Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

13/04/2023, 21:53

230413-1r5qmaee59 9

13/04/2023, 21:20

230413-z63n5sed27 9

Analysis

  • max time kernel
    1610s
  • max time network
    1615s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    13/04/2023, 21:53

General

  • Target

    f4c840cda9f3b31b1e03e21bbeaf2df0770169c202a077b98de6c55d47af7a98.exe

  • Size

    3.2MB

  • MD5

    07b865ac2674ba343256d64f9428b69e

  • SHA1

    98db0095de527acc477bf4fd56d0d7d7eacb2197

  • SHA256

    f4c840cda9f3b31b1e03e21bbeaf2df0770169c202a077b98de6c55d47af7a98

  • SHA512

    c6a81b796d44b3badc853cda8f645c515220a56fcfc4db3d25ac90ca0078cbd4eda861aa9130cb3cdcb90829812db1131d80912faaf8234c4ddaf55ecd2ff06f

  • SSDEEP

    24576:jGyWHkmafiejXKNKHgk7atFawpeqF+mRNZGNYsYHphq36H2a3UMF3yscLrJgwYpi:jrBjKwHhOtHpeE+GNUJ4rq3Od3jo69mF

Malware Config

Signatures

  • Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs 1 IoCs
  • Checks BIOS information in registry 2 TTPs 2 IoCs

    BIOS information is often read in order to detect sandboxing environments.

  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Themida packer 2 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Checks whether UAC is enabled 1 TTPs 1 IoCs
  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 41 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f4c840cda9f3b31b1e03e21bbeaf2df0770169c202a077b98de6c55d47af7a98.exe
    "C:\Users\Admin\AppData\Local\Temp\f4c840cda9f3b31b1e03e21bbeaf2df0770169c202a077b98de6c55d47af7a98.exe"
    1⤵
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)
    • Checks BIOS information in registry
    • Checks whether UAC is enabled
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:1320
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=31569 --headless --user-data-dir="C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD" --profile-directory="Default"
      2⤵
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:556
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc8,0xcc,0xd0,0x9c,0xd4,0x7fef6989758,0x7fef6989768,0x7fef6989778
        3⤵
          PID:1308
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --headless --use-angle=swiftshader-webgl --headless --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --mojo-platform-channel-handle=868 --field-trial-handle=1040,i,10206822358979172821,323554948967549658,131072 --disable-features=PaintHolding /prefetch:2
          3⤵
            PID:1600
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --use-angle=swiftshader-webgl --use-gl=angle --headless --mojo-platform-channel-handle=1244 --field-trial-handle=1040,i,10206822358979172821,323554948967549658,131072 --disable-features=PaintHolding /prefetch:8
            3⤵
              PID:1964
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --headless --lang=en-US --first-renderer-process --remote-debugging-port=31569 --allow-pre-commit-input --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=1560 --field-trial-handle=1040,i,10206822358979172821,323554948967549658,131072 --disable-features=PaintHolding /prefetch:1
              3⤵
                PID:1100
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --headless --lang=en-US --remote-debugging-port=31569 --allow-pre-commit-input --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=1928 --field-trial-handle=1040,i,10206822358979172821,323554948967549658,131072 --disable-features=PaintHolding /prefetch:1
                3⤵
                  PID:772
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --headless --lang=en-US --remote-debugging-port=31569 --allow-pre-commit-input --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2056 --field-trial-handle=1040,i,10206822358979172821,323554948967549658,131072 --disable-features=PaintHolding /prefetch:1
                  3⤵
                    PID:1532
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --headless --lang=en-US --remote-debugging-port=31569 --allow-pre-commit-input --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=2560 --field-trial-handle=1040,i,10206822358979172821,323554948967549658,131072 --disable-features=PaintHolding /prefetch:1
                    3⤵
                      PID:2020
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --headless --lang=en-US --remote-debugging-port=31569 --allow-pre-commit-input --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=2704 --field-trial-handle=1040,i,10206822358979172821,323554948967549658,131072 --disable-features=PaintHolding /prefetch:1
                      3⤵
                        PID:2204
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --headless --lang=en-US --remote-debugging-port=31569 --allow-pre-commit-input --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=2024 --field-trial-handle=1040,i,10206822358979172821,323554948967549658,131072 --disable-features=PaintHolding /prefetch:1
                        3⤵
                          PID:2292

