Description	Indicator	Process	Target
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\build.exe	N/A

Reads user/profile data of web browsers

spyware stealer

Accesses Microsoft Outlook profiles

collection

Description	Indicator	Process	Target
Key opened	\REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
Key opened	\REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
Key opened	\REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A

Legitimate hosting services abused for malware hosting/C2

Description	Indicator	Process	Target
N/A	discord.com	N/A	N/A
N/A	discord.com	N/A	N/A
N/A	discord.com	N/A	N/A
N/A	discord.com	N/A	N/A
N/A	discord.com	N/A	N/A

Looks up external IP address via web service

Description	Indicator	Process	Target
N/A	icanhazip.com	N/A	N/A

Event Triggered Execution: Netsh Helper DLL

persistence privilege_escalation

Description	Indicator	Process	Target
Key opened	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh	C:\Windows\SysWOW64\netsh.exe	N/A
Key queried	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh	C:\Windows\SysWOW64\netsh.exe	N/A
Key value enumerated	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh	C:\Windows\SysWOW64\netsh.exe	N/A
Key opened	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh	C:\Windows\SysWOW64\netsh.exe	N/A
Key queried	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh	C:\Windows\SysWOW64\netsh.exe	N/A
Key value enumerated	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh	C:\Windows\SysWOW64\netsh.exe	N/A

Checks processor information in registry

Description	Indicator	Process	Target
Key opened	\REGISTRY\MACHINE\HARDWARE\Description\System\CentralProcessor\0	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A

Delays execution with timeout.exe

evasion

Description	Indicator	Process	Target
N/A	N/A	C:\Windows\SysWOW64\timeout.exe	N/A
N/A	N/A	C:\Windows\SysWOW64\timeout.exe	N/A
N/A	N/A	C:\Windows\SysWOW64\timeout.exe	N/A

Enumerates system info in registry

Description	Indicator	Process	Target
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A

Kills process with taskkill

evasion

Description	Indicator	Process	Target
N/A	N/A	C:\Windows\SysWOW64\taskkill.exe	N/A
N/A	N/A	C:\Windows\SysWOW64\taskkill.exe	N/A
N/A	N/A	C:\Windows\SysWOW64\taskkill.exe	N/A

Modifies data under HKEY_USERS

Description	Indicator	Process	Target
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133644717045416733"	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A

Modifies registry class

Description	Indicator	Process	Target
Key created	\REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000_Classes\Local Settings	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A

Opens file in notepad (likely ransom note)

ransomware

Description	Indicator	Process	Target
N/A	N/A	C:\Windows\system32\NOTEPAD.EXE	N/A

Suspicious behavior: EnumeratesProcesses

Description	Indicator	Process	Target
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A

Suspicious behavior: GetForegroundWindowSpam

Description	Indicator	Process	Target
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description	Indicator	Process	Target
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A

Suspicious use of AdjustPrivilegeToken

Description	Indicator	Process	Target
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A

Suspicious use of FindShellTrayWindow

Description	Indicator	Process	Target
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A

Suspicious use of SendNotifyMessage

Description	Indicator	Process	Target
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A

Suspicious use of SetWindowsHookEx

Description	Indicator	Process	Target
N/A	N/A	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A

Suspicious use of WriteProcessMemory

outlook_office_path

Description	Indicator	Process	Target
Key opened	\REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A

outlook_win_path

Description	Indicator	Process	Target
Key opened	\REGISTRY\USER\S-1-5-21-1181767204-2009306918-3718769404-1000\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676	C:\Users\Admin\Desktop\New folder\Stub\build.exe	N/A

Processes

C:\Windows\system32\NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\55club.in_12.txt

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=3440,i,11266875042087428226,16669718873272757238,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffea056ab58,0x7ffea056ab68,0x7ffea056ab78

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1736 --field-trial-handle=2012,i,14025559617391714840,9561628534665000558,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1976 --field-trial-handle=2012,i,14025559617391714840,9561628534665000558,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2192 --field-trial-handle=2012,i,14025559617391714840,9561628534665000558,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2988 --field-trial-handle=2012,i,14025559617391714840,9561628534665000558,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2996 --field-trial-handle=2012,i,14025559617391714840,9561628534665000558,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4360 --field-trial-handle=2012,i,14025559617391714840,9561628534665000558,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4528 --field-trial-handle=2012,i,14025559617391714840,9561628534665000558,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4648 --field-trial-handle=2012,i,14025559617391714840,9561628534665000558,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4792 --field-trial-handle=2012,i,14025559617391714840,9561628534665000558,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4840 --field-trial-handle=2012,i,14025559617391714840,9561628534665000558,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4204 --field-trial-handle=2012,i,14025559617391714840,9561628534665000558,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5076 --field-trial-handle=2012,i,14025559617391714840,9561628534665000558,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5104 --field-trial-handle=2012,i,14025559617391714840,9561628534665000558,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=5020 --field-trial-handle=2012,i,14025559617391714840,9561628534665000558,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=3328 --field-trial-handle=2012,i,14025559617391714840,9561628534665000558,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3472 --field-trial-handle=2012,i,14025559617391714840,9561628534665000558,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=3496 --field-trial-handle=2012,i,14025559617391714840,9561628534665000558,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=4924 --field-trial-handle=2012,i,14025559617391714840,9561628534665000558,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3448 --field-trial-handle=2012,i,14025559617391714840,9561628534665000558,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5428 --field-trial-handle=2012,i,14025559617391714840,9561628534665000558,131072 /prefetch:8

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Users\Admin\Desktop\New folder\Builder.exe

"C:\Users\Admin\Desktop\New folder\Builder.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffea056ab58,0x7ffea056ab68,0x7ffea056ab78

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1720 --field-trial-handle=1924,i,4205781222661815789,6866157209145604239,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=1924,i,4205781222661815789,6866157209145604239,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2224 --field-trial-handle=1924,i,4205781222661815789,6866157209145604239,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3036 --field-trial-handle=1924,i,4205781222661815789,6866157209145604239,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3044 --field-trial-handle=1924,i,4205781222661815789,6866157209145604239,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4268 --field-trial-handle=1924,i,4205781222661815789,6866157209145604239,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4192 --field-trial-handle=1924,i,4205781222661815789,6866157209145604239,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4620 --field-trial-handle=1924,i,4205781222661815789,6866157209145604239,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4828 --field-trial-handle=1924,i,4205781222661815789,6866157209145604239,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4880 --field-trial-handle=1924,i,4205781222661815789,6866157209145604239,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4864 --field-trial-handle=1924,i,4205781222661815789,6866157209145604239,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=2316 --field-trial-handle=1924,i,4205781222661815789,6866157209145604239,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=2440 --field-trial-handle=1924,i,4205781222661815789,6866157209145604239,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=2844 --field-trial-handle=1924,i,4205781222661815789,6866157209145604239,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=3492 --field-trial-handle=1924,i,4205781222661815789,6866157209145604239,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=4848 --field-trial-handle=1924,i,4205781222661815789,6866157209145604239,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=5072 --field-trial-handle=1924,i,4205781222661815789,6866157209145604239,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=5000 --field-trial-handle=1924,i,4205781222661815789,6866157209145604239,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --mojo-platform-channel-handle=2292 --field-trial-handle=1924,i,4205781222661815789,6866157209145604239,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1912 --field-trial-handle=1924,i,4205781222661815789,6866157209145604239,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=5240 --field-trial-handle=1924,i,4205781222661815789,6866157209145604239,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=5144 --field-trial-handle=1924,i,4205781222661815789,6866157209145604239,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=2436 --field-trial-handle=1924,i,4205781222661815789,6866157209145604239,131072 /prefetch:8

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x48c 0x494

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=2160,i,11266875042087428226,16669718873272757238,262144 --variations-seed-version --mojo-platform-channel-handle=3868 /prefetch:8

C:\Users\Admin\Desktop\New folder\Builder.exe

"C:\Users\Admin\Desktop\New folder\Builder.exe"

C:\Users\Admin\Desktop\New folder\Stub\build.exe

"C:\Users\Admin\Desktop\New folder\Stub\build.exe"

C:\Windows\SysWOW64\cmd.exe

"cmd.exe" /C chcp 65001 && netsh wlan show profile | findstr All

C:\Windows\SysWOW64\chcp.com

chcp 65001

C:\Windows\SysWOW64\netsh.exe

netsh wlan show profile

C:\Windows\SysWOW64\findstr.exe

findstr All

C:\Users\Admin\Desktop\New folder\Stub\stub.exe

"C:\Users\Admin\Desktop\New folder\Stub\stub.exe"

C:\Windows\system32\msiexec.exe

C:\Windows\system32\msiexec.exe /V

C:\Windows\SysWOW64\cmd.exe

"cmd.exe" /C chcp 65001 && netsh wlan show networks mode=bssid

C:\Windows\SysWOW64\chcp.com

chcp 65001

C:\Windows\SysWOW64\netsh.exe

netsh wlan show networks mode=bssid

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /C C:\Users\Admin\AppData\Local\Temp\tmp9824.tmp.bat

C:\Windows\SysWOW64\chcp.com

chcp 65001

C:\Windows\SysWOW64\taskkill.exe

TaskKill /F /IM 3152

C:\Windows\SysWOW64\timeout.exe

Timeout /T 2 /Nobreak

C:\Users\Admin\Desktop\New folder\Stub\build.exe

"C:\Users\Admin\Desktop\New folder\Stub\build.exe"

C:\Users\Admin\Desktop\New folder\Stub\stub.exe

"C:\Users\Admin\Desktop\New folder\Stub\stub.exe"

C:\Users\Admin\Desktop\New folder\Stub\build.exe

"C:\Users\Admin\Desktop\New folder\Stub\build.exe"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /C C:\Users\Admin\AppData\Local\Temp\tmp872.tmp.bat

C:\Windows\SysWOW64\chcp.com

chcp 65001

C:\Windows\SysWOW64\taskkill.exe

TaskKill /F /IM 2060

C:\Windows\SysWOW64\timeout.exe

Timeout /T 2 /Nobreak

C:\Users\Admin\Desktop\New folder\Stub\stub.exe

"C:\Users\Admin\Desktop\New folder\Stub\stub.exe"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /C C:\Users\Admin\AppData\Local\Temp\tmpD6FD.tmp.bat

C:\Windows\SysWOW64\chcp.com

chcp 65001

C:\Windows\SysWOW64\taskkill.exe

TaskKill /F /IM 5540

C:\Windows\SysWOW64\timeout.exe

Timeout /T 2 /Nobreak

C:\Users\Admin\Desktop\build.exe

"C:\Users\Admin\Desktop\build.exe"

C:\Users\Admin\Desktop\build.exe

"C:\Users\Admin\Desktop\build.exe"

C:\Users\Admin\Desktop\build.exe

"C:\Users\Admin\Desktop\build.exe"

C:\Users\Admin\Desktop\build.exe

"C:\Users\Admin\Desktop\build.exe"

C:\Users\Admin\Desktop\build.exe

"C:\Users\Admin\Desktop\build.exe"

C:\Users\Admin\Desktop\build.exe

"C:\Users\Admin\Desktop\build.exe"

C:\Users\Admin\Desktop\build.exe

"C:\Users\Admin\Desktop\build.exe"

C:\Users\Admin\Desktop\build.exe

"C:\Users\Admin\Desktop\build.exe"

C:\Users\Admin\Desktop\build.exe

"C:\Users\Admin\Desktop\build.exe"

C:\Users\Admin\Desktop\build.exe

"C:\Users\Admin\Desktop\build.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffea056ab58,0x7ffea056ab68,0x7ffea056ab78

