Analysis

  • user interaction
    yes
  • max time kernel
    272s
  • max time network
    230s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    03/08/2026, 12:50

General

  • Target
    https://gofile.io/d/mt4hH5
  • Sample260803-p29lsaybnd
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 2 IoCs
  • Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks SCSI registry key(s) 3 TTPs 4 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 6 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 55 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 25 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://gofile.io/d/mt4hH5
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4244
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffdc68ec728,0x7ffdc68ec734,0x7ffdc68ec740
      2⤵
        PID:4828
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1764,i,4226535651158183142,5127739664777893111,262144 --field-trial-handle=2012,i,15785153911552513399,329563699096806937,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2008 /prefetch:2
        2⤵
          PID:1320
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2244,i,1792756805338801346,3521141017321638814,524288 --field-trial-handle=2012,i,15785153911552513399,329563699096806937,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2248 /prefetch:3
          2⤵
          • System Time Discovery
          PID:3288
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2392,i,6706314923505175681,3320648091065223996,524288 --field-trial-handle=2012,i,15785153911552513399,329563699096806937,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2584 /prefetch:8
          2⤵
            PID:3868
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3236,i,6804310433851936494,2217123952590000336,2097152 --field-trial-handle=2012,i,15785153911552513399,329563699096806937,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3252 /prefetch:1
            2⤵
              PID:2916
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3248,i,15289966569660089728,13286037089499271447,2097152 --field-trial-handle=2012,i,15785153911552513399,329563699096806937,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3280 /prefetch:1
              2⤵
                PID:1664
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4024,i,8354723168356887590,2820813673430442812,2097152 --field-trial-handle=2012,i,15785153911552513399,329563699096806937,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4044 /prefetch:2
                2⤵
                  PID:2536
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4720,i,15701275994160287692,6232358238528545499,2097152 --field-trial-handle=2012,i,15785153911552513399,329563699096806937,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4736 /prefetch:1
                  2⤵
                    PID:472
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3448,i,11297870667947321944,4862845159435081092,2097152 --field-trial-handle=2012,i,15785153911552513399,329563699096806937,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3492 /prefetch:1
                    2⤵
                      PID:3416
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5464,i,13239853759122340239,16713794823903492172,524288 --field-trial-handle=2012,i,15785153911552513399,329563699096806937,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5468 /prefetch:8
                      2⤵
                        PID:4588
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5468,i,12544140346670578755,15929444039048162077,2097152 --field-trial-handle=2012,i,15785153911552513399,329563699096806937,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5760 /prefetch:1
                        2⤵
                          PID:368
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5900,i,2224067448554133312,4494221109180518747,524288 --field-trial-handle=2012,i,15785153911552513399,329563699096806937,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3452 /prefetch:8
                          2⤵
                            PID:3984
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4860,i,2285915943033040783,9655490540115265484,524288 --field-trial-handle=2012,i,15785153911552513399,329563699096806937,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3504 /prefetch:8
                            2⤵
                              PID:4148
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3260,i,6510407001224046222,12685534844890042406,524288 --field-trial-handle=2012,i,15785153911552513399,329563699096806937,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5988 /prefetch:8
                              2⤵
                                PID:1368
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3448,i,4259504140822372572,1466407294379691132,524288 --field-trial-handle=2012,i,15785153911552513399,329563699096806937,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5108 /prefetch:8
                                2⤵
                                  PID:5028
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5868,i,14273137482216501446,1515861265665841347,262144 --field-trial-handle=2012,i,15785153911552513399,329563699096806937,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5852 /prefetch:8
                                  2⤵
                                  • Suspicious behavior: EnumeratesProcesses
                                  PID:2252
                              • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                1⤵
                                  PID:4656
                                • C:\Windows\system32\svchost.exe
                                  C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                  1⤵
                                    PID:4320
                                  • C:\Windows\System32\rundll32.exe
                                    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                    1⤵
                                      PID:116
                                    • C:\Program Files\7-Zip\7zG.exe
                                      "C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\" -an -ai#7zMap27175:140:7zEvent3442
                                      1⤵
                                      • Suspicious use of FindShellTrayWindow
                                      PID:4796
                                    • C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest.exe
                                      "C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest.exe"
                                      1⤵
                                      • Executes dropped EXE
                                      • Loads dropped DLL
                                      • Checks SCSI registry key(s)
                                      • Checks processor information in registry
                                      • Modifies registry class
                                      • Suspicious use of SetWindowsHookEx
                                      • Suspicious use of WriteProcessMemory
                                      PID:2156
                                      • C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\UnityCrashHandler64.exe
                                        "C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\UnityCrashHandler64.exe" --attach 2156 2079365599232
                                        2⤵
                                        • Executes dropped EXE
                                        PID:2444
                                    • C:\Windows\system32\AUDIODG.EXE
                                      C:\Windows\system32\AUDIODG.EXE 0x500 0x4fc
                                      1⤵
                                        PID:4428

                                      Network

                                            MITRE ATT&CK Enterprise v16

                                            Replay Monitor

                                            Loading Replay Monitor...

