Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    367s
  • max time network
    363s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    14/06/2024, 13:53

General

  • Target

    black-market.html

  • Size

    15KB

  • MD5

    9c4739170c3e8ac28930fa9796c5f425

  • SHA1

    95475f482487880ee85e6add36a8b7e77317a141

  • SHA256

    61c641eaae0d95acc8e6307317abec43f6c8f176e78c2e73f8ed473e9d703e22

  • SHA512

    af51854f2120fa89240c0103139efbf2303e45c91f12c38e0eaa54e7c967338729e9c14a877da6a92e5e838b64328cdc183249b0379ddc0c200c34a795e9111c

  • SSDEEP

    384:yShi9boJkNzriFij9iPq8TRyp+dYNUzLwiaN:QoJksAj9s1Nyp8YNUHaN

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 14 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Checks processor information in registry 2 TTPs 4 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 5 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\black-market.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2548
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2548 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1616
  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe"
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:1596
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef6659758,0x7fef6659768,0x7fef6659778
      2⤵
        PID:920
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1108 --field-trial-handle=1304,i,8114401124543011406,5967139528965552275,131072 /prefetch:2
        2⤵
          PID:2000
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1536 --field-trial-handle=1304,i,8114401124543011406,5967139528965552275,131072 /prefetch:8
          2⤵
            PID:1984
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1636 --field-trial-handle=1304,i,8114401124543011406,5967139528965552275,131072 /prefetch:8
            2⤵
              PID:1592
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=1608 --field-trial-handle=1304,i,8114401124543011406,5967139528965552275,131072 /prefetch:1
              2⤵
                PID:2588
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2208 --field-trial-handle=1304,i,8114401124543011406,5967139528965552275,131072 /prefetch:1
                2⤵
                  PID:2988
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1108 --field-trial-handle=1304,i,8114401124543011406,5967139528965552275,131072 /prefetch:2
                  2⤵
                    PID:1676
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=2240 --field-trial-handle=1304,i,8114401124543011406,5967139528965552275,131072 /prefetch:1
                    2⤵
                      PID:1156
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3540 --field-trial-handle=1304,i,8114401124543011406,5967139528965552275,131072 /prefetch:8
                      2⤵
                        PID:1868
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3664 --field-trial-handle=1304,i,8114401124543011406,5967139528965552275,131072 /prefetch:8
                        2⤵
                          PID:1872
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3568 --field-trial-handle=1304,i,8114401124543011406,5967139528965552275,131072 /prefetch:8
                          2⤵
                            PID:1640
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=656 --field-trial-handle=1304,i,8114401124543011406,5967139528965552275,131072 /prefetch:1
                            2⤵
                              PID:2492
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=1620 --field-trial-handle=1304,i,8114401124543011406,5967139528965552275,131072 /prefetch:1
                              2⤵
                                PID:2976
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=3492 --field-trial-handle=1304,i,8114401124543011406,5967139528965552275,131072 /prefetch:1
                                2⤵
                                  PID:2768
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=108 --field-trial-handle=1304,i,8114401124543011406,5967139528965552275,131072 /prefetch:1
                                  2⤵
                                    PID:2360
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --mojo-platform-channel-handle=1440 --field-trial-handle=1304,i,8114401124543011406,5967139528965552275,131072 /prefetch:1
                                    2⤵
                                      PID:1932
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=3996 --field-trial-handle=1304,i,8114401124543011406,5967139528965552275,131072 /prefetch:1
                                      2⤵
                                        PID:344
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=3316 --field-trial-handle=1304,i,8114401124543011406,5967139528965552275,131072 /prefetch:1
                                        2⤵
                                          PID:2396
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=1612 --field-trial-handle=1304,i,8114401124543011406,5967139528965552275,131072 /prefetch:1
                                          2⤵
                                            PID:2384
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --mojo-platform-channel-handle=4220 --field-trial-handle=1304,i,8114401124543011406,5967139528965552275,131072 /prefetch:1
                                            2⤵
                                              PID:2824
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=3276 --field-trial-handle=1304,i,8114401124543011406,5967139528965552275,131072 /prefetch:1
                                              2⤵
                                                PID:1564
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=4436 --field-trial-handle=1304,i,8114401124543011406,5967139528965552275,131072 /prefetch:1
                                                2⤵
                                                  PID:3028
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=2172 --field-trial-handle=1304,i,8114401124543011406,5967139528965552275,131072 /prefetch:1
                                                  2⤵
                                                    PID:1172
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3804 --field-trial-handle=1304,i,8114401124543011406,5967139528965552275,131072 /prefetch:8
                                                    2⤵
                                                      PID:932
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --mojo-platform-channel-handle=4100 --field-trial-handle=1304,i,8114401124543011406,5967139528965552275,131072 /prefetch:1
                                                      2⤵
                                                        PID:1240
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --mojo-platform-channel-handle=4084 --field-trial-handle=1304,i,8114401124543011406,5967139528965552275,131072 /prefetch:1
                                                        2⤵
                                                          PID:1156
                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --mojo-platform-channel-handle=4448 --field-trial-handle=1304,i,8114401124543011406,5967139528965552275,131072 /prefetch:1
                                                          2⤵
                                                            PID:112
                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --mojo-platform-channel-handle=3912 --field-trial-handle=1304,i,8114401124543011406,5967139528965552275,131072 /prefetch:1
                                                            2⤵
                                                              PID:2244
                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --mojo-platform-channel-handle=4652 --field-trial-handle=1304,i,8114401124543011406,5967139528965552275,131072 /prefetch:1
                                                              2⤵
                                                                PID:1088
                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4828 --field-trial-handle=1304,i,8114401124543011406,5967139528965552275,131072 /prefetch:8
                                                                2⤵
                                                                  PID:2576
                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --mojo-platform-channel-handle=5024 --field-trial-handle=1304,i,8114401124543011406,5967139528965552275,131072 /prefetch:1
                                                                  2⤵
                                                                    PID:1112
                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --mojo-platform-channel-handle=5224 --field-trial-handle=1304,i,8114401124543011406,5967139528965552275,131072 /prefetch:1
                                                                    2⤵
                                                                      PID:1448
                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3916 --field-trial-handle=1304,i,8114401124543011406,5967139528965552275,131072 /prefetch:8
                                                                      2⤵
                                                                        PID:1644
                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --mojo-platform-channel-handle=580 --field-trial-handle=1304,i,8114401124543011406,5967139528965552275,131072 /prefetch:1
                                                                        2⤵
                                                                          PID:2736
                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --mojo-platform-channel-handle=4432 --field-trial-handle=1304,i,8114401124543011406,5967139528965552275,131072 /prefetch:1
                                                                          2⤵
                                                                            PID:2996
                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --mojo-platform-channel-handle=5192 --field-trial-handle=1304,i,8114401124543011406,5967139528965552275,131072 /prefetch:1
                                                                            2⤵
                                                                              PID:936
                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --mojo-platform-channel-handle=1860 --field-trial-handle=1304,i,8114401124543011406,5967139528965552275,131072 /prefetch:1
                                                                              2⤵
                                                                                PID:2920
                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4788 --field-trial-handle=1304,i,8114401124543011406,5967139528965552275,131072 /prefetch:8
                                                                                2⤵
                                                                                  PID:2336
                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4416 --field-trial-handle=1304,i,8114401124543011406,5967139528965552275,131072 /prefetch:8
                                                                                  2⤵
                                                                                    PID:2816
                                                                                  • C:\Windows\system32\rundll32.exe
                                                                                    "C:\Windows\system32\rundll32.exe" C:\Windows\system32\shell32.dll,OpenAs_RunDLL C:\Users\Admin\Downloads\otomi-games.com_CQU1LVYM.rar
                                                                                    2⤵
                                                                                    • Modifies registry class
                                                                                    PID:1792
                                                                                • C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
                                                                                  "C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
                                                                                  1⤵
                                                                                    PID:2568
                                                                                  • C:\Windows\explorer.exe
                                                                                    "C:\Windows\explorer.exe"
                                                                                    1⤵
                                                                                      PID:2444
                                                                                    • C:\Windows\system32\AUDIODG.EXE
                                                                                      C:\Windows\system32\AUDIODG.EXE 0x1b4
                                                                                      1⤵
                                                                                        PID:2680
                                                                                      • C:\Program Files\7-Zip\7zG.exe
                                                                                        "C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\" -an -ai#7zMap31459:110:7zEvent11122
                                                                                        1⤵
                                                                                          PID:1868
                                                                                        • C:\Users\Admin\Downloads\otomi-games.com_CQU1LVYM\Black Market\Black Market.exe
                                                                                          "C:\Users\Admin\Downloads\otomi-games.com_CQU1LVYM\Black Market\Black Market.exe"
                                                                                          1⤵
                                                                                          • Executes dropped EXE
                                                                                          • Loads dropped DLL
                                                                                          • Checks processor information in registry
                                                                                          • Suspicious behavior: EnumeratesProcesses
                                                                                          • Suspicious use of SetWindowsHookEx
                                                                                          PID:1784
                                                                                          • C:\Users\Admin\Downloads\otomi-games.com_CQU1LVYM\Black Market\UnityCrashHandler64.exe
                                                                                            "C:\Users\Admin\Downloads\otomi-games.com_CQU1LVYM\Black Market\UnityCrashHandler64.exe" --attach 1784 2101248
                                                                                            2⤵
                                                                                            • Executes dropped EXE
                                                                                            PID:820