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1764 --field-trial-handle=1920,i,18226807014599227503,4861850945184993838,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=1920,i,18226807014599227503,4861850945184993838,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2236 --field-trial-handle=1920,i,18226807014599227503,4861850945184993838,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3080 --field-trial-handle=1920,i,18226807014599227503,4861850945184993838,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3088 --field-trial-handle=1920,i,18226807014599227503,4861850945184993838,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4384 --field-trial-handle=1920,i,18226807014599227503,4861850945184993838,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4484 --field-trial-handle=1920,i,18226807014599227503,4861850945184993838,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4624 --field-trial-handle=1920,i,18226807014599227503,4861850945184993838,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4872 --field-trial-handle=1920,i,18226807014599227503,4861850945184993838,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4956 --field-trial-handle=1920,i,18226807014599227503,4861850945184993838,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4948 --field-trial-handle=1920,i,18226807014599227503,4861850945184993838,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4884 --field-trial-handle=1920,i,18226807014599227503,4861850945184993838,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5100 --field-trial-handle=1920,i,18226807014599227503,4861850945184993838,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5008 --field-trial-handle=1920,i,18226807014599227503,4861850945184993838,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4888 --field-trial-handle=1920,i,18226807014599227503,4861850945184993838,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=5204 --field-trial-handle=1920,i,18226807014599227503,4861850945184993838,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=5412 --field-trial-handle=1920,i,18226807014599227503,4861850945184993838,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=3372 --field-trial-handle=1920,i,18226807014599227503,4861850945184993838,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4932 --field-trial-handle=1920,i,18226807014599227503,4861850945184993838,131072 /prefetch:2

C:\Users\Admin\Desktop\build.exe

"C:\Users\Admin\Desktop\build.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4916 --field-trial-handle=1920,i,18226807014599227503,4861850945184993838,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=2692 --field-trial-handle=1920,i,18226807014599227503,4861850945184993838,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5196 --field-trial-handle=1920,i,18226807014599227503,4861850945184993838,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5292 --field-trial-handle=1920,i,18226807014599227503,4861850945184993838,131072 /prefetch:8

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x48c 0x494

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5828 --field-trial-handle=1920,i,18226807014599227503,4861850945184993838,131072 /prefetch:8

C:\Users\Admin\Desktop\build.exe

"C:\Users\Admin\Desktop\build.exe"