                                            Downloads

                                            c

                                            • Path C:\Users\Admin\AppData\LocalLow\NEKOUJI\CYANBRAIN2_ Combat Playtest\Unity\local.2b36837edc07d0e43b7a96c94c674ef5\Analytics\ArchivedEvents\178576162500002.8e84bd5b\c
                                            • Size 1B
                                            • SHA256 d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35
                                            • MD5 SHA1 SHA512

                                            s

                                            • Path C:\Users\Admin\AppData\LocalLow\NEKOUJI\CYANBRAIN2_ Combat Playtest\Unity\local.2b36837edc07d0e43b7a96c94c674ef5\Analytics\ArchivedEvents\178576162500002.8e84bd5b\s
                                            • Size 464B
                                            • SHA256 79f9677da012ccc2aa87a4f892cc061dc3318a3134ce304b06888ca64565eb9e
                                            • MD5 SHA1 SHA512 TLSH

                                            BookmarkMergedSurfaceOrdering

                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                            • Size 6B
                                            • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                            • MD5 SHA1 SHA512

                                            BrowsingTopicsState

                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                            • Size 414B
                                            • SHA256 18ce03adf8683c20b89a047b907bf45916c4abaa8eeef133717dc50a4bb7b213
                                            • MD5 SHA1 SHA512 TLSH

                                            the-real-index

                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                            • Size 720B
                                            • SHA256 693645ee33a89db3a7eac8d2d42d0bb94ced5b1efab7d4a3aed6ee4e2e6394d2
                                            • MD5 SHA1 SHA512 TLSH

                                            data_1

                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnGraphiteCache\data_1
                                            • Size 264KB
                                            • SHA256 f8d780f8e381ed559b5e83449ff5f197d62ffb0cebd5f59dc9cdde8e7fcf10a1
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            Network Persistent State

                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                            • Size 3KB
                                            • SHA256 cbed2d93a12c310c6a894d9be1e3e6a51dcff9d5fa72af13802888762c62c1e1
                                            • MD5 SHA1 SHA512 TLSH

                                            Network Persistent State

                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                            • Size 3KB
                                            • SHA256 376ebf578e3d006dff1de97eea5ac6515ec00bbed360e9c36fb2ad097e05b26f
                                            • MD5 SHA1 SHA512 TLSH

                                            SCT Auditing Pending Reports

                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                            • Size 2B
                                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                            • MD5 SHA1 SHA512

                                            TransportSecurity

                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                            • Size 1KB
                                            • SHA256 3d1a213e50d85e9da664b1f917b6840f51283549e677ac892cda0316b42326ec
                                            • MD5 SHA1 SHA512 TLSH

                                            Preferences

                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                            • Size 13KB
                                            • SHA256 9fc7939633c7cdef99f38b005a4bd73aecf5831f55f6dd799125f7e1e45021a4
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            Preferences

                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                            • Size 12KB
                                            • SHA256 e725f2178e17f5328aae4fbc37ba646a416989fb0eb801ca45d070733f16ab65
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            Preferences

                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                            • Size 13KB
                                            • SHA256 926880b35f1e890e13baad5b5c667849ebb0e11e8d6d02eba1760ffbdc45a653
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            Preferences

                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                            • Size 13KB
                                            • SHA256 18230f4f14ef93db2f5e6a6ea47611d47d14b6b76d8857b2e80e3dc5faff50c7
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            Preferences

                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                            • Size 12KB
                                            • SHA256 4f5a5644052c21e4cad5b72d1f9e340b49b22327aa791c5f7461973834de6277
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            Preferences

                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                            • Size 13KB
                                            • SHA256 510751747a2d924dcee3f8ac8da1ba6ef7289458f8bd3b163d18ee138802444e
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            Secure Preferences

                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                            • Size 17KB
                                            • SHA256 13805701603dbbca9403b94e006c712edafb4f98a8e0ae4ce0ad1b025b835f93
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            the-real-index

                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                            • Size 120B
                                            • SHA256 0fbcc090a144f5722ebb78b8de30fbc658ca33b477a5edb95fce2a2838b9d8bb
                                            • MD5 SHA1 SHA512 TLSH