                                                                                        Network

                                                                                        MITRE ATT&CK Enterprise v15

                                                                                        Replay Monitor

                                                                                        Loading Replay Monitor...

                                                                                        Downloads

                                                                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

                                                                                          Filesize

                                                                                          1KB

                                                                                          MD5

                                                                                          55540a230bdab55187a841cfe1aa1545

                                                                                          SHA1

                                                                                          363e4734f757bdeb89868efe94907774a327695e

                                                                                          SHA256

                                                                                          d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb

                                                                                          SHA512

                                                                                          c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

                                                                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

                                                                                          Filesize

                                                                                          914B

                                                                                          MD5

                                                                                          e4a68ac854ac5242460afd72481b2a44

                                                                                          SHA1

                                                                                          df3c24f9bfd666761b268073fe06d1cc8d4f82a4

                                                                                          SHA256

                                                                                          cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

                                                                                          SHA512

                                                                                          5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

                                                                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

                                                                                          Filesize

                                                                                          70KB

                                                                                          MD5

                                                                                          49aebf8cbd62d92ac215b2923fb1b9f5

                                                                                          SHA1

                                                                                          1723be06719828dda65ad804298d0431f6aff976

                                                                                          SHA256

                                                                                          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

                                                                                          SHA512

                                                                                          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

                                                                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

                                                                                          Filesize

                                                                                          1KB

                                                                                          MD5

                                                                                          a266bb7dcc38a562631361bbf61dd11b

                                                                                          SHA1

                                                                                          3b1efd3a66ea28b16697394703a72ca340a05bd5

                                                                                          SHA256

                                                                                          df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

                                                                                          SHA512

                                                                                          0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

                                                                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416

                                                                                          Filesize

                                                                                          230B

                                                                                          MD5

                                                                                          094cb84ef6416d2438c9179765703148

                                                                                          SHA1

                                                                                          1d9a9909dfc9d8d0d2e377553c38967ca1b00437

                                                                                          SHA256

                                                                                          b279b23693805b818cc6a0b107c25f6df8fae4a774f6ed3c066bf3310da559df

                                                                                          SHA512

                                                                                          59e641717c05e5a861b5849745743d3e59da23ee2c5bb9bcb816db9ba711ea05ef519dbcb5a23f8f96b88226faa527dce96ca7a37d87e6be81e59c950b1c0111

                                                                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

                                                                                          Filesize

                                                                                          252B

                                                                                          MD5

                                                                                          3c376e6cf30bb92b22161c4cb5f054c5

                                                                                          SHA1

                                                                                          8265073f216be1fddc486d0ec54c83365b25500c

                                                                                          SHA256

                                                                                          9d541fb7517de5209ba8a25764387b856cf9b88d63dfc01a9326b990e7d58dfe

                                                                                          SHA512

                                                                                          cbd5558a4e9dbc99beca03755bf56c252d9ed2c2646d5b04e951d79ec636b3fcda3ce53300082fffa8db5e2e7eeb83a818d64dfdc9a59ee9534a75b2b2379d17

                                                                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

                                                                                          Filesize

                                                                                          342B

                                                                                          MD5

                                                                                          903fdfc69d98ce3a6c1004310c41649f

                                                                                          SHA1

                                                                                          3d7bb484a2eeed9be1e6a4a4da6e29c100c9acba

                                                                                          SHA256

                                                                                          5b0de26c9afb34ce6fad46446832ec334b5338d23b2d7ad1c7ff205ae447c6b4

                                                                                          SHA512

                                                                                          45f2366d129a9de8718b2e625e6b41955aac75a433ade002d704f214f9fd5ccf654a56e0e276490877e221aa0b17325c1d128aae0a6ff1497670628a6c1ddbc5

                                                                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

                                                                                          Filesize

                                                                                          342B

                                                                                          MD5

                                                                                          cb636b8ded78a494e4d116c7f3743774

                                                                                          SHA1

                                                                                          2fc2893fd946f9e0d5b733aeaaaaf06b46b8c092

                                                                                          SHA256

                                                                                          9ac38d6beca1a5ff40de9b21bdf7be9d6a18ee78e4b1ca2955d92325a77b0b78

                                                                                          SHA512

                                                                                          d90e97a4575dd5beb9176dc05f7bb8546375a159e2e1caa276262c736eeaf92faf94979c59a324e826289e798a5c9d255360702c8550252762774faf4a4c83a8

                                                                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

                                                                                          Filesize

                                                                                          342B

                                                                                          MD5

                                                                                          454a2d88e90889b5d0e9070245ecd8ac

                                                                                          SHA1

                                                                                          d124324c9fa7f0e4e969bae1d3afe9084cf1c2b0

                                                                                          SHA256

                                                                                          8ccaf3c65a7c4cd79c78a13777253f8fa975731045c82b0aab5f0032e177c25d

                                                                                          SHA512

                                                                                          e312a2a943a8d77d54d2f717bd3f183d96e639d36fd4baafb8dec2fb7cbb8d0eab32b71a4745e6028b009db8fe9c3ee32dd9873d020e48f1973d1f4245450062

                                                                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

                                                                                          Filesize

                                                                                          342B

                                                                                          MD5

                                                                                          0196cd877468afcf72f9693a79880be5

                                                                                          SHA1

                                                                                          0b5fa3feb8c07bf4d6243679c9396da192491c4d

                                                                                          SHA256

                                                                                          001d380a67ac093ee42c6920f322aed70f975351abaa7fb7870ae2c1f06d9315

                                                                                          SHA512

                                                                                          0c57bc3befeecd0e71eff74973404d0c1cc029bfe9261b23c2af8befcd063d96731a228acac58d62feed78b975f261c90fa8ff99db9f295e6f85b71133f9e601

                                                                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

                                                                                          Filesize

                                                                                          342B

                                                                                          MD5

                                                                                          ea8500b76074c54fb172639588450cee

                                                                                          SHA1

                                                                                          c775dd6f5762ba384df5ee51303ce000573fd072

                                                                                          SHA256

                                                                                          8993528d4159e2e22b808ee8b37c2965bb61d409bc389695b4e68a08db618834

                                                                                          SHA512

                                                                                          4367e4cbefbe5e448bf493b4b3470a122f7769c6c775fd6e20c7b447a9ae64761b25b2b7168313f8ec5413c75585a3c55f7a35328256f4032239ae35208df75e