                    Network

                    MITRE ATT&CK Enterprise v6

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\CrashpadMetrics-active.pma

                      Filesize

                      1024KB

                      MD5

                      03c4f648043a88675a920425d824e1b3

                      SHA1

                      b98ce64ab5f7a187d19deb8f24ca4ab5d9720a6d

                      SHA256

                      f91dbb7c64b4582f529c968c480d2dce1c8727390482f31e4355a27bb3d9b450

                      SHA512

                      2473f21cf8747ec981db18fb42726c767bbcca8dd89fd05ffd2d844206a6e86da672967462ac714e6fb43cc84ac35fffcec7ddc43a9357c1f8ed9d14105e9192

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Crashpad\settings.dat

                      Filesize

                      40B

                      MD5

                      d24b128fff32234d24a01521689fbc0a

                      SHA1

                      d9301391806232e372bb21950f297f226350403e

                      SHA256

                      123e79ba52df581b734c22aa179c70903e7cb75b25c158c447671083e7df3276

                      SHA512

                      f5c8cee761e9221844cec8f48e8831330c1bee79e28a1043ff6a37b1eebb9cebb292096e8d7e84661f8ee6855dbc0704ff1e8d460bc8cf3492def55eef43c609

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\Cache\Cache_Data\data_0

                      Filesize

                      44KB

                      MD5

                      4ac3536e82d0c8ffe47388a46a2e15d5

                      SHA1

                      751c9ac36ec211ea744e9a1104c05e9b70a7554d

                      SHA256

                      1592358ffa676e4105eef0281dcc97350acad1133a279a3677d97921ee14cdc1

                      SHA512

                      67b32fb6e5a80618439e0de70cb527b38ce9dd57082c4f414d1cfd73444fafbfa67889c7719040ec80690b0ecb0ed264afbc4d7824c5f7f128bf44d0353ba206

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\Cache\Cache_Data\data_1

                      Filesize

                      264KB

                      MD5

                      f1ffd37bb04b7031f85cf94997da2d8d

                      SHA1

                      3d9356876cee08e285b66dee0bab32f8fb3b8a94

                      SHA256

                      6fb767d7a286d72d729b2ce040abe3e1fbf61c5dfdceedbe607530b7e8e1fc72

                      SHA512

                      fdc2b4378bc91839909b8aec306ab1dbfa1d16930ba9799dfc25ef86266d642a645d8ce106617e9aa5486a64d7f79b8ec5c3c41f233e11dd77666e2408f759fe

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\Cache\Cache_Data\data_2

                      Filesize

                      1.0MB

                      MD5

                      b00ee25d3aef21db1f220f12c39d5069

                      SHA1

                      91d95a5b7cc49f827ed28e5f30824ae638325c33

                      SHA256

                      cd2db2192bfed9bcaaebb6b017643932ff767185a9752730152196bab04fe736

                      SHA512

                      41a0b4def02a8c37431d3c91c0ac94206713fb81e929a6b3e392b4c305e80c79d855bd1d84e7a766f8d246318a0bf36b6096e571e47d1453c4714196ef2be56d

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\Cache\Cache_Data\data_3

                      Filesize

                      4.0MB

                      MD5

                      b4c873dca626f45a156f32011447fb83

                      SHA1

                      c69b58bc5e7b409bc14724ce0058975b4063a1dc

                      SHA256

                      f4b20f95cceff2f47a3c9b39d59f32f0dba906c8f53a3c0661935632a342e16a

                      SHA512

                      f3ce47ab779352e3f544d66262f592ce083164ce0da6bb53541ff55b12a1055db1c6a0595a33cd37253e82b5f9e611564cab868695daa18d354af905f63c3971

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\Cache\Cache_Data\f_000001

                      Filesize

                      46KB

                      MD5

                      1f75ad53dc0499e6e8f0472ae83b284f

                      SHA1

                      e70593afd91f78a9455f8765d0212b680dd97d83

                      SHA256

                      564e33f3a9c1cff9bcdcd1d6a5562353b3eab3ea631a9d756d65ce99c1e5d3c9

                      SHA512

                      180512612055459154ecc06e2128fc8613c20096551db3b77a8a29f04e4bbc5d6bc6d96c456bf5afb6394ba1c97141885eed7d7849192f05d46c009024377dd7

