca838342dd84eb5a
SHA512	30b704f4eedc5b4df944ef068da5fa035ad4b8f9dfa1c776d1bbfc5eeccc9fac2e1688872d5aae054c992a0178d86c5e7d031c6288af85131eac1a2527315236

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	51bbef8f3f675463d45768df8c884fdc
SHA1	b6d37de0c77c7f88f283fccad074a12e927df707
SHA256	b45743d374ff44b52c901dd7894410e34d9ca69c43c4342f317143e87ddd815b
SHA512	883b3a65768d924eee39b920dbef0a976dabb5daa83963cb1d4374df52b1d724e8fffea3d74883f96a476e1ddf01eec6d43d312e07292d371959f1c7eddd17c6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	5918302f929caa8d63799beaefadf698
SHA1	380c2c23c3140b9b245de9c6b9f919c799ce8def
SHA256	e729db56e55d536bfac5874481da44fbb19df0018897d4c0550d643d21cff8a0
SHA512	fe3c4dda55b64b502e86778190692ca587516a6a8da01f6818fbf20554a61ab2077b058deb8efcb4313f9f57b08ee0accfbd856e084dcf03069e7dfc8ea89ff1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	5b7dc3a6d23ec91094dd35a7287b8dcc
SHA1	29c13b2eae6efd0b3c290d0aa3d90f81ebce7393
SHA256	1b5734230937c952b4e12abc64eef4b524d0ffc4f351148bf3f8ade48812cd7c
SHA512	db25e7be53ed2b78fa600f6a4164a2f1ae4faf48fca3359bc784c815808bad38ea4f080c61cff20056a07012d0e2ac6c71d5dee768e9e3b8eb1f91f61550d41a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	c2e001f6e985edf9be73b491f47ffff4
SHA1	3140b25ca033024d825daa3d4b39ee849c9079d8
SHA256	b3a2c25287e8c6edf8ad567efde821cafdb5cab79e57308a5781be8336a4a0d7
SHA512	4dffd449459ea15ff562475d4fdd287e8b108fff24bbbdcc48cbb977ca7fa8e5838693742160f8c0f1e8572d2ab6e9942b5625444f5bfdd5c7e62b98c2de18fe

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	ccabb0ce36d77ce8c407a89d42fb3426
SHA1	c73148372727f2b702d1f6d9a71c67372d9f5f59
SHA256	ab20657bf07321e75b673d3464d116cacac321c5909d10702f1cdcf7f04ce992
SHA512	a19cdb6da46e27bf5e48f8d281a03713bed513de667bd844228979e4e567b69b1ac464d0e0edfa13e6035097413efb32b5efd131d3861a53800ea2d6bbf67cb1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	23132e3356d92aab715c2c97b8b2aa13
SHA1	8153fe5a59ebef100568cea5793e10481fb90878
SHA256	1156703e2b46afbfd32b3338d45711e6ad96404aa4d139720f66fcfbe3925adf
SHA512	a347c80e61822fc21b88d49a492201133d76e1b49fa9fd2fce7a9f1adff1496eb689349215c104c48fdbec621f956ac14eb6d316aa23e59d988e9badc18fb6c0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	a35b81911d0d6b7464c4f776e91b4fca
SHA1	3dab8c7ac620b8661e0e311d808df98b8acf1d38
SHA256	2474d9c1b4389032df7ad35010a2263089b2be1721dccda9ab2db1d912c2b643
SHA512	11e18c6109e2b0dabd37edd2237d98f7c67663b024952a6c14d37464448871bc6202fe110b94724ddd74a1e3bcf1e86b73da391c6a625a33200b5e0f6e97a236

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	80f7dbe7083107b768c0392658da7b68
SHA1	b993601f29a953526a6887cb187b1c30b246e5bc
SHA256	eb01c94a6f8d91738a7e2a6ef2fd494c04442a044c3c2373bb9ccca13747a8be
SHA512	ce0ceae9faff111d63cde70ced36302a4205c2b315148f6488f27b17265fd651f2e347614f3fb7d49accbb0f12545f5157648418afa7547dd350d4e4780e76b8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	7556653e879db3e56351c20981165702
SHA1	27d3e1333923f9ab2ca07e7be44ce535a8939794
SHA256	a9dadef1c59aa98a0c67f17e8c523ffdca9635e9d2407873c11dbea74a9f6788
SHA512	ca94a0082a6b1ab7b59814e4cef50c4e568d0d6fdeae1822e79577dc3b3051a1ab7389825148781abf7720f37bacf108e3cc76bf4ec6868165736c255357e4bf