                                                                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

                                                                                          Filesize

                                                                                          342B

                                                                                          MD5

                                                                                          da6488898e45e5738782a5009bfd3c65

                                                                                          SHA1

                                                                                          3d907fc451b9fd1bea556b5dc4a8b24377f47c5d

                                                                                          SHA256

                                                                                          e25f7e48feaf7430f2bf1fe32f6173d151bf099b1310c01f9a70039a8c95ea44

                                                                                          SHA512

                                                                                          e2beb82c059b0e552f23afa8e997612e9433434b92daf8c051d4d735d4da93bef2248e6ee5942ccd55a862a50f51e3aa50fa25e53ff1cd8817dff91a31cbe6fa

                                                                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

                                                                                          Filesize

                                                                                          342B

                                                                                          MD5

                                                                                          ed6c5621d96240b062834957723e6132

                                                                                          SHA1

                                                                                          206e902199f1eac91591f43354bf1dac8424ed2e

                                                                                          SHA256

                                                                                          04d09853a07d795c26210e5e3540b75e7082e6bfee5663085b24a7804f9d7130

                                                                                          SHA512

                                                                                          5d65ab730e4c1840eff4876bc5908ec2e55e8b5aa988e0bf57653185f8a418b44ef9d94ecc660f2b8df91b8a928258a9b5730c4d0106051b92fca877017339bc

                                                                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

                                                                                          Filesize

                                                                                          342B

                                                                                          MD5

                                                                                          bb8ca24408c4f66a82b8233eb4ab6aed

                                                                                          SHA1

                                                                                          29fc322e4048a1ca894bc6d09b2686da8a329098

                                                                                          SHA256

                                                                                          87d5e9bfefdf1853f0d479f7a74f9c3a52f7b27d0c8519e5b76d5d0cbdafebd2

                                                                                          SHA512

                                                                                          919e9edfbdb78a160dff316d77534802e047276e04395c96f9bd88ac07786d1178dadaf3c14b605c0e2a4f0a7bd4805f7a7e994dd30da5a781a54c77d530249e

                                                                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

                                                                                          Filesize

                                                                                          342B

                                                                                          MD5

                                                                                          74e0bf78d857e09a113d115e4ce81e7f

                                                                                          SHA1

                                                                                          6512e6c23f9f086ed7d80e75fb1f40eb87347845

                                                                                          SHA256

                                                                                          02a7189b55bf3f2bf0de3c8c271bf03e612723323afb4586fab925bde396bdbe

                                                                                          SHA512

                                                                                          04d80cb4b343a79b2823b972765b9dc9133fb3df1ff6f309a3b825799fb6756073d2c6f4c8d136a9579581e75557ec9db2e61d26040ad7ae42b14e8bf0692915

                                                                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

                                                                                          Filesize

                                                                                          342B

                                                                                          MD5

                                                                                          b49faec9db5c66b6fd6ef8e764ec1b5d

                                                                                          SHA1

                                                                                          55940c2e097b045a99ec184081b171ac9c310697

                                                                                          SHA256

                                                                                          2ed3ff03390592f98c3d5486821f73e5fcaa36d52e470e5fa5e842b2741b38e5

                                                                                          SHA512

                                                                                          1a53bd75e6227aba3b324f9a9e0b6806e07daf9aea2580dca77fb818da1c1d344d0c393478b4e15be928bd1cb6c54173a742f1ef056ed02524c327cdebb5ec74

                                                                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

                                                                                          Filesize

                                                                                          342B

                                                                                          MD5

                                                                                          e726a95d002b10a1005f2ed6996b0518

                                                                                          SHA1

                                                                                          1b8d48c4b766e5a19c95cdb01d6190257789e726

                                                                                          SHA256

                                                                                          27d9e89db24690e84b56c5cd2c1a68eb24e4229a0aa931078ffd13a59a20fe33

                                                                                          SHA512

                                                                                          68d114fe249b7d7864bfd80184e18e8f76edbad03c5831b917a1d2e7f2ab23c6ce5d59e86b9a3c54b93a7988422e826d6c9d4e5b746a38d1c9a9e9e99d13b851

                                                                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

                                                                                          Filesize

                                                                                          342B

                                                                                          MD5

                                                                                          695345042ab89e31c8440cff03435c06

                                                                                          SHA1

                                                                                          2efbd0e5eed057aa4df41d88ee4f61a89470e7c3

                                                                                          SHA256

                                                                                          f58afa01e389e90ac1ca1b91edde163f456d24d941b6054b664321353fa509fd

                                                                                          SHA512

                                                                                          506d813e79e432f95f7f0544056ec48c7697b50299cbe2457de0ede7398453f5526008fb193a21fb766d33cf4ac0a1e597879fbc29bf83fa4c1fd23c045e7beb

                                                                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

                                                                                          Filesize

                                                                                          342B

                                                                                          MD5

                                                                                          3a67a5c4f02e48334a20db3d43c7ad21

                                                                                          SHA1

                                                                                          80794152b3d1d34d989a90ae8f3b945f2c06beec

                                                                                          SHA256

                                                                                          bd389ca8983aec2be99cf11f824cbdfcd2de1729a81b6c790763b1f2fc33fe29

                                                                                          SHA512

                                                                                          5b97a234183b25eda1cf31769097cd130fa6f12b1d6a51febd9159940ad1a6ffdf8ea793473a41573df5e7de5d33881713165406ea7323bf6636e9c68cb1bdda

                                                                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

                                                                                          Filesize

                                                                                          342B

                                                                                          MD5

                                                                                          e435530f3c7e33f00fc3c11be78d7d23

                                                                                          SHA1

                                                                                          15c2a4c8555d550aced4be38710d4454c81c51d1

                                                                                          SHA256

                                                                                          a742cee87d52c015f8ebbeb652bcb81444294a311eabb458e0bbbbb7c08cc041

                                                                                          SHA512

                                                                                          5ef190036adc55e2fc6e7bbd294c5965887b24babfbe340b0b60e2e3966063c6da16b1aa8b764dbf6ec09b0d70508b706393d0d80131b4a69286689896e7b46d

                                                                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

                                                                                          Filesize

                                                                                          342B

                                                                                          MD5

                                                                                          47fb912ed03ccdc97e799364d1190f9c

                                                                                          SHA1

                                                                                          b72ad596b6b2aece1c2159f1103554a7dd6da773

                                                                                          SHA256

                                                                                          022228d71db916df010ce50c0ba089b09557f6ddf4d3dff20788947cb4b47772

                                                                                          SHA512

                                                                                          d72ff339e446339bd5e23982929d19e428ba5e702365c03bf463212ab259a029e724f67c824a2231b126037428a79646164682f558dcc89f7dc7748d2f69a44c

                                                                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

                                                                                          Filesize

                                                                                          342B

                                                                                          MD5

                                                                                          4df5ec93b67dd4403f9747d405ee608a

                                                                                          SHA1

                                                                                          e9870809fd5dda76a41460f426ff311aee8ff08b

                                                                                          SHA256

                                                                                          b06f14915ec8e934a9e09a63c0567a47e41488e06f5130fa02caf3844249fc26

                                                                                          SHA512

                                                                                          170b845ae1452202b53dc47f1a97d13f5f0838aa441699ae51992a8c9dd74702c46644f91d899a7d153e405850b1e74d8e8cb7aaabe9129cfb81bceb26503d7c

                                                                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

                                                                                          Filesize

                                                                                          342B

                                                                                          MD5

                                                                                          bf28318897f0e9758cd95b3f4a535bad

                                                                                          SHA1

                                                                                          b7196467f2816f89efe7a67d029449e53cdc384a

                                                                                          SHA256

                                                                                          0d77de34f90b7a104583f1c1681df4c175025946861d69ed6e1e071d84780ab0

                                                                                          SHA512

                                                                                          60fd3ab5dc7a4358e5d16e635414f9920a5179ad8f0b89922c07830ccb40c4b81f4357527c7ffffc8138d38e15cbe7362755c0aa38debfa6df4fc3252b7f18ab

                                                                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

                                                                                          Filesize

                                                                                          342B

                                                                                          MD5

                                                                                          d18c6f9970bc62f34d784af00e02a142

                                                                                          SHA1

                                                                                          cc324c3f88e52899dd5a229084029365f54ec925

                                                                                          SHA256

                                                                                          ae0a26f64ce25d68b6f83e006b6c64e805050213a99ec2c4f3494f5846477c64

                                                                                          SHA512

                                                                                          d8681780b0356dce888eadae63f77a2250acd2c20c5dffe0769a4b046f730a08266a0b62b760875d604558fb1a78263e0355245bd3dca493246f38516abee169

