Analysis Overview
Threat Level: Likely malicious
The file https://steamcommunity.com/market/listings/730/Gallery%20Case was found to be: Likely malicious.
Malicious Activity Summary
Downloads MZ/PE file
Detected potential entity reuse from brand STEAM.
Drops file in Windows directory
System Location Discovery: System Language Discovery
Browser Information Discovery
Modifies data under HKEY_USERS
Suspicious use of FindShellTrayWindow
Modifies registry class
Suspicious behavior: EnumeratesProcesses
Checks processor information in registry
NTFS ADS
Suspicious behavior: AddClipboardFormatListener
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
Suspicious use of SetWindowsHookEx
Suspicious use of WriteProcessMemory
Enumerates system info in registry
Suspicious use of SendNotifyMessage
Suspicious use of AdjustPrivilegeToken
MITRE ATT&CK
Enterprise Matrix V15
Analysis: static1
Detonation Overview
Reported
2024-11-13 20:35
Signatures
Analysis: behavioral1
Detonation Overview
Submitted
2024-11-13 20:35
Reported
2024-11-13 21:06
Platform
win11-20241007-en
Max time kernel
1658s
Max time network
1163s
Command Line
Signatures
Downloads MZ/PE file
Detected potential entity reuse from brand STEAM.
Drops file in Windows directory
| Description | Indicator | Process | Target |
| File opened for modification | C:\Windows\Panther\UnattendGC\setupact.log | C:\Windows\System32\oobe\UserOOBEBroker.exe | N/A |
| File opened for modification | C:\Windows\SystemTemp | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| File opened for modification | C:\Windows\SystemTemp\Crashpad\metadata | C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe | N/A |
| File opened for modification | C:\Windows\SystemTemp | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| File opened for modification | C:\Windows\SystemTemp | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| File opened for modification | C:\Windows\SystemTemp | C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe | N/A |
| File opened for modification | C:\Windows\SystemTemp\Crashpad\settings.dat | C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe | N/A |
| File opened for modification | C:\Windows\Panther\UnattendGC\setuperr.log | C:\Windows\System32\oobe\UserOOBEBroker.exe | N/A |
| File opened for modification | C:\Windows\Panther\UnattendGC\diagerr.xml | C:\Windows\System32\oobe\UserOOBEBroker.exe | N/A |
| File opened for modification | C:\Windows\Panther\UnattendGC\diagwrn.xml | C:\Windows\System32\oobe\UserOOBEBroker.exe | N/A |
| File opened for modification | C:\Windows\SystemTemp | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
Browser Information Discovery
System Location Discovery: System Language Discovery
| Description | Indicator | Process | Target |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe | N/A |
Checks processor information in registry
| Description | Indicator | Process | Target |
| Key opened | \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 | C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz | C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString | C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE | N/A |
Enumerates system info in registry
| Description | Indicator | Process | Target |
| Key opened | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| Key opened | \REGISTRY\MACHINE\Hardware\Description\System\BIOS | C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| Key opened | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| Key opened | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily | C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| Key opened | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU | C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE | N/A |
| Key opened | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
Modifies data under HKEY_USERS
| Description | Indicator | Process | Target |
| Key created | \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133760040925674138" | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry | C:\Program Files\Google\Chrome\Application\chrome.exe | N/A |
Modifies registry class
| Description | Indicator | Process | Target |
| Key created | \REGISTRY\USER\S-1-5-21-1537126222-899333903-2037027349-1000_Classes\Local Settings\MuiCache | C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe | N/A |
| Set value (str) | \REGISTRY\USER\S-1-5-21-1537126222-899333903-2037027349-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Settings\Cache\Content\CachePrefix | C:\Windows\system32\BackgroundTransferHost.exe | N/A |
| Set value (str) | \REGISTRY\USER\S-1-5-21-1537126222-899333903-2037027349-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:" | C:\Windows\system32\BackgroundTransferHost.exe | N/A |
| Set value (str) | \REGISTRY\USER\S-1-5-21-1537126222-899333903-2037027349-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Settings\Cache\History\CachePrefix = "Visited:" | C:\Windows\system32\BackgroundTransferHost.exe | N/A |
| Set value (str) | \REGISTRY\USER\S-1-5-21-1537126222-899333903-2037027349-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Settings\Cache\Content\CachePrefix | C:\Windows\system32\BackgroundTransferHost.exe | N/A |
| Set value (str) | \REGISTRY\USER\S-1-5-21-1537126222-899333903-2037027349-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:" | C:\Windows\system32\BackgroundTransferHost.exe | N/A |
| Set value (str) | \REGISTRY\USER\S-1-5-21-1537126222-899333903-2037027349-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Settings\Cache\History\CachePrefix = "Visited:" | C:\Windows\system32\BackgroundTransferHost.exe | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-1537126222-899333903-2037027349-1000_Classes\Local Settings\MuiCache | C:\Windows\system32\BackgroundTransferHost.exe | N/A |
NTFS ADS
| Description | Indicator | Process | Target |
| File opened for modification | C:\Users\Admin\Downloads\Unconfirmed 773180.crdownload:SmartScreen | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
Suspicious behavior: AddClipboardFormatListener
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE | N/A |
| N/A | N/A | C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE | N/A |
Suspicious behavior: EnumeratesProcesses
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
Suspicious use of AdjustPrivilegeToken
Suspicious use of FindShellTrayWindow
Suspicious use of SendNotifyMessage
Suspicious use of SetWindowsHookEx
Suspicious use of WriteProcessMemory
Processes
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://steamcommunity.com/market/listings/730/Gallery%20Case
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ff94dfa3cb8,0x7ff94dfa3cc8,0x7ff94dfa3cd8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1924,201498082546908336,7484506027554160770,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1940 /prefetch:2
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1924,201498082546908336,7484506027554160770,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2316 /prefetch:3