                                            the-real-index~RFe58e0f5.TMP

                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58e0f5.TMP
                                            • Size 96B
                                            • SHA256 3cef24bdea132a844b6028b97b40a04bec4eee902d78d370d6a7639d524b1395
                                            • MD5 SHA1 SHA512 TLSH

                                            Local State

                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                            • Size 117KB
                                            • SHA256 d787fd6e88862ffeb945b24b6ba477a638652c29f995264832e7be6abc972ced
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            Local State

                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                            • Size 116KB
                                            • SHA256 860a59c34754862c0f32e52a0bfc73e73dfb6cf66fbcfb02ba09434c482e61cf
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            Local State

                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                            • Size 115KB
                                            • SHA256 296b42091a7c028f3348c76eee5b3d6e78f662c132241d4b5bf71a9bcb3f17f0
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            Local State

                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                            • Size 187KB
                                            • SHA256 f7bdbf3e18b9e44ca291e9b8fe76f9056f15eb7782df461df232a5131ab03f3b
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            Local State

                                            • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                            • Size 116KB
                                            • SHA256 a6eb5989d5187fb6d49cceb20bc0e65d1d170528a26a2540d8f9b15f4233688e
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            CYANBRAIN2 Combat Playtest.exe

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest.exe
                                            • Size 656KB
                                            • SHA256 9297356dd0ebdffbea457ff29d1a30987ea868b192dc96b2e43be6bb5aa50104
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            UnityEngine.AIModule.dll

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest_Data\Managed\UnityEngine.AIModule.dll
                                            • Size 71KB
                                            • SHA256 d67210b0defb8d165f046f840fa70ea4b3341b7ad144ce001808747b2cbee809
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            UnityEngine.AMDModule.dll

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest_Data\Managed\UnityEngine.AMDModule.dll
                                            • Size 21KB
                                            • SHA256 8084be339f8eb02329535f61b1fa198ef6fc2301507e8c56ea74c57a6e8ca9a5
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            UnityEngine.ARModule.dll

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest_Data\Managed\UnityEngine.ARModule.dll
                                            • Size 21KB
                                            • SHA256 2dee5551dbf85a282edfb9925157c5f51319df695dbf6a57217d7dd4c6a59380
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            UnityEngine.AccessibilityModule.dll

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest_Data\Managed\UnityEngine.AccessibilityModule.dll
                                            • Size 51KB
                                            • SHA256 58fa07c3466a439e3d6bf88bec8e19a02ed9e358e13c0ec5907878c412b69c27
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            UnityEngine.AndroidJNIModule.dll

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest_Data\Managed\UnityEngine.AndroidJNIModule.dll
                                            • Size 113KB
                                            • SHA256 1918003cfab5ce530e36dd6db19ff5e58d06391d768484a48c9c8f782e9a9af3
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            UnityEngine.AnimationModule.dll

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest_Data\Managed\UnityEngine.AnimationModule.dll
                                            • Size 209KB
                                            • SHA256 4fba0c75a3e0a85869f92d5970c466b948ea315e53a4a4c63061ca68af0ef080
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            UnityEngine.AssetBundleModule.dll

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest_Data\Managed\UnityEngine.AssetBundleModule.dll
                                            • Size 37KB
                                            • SHA256 819077d4488cbee4004121f0183630601c945945640b42075c78105f1208813b
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            UnityEngine.AudioModule.dll

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest_Data\Managed\UnityEngine.AudioModule.dll
                                            • Size 100KB
                                            • SHA256 b06767743e1eb351c890453c0373b5959089839352a301d7ba5fbcca1d661fdc
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            UnityEngine.ClothModule.dll

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest_Data\Managed\UnityEngine.ClothModule.dll
                                            • Size 32KB
                                            • SHA256 e96e04e4ab14bd91b3fc3edeed022e4a7c246eea399805d796099e06ea723c6a
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            UnityEngine.ClusterInputModule.dll

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest_Data\Managed\UnityEngine.ClusterInputModule.dll
                                            • Size 23KB
                                            • SHA256 6004e6bf345bed89ed2e0a7b305b1524954eb14de4f279f8319da85d9c9da332
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            UnityEngine.ClusterRendererModule.dll

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest_Data\Managed\UnityEngine.ClusterRendererModule.dll
                                            • Size 22KB
                                            • SHA256 67ce0e3d3a7008a1f0d7268f8e311e4a57b34030f9585f001880b949822d2bf2
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            UnityEngine.ContentLoadModule.dll