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	a1537dfab43a022bebcc82af59401eed
SHA1	e0c57911fa7e1c8dc123f5dc9d1b7e5cdc1b200b
SHA256	4f1decf9d71190d6085e52958d9faa60a98c9d44be5ad5daffa01eaedaa8a94e
SHA512	2e606bfff4bbddd201a3ad598d64ea7fb519f1aa73f06b06cbce6ec3ce276ea3b45e30c1ec3493fa75694d788309ac368efb8acdc9681e9d0e541d303c973679

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	fa13efdc83609c39f160de8d460e6457
SHA1	c5cda85e61412e39d7af90b7f572ba8dabf679e0
SHA256	7e04e642c5ca636b9dee2667ad1c84f20520ad5e2ea75d9b9ac9dd61f8f9dafc
SHA512	45e8a58bde1ca4640b849f0c18a3f86d253d4d3cee031b54817694c73c87029c27d00c23bd1bc5e2ca74c0aba84f6a15c7c382332922ccf2c8d9b39e0c7f7ebf

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	ccc056c5ed39902545ea6c2a8a018b56
SHA1	5ef1a4671ea047b9e31a0702d0005ccca48f52b2
SHA256	0a264e15379eb377b2503ea76c0d4180bfb29276149127e12aa6b3afc5655c21
SHA512	9357459848bcb087873ce1bc8f8c9bd254ae757d27ecb41165f221d662e907a462e41624017d5d37421ad9927cd1b239a56d4a635d789096abde0dbbde9cc184

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	2d7b846a0dba8414bac8bb1f039cfba7
SHA1	f3b0e60cfccdb3e6f97cc4f923ebaab3f3902d1a
SHA256	b706bfff2e0659c81f40680895aa9de1e0bc3988eae05efc8dd94af0e4b00b31
SHA512	95ca77927d068f155c02d711763ee09893648647ad2b98b7aa164e31bb2b8e55b8f4fca6807f4ac7ffda82366d944a5e2e250b3d5820e78c65201599c32e589d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	6392578af96f35bae2b56a2c2449a4e7
SHA1	f86c14084b5ee628277c16d99ff1e683a78bce54
SHA256	3e5dbc8bd4f4192a1709e45a15e101db4275bd5daeda86d12747ebc06a1e1718
SHA512	120a41cd5e9110833278fea07bf3dd853825a5a4c1fa0294559ffe32b56faf2f03a312e955d9baccf533211e886b40f3629c145d16af668409d79aac0f374ec8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	0d17613bb1d5f606215087422ac2c863
SHA1	b84b12139e714378ff361e758f4c35f8c298e71c
SHA256	3b6de47815e9cf8e306534e7c52b0f551297b65f23e3a730c8c65145c25d0220
SHA512	0f8b06a153316b706f8652b1ed0142a7b713e63f6359768ca0ba7bedb461c25a389eb0caf7f61a5bd9db1731efcd0ea9e3dc8be174afc20be8d36146e78bbbfa

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	667c63c3dc1b4cae3b8673677bfdfe44
SHA1	ff0eea3e5de5ae68fa2c9c1b9ff248a5735732cf
SHA256	1e2464fa07e480c99f85d98039d9e85c4fcdbffab9f8e1bd3ce400e45a7bdf89
SHA512	6907d8ac1d0c4c553e29672c75e0398834d22906b64b5e713219e8fddcd1522c7eb69926badfb518b88618d8b919c9190a2adc6496ee55284d0db582cfbafb59

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	ee54f98740dcdf3abd51f20989785b98
SHA1	2c9971a7579472f333158ef8b78249aab54e005e
SHA256	5ee63baa8e9526f0060c2a286d8749c3e7213c24acaff041e79d58425ee1b275
SHA512	f839755590184d20de4be265ae964f944072534cbdf49dcd69c92ce2bf2369ce459a3c21f3b8792b43aae3b2640464ee2e90aa3d8f40133f52bb56c761487449