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1924,201498082546908336,7484506027554160770,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2880 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,201498082546908336,7484506027554160770,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3216 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,201498082546908336,7484506027554160770,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1924,201498082546908336,7484506027554160770,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4956 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1924,201498082546908336,7484506027554160770,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5544 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,201498082546908336,7484506027554160770,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5240 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,201498082546908336,7484506027554160770,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5212 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,201498082546908336,7484506027554160770,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2652 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,201498082546908336,7484506027554160770,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4176 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,201498082546908336,7484506027554160770,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1720 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,201498082546908336,7484506027554160770,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5908 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,201498082546908336,7484506027554160770,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3452 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1924,201498082546908336,7484506027554160770,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5960 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,201498082546908336,7484506027554160770,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5892 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1924,201498082546908336,7484506027554160770,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5880 /prefetch:1
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe
"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
C:\Windows\System32\oobe\UserOOBEBroker.exe
C:\Windows\System32\oobe\UserOOBEBroker.exe -Embedding
C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe
C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe -Embedding
C:\Windows\system32\BackgroundTransferHost.exe
"BackgroundTransferHost.exe" -ServerName:BackgroundTransferHost.13
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DisplayEnhancementService
C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe
C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\FileCoAuth.exe -Embedding
C:\Windows\system32\BackgroundTransferHost.exe
"BackgroundTransferHost.exe" -ServerName:BackgroundTransferHost.13
C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE
"C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff93533cc40,0x7ff93533cc4c,0x7ff93533cc58
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1796,i,15961086313749041802,15473439238975373991,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=1792 /prefetch:2
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2120,i,15961086313749041802,15473439238975373991,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2124 /prefetch:3
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2196,i,15961086313749041802,15473439238975373991,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2152 /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3116,i,15961086313749041802,15473439238975373991,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3280 /prefetch:1
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3212,i,15961086313749041802,15473439238975373991,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3408 /prefetch:1
C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4496,i,15961086313749041802,15473439238975373991,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3600 /prefetch:1
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4640,i,15961086313749041802,15473439238975373991,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4796 /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4820,i,15961086313749041802,15473439238975373991,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4612 /prefetch:8
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4628,i,15961086313749041802,15473439238975373991,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4624 /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=3756,i,15961086313749041802,15473439238975373991,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4808 /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4900,i,15961086313749041802,15473439238975373991,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4796 /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4728,i,15961086313749041802,15473439238975373991,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5196 /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=5208,i,15961086313749041802,15473439238975373991,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5284 /prefetch:2
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=4892,i,15961086313749041802,15473439238975373991,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4956 /prefetch:1
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x88,0x100,0x104,0xdc,0x108,0x7ff93533cc40,0x7ff93533cc4c,0x7ff93533cc58
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1816,i,8935806923097635214,4505578745112328758,262144 --variations-seed-version=20241113-050113.727000 --mojo-platform-channel-handle=1812 /prefetch:2
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2044,i,8935806923097635214,4505578745112328758,262144 --variations-seed-version=20241113-050113.727000 --mojo-platform-channel-handle=2104 /prefetch:3
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2184,i,8935806923097635214,4505578745112328758,262144 --variations-seed-version=20241113-050113.727000 --mojo-platform-channel-handle=2200 /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3096,i,8935806923097635214,4505578745112328758,262144 --variations-seed-version=20241113-050113.727000 --mojo-platform-channel-handle=3264 /prefetch:1
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3104,i,8935806923097635214,4505578745112328758,262144 --variations-seed-version=20241113-050113.727000 --mojo-platform-channel-handle=3308 /prefetch:1
C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=3100,i,8935806923097635214,4505578745112328758,262144 --variations-seed-version=20241113-050113.727000 --mojo-platform-channel-handle=3664 /prefetch:1
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4728,i,8935806923097635214,4505578745112328758,262144 --variations-seed-version=20241113-050113.727000 --mojo-platform-channel-handle=4756 /prefetch:8
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4836,i,8935806923097635214,4505578745112328758,262144 --variations-seed-version=20241113-050113.727000 --mojo-platform-channel-handle=4904 /prefetch:8
C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE
"C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff93533cc40,0x7ff93533cc4c,0x7ff93533cc58
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1920,i,8238642744497265100,12675832887283347936,262144 --variations-seed-version=20241113-050113.727000 --mojo-platform-channel-handle=1916 /prefetch:2