Network

Country	Destination	Domain	Proto
US	8.8.8.8:53	8.8.8.8.in-addr.arpa	udp
US	8.8.8.8:53	154.239.44.20.in-addr.arpa	udp
US	8.8.8.8:53	144.107.17.2.in-addr.arpa	udp
US	8.8.8.8:53	73.159.190.20.in-addr.arpa	udp
US	8.8.8.8:53	www.google.com	udp
US	8.8.8.8:53	3.200.250.142.in-addr.arpa	udp
GB	142.250.187.196:443	www.google.com	tcp
GB	142.250.187.196:443	www.google.com	tcp
GB	142.250.187.196:443	www.google.com	tcp
GB	142.250.187.196:443	www.google.com	tcp
US	8.8.8.8:53	13.86.106.20.in-addr.arpa	udp
US	8.8.8.8:53	196.187.250.142.in-addr.arpa	udp
US	8.8.8.8:53	74.169.217.172.in-addr.arpa	udp
US	8.8.8.8:53	apis.google.com	udp
GB	142.250.200.14:443	apis.google.com	tcp
US	8.8.8.8:53	clients2.google.com	udp
GB	142.250.187.206:443	clients2.google.com	tcp
N/A	224.0.0.251:5353		udp
US	8.8.8.8:53	195.212.58.216.in-addr.arpa	udp
US	8.8.8.8:53	14.200.250.142.in-addr.arpa	udp
US	8.8.8.8:53	play.google.com	udp
GB	172.217.169.46:443	play.google.com	tcp
US	8.8.8.8:53	46.169.217.172.in-addr.arpa	udp
US	8.8.8.8:53	217.106.137.52.in-addr.arpa	udp
GB	142.250.187.196:443	www.google.com	udp
GB	172.217.169.46:443	play.google.com	udp
US	8.8.8.8:53	157.123.68.40.in-addr.arpa	udp
US	8.8.8.8:53	56.126.166.20.in-addr.arpa	udp
US	8.8.8.8:53	99.201.58.216.in-addr.arpa	udp
US	8.8.8.8:53	194.187.250.142.in-addr.arpa	udp
US	8.8.8.8:53	100.58.20.217.in-addr.arpa	udp
US	8.8.8.8:53	t.ly	udp
US	104.20.55.117:443	t.ly	tcp
US	104.20.55.117:443	t.ly	tcp
US	104.20.55.117:443	t.ly	udp
US	8.8.8.8:53	static.cloudflareinsights.com	udp
US	8.8.8.8:53	cdnjs.cloudflare.com	udp
US	104.16.80.73:443	static.cloudflareinsights.com	tcp
US	104.17.24.14:443	cdnjs.cloudflare.com	tcp
US	8.8.8.8:53	r.wdfl.co	udp
GB	18.244.179.69:443	r.wdfl.co	tcp
US	8.8.8.8:53	content-autofill.googleapis.com	udp
US	104.20.55.117:443	t.ly	tcp
US	8.8.8.8:53	117.55.20.104.in-addr.arpa	udp
US	8.8.8.8:53	73.80.16.104.in-addr.arpa	udp
US	8.8.8.8:53	14.24.17.104.in-addr.arpa	udp
US	8.8.8.8:53	104.201.58.216.in-addr.arpa	udp
US	8.8.8.8:53	69.179.244.18.in-addr.arpa	udp
GB	142.250.178.10:443	content-autofill.googleapis.com	tcp
US	8.8.8.8:53	googleads.g.doubleclick.net	udp
GB	142.250.200.2:443	googleads.g.doubleclick.net	tcp
US	8.8.8.8:53	stats.g.doubleclick.net	udp
GB	64.233.167.157:443	stats.g.doubleclick.net	tcp
US	8.8.8.8:53	10.178.250.142.in-addr.arpa	udp
US	8.8.8.8:53	2.200.250.142.in-addr.arpa	udp
US	8.8.8.8:53	226.187.250.142.in-addr.arpa	udp
US	8.8.8.8:53	157.167.233.64.in-addr.arpa	udp
US	8.8.8.8:53	id.google.com	udp
GB	142.250.187.227:443	id.google.com	tcp
US	8.8.8.8:53	ssl.gstatic.com	udp
GB	172.217.169.3:443	ssl.gstatic.com	tcp
US	8.8.8.8:53	11.227.111.52.in-addr.arpa	udp
US	8.8.8.8:53	227.187.250.142.in-addr.arpa	udp
US	8.8.8.8:53	3.169.217.172.in-addr.arpa	udp
US	8.8.8.8:53	203.107.17.2.in-addr.arpa	udp
US	8.8.8.8:53	github.com	udp
GB	20.26.156.215:443	github.com	tcp
US	8.8.8.8:53	objects.githubusercontent.com	udp
US	185.199.109.133:443	objects.githubusercontent.com	tcp
US	8.8.8.8:53	215.156.26.20.in-addr.arpa	udp
US	8.8.8.8:53	133.109.199.185.in-addr.arpa	udp
US	8.8.8.8:53	ogs.google.com	udp
GB	142.250.187.238:443	ogs.google.com	tcp
GB	172.217.169.3:443	ssl.gstatic.com	udp
US	8.8.8.8:53	238.187.250.142.in-addr.arpa	udp
US	8.8.8.8:53	www.google.com	udp
GB	142.250.187.196:443	www.google.com	udp
GB	142.250.187.196:443	www.google.com	tcp
GB	172.217.169.46:443	play.google.com	udp
GB	172.217.169.46:443	play.google.com	tcp
GB	142.250.187.206:443	clients2.google.com	udp
US	104.20.55.117:443	t.ly	tcp
US	8.8.8.8:53	challenges.cloudflare.com	udp
US	104.17.2.184:443	challenges.cloudflare.com	tcp
US	104.17.2.184:443	challenges.cloudflare.com	udp
US	8.8.8.8:53	184.2.17.104.in-addr.arpa	udp
US	8.8.8.8:53	r.wdfl.co	udp
GB	18.244.179.28:443	r.wdfl.co	tcp
GB	142.250.200.2:443	googleads.g.doubleclick.net	udp
US	8.8.8.8:53	28.179.244.18.in-addr.arpa	udp
US	8.8.8.8:53	www.google.com	udp
GB	142.250.187.196:443	www.google.com	udp
GB	64.233.167.157:443	stats.g.doubleclick.net	udp
US	8.8.8.8:53	blog.t.ly	udp
US	104.20.55.117:443	blog.t.ly	udp
US	8.8.8.8:53	194.212.58.216.in-addr.arpa	udp
GB	142.250.200.2:443	googleads.g.doubleclick.net	udp
GB	142.250.178.10:443	content-autofill.googleapis.com	udp
US	8.8.8.8:53	tpc.googlesyndication.com	udp
GB	172.217.16.225:443	tpc.googlesyndication.com	tcp
GB	172.217.16.225:443	tpc.googlesyndication.com	udp
US	8.8.8.8:53	px.ads.linkedin.com	udp
US	8.8.8.8:53	ads.travelaudience.com	udp
US	8.8.8.8:53	x.bidswitch.net	udp
US	8.8.8.8:53	pr-bh.ybp.yahoo.com	udp
US	13.107.42.14:443	px.ads.linkedin.com	tcp
US	35.190.0.66:443	ads.travelaudience.com	tcp
NL	35.214.149.91:443	x.bidswitch.net	tcp
IE	18.200.219.243:443	pr-bh.ybp.yahoo.com	tcp
US	8.8.8.8:53	d5p.de17a.com	udp
US	8.8.8.8:53	onetag-sys.com	udp
US	8.8.8.8:53	cm.g.doubleclick.net	udp
US	8.8.8.8:53	dsp.adkernel.com	udp
GB	216.58.212.226:443	cm.g.doubleclick.net	tcp
GB	216.58.212.226:443	cm.g.doubleclick.net	tcp
US	174.137.133.49:443	dsp.adkernel.com	tcp
DE	51.75.86.98:443	onetag-sys.com	tcp
SE	213.155.156.169:443	d5p.de17a.com	tcp
US	8.8.8.8:53	fundingchoicesmessages.google.com	udp
GB	216.58.212.226:443	cm.g.doubleclick.net	tcp
GB	142.250.187.238:443	fundingchoicesmessages.google.com	tcp
GB	216.58.212.226:443	cm.g.doubleclick.net	udp
GB	142.250.187.238:443	fundingchoicesmessages.google.com	udp
US	8.8.8.8:53	ad.turn.com	udp
US	35.190.0.66:443	ads.travelaudience.com	udp
US	8.8.8.8:53	match.adsby.bidtheatre.com	udp
US	8.8.8.8:53	creativecdn.com	udp
US	8.8.8.8:53	an.yandex.ru	udp
NL	188.166.17.21:443	match.adsby.bidtheatre.com	tcp
NL	185.184.8.90:443	creativecdn.com	tcp
RU	77.88.21.90:443	an.yandex.ru	tcp
NL	46.228.164.11:443	ad.turn.com	tcp
US	8.8.8.8:53	r.turn.com	udp
US	8.8.8.8:53	yandex.ru	udp
RU	5.255.255.77:443	yandex.ru	tcp
US	8.8.8.8:53	66.0.190.35.in-addr.arpa	udp
US	8.8.8.8:53	14.42.107.13.in-addr.arpa	udp
US	8.8.8.8:53	91.149.214.35.in-addr.arpa	udp
US	8.8.8.8:53	243.219.200.18.in-addr.arpa	udp
US	8.8.8.8:53	226.212.58.216.in-addr.arpa	udp
US	8.8.8.8:53	98.86.75.51.in-addr.arpa	udp
US	8.8.8.8:53	169.156.155.213.in-addr.arpa	udp
US	8.8.8.8:53	49.133.137.174.in-addr.arpa	udp
US	8.8.8.8:53	90.8.184.185.in-addr.arpa	udp
US	8.8.8.8:53	21.17.166.188.in-addr.arpa	udp
US	8.8.8.8:53	90.21.88.77.in-addr.arpa	udp
US	8.8.8.8:53	11.164.228.46.in-addr.arpa	udp
GB	142.250.187.238:443	fundingchoicesmessages.google.com	udp
US	8.8.8.8:53	77.255.255.5.in-addr.arpa	udp
US	8.8.8.8:53	shorturl.at	udp
US	172.67.69.88:443	shorturl.at	tcp
US	172.67.69.88:443	shorturl.at	tcp
US	8.8.8.8:53	www.shorturl.at	udp
US	8.8.8.8:53	88.69.67.172.in-addr.arpa	udp
GB	142.250.178.10:443	content-autofill.googleapis.com	udp
US	8.8.8.8:53	tags.refinery89.com	udp
GB	18.154.84.113:443	tags.refinery89.com	tcp
US	8.8.8.8:53	a.delivery.consentmanager.net	udp
US	8.8.8.8:53	cdn.consentmanager.net	udp
US	8.8.8.8:53	ib.adnxs.com	udp
US	8.8.8.8:53	c.amazon-adsystem.com	udp
US	8.8.8.8:53	securepubads.g.doubleclick.net	udp
DE	87.230.98.78:443	a.delivery.consentmanager.net	tcp
US	8.8.8.8:53	cdn.id5-sync.com	udp
GB	89.187.167.4:443	cdn.consentmanager.net	tcp
US	8.8.8.8:53	cdn.hadronid.net	udp
NL	185.89.210.244:443	ib.adnxs.com	tcp
US	8.8.8.8:53	tags.crwdcntrl.net	udp
GB	13.224.223.9:443	c.amazon-adsystem.com	tcp
GB	142.250.200.34:443	securepubads.g.doubleclick.net	tcp
US	104.22.53.86:443	cdn.id5-sync.com	tcp
US	8.8.8.8:53	secure.cdn.fastclick.net	udp
GB	18.245.143.100:443	tags.crwdcntrl.net	tcp
US	8.8.8.8:53	aax-dtb-cf.amazon-adsystem.com	udp
US	104.22.53.173:443	cdn.hadronid.net	tcp
DE	51.75.86.98:443	onetag-sys.com	udp
US	8.8.8.8:53	shb.richaudience.com	udp
GB	23.53.174.156:443	secure.cdn.fastclick.net	tcp
GB	18.172.154.232:443	aax-dtb-cf.amazon-adsystem.com	tcp
US	8.8.8.8:53	tlx.3lift.com	udp
US	8.8.8.8:53	adx.adform.net	udp
DE	178.63.241.79:443	shb.richaudience.com	tcp
US	8.8.8.8:53	btlr.sharethrough.com	udp
DE	3.124.64.248:443	tlx.3lift.com	tcp
DK	37.157.6.233:443	adx.adform.net	tcp
US	8.8.8.8:53	hbopenbid.pubmatic.com	udp
US	8.8.8.8:53	bidder.criteo.com	udp
GB	185.64.190.77:443	hbopenbid.pubmatic.com	tcp
US	8.8.8.8:53	prg.smartadserver.com	udp
DE	3.122.29.103:443	btlr.sharethrough.com	tcp
US	8.8.8.8:53	a.teads.tv	udp
NL	178.250.1.8:443	bidder.criteo.com	tcp
US	8.8.8.8:53	fastlane.rubiconproject.com	udp
SE	23.34.233.33:443	a.teads.tv	tcp
NL	89.149.192.240:443	prg.smartadserver.com	tcp
NL	69.173.156.139:443	fastlane.rubiconproject.com	tcp
GB	142.250.200.34:443	securepubads.g.doubleclick.net	udp
US	8.8.8.8:53	b.delivery.consentmanager.net	udp
DE	87.230.98.78:443	b.delivery.consentmanager.net	tcp
DE	87.230.98.78:443	b.delivery.consentmanager.net	tcp
GB	13.224.223.9:443	c.amazon-adsystem.com	tcp
US	8.8.8.8:53	113.84.154.18.in-addr.arpa	udp
US	8.8.8.8:53	4.167.187.89.in-addr.arpa	udp
US	8.8.8.8:53	9.223.224.13.in-addr.arpa	udp
US	8.8.8.8:53	34.200.250.142.in-addr.arpa	udp
US	8.8.8.8:53	78.98.230.87.in-addr.arpa	udp
US	8.8.8.8:53	244.210.89.185.in-addr.arpa	udp
US	8.8.8.8:53	100.143.245.18.in-addr.arpa	udp
US	8.8.8.8:53	86.53.22.104.in-addr.arpa	udp
US	8.8.8.8:53	173.53.22.104.in-addr.arpa	udp
US	8.8.8.8:53	232.154.172.18.in-addr.arpa	udp
US	8.8.8.8:53	156.174.53.23.in-addr.arpa	udp
US	8.8.8.8:53	79.241.63.178.in-addr.arpa	udp
US	8.8.8.8:53	248.64.124.3.in-addr.arpa	udp
US	8.8.8.8:53	233.6.157.37.in-addr.arpa	udp
US	8.8.8.8:53	77.190.64.185.in-addr.arpa	udp
US	8.8.8.8:53	8.1.250.178.in-addr.arpa	udp
US	8.8.8.8:53	103.29.122.3.in-addr.arpa	udp
US	8.8.8.8:53	240.192.149.89.in-addr.arpa	udp
US	8.8.8.8:53	33.233.34.23.in-addr.arpa	udp
US	8.8.8.8:53	139.156.173.69.in-addr.arpa	udp
US	8.8.8.8:53	d1hyarjnwqrenh.cloudfront.net	udp
GB	52.85.142.137:443	d1hyarjnwqrenh.cloudfront.net	tcp
US	8.8.8.8:53	beacons.gcp.gvt2.com	udp
US	8.8.8.8:53	google.com	udp
GB	142.250.178.14:443	google.com	tcp
US	192.178.49.163:443	beacons.gcp.gvt2.com	tcp
US	8.8.8.8:53	137.142.85.52.in-addr.arpa	udp
US	8.8.8.8:53	163.49.178.192.in-addr.arpa	udp
US	8.8.8.8:53	14.178.250.142.in-addr.arpa	udp
US	8.8.8.8:53	8.167.79.40.in-addr.arpa	udp
US	8.8.8.8:53	mega.nz	udp
LU	31.216.145.5:443	mega.nz	tcp
US	8.8.8.8:53	content-autofill.googleapis.com	udp
US	8.8.8.8:53	eu.static.mega.co.nz	udp
LU	31.216.145.5:443	mega.nz	tcp
GB	172.217.169.10:443	content-autofill.googleapis.com	udp
LU	66.203.124.37:443	eu.static.mega.co.nz	tcp
LU	66.203.124.37:443	eu.static.mega.co.nz	tcp
US	8.8.8.8:53	10.169.217.172.in-addr.arpa	udp
US	8.8.8.8:53	37.124.203.66.in-addr.arpa	udp
US	8.8.8.8:53	g.api.mega.co.nz	udp
LU	66.203.125.16:443	g.api.mega.co.nz	tcp
LU	66.203.125.16:443	g.api.mega.co.nz	tcp
LU	66.203.124.37:443	eu.static.mega.co.nz	tcp
US	8.8.8.8:53	16.125.203.66.in-addr.arpa	udp
N/A	127.0.0.1:6341		tcp
US	8.8.8.8:53	gfs270n070.userstorage.mega.co.nz	udp
LU	31.216.148.27:443	gfs270n070.userstorage.mega.co.nz	tcp
US	8.8.8.8:53	27.148.216.31.in-addr.arpa	udp
N/A	127.0.0.1:6341		tcp
US	8.8.8.8:53	discord.com	udp
US	162.159.128.233:443	discord.com	tcp
US	8.8.8.8:53	233.128.159.162.in-addr.arpa	udp
US	8.8.8.8:53	1.242.123.52.in-addr.arpa	udp
US	192.178.49.163:443	beacons.gcp.gvt2.com	udp
GB	142.250.178.14:443	google.com	udp
US	8.8.8.8:53	discord.com	udp
US	162.159.137.232:443	discord.com	tcp
US	8.8.8.8:53	232.137.159.162.in-addr.arpa	udp
US	8.8.8.8:53	icanhazip.com	udp
US	104.16.184.241:80	icanhazip.com	tcp
US	8.8.8.8:53	241.184.16.104.in-addr.arpa	udp
US	8.8.8.8:53	evcs-ocsp.ws.symantec.com	udp
DE	152.199.19.74:80	evcs-ocsp.ws.symantec.com	tcp
US	8.8.8.8:53	74.19.199.152.in-addr.arpa	udp
US	104.16.184.241:80	icanhazip.com	tcp
US	8.8.8.8:53	api.gofile.io	udp
FR	51.38.43.18:443	api.gofile.io	tcp
US	8.8.8.8:53	18.43.38.51.in-addr.arpa	udp
US	8.8.8.8:53	store4.gofile.io	udp
FR	31.14.70.245:443	store4.gofile.io	tcp
US	8.8.8.8:53	245.70.14.31.in-addr.arpa	udp
US	104.16.184.241:80	icanhazip.com	tcp
US	162.159.137.232:443	discord.com	tcp
US	8.8.8.8:53	www.google.com	udp
GB	142.250.187.196:443	www.google.com	udp
GB	142.250.187.196:443	www.google.com	tcp
US	8.8.8.8:53	play.google.com	udp
GB	172.217.169.46:443	play.google.com	udp
GB	172.217.169.46:443	play.google.com	tcp
US	8.8.8.8:53	clients2.google.com	udp
GB	142.250.187.206:443	clients2.google.com	udp
GB	142.250.187.206:443	clients2.google.com	tcp
US	8.8.8.8:53	clients2.googleusercontent.com	udp
GB	172.217.16.225:443	clients2.googleusercontent.com	tcp
US	8.8.8.8:53	mega.nz	udp
LU	31.216.145.5:443	mega.nz	tcp
LU	31.216.145.5:443	mega.nz	tcp
US	8.8.8.8:53	mega.io	udp
LU	66.203.124.37:443	mega.io	tcp
LU	66.203.124.37:443	mega.io	tcp
US	8.8.8.8:53	g.api.mega.co.nz	udp
LU	66.203.125.11:443	g.api.mega.co.nz	tcp
US	8.8.8.8:53	content-autofill.googleapis.com	udp
US	8.8.8.8:53	11.125.203.66.in-addr.arpa	udp
US	8.8.8.8:53	mega.nz	udp
LU	31.216.145.5:443	mega.nz	tcp
US	8.8.8.8:53	eu.static.mega.co.nz	udp
LU	66.203.124.37:443	eu.static.mega.co.nz	tcp
LU	66.203.124.37:443	eu.static.mega.co.nz	tcp
LU	66.203.124.37:443	eu.static.mega.co.nz	tcp
US	8.8.8.8:53	reqstat.api.mega.co.nz	udp
US	8.8.8.8:53	g.api.mega.co.nz	udp
LU	66.203.125.28:443	reqstat.api.mega.co.nz	tcp
LU	66.203.125.13:443	g.api.mega.co.nz	tcp
LU	66.203.125.13:443	g.api.mega.co.nz	tcp
US	8.8.8.8:53	28.125.203.66.in-addr.arpa	udp
US	8.8.8.8:53	13.125.203.66.in-addr.arpa	udp
LU	66.203.125.13:443	g.api.mega.co.nz	tcp
N/A	127.0.0.1:6341		tcp
US	8.8.8.8:53	gfs440n200.userstorage.mega.co.nz	udp
JP	103.99.35.200:443	gfs440n200.userstorage.mega.co.nz	tcp
JP	103.99.35.200:443	gfs440n200.userstorage.mega.co.nz	tcp
N/A	127.0.0.1:6341		tcp
US	8.8.8.8:53	200.35.99.103.in-addr.arpa	udp
LU	66.203.125.56:443	mcd270n310.karere.mega.nz	tcp
US	8.8.8.8:53	56.125.203.66.in-addr.arpa	udp
N/A	127.0.0.1:6341		tcp
N/A	127.0.0.1:6341		tcp
US	8.8.8.8:53	gfs214n173.userstorage.mega.co.nz	udp
ES	185.206.27.83:443	gfs214n173.userstorage.mega.co.nz	tcp
ES	185.206.27.83:443	gfs214n173.userstorage.mega.co.nz	tcp
ES	185.206.27.83:443	gfs214n173.userstorage.mega.co.nz	tcp
ES	185.206.27.83:443	gfs214n173.userstorage.mega.co.nz	tcp
ES	185.206.27.83:443	gfs214n173.userstorage.mega.co.nz	tcp
US	8.8.8.8:53	83.27.206.185.in-addr.arpa	udp