                                                                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

                                                                                          Filesize

                                                                                          342B

                                                                                          MD5

                                                                                          2ca705d6627ba689eb1c30b09e839c80

                                                                                          SHA1

                                                                                          d0bc4262715c43c4dac8909a74b39bfc5ec9f094

                                                                                          SHA256

                                                                                          ddafa2f3cda3d4db6c09a5e14cb0a5ccc2e6cc0149e7196c541555aff522188c

                                                                                          SHA512

                                                                                          f1af1c7b8564aa2879933bf731fe6cf5393dc52a83b71f5986dfa0abb3819a0a75aebd11c33e6dd76f0062fac8a1c08c19833b95360ab757ef92fcc14c8af312

                                                                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

                                                                                          Filesize

                                                                                          342B

                                                                                          MD5

                                                                                          8d9367aac1b6f5f43ebf6e0a2f105deb

                                                                                          SHA1

                                                                                          bf122451ea0af8651f332293b2ce1c38062d2981

                                                                                          SHA256

                                                                                          84df9a79b253da4143c5f9f23396fed3b80d41c8e6c508df33b837234c25502a

                                                                                          SHA512

                                                                                          3935d3448151efe090774f5d9b1d188e1bae7bc02fc807d5cd4fd3ef1ce1654d804eb454c98261585044f8e9fa691e8c4dc620f4316d901af3160d2968ec7586

                                                                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

                                                                                          Filesize

                                                                                          342B

                                                                                          MD5

                                                                                          a84670bc5e49b36cb79780510abe953e

                                                                                          SHA1

                                                                                          37068fe7e3ae36cd3e2a7ff88078837f7a9bdac4

                                                                                          SHA256

                                                                                          cacc749a0a5c76215bce87551130d1636ce450087b5694d4169cabe43b75e1b9

                                                                                          SHA512

                                                                                          325bfbb821b71a7bdce6974abd974ba71b9422004c52eb3b0d46e5dbeaa2004aa83addc9ff8e275c60cda5264baf67953d3b064a7c804e2977dbc86a59cbf15c

                                                                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

                                                                                          Filesize

                                                                                          342B

                                                                                          MD5

                                                                                          82390b1dfd57bc0a7833090890308290

                                                                                          SHA1

                                                                                          1ca61a1b8da050f371040713218eb6ad5f26ce7f

                                                                                          SHA256

                                                                                          bc20c1235bbf51443dbe3a39a258d86bae49e77632618a1782d5c953d689cfa4

                                                                                          SHA512

                                                                                          49747102af028bfff4b76cebe6f93d6bef865e1d5a421b51bce2818ee61bd04595956022a1e5ba92a0751a74a4d113dea8f50e1cc065d6f2a6d83dce2d0348cc

                                                                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

                                                                                          Filesize

                                                                                          242B

                                                                                          MD5

                                                                                          7380f06aadfe64c4f8837fecf88d231d

                                                                                          SHA1

                                                                                          32a83afe9714654047f5b96e1b54e74d056fe54f

                                                                                          SHA256

                                                                                          9521d6a09a74ad9c0383e4da993eb8fabe955b2b8f045b554f8a31ccfda07bdf

                                                                                          SHA512

                                                                                          86185a3382e3231bc4d4922b1365b2713b58eda1ae4694029a557ad757132e52347e6301909d9219d67d934d555e528032def86e3d8639ba544c5ac0f6708048

                                                                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

                                                                                          Filesize

                                                                                          4KB

                                                                                          MD5

                                                                                          da597791be3b6e732f0bc8b20e38ee62

                                                                                          SHA1

                                                                                          1125c45d285c360542027d7554a5c442288974de

                                                                                          SHA256

                                                                                          5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

                                                                                          SHA512

                                                                                          d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                          Filesize

                                                                                          2KB

                                                                                          MD5

                                                                                          b9f81de3d7424c8e71d65be465540ecc

                                                                                          SHA1

                                                                                          05eb6c5df820469198933eada651a12d02717d71

                                                                                          SHA256

                                                                                          6c11913be8c7460cd7aa957dc66b0ab3d1c78ae50a264b8fdad8b9946338f6f4

                                                                                          SHA512

                                                                                          1be4356a7698a0d8f435b17f13256ff2bd81349d60dcdafc2ba627a4c08ba1de10d660aaa5436c0df33fe1fdfb9222ea71c833c6749a2a88cc4c10d376a3a814

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                          Filesize

                                                                                          960B

                                                                                          MD5

                                                                                          108091316adcfea85ac02a4827929a47

                                                                                          SHA1

                                                                                          abaeea5071d32c24119e93eec65c8a747da38fbe

                                                                                          SHA256

                                                                                          43b46e7b2d95a1edb34b41229259f4c331fab86a66c4fd9a68dc2404b360ed74

                                                                                          SHA512

                                                                                          42ac19b60dca716cc09eabea84713fd700d4cbc23d029f9b748e8feee16980493db850d4549a94fbe068b3d0ae4041d4f987750dfaca93ea07fdb4f3ad6ea588

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                          Filesize

                                                                                          168B

                                                                                          MD5

                                                                                          d589af905a4c1e4e4bc6c273b334bbfc

                                                                                          SHA1

                                                                                          7dd796451b2472bd5ed3499b8c715b1f4bc410c8

                                                                                          SHA256

                                                                                          0e9331821dd665b39eaca219996d8196f0b978b12a3d8a44fa589afc45727bf9

                                                                                          SHA512

                                                                                          e60e9aa4a037f331deb92fce8618b17df49447438d86f69deb8a0b5e085abf363f702a9d9e4dfb32c29a6e9eb400a9bb18d79c792a12b040d3b07ba07cb2e2d9

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                          Filesize

                                                                                          1KB

                                                                                          MD5

                                                                                          94d39d84ab84453109be201926023a46

                                                                                          SHA1

                                                                                          b4986c0f0c0719bb77f43fdc328a94a22c60b4c9

                                                                                          SHA256

                                                                                          f59d08728f6aae75ffbe857654e9160f3571726b01b8cc36b5baf8b58e48ce6c

                                                                                          SHA512

                                                                                          f332a9b5f5a4130aa06baf61eab6ea403299bf4c7b5be52bd044b4dbcfe2102686222765897e4b7a379ff88186219f42d0d5f805bb6241ac37a9f8e68decbc93

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\MANIFEST-000001

                                                                                          Filesize

                                                                                          41B

                                                                                          MD5

                                                                                          5af87dfd673ba2115e2fcf5cfdb727ab

                                                                                          SHA1

                                                                                          d5b5bbf396dc291274584ef71f444f420b6056f1

                                                                                          SHA256

                                                                                          f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

                                                                                          SHA512

                                                                                          de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\000006.dbtmp

                                                                                          Filesize

                                                                                          16B

                                                                                          MD5

                                                                                          aefd77f47fb84fae5ea194496b44c67a

                                                                                          SHA1

                                                                                          dcfbb6a5b8d05662c4858664f81693bb7f803b82

                                                                                          SHA256

                                                                                          4166bf17b2da789b0d0cc5c74203041d98005f5d4ef88c27e8281e00148cd611

                                                                                          SHA512

                                                                                          b733d502138821948267a8b27401d7c0751e590e1298fda1428e663ccd02f55d0d2446ff4bc265bdcdc61f952d13c01524a5341bc86afc3c2cde1d8589b2e1c3

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1

                                                                                          Filesize

                                                                                          264KB

                                                                                          MD5

                                                                                          f50f89a0a91564d0b8a211f8921aa7de

                                                                                          SHA1

                                                                                          112403a17dd69d5b9018b8cede023cb3b54eab7d

                                                                                          SHA256

                                                                                          b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

                                                                                          SHA512

                                                                                          bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_download.megaup.net_0.indexeddb.leveldb\MANIFEST-000001