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	4844a7c3d1cb535e6ca9f53f0c5bba1d
SHA1	9af5feeaeea2273e74a90125fa73f2610eb51e00
SHA256	8c3248ac28b759d5f12e051354e0bfdd5c0ed27f8745521b7198737945f0321a
SHA512	4ef8baaa20e7fd346b63ce2c03a204fc94e93ed6560788be301010049f54e00b674a166aacc947612e78f3d8a885fc52e7b6e69c8ce3d7b5c8ed3eea18304f0c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	ccd2166753eb01f5dca39498da459a5f
SHA1	67fc5cbf41351a3dd33da249111420ce366bda27
SHA256	8adcf66f4aad4f85fe09339d873233539c0eaa6a089b0a446a99788e282cfeba
SHA512	9700e279fc2061a996340b191aaa5e574593930572c3ff9457484cf7ce0678b7a5c110adb981c8ab19150fa244f281f8fb2524acd2208bcad682fb7e62bed70f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	fa53beddb05611a796a5cadce56ee3be
SHA1	22dfbfde17a56b5db73c0f3d5c04db21ae70dbf4
SHA256	dfd10f24c3c9eed4e98bc7cc2c3418d37303c7eadac8b32cf704f8c15cb86ce3
SHA512	47837e99c171f63f322f0a7688f0e07b907b9e1fcb3aedcfbaeeb9d08804d608804b7025bfd99e78d0118edc780666fbe557c29705aeb38cecadda5cb5ed8f06

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	04d2c90ffeb6318d1cda1c0d9b9aa37f
SHA1	102961347aafd52d0c4e422b9d1e231a62f6ae51
SHA256	5c6f2595984490381bef9580bfc755b54fd896cca4b9100708a0dbfd7b062cbf
SHA512	170934db9a39624a428cecffdfc0c4c2823db4ae3f7c511ccfbb1378f79c5f2377fd525f51782309a6820585e7220464e55f6db096a7422e5e4fd85a8405bbd0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	cb532a7df0ae52f877047b69484bbc06
SHA1	fa6fa7415162f9f5d37b7b34543a325fbffa3658
SHA256	1eec5c73f6bce89c7fdbae394a0a434f44325aada91c885c21e2833e444da695
SHA512	4c0ffb942a9dad3547ba1013d9a020a2cdd91201324396576e86135500d9a253939cdd9fa4a00caf77e489c4482217f4ba24b30c641df6dabf9e7ec0480020c4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	4fde73f90d52b96438e18baff29f4b5d
SHA1	42488ec9d240ec2eb2270b1c0856a4b6ab479923
SHA256	7b05f3c2b9597e2f2443985a869f68b9f153762b9bf1cb476379c9ca60a7be47
SHA512	aad9900fd226e4efef43552ea33a11989571a35cd093e8edbf463c2472aea5e7c23ff3fe7cb74da9b0e72d26272d03fc8e2334ec511656d40fdb3b029214c2cc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	f52cd67195eae75e62293b5d5a0ed0b0
SHA1	91d71ba5d19123d7555be351e25242e5e6f1d7ec
SHA256	6413d4eb8e067081ab437484e5f5fe9998b7b34a81a0e1a15bc77f9c7619c551
SHA512	4b6f8ef4e8340db869b1f631d2bbe54424a929af3a06192a1e5763688bf539e7c28f64fc8190c7502ae40f1e53541d49206e759055746c13e099201dbb3f0b8f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	452575207d8b646f20a61de3b393eb7a
SHA1	f189d37f97e61a47d27fe5520a4fbde61e307016
SHA256	9063ce94db1e9f97bb088c06cfbcff2d364f29539b19ae241ce4955bd45cee73
SHA512	c3851ec60733dbb4c5e76740cc519afede169d7145d7bf83d785c7575f7730893f660778d1306e36a00468ae57e1db33995f73c8918580cfc45b917456112027

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	46bc882233c349a819739238a840f393
SHA1	49183c3fe84ec7cf135efc93c92af4c2e58728d9
SHA256	b5b35b0866a35b842e0f50ba06efdd0fffae0048d452ab903f307a64dfa9d761
SHA512	e716b60ccb3a1e6273970927c189bb768ce9106efc1062cd2ac2c2f441e1b5af8ee2a44343e567f605a9eff7ce7baeff1b8212b4b36f7f12f842ec029186ccab