Files

\??\pipe\crashpad_396_JAYNWKJVQIDEIQJM

MD5	d41d8cd98f00b204e9800998ecf8427e
SHA1	da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512	cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

MD5	d751713988987e9331980363e24189ce
SHA1	97d170e1550eee4afc0af065b78cda302a97674c
SHA256	4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512	b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5	1e9706a956672b1a8f72310721588d02
SHA1	265a11d2b2c071fd1ccc5946e3bcb4b69a718147
SHA256	e05426a34e222a47e4e9e642a10849ea5e3f5b1c260d2457c5861dfdb43813ce
SHA512	9d888ec718f29478b640db0b0b5476c9d14f20b80202ebea810031f047fef3f508a85560ba20c542b39fdba6c89d7e51fed7d4e6e4962d3670a62a2d51c5b211

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5	f4f677512965ab81d964a4a88c2bdc29
SHA1	a9881c8b675ca5c72667df0bebc99c8d71f4b42f
SHA256	4c0bcca67e76b38d9ee360666be70414a2db6171d88bb4532018a619104159ed
SHA512	7ee0739be7a12e6c48a96ee2e30b94dac6e8a4052f7a5bcd5af5171879642d363d4557c9ac67b09142e25c7d3056b9fc11264b7af08dddcbe1171887498cb5a5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	7339039f63eb894c6f5cb69f50cb12f7
SHA1	6b24ca083c85d19568d8fcda76a1adf2b58d5bc9
SHA256	befa27da85bfe4ad39d87992f4f25599fd1b74235c6e26a6943e643565c87499
SHA512	0224ff0a5a0fc5d22db559bb2b93b5122466508e2669bb6440ae0a408d195f357caa38af11a285fca10613ccaa1f74b2f5f08cdaae7bb7f7eea8788222f06cd1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

MD5	2ba0f6085a02c721a777d4fe1477ed1d
SHA1	d51b7ee82e1a49177800683365d44d65f1ba4694
SHA256	394973c82a0684ab73f614e743d63fd55ed799c2c3e9dabf80cbb4402ae6c650
SHA512	1f2a62c605a4b2f4917831fbeb56a9d53a77d92e5652c8cdabb335f7eb95c1d9dee23131c436974ae85bfedf315219ddffbd95ccfa12685dbc10fe6281f869e4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5	9b29b5731537a5511d38868fba45dba5
SHA1	eb2c0194ff3eccd5cf04b25c519a661d57f27786
SHA256	1c628946142b61d7d7bad50e402e1041fa307a6cfd00a9ffe7d9d23eaf2e6bea
SHA512	e0efa9c7d1b0e3a6746408d009a45e5a1099398f5e2fda139cb58ba1795374a6d5866f3562ff3ce5b20c58c3f84204bfbb41b1b1472a06369c5a30d0fab5acfb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5	3f5f103e673435cc50a92f3141d7720b
SHA1	a23d319f33330f57c9903bd0efdf1487b321712e
SHA256	b20abb93ba0db912e927ed697a25cb71165473aacd6b4e060a89812251a327a9
SHA512	84cc32324a50fef3e7811e170be015561e71f17f3ef10c68aae59102d3dbfcc1ea9bed76eb1890e18c588f3d729a3e4293fd8738990f594e3be28334740c1958

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	c6e581e739f70f0b06a8f5a88ff18e7e
SHA1	1afec9c77a321754d52f44f796eeecfcf95325d4
SHA256	25a056dbcf7a56178e4d4cbad5687a3384ebf41dfaa5590a30f997e1eff3e372
SHA512	41a65e692b610a5d58828d30bab489c16829855da00ffe11c604f63abf732ea75faad9908b84082471818cf3651f979095ddac9a87c7e17f3c6a38b96e3815b7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5	8b6b35e1e5dde639f237687d413cfa97
SHA1	586465e3622a63412f5bbaf72717bb8991e85dc9
SHA256	d346504b115fe922d94bbd6fe1c4232c7d60c1f294a06b2d574aa597d2b28517
SHA512	f19a2e11c6786dc5e6111c3fff6b86abd972291b095592244b99bec82433543b2350bdd676faac3808189f20939cbd33efc26cdfbab31f9855e5f1c75ca16e63

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe58a4e6.TMP

MD5	dc6a06f8bcf066544015bfc69f0fb5f1
SHA1	478e017f1d41562cec64bf328e981187b5cbe7bf
SHA256	ca6447895e1e42a1bb9ec89e0082f11d35c1d54173d50813ee917b3c0935503e
SHA512	ab2d975b1de5f71f393a60eefcdccd8c3a605bad391fde49beef714ff06c10b32d21d5f79e64103a2cc86b68a6420ff924fef4b7d59984573ec42b10cd0c6117

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	95786f758f16ad5f6b1139a329ab24a9
SHA1	ae2de4c3c4517cc6beeb35891d0d08d8a4e04760
SHA256	fcfd1409753853af9829872013f9889d589b252e8e371df46ab9f7aea588db3d
SHA512	8e00d3579ebf660dce08f000d3e5fdba6ef8047ba877618aef14cea5b0166b298f77b99312f0c4aa70dc4671bde1ba721ff95dba0cd8f21580ac7b217668db50

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5	5f917386ccc45795003a1d0b8d9947dc
SHA1	c8d8a4b27940e19521ead42e2c63e3228f5362e7
SHA256	2d89764de3a996682f443610c0a422100cf726fb8073222221952efe20ed08c0
SHA512	6743761ee4d6915888faf5d4564f68c1025aef0b879c1300c3da064bca1643731d7ce22fa25c919ff4d0bb023a3236aa16e39f14654f8a327c26b3e6081ce278

C:\Users\Admin\Downloads\Stealerium.zip.crdownload

MD5	c956487c81dc16555e9232408efbe44d
SHA1	9272088c2dc913b3c6e779a091755b07e7fa3050
SHA256	49d8c623abc37dff7af7d7ea15fa66b27504f166b5bf7a2d486c41ce7923a722
SHA512	1d1f77372991544e502bf6076a2e5c9cea0d80e2afc00a0f4efe97ebf9b74bb18e1b52b3ec02dd3de441fe3114dd3aa15f21fc421ddf93204571acd7b56af64c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5	956587ac39f1634cebc6bb6a326d488c
SHA1	4d3c6932dfd8a0df8973f2db7bb3c04931e18761
SHA256	ddf18787188581723cadce0a096c34adbac3d11c97979b5dfb2b95f20ecf8b75
SHA512	c0e6eb450fae138d48509fa9072d9a6969c71f932dc5c1ef0212bb84943df276163e6e09a9de4b8142b726946fe231c7614294ca2107b2b3be2b8d5300aed411

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5	6d9857a9b36d1be213347a1a60427742
SHA1	619648ec70f51c0c788db44f8cb27f671bcc8068
SHA256	4278ec15abcca16f3e8f155c9ea190481db2f81f6e385ea8d068ae36e166f8c2
SHA512	671c958e567e4e236d7525e2a83e70607ee34be4c8e6b15d6ba4547de86493ed04fefb5e96bd8df098944a484f29d8a59648091b90499ece0a63b42b0e7b2c65

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5	8fbca3838240bb8e4592281454919a48
SHA1	a73f1d8552b143610012c535bf890a95891b5802
SHA256	fb0d5534f1e23007c3914da518ec2e202927eb2f3876cc902d0c2f34ae1fab9c
SHA512	6cb45309371ef0eef9b59832c8be595aa477fb2a408e439756ee873af75e0db37a60d3f56d7c3bffc893687f7e2dff1fc89e2c1659e3cec982140c18fec378e6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	07a8b0d52d18b3fddaae28c5aa2dd585
SHA1	e0c59c09c7920c3613d185b920bdd7ca1aa7d390
SHA256	758680ba2bffc2c33d8712053040c3d65897f3aa2bba20c510c46aaa19f2f308
SHA512	71b6a6bec6fb8ec0bc37ea70de90cf70f855dd0330a71189649c0f92883421890859fa5b76de1cda880223c968c9d0fc4363ae55e731263d492cc9d7590b2b35

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5	3e3421b0bdb6c16e15b0ba00421aa601
SHA1	4c81fd3837f9710f528ed6f74a1b6e0f68089eea
SHA256	cf0f6b6db7b4645bde5e83a6347cc7224206a7dc9c3051e19e48dfdbe4ac1822
SHA512	c97529ae432825dc0f91df67a2c1468f8940539f8d9bc0a9de5294b07d6884f65c3b42eca7650783ed4b35fa2534eefab83d10844809d3d9fdffe0beabbc7698

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1

MD5	26e68bc074774ff37b8f96e746358680
SHA1	e0ab1ae0204e9c0944c41245696b8f8510546122
SHA256	123e0e47753c87a1156f62d85921bfef660f866651a572064d5c3a51ba0cdabe
SHA512	924946de9d458e3fc08c6743fa487877f7061714d842c4553ae39bff0b2da9e9770c5973d5e2d716ca93c4027db07313b44eabf4d760bb30505dd4164a46ef97

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

MD5	e646991f9b7863013f4543e5deea2d49
SHA1	7d3ab1c249b15c5bc5761baef819fa96b043539a
SHA256	0cc277125b5bd55a7c42e32f351b5bce3ca6003f28bc0646db5bc6b9b5135c07
SHA512	8b7b264f086ee2d1c1ec1199307d6511ce964890e84312a1c12c21a0a1fac24d6bf005a2ded820ecae3b51b58229a8ce724e98e40b03e1f93d3914948025a76f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations

MD5	bc6142469cd7dadf107be9ad87ea4753
SHA1	72a9aa05003fab742b0e4dc4c5d9eda6b9f7565c
SHA256	b26da4f8c7e283aa74386da0229d66af14a37986b8ca828e054fc932f68dd557
SHA512	47d1a67a16f5dc6d50556c5296e65918f0a2fcad0e8cee5795b100fe8cd89eaf5e1fd67691e8a57af3677883a5d8f104723b1901d11845b286474c8ac56f6182

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1

MD5	7566678514ff9d59a86dab8cab19d0b4
SHA1	729a35dc23fcdf99e6afab6b4f9720b7f6efe6c3
SHA256	341049919c81f6b20a7767925528f01f2328f71ab1ff4d456f3b8c218e5d3874
SHA512	edc48d049f741e2e7bfd303a5af8ddd871d45482d308987eb289f714076a0bec67ec16220df6850af0c05c3a07fb72fa9eda4c0234b7a0a3e30a5410bb1284b4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Version

MD5	009b9a2ee7afbf6dd0b9617fc8f8ecba
SHA1	c97ed0652e731fc412e3b7bdfca2994b7cc206a7
SHA256	de607a2c68f52e15a104ead9ecbaa3e6862fdb11eac080e408ba4d69f1f7a915
SHA512	6161dd952ae140a8fb8aa5e33f06bc65fdc15ce3fbfe4c576dc2668c86bce4a1d5c1112caee014e5efa3698547faad3bc80ec253eedb43148e36e1a02ce89910

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Reporting and NEL

MD5	37ad89bf6f89a64ef914201a71db4246
SHA1	79e246365a613cf137663fec84fa972646bd8dbb
SHA256	c204328c3cd6646d260f997b6d7d311420b0d63cf1040934981370a996712dda
SHA512	5ec10da029ad70b160ddf30a8b4be2470b4999dd6596fbf674dcab95e2018b67bbaa2c8d09fb2fc4f226bb08df16f4ed75f95320e42f95d102febebc379fb32e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies