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\Cache\Cache_Data\f_000002

                      Filesize

                      316KB

                      MD5

                      3bca0438851946caa6bdbea659d620c1

                      SHA1

                      8999f57bb046d30b19af07f2e7fba7e8a609406e

                      SHA256

                      58df85daf1753e7739654f8f128319b43ececeea81efac92fefff7ebba2e9184

                      SHA512

                      c619c168b7c99042db9f028d53935d8568210a713e3e92df2436c583965314379afda2c973e21d0fd4659fa478f55aeb31d2c83dd3960c89a4c3c60c352c58a5

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\Cache\Cache_Data\f_000003

                      Filesize

                      66KB

                      MD5

                      800f42162c452d2910e695350fce2ff9

                      SHA1

                      3cfb3f666a6037292b1585f04869f1f186265e38

                      SHA256

                      2b90a09cb1ef49ee915a529d024c182f6024a833e3d805e57dcb48539dbdd535

                      SHA512

                      7968986281080a819fddb984420576a032d4aa13e7294d30f3353571adda5d4b773cb171288487cd3acf47f0329af2047421f8a8b5fd33e2df165a02d183c690

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\Cache\Cache_Data\index

                      Filesize

                      256KB

                      MD5

                      b7f5530f8a759bdb1e96fc07c451d812

                      SHA1

                      fd03f87bd4312d4caf1adaa2dbab9216d1318efd

                      SHA256

                      1f9d15c4c77a6821555011ebd5ad546c44479b0a732b2ee1a636a6153c78281d

                      SHA512

                      0d25301400db46375f52fe7d0e67ba342c65e6b45b963cda30e18f79946af799e3f9b97612f135bc7522e7a8275f5a49dec3700756bcc0c4d546ac2b09ab03b1

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\Code Cache\js\681adfbc442ac296_0

                      Filesize

                      425B

                      MD5

                      f26072fe53ccd6c1ba2858fe01f1c916

                      SHA1

                      499e48b92bb7455089e08fa43cee3a41168cf952

                      SHA256

                      7067610a45815fdc798cc79ac745be02e9e1dac357984b7c8befc00c90d7e00b

                      SHA512

                      f84ab3e6a9ca180983615898b3a972a39a945016296cc91e08949b7fc919ff87b58b179d4aa71c80d50fe6080008b6fc92023a47791e92119e3e66efee8285c5

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\Code Cache\js\d64f1de6aa7cb978_0

                      Filesize

                      347B

                      MD5

                      e31e65e7e24df26a3b3996dc2f9f151c

                      SHA1

                      020123fb316c3781169bfe94f6134145ea38c3b7

                      SHA256

                      b14084f68d4f9f343668f4bff5f1099965a5494381a9aa1e7adab00a4b96e280

                      SHA512

                      6d04d4f856aa2693a796590a6af77309fb7962a2871d3a2b9f6444ddd88fa7c74035c24425d9640a275402ae936467d154bd9251106068a784d6d9993412b064

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\Code Cache\js\index

                      Filesize

                      24B

                      MD5

                      54cb446f628b2ea4a5bce5769910512e

                      SHA1

                      c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

                      SHA256

                      fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

                      SHA512

                      8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\Code Cache\js\index-dir\the-real-index

                      Filesize

                      96B

                      MD5

                      b6c72ee1e0f51a82622ac9ecf7d23782

                      SHA1

                      a6a81f53334d36cef33052b3dc70fd4a8b2c1f8e

                      SHA256

                      4dc3da121bcdf619494b776722230bf55dbe899c4abd547cef6693b2c97ed57b

                      SHA512

                      260cad63b6a4214bdb25deca28fdbf3e0168a3bbba8f2dab6a4873c394eb5618613fd55a46314caeb48669539e4309123ad1820b6c3644cd26ac4413314a5d30

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\Code Cache\wasm\index

                      Filesize

                      24B

                      MD5

                      54cb446f628b2ea4a5bce5769910512e

                      SHA1

                      c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

                      SHA256

                      fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

                      SHA512

                      8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\Code Cache\wasm\index-dir\the-real-index