                                                                                          Filesize

                                                                                          23B

                                                                                          MD5

                                                                                          3fd11ff447c1ee23538dc4d9724427a3

                                                                                          SHA1

                                                                                          1335e6f71cc4e3cf7025233523b4760f8893e9c9

                                                                                          SHA256

                                                                                          720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

                                                                                          SHA512

                                                                                          10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_megaup.net_0.indexeddb.leveldb\CURRENT~RFf78c571.TMP

                                                                                          Filesize

                                                                                          16B

                                                                                          MD5

                                                                                          46295cac801e5d4857d09837238a6394

                                                                                          SHA1

                                                                                          44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                                                                          SHA256

                                                                                          0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                                                                          SHA512

                                                                                          8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                          Filesize

                                                                                          8KB

                                                                                          MD5

                                                                                          10dd987ff1641847a6d422d83423200e

                                                                                          SHA1

                                                                                          fd70b2168c146415f4f152361c98beccd30c1ebd

                                                                                          SHA256

                                                                                          ee5c0f1682d27275615b0c4ee327f809ec541126b0772d5028c620fd2f4dc293

                                                                                          SHA512

                                                                                          5b615b05e28613fcdc769be0c1dd6221d26058f761f2ca05ff3d5009efba6640b0266708a354402896575db517c0a0d9795296c7cd56faf3ac54b64ce63e341a

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                          Filesize

                                                                                          6KB

                                                                                          MD5

                                                                                          1ecc0bbe34d872903ea4ffa76945e750

                                                                                          SHA1

                                                                                          ff0003afb4907d1d4022aeb2136c15fbb124b10d

                                                                                          SHA256

                                                                                          e53056b659b64983cc348d0fb79f7cdf8a96997b20b5788dde9a14a2cb8c89a4

                                                                                          SHA512

                                                                                          6a5dd1a7d15007ab4702a1e09c22f120a6e3af019069d22565a98edecdecdabd7a0af5295eca2a667127511e33291eee3bfb2dacb2c410f1275fd14e709b7ea5

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                          Filesize

                                                                                          6KB

                                                                                          MD5

                                                                                          d02140c521645b0c74e81a68d1c5065f

                                                                                          SHA1

                                                                                          cf35691875d27a551000c61c06c74ffc262778c0

                                                                                          SHA256

                                                                                          35b7dc73222b9c11c450cab706608f365c80544c1d35fc9201bd34311e4e3c1e

                                                                                          SHA512

                                                                                          90a7e5013f20e4a4a242eea8e6adfc01387fbe7de1b96a93f4992661f63a07fcb8d90fc485d27b7d71c6e24c5a13ece557679ec972d5abdb621fe3866e66a48d

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                          Filesize

                                                                                          6KB

                                                                                          MD5

                                                                                          d45f2325e613f76aea62447e4cd292bc

                                                                                          SHA1

                                                                                          4ca171d42111ad7662947cfc84bdaf61c0d79218

                                                                                          SHA256

                                                                                          bf6ee4b40cf490b26ff8810bbb9ff5d253a9fbef969c52f9e70075575d884f30

                                                                                          SHA512

                                                                                          97454ac0ddea07d2a42cfaf939b82eddc4b0969b63970c9bf0c431c3bfe5e1e59ee5f39bf740d6421b274980fe82d98715ef560b0fca9563006dfddf8663dadc

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                          Filesize

                                                                                          8KB

                                                                                          MD5

                                                                                          bbdf9ed85c5bd071a784e2a288300dcf

                                                                                          SHA1

                                                                                          26a04c9aeeda088b71a5c8606b78f767d441a1e3

                                                                                          SHA256

                                                                                          2a16363b9bbfeb1cab188bbde89fe2885d1dadbefa867af959b0a2a9b95524cf

                                                                                          SHA512

                                                                                          ef595dbe6692a7c13f25894b716fa5e6b723cda7f0f874c93a686664ace38ce2b70c31458b82539e3955a2c88d158bf34f0936a815f7344ee578da7f1d93783d

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                          Filesize

                                                                                          5KB

                                                                                          MD5

                                                                                          af9b5d95a4c53a88457f23f6c9006232

                                                                                          SHA1

                                                                                          4129c33ce848bb0a2d20927438fd81c9475496e5

                                                                                          SHA256

                                                                                          c15e321473cbea83a39de202da4934f16a82fc0d8807a733f9b84a9a2428ff02

                                                                                          SHA512

                                                                                          ef097958ad9230857eba717f57dc50b0846561d99667a9623bcd18f5240d565a0834151dcffad66097c1c4979fdad81506ecc56cb7d3b15e797fff016d0a4abb

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                          Filesize

                                                                                          5KB

                                                                                          MD5

                                                                                          15e9ca2874386f0e908307e8e656a6b0

                                                                                          SHA1

                                                                                          43992e5fc3fead02e51920faa76d12186fb3ce03

                                                                                          SHA256

                                                                                          6eed4847d37c82d175c1fb97ccaa4d4009326d20d43a6be32ba6c0c8e42d18ba

                                                                                          SHA512

                                                                                          0b05f391d8083a21c62dfee988a2e8ded5caa230997bd50302a3b49a492bc6ad285c9084cd274db3877b5a31ec721dc1635eb42746986a7f6fab04b6e4e96064

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                          Filesize

                                                                                          9KB

                                                                                          MD5

                                                                                          30304aacb4a03b3f5ad618120cfe806f

                                                                                          SHA1

                                                                                          69e4b3049ba49c6d517e2f34546e753f96e7f789

                                                                                          SHA256

                                                                                          dc6c231180fd0af140e2e7765cb95fc84edff4676dbe718fbda65b6b94178b4a

                                                                                          SHA512

                                                                                          0d65429d0de16c7e7579492fce8cfbcb8cdc304990c665df2d22ff153def69c3a166c398218111ec6c4b21217fb65260334e52ab9b4b72f35b7f7dcc80110cd0

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                          Filesize

                                                                                          5KB

                                                                                          MD5

                                                                                          6fb9bdcb65789adc00059eff5e206cff

                                                                                          SHA1

                                                                                          b106d7978b6a984e0d797cdcb141932c3a49a601

                                                                                          SHA256

                                                                                          5df53a5ab07408ee30e7c04399172997fb3fa2506bf02a94305dba5b29ebf5d4

                                                                                          SHA512

                                                                                          9f3622da32d593396ddb231cfec3701eb8663ae9adf40cac42a9b1467c13e03097549bb149212090f96262ea95e2e3e21f574b2a8ea0ac2c278dda444ccc61a9

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                                                          Filesize

                                                                                          6KB

                                                                                          MD5

                                                                                          451530739c80d25cad187627fd98136b

                                                                                          SHA1

                                                                                          16e1fa5767fcba9f0b2528841fa5fb0cfa406a31

                                                                                          SHA256

                                                                                          8c9b68f9ea47010a72e5a8ddeff03893b99cad3f86289cf8a3a0187da7fb54d7

                                                                                          SHA512

                                                                                          585ad6c204c966728a91903def7bb00a45c1b5a4dca59145096d8572337997a330c6609f2d507627490e082581e748b328e0effe5abdfd61bf58e372a0b0d5b2

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\000002.dbtmp

                                                                                          Filesize

                                                                                          16B

                                                                                          MD5

                                                                                          206702161f94c5cd39fadd03f4014d98

                                                                                          SHA1

                                                                                          bd8bfc144fb5326d21bd1531523d9fb50e1b600a

                                                                                          SHA256

                                                                                          1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

                                                                                          SHA512

                                                                                          0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\000007.dbtmp

                                                                                          Filesize

                                                                                          16B

                                                                                          MD5

                                                                                          18e723571b00fb1694a3bad6c78e4054

                                                                                          SHA1

                                                                                          afcc0ef32d46fe59e0483f9a3c891d3034d12f32

                                                                                          SHA256

                                                                                          8af72f43857550b01eab1019335772b367a17a9884a7a759fdf4fe6f272b90aa

                                                                                          SHA512

                                                                                          43bb0af7d3984012d2d67ca6b71f0201e5b948e6fe26a899641c4c6f066c59906d468ddf7f1df5ea5fa33c2bc5ea8219c0f2c82e0a5c365ad7581b898a8859e2

