6da69d28bc75b22a58e9c5ee02c16cc80fd0b0fbe70d1e35fc9d7691d3bc885f

Analysis

max time kernel
151s
max time network
158s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/09/2026, 06:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Scryde.exe
Size 9.2MB
Sample260924-g3f2vsfg77
SHA256 6da69d28bc75b22a58e9c5ee02c16cc80fd0b0fbe70d1e35fc9d7691d3bc885f
MD5 7e7952cc11c1d633d242be14a7f613ea
SHA1 c6f613c4dc89b901b6e50e2a8239babfa2b531e5
SHA512 6627ad671957d955175d073256f5fd3209b798035192caae132d1f316be91dc7a5cdd9fa448ce98bb34904149e4d654c3f147182b3614e8d1b06330ef8fd84b9
SSDEEP 98304:tlQZlUBj7UHhDiwJ04EWG/s3FcJDDJTZnwtfkW9KR+7fRF:cZOAt04Vx3FEJT9wtsW9CWb
TLSH
T199A66D03F66281E8C0AEC174C35A9233EB76B88D0934B2AF5BD45B212F66F506F1D759
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery spyware trojan

Malware Config

Signatures

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Windows directory 5 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2148_1843715438\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2148_702932270\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2148_702932270\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2148_1843715438\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2148_1843715438\Microsoft.CognitiveServices.Speech.core.dll	msedgewebview2.exe

Executes dropped EXE 2 IoCs

pid	Process
4576	Scryde-update-5840.exe
5344	Scryde.exe

Checks whether UAC is enabled 1 TTPs 2 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	Scryde.exe
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	Scryde.exe

Modifies trusted root certificate store through registry 1 TTPs 2 IoCs

A root certificate was added, modified, or removed in the trusted certificate store registry paths.

defense_evasion

Install Root Certificate

T1553.004

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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	Scryde.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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	Scryde.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe

Modifies system certificate store 2 TTPs 1 IoCs

defense_evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8	Scryde.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3572	msedgewebview2.exe
3572	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs

pid	Process
3144	msedgewebview2.exe
2148	msedgewebview2.exe

Suspicious use of FindShellTrayWindow 5 IoCs

pid	Process
5840	Scryde.exe
5840	Scryde.exe
5840	Scryde.exe
5344	Scryde.exe
5344	Scryde.exe

Suspicious use of SendNotifyMessage 3 IoCs

pid	Process
5840	Scryde.exe
5840	Scryde.exe
5344	Scryde.exe

Suspicious use of WriteProcessMemory 45 IoCs

description	pid	Process	procid_target
PID 5840 wrote to memory of 3144	5840	Scryde.exe	89
PID 3144 wrote to memory of 780	3144	msedgewebview2.exe	90
PID 3144 wrote to memory of 4124	3144	msedgewebview2.exe	91
PID 3144 wrote to memory of 4124	3144	msedgewebview2.exe	91
PID 3144 wrote to memory of 4124	3144	msedgewebview2.exe	91
PID 3144 wrote to memory of 4124	3144	msedgewebview2.exe	91
PID 3144 wrote to memory of 2852	3144	msedgewebview2.exe	92
PID 3144 wrote to memory of 1992	3144	msedgewebview2.exe	93
PID 3144 wrote to memory of 1992	3144	msedgewebview2.exe	93
PID 3144 wrote to memory of 1992	3144	msedgewebview2.exe	93
PID 3144 wrote to memory of 1016	3144	msedgewebview2.exe	94
PID 3144 wrote to memory of 1016	3144	msedgewebview2.exe	94
PID 3144 wrote to memory of 1016	3144	msedgewebview2.exe	94
PID 3144 wrote to memory of 1016	3144	msedgewebview2.exe	94
PID 3144 wrote to memory of 1016	3144	msedgewebview2.exe	94
PID 5840 wrote to memory of 4576	5840	Scryde.exe	95
PID 4576 wrote to memory of 5344	4576	Scryde-update-5840.exe	96
PID 5344 wrote to memory of 2148	5344	Scryde.exe	97
PID 2148 wrote to memory of 1068	2148	msedgewebview2.exe	98
PID 2148 wrote to memory of 2280	2148	msedgewebview2.exe	99
PID 2148 wrote to memory of 2280	2148	msedgewebview2.exe	99
PID 2148 wrote to memory of 2280	2148	msedgewebview2.exe	99
PID 2148 wrote to memory of 2280	2148	msedgewebview2.exe	99
PID 2148 wrote to memory of 4260	2148	msedgewebview2.exe	100
PID 2148 wrote to memory of 1948	2148	msedgewebview2.exe	101
PID 2148 wrote to memory of 1948	2148	msedgewebview2.exe	101
PID 2148 wrote to memory of 1948	2148	msedgewebview2.exe	101
PID 2148 wrote to memory of 3068	2148	msedgewebview2.exe	102
PID 2148 wrote to memory of 3068	2148	msedgewebview2.exe	102
PID 2148 wrote to memory of 3068	2148	msedgewebview2.exe	102
PID 2148 wrote to memory of 3068	2148	msedgewebview2.exe	102
PID 2148 wrote to memory of 3068	2148	msedgewebview2.exe	102
PID 2148 wrote to memory of 568	2148	msedgewebview2.exe	103
PID 2148 wrote to memory of 568	2148	msedgewebview2.exe	103
PID 2148 wrote to memory of 568	2148	msedgewebview2.exe	103
PID 2148 wrote to memory of 1432	2148	msedgewebview2.exe	107
PID 2148 wrote to memory of 1432	2148	msedgewebview2.exe	107
PID 2148 wrote to memory of 1432	2148	msedgewebview2.exe	107
PID 2148 wrote to memory of 1920	2148	msedgewebview2.exe	108
PID 2148 wrote to memory of 1920	2148	msedgewebview2.exe	108
PID 2148 wrote to memory of 1920	2148	msedgewebview2.exe	108
PID 2148 wrote to memory of 3572	2148	msedgewebview2.exe	109
PID 2148 wrote to memory of 2968	2148	msedgewebview2.exe	110
PID 2148 wrote to memory of 2968	2148	msedgewebview2.exe	110
PID 2148 wrote to memory of 2968	2148	msedgewebview2.exe	110