                      Filesize

                      48B

                      MD5

                      76723b931fcb74c057d2ecdc2a91faf8

                      SHA1

                      a7122fe3cdd7ddb4c7f3eedd5d10c476485f9e14

                      SHA256

                      5eb529b0f3a5551db040645209ea6f70dcae5ae03ee3f38cd9adf25bc53f8512

                      SHA512

                      686fbaffa42b01786394c53b342b5100d216961e4ba5fdb3fbb261ba81f31424ce86ec664d5f651f924225dc32405eea8b291f58cc36c70b7d4f5f3943691116

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\DawnCache\data_0

                      Filesize

                      8KB

                      MD5

                      cf89d16bb9107c631daabf0c0ee58efb

                      SHA1

                      3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b

                      SHA256

                      d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e

                      SHA512

                      8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\DawnCache\data_0

                      Filesize

                      8KB

                      MD5

                      cf89d16bb9107c631daabf0c0ee58efb

                      SHA1

                      3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b

                      SHA256

                      d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e

                      SHA512

                      8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\DawnCache\data_1

                      Filesize

                      264KB

                      MD5

                      059282236c801fdc78ada8faca451113

                      SHA1

                      09f3dfa4a8d354c7cd3fb7a621af0b6f1755b8d4

                      SHA256

                      fe013d672feee5202b6298d08e2368151ce6eb7ed97bd775a59698759d294c99

                      SHA512

                      29801b394e3482dd3f9df5ca4013bd8d0c5b8b4195e473632e763e160fa823271e46c7caf9600011632a85c54a8f9bb1a17bc624f72ee1b496b8a79629023103

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\DawnCache\data_2

                      Filesize

                      8KB

                      MD5

                      0962291d6d367570bee5454721c17e11

                      SHA1

                      59d10a893ef321a706a9255176761366115bedcb

                      SHA256

                      ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7

                      SHA512

                      f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\DawnCache\data_2

                      Filesize

                      8KB

                      MD5

                      0962291d6d367570bee5454721c17e11

                      SHA1

                      59d10a893ef321a706a9255176761366115bedcb

                      SHA256

                      ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7

                      SHA512

                      f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\DawnCache\data_3

                      Filesize

                      8KB

                      MD5

                      41876349cb12d6db992f1309f22df3f0

                      SHA1

                      5cf26b3420fc0302cd0a71e8d029739b8765be27

                      SHA256

                      e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c

                      SHA512

                      e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\DawnCache\data_3

                      Filesize

                      8KB

                      MD5

                      41876349cb12d6db992f1309f22df3f0

                      SHA1

                      5cf26b3420fc0302cd0a71e8d029739b8765be27

                      SHA256

                      e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c

                      SHA512

                      e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\DawnCache\index

                      Filesize

                      256KB

                      MD5

                      99c0fd0936522fae29497316ea66f712

                      SHA1

                      ebb9930ee92e88c5146c225b30afa9b75198402a

                      SHA256

                      81d06b2cd135142cdb4b87200e54c7b502348a438ac3d5ca7a1a181de117dcf3

                      SHA512

                      703020bbcfe2e5a25922c7e06d3bf2ed2d497fd93304becf40bffe10b3ffba90eee91144cd2e09ddeb0e7c19ff5e3094d6b3f055768848290c0bef82047a5da2

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\GPUCache\data_0

                      Filesize

                      8KB

                      MD5

                      cf89d16bb9107c631daabf0c0ee58efb

                      SHA1

                      3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b

                      SHA256

                      d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e

                      SHA512

                      8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\GPUCache\data_1

                      Filesize

                      264KB

                      MD5

                      3cf7e17b509f097239f4aa3f960fe41a

                      SHA1

                      642d4c2243361ab71991983d7ea26e26cd4933a9

                      SHA256

                      8cbaa100d2402321ccde7cdb49e337f3ce65697897368984d6c71b850ee783b6

                      SHA512

                      6aa00cd481314275d766f4ebf77614f65b9857f5c8f86e8ffe5fc850d82dcb6b3183bbac85d4234e29a70c64a410f23a258896af4c74653523f8e854027bd27d