MD5	eb1373771a745cd9d8693693f1ebf1d0
SHA1	8ee6f4ef0e653db0f397977bb45329c40f03120d
SHA256	aa90fff045536b9956103ec8920da55b080e6bd23278b11d9b7c87e86726987c
SHA512	676155305230a191d13654c1405f99b6667b68cbddf43ef0238e1d8d83b047c7db0d716852b92fc7381bf3b06aa1371facfd4e52fdfcb9e395646a6b5a248ccb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\History

MD5	f85e7807feab6300135fbad3bc047b83
SHA1	9da9e7e215bc9d92364bcca85d409edfc7d0abda
SHA256	f21d810a4d0cfa398a89d8f82bf4d77504f29f2e9ee8a52cb8136172a4ef77ff
SHA512	bfa0112540f4697dd27954566b1b0ba1569e592f9d697a0b761c509763f44f6eb8d218e5f3b290ed16eaba8e6a3cf734654348ac4a0639d79cb570bbfe170b6f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001f

MD5	da4971db4939d9b7a5548010d1bc0343
SHA1	e7b9860733cc3a2445227703d6f9a38a6b371cfb
SHA256	70196f77515ade334cf60b47e6a4490f0331352f253a28417ec20eb6f2a6fa29
SHA512	ae5112ab6147ba4341eb6fe52d78dd4d68a35c718a9afb64a430c6fb42dbcd752fea754960a638864b358809f1d47fddb5c070a43301817d171e21b3ce41fadd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001e

MD5	eb7895ba582fa7cba9531ab42d9ed8c2
SHA1	740b43a2997f24d6859896bb46541ba2ce208f8a
SHA256	4966326cb66eba65e26b589887981530eeb795373529563244f4f29f18cab78f
SHA512	b405fe99fff3f9fbbc2849f4deac45cb3cd252a66e7f11fb20ed16e93aa0d63c752569bf42961910adebf0915388725fdba531283c9fc963b7b4221e066a357f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001d

MD5	86081939aaff0ae45e11b687a33e4fa0
SHA1	4e29daec0f3af2c3fee91836f11b7419e6c51b5f
SHA256	dea7cfd3d197e202043e25c7c69ab0d067a33dae7ba1c5937fe263251ee3219a
SHA512	577e2cc5ed85b282db1c9e3e0bc1aba1c9ffcd3cb305d0758578338323196aa966c67c5eda3a2fe7c32948d847c6f195f8fe3bbeae8cf570baaeb9bac0d9ee80

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001b

MD5	bd5df332e3b6c2bc1a587ae171bdc4a9
SHA1	43b08a11ea1efe5f3588e6a4c8b86270a2207ae1
SHA256	08b147c7c6d9efc789b1892ca209519a9c1901280ceaa4359c43dec977a478ce
SHA512	e3b0fe315d7c50ba18cf7ae4b1e8c75fcf6c0ee383a24e4c744240a03babdab19706248734e97a364401ec4a433cf2e08ac25c1a6c994b08bdc5ff981b5b2b71

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001a

MD5	28828d9297ef0a16941ebe259caf5683
SHA1	337f12c37a641e65e25bc41cdb61d740fa80f86e
SHA256	1354b9e18e18c2b21f442f16048daf1788687d56c9abafb06b0d7a862304c03f
SHA512	0acbee774c81366ba39327d1eb5e82194af0e2dd5aa45eb47f27c01391d00ae1ac8cf832a7da2eb9ef15f4227064ab19611b9a4a621d069cd02ef952e712be86

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000019

MD5	4e6e1e341a4c8f2b9feca3e5422b432d
SHA1	07739dc105a94b8cba877d4446e00b22bdbaf9cf
SHA256	4c1f8a3ac3c00bab5e22097fde9cc75fa27003fb9099655e1a628bba9fa41fdf
SHA512	497df39f8224e8a7a633c9ea7d3b957cd2f9518378f42634d737575ad078d4e565bbfcaf49e446499c403faa21824d606b184e6cb8f7cb9b569f148ecfcb8cbd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000018

MD5	92cb82a66ba311b96de634180773ba84
SHA1	74bc0a4424e4eb2b7025882e6dcf5373b058c61a
SHA256	9e4c0edd605115372cae5b0362ce14981b90feef01e682813656010900ed48e5
SHA512	a25110795d6044b4f1481dcb54883418f9d093a86e0e2a5c6bd6f48eb949d445024a8f7a07b93fb054aa46493440df03a14323acf7c16a17739a0479a4654dde

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000017

MD5	4ff3d8d0e88ea5d3ac7f4c1bcba6c958
SHA1	1a6085f63a2a93f09dbfea9fede5df0c1ab8a58e
SHA256	5d1d97d4f748d30db1e8abd400b3e02e2fdd5c7ff1c781406c97cd7089400c96
SHA512	be78fdb974e877af4c12d4d3f5d4a6a9d6839e8b37f15a1aed94ceb39f55f0ab76deac09c23f1303bf831d35caf163d5cf81d11afdbc0398cf505c6cc1fad659

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000016

MD5	083823d70db01b7fa766d40737f852fa
SHA1	6f78858cda054e4f537c753fb504b304c91acbcb
SHA256	ea0acbdbfd8ea2d7d9f4f68c795268ffac1211c1503ed94761b2bf1c7755e40e
SHA512	a54979977b3a82ac7bbe262ea1396310b90d12f89d259e091eccd1ccd1e2c9b8b1065f94eead711a5c15a22b9d79871aa97b3fe16b51e0a56dbee9df3b472a94

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000015

MD5	87e8230a9ca3f0c5ccfa56f70276e2f2
SHA1	eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7
SHA256	e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9
SHA512	37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000014

MD5	217654b39d208f61f1eba419e5107e40
SHA1	e0b3537292f689be092d263fe702cbdc13eddef9
SHA256	20e1290413af62b150520bb37ade2556eb4de9a3a8827c3e5120538ad79e07fd
SHA512	1771a55403d505c06a01cf7f5df1ec95118a5debf191bddb91761dc9d3cb9cde27dd86cb2297d1a5578c0319ecb112f30f29f87849f0c61f5af182e5221aa9c4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000013

MD5	ede1a4d0a26df783e582ac07892e92fc
SHA1	ce1242f5cd768c0126485be9e679f3e2c7e6c3fc
SHA256	997e7f6c4136b962cec732d922735900aaa874e3e19b7a8ddd277ada23605451
SHA512	48a6040c50e121b15300ea74cefd1a5db7d13f6f6d1b55f6468a106f2abf43f461d3d2bc741756af7248097aefd1fd9dea023f7fd2a4b4d0c8ef74192be1fbbc

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000012

MD5	7a7f6fae8c15275c01cd42a17ef61caa
SHA1	72c3c1776b9559e26df69fe4bd4d98e9346245cb
SHA256	860753a703818d76e5dadcf49162428e39e01298b14aa5d4df4073a336e49c6d
SHA512	3b65f325239168c5aae92b68c1a582905b3fec77671ce463bb54431d633a0e6848c23630e9793f5df04311ee39c1e57130e55c4cfc6f3091509c28b009853bf3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000011

MD5	af769bccf18f1384884a6e0e934481ac
SHA1	5d272fc0fc7a2d209672658358187b66062a5429
SHA256	e9ebef5e2d5a0afdf953fb1eb61fafa1b2c3acbb5e2dde510220ff6d34cf4d27
SHA512	571c5883abb6942e3f842a8709aed3bf5acbe5fc37d5734c14b6e07991f22ac3918c498c1608d9a7ebc0bcc4becc3bf10c85973dbcb4c5e6d1152eb370e2e012

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000010

MD5	04ed7d2bad36bfc541b0d519242a1d69
SHA1	f8c10289dd099350ae862b3b3e63b0fb1e2ebe90
SHA256	e6df434357973a44a2f11e6e571f763f31f3caadfb3aa21b667eeb8d491027fe
SHA512	6fe9663c8d1813d0ca12c865144eca122b73ebc7f162b44e350694b626b5c1b0732b92708a78a4f5b739325656a96abff2519b656feae2ff636e2003469b9ad9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000f

MD5	82db1415651a7731d615c31edcdf54ba
SHA1	534796411ffc024121008c2968325ea6a47ced57
SHA256	f0b5d2c67b7804862677eaa73efb0ceb15ade7ffa09939d9ba027894daea8c53
SHA512	198721ec7a17c034906308e2dee3ef2062d58a9771dc6dce12869cddbcb4c07151dc1842a28e970760974539926c64b365c4f09227d57e0c2112413f08cc14c4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000e

MD5	9ae6ef21ec75b78a11b35dcf85c30979
SHA1	e6e6df3bbe794c505ba4a9fdb1654db1a19da5aa
SHA256	b1c4afcf1e932f83c79b14b2c93394e4783cfba453bbfd385c093764a4e111e4
SHA512	672b262836e91cc26d70573754f91c46cc34060863d3c5eda6d45c3f0d83d861a682f8f191dec6f437a8a598823b7d8ac1b399349bea0f8abb49e39a8583a607

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000d

MD5	12db4747c919800260d71579c658c235
SHA1	62cd7b4d1646452e4fcf800e5c726785fb3eafbf
SHA256	1db7e1a8992d246c5f8f45ac7bdede320af040b05933ea88452b2363e7cffa5c
SHA512	cb7cb75b01d6eb46741c083de628a3a378b5a8f1c93c89fe2249fa37c37fed7f1060799a354754b365cb53da74ac270fa9e586967ea9dbb44a2bb9d9ec4d01cd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000c

MD5	389bc2bf98582752a4b510949998b379
SHA1	22d770c03a3dc8f2d09a185cb54cc12539a8d5a4
SHA256	a19c339bbf0a2c72fd8a8649199a72738ba8e76592d1346d55d0caee436fd391
SHA512	164c3ae54ffd18dbdb692480ae3e028bfcfc39bf762416dab64ba6991dd40250344ad36c0c15f73074609fe0072ca770642697a666f27397d95594f843904477

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000b

MD5	c71e661f482d2a7bfc565060281b324f
SHA1	4f66536e4d59091e4ce33e84207965c51330ecbb
SHA256	60edc95aa4f8233ce27dd1b122a78632a0b9aa5be0f183b27a08dd9fc58a4932
SHA512	7bf62c927d45ba24d1465977e8d741b2aba4faee95f7d3767fbbd781c62b3c6bc97e1fb9f525d43f3c77202ae6f8904f3389c3ffc84c306c43be876ce4a180c3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000a

MD5	72f6a7c45f5efce4c8a27a47bfdd2a41
SHA1	84d49dadadbfcc176c6ca836361fd8455984cbf5
SHA256	11ba001350c405f0ecacbbd808381591d724cb2daf76b7177529ff120f32e900
SHA512	a2f8363357b45c9e5b98b38fd7c39ae369d25991da62e3ec2a6abe07a492d90aee92e5d49d4011cae3e5db8f08c9624295f5151b05b489e16bb06eeb7169f7ae

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000009

MD5	87c2b09a983584b04a63f3ff44064d64
SHA1	8796d5ef1ad1196309ef582cecef3ab95db27043
SHA256	d4a4a801c412a8324a19f21511a7880815b373628e66016bc1785a5a85e0afb0
SHA512	df1f0d6f5f53306887b0b16364651bda9cdc28b8ea74b2d46b2530c6772a724422b33bbdcd7c33d724d2fd4a973e1e9dbc4b654c9c53981386c341620c337067

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008

MD5	91fe60c129b95e933ee2fbb574d4b8c6
SHA1	dfd2f6d5db573209fc92ffba032ea5e403cc46f2
SHA256	12833282a7fcefcb9893e53db85e7d9656cfa0eee91a6f7b2f17dbf491afab23
SHA512	85943f48d7dc136301f20a5eda5a42521870d8ef933ea9f463574593a2e13efb10ded4c3ae727646a2cf36c1a63059cee5069e24efdb4fa8b282de581ea18b1d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007

MD5	cfd2fdfedddc08d2932df2d665e36745
SHA1	b3ddd2ea3ff672a4f0babe49ed656b33800e79d0
SHA256	576cff014b4dea0ff3a0c7a4044503b758bceb6a30c2678a1177446f456a4536
SHA512	394c2f25b002b77fd5c12a4872fd669a0ef10c663b2803eb66e2cdaee48ca386e1f76fe552200535c30b05b7f21091a472a50271cd9620131dfb2317276dbe6c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006