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	c94512ae1777d477a4acdda10768f724
SHA1	08d1cf5a207ef7c8ac347942f3d354b506eb6268
SHA256	4fb6d04362e8ed2c10a820893c238e1612e88a909d6f9fb9db8fabdaf564e561
SHA512	3afdad50d2f9721b239b51626efefec26bb4631c654b5f711c6f4c8bd3747c5eb9d52ec74770891812f01a962d33379aa95e3b0c04760ff03376692ae3cf7cec

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	901953fc3dcb15cfb2dceb92ac6e947d
SHA1	4d2e50fa2aa3048aa729a353d7af2c6d8b93c7f1
SHA256	452dbe3571aadb24b13b94d4fff2847990683ac425335b6d6f4eb887b9992043
SHA512	4c783bdeae116ec94be90f63dc8f77692d823d76f8ffc8aad21f039411d3f95ecd25ff82db232212ab3039b5e5e549b11ef674b9842147612e97a900eefa8ddf

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	a27a86dc9bc2f5d3932c043106cf72f1
SHA1	0a65e24fdff8af047d2c5fda9bac9bf616ecc080
SHA256	93513484dedae75f2ba7d0c9cef70c95d7bdb4d122168a7489ee280b4c92b946
SHA512	3e1443058b12a90c75bff7b358ccc783d2f85b0b00e2a2c26ef59ab6314b5f5dae6f3996c9247c8ab5413633be5f5426c3886f9f5dda9bd1d4c1ce423ae9c435

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	d453beb4f1a5775047fed60396fc136b
SHA1	5027cb778bfd87f62f11a3723ef7790961d6aefe
SHA256	b73186097215f6edfbccd41e40a1705b29a0d5de10e83e11859877e37d0afec7
SHA512	9fb2218bd6f2f764755e6ebf2cd8b3abb50c91e86cec93839566cac675e8d8f5ef9b2a3cfc1ef92ca2373e2a7c3dcf83f9632b514076cafd03d2ad1b980898d8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	b2025ea7c370df1bb6c497a4830baa31
SHA1	d7e317146b929b712b871f5b0ba71f29e1528ac0
SHA256	99b9f257e9b7d6898a52bc1337a827ae2bc18f1ab4f62c18e6053c0877d75f2d
SHA512	3960c6035ceac0677ef9cc4e44e6ef1a7f05633fa5d81d31a12f594669419d80a1aebbd4eb370c78599e5e45be219ca8d529f7fc62da1da30914205f7cd335a6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	fdb72088a4c73a977e011086cc9552ea
SHA1	5f14c51921e04c30e17e4dc4281c6481f6c5fcb4
SHA256	3a642dea75b766b7af07538f7167d5508d95d9e0565eeb8b5bf09eee86776e22
SHA512	fcc410fef3fef099e3e0055d339ba55cbf32b4e7589854a7db6203862d5677c2ae2f302e3c793a3fc90d2dd789c554dec489c7b079e2dcbbe4aadf32285b77c5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	7392debed5750ea904e628f0161b8f35
SHA1	73ac2b3ec0accebd995bd44c089cf6ab68dab413
SHA256	b7513b007bb9e7b9dff7d59e0702d59c4b5e6f80b12fed4cbaf492673005ff9b
SHA512	20caad39e8199a33d8ba92dd133b81d832bbba6a87472953b0849a215c8e90d4f6ac5d49ad05c515339b13738fee0ac5cb1e1641722f62ecceaab49e52b615d4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	643e43eb6d51986fcada6c63f7e57cb8
SHA1	28b2b361a7e38bb25ce8b5cea93905572ddfec74
SHA256	8fb2d08abb5e4b6bc42920ddbcf8b77f090a0007782b6f5f83e9f6716e6ec271
SHA512	44477a196c138d805b2d6ef05189eedc569b35205eba49c7cfc942989631a3452de7476dd7cc4c27354ea72f61cde660e7b6c21a208086608eeaa50bdb999e5f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	9a78fa7608aeec4fcefacdac9b3a7d83
SHA1	92018d4510f0849dda9db0d8e1b34b152c484cd8
SHA256	980ec7ff205d0e496d00120ae66a289540749df371eb961cde7245adbcdabfa9
SHA512	8b9c3074c9f1666ca676261c82c6f9f2f13d6d309dfa9ebfe9b9fda971d5b97a0e037626b2239dbb230a03934f73e3e9887deceb10384942c90443f9f774ca64