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\GPUCache\data_1

                      Filesize

                      264KB

                      MD5

                      3cf7e17b509f097239f4aa3f960fe41a

                      SHA1

                      642d4c2243361ab71991983d7ea26e26cd4933a9

                      SHA256

                      8cbaa100d2402321ccde7cdb49e337f3ce65697897368984d6c71b850ee783b6

                      SHA512

                      6aa00cd481314275d766f4ebf77614f65b9857f5c8f86e8ffe5fc850d82dcb6b3183bbac85d4234e29a70c64a410f23a258896af4c74653523f8e854027bd27d

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\GPUCache\data_2

                      Filesize

                      8KB

                      MD5

                      0962291d6d367570bee5454721c17e11

                      SHA1

                      59d10a893ef321a706a9255176761366115bedcb

                      SHA256

                      ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7

                      SHA512

                      f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\GPUCache\data_3

                      Filesize

                      8KB

                      MD5

                      41876349cb12d6db992f1309f22df3f0

                      SHA1

                      5cf26b3420fc0302cd0a71e8d029739b8765be27

                      SHA256

                      e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c

                      SHA512

                      e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\GPUCache\index

                      Filesize

                      256KB

                      MD5

                      dc789f7d4ed7c3b200a5cf7c2ed60704

                      SHA1

                      2c51c38ec9817a3d5fe657360702e7b420bde709

                      SHA256

                      410a591a85c4568a7f2cb2bf81965a3b5a8d055b63fbd98b62f110a064c00441

                      SHA512

                      b2df0e76045253b78da3e64fb9d98a039fa1780c4177ba26c5f7920d03015920834375a296e61e17221b17f091e23bcf7f0f4668aa99ca38e0812e7d3a42087f

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\Local Storage\leveldb\000005.log

                      Filesize

                      91B

                      MD5

                      5f8d46c52308cb5e0722fea6f1785b51

                      SHA1

                      84e87ebf2e42d7cc0f3322db840ff379c2154d61

                      SHA256

                      e5d893cde7d23695ed29a2d74f02e87831b04b598ca59d08bc03404b835d4f0b

                      SHA512

                      df9f980dc40243e883cf92ed16b482ee0284de2cacd5fcd317827d4a2fcea2cc80388f34dd1812221e9e1f2401194b96ec2d0ad996a84a58b005a59b148a1d3d

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\Local Storage\leveldb\CURRENT

                      Filesize

                      16B

                      MD5

                      206702161f94c5cd39fadd03f4014d98

                      SHA1

                      bd8bfc144fb5326d21bd1531523d9fb50e1b600a

                      SHA256

                      1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

                      SHA512

                      0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\Local Storage\leveldb\CURRENT

                      Filesize

                      16B

                      MD5

                      6752a1d65b201c13b62ea44016eb221f

                      SHA1

                      58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                      SHA256

                      0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                      SHA512

                      9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\Local Storage\leveldb\LOG

                      Filesize

                      190B

                      MD5

                      acaa31f8bf6eaa489708bd861225fc6c

                      SHA1

                      b385892ec0b64914dd1a339321c9b7d52e65216a

                      SHA256

                      4c785c225f6cc52900738b3273526bb9a0a9313bdd775b81eafc72e828275de4

                      SHA512

                      f5b4ea4e4a85cef2c996e2dd7ae4b2e7e29fb056f45b18d11e03da8da6b96e0004da2c52160f4e7333785db22be9b5c76c1984151ccc4c15eaf4c3e885d3b056

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\Local Storage\leveldb\LOG

                      Filesize

                      136B

                      MD5

                      52e0b8fb5592c5ec27f6f8968b2fa241

                      SHA1

                      26b81c2054ad2617ac1734a4e7dd0cc1803d2129

                      SHA256

                      ecc291cb038ff68d2603ddeda7dc855e7d3a6f1fe167135c2dcd069370a935b1

                      SHA512

                      811d46e6c6ee6b2c0f8b0047305394cb7feef1e7a54b5ce69f8e5fec18a2e7aab44a9b17ddbcffee87c19cb31042064d6f122e868cf87848c76808c89e45b99f

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\Local Storage\leveldb\MANIFEST-000002