MD5	858e0ffdb68a4d9a6523f340477fe29b
SHA1	4b123671c48e350f3d1e60e710aa83ba7594d5dd
SHA256	759e8e8be5cc43816ed6352f12f69c3042cdbf3409e7d557a338837eccf702fe
SHA512	021008ff278b4e5c046c81170da3540eac12859260d0948f7c4846a5721b461894c205169bb6591cced9ede9dab10ccdca2d77cc218fbb2e784f53f78e42d761

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_3

MD5	c14b6bd9a6653526e37024b86bdd0e47
SHA1	b5459d411fedddead658e683b824774f682095d7
SHA256	6b1997f22b80e602741c64dbfbd120e2a4d7584c0e33e8e1720356183cd07624
SHA512	cf1b1003518f76423348d4a8b338c7e969e663fd7fa5bdad09eeadc5afa53789357480773b25b4acde03b53e048b938a60fa973a91589039e46709c4a84304bb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_2

MD5	3ed2bcc3fa7c7b4af1d5269597443b4a
SHA1	8d22d6abaece2b4ada4a92b1aa78ebdae8364072
SHA256	4e794e8246d9992f0579b87564b0eabbe64beca892c28ece2f9ce8d303d70b92
SHA512	9e918bb9cd7dc0b0e1ce6bfd159fb0361770295b5ab5b9ddacda682fa268af8d7dff92a640c03de09479eadd1983d54e591af1cdde4bd35f7001d9640b20aecb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_1

MD5	3401bd3f21da712a678adc4e538adbac
SHA1	1c97dd26240f3ea0a4522fbfa07fd43f98455c9f
SHA256	6d4fa1dd79a6ae5762b573a351f640a6a00a8993f019c943c60ba2483b30ba33
SHA512	dfe57ff0b0f7943827b5a6e59c49deefd358602076666f974a21a2c2c5ede71709ee1c46c937307291e90a43ec7040537b42b7824f01ad2c2477d0873df63099

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_0

MD5	664ff22921c77b237e2369412a74a1a3
SHA1	78df5f7e9a94fa64e07de85af3bd0e9ac7312df4
SHA256	895aeca46ebf10d810e5818e59bb74f24edbc42b6bc54585e6eca654a7365c03
SHA512	4519aac1e879cda8432177a4cd5c4c892a84fdd40088d30ff5d509388576a1b41c31fba943f399b67cd437c7f5744bd234608322f3b7e1f5edcd784c5a159e50

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5	d9b76d0241ecc9e2df7ea83cb5845e62
SHA1	be1b4c48e4f147efd0987796e8f991305659b9e3
SHA256	5541cb9771b134ed94034031bed10b2ba3682eef37b33b825f57965d804985d2
SHA512	5b82447321432234916145f6625005bf4bb644af72d2a00f5c8a18d115e2e7a506a31bd507361a83a0b4a3840e5458be708df8ae99ad1173b905aca8e3b8699c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\e5a47725-71ce-4088-a991-e7fd8d2d3697.tmp

MD5	58f344e645e5d0fc4ba5e35ca2d909f8
SHA1	0218b51a828bf1d4bd086663c6d2d8393f04a284
SHA256	52ccd13e8dd241cbea371f9a87527d973a8868c8231ed5407576d54275fbfb8f
SHA512	20121079dfcc12fb0e241c150b83a74199cf85f7069f37e99f82ce894daafbdc9ed29f69276cd4ba723599e6519152cbc1d999fcbcf7627a0c9b8512905072a3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	0c2ad7fff471e5068b1ab9a987787e0a
SHA1	289edf09cd171242b3e6ea4c7e76dd7ebb6c1f71
SHA256	772395cd4e29a8a0d7d853d3ffb091850c36ef9073127216a31a01bd50aeea95
SHA512	445b7f013e54a3f95214a9b2dc21ff07037a7cf55b24ea1680d25bd648767d4fa399de03d9daedb8374f394dce825ca11e802e37d6610525db5bb1f1f4be0f89

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5	105ced64a01a526c2c2781abc87b577b
SHA1	50ac9e3f7b519503d78be5292ad802f7836c041e
SHA256	248b3dba1a40062bd3339d247c20177f778a139dac81eb13d75dea52507bb809
SHA512	010e33a9eaa359f5e7a484a1aec2de127840e296cd5d6a51b4b196dff81d330431978a354b38adc4e837aa3b8f1cf2f885a11cfda0cae65cfbec74b37b8654c9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5	67079b19426fe6596c8fff45e57dab3c
SHA1	2267e4d3c2499752b85c529c04a01997f67b4a07
SHA256	186fde062d294f2081bd990d6667115d0bea3ec24d885150ec2a8a5cffd362c0
SHA512	30d8420f287882ab9da53b9dab545043f25ec212ff3e8ce1db5f2821b73cdcdd75de7bd5d5240078d8e8fb72141a694f4df0909c0cb2a831d9b1d415cee838ee

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002b

MD5	151fb811968eaf8efb840908b89dc9d4
SHA1	7ec811009fd9b0e6d92d12d78b002275f2f1bee1
SHA256	043fd8558e4a5a60aaccd2f0377f77a544e3e375242e9d7200dc6e51f94103ed
SHA512	83aface0ab01da52fd077f747c9d5916e3c06b0ea5c551d7d316707ec3e8f3f986ce1c82e6f2136e48c6511a83cb0ac67ff6dc8f0e440ac72fc6854086a87674

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000032

MD5	3811a84079fd710635626275664e51a1
SHA1	f998ea367562d553bbb389332cd28d397750edce
SHA256	6d368394fca86cfe6157ed13d36a107a1597000921459413882544a9d72ade3b
SHA512	75c6746b24ea432e3f5883b6ed87076ad4c4e25c3322e58449d5e2268ce0df9497245561e480d59d916b8e84d79ac148c7cada8a3ed1714bb74aa701bb0b3295

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	fdfdc9904d0a120c5b436b9aec1bb98e
SHA1	b83bc00d5b71666095d3382d218d468c53cdd714
SHA256	95465b71f138b8d8543c81067f90647476d349c1f5170b9270b4ecf3a6eb59e8
SHA512	e24aba6bd05e6a39c3578a3445b4e6edef810fceff187fbf286955704e6ac7ae191d8f35a46f23761cf2f7b212869c2a6892f3843f8979d08347f7529c07f22a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5	d98782016bd54791a937ed583c72a7c0
SHA1	d636470ace9887dc7d10c594c51f8398f35beff3
SHA256	fed1b38cf9988cda21a3844862546d0f2ee5f7cffaaf4747bb69744b22907674
SHA512	fea9ca923fd6c4d6fa0c07fa573b37197c0d9608d59d559a81a5cc35cd5fc9255a16885017c17bd1254941dafb8fe736baf73a9709fa1bc8eb7943e8a04e4aa4

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5	dd928f9d7ec7e9022e102455041065aa
SHA1	802e05190865f7f8bf2ac05691e2dcbd2ec76ba1
SHA256	6fe79769b396ce2e4957347869e7a3b577391fd85fcdd1158ad1ba493332f065
SHA512	4e9034e542ae10766000d3823fb79d2c9d92589568c8bc14fa2446aa83e81c3efa9b41f0f51f4ed8cc76d95b121dc10ee151b9ba17672b0b541faf63acfc9d42

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5	c8bc8c851accb3d50ea75ec1533ddb85
SHA1	bf869093f5fe36bb650056d312f5106d01cfa863
SHA256	c08124e80503374fefc002fd167d9d6a7f9b257a705e75ad32c526462dfbff13
SHA512	eea92110dfcdfc9021ca9f87aa3aa90d068544679bf855cea8e6aa8e741e595fd516059e7f6be7f96fe3ad43b97fea904bee19f8897c68426b480ece45813b8f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	604402f1234ca4ace9c6618939493d0f
SHA1	2a1b305b2ccf28f99d12c9090ba7624a4b5861be
SHA256	9df3075aa9149fce2aa989e16a98bc1c4bc882d5d13ea858180ed2ba4facd13b
SHA512	cc412ea133061ee28875e9aea254177583f23977457b75983743056084e001ceedcc37e3b0c8f8fa79655352929155f5dd6e66a761d866b34b52fa318b6be819

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5	182afb0b9616c58787b1b2c3a024d7f5
SHA1	c67b10756c53416ef2a07c0943401f0e37ed09c8
SHA256	4538b04160df3570640f7d8e045c7b8c87063d5c3cc216020015307ac0a80322
SHA512	60e0d506a01c360781e3fd903e48b4fb89fc07370cc388958966c97a3b82faa3af3ce82fb667dff6087423d53edee37cc8a6f49e4b023d7288b3bb7835011ae0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5	b99315c33434646afcbb40b4b579da75
SHA1	e32517907c2f7cdf4da2c41b7f9407e0cc91c18f
SHA256	30da240136a22f5f76820cbe43096f84f58199855461e885d83c5f9dc726e04f
SHA512	c2e4e438aeadeeb925c126b82c44a57d31b2dabe40e5fa49bfcffd4af238a96225a8f5e0dc76166ac425ef89efacc2a143a69acb8827b3d2ca6212337fff1a96

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\CURRENT

MD5	46295cac801e5d4857d09837238a6394
SHA1	44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256	0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512	8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\000\t\Paths\MANIFEST-000001

MD5	5af87dfd673ba2115e2fcf5cfdb727ab
SHA1	d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256	f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512	de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	7de2557a3a8a804e686d8a463feee58a
SHA1	81d143baed952da79d00888f5706e3eeca5502f0
SHA256	9c708d8c1566d7f9c918eedbf7ff29d533a0e3e54ad46d4536d5c381b17cf321
SHA512	fc86f1ef8b645506e7900d6e05c9050e3c73e942893de3484e39620d065ab7fecf3fdc5a9f861ef0cefb9bd01b5fff6c88173d7435006876e70db5d54fafcc90

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5	827d18c810525d5b8323183f380801bf
SHA1	715a62e0c7613d47fae0759edf4c3c9fd3bc3fdc
SHA256	b1450f9486b4744fa1bf846635fe6b336a1071e42c066311f7b33f9e24f75fb0
SHA512	c1a6813cb63831151e6aee4291d5a1edc9e36b2a87a26706190fadd72d8334deb5d0ca41800dcce99fc1f1496a484afa7d1e9a4a44a7637f42af394584295517

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5	3b7d944d6cac9691382e2a4ef306cfe6
SHA1	5d7e839d392f0f25354d1daa0d8762788f454ce7
SHA256	802d72034142824b3d854833128fc332f27308c9189cc91fdfa8dd74285f2021
SHA512	3b36e28b6b35f30b3c00f9cc213a5dbeed59fccb3d0638e14af3696bef45e4577c4ef81a743053251219c430bcb0b32b5539e2f84bde5bc0582336fed81cedb9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5	9167a51ea2f07aac350467b629203de1
SHA1	fc7e27bbe3915b8e612705a5157249b55d2ae4de
SHA256	8e1f1722abaf271f395ed34301a131784e4e79ab7bf9d9f00165d17e6f820b60
SHA512	7f0dfbb1fd54a2893cbf8a46f41fc91347b50aaf0efee0b1eb4816558dc02cd3c37a083e88a1ba737e1dfbb5a975c39d4a71b6993b209990af89f7bf53ac9147