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	f7db6c729ca6bf1ed9cef3f3a4cf6911
SHA1	a21af21c6ebec0308d84b4a02d0fb10debed1c7d
SHA256	ad8b1910fad7e8fe9c5a59f7e6d63434cd5ffad82c73fb30f8f46e7a9d96b67e
SHA512	17f30c4d18b82020ceca46727684a751c8b0762546100d8458df3094906854dbec9520b6c5de639c707ef9f31ae31472c22ea3e4ad1310ed693b0199c315b085

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	5dc2a3468123a6b466ce52c3b0d741c3
SHA1	38edb241f3a77140f95690ecf0f59bcf9c7b9c54
SHA256	519e39d94d847a5814c5d5be440f76cc3a21db366dbd6dd85b8f8604a665597c
SHA512	8ff11a0bb05cf3fbff0e9f78987b5a36b0d18828742f0238a9deffa1138e7b1f2d286dd701ed64cdae65f797ff337df51a22bf1f3d664af32b72a41cea67bb2e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	a82c0e09b2ef1e2836d4c4c0c04986ae
SHA1	bd689b0a584c14e2b19f7d8bd705073f4dc50612
SHA256	bd0508d5b1c2e1562261ff212b027b493f655022e903cc3222d43ac2da616359
SHA512	d0dac853a6ad28fe2df3c7f8e2deec4e36e1a98648e96306d5a79117b669600331566115c4353eec4c87b5824b452a82e83e6d0ca062a3dcaf96695bfd65caa8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	6a6444d767a2ad514f4b57801480429b
SHA1	5798647105ff5dbd2925fc91889aaee40cc3c886
SHA256	373f3d7f3dc0d93107c793cc5c2f298f1386ef14e8a7882a405fa3ba53250867
SHA512	7dac0fb5d7c78c761598cdeba1c6cdd01f8ccf69bceae36d342e5595cfb34356e6746d16d98c95c2fd44112b4a428c59cf1eb14e5d284b634e1e53d07a6f3036

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	9e82db3edf6f1f90516ca8354c45cf2c
SHA1	bf7e0274522a768d71bfc02c792795364128a962
SHA256	6e77058a81a0618a8ce8024698b4a9585587c6e11c37a8968c5031bd04c31e0f
SHA512	2f33c1cb6e45af2666f51bf206d0250fe03ff33e046af0ea904582749a468e38fece7bcad7d8bda8229b0f367cb02ddea5e30cd7c65ab13ffa9c86be45f96548

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	88231f73084e6d6f0b95e24d986cb301
SHA1	f5a605a7cd696b8f9afe94f226b56a11b4335b1e
SHA256	988de3759c53f6302c3cc402a22f6fde8d5c7cadae6bfb9be2d4b9d8ab6221a2
SHA512	2ab950f70f16ac23d9fc3e363919ed9dd6b46575a9320af86bf6c7167e6f5b44789b67432021ff4082988cd28c92b8f2c07011f8b6a0caf818509b49cef6ca1f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	c355985c2b50842ad11eab89c8317638
SHA1	0c0d1562c17349d1a90bb0aefe603aeb363b0bb9
SHA256	86d1de49e5349803e1da794e53c3e0b33b2c584c1b0eee0e1bcd5f28f4719036
SHA512	ef2059d7d66b58e09ccbe1e2a746c91f5368a3d9c7bf107faf711383562a069df0b2221824018d5314274ed0e899c565945bd7d70e028261ebf911aa9dc418a6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	666ab9696b938a3ed9e2c89224dcbc0e
SHA1	0bac26d9912d9979f6c33ffd92c046af439a90c2
SHA256	5707e01896d34b5ea8b88dab267bb145600621592a54091413941a0c4f3f659c
SHA512	e7f3d103e5db33974325e7391e18b528191c0d49a0e4bc85528623446d1f53d786d648bde26a661fd38726a5a032b57a4f53f2c62c6e05bc5431f7c91fb2df57

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	12eb13a0475e07377c465d3ebeb35dd2
SHA1	8f220acc35e8e8fff2961aaca4269b136e2e87bc
SHA256	e33d231511b5f4273b068936fbd7c688452547ae51cdecedd613645ded31f9c7
SHA512	d7a18ab9c80e763d2792f763f0b3c5db1fd2d312cd4089809e07d7299fe5a78a3d7a91343f579b364cd4971144043f5496e728c33264fb23a274aa4a2e1b6369