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1820,i,8238642744497265100,12675832887283347936,262144 --variations-seed-version=20241113-050113.727000 --mojo-platform-channel-handle=2064 /prefetch:3
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2140,i,8238642744497265100,12675832887283347936,262144 --variations-seed-version=20241113-050113.727000 --mojo-platform-channel-handle=2208 /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3088,i,8238642744497265100,12675832887283347936,262144 --variations-seed-version=20241113-050113.727000 --mojo-platform-channel-handle=3228 /prefetch:1
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3140,i,8238642744497265100,12675832887283347936,262144 --variations-seed-version=20241113-050113.727000 --mojo-platform-channel-handle=3260 /prefetch:1
C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=3632,i,8238642744497265100,12675832887283347936,262144 --variations-seed-version=20241113-050113.727000 --mojo-platform-channel-handle=3076 /prefetch:1
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4816,i,8238642744497265100,12675832887283347936,262144 --variations-seed-version=20241113-050113.727000 --mojo-platform-channel-handle=4824 /prefetch:8
C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe
"C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe" --reenable-autoupdates --system-level
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4984,i,8238642744497265100,12675832887283347936,262144 --variations-seed-version=20241113-050113.727000 --mojo-platform-channel-handle=4856 /prefetch:8
C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe
"C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\Crashpad --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x244,0x248,0x24c,0x220,0x250,0x7ff75beb4698,0x7ff75beb46a4,0x7ff75beb46b0
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=4464,i,8238642744497265100,12675832887283347936,262144 --variations-seed-version=20241113-050113.727000 --mojo-platform-channel-handle=5148 /prefetch:1
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=5140,i,8238642744497265100,12675832887283347936,262144 --variations-seed-version=20241113-050113.727000 --mojo-platform-channel-handle=3380 /prefetch:1
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=3240,i,8238642744497265100,12675832887283347936,262144 --variations-seed-version=20241113-050113.727000 --mojo-platform-channel-handle=3316 /prefetch:1
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ff93533cc40,0x7ff93533cc4c,0x7ff93533cc58
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1848,i,18398777501312288917,6137687902909650907,262144 --variations-seed-version=20241113-050113.727000 --mojo-platform-channel-handle=1844 /prefetch:2
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1912,i,18398777501312288917,6137687902909650907,262144 --variations-seed-version=20241113-050113.727000 --mojo-platform-channel-handle=1924 /prefetch:3
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2200,i,18398777501312288917,6137687902909650907,262144 --variations-seed-version=20241113-050113.727000 --mojo-platform-channel-handle=2208 /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3080,i,18398777501312288917,6137687902909650907,262144 --variations-seed-version=20241113-050113.727000 --mojo-platform-channel-handle=3108 /prefetch:1
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3096,i,18398777501312288917,6137687902909650907,262144 --variations-seed-version=20241113-050113.727000 --mojo-platform-channel-handle=3272 /prefetch:1
C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4448,i,18398777501312288917,6137687902909650907,262144 --variations-seed-version=20241113-050113.727000 --mojo-platform-channel-handle=4472 /prefetch:1
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4720,i,18398777501312288917,6137687902909650907,262144 --variations-seed-version=20241113-050113.727000 --mojo-platform-channel-handle=4768 /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4980,i,18398777501312288917,6137687902909650907,262144 --variations-seed-version=20241113-050113.727000 --mojo-platform-channel-handle=4984 /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=4640,i,18398777501312288917,6137687902909650907,262144 --variations-seed-version=20241113-050113.727000 --mojo-platform-channel-handle=4380 /prefetch:1
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | steamcommunity.com | udp |
| US | 8.8.8.8:53 | steamcommunity.com | udp |
| GB | 104.124.170.33:443 | steamcommunity.com | tcp |
| GB | 104.124.170.33:443 | steamcommunity.com | tcp |
| US | 8.8.8.8:53 | 8.8.8.8.in-addr.arpa | udp |
| US | 151.101.3.52:443 | cdn.fastly.steamstatic.com | tcp |
| US | 151.101.3.52:443 | cdn.fastly.steamstatic.com | tcp |
| US | 151.101.3.52:443 | cdn.fastly.steamstatic.com | tcp |
| US | 151.101.3.52:443 | cdn.fastly.steamstatic.com | tcp |
| US | 151.101.3.52:443 | cdn.fastly.steamstatic.com | tcp |
| US | 151.101.3.52:443 | cdn.fastly.steamstatic.com | tcp |
| US | 151.101.3.52:443 | cdn.fastly.steamstatic.com | tcp |
| US | 151.101.3.52:443 | cdn.fastly.steamstatic.com | tcp |
| US | 151.101.3.52:443 | cdn.fastly.steamstatic.com | tcp |
| N/A | 224.0.0.251:5353 | udp | |
| GB | 95.100.245.51:443 | store.steampowered.com | tcp |
| GB | 95.100.245.51:443 | store.steampowered.com | tcp |
| US | 151.101.3.52:443 | cdn.fastly.steamstatic.com | tcp |
| US | 151.101.3.52:443 | cdn.fastly.steamstatic.com | tcp |
| US | 151.101.3.52:443 | cdn.fastly.steamstatic.com | tcp |
| US | 151.101.3.52:443 | cdn.fastly.steamstatic.com | tcp |
| US | 151.101.3.52:443 | cdn.fastly.steamstatic.com | tcp |
| US | 151.101.3.52:443 | cdn.fastly.steamstatic.com | tcp |
| US | 151.101.131.52:443 | cdn.fastly.steamstatic.com | tcp |
| US | 151.101.131.52:443 | cdn.fastly.steamstatic.com | tcp |
| US | 151.101.131.52:443 | cdn.fastly.steamstatic.com | tcp |
| US | 151.101.131.52:443 | cdn.fastly.steamstatic.com | tcp |
| US | 151.101.131.52:443 | cdn.fastly.steamstatic.com | tcp |
| US | 151.101.131.52:443 | cdn.fastly.steamstatic.com | tcp |
| US | 151.101.3.52:443 | cdn.fastly.steamstatic.com | tcp |
| GB | 2.18.66.64:443 | tcp | |
| GB | 95.101.143.195:443 | r.bing.com | tcp |
| GB | 95.101.143.195:443 | r.bing.com | tcp |
| GB | 95.101.143.195:443 | r.bing.com | tcp |
| GB | 95.101.143.195:443 | r.bing.com | tcp |
| GB | 95.101.143.195:443 | r.bing.com | tcp |
| GB | 95.101.143.195:443 | r.bing.com | tcp |
| US | 20.42.73.24:443 | browser.pipe.aria.microsoft.com | tcp |
| GB | 23.218.72.229:443 | cxcs.microsoft.net | tcp |
| GB | 88.221.135.11:443 | www.bing.com | tcp |
| GB | 2.18.66.64:443 | tcp | |
| US | 4.150.240.254:443 | arm-ring.msedge.net | tcp |
| US | 131.253.33.254:443 | a-ring-fallback.msedge.net | tcp |
| GB | 88.221.135.25:443 | www.bing.com | tcp |
| AU | 20.37.4.118:443 | 4473cea8d738797cd9b6a8f27eacd574.azr.footprintdns.com | tcp |
| NL | 52.109.89.19:443 | roaming.officeapps.live.com | tcp |
| GB | 92.123.26.202:443 | metadata.templates.cdn.office.net | tcp |
| GB | 2.19.252.136:443 | binaries.templates.cdn.office.net | tcp |
| GB | 2.19.252.136:443 | binaries.templates.cdn.office.net | tcp |
| GB | 2.19.252.136:443 | binaries.templates.cdn.office.net | tcp |
| GB | 2.19.252.136:443 | binaries.templates.cdn.office.net | tcp |
| GB | 2.19.252.136:443 | binaries.templates.cdn.office.net | tcp |
| GB | 2.19.252.136:443 | binaries.templates.cdn.office.net | tcp |