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                                                                          Filesize

                                                                                          151KB

                                                                                          MD5

                                                                                          ea0856e0adcc5e3d087a6521aef122ad

                                                                                          SHA1

                                                                                          f94cde0e4840521ee5359dd6ee8b685fd6520634

                                                                                          SHA256

                                                                                          4555e6446348a677ec4e0e1ddc496e503e93f82d731d4f7c10e26b702024c03a

                                                                                          SHA512

                                                                                          8e56b100c520fea0fe30dd52c23ce8aeb16a69c00b9162816044450492734f08780408a9fe92cd51c6994613e3a8776ab2570ab96d7d8e81eb97f7a44fbc0434

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                                                                          Filesize

                                                                                          151KB

                                                                                          MD5

                                                                                          248ea589811ceeb27802bb9dcba0b784

                                                                                          SHA1

                                                                                          c74468b0b72d5d79b3135a9163965a641aaf5252

                                                                                          SHA256

                                                                                          f1e3e24dcdbb922259341d1fd70f0b207b9067872294dd9bc8ed68d1807bfc42

                                                                                          SHA512

                                                                                          e9ec671e61ccd9f92e70b90518dccc952961fcecba6b7e66982cf25bc8f7041b19789069b20c51a8a4259be9470f3cfd66c3bdd774f510ba00fae414e55d4c75

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                                                                          Filesize

                                                                                          151KB

                                                                                          MD5

                                                                                          be0b8126c5e8937861b302919d300ab3

                                                                                          SHA1

                                                                                          229a19c6d364379dea99aea8c7545bc978f1718a

                                                                                          SHA256

                                                                                          6766c127b8507a3165ca6388298a48695ae34579acb74246351fca9534c4224a

                                                                                          SHA512

                                                                                          84f8db00e9d16d24252b2154133d2f4de528d87578d5774106ad5426b5e1580e16ad1621d98d3a3b4010fac5e61811c3f9255348ac2e927fdd05dd5a2fd84309

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                                                                          Filesize

                                                                                          151KB

                                                                                          MD5

                                                                                          135c51dbaa30e2f3df556d9dbb50e902

                                                                                          SHA1

                                                                                          04fa8d7eb5f0a4ff4c6799dea452f540c02608a0

                                                                                          SHA256

                                                                                          37df59d03c3af104f22567a567ce349f9210507c80b91669dc94d2b087ea08c4

                                                                                          SHA512

                                                                                          549baf82a60a8e5d3d3c0dadeec5f826454a7ba7be243c9049edde8c0ed9d394f10a1c9b11e538177d990fae16701e2ca814364c382a2931b85316391193d5cf

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

                                                                                          Filesize

                                                                                          80KB

                                                                                          MD5

                                                                                          1cd0b02f2b74047c220d95a44468478d

                                                                                          SHA1

                                                                                          c6406c9679bbda40a70d2e2668e6ef426e868122

                                                                                          SHA256

                                                                                          83724ce35102b4065c5f7b7266d49e353a09aeb412f9a2e51e3eaad5161acdd8

                                                                                          SHA512

                                                                                          16e4668b52cb2f0c9ce4b51a8b65b896e8a3e43e8b6bc0715fbc719433c1c12ce5ccb53c1546bed63c2541a8c947d2e22e1eff3f2f846b3477c45c582b379bb6

                                                                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

                                                                                          Filesize

                                                                                          85KB

                                                                                          MD5

                                                                                          14593a949dcef20217847f77b0b251e4

                                                                                          SHA1

                                                                                          dc73bb67a37580a8f6f9be129cfa49002a3c7276

                                                                                          SHA256

                                                                                          bf5525ad3cf37fe9996bbe7c67a4ec3fd7889d1d2d507ad55da6f27ea375d993

                                                                                          SHA512

                                                                                          e10ab2d2a60fdb4c22136e8a0bc32ce8af0f19b0ea96db0ac91d9135377a9a88d0580498ddd752d2356f7bcbc5143b3fa92dcaafa277b6f811d1d9d32748acc7

                                                                                        • C:\Users\Admin\AppData\Local\Temp\Tar2275.tmp

                                                                                          Filesize

                                                                                          181KB

                                                                                          MD5

                                                                                          4ea6026cf93ec6338144661bf1202cd1

                                                                                          SHA1

                                                                                          a1dec9044f750ad887935a01430bf49322fbdcb7

                                                                                          SHA256

                                                                                          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

                                                                                          SHA512

                                                                                          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

                                                                                        • C:\Users\Admin\Downloads\otomi-games.com_CQU1LVYM\Black Market\Black Market_Data\GI\level0\f9\f94fba53ef3cfb3b94d31a3d759c8ebe.ecm

                                                                                          Filesize

                                                                                          13KB

                                                                                          MD5

                                                                                          9bbe772cdb3752c1f8952f1c46c6a351

                                                                                          SHA1

                                                                                          274b40d882798b242497124cf3eab560b4064da7

                                                                                          SHA256

                                                                                          85831b9eb513a971b15590fee84b6b59906ce87e1310cc7510da8216cf13464e

                                                                                          SHA512

                                                                                          b4c3b5bf96b5414fc5a8056a035859a07f6ed4d8a6380b0ce7485a3d3a88c1960ebbdb30cb6bf11ecf2001814d806c87d39e55c46b449bd03d771fdcf6f546f4

                                                                                        • C:\Users\Admin\Downloads\otomi-games.com_CQU1LVYM\Black Market\Black Market_Data\GI\level1\9e\9ee3d8ea67d5e0feb22d28980072b9c2.ecm

                                                                                          Filesize

                                                                                          13KB

                                                                                          MD5

                                                                                          0cf7e58e499acc35ff660ea50cd44584

                                                                                          SHA1

                                                                                          407fb0736949e16997849612f5db264adf044dec

                                                                                          SHA256

                                                                                          385743720a59349cd3b0e86e2c0d1dc5413291fefde6eab3cf1832bf9af9758d

                                                                                          SHA512

                                                                                          44b070cc8490e8d6f0e4b5907687f82123e7f22d038f8e399b80e3aab9243da5a3d5eda9cd24fc61780764b351b900b1dc490110be3be4785541577fc7eb9a98

                                                                                        • C:\Users\Admin\Downloads\otomi-games.com_CQU1LVYM\Black Market\Black Market_Data\GI\level1\f8\f89f025ee51e7e1a17d65c9ca26fb005.ecm

                                                                                          Filesize

                                                                                          8KB

                                                                                          MD5

                                                                                          a0331d35f84a3ad96b5a179721e70dda

                                                                                          SHA1

                                                                                          501e42dc636b81fbe3c884b87dd1eb4663036601

                                                                                          SHA256

                                                                                          14ddbfed6d0fa3875b02eee8e6805d4efb66c0e7382951ed278b9b8f06f1402b

                                                                                          SHA512

                                                                                          979ee30601e7eea88e8864aee7acbb7660086d3c7365e3a87be82a29b7bc552f2d7cdaa0311b3452e9e72982b485493e242e9a4c95490dadbf5ebdb1137b5406

                                                                                        • C:\Users\Admin\Downloads\otomi-games.com_CQU1LVYM\Black Market\Black Market_Data\GI\level2\09\091c34b43504a8c0e89474a31a3b3c03.pos

                                                                                          Filesize

                                                                                          292B

                                                                                          MD5

                                                                                          4254e5c00fa78baeb3d81b11d87f7df7

                                                                                          SHA1

                                                                                          83e1dc230434219be377937ce1f3952d703f72fb

                                                                                          SHA256

                                                                                          5637622ab3816a1fdb21c19e0d14261484b3f87763dde2de82aef89d07c5a34f

                                                                                          SHA512

                                                                                          bdee667d3ce07848ed06f9cadba26d8711ae1b4325e74488a385abd22742f9d432c662e159a4eca12686474a4fba03606836952d1511af3b3cc3d02ae2b8190b