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	d768a77d610827d531d3457f9b793a3d
SHA1	cec58594220cb585c6dc70ddf681e136980b1d64
SHA256	39267e464adb30dbe53b00ac2ac800418a658c1c9801d9f7345f1c1cb2f4620b
SHA512	b2797e8378e3b64748f57bd7c1e5e95285e7d91b9d3500fe6d33c87411e5bb550b9bee35f71b2b526161d2b9e804b2cb419e1e84eec8ceee1e930c03c513dd95

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	2c35d3019bea81cd760f74f25b6c74ee
SHA1	31557abbca09ef726855acdc87eeee6bbe3c94bd
SHA256	6b37d5ff8d8f9280e8eade24c9450e25e931a24f9455123b9ea0607315b0c01b
SHA512	5b3e8a384a36785c516c21963aade94f02283d11a8f812e699546ed07c78f1cafdbba1523fe3075ac3abdba4233724202aa3d38a4a636814d6a30d9ffe4ca0a1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	4f02d803dd8ec4fb764249c04946ad27
SHA1	00bd9373395064c6c9c5a123e9f23a316afbe2ac
SHA256	5515f797c02efd600c42042de392815f43426414ca11b3885dc61db9252d56d1
SHA512	b7cc05f05b86845e4ab472a5cb4ad62ae1c6ab0d61c7e38c14f6dc5b40137aab83ff0da658a5af7e0bf38bf075d865f2da81565dae4a9ecfed959c791a2095ff

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	6c6c24e78f2dfd2ed79eae17e4556513
SHA1	ba5fcbaecabd84b78a22ddcb593946ebc455f262
SHA256	b6d9ba16aca2fde939ff8bfe300da07ff854f7c8b695756fb3c2466bf3b31d95
SHA512	e21ba932af697b2f0d479297c4494c686a2a5b570e6f09a5ec23b7bb6b0e4079e2a9d8db7402d69713d40aad630b4135b5ca75a59b5b3b7d8688ca309f773c64

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	95eaf3492e8fd480c8f74fb5f09a3341
SHA1	c8016724383f731a7e85dd93edff295cb3260512
SHA256	7a9e4cd73f6cb16f0dce87d4770b39334182aff10924d08e486a74efb9367088
SHA512	09b912287287ed7d4f9c56830dbfa78687709652a4cb3fb22d0bd1513ac212d2962d0b6127662a38682005b9559e3530b992896bc8ff56c0f33b8ca13316f7cc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	1370760e8c23cc83f3c96af8d0330c64
SHA1	de353ddbf514d6e67e5cf31e548473c2307e3a47
SHA256	f7899baa044fea7e887e1c280e16848f72756633f4e50f597f302842e2a1ab3c
SHA512	d1b7632cfc82f4e27a990a2fce2e6278ab4b37d99b25f78dd50a855fa173acb56c1de6390e966e856cfb9f11488e44593cea2f785b5b8c9508301591b5b70ab3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	e827ce559c8c99d58bedb1b70f3abdce
SHA1	34354eb5e38ce38c84cb33e2e320f4bdb55c723c
SHA256	b9fc3d7857d83942598ca739e209160574299aaf2de903d870e945b16c7e5e8f
SHA512	7d9a08d76a89fbb84e47bfcef7cb8ddaa8f035f9bff471259065eb2597d130eb951b3148aff946b01c1f7264e56808ec56d17949046e483ba1006efdc0158f20

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	96fd29d2741e928c56d5a2a1db0e77d2
SHA1	deaeb8bb85d00184f2968cc2748e2ba94208ba59
SHA256	fe5683a7dd77959e71558d0b7b17e44dbea64a0eecf3a1153492fad61a9225ca
SHA512	089a80c8a00c410a152562b1b087202a77b8fa3c1c26da58f2e5fc81603bbc295db93a13b6d3eb51c6f4c5a167d61768afd569f1c971e773af1d70f89ea4e980

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	6f60ff1e0494dd6f869c2176f3aa5ed9
SHA1	cec6b61fa9976488ec6f7b37fb684c554314e58c
SHA256	aa07692a07d03e9ecad24e38441914d60fa7e88154801892cf87998143c7b453
SHA512	395e77fa97848ab51aaa1a9696b0f72154e006e5a1679cfe3712168c9c092333af2c644bdca17d5046e64840a6a52b31e5620e81953c09fc7423a7f84017ad59