| GB | 2.19.252.136:443 | binaries.templates.cdn.office.net | tcp |
| GB | 2.19.252.136:443 | binaries.templates.cdn.office.net | tcp |
| GB | 2.19.252.136:443 | binaries.templates.cdn.office.net | tcp |
| GB | 2.19.252.136:443 | binaries.templates.cdn.office.net | tcp |
| GB | 2.19.252.136:443 | binaries.templates.cdn.office.net | tcp |
| GB | 2.19.252.136:443 | binaries.templates.cdn.office.net | tcp |
| GB | 2.19.252.136:443 | binaries.templates.cdn.office.net | tcp |
| GB | 2.19.252.136:443 | binaries.templates.cdn.office.net | tcp |
| GB | 2.19.252.136:443 | binaries.templates.cdn.office.net | tcp |
| GB | 2.19.252.136:443 | binaries.templates.cdn.office.net | tcp |
| GB | 2.19.252.136:443 | binaries.templates.cdn.office.net | tcp |
| GB | 2.19.252.136:443 | binaries.templates.cdn.office.net | tcp |
| GB | 2.19.252.136:443 | binaries.templates.cdn.office.net | tcp |
| GB | 2.19.252.136:443 | binaries.templates.cdn.office.net | tcp |
| GB | 2.19.252.136:443 | binaries.templates.cdn.office.net | tcp |
| GB | 2.19.252.136:443 | binaries.templates.cdn.office.net | tcp |
| GB | 2.19.252.136:443 | binaries.templates.cdn.office.net | tcp |
| GB | 2.19.252.136:443 | binaries.templates.cdn.office.net | tcp |
| GB | 2.19.252.136:443 | binaries.templates.cdn.office.net | tcp |
| GB | 2.19.252.136:443 | binaries.templates.cdn.office.net | tcp |
| GB | 2.19.252.136:443 | binaries.templates.cdn.office.net | tcp |
| GB | 2.19.252.136:443 | binaries.templates.cdn.office.net | tcp |
| GB | 2.19.252.136:443 | binaries.templates.cdn.office.net | tcp |
| GB | 2.19.252.136:443 | binaries.templates.cdn.office.net | tcp |
| GB | 2.19.252.136:443 | binaries.templates.cdn.office.net | tcp |
| GB | 2.19.252.136:443 | binaries.templates.cdn.office.net | tcp |
| GB | 2.19.252.136:443 | binaries.templates.cdn.office.net | tcp |
| GB | 2.19.252.136:443 | binaries.templates.cdn.office.net | tcp |
| GB | 2.19.252.136:443 | binaries.templates.cdn.office.net | tcp |
| GB | 2.19.252.136:443 | binaries.templates.cdn.office.net | tcp |
| GB | 2.19.252.136:443 | binaries.templates.cdn.office.net | tcp |
| US | 8.8.8.8:53 | www.google.com | udp |
| GB | 216.58.201.100:443 | www.google.com | tcp |
| GB | 216.58.201.100:443 | www.google.com | udp |
| US | 8.8.8.8:53 | 100.201.58.216.in-addr.arpa | udp |
| GB | 216.58.204.78:443 | clients2.google.com | tcp |
| GB | 142.250.179.225:443 | clients2.googleusercontent.com | tcp |
| GB | 216.58.201.100:443 | www.google.com | udp |
| GB | 216.58.201.100:443 | www.google.com | tcp |
| GB | 216.58.204.78:443 | clients2.google.com | udp |
| AU | 20.37.4.118:443 | 8940c68b8725aa6ac92703a3aeb0ddeb.azr.footprintdns.com | tcp |
| GB | 2.18.66.64:443 | tcp | |
| US | 13.107.246.254:443 | t-ring-s.msedge.net | tcp |
| US | 13.107.246.64:443 | fp-afd-nocache-ccp.azureedge.net | tcp |
| US | 20.42.73.24:443 | browser.pipe.aria.microsoft.com | tcp |
| AU | 20.37.4.118:443 | 8940c68b8725aa6ac92703a3aeb0ddeb.azr.footprintdns.com | tcp |
| US | 8.8.8.8:53 | 64.246.107.13.in-addr.arpa | udp |
| GB | 95.101.143.195:443 | r.bing.com | tcp |
| GB | 95.101.143.195:443 | r.bing.com | tcp |
| GB | 216.58.201.100:443 | www.google.com | udp |
| GB | 216.58.201.100:443 | www.google.com | tcp |
| GB | 216.58.204.78:443 | clients2.google.com | udp |
| GB | 216.58.204.78:443 | clients2.google.com | tcp |
| US | 104.18.143.9:443 | poki.com | tcp |
| US | 104.18.143.9:443 | poki.com | tcp |
| US | 104.18.34.147:443 | a.poki-cdn.com | tcp |
| US | 104.18.34.147:443 | a.poki-cdn.com | tcp |
| US | 104.18.34.147:443 | a.poki-cdn.com | tcp |
| US | 104.18.34.147:443 | a.poki-cdn.com | tcp |
| US | 104.18.34.147:443 | a.poki-cdn.com | tcp |
| US | 104.18.34.147:443 | a.poki-cdn.com | tcp |
| US | 172.64.153.109:443 | a.poki-cdn.com | tcp |
| US | 172.64.153.109:443 | a.poki-cdn.com | tcp |
| US | 172.64.153.109:443 | a.poki-cdn.com | udp |
| US | 104.18.34.147:443 | a.poki-cdn.com | udp |
| US | 104.18.34.147:443 | a.poki-cdn.com | udp |
| US | 8.8.8.8:53 | 109.153.64.172.in-addr.arpa | udp |
| US | 34.120.56.101:443 | t.poki.io | tcp |
| US | 34.120.56.101:443 | t.poki.io | tcp |
| US | 104.18.143.9:443 | poki.com | udp |
| US | 34.120.56.101:443 | t.poki.io | udp |
| GB | 216.58.201.100:443 | www.google.com | udp |
| GB | 216.58.201.100:443 | www.google.com | tcp |
| GB | 216.58.204.78:443 | clients2.google.com | udp |
| GB | 216.58.204.78:443 | clients2.google.com | tcp |
| DE | 142.250.184.227:443 | beacons.gcp.gvt2.com | tcp |
| DE | 142.250.184.227:443 | beacons.gcp.gvt2.com | tcp |
| GB | 216.58.201.100:443 | www.google.com | udp |
| GB | 216.58.201.100:443 | www.google.com | udp |
| DE | 142.250.184.227:443 | beacons.gcp.gvt2.com | udp |
| GB | 2.18.66.64:443 | tcp | |
| GB | 2.18.66.64:443 | tcp | |
| GB | 2.18.66.64:443 | tcp |
Files
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
| MD5 | f1d2c7fd2ca29bb77a5da2d1847fbb92 |
| SHA1 | 840de2cf36c22ba10ac96f90890b6a12a56526c6 |
| SHA256 | 58d0f80310f4a84f687c5ce0adaa982eb42fe4480510399fa2ae975d40bb8bc5 |
| SHA512 | ede1fafea2404f16948fe0b5ea5161ccee3ee6e40c55ff98c337eac981a6776b9c73dc030a5c59e4347aec91259f497539206e71949c33adcecbf2c846709e14 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
| MD5 | 4c1a24fa898d2a98b540b20272c8e47b |
| SHA1 | 3218bff9ce95b52842fa1b8bd00be073177141ef |
| SHA256 | bbcc378fcbf64580e7a48b4e7ca9be57fa0a1f2e747f488325685bdb18d73a95 |
| SHA512 | e61f196e7f1c9a5fe249abe9b11eea770fb2f4babc61f60b12c71f43e6fe9354cf14869daf46abc2c2655bce180252acd43c10562a2dcd31fa7d90d33253820e |
\??\pipe\LOCAL\crashpad_4520_MHSSSAUBIEFJYCBK
| MD5 | d41d8cd98f00b204e9800998ecf8427e |
| SHA1 | da39a3ee5e6b4b0d3255bfef95601890afd80709 |
| SHA256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 |
| SHA512 | cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 84ecc3647d692c472c0f205adc5a7e66 |
| SHA1 | 0ef1bc10487380f0ed4d1e154902ac3710a6d30c |
| SHA256 | aa034b57c8bb6472eafe890d13ed488cde8374bb7e4b954fd937b80e7774babe |
| SHA512 | 7b941759773c7c042393fd3d879f67d784b1a96f42a94ce40d28abb7b32a9a5422a322ef32de40ccd3f19e1ae19cc137e231aa2d46bc68c5bf75c62045591c04 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
| MD5 | ef7feb8012912d140afa5f5b8739ce9b |
| SHA1 | dfc3474f04d910c5165495853ee73d0e5959b50d |
| SHA256 | 29c429f45741fd60f41cf8fcaecc71e909a5e8a27a4105089656fea69fef8d8f |
| SHA512 | 3d072adfac22a2564d153dcbb8a19148bb40359763cca82b6c363cfb263f52fee261671b4a0e2ae7425fa3cd12d4e0de0e3cadfaa36341b5fb63604e07556e98 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
| MD5 | 46295cac801e5d4857d09837238a6394 |
| SHA1 | 44e0fa1b517dbf802b18faf0785eeea6ac51594b |
| SHA256 | 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443 |
| SHA512 | 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
| MD5 | 206702161f94c5cd39fadd03f4014d98 |
| SHA1 | bd8bfc144fb5326d21bd1531523d9fb50e1b600a |
| SHA256 | 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167 |
| SHA512 | 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | dac3fbe07fbaea143d75145ef33b509f |
| SHA1 | d0dbd9b435fb6ab9fcbe53445c817111ed8f3fd9 |
| SHA256 | b080bc67e6fb7afbd0d7ebdfe8299e2604876612f50fb305af2080b168ff2687 |
| SHA512 | 2e48cc5b969d0fa985e884a980c219b16fd39241181116bc8c99b5988b6158c54d73aef6e111a1be9eec4247698485ad7645585e7147fdfdd37e8214bcd598db |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
| MD5 | a024ce7b0ad49b5f25687b6d8dae6c0a |