                                                                                        • C:\Users\Admin\Downloads\otomi-games.com_CQU1LVYM\Black Market\Black Market_Data\GI\level2\31\31aace7314c16a73be568fdf9a1e393c.pos

                                                                                          Filesize

                                                                                          132B

                                                                                          MD5

                                                                                          0caf9d7a114e4078141ce0687cd4fae2

                                                                                          SHA1

                                                                                          96243ef352c572ba85ab3cfb47860c1305bc8cd8

                                                                                          SHA256

                                                                                          b62ecca60f340c01046941f556ee09420cad148be28f9d11a608a9fcd2efe3a1

                                                                                          SHA512

                                                                                          7e1a6bf00355b09f53b9248664296e5bcd5f0bdf2330e477f77a54c957bb42e1a9cf75c68a8ac05b5c006922de1dc108a34b3c94dc8fa4611deff3d9d4590d29

                                                                                        • C:\Users\Admin\Downloads\otomi-games.com_CQU1LVYM\Black Market\Black Market_Data\GI\level2\33\33eb56310457fb8267c34dd8961efc1b.pos

                                                                                          Filesize

                                                                                          164B

                                                                                          MD5

                                                                                          3ee3ff36411978e8f29a8ee8a43cb072

                                                                                          SHA1

                                                                                          00737c6bbb615e13bcb3b6966df03a8740f71692

                                                                                          SHA256

                                                                                          92776071994a8ea4a3b4598c475b3432db265e870b2e83d732f6d4e50dfb19d3

                                                                                          SHA512

                                                                                          3239ab8c0a471dafe6d720a3bbcda86f4a1b893c586ab00a321bb67bb5ffaaf1ff009849ea5797a2ab8b829010b8186e6e0627029c0c5e51c7c77c6ce2a18927

                                                                                        • C:\Users\Admin\Downloads\otomi-games.com_CQU1LVYM\Black Market\Black Market_Data\GI\level2\3a\3a3d9dda2af17062ee5a718ffad8351e.pos

                                                                                          Filesize

                                                                                          36B

                                                                                          MD5

                                                                                          b161c11c7bb1224995a644228cba80b6

                                                                                          SHA1

                                                                                          2d8a226ef6e3148305f0ae09867cef8f042434c4

                                                                                          SHA256

                                                                                          c7b4eefb86bd5c06893f3583e322256245cb616660f57f38c86fbed886eaa8f1

                                                                                          SHA512

                                                                                          2e7bbbd6c2f94fc6ad581bf97c039e1322e443a4d8b6e02b7ae92ec21c58182e36d6dad2ce44f9b9ec02645c5135687e596c5ba3d38f734263fd11be44d493ed

                                                                                        • C:\Users\Admin\Downloads\otomi-games.com_CQU1LVYM\Black Market\Black Market_Data\GI\level2\3b\3bbeed4a4f482a98a8266f85e2f073ee.pos

                                                                                          Filesize

                                                                                          36B

                                                                                          MD5

                                                                                          5c5be95efd0fd9c47f67ace658b81918

                                                                                          SHA1

                                                                                          5caaadc17d036c4f6b7efb3f9fd98f98e7744a8d

                                                                                          SHA256

                                                                                          239d6209419ed7ad5bbbdfe742ec1858b253c0da0764449e5003ed394c42d6a1

                                                                                          SHA512

                                                                                          ee4d5ed31858323431fb3d604f1c9437f513918ab1cd75b453a78d5ee88c9533e3a271c9d6e75e34e438613255784bb480b8ed08c38cc2e6751b163cfb2bcadf

                                                                                        • C:\Users\Admin\Downloads\otomi-games.com_CQU1LVYM\Black Market\Black Market_Data\GI\level2\62\6283fe32aea22f85170c91dc8044e0dc.rgb

                                                                                          Filesize

                                                                                          8KB

                                                                                          MD5

                                                                                          847b159fc5cf47481b093280576a5f4e

                                                                                          SHA1

                                                                                          288f0e61a1baafadbcdbed2f802e240b094abaa3

                                                                                          SHA256

                                                                                          f85c97acb2674c0c5228356e56d01f0a8be7b96ed5038926ed3ae83e9e51adb3

                                                                                          SHA512

                                                                                          bd8e9970d90188b7cdd36690cc642f8814b7ced7e7d4b68f34183c9732f3d1c40f7c4b9b3c43d045d2cc1abb07598168a76e1e277b700ae8c934e247432af136

                                                                                        • C:\Users\Admin\Downloads\otomi-games.com_CQU1LVYM\Black Market\Black Market_Data\GI\level2\67\67aac33338f82278bc3debbcdb06a337.pos

                                                                                          Filesize

                                                                                          68B

                                                                                          MD5

                                                                                          9ef8a8b6250840ef99b789a6f5f67fe9

                                                                                          SHA1

                                                                                          4ceb1d167d5582c2f95edb5c16e3310da73aa0d4

                                                                                          SHA256

                                                                                          4c1ce167ed52f93caec84bf065b80d2a6bda429661a784e9f02374d20e4f7322

                                                                                          SHA512

                                                                                          0a709e0575de4869063e39a9f31aef3388e771d657d27e2dffce0c275cbc551fada1d746b92c8da3e7517a237117de40005a5f13fbc74a5a8def1fd0fff214ab

                                                                                        • C:\Users\Admin\Downloads\otomi-games.com_CQU1LVYM\Black Market\Black Market_Data\GI\level2\ad\add23735b8b92f8d8b2c2f718d9a24a3.pos

                                                                                          Filesize

                                                                                          164B

                                                                                          MD5

                                                                                          78c223eb6542cf2117f7ab7af3f969d3

                                                                                          SHA1

                                                                                          23632290ba8b45aee8fe795c8a7f57db20c9a713

                                                                                          SHA256

                                                                                          37ac8c7833d7926b0e03205db8623bf535e09eca090ade7305b0e80b184611b6

                                                                                          SHA512

                                                                                          aea88deba4679c365ce311aa1134c395457a9ea88419f6b3bdf90ebd1f6144d100b9781946bab1deb25d43bb5a33c63cffdfba8cd28d96ad52b11f2acb481b61

                                                                                        • C:\Users\Admin\Downloads\otomi-games.com_CQU1LVYM\Black Market\Black Market_Data\GI\level2\ce\ce81aff26f9a94757ff07b3839417376.pos

                                                                                          Filesize

                                                                                          68B

                                                                                          MD5

                                                                                          bb58ed9b990abec71d3f6113193bc22d

                                                                                          SHA1

                                                                                          60f97f9fad30f4343b5522b8b465ff1b3673df90

                                                                                          SHA256

                                                                                          a4e40298ddbbfc52e3462a18e77d7a2ad624afaf9469e6deeb414de008816228

                                                                                          SHA512

                                                                                          1e408a7e4746ad87b2bc451e446aa54fae15666bc6f4781c9e573aa5c73a3697978a9fdd1bf15a83fe5b9c1f566de42118049c0bca8a469c53d97017a2552783

                                                                                        • C:\Users\Admin\Downloads\otomi-games.com_CQU1LVYM\Black Market\Black Market_Data\app.info

                                                                                          Filesize

                                                                                          22B

                                                                                          MD5

                                                                                          e8c4b5789eda949db2838087def3122d

                                                                                          SHA1

                                                                                          36f73f387a69668c9fb29262f974f8c751b3e4ca

                                                                                          SHA256

                                                                                          8e662d933dec9aa398892bca61eca0fbc902d6ef9c1d93835c345b508ef841de

                                                                                          SHA512

                                                                                          7180a571914e4cc91faabad717ce1409363975c98c65fba210b5784dd2bf3d40b0df5971f1a410e552f9f5ac64d9a054367318e8fee7cf0323a85c09c1c467b0

                                                                                        • C:\Users\Admin\Downloads\otomi-games.com_CQU1LVYM\Black Market\Black Market_Data\boot.config