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5d8772.TMP

MD5	789d2dcde56dc20715d862a8ccba8fe0
SHA1	16adb10f5fe38c1a5149f79181900178a1e313f0
SHA256	601e09b941e54f31ceb15d694e6aa4a345d2e1bc41fb40318982252af53417d8
SHA512	70c6b43cdfc5fa209c1b64d53237c4b7f74425d8cde5e52cbf9e92ac610e4d038f2510eb600225251b73bcefe984745eb945bf5ed0b714440678cad99a8931d2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5	618cbed03089e4f9ea0db165dc8305d8
SHA1	e9292eced178bb0b2c38a3aef8dba27a12f2c46f
SHA256	31dd554b4bff92adfd444b90fe8d6dbae51cc74c642ef5b566dbc12e55c86aac
SHA512	fe68bec69103227c81d732dcd3c67508414590f91ed2fbaf19cce9dcda947fa6b6b9a34df6bbe987645cc5f37e5659a6fd31e350f8e34d79605c336de225ba0a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5	a72b53044bff9ff26aa3c68e9e8d25b4
SHA1	c7e6eb55700b73c51c4f508a5a4573ceffe06739
SHA256	065eb5270f6485c78a74e22258ee7a1a8dee6e2c9f49c979cb67dd464014da7b
SHA512	b49ae5e39a389c6b9a4f580a09e2a159481f98f022020807a7d777194766c4602ccacddb04998773939d9a8e56a2e1db637940ec38ac325e090a292ba7f074b5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5	b7be20615951454c3575141a9a131db6
SHA1	ed12f30ba7bcdc3fa95a30a93e81e39753752dd5
SHA256	559b12a79ae4f016b54e1a7e93fe3d3f88e60baab007c93289b1883a4f294841
SHA512	0fafa6d6716574357f21b35d91ed92da10f6e8781d62be431191c943af89f2c8c1331113c0a3f2bba052fe6ba7b52c05447a782f919c2593854cd7c25d0bbccd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5	81f4e22539aa14156dcd595dbd8873e5
SHA1	7c516de69948eefe93f670e2aabf1045982a618c
SHA256	5e2f78948882e06c478d31bd92fe62fb5ef6cdbab1089a41496feda9f3e513f8
SHA512	fbda56ed968bd18b5f97df1cb802f58ec571594da6359ecdb4640cbc25d9979f8492e576f6489cf451436ce60aa0331c9025092cc8eaea4d958b3bf3a0d7069e

memory/4304-1109-0x0000000000F80000-0x0000000001114000-memory.dmp

memory/4304-1110-0x0000000005AA0000-0x0000000005B06000-memory.dmp

memory/4304-1114-0x0000000006030000-0x00000000060C2000-memory.dmp

memory/4304-1115-0x00000000060C0000-0x00000000060E6000-memory.dmp

memory/4304-1116-0x0000000006110000-0x0000000006118000-memory.dmp

memory/4304-1117-0x0000000007010000-0x000000000701A000-memory.dmp

memory/4304-1118-0x0000000007020000-0x0000000007028000-memory.dmp

memory/4304-1119-0x0000000007040000-0x000000000705E000-memory.dmp

C:\Users\Admin\AppData\Local\e41167f87a379d1523ed750f4fabc17d\Admin@GYLQWJCN_en-US\Browsers\Google\History.txt

MD5	4d310176925b9b1bd33ce44020f56216
SHA1	0f2672893f6781faa3bbb5ec033f6942c486c838
SHA256	757ce5acc61ceef54c66eedfded33f62590dd18ffeaa133d9a3127e30e1f0c38
SHA512	cab71861a60f78608c3931b948238f2a78a253e23087285c3a2890e367b12bcefa5c46acededf6292374242d28ba35981c5a3b4a59acd6efcabe72ba248b5475

C:\Users\Admin\AppData\Local\Temp\tmp8B77.tmp.dat

MD5	1e7ff2f55fcdca068d8a14249bf6b240
SHA1	fc911040f5e10f19b43aeb6e898f708783b9fd9a
SHA256	5ccb62e4901597c78c5c68bdf15e063b3ec23a75e3581b3f1c7c465e590410c6
SHA512	27c822399b190507caeb2f6dee123387c207b881338f007f9a873af19f00ef64ab3509c0162434ab49b00f0f9874539b955b1ef0376e2a52518ef8e6912bbca1

C:\Users\Admin\AppData\Local\e41167f87a379d1523ed750f4fabc17d\Admin@GYLQWJCN_en-US\Browsers\Firefox\Bookmarks.txt

MD5	2e9d094dda5cdc3ce6519f75943a4ff4
SHA1	5d989b4ac8b699781681fe75ed9ef98191a5096c
SHA256	c84c98bbf5e0ef9c8d0708b5d60c5bb656b7d6be5135d7f7a8d25557e08cf142
SHA512	d1f7eed00959e902bdb2125b91721460d3ff99f3bdfc1f2a343d4f58e8d4e5e5a06c0c6cdc0379211c94510f7c00d7a8b34fa7d0ca0c3d54cbbe878f1e9812b7

C:\Users\Admin\AppData\Local\Temp\tmp8B76.tmp.dat

MD5	d5d4e1fd01bfe5bb21b498c705cb13d2
SHA1	df6da172e2e56a1af9b51b6d333b10167f998acd
SHA256	3268bfe2ea04f4d2ded5b9d874fae7e6d85d03c3d7965f461083e825a5afba10
SHA512	354918fd30d491430a8f2029303b045339123df80c473d53047046b035598f015d168989b1dff3e86bff2ea92538787b8ebb847f5539e9e751aab54776349023

memory/4304-1188-0x00000000075E0000-0x0000000007672000-memory.dmp

memory/4304-1193-0x0000000007D90000-0x0000000008334000-memory.dmp

memory/3152-1201-0x0000000000CB0000-0x0000000000E42000-memory.dmp

C:\Users\Admin\AppData\Local\e41167f87a379d1523ed750f4fabc17d\Admin@GYLQWJCN_en-US\System\Process.txt

MD5	865b0c2107f11137a7e9983b9b4b8899
SHA1	928a8deecf8d878161d139e2b5f756877bca4680
SHA256	1b231587d38b2b7e0e288c670866db8cc440c10d5168a44181fe9cfbe22ea6df
SHA512	7c96e0d211788e34cb0024dc366aee5b175577d2877842b45a73e31dcb41875c05d2213f1c712cc2ebd82f26773f0bf4247f5b6e17d956f940608294f116816e

C:\Users\Admin\AppData\Local\e41167f87a379d1523ed750f4fabc17d\Admin@GYLQWJCN_en-US\System\Apps.txt

MD5	1d97e7be3f0665fed49476ffc0370a92
SHA1	54cbde6d867536f4d675046b346644261963f7b6
SHA256	6508402f2646bd3416ffc547221c7bdf11b5ae2e7de2983081fa877135a2a404
SHA512	88d091776cbb877ca223827b4258728d571ae5bbc3546973f046be39fbe1194ae10bd4921e64614f9fc0acc9bd27a495864e703bce1138e75a805df888bc0146

memory/4304-1323-0x0000000007120000-0x000000000719A000-memory.dmp

C:\Users\Admin\AppData\Local\e41167f87a379d1523ed750f4fabc17d\Admin@GYLQWJCN_en-US\Browsers\Google\Downloads.txt

MD5	212c51ce3c4a716940f9036df648fc67
SHA1	a4d8ca7b6217b8a5a13c19adb1b5605ee144dd77
SHA256	66b6404d5de4caea3f5ae04e2d85b2b80c0cafcd60b3fe450f78deae2398f828
SHA512	b6adfa95079cf490532bfb435ed214290004e276f6efe2573ab1ed6623c80d163bd9fa9898e2919c23f7cf6808c8421e190a63639c646ec3520bef7fe66bd63f

C:\Users\Admin\AppData\Local\e41167f87a379d1523ed750f4fabc17d\Admin@GYLQWJCN_en-US\Directories\Startup.txt

MD5	68c93da4981d591704cea7b71cebfb97
SHA1	fd0f8d97463cd33892cc828b4ad04e03fc014fa6
SHA256	889ed51f9c16a4b989bda57957d3e132b1a9c117ee84e208207f2fa208a59483
SHA512	63455c726b55f2d4de87147a75ff04f2daa35278183969ccf185d23707840dd84363bec20d4e8c56252196ce555001ca0e61b3f4887d27577081fdef9e946402

C:\Users\Admin\AppData\Local\e41167f87a379d1523ed750f4fabc17d\Admin@GYLQWJCN_en-US\System\Debug.txt

MD5	e6ea18090d3ade4a90124cd42b7115d8
SHA1	610e487eb7775a337980fb8277a00aae465c3bef
SHA256	c67866bd001d824035f12286dd745dc009915e00916b1aa49223916f2452b753
SHA512	fa2c2142ab0974ae83c76def9afeaf1f97a19d0c420063a1a8ac40ae8efbe0a79cffa36bcd23a67b93652bca41c1def137479cbd018078c340deeb10f82a30ac

C:\Users\Admin\AppData\Local\e41167f87a379d1523ed750f4fabc17d\Admin@GYLQWJCN_en-US\System\ProductKey.txt

MD5	71eb5479298c7afc6d126fa04d2a9bde
SHA1	a9b3d5505cf9f84bb6c2be2acece53cb40075113
SHA256	f6cadfd4e4c25ff3b8cffe54a2af24a757a349abbf4e1142ec4c9789347fe8b3
SHA512	7c6687e21d31ec1d6d2eff04b07b465f875fd80df26677f1506b14158444cf55044eb6674880bd5bd44f04ff73023b26cb19b8837427a1d6655c96df52f140bd

C:\Users\Admin\AppData\Local\e41167f87a379d1523ed750f4fabc17d\Admin@GYLQWJCN_en-US\Directories\Videos.txt

MD5	1fddbf1169b6c75898b86e7e24bc7c1f
SHA1	d2091060cb5191ff70eb99c0088c182e80c20f8c
SHA256	a67aa329b7d878de61671e18cd2f4b011d11cbac67ea779818c6dafad2d70733
SHA512	20bfeafde7fec1753fef59de467bd4a3dd7fe627e8c44e95fe62b065a5768c4508e886ec5d898e911a28cf6365f455c9ab1ebe2386d17a76f53037f99061fd4d

C:\Users\Admin\AppData\Local\e41167f87a379d1523ed750f4fabc17d\Admin@GYLQWJCN_en-US\Directories\OneDrive.txt

MD5	966247eb3ee749e21597d73c4176bd52
SHA1	1e9e63c2872cef8f015d4b888eb9f81b00a35c79
SHA256	8ddfc481b1b6ae30815ecce8a73755862f24b3bb7fdebdbf099e037d53eb082e
SHA512	bd30aec68c070e86e3dec787ed26dd3d6b7d33d83e43cb2d50f9e2cff779fee4c96afbbe170443bd62874073a844beb29a69b10c72c54d7d444a8d86cfd7b5aa

memory/4304-1413-0x0000000007290000-0x0000000007342000-memory.dmp

memory/4304-1415-0x0000000007370000-0x0000000007392000-memory.dmp

memory/4304-1416-0x0000000008640000-0x0000000008994000-memory.dmp

C:\Users\Admin\AppData\Local\e41167f87a379d1523ed750f4fabc17d\msgid.dat

MD5	c64c6416b253355319a16f89984a1350
SHA1	83600910b958bf2d04c5af8d5c7a4a1b75075a83
SHA256	9d5d3d58e24b802d78d4670f4d6d16f4ea2885d04789af0f5ee2c456202f7b36
SHA512	ed7edcea06596639165f7f88f02b48d7232f185eb0eaf253bbf5a70093fa18c372b8cb56f125225ccec305389e176747ed4f7bebb6d1a78ccb46c4022aac2ea9

memory/4304-1428-0x0000000007B70000-0x0000000007B7A000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\1b6cccd6-5dd6-472b-9568-4272a9987036.tmp

MD5	5058f1af8388633f609cadb75a75dc9d
SHA1	3a52ce780950d4d969792a2559cd519d7ee8c727
SHA256	cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
SHA512	0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

C:\Users\Admin\AppData\Local\Temp\scoped_dir2204_2070705224\d66edb67-46a5-471b-8811-6908ab44bd4a.tmp

MD5	f8e609603d53c701422bbc4e026740c8
SHA1	5d08ba917111a8fce835be950477156720e57437
SHA256	aea99c066addc7157626d59326d8e5589402f6aac551a0560b92710ba68ded8a
SHA512	5cbdfc06d076665752b4a1aefd697f8af7dd2f673c2a65d363dde5e27e97451bbf6d6097c0b9003cccc886b1ec0cc3cd66be58c57076c181d2749249395462bc