                      Filesize

                      50B

                      MD5

                      22bf0e81636b1b45051b138f48b3d148

                      SHA1

                      56755d203579ab356e5620ce7e85519ad69d614a

                      SHA256

                      e292f241daafc3df90f3e2d339c61c6e2787a0d0739aac764e1ea9bb8544ee97

                      SHA512

                      a4cf1f5c74e0df85dda8750be9070e24e19b8be15c6f22f0c234ef8423ef9ca3db22ba9ef777d64c33e8fd49fada6fcca26c1a14ba18e8472370533a1c65d8d0

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\Local Storage\leveldb\MANIFEST-000004

                      Filesize

                      50B

                      MD5

                      031d6d1e28fe41a9bdcbd8a21da92df1

                      SHA1

                      38cee81cb035a60a23d6e045e5d72116f2a58683

                      SHA256

                      b51bc53f3c43a5b800a723623c4e56a836367d6e2787c57d71184df5d24151da

                      SHA512

                      e994cd3a8ee3e3cf6304c33df5b7d6cc8207e0c08d568925afa9d46d42f6f1a5bdd7261f0fd1fcdf4df1a173ef4e159ee1de8125e54efee488a1220ce85af904

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\Network\Cookies

                      Filesize

                      20KB

                      MD5

                      c9ff7748d8fcef4cf84a5501e996a641

                      SHA1

                      02867e5010f62f97ebb0cfb32cb3ede9449fe0c9

                      SHA256

                      4d3f3194cb1133437aa69bb880c8cbb55ddf06ff61a88ca6c3f1bbfbfd35d988

                      SHA512

                      d36054499869a8f56ac8547ccd5455f1252c24e17d2b185955390b32da7e2a732ace4e0f30f9493fcc61425a2e31ed623465f998f41af69423ee0e3ed1483a73

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\Network\Cookies

                      Filesize

                      20KB

                      MD5

                      7edc479d69a262ea0a6accb8aec594e7

                      SHA1

                      90d48902255452e4541be31a3dbd5fc61c29465e

                      SHA256

                      bb7544e57b71542c10c3ab13e3af7046c6678f7b23efb4f5f6f7102ef257b3ba

                      SHA512

                      99737fe7f5b438e6e7e7a37ffd254bb5136bb8e1021d9113d6416f4e89bdc8be7194f219217f70d9881a15ff37fa157189407fd2f9b23595db45396e97e3c013

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\Session Storage\000003.log

                      Filesize

                      871B

                      MD5

                      721f2bc8e4af3441c4c165eea681320e

                      SHA1

                      68d0d616a2a8a42ed4f39b631de357abd53ad39d

                      SHA256

                      73b21d20a6d23ecd0ee96126d1792502f9fa1c938efbe7ff1de52bf1d925d630

                      SHA512

                      21e63d422b49e053e07449b0a20fc2d5a8c6de8ba8e6f355dcaaddc6a4a9ea1156d56594183197074860d851918caeeddb2c2e0032bae911c2d5f4c1c19a030f

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\Session Storage\CURRENT

                      Filesize

                      16B

                      MD5

                      206702161f94c5cd39fadd03f4014d98

                      SHA1

                      bd8bfc144fb5326d21bd1531523d9fb50e1b600a

                      SHA256

                      1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

                      SHA512

                      0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\Session Storage\CURRENT

                      Filesize

                      16B

                      MD5

                      206702161f94c5cd39fadd03f4014d98

                      SHA1

                      bd8bfc144fb5326d21bd1531523d9fb50e1b600a

                      SHA256

                      1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

                      SHA512

                      0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\Session Storage\CURRENT~RF6c6098.TMP

                      Filesize

                      16B

                      MD5

                      46295cac801e5d4857d09837238a6394

                      SHA1

                      44e0fa1b517dbf802b18faf0785eeea6ac51594b

                      SHA256

                      0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                      SHA512

                      8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\Session Storage\LOG

                      Filesize

                      189B

                      MD5

                      774efca9c2fa86f2a16466c387e83f1f

                      SHA1

                      cdce5a239969e18fa8dfd0d28086dd7fd526d77e

                      SHA256

                      e93d36a178bd9d78cf554f1dbf12d48ff2699d61ef64f7839aa089877753f56a

                      SHA512

                      c968f2d9ae13976d49b67ace1acd55c12c6a042700ef3ed2a44565f41384b8be71ea482c5280ca04af771e206d43a8ea4e17da4350dc8190a7b3c7b042cc7e65