| SHA1 | e0c7bf11a8dc05a64c90a64e78cb3d6e46d000bf |
| SHA256 | 5d2c284854f2713835e4e11089cfa5668ea1cbe17c38d55cda47d855158a5bb1 |
| SHA512 | 543989483069e311c90fa0acbf847e39750f29fefd8f85fcd56bc067217e31515b75a0c9bd5d806b3e208f6e4adc721bf6389bb15ffd340232eb8907aaa9ffe7 |
C:\Users\Admin\Downloads\Unconfirmed 773180.crdownload
| MD5 | 1b54b70beef8eb240db31718e8f7eb5d |
| SHA1 | da5995070737ec655824c92622333c489eb6bce4 |
| SHA256 | 7d3654531c32d941b8cae81c4137fc542172bfa9635f169cb392f245a0a12bcb |
| SHA512 | fda935694d0652dab3f1017faaf95781a300b420739e0f9d46b53ce07d592a4cfa536524989e2fc9f83602d315259817638a89c4e27da709aada5d1360b717eb |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 9d66545da0cfbf5de23740c154d40cf9 |
| SHA1 | 119ea2cfddb781c0c035546cddf6f67ae296ce34 |
| SHA256 | e027e1bfbed7dc963feb6437d0e157ee357e98ef96783095dce37633ec30ea42 |
| SHA512 | c43ed67aea700c1cdebf4e8ef89726ba254616a9296a2ad69ea3584e20eda707e84f667e7558c80004f461c8d7da6a698395e5036b7b07e5447b5ef1a039bd16 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
| MD5 | 0917d681f6538748277588ccd2fe033b |
| SHA1 | 0902b72972473f82d5051b2cc00f57365aa9090b |
| SHA256 | 09bc9de2d7b38d167c2de602663b87914595fba155b011c71af7533b8ece0c80 |
| SHA512 | 95138d200c3736b28186e9d441503e09ee7038f0fcdd7e78faa669cef45ef2d9b3249e56556eed265c56a61af160aff917c00f9a5b5b46c0bd54f0219fba654f |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
| MD5 | 381e107e4bebe525799d635efca209da |
| SHA1 | cbcd68d2f1806d7eb7b792911b1acf9572435773 |
| SHA256 | 93bb6b16af80bf4203223f29e95eb2e3a1b17516c236addb56c1bd9b1e858705 |
| SHA512 | 3dce4162ed4eeb292df6d68eb7859ab976abe3b0e553646b4e1e930d8ad9d84be5bd47d8ecd4a9ecde5e7407990403a049cab27aa481463592a2b4b03ac70ba0 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
| MD5 | ea58bc65348f1d7f79ab5440a55e14c3 |
| SHA1 | 092b7d3a4f5c20fef7102fa66ef7386742b5a218 |
| SHA256 | 38d548600cee2f9535fb032143a78d63f3263ec5c66fe44421f3235b4b4775e0 |
| SHA512 | a509c8e1d152ea396b3a030b44be2650fd61560b2c5c2898042e152e9f63f80e658b346bca7b1c4cbd10d179f0beef9fa514e18936be970e29bc8aab3b50a323 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | b848b65c57594312e00505e37e2e194f |
| SHA1 | 7a58024e91520a200d838994bc5550a97b0f970e |
| SHA256 | d1943a7ac6aeacef35df6c95a78a65f32f367a0a12aa5f84edd68981c1d923b2 |
| SHA512 | 9f8e35a95ec3be0f44fde3fccf1eadaf86eff7a605a2b1e3ebe006f74cf237037f5f7115a3b3143ae6baa04ff05301e3494966a18410526812b3030a9ecc622d |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
| MD5 | 1329d60e254ed6ebf814bf7478bc3a10 |
| SHA1 | dfa0b787d58baf9e4398828a57c95937df6dea08 |
| SHA256 | f8a1db149da746b22e0361eac358eca88cf1c578a05f5845a85f6542e292cfa3 |
| SHA512 | e069838bf3b770e7ce64381f99b060c0cb21d6eda40c8481f0127cc8b175042983f1837629a66e2ad952950df71766ff3f293e90ca515745cd13191bc781d502 |
C:\Users\Admin\AppData\Local\Microsoft\OneDrive\logs\Common\FileCoAuth-2024-11-13.2038.4880.1.aodl
| MD5 | 0bce78d0e8cc7562c3d47bbed839c7cc |
| SHA1 | b85ffe02ff433e244018ddd661353f0906427b98 |
| SHA256 | 4e7e2322ceb684fe0a7ccb888e79d202bc46f2a60f324879fee979e363e6ea06 |
| SHA512 | ddce5d5dbf375f804e255f3034983073dbfb73d154bcb42438d3ab7a013dd889fa1af8ef8cafed97659a3f6da6d9fd6bba491b9a9a0f1b65b87b597c25a88e31 |
C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\BackgroundTransferApi\e6d7e91f-36bf-4aef-a86b-581b5003dc3d.down_data
| MD5 | 5683c0028832cae4ef93ca39c8ac5029 |
| SHA1 | 248755e4e1db552e0b6f8651b04ca6d1b31a86fb |
| SHA256 | 855abd360d8a8d6974eba92b70cbd09ce519bc8773439993f9ab37cb6847309e |
| SHA512 | aba434bd29be191c823b02ea9b639beb10647bbe7759bbffdaa790dfb1ec2c58d74c525ef11aacda209e4effe322d1d3a07b115446c8914b07a3bce4d8a0e2c3 |
memory/1168-440-0x00007FF91D110000-0x00007FF91D120000-memory.dmp
memory/1168-438-0x00007FF91D110000-0x00007FF91D120000-memory.dmp
memory/1168-439-0x00007FF91D110000-0x00007FF91D120000-memory.dmp
memory/1168-441-0x00007FF91D110000-0x00007FF91D120000-memory.dmp
memory/1168-442-0x00007FF91D110000-0x00007FF91D120000-memory.dmp
memory/1168-443-0x00007FF91A7F0000-0x00007FF91A800000-memory.dmp
memory/1168-444-0x00007FF91A7F0000-0x00007FF91A800000-memory.dmp
C:\Users\Admin\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC
| MD5 | d29962abc88624befc0135579ae485ec |
| SHA1 | e40a6458296ec6a2427bcb280572d023a9862b31 |
| SHA256 | a91a702aab9b8dd722843d3d208a21bcfa6556dfc64e2ded63975de4511eb866 |
| SHA512 | 4311e87d8d5559248d4174908817a4ddc917bf7378114435cf12da8ccb7a1542c851812afbaf7dc106771bdb2e2d05f52e7d0c50d110fc7fffe4395592492c2f |
C:\Users\Admin\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851218[[fn=gb]].xsl
| MD5 | 51d32ee5bc7ab811041f799652d26e04 |
| SHA1 | 412193006aa3ef19e0a57e16acf86b830993024a |
| SHA256 | 6230814bf5b2d554397580613e20681752240ab87fd354ececf188c1eabe0e97 |
| SHA512 | 5fc5d889b0c8e5ef464b76f0c4c9e61bda59b2d1205ac9417cc74d6e9f989fb73d78b4eb3044a1a1e1f2c00ce1ca1bd6d4d07eeadc4108c7b124867711c31810 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
| MD5 | d751713988987e9331980363e24189ce |
| SHA1 | 97d170e1550eee4afc0af065b78cda302a97674c |
| SHA256 | 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945 |
| SHA512 | b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af |
C:\Users\Admin\AppData\Local\Temp\f7d57477-d86a-4b78-bf96-a589693ca6ab.tmp
| MD5 | 5058f1af8388633f609cadb75a75dc9d |
| SHA1 | 3a52ce780950d4d969792a2559cd519d7ee8c727 |
| SHA256 | cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8 |
| SHA512 | 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21 |
C:\Users\Admin\AppData\Local\Temp\scoped_dir2080_263477907\fe48601f-4f72-46cc-8615-dd19d25ff66c.tmp
| MD5 | da75bb05d10acc967eecaac040d3d733 |
| SHA1 | 95c08e067df713af8992db113f7e9aec84f17181 |
| SHA256 | 33ae9b8f06dc777bb1a65a6ba6c3f2a01b25cd1afc291426b46d1df27ea6e7e2 |
| SHA512 | 56533de53872f023809a20d1ea8532cdc2260d40b05c5a7012c8e61576ff092f006a197f759c92c6b8c429eeec4bb542073b491ddcfd5b22cd4ecbe1a8a7c6ef |
C:\Users\Admin\AppData\Local\Temp\scoped_dir2080_263477907\CRX_INSTALL\_locales\en_CA\messages.json
| MD5 | 558659936250e03cc14b60ebf648aa09 |
| SHA1 | 32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825 |
| SHA256 | 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b |
| SHA512 | 1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.83.1_0\_locales\en_CA\messages.json
| MD5 | 07ffbe5f24ca348723ff8c6c488abfb8 |
| SHA1 | 6dc2851e39b2ee38f88cf5c35a90171dbea5b690 |
| SHA256 | 6895648577286002f1dc9c3366f558484eb7020d52bbf64a296406e61d09599c |
| SHA512 | 7ed2c8db851a84f614d5daf1d5fe633bd70301fd7ff8a6723430f05f642ceb3b1ad0a40de65b224661c782ffcec69d996ebe3e5bb6b2f478181e9a07d8cd41f6 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.83.1_0\dasherSettingSchema.json
| MD5 | 4ec1df2da46182103d2ffc3b92d20ca5 |
| SHA1 | fb9d1ba3710cf31a87165317c6edc110e98994ce |
| SHA256 | 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6 |
| SHA512 | 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
| MD5 | 349b06be97b06e7a0aacbe129d072995 |
| SHA1 | 5f03659d3b8c503c28a9dde0d76d474e35d281a5 |
| SHA256 | 09ae157f747e078496a46871a0bce72b03b249851068cf06fa332e964c0f582b |
| SHA512 | defe3a9e807a5ca4b16f4ca86f47e87327df188ba8bd676347c21735e4bae46872498771b303c609640bf8e781cbe587a1600c742b48bf55484e984aa48a7caa |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
| MD5 | 68c1295e7acc961d776a8f67a77dcb02 |