C:\Users\Admin\AppData\Local\Temp\scoped_dir2204_2070705224\CRX_INSTALL\_locales\en_CA\messages.json

MD5	558659936250e03cc14b60ebf648aa09
SHA1	32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825
SHA256	2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
SHA512	1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.78.1_0\dasherSettingSchema.json

MD5	4ec1df2da46182103d2ffc3b92d20ca5
SHA1	fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA256	6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
SHA512	939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.78.1_0\_locales\en_CA\messages.json

MD5	07ffbe5f24ca348723ff8c6c488abfb8
SHA1	6dc2851e39b2ee38f88cf5c35a90171dbea5b690
SHA256	6895648577286002f1dc9c3366f558484eb7020d52bbf64a296406e61d09599c
SHA512	7ed2c8db851a84f614d5daf1d5fe633bd70301fd7ff8a6723430f05f642ceb3b1ad0a40de65b224661c782ffcec69d996ebe3e5bb6b2f478181e9a07d8cd41f6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5	b1a2631123ad80d5a3b89cca97419aac
SHA1	fe2f2f5eee3cff02b32de37feca075b6c38c942a
SHA256	47412bf81ab7a47d070f5b79c60528466c6d892fad8b3d9bfc2c26818b8d19c0
SHA512	125554217f91b45a19b3fc51c39a405bcb788cd86b04e9b862cc86b5e0a8520e63b76b8febfda4c4e7eaca418d3d31ee6d4056c9db44c2ce647f215a9a8e1352

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5	43c33e716404985c474168a671874588
SHA1	7c99c55359193004c5ced3f3a2009fe6d6d697d9
SHA256	a031765b45264baa9c27c285d3e96c99401ac4a97e844dc499894cdb65cccc7c
SHA512	a2945ff22b2ab39a9f468dd3aae0621a9c6c3be696b8c65388bd560dbfe3c53e9244a8f6531b2dc8af242263cd7facb81d30f561ba5bd10764be6b50fb677a7e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	11967906bd16b5a00257ccefbec16350
SHA1	411d4ba4b1b83622758518ff0b906f2b64a9e0c6
SHA256	34a301a794ec3b1df5fc3fa409bb76de08e705713d45a50dc65fac285faa00fb
SHA512	2fb49361b69da855061595aaab0f4ff530707860997afbf5bd2d732a62decd1ad3e41195209478d6a9c82cdc9e7ca54b7aa4748aea3776f1cf1e587ef0e7a03e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5	9f5f96a71506cc7dd7efa4df63e7feca
SHA1	03630842b533819027d65c84b1c44d4f7c2222a7
SHA256	c2947212639050cf5ead41f74a3098b9e7c59ee6c72d38d342fee6ce56c43314
SHA512	3e10a4b8efe1518803d88375f63882ed25a321c56b784de4330ba2880898b07227cf086d3839c2411aaa23251b7b4ed4cfa01837d1bbb6c13081153ef092f467

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

MD5	244354121af9e006f24c708b81177d62
SHA1	96503f2d7f526071d694f11d4f79d0708594a316
SHA256	538a5fbc53f2fdb2b1bbd38c79825061ea0375652550abc953affae3fa96b229
SHA512	edb59017af6a74ae3d9241131920a740ae0f7ecfe32ac0c9306a135bbc6038f062a862f8a44fff05e84b15176d4c418480a192a9611ba5e0330ed5c0995a9180

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	f4091bf8fafedef6a2f7b9ff55e2f07d
SHA1	23cd7af34081abcd447aa30b40bfcf65033225ec
SHA256	6000ce836c349e53fb1a6a61529437782cea04fc51a87698fad06dd42a71aeb8
SHA512	35d90eb6d841be2e3a3055e616d7a99cbb7241dbf331bd345bc216a3f799abb3981d240cf2d4a3296b11d65347182fac6f6ffaa374ebef331c8e09a17752604c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5	7003c97f0f718c1dce738c95b8d35b74
SHA1	8dcce9efd47a3af5b2ec8678487afb13e78de1f3
SHA256	23f0c8d01d0f16fce22d686918bdbb715cc9f2f86cdc4deaf9c290fd4b3f4229
SHA512	2c8581d7c3ca29d87921effd0798d3ebe5a0338f8494ff46cfeb596bfd60ae735f2ed3b8859d18245b0aef29a7c949217e080d10f8a082633bd244613f5e8b68

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5	49075e8cdfa76e4707558f0f1c71eb15
SHA1	f237c2451795409b6fdbda7b748ef2d8655126ac
SHA256	4e19a3be2a64bb03ce51d8dc81a7d41a86d38bae2e11f9dfa545a03520873b1e
SHA512	0a5bd681c6908fe35ec2eb922b0bb16212a7ef719eeece792f0aa459be4826e10752359acdd1a866d5cf684c396e1eaa6a42360fb8b290e6953660b4bd490985

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5	d269479fab55554d6bc808a7cfaab1f0
SHA1	9dabc3edaacc5fa7028ab7ab7841f00a952ad1b8
SHA256	b86b09f01179b4bd7a0fe664db643976c74e47eddc020b2fe893af1286bb6eca
SHA512	270216505dd77058c3ddc537823b88137a59b92cff2f02b9416201f9dc7e6590db4b1e695eaea4b3880a3db3ba7688499cbf9b2e9d3cf67f9011cd51c2c91258

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5	ca27475aa08dd34b2fbb2f27ae7e5336
SHA1	9386511e7a65e0885f5cbe25b2509dbbfd9cc653
SHA256	fe211df751d2a9fc8bf6c2fd07445bd8b74f265e113fe0728dcc73e599071064
SHA512	648cbc6fdce9d1ee846849986ca7bc74bbf71bdc0d9d6ed1e62d0e7a41e5e1f7b9ce12b309ac738d81671468d4696afb8ceeb0ebf75ee73056910e856fc5e0a8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5	e8f619b71eeddb2fbb557e7066f9bc41
SHA1	d4314339490f9a738a8c0b5e9f1a6ab9b7f6161f
SHA256	c8634e50a13cc4c8aa2b811877864da4a9b581df1f7a1d8f072869962b22f606
SHA512	bb47ca11524013ba5244edc708450d58bb8c58c6364db93944b277e6341c1ae436ebf3f80f31bdecec763282404dd7ce44c33366174fd2d84a3a015785d822ef

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5	d7f6659b8cb78ee1d077e77c237274b9
SHA1	188eb38d41563ca1434b97eec75aaffed93bfb8b
SHA256	4c2ea3951c60ac4548c89c43cafaf333bf4ef892f75719e47db447a179683afb
SHA512	0120113a69224badc61f2faa61d0e273a64e58efb119f63a3a75437ea227a50348cc5dfc71606c8c23df2164ed8eb29ed57d6ef092cbb96b44eb774a2fb7ac8a

C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

MD5	f3b25701fe362ec84616a93a45ce9998
SHA1	d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256	b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA512	98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	7c7cd294ab140efb8e24dfb6c958856e
SHA1	eb17048337a3faeca3a970ee66d25d8f7b0166a6
SHA256	a8b19758dd5ce39dd31d77a6a971e887ca5614eee5978266c6c6b09c6929f43d
SHA512	12f34a9762426978005212a76ec7b7c1cbd1765705279cb51b91fa8ff8081b0a775ca6527a4631105b097f4127e79da8a0c9e139d04c7c1456f38f875d4b1a4b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5	a9750aea2221366e9cd5f418c252ade9
SHA1	9f4f9908c0b0c25e1850d30cd536b0e4d8224525
SHA256	54e2aa9f23685062117839f2568047ff183aff1ab512979589c56795a61c54ea
SHA512	a928d6d95474a78d376af63c85177c2a6d7acc64c057a3d24b58398204cefc0783e6bc516125d6c94f8285e09e6f5e9ed8f3117f169d222ac326f53ec01a58a9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5	03cb01ac987d81c41ccbe12ce7c83c50
SHA1	46fca755628ac576672fea2ee66a0bb2c45e90e4
SHA256	245b6a8f91ffc09003aae6e25a68892d22669355fb23e41c464c03b607f0522a
SHA512	443478cb866768deab40dc22b10745db9150294d4f414422a13e057f653ff36bf613e7d4832cdffce82caf17c4a28b16563e535a4be7a46d23827dea0236ccb2

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG.old

MD5	ae682282c1f165bb0207313eabbd8eea
SHA1	5db0f3b97ead44ce4eb4a2b59bda2b47488bbc84
SHA256	bc4a5f58b34d2dbdb660496128d12bb5f1e38413e446d27a4b93dfeb1f9a0b1d
SHA512	64421a9ef27b0e0f73949543d622db7482efb1983aaf701f8145d6dbf5c0e64c6471554d6004946f3556784cd4617cbf7618986e5de1fc6a8df347618935df2a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5	45fb7ababf3de0a9e33f22da90febba4
SHA1	d95debca8338d56a4047b9493c1990060d0a7d49
SHA256	0df8122873dc00f8f65a4c3f2ac8b5e166b216febe95861e53eaa4f8212b4b7d
SHA512	0174476c6d6b25222dabee1657d04feaa39e234a93d315bf9a77fbe130120dbe57e433b55084b70a13fc2493628b538398aa94627ae0f1239ce3a26a5be0873f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5	288b44a13155fc4441959e10ed5e1edb
SHA1	f617242483b16512a9fdf85d6b4b80c313883fe5
SHA256	d27a86c483ccf478a0bbf76da58c5008e2681e6a569d3082e59ec3fcb9302e8b
SHA512	b256fd237f4d4b9504a3d78a78ef3fff06b17f1db35c5c13b917857d474b093bf181fc8d727a7b86aa96398c11825414bf4d38b57c5dd2189d731f3b35b7bde1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5	3ace3bfbe45789665da367529ba833ea
SHA1	95c13fd770a94480b303bd9768325f168635eb8e
SHA256	388608e3c27c38aef9d789e822c1669ba3d58a24af4c799c2b46090e93459805
SHA512	8783caefd3bfcca078aa680cd7d7975ee9e3f82d3d5f55627df37b9d3c1a456ddb0e55918539e0b9c30e2b60698cb7cba9212559a3f4b203e82294675ce4115d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5	ea671ae37c8f75cc2346f79f769e4471
SHA1	cea2d2b1c28d677a9b2a0b45b2f21326b2880253
SHA256	2148dc361828460544a641feef326ee9d689194969ed58808213e4018a994ba5
SHA512	e7df50aa762112697b4295d3f9b73427a6765f7ab8a788eb4904932c7fbfe753d93ecf3d707414fe63a930beff4a9bd4e62ff122a14c6b9ebf086f6e31b945b5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5	3daad73a0f6077e3e8e84230ade5593a
SHA1	d29343bbaa3f778396645b2288b0bce2a624c154
SHA256	4119a51818cb21400dbc1675b5d992ac0a01477bf7f1f2cd76aac90fe99b9bd7
SHA512	eb8a9321025a019d0947de19cade42ea2c3fd0669e0728a63c90de3cb0184521036ea8c393a6fdbd6be7d2b964a31c058950a430bfd441e1e007ac4fed3b8be5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5	c67dde22f7a09211aa48b575529b4e22
SHA1	9e1751edc36a137eaf6b3774010a3a7beba08cd2
SHA256	24a61063a7f40f65f76168a25c0031fa24234ae31dab2190cf81c3b626eb3622
SHA512	5cf1508288e326ba8cb4784045f93775ac107760bf7558719ada9b6d6805817cfb9de7a2b80c4638efc34bed67ec78e428c5552b838754a530267a9e8dfc54c7

Malware Analysis Report

2024-08-06 12:39

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

Threat Level: Known bad

Malicious Activity Summary

MITRE ATT&CK Matrix V13

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Sample ID	240703-k7mxrawbrh
Target	55club.in_12.txt
SHA256	8c56dd074eb31203e0a968ba4a82fd189a6401f33b88382aefab64714987a4b4
Tags	stealerium collection persistence privilege_escalation spyware stealer