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest_Data\Managed\UnityEngine.ContentLoadModule.dll
                                            • Size 28KB
                                            • SHA256 e6d915259c3479d7f3be12c9f42b6b3a47b3b1060585e1c01c96aa0f89650bb7
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            UnityEngine.CoreModule.dll

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest_Data\Managed\UnityEngine.CoreModule.dll
                                            • Size 1.7MB
                                            • SHA256 2f81ce958f65bc1fc3e48538e23f9e3457724bef4098ea91a7a3bec7841a1020
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            UnityEngine.CrashReportingModule.dll

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest_Data\Managed\UnityEngine.CrashReportingModule.dll
                                            • Size 22KB
                                            • SHA256 d3125b0168033ca1e54c055284dea9f811368bdb5e1dcb0649f489b16c438f18
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            UnityEngine.DSPGraphModule.dll

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest_Data\Managed\UnityEngine.DSPGraphModule.dll
                                            • Size 29KB
                                            • SHA256 fcc41a3d7ed3daa7c6f58751cd657f8c483cad1c55693a66d1a2621273481dbe
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            UnityEngine.DirectorModule.dll

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest_Data\Managed\UnityEngine.DirectorModule.dll
                                            • Size 37KB
                                            • SHA256 1b74bcc671b74784c1e14416fd2205cb846f868f57e54af86915344fd5259f66
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            UnityEngine.GIModule.dll

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest_Data\Managed\UnityEngine.GIModule.dll
                                            • Size 20KB
                                            • SHA256 82af791f70fc17a41857d58efba4670ec8990df45c0a5be3cc1bf247a99f8a10
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            UnityEngine.GameCenterModule.dll

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest_Data\Managed\UnityEngine.GameCenterModule.dll
                                            • Size 41KB
                                            • SHA256 597333eb4d264fdbd5cde3875db84f7cd83d616c7cbfdf5d392fcac778342623
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            UnityEngine.GraphicsStateCollectionSerializerModule.dll

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest_Data\Managed\UnityEngine.GraphicsStateCollectionSerializerModule.dll
                                            • Size 13KB
                                            • SHA256 7f11b7ad44088cfd87ebbc90f629b37882725caba77c9ff57f99b4585dacc160
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            UnityEngine.GridModule.dll

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest_Data\Managed\UnityEngine.GridModule.dll
                                            • Size 26KB
                                            • SHA256 5707baf605ce1b801bfc479059b9d01d5aa23dadfb3d3384ebe4babce705a8a7
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            UnityEngine.HierarchyCoreModule.dll

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest_Data\Managed\UnityEngine.HierarchyCoreModule.dll
                                            • Size 89KB
                                            • SHA256 41972e4d8ea5bf21cdc3d92440e6da5f8deea94ae53547fea835080fcde675ff
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            UnityEngine.HotReloadModule.dll

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest_Data\Managed\UnityEngine.HotReloadModule.dll
                                            • Size 20KB
                                            • SHA256 85f41b801740a1bea186b911fcc0567c60a0e85d9cb8750a94534900d231ca3d
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            UnityEngine.IMGUIModule.dll

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest_Data\Managed\UnityEngine.IMGUIModule.dll
                                            • Size 201KB
                                            • SHA256 e2473b34949a2752703564de94ac9e7d7dfa00de2ddc37357420c3e05ca35135
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            UnityEngine.ImageConversionModule.dll

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest_Data\Managed\UnityEngine.ImageConversionModule.dll
                                            • Size 27KB
                                            • SHA256 bee929bdddf6c3db08a6198cd30d3078342b701b650752d54edf1751b181c098
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            UnityEngine.InputForUIModule.dll

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest_Data\Managed\UnityEngine.InputForUIModule.dll
                                            • Size 55KB
                                            • SHA256 b085ce0098b8ec21bf490be33a8967cec3535f99497b0476accda05e70c12a67
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            UnityEngine.InputLegacyModule.dll

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest_Data\Managed\UnityEngine.InputLegacyModule.dll
                                            • Size 41KB
                                            • SHA256 7e3844d3d62b4534d8996c682439205ef914eca172a30aaab89bbdad671962a6
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            UnityEngine.InputModule.dll

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest_Data\Managed\UnityEngine.InputModule.dll
                                            • Size 24KB
                                            • SHA256 4f0fddfc2ea0abf523451906d56d4ce801cc08a66f80e7949f91aeb8cfea120d
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            UnityEngine.JSONSerializeModule.dll

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest_Data\Managed\UnityEngine.JSONSerializeModule.dll
                                            • Size 23KB
                                            • SHA256 0a16925bc4fc5c0ee2b39fef75aef4a929d545f2f175e86caf5faa14d3ae11c9
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            UnityEngine.LocalizationModule.dll