                                                                                          Filesize

                                                                                          123B

                                                                                          MD5

                                                                                          3302d56ce69ae79b5745181080b88597

                                                                                          SHA1

                                                                                          65c9dcca706a436c7c89341db387c0427ffb6063

                                                                                          SHA256

                                                                                          6eb7c3af3d6f052cc5f22091454b79caf4434c551bda39a811425d116b1afde8

                                                                                          SHA512

                                                                                          09844a63205f821cdd774ca640402f7e22497a6b3418fac59f4167a18cb3297bb7d5ec262c85786f613943fe26746884a9b96a6e37b2489f6b51e77271624459

                                                                                        • C:\Users\Admin\Downloads\otomi-games.com_CQU1LVYM\Black Market\MonoBleedingEdge\EmbedRuntime\mono-2.0-bdwgc.dll

                                                                                          Filesize

                                                                                          4.7MB

                                                                                          MD5

                                                                                          6b01f6db494d1af3fbe91e1e7fcd7087

                                                                                          SHA1

                                                                                          ab7ef90fa84d251bd01a41261096e1eb1eda3331

                                                                                          SHA256

                                                                                          6302ee3426a6fe4d23be8a8b1beff51254262188b0940d5cdc2cebe6cbcef2d1

                                                                                          SHA512

                                                                                          430955785cda179b3e6b3efbd52ebcf75e466365220bdbe75f628bfc41e405f5caddc2bcb92537cd294e58778d6157b9bd2a0583f55475f824c0a1b8a630649d

                                                                                        • C:\Users\Admin\Downloads\otomi-games.com_CQU1LVYM\Black Market\MonoBleedingEdge\etc\mono\4.5\Browsers\Compat.browser

                                                                                          Filesize

                                                                                          1KB

                                                                                          MD5

                                                                                          0d831c1264b5b32a39fa347de368fe48

                                                                                          SHA1

                                                                                          187dff516f9448e63ea5078190b3347922c4b3eb

                                                                                          SHA256

                                                                                          8a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741

                                                                                          SHA512

                                                                                          4b7549eda1f8ed2c4533d056b62ca5030445393f9c6003e5ee47301ff7f44b4bd5022b74d54f571aa890b6e4593c6eded1a881500ac5ba2a720dc0ff280300af

                                                                                        • C:\Users\Admin\Downloads\otomi-games.com_CQU1LVYM\Black Market\MonoBleedingEdge\etc\mono\4.5\DefaultWsdlHelpGenerator.aspx

                                                                                          Filesize

                                                                                          59KB

                                                                                          MD5

                                                                                          f7be9f1841ff92f9d4040aed832e0c79

                                                                                          SHA1

                                                                                          b3e4b508aab3cf201c06892713b43ddb0c43b7ae

                                                                                          SHA256

                                                                                          751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a

                                                                                          SHA512

                                                                                          380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5

                                                                                        • C:\Users\Admin\Downloads\otomi-games.com_CQU1LVYM\Black Market\UnityPlayer.dll

                                                                                          Filesize

                                                                                          23.2MB

                                                                                          MD5

                                                                                          de49647f571cffcb939f83e21d929541

                                                                                          SHA1

                                                                                          bb31d6642189c0ae7b21fd49dddf127b4d13f3cb

                                                                                          SHA256

                                                                                          ce3ce6fc3c9b711686f7af1437d4337e632e3eb6e2bacadaa15dd23b81b9957e

                                                                                          SHA512

                                                                                          345f559714d334d1826b5eb5f428849b6ec72c377f0f46ea00f47b082faee10d4a573588058e908d909c43385bd270d0cc3d178f71921563dfc6ffa95d11f1fe

                                                                                        • \Users\Admin\Downloads\otomi-games.com_CQU1LVYM\Black Market\Black Market.exe

                                                                                          Filesize

                                                                                          635KB

                                                                                          MD5

                                                                                          184087bd0861a3b9ed1ac73989131e5d

                                                                                          SHA1

                                                                                          92f7f093bc24c311c58304521c59161e1f60f31b

                                                                                          SHA256

                                                                                          2addcf85dadefe8790b5f5e2f4ceb0b91bdcd6a477c796e86ca04ea8eb2a1972

                                                                                          SHA512

                                                                                          1f13423f666613eba9b65a47ff04e97dd4df4e1749ba13a2374344494b379bf9ee9a1faf94327d76b431c84be45c14fc5af35a564b507cd29e1ebe1ee4e9989b

                                                                                        • \Users\Admin\Downloads\otomi-games.com_CQU1LVYM\Black Market\UnityCrashHandler64.exe

                                                                                          Filesize

                                                                                          1.6MB

                                                                                          MD5

                                                                                          f51a49be7deda7f0069a2b1d435b7074

                                                                                          SHA1

                                                                                          9b6844acf701cee64a1caaa7fa78d2ad2fb5a2c2

                                                                                          SHA256

                                                                                          9aa135a04d58d8cc5a1cb296c52ae313362baa4000d0bff68376e393700f29ac

                                                                                          SHA512

                                                                                          4c7250450c13a68742786f9ead7dd555d32ba170f3a6acf2870b3ba97dd25170a79c5b5b2430f4d2724fa94f85a4633d565e1c442400149ca8150b87dad97158

                                                                                        • memory/1784-3274-0x000007FFFFE80000-0x000007FFFFE90000-memory.dmp

                                                                                          Filesize

                                                                                          64KB

                                                                                        • memory/1784-3376-0x000007FFFFCD0000-0x000007FFFFCE0000-memory.dmp

                                                                                          Filesize

                                                                                          64KB

                                                                                        • memory/1784-3276-0x000007FFFFE90000-0x000007FFFFEA0000-memory.dmp

                                                                                          Filesize

                                                                                          64KB

                                                                                        • memory/1784-3302-0x000007FFFFD80000-0x000007FFFFDA0000-memory.dmp

                                                                                          Filesize

                                                                                          128KB

                                                                                        • memory/1784-3314-0x000007FFFFD60000-0x000007FFFFD80000-memory.dmp

                                                                                          Filesize

                                                                                          128KB

                                                                                        • memory/1784-3332-0x000007FFFFD20000-0x000007FFFFD40000-memory.dmp

                                                                                          Filesize

                                                                                          128KB

                                                                                        • memory/1784-3338-0x000007FFFFD40000-0x000007FFFFD50000-memory.dmp

                                                                                          Filesize

                                                                                          64KB

                                                                                        • memory/1784-3346-0x000007FFFFE20000-0x000007FFFFE40000-memory.dmp

                                                                                          Filesize

                                                                                          128KB

                                                                                        • memory/1784-3360-0x000007FFFFD00000-0x000007FFFFD10000-memory.dmp

                                                                                          Filesize

                                                                                          64KB

                                                                                        • memory/1784-3246-0x000007FFFFEA0000-0x000007FFFFEB0000-memory.dmp

                                                                                          Filesize

                                                                                          64KB

                                                                                        • memory/1784-3372-0x000007FFFFCF0000-0x000007FFFFD00000-memory.dmp

                                                                                          Filesize

                                                                                          64KB

                                                                                        • memory/1784-3380-0x000007FFFFCE0000-0x000007FFFFCF0000-memory.dmp

                                                                                          Filesize

                                                                                          64KB

                                                                                        • memory/1784-3390-0x000007FFFFCA0000-0x000007FFFFCC0000-memory.dmp

                                                                                          Filesize

                                                                                          128KB

                                                                                        • memory/1784-3394-0x000007FFFFCC0000-0x000007FFFFCD0000-memory.dmp

                                                                                          Filesize

                                                                                          64KB

                                                                                        • memory/1784-3404-0x000007FFFFC90000-0x000007FFFFCA0000-memory.dmp

                                                                                          Filesize

                                                                                          64KB

                                                                                        • memory/1784-3429-0x000007FFFFC30000-0x000007FFFFC40000-memory.dmp

                                                                                          Filesize

                                                                                          64KB

                                                                                        • memory/1784-3501-0x000007FFFFB60000-0x000007FFFFB80000-memory.dmp

                                                                                          Filesize

                                                                                          128KB