| SHA1 | 7846ce58c0dec204e70c9e162e660b2748c9a23a |
| SHA256 | 821b8b6a71832cb05cd3b1f3c190a50fed42fc0b5a5ae621884ab902eb9c23c6 |
| SHA512 | 4123b13762c7cfed41568ec70c8a9b55c6433501041cef1f9114542d355e816c61b9f35db51aae23388a62afa87baf767d04a8c567866e898124204e0763f068 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
| MD5 | cd16b16efc90062d5acfba3c440989ef |
| SHA1 | d6b10b83669e3bb6a8991fa9dedc79db31cb9b52 |
| SHA256 | 24f0b70c37201c0cdab0de4a9d6c73c15ded6781d5f63e4932e5bec392cb70d2 |
| SHA512 | 1a2a32016501e22e620bf04d3543ac33f1e055a173a80323da56f12a0bff4d1c7082cf20b1088b0431c5e78acd2a6f93b981c35d0536e6759a274f4e0252c6c9 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000005
| MD5 | e579aca9a74ae76669750d8879e16bf3 |
| SHA1 | 0b8f462b46ec2b2dbaa728bea79d611411bae752 |
| SHA256 | 6e51c7866705bf0098febfaf05cf4652f96e69ac806c837bfb1199b6e21e6aaf |
| SHA512 | df22f1dff74631bc14433499d1f61609de71e425410067fd08ec193d100b70d98672228906081c309a06bcba03c097ace885240a3ce71e0da4fdb8a022fc9640 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
| MD5 | 3a9cc06720799475113b4b5e928cf22b |
| SHA1 | 209e29d593d8e996639cc02de7311d4bbdb72636 |
| SHA256 | ba2eb03ab05cdf316ae30b3669eec29fd046febaad99508619f54663a54c3a30 |
| SHA512 | 009d81c35f6784c6e97998f4a4d61528ad18948c69285996c4d1c3e3fd01f59c8393f1a10f14755060407bc88a2e70ab2f2ca7081e0caa52916eae6826594cfe |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\MANIFEST-000001
| MD5 | 5af87dfd673ba2115e2fcf5cfdb727ab |
| SHA1 | d5b5bbf396dc291274584ef71f444f420b6056f1 |
| SHA256 | f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4 |
| SHA512 | de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
| MD5 | 847c2ef3be723cc1af30e3b9b1586418 |
| SHA1 | a72988eef9342cfef7f93200ffdb5764a8f27970 |
| SHA256 | 58f3a7fc960c65c1b8069bc46e4104c80489d90d7c0e09c3f90427ad3cce7be2 |
| SHA512 | aba8df8eaf05f08ed13830872a53b44b20ac085d42524c06c6d88f04127b0358030c0eea4405fa2ee6d1bef125c1708af49e9fe24d2d04323c27af560cc38dd1 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
| MD5 | 3962a159fb446cab6dc38ec12efadf90 |
| SHA1 | 7d87dce80bc16dcb107f13d5feab576b7530cbfe |
| SHA256 | e9dc7ea5d6b77d4cc2141125ebf2a05f89fdfd7424a39daf2762b5649b601456 |
| SHA512 | ba5d962b8ad6d79795d7c0503cf48c353bd90eab1663b6be7863f5782642ff21df07e1b959f9255e33f9073e51bbe978605027b4458fe7a09b2d5a0005524ca7 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
| MD5 | 7d326d9e26a844ec5d0d5d579e765803 |
| SHA1 | e3c47e855a5048bb6973b62c23696bb7c31928e5 |
| SHA256 | 1d21882da2cb73977aa6dfa094163b2053756dfb873ce3a68cc96e7f467978c7 |
| SHA512 | 6345081019a4a3e54f43d9bfccc9487b5e2a1ead5e53ae5b495fa740faac42c44fbccac849060a7e471db69da62d277ebe7d40be7e6097c25c72f9a234bacbf0 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
| MD5 | da128fe5f9074bc8c1388b48d813fa7f |
| SHA1 | 7bf1351c579d4ea34940488dcd8ae3a64d050651 |
| SHA256 | 74e26c0eba194e65ad21f52b32bddeead2d9c6f9979fd0f10e051208abc2ea5d |
| SHA512 | 63d031dd909b64d298ca3bc84c80e99c9c80848b4ea36f648825e1ab4da1481064c775e4e237c5c2274b1b2f7f80b6a65bf1b8c4d8dc808b09cae4a644a8920e |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
| MD5 | e1bc08af04cd3b9bbdcc15566e47e77c |
| SHA1 | 3a3a76526516f95de221d09eef46f7c0c6caeef3 |
| SHA256 | 7da8828bacab2c5b839f365038d997336a5a44dfdcfbb08a6d2e26900420eee7 |
| SHA512 | 373bb48b3b9888f25ed9a84150df9fcfcbfcbdce48cb66cac4aab24cc1168545985bcaf7c6f3bdcaa49160351e2b11ba5b7d01f9fb4bbf8278b312d3a259b82f |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GraphiteDawnCache\data_1
| MD5 | f50f89a0a91564d0b8a211f8921aa7de |
| SHA1 | 112403a17dd69d5b9018b8cede023cb3b54eab7d |
| SHA256 | b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec |
| SHA512 | bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
| MD5 | e91ee655fc370fc76cae70be75eb4da7 |
| SHA1 | b1c2a36a252373b78768ff0b8c7c414975f8230d |
| SHA256 | 2119db0210675f0217218459520534d0442fb93f8d2ad66ba4b20c8d2a430ac2 |
| SHA512 | 6295ce62fc97be1ee529b0c4dde9d8b806e7972d89378d527740c3865bae85e089883634ad2c3a72b0f0c63f0a0758645733e9e8d9092fb87bd7cc3e95d6c7f1 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations
| MD5 | bc6142469cd7dadf107be9ad87ea4753 |
| SHA1 | 72a9aa05003fab742b0e4dc4c5d9eda6b9f7565c |
| SHA256 | b26da4f8c7e283aa74386da0229d66af14a37986b8ca828e054fc932f68dd557 |
| SHA512 | 47d1a67a16f5dc6d50556c5296e65918f0a2fcad0e8cee5795b100fe8cd89eaf5e1fd67691e8a57af3677883a5d8f104723b1901d11845b286474c8ac56f6182 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Version
| MD5 | ef48733031b712ca7027624fff3ab208 |
| SHA1 | da4f3812e6afc4b90d2185f4709dfbb6b47714fa |
| SHA256 | c9ce8dbbe51a4131073db3d6ceef1e11eaca6308ad88a86125f221102d2cee99 |
| SHA512 | ce3a5a429e3796977a8019f47806b8c0671b597ead642fcbfbe3144e2b8112d35a9f2250896b7f215d237d0d19c5966caf3fe674165a6d50e14cb2b88c892029 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\segmentation_platform\ukm_db
| MD5 | 74fc480c221339936b6ee74d915b2c0a |
| SHA1 | 01f0af1670949d1e232bca717efec82d1d8d847c |
| SHA256 | 4c00d670e20d4d6fa500cbe0e210f26cc30736118c4d796f11cd02495406cb82 |
| SHA512 | a72f10a244089060bfa42d942e59ecc4147493e8ad7874bfcc4fc8a4d81e506bba19da77edf2a8a71e0184cba8716c9ff1ef2999981087560c95fdd211b24fae |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Favicons
| MD5 | 89ba74c3ccd75835f13314d80c44b0c5 |
| SHA1 | 5226e3caea027cbe254ee7cbb3b04570f5ff9a22 |
| SHA256 | a1f942ec16d0058467c62dda6a33ea7256cc69118bd5ee82f659406f739bde7a |
| SHA512 | 1aca1fda8a108c48fa6b231c07ba21e9dc2aa9608c228807478ecd201fff44713fb30f3bd884aead02627aade4471faa52411881a5d9bb17013e512dff414755 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Data
| MD5 | a97d839cd6d9e2ae0d7db4731f9aea1d |
| SHA1 | b313ae449850c93f8185644cb13d097cfbd191bd |
| SHA256 | 2952fc2322ca6c180a1bb6a5e283e6313dc7625e5883def4dcd9623551c38e13 |
| SHA512 | e2f235c3fe629ee67ba03170514f9c5df9030d243b0c8662a1d867344dd37383ac773990fcf5e763e87b9d40040433a1ed8ef839b64c0e9da33f5d427773a86e |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sessions\Tabs_13376004102105613
| MD5 | 9193925a4a2ae267e9965698366f7757 |
| SHA1 | 8aa783bf564aa1573e8175782363c47ff6d51e26 |
| SHA256 | ef63682e2f0a341641de9f538180b218e2c69372cc338f38ec1b8bc216b0e0cb |
| SHA512 | b0ab5ef5365cba4e387a2203e5bdd3cb1085b2de9e18d55a0cf0082c97a148e138bde1dc885ebd1bae35766e06d9d3f9be6e562898f93ba3630c038a5a8e7351 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\000003.log
| MD5 | 333cf78ff55ad977a7bb37c9e9f96b8a |
| SHA1 | 3337afcc1d6e42d5af72076368db1ac3a0416b2a |
| SHA256 | faec07354eebd3517fc0053caccaffacddb3f9f5bc1f996ac39c39a9f6232235 |
| SHA512 | f4c09d5c549454a1a94db5233603de60d6d2958cf9e94f705d894ced1255c65ff22cf41c2aa8e460c341d19322d85e301d0a031b1bcb02705cb9bcd65210de6a |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\LOG
| MD5 | 0358b6001fed57ec2153376d3d4bea48 |
| SHA1 | fefccbdce28896584fc072849a235cbf1c803515 |
| SHA256 | a98bb32110b5d8f35e70ef019001d4732af1441d1f7d25fc808ad88669251975 |
| SHA512 | 657c78074cd15305bc03549e67f755febacce18a337bc08019d95776f6246f8634bb28741628bd7ce46e25620f6dec496c4efd4c847aed20989c3c5df52949d7 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Reporting and NEL
| MD5 | eb6a34c8fcff10ece2612ddffd04b0af |
| SHA1 | 0229f994b17a2dfc67a06bbd7a10f6ba0eb9e505 |
| SHA256 | 5b25a777d69600af184de59c43f728f1979d9a80e5d913ee388cb86ed10970a9 |