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest_Data\Managed\UnityEngine.LocalizationModule.dll
                                            • Size 22KB
                                            • SHA256 2c748c96470bf1af1886be05c9239f3d1d73f8da2c673e4cdc274e7c164408a3
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            UnityEngine.MarshallingModule.dll

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest_Data\Managed\UnityEngine.MarshallingModule.dll
                                            • Size 62KB
                                            • SHA256 c0669617bff18a5fbb3077ea85777495e8052535246c4ee811a175f9399ab932
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            UnityEngine.MultiplayerModule.dll

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest_Data\Managed\UnityEngine.MultiplayerModule.dll
                                            • Size 15KB
                                            • SHA256 1cdf5171aa502ff90cb7460bf3221bcb6aff277f996777966f066201497aec6c
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            UnityEngine.dll

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest_Data\Managed\UnityEngine.dll
                                            • Size 166KB
                                            • SHA256 91860307ea13ea17fe51f46135a4a411599e2edcd99ef6d23af5574c70aea654
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            mscorlib.dll

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest_Data\Managed\mscorlib.dll
                                            • Size 4.4MB
                                            • SHA256 1fe968baa4fa8aa9c0261bcff48d89193877ac0474140e8fbd724a0fafb631da
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            unity default resources

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest_Data\Resources\unity default resources
                                            • Size 5.6MB
                                            • SHA256 d656c46a47e39c4346e1ae506f6cd8328408ff2d97156274d8ac7adf7b844513
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            RuntimeInitializeOnLoads.json

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest_Data\RuntimeInitializeOnLoads.json
                                            • Size 1KB
                                            • SHA256 a0a82b0523bc77bb4819ea034e314f08ff4beb92c435f1485bf1604eaa3bc6fd
                                            • MD5 SHA1 SHA512 TLSH

                                            ScriptingAssemblies.json

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest_Data\ScriptingAssemblies.json
                                            • Size 3KB
                                            • SHA256 e5bbe8a723a0668b95939246e2c3636983b9e750627402a10fc0533dae8e5fdd
                                            • MD5 SHA1 SHA512 TLSH

                                            app.info

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest_Data\app.info
                                            • Size 34B
                                            • SHA256 29417a52cb4c4d751cb40eed3c9896cdf460275055be4399b89474d8f1d7c133
                                            • MD5 SHA1 SHA512

                                            boot.config

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest_Data\boot.config
                                            • Size 156B
                                            • SHA256 2ebbb294e602786cbbcbef2c09ee64476ff1f240eec08666939e037399a9a604
                                            • MD5 SHA1 SHA512 TLSH

                                            globalgamemanagers

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\CYANBRAIN2 Combat Playtest_Data\globalgamemanagers
                                            • Size 112KB
                                            • SHA256 aad27cca4d97e4f87120c633d096f4c2e7a17fbe60178510e9b781d85031ddcc
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            mono-2.0-bdwgc.dll

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\MonoBleedingEdge\EmbedRuntime\mono-2.0-bdwgc.dll
                                            • Size 7.5MB
                                            • SHA256 bd36073ff685d523ffc3a4109c31883b71f1c391d76c6bad24592ecde096ed63
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            Compat.browser

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\MonoBleedingEdge\etc\mono\4.5\Browsers\Compat.browser
                                            • Size 1KB
                                            • SHA256 8a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741
                                            • MD5 SHA1 SHA512 TLSH

                                            DefaultWsdlHelpGenerator.aspx

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\MonoBleedingEdge\etc\mono\4.5\DefaultWsdlHelpGenerator.aspx
                                            • Size 59KB
                                            • SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            config

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\MonoBleedingEdge\etc\mono\config
                                            • Size 3KB
                                            • SHA256 5776169973a26a387b8b3e5c0f2301a7ab9a6dd7c7d3efa22a96abc47fbf8662
                                            • MD5 SHA1 SHA512 TLSH

                                            UnityCrashHandler64.exe

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\UnityCrashHandler64.exe
                                            • Size 1.5MB
                                            • SHA256 663c6cf6c46b97f1820ac2a5dd5f92294d248d8a263344f1a46d5d05a8afbd2a
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            UnityPlayer.dll

                                            • Path C:\Users\Admin\Downloads\CYANBRAIN2CombatPlaytest\UnityPlayer.dll
                                            • Size 32.2MB
                                            • SHA256 49d631bbc3aa5394d96e9a99d18bad81bafa90bd1a09af9cb62ec59f489980ae
                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                            memory/2156-778-0x000001E5D2430000-0x000001E5D26AE000-memory.dmp