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	72a64b3fb650253138dfe72d09998fd2
SHA1	602a4420e1983239c53e65145fab560510debba6
SHA256	020ba8a136af98867a91a2556b1d450c3a057730932bb73ddf56241c668622fa
SHA512	984d1a31c442df82a3006d96038a35774d9cf7efa2fbfc4fd6901c558e57c932607f161e32a2fab76ff9b7328081d5d3e99ed5ada382dd80ac5e3ff3bf7fd055

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	59c6a0b944022159b08da00fe00e777f
SHA1	898e3901251f0f4fe3223270d435a83be2128333
SHA256	35762db9177447c961f34bded6319c191639e202a1a430d079590d7044401533
SHA512	d84af7127e215ee4cc0a029500a654de339db5f81d654447503e5dc423c66c47f8ae2b7147376e74e2625351a92c15d3658b497440f6636a661cffa56886af73

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	db189ef05addb77139f6401d9d0f6ea0
SHA1	61b665faad9b67b531a885e6d166cd47240a4da4
SHA256	959edf80ec6db908e1c2bb986cc1875350b613c1a841d4254001bb29b6f79568
SHA512	87ffefd13bdee044e49ac1b84e460b18f169bcf0bffc5655fdda6590b899be13b8ada0cae3449a3ae78db770b8f19ea17e6696fa0ffdc703fdd7e13655162228

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\3c4a29c6-573f-4215-8ef8-f01323c40794.tmp

MD5	a2e701dbd620d38b294a5b33078358c0
SHA1	1f0b762ec686a36778b0545a18a68f3a9db6f115
SHA256	0d0c9331e9812cffa3d904dd2cbb42b1eebeda45b09697e32fe60d02687289a5
SHA512	edd1b8752d16b71eee2efaebed002a842b489fc6360daaef9775cb7269be58414805752007bfaa53817c74d6f95b72fad9cd980380abd7979c6491c4e6f32f11

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\8665c1dd-0f61-487f-81ff-48ab8236cf11.tmp

MD5	fc89afb18cdaeac5253128c087bf9ddd
SHA1	9d16ebeeee4a99c9dd546c89b70ecc14b55f9896
SHA256	48a6b4fd9572a4e1ed434ac9448c15cf025f35dcf673d38c5ca0b0d89a662620
SHA512	9f6981c31ab0ab559a47fe562d931c26ae76a8cf395a6578a3e1bb31707d8bbe70a59605c260750d58a7d0c8cc8c00f349eb581abfc2409f8d5a31f0e1167e4f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	aedc2ed5b721e6e56c1f2eb52e1b159d
SHA1	a74dc0f38c3568c2e0795cdf8a6f62084f44e981
SHA256	9543f22cbab89f49d08fdd907c7bde6ea8d7dc751680fd85b177335fc4a69b0d
SHA512	090b726b9d6ba82b53bf87ffa0b9f9b60d0f02f86e70e693262717b2753cb01c4050ab70ff6c119c71e48ea17f4e1812370a345de551eeb54603174579b1839a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	e39a654662a03a9e8487f76d0d33e932
SHA1	cdb28fd3af9d5612e06276860cf9ba5adf7883b2
SHA256	9f9a33dd0799d68dec5e183a21f2db2cafe8238296135216eb7bf7584b10bbf6
SHA512	a04d0fd30ffec089d521ce8836362c720e01884057682880044566d1c7d30cde6c28a4254038bee566ef7574b6c3dc5a2fa02ee3611fca3d1f17ac56e51d51a2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	eb287760d8663faa228ea0dd448bfbe4
SHA1	85d8f8dee2589ce4006033aac3f01d86f488a97b
SHA256	4a1bb47e88377b976b41b9a73d2cce30d1233d0a3c813ba72efe7deda12a6378
SHA512	7721d889af8a8b192a03421f7f188ea21b8278a4a45cbe03b42729dcb761e9af4ef0acecd3cb2b0f33d13cda16e05412377cd2b208410467e2421359bce7c2d0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	c71a13c41baf7130044c65d27aeabf68
SHA1	5c32e239d91365f1a59474046f2ae13e2d3363f2
SHA256	a8a39d22b9c9b660927a6b96c757a087a1270fb739601a192d12d4cb601dc17b
SHA512	ada9d910d6f9f8a18a90ddaefef437737f9e15c011a6b6436f677890fec80b2883697da854166e8395d6bfea4d574e712b9ba298c5dd058c796670bff695c408