| SHA512 | a425953ef16675dbe74f38314d17578326574eba2429b4750c40fd799447537f56b0c0508f381679210f29feb8c76980dcb79fcc4755c6d80a004e5415315029 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
| MD5 | 4ea2b233ce8188b98a2130ab94217dc3 |
| SHA1 | cf46c831e5699e42e6d0403dfddc2cfe22c44eb7 |
| SHA256 | 96e4afbaafec69c7ccaced072fcce7ccef01c8f7dce24d23120960af12b9a633 |
| SHA512 | 4f0147334536c31ae87d0beeee308492192949e7e3fbfe5894ac3e71a3bb92288a192e771451ad6779170032207820161af2e28adc48a3c2751115c2cfa550c4 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006
| MD5 | 503766d5e5838b4fcadf8c3f72e43605 |
| SHA1 | 6c8b2fa17150d77929b7dc183d8363f12ff81f59 |
| SHA256 | c53b8a39416067f4d70c21be02ca9c84724b1c525d34e7910482b64d8e301cf9 |
| SHA512 | 5ead599ae1410a5c0e09ee73d0fdf8e8a75864ab6ce12f0777b2938fd54df62993767249f5121af97aa629d8f7c5eae182214b6f67117476e1e2b9a72f34e0b4 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Visited Links
| MD5 | 3ba2da05caea50debcc5df4b705aa7ca |
| SHA1 | eb72aad897de5fe9e8a82f66d3f884e3e0b3f82b |
| SHA256 | 750929092f83af4539fc6e1e785a7738160ea6bb61943f5892041a791f988553 |
| SHA512 | a54d7f9b25d33fedba56fc16baa9f532d3c6ad303231d4fbd411ad84ef3b2e4b22a5b823eda4e0ad082c43ffa948ebd1680af22eefcdb471e6075d4c21c392df |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
| MD5 | 8655d4798e0036376c0d7b800fa1b763 |
| SHA1 | 2fc86c94b3547da18345bca8fa63607ec3631180 |
| SHA256 | af9d6a5a96d9ce5ba75fb02c6f9af7e275dc1aa774c17ceaa0e9830728d2d811 |
| SHA512 | af794cb2c68836444cff098cb8e3a5c42aedb37c9ecc1317302689ac6b22a826298b9986cfcbe40c25bc51f8708231b1460a4d11235cd0f5d7039326b998c342 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
| MD5 | 1e5f7af72baaf56fecb2bc673b535140 |
| SHA1 | 544ba119fd4f48b0e30fe0123e5c21cfeedcbe98 |
| SHA256 | 4afeff1fbcafc7b0d67e1c7fcdeb3a7597b2bdde4c2b03dd4934c674051cc48c |
| SHA512 | b529540effb7f12f4a2339d9f660b4a78caab429ae24bae3e227d8307290da2e20a039e27535f47e8a52fdc31b4fb298b96c32bc7d6820e9351812b9277432cf |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_3
| MD5 | 4b66528d1c290460c725445c8cd4a40b |
| SHA1 | 3160cf9c3df20bfb16741bc887e01b52b811eabc |
| SHA256 | 074af9da8bdbdf49cc639781329b4e16373f4013c980bf8664de0b92aac6dc2b |
| SHA512 | 01c0502a3ff107a0fa22bcca4809ef06bbc698e4a16d26ab7b3699deeb27d71cd1d94bef165f8b1c09acc5e5c7c9aab2f0388a5fe080900a0b5dd6b5984bf11c |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_2
| MD5 | 0c91db6214f5ecf8315eb8602ae41c64 |
| SHA1 | 16f959dc12b3c9852bc72fff9ee74c7d674d23e4 |
| SHA256 | 435bd888d4776201552bdea304d975022cb88afcc14545003409a18ccd7f70f1 |
| SHA512 | 47113c84479db4b6702bf71436502e3476855b7bcbba1d4ec6c3a1e33efde3a4b94d556d955bff29fb3e0f56eb2bf92cc6f6b04a69d19c5c37c867efe55e89e3 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_1
| MD5 | fa6a0611e379b1210c41ed92326708a0 |
| SHA1 | a9c8a523b49dcd828c9ef7335996082f0203fd93 |
| SHA256 | da6c7f2b4bf81730a80efa428d8ff27b26e198b4cf49d1072b11333225945472 |
| SHA512 | 49c7a7fa3e806163c7ba1db1b08fad13feaa8c3aca7be5a76fd509f586bb67ac971a6dd4e78f921b6c5af360aab41d2729c4ebb32587a45de2fc00a233f80276 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\data_0
| MD5 | d9f54eb80072f5c0437bdc134152ea5e |
| SHA1 | 97e20cd13f6908b3138f493da6210c95147875d1 |
| SHA256 | df254db2b473f6a2965c6165ec24e259a5740a1781011d11d068c7c279c1beec |
| SHA512 | 686718d6051d8c85b236196d9d2ce3c52ccc892925fd7992987910e39b4af67e2003a208bc1676483e523d211c058f81758d2180bcdf823df4f41bd7d9d13a5f |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\History
| MD5 | 0ffbbd773a9b2725df2e057716be390a |
| SHA1 | ef5ae1c0576b6f9c1f8db7b9257f60e02c21812d |
| SHA256 | 3ca685f97077ab35d38877960b900992533a91f70cfb768b47f65ef1b17b36b6 |
| SHA512 | 22f901412d00d1cb1beadce741c9bd0931479a8994e90f6c10578dba88734302e07d2e03f1e697f87909da0e70fdc0422b3147feb8232a1c81bcbc61d23948b5 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
| MD5 | c6f58f01b5d27bc1c3bac4d60c13edcb |
| SHA1 | d416bf490613be84038ec890bd5bf9f9dc44fbd8 |
| SHA256 | b2fbfe3eea4677d1e6fe904a398854fe6e289346c4c02ea289a52f5480086596 |
| SHA512 | c81ee54c0af3d754409dfddf23ab66ac1ef0719cae41d74e2b2c984b4b15e8839ce258491cc1951497f5a8891a36713045c2d28f1410291dc0e4b4a158e71fc5 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
| MD5 | 534110abc8686d809e3a03e3942436e4 |
| SHA1 | 4d9f547e57fe44123c7425270ba97f50be36bacb |
| SHA256 | 8d82abff7a0783dafb0b76831d7026c92853a2b705f0ccb61d4ab7e63eaa608c |
| SHA512 | 3512cdb7838fcee21b5079bf8e1be0242b0acff1f68634e46655aaccec5f1e0a29872f67ca00337fdf71f74d9913b5f3574a4c01480301f04dbfbf9f895eac3e |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
| MD5 | 155c5773f5c6c17aa957a725338d699b |
| SHA1 | a8f5ea6f4f7e9475983e5caa502c6e1316b1de0d |
| SHA256 | 5f874748cb5b116d2bc272b06ad454e4b34a533a8ca7cd8e4b0c440e0caf262c |
| SHA512 | ac87b78b854cc31185cfcaf526fd333fa8cd83f151662b87df7b9f8a8d54fce3c2e95685dfb64f5f476082e45572a6b0c3eec616534d998eb6b7d7f960867111 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
| MD5 | f965cd6b006a3a1c6904d3f7e0d7291b |
| SHA1 | 52194e081e8e2e415c99efcc0ad427bf7ba6b694 |
| SHA256 | 38cab96c774a17008f3c3f5097753eb000a931de72ca8614602eff82492f43c8 |
| SHA512 | 0b02dcc402bfb511f148bead0c820620e9744da7225c7028346b48901548fb227fd935cdfdbef05c933bce847b79a8e92b2dbbf4b3bd7f628d99c50ed170cf2f |
memory/684-1675-0x00007FF91D110000-0x00007FF91D120000-memory.dmp
memory/684-1678-0x00007FF91D110000-0x00007FF91D120000-memory.dmp
memory/684-1677-0x00007FF91D110000-0x00007FF91D120000-memory.dmp
memory/684-1676-0x00007FF91D110000-0x00007FF91D120000-memory.dmp
C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat
| MD5 | 327975ba2c226434c0009085b3702a06 |
| SHA1 | b7b8b25656b3caefad9c5a657f101f06e2024bbd |
| SHA256 | 6fa9064f304b70d6dcebee643ca017c2417ff325106917058f6e11341678583c |
| SHA512 | 150a57c143fc5ff2462f496f5a9451310b8d99e32c4d570641204c8062a78590f14bed438ac981e8b0609a0c87b859a1f8502a78687bc36c3a9529d633a58e51 |
C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat
| MD5 | 785073822344ae3813284ebc92bb596a |
| SHA1 | 96e2a933b38352ed2c8e6e34e94756b70c143214 |
| SHA256 | 36ef4cbbc494deacf81f364b546281223a39bea01a32b0c4b0e2324f984d6817 |
| SHA512 | 28b21e17fdf026a025503a2ae1014ea4e8ce5385e42396007a7a23aba3aecb591d225e2a90d47f6f9e02d34792d74b89547715d66899265dbf8372258ccf4498 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
| MD5 | 4f5136c33a90df13360badddc2bc60d1 |
| SHA1 | 80cbc3f49defc1b5b4c5bc0a1a7f8d80e6104d53 |
| SHA256 | f77df00aafebe3a4ee620bf1904466c02356e2d937a69bd564dff35abc382624 |
| SHA512 | c40a382d15108467ce94925428e4727b082ce799cae09e37b3db7ded8664985b12963b63dadc99bfc17d8413b5267ba0407064795620067b164956b9a5e7ec5d |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
| MD5 | 2af17026639414ad76cddde3ab5eea3e |
| SHA1 | a0059d004a1d5ccb74753b34a64ed9054ffc560d |
| SHA256 | 5b50a1c093b5940b83ab4727113fdbd53553360f1a4c8921b4d8f890a99ba6f7 |
| SHA512 | 949d54adaa8bad340e09d396598c218f69e9b5a163b96782dabd2a1ad1c72ea816f275d21fe72112efea9580a952ac0b1b83928def71f07e586769da15909669 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
| MD5 | 220aac05d623836ad8a82d46fa8b0151 |
| SHA1 | dd89fd214a8407781db2737d1f125dd8963df813 |
| SHA256 | de2366e928db94862d245f050ab086bad511ac5e8be237698359921ba971142a |
| SHA512 | d846399929ee3a8c57de967421420629077d1f76ba734fb7d9cb70197d4a3e34bcd6a37a540e5dd6844a5cac577d68ae8c4cc047c49dcc0abf4d34ee0505fb55 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