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\Session Storage\MANIFEST-000002

                      Filesize

                      50B

                      MD5

                      22bf0e81636b1b45051b138f48b3d148

                      SHA1

                      56755d203579ab356e5620ce7e85519ad69d614a

                      SHA256

                      e292f241daafc3df90f3e2d339c61c6e2787a0d0739aac764e1ea9bb8544ee97

                      SHA512

                      a4cf1f5c74e0df85dda8750be9070e24e19b8be15c6f22f0c234ef8423ef9ca3db22ba9ef777d64c33e8fd49fada6fcca26c1a14ba18e8472370533a1c65d8d0

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Default\chrome_debug.log

                      Filesize

                      240B

                      MD5

                      578de7927be1eae71822b09e8c9fe518

                      SHA1

                      a37f036a6c75324d3a9744ee67a76d76446bae7b

                      SHA256

                      fcd77cabc0f03081d91e93150143309508b8af4035cd90a80e33a59e798b4e59

                      SHA512

                      4d9cb5073876dd7a9cccd4f30fa11d0cc260b77dc4bf98183fa0e64805d2e718c011618b4b2983e30cab93ba2103b3b1360bc8e80308d9e16cfacecf07b0320c

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\DevToolsActivePort

                      Filesize

                      60B

                      MD5

                      27f8f2127363a494e6d61c74bc8f34d6

                      SHA1

                      42c356d03c496ca0ea093044807f2d3b6061f2f5

                      SHA256

                      02df86b4c09209da50dfa9faba0fc857367b2de334363c4ee07abe8d0b34e49f

                      SHA512

                      9c4c37778c2eb1322d3e131915869f3f5b52fbb3b1f0c3ae5faffb0284a0fa102b4b32dfda3c8870330c614321767a34784a7b8a7ebc125b4cb170c08b175d0b

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User DataLMCYD\Local State

                      Filesize

                      71KB

                      MD5

                      2beb695add0546f6a18496aae58b2558

                      SHA1

                      1fd818202a94825c56ad7a7793bea87c6f02960e

                      SHA256

                      132cb7037ada7d8563c5b8cf64796ed22b0fbc1ccefbbbf5faa3c18545b289ed

                      SHA512

                      e80fa42ab27afa16e0f6f72639077be7da3e73f7c7b4cecbe0d24637ee76334de77a2b61e7c3afab4e3750e53a93baa68d3cdb9c1eb55fb9a5d580cff94f21f2

                    • memory/1320-122-0x0000000002690000-0x00000000026D2000-memory.dmp

                      Filesize

                      264KB

                    • memory/1320-54-0x00000000002C0000-0x0000000000604000-memory.dmp

                      Filesize

                      3.3MB

                    • memory/1320-93-0x00000000059C0000-0x0000000005A00000-memory.dmp

                      Filesize

                      256KB

                    • memory/1320-92-0x00000000059C0000-0x0000000005A00000-memory.dmp

                      Filesize

                      256KB

                    • memory/1320-60-0x0000000002C80000-0x0000000002D32000-memory.dmp

                      Filesize

                      712KB

                    • memory/1320-59-0x00000000059C0000-0x0000000005A00000-memory.dmp

                      Filesize

                      256KB

                    • memory/1320-58-0x00000000059C0000-0x0000000005A00000-memory.dmp

                      Filesize

                      256KB

                    • memory/1320-57-0x00000000002C0000-0x0000000000604000-memory.dmp

                      Filesize

                      3.3MB

                    • memory/1320-56-0x0000000002600000-0x000000000266C000-memory.dmp

                      Filesize

                      432KB

                    • memory/1320-129-0x00000000059C0000-0x0000000005A00000-memory.dmp

                      Filesize

                      256KB

                    • memory/1320-55-0x0000000000100000-0x0000000000170000-memory.dmp

                      Filesize

                      448KB

                    • memory/1320-130-0x00000000059C0000-0x0000000005A00000-memory.dmp

                      Filesize

                      256KB