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	008a6906e54000e63da924dcc9badaf4
SHA1	3a7d24eacad43dc706afc14d22a2768aef802c25
SHA256	4633addf7ec431960847f93ff4a8c5ec935876dd5234363956690ff19e8e6c5b
SHA512	7c97b60801000698ff8cb66bb834f86cd535da8bc752b44e613ada576cd8c842ac20d71342471cbf08eac8123f7c3a8ec4933be2279501f37953861cff8918d3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	34ff71e1dafe9f36552e1e5463a7d0f1
SHA1	784b10e4beb6a10ddec35d887719d540d60d4733
SHA256	ba2727eb8eac07cf1a520b5878defecde29ff36e11a9cc92b2a1ddef14799d1e
SHA512	ad3a2abb93e2c718916f8564c4c87e9b8e6fddf4346b18b03f4a73bc742a56391c659edc7c8e98e7c2b7b53b4dd647b8237cc8d73e3b32c69bc4526a09e87094

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	b080809aff3b73cef892e0e5f7b86b37
SHA1	32d2eb15a17412a0e27642e2f9e4ef9cfc2d3f4e
SHA256	6cb2f92d2361423affed83d17ea4bea48175176dc1c1d1761a80815c11c1a9e4
SHA512	3719d62ee7a8c1fd9837784ef664b34d2f571cf972f7e9d233013a4017f9a14ea57576fb975e962d7047340619530fbdd1ed7a3472309e1e481c2ba9fff12735

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	73fdb2d1362f0f3bc94a7e9ac0700de6
SHA1	df89c13d686807d988cd4d8a4ddf269f206e7d82
SHA256	c5d82a240538145e7377975d3d4e2ea53fc840f267e3320f65be4b62923d4951
SHA512	47f2dcbe43cd04cb5e663a29ae27b070fa3edd264dbe58d430e872276ac2e671fbc0df3edd8e9cc674d0e4ec72692a558075337a546d61594e3f11a026794e62

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	939d84459eda634e515e880c2893bf9c
SHA1	307189b3a264606029b0a224a59b3194557105c6
SHA256	0fae7f8e40b357850b84e0e42c1f057fd6fcaa07a3b4a3a8cc0dc61d35d23612
SHA512	31cb14c129ff25261f68b48257bec40cfb3377e9fe58b2647555452dfc9b8d764106db9730b61d38d3abb0990135340bae263949f2a40f4e69d7da7feebfe514

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	617ef2cf669327c227d17e78b45fbba9
SHA1	beecce02fc5c419f88f0dbfb17749fa2e207a50e
SHA256	ce7f33c1537a92ecd38915c6647c9a7814c924432edc9a88ade28e59ed6ecd36
SHA512	900f251b93f062817b88df8bf1e59cf97a6794877653518fb7be756aa5480e4c7bb817af453cb28836230984757c2d5a997cf4991ce455138245e4529151398f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	f9a334febfabb2f3d083dff1ac5b9bc0
SHA1	8386eeb6379e089cda4e31ca48077579851dcf4f
SHA256	15b01e368c46609479326b3cd2da35532b1733f4fc31f55a9cfebd3b46385af9
SHA512	959ff70d09a893c6deb45ec22db235ae624ddad2667c1531fa738b66f978d9a861a2a3d0a936243a7e7ce21600e5836161ea8198f1ea792fae0d383429d60432

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	32034a9b752c9f25684e7d8399729208
SHA1	13c1d68503551622d122cffbe8bfcc3660936632
SHA256	0381ab87f2009a647d57a72e145d3cae5504a4202e4a441f75a0a27b39047941
SHA512	47b4a525f05caad2886b65f5b5d118b499c6cc58bdd914e0a69e2aa834b5df59d9d0b3b413b250ee81c83d9944fc227634491dd0fb64ce7abf6d312cab7993e2

Malware Analysis Report

2024-09-11 04:02

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

Threat Level: Likely malicious

Malicious Activity Summary

MITRE ATT&CK Matrix V13

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Sample ID	240620-ppzaaa1gqr
Target	Chikara.exe
SHA256	6c22a4cd16f13a366bb2dd2c67686f81c9fea8ad064b21b4e24829e942c6563d
Tags	discovery exploit