| MD5 | 251b37bd06f1f3f7c379b567beb2ec98 |
| SHA1 | eab6ba2db5ef676bffe93e0f9d8e2b9a73c8a34a |
| SHA256 | a366940ca12e12c3a6a75234425acfbc651308d92c1725095289b7cdce0a7a71 |
| SHA512 | 56fb18f74972fd2e058b93eab209e342b3a08fafef3c9a289c3df73fc0ac1636b0f3c2163a1123cd766a33a3e33a05b405bff72b0cbe04c81e8641bc876ef2db |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
| MD5 | 7d05384ba4c1c8b9eb8a331528aeb02d |
| SHA1 | 4c741b4bc1b1f958759140dc32cc7159ce0f6fe9 |
| SHA256 | 897d8bafb175cb622b7a2c1b660ba9e58e6b126384f21f0ad299730b9fdd36cd |
| SHA512 | 95a3c2d28a23c6b5a8a48f4a3f347c8991ca38645952ac51b514f9768e2fea47b6d05ce944e266bfd5729f0e2baffd9c9c2e3227043ff2d6e8154dcdff40c52f |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
| MD5 | e95c69b73ae516d7ada3c538155abc4d |
| SHA1 | f01ea51066e6f68c347e13a194645f311f2614f2 |
| SHA256 | 5456d6d03db3fd1eaae2dbfd26a9b68debcc4c0af4d93351ba2c30144f9f3639 |
| SHA512 | afe46ff177f7298241289b331b0e3bf8e87080cc2fdd6e606f724a5f9f9ee2127068d65d5282876b8b48e7cfb6c0e17fa462eb926e033d9dbe19bcc0b464bff4 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
| MD5 | 1931b2f58c1d67747da353b5ad4579e0 |
| SHA1 | e155a6299c030c8cd13e7730f51438a4abd06b59 |
| SHA256 | 40070461b320fd95492d9d8968ef488992aeb2b8420579c30978d942f5bfc860 |
| SHA512 | d246299bd68e91b32a9b1962368d9ab3fedf3d6d370ca50d5661979fee5c0ab0c4d4f5c4a9d2a4c1a3cab28a14fb14e13d0560c3d72242a26a102fc7b8e4506a |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
| MD5 | 24268d53575a41a64a49c9610120d5d3 |
| SHA1 | 4624059f80828aa63430b0481efbf23a0761a95f |
| SHA256 | d93a2fb6ed28759a7a3103d2f8eadb7d18bca0736aeb91e4cb28f73d0d8949c1 |
| SHA512 | b93041b59a8f9b6d3048d1a03edc525812795319506a06db38c1567267fa1e420b3a800d77bb7efedc3c683fd8b7c44dac60a1deff1b37caaa2b4e58b777fefe |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
| MD5 | 8eac5a3096f9c8870b446c32f2ccfc40 |
| SHA1 | f213be2915b81e4fc3a1b441809d73b72a8bcaf3 |
| SHA256 | 65ef755df73670a931fcc0adb6df8e2e448461e20bbe5f2070ce856c7e166e83 |
| SHA512 | 370e242d18df4bbaefa232f648b390d365638124495b7d5cb94330080da4ea9328683e071e7fbd65a68522fbb99df31bc9aeb58a925e28ad18e41035fcf4db10 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
| MD5 | 72262a7087826352168d764a64f9dfad |
| SHA1 | 3be615519a86f1c4f0a9501a93e8172df76951bc |
| SHA256 | f9fef29e7ceaa3fac2afbd447e66d236ec58bc8bb2a8ef98f482a037388a06fc |
| SHA512 | b41b912e0da3a7d663287a978b7717605a4b3ea8bf4827b4a5d34180f04ac361d06d5bb43648717ef8f1e36048c2089aae2069a233afdffa545a8fcee7e33a8e |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
| MD5 | 0ed1d8a539031c1287a8b0ca3463c47b |
| SHA1 | 93e10ac20c021e8a28083fae869e8f9426a78c22 |
| SHA256 | d514b83ce556c8ea140eaee451a15f6eed70f49c0e1dd43ce7b0fea7f3ca25bc |
| SHA512 | 351d239c3112ce84e7d370b91e9d0a1437a904991338b9eb645d1e839d198826cb9be844a709fd90aa81660f8f6e11af919ad5a622dbe86a4668ace7fbac5cee |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\2c65d469-2b0e-4c60-a634-e8ce32aab956.tmp
| MD5 | dbd0697964379416ab12ff99997643ee |
| SHA1 | c49fd7e8a1926515514df96e58710e3802564550 |
| SHA256 | d3d4bb1e2eb94ebc044d671507bf5bf2cec5dcfa8cd534f4a2b2c8b3e91aa568 |
| SHA512 | b4b45f407246ff9b6752f731fc1b4ced32eb117146cbdaad6f1709b6c0a486e87afeeed1ba198be8cebf884c95835a7d8f954c62577fc1a20f8a60dd6aaff20b |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
| MD5 | 21fad1f39778c2a6fc78198c113ed5f9 |
| SHA1 | efb7c14b380940029cc1de87d9db84411ba59928 |
| SHA256 | 4eadf9c568ce0fffe990a902b18ba905573dd8d4f9a9041c02fd006fe5fbb024 |
| SHA512 | 63a010f9ede517483494ac2a3748122c204de6a2be69d4f40c90be76443abbb69277fa353b5d1bcaea2846c99bbd41215ab46eee34ad5ed86824d95bdfb543a6 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
| MD5 | 351eeac78882139ad4c3947b86e8ba0e |
| SHA1 | 3a6c1c71e46721391bd6d94739e56bbb61ec342d |
| SHA256 | 98cdbf908d47c766b1eb912cb6adc7272d8da26fcccb7fe4dd9f4ad27ecef364 |
| SHA512 | 43d03afcda05c2494fa7339890e86ce77dafc435201d380e156728172657b063c6b29e69cc189452666e7aa404aba1dca605694c12b70981bd63a8db484c2aea |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
| MD5 | 224fc626ab692b2789dc005866de2f82 |
| SHA1 | 1f194d200c976d4c7150195056d363c5d6f5b54a |
| SHA256 | d725231449c5c576d0d496e33aa065e219f857831687a0c336878f2c32e03c36 |
| SHA512 | ac227ba8686dc15a97016b9aa564a0eded491a20b59708b9f24051910bdec15c18c0bf696f8db080b121dd7c34a1423cdc09e3ce200c9087877971bfc2ed7166 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
| MD5 | 449696ebad4289efffaff7e9a8f1eb1c |
| SHA1 | 7da331693aadfb5d1978e34aa692195e368e9382 |
| SHA256 | d8ce7be3d9289225c581980f6bc228be84c23cf4fda5eff44efe6159765ba4cd |
| SHA512 | 1c286bd5da79ab7bfe5497a057e92fd43e7be099eddd6d7d0c3f394057f088c93f1b6ed1ff06e4ba1d0512902cdbdbef1780dc4d98530c8b76ac81a461312ea7 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
| MD5 | f43fad090019249fba518f4c6f086cf7 |
| SHA1 | 2725a4c70a8301f09f2a51abcad0d3cb08304c56 |
| SHA256 | 9e53f449ba893fd9d77de778a95910ad9a4d7079f3b2b23d60b5c2246b569709 |
| SHA512 | f88bbe375ac7153a01d66d5bb8e5d4d2a6a34f8b2345cf1762ef22241ffea96e89555dc8355eebf022c300f55f2db00dc6e90857091490c0776116f5fe91d418 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
| MD5 | 529a6ef20e8da2af276f179e9e6250a3 |
| SHA1 | 409d1756067a4b8673255c4638c097e6b76d71ad |
| SHA256 | e5e609646b368111932c0588426a250dc4fc2cfedff3a8c8db732832fa62cccd |
| SHA512 | ced2b428bde6f115f67c446ffe8fc1e719ddbe4f592c78e8e33687e2070616a627d11cc4f5f84a041c5e9216a935db337667dd78f22feb22031046bf878abe18 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
| MD5 | cbf8fb670205890cda62f772563c2154 |
| SHA1 | ea3b45f2d0ca509d70caac41f999e89a0f07fb32 |
| SHA256 | fd78fdfcd2961c764c11327a2c5b4a24abc91abbc08df3e16ef7e1534e376014 |
| SHA512 | 5ba5528b06cd8ade23ae13ec561ea5de767449594415d61dbdee34ad61365dfb6233ac6060362da752f24fc879c0a22233e02ad09a451ebb3561f6b9d9d969c6 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
| MD5 | 08e57eadd1a6230a02625c9835d6f14a |
| SHA1 | 31a5848f9f7e28c5caf7f685264dec8d5dc64e11 |
| SHA256 | ceaf3c26a7ab2eec71e66ce7556e988697f6dc976b4ce584266d1f5d8ae47235 |
| SHA512 | eed264b578c5413e5ac00f813509286d80d2c78e92fe21205cf321014c401312517c9da8d8ae7f16447cddf16e568c25433471136f893200af1ac6876ddfc10b |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
| MD5 | bd95315359bb6da3de53f256bbbde1e3 |
| SHA1 | 04035a22e003f5be26cea22706f4de206774a76f |
| SHA256 | 70017e226d024fb4b782e0df1ac493c953e8a08f4c34f9b138cf61f432223cff |
| SHA512 | abd38a1aa257f309b40a2386ae1145ad9b3b072516b6c50d42cd6731cf83f4bffe1aea06540e5692bfa88a8833a3d15f1d263dd1aed5a6d2396508aee707b6c8 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
| MD5 | 6c1bed3c7fa5912eb4f7640129e1e5f6 |
| SHA1 | 1108f96c106a33ff4920ad36d51b57a645cad5cc |
| SHA256 | 2f2303fc11f7956aa87fb37e38691d0386bb98226067dab64147f2d3555ed5fe |
| SHA512 | 01784e8dd8097ed2fbf4994aaedd95c67dd0d8e62ebe8256a4e3aa4ec8ac9822bb8cbb3a32455b0e36f8a698551e014336da8111395d9308cced4e9c98848a42 |
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
| MD5 | e039d77007e31d8d23f1c6591b07b393 |
| SHA1 | 8cfa084c8bf185eb052b15f01b1a3ae0e7664ff0 |
| SHA256 | 34bf48fb9518bcd57552ce81a672cbe6524357f9465c3dd76eb736af96379bfd |
| SHA512 | 74e5dbceb84553dc4c9e59de6005f092983521dc3b8ff97cf4901ee586506a4e6b0e72b02ff75e463c83bcacc14b59aeda0eaa1040495e5a8cf12525fec1478e |