C:\Users\Admin\AppData\Local\Temp\Scryde.exe
"C:\Users\Admin\AppData\Local\Temp\Scryde.exe"
1⤵
- Checks whether UAC is enabled
- Modifies trusted root certificate store through registry
- Modifies system certificate store
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5840
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Scryde.exe --webview-exe-version=0.4.74 --user-data-dir="C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=5840.2384.7931007489895233218 /pfhostedapp:47d3d734a5257a33c8651547db5030e05cf60a87
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:3144
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView /prefetch:4 /pfhostedapp:47d3d734a5257a33c8651547db5030e05cf60a87 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x164,0x188,0x18c,0x140,0x194,0x7fff8bd25fd8,0x7fff8bd25fe4,0x7fff8bd25ff0
    3⤵
    PID:780
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView" --webview-exe-name=Scryde.exe --webview-exe-version=0.4.74 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1780 --field-trial-handle=1784,i,10685135499016773011,8123628785539907743,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:47d3d734a5257a33c8651547db5030e05cf60a87
    3⤵
    PID:4124
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView" --webview-exe-name=Scryde.exe --webview-exe-version=0.4.74 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2148 --field-trial-handle=1784,i,10685135499016773011,8123628785539907743,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:47d3d734a5257a33c8651547db5030e05cf60a87
    3⤵
    PID:2852
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView" --webview-exe-name=Scryde.exe --webview-exe-version=0.4.74 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2416 --field-trial-handle=1784,i,10685135499016773011,8123628785539907743,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:47d3d734a5257a33c8651547db5030e05cf60a87
    3⤵
    PID:1992
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView" --webview-exe-name=Scryde.exe --webview-exe-version=0.4.74 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3524 --field-trial-handle=1784,i,10685135499016773011,8123628785539907743,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:47d3d734a5257a33c8651547db5030e05cf60a87 /prefetch:1
    3⤵
    PID:1016
- C:\Users\Admin\AppData\Local\Temp\Scryde-update-5840.exe
  "C:\Users\Admin\AppData\Local\Temp\Scryde-update-5840.exe" --apply-update C:\Users\Admin\AppData\Local\Temp\Scryde.exe
  2⤵
  - Executes dropped EXE
  - Suspicious use of WriteProcessMemory
  PID:4576
- - C:\Users\Admin\AppData\Local\Temp\Scryde.exe
    "C:\Users\Admin\AppData\Local\Temp\Scryde.exe"
    3⤵
    - Executes dropped EXE
    - Checks whether UAC is enabled
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SendNotifyMessage
    - Suspicious use of WriteProcessMemory
    PID:5344
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Scryde.exe --webview-exe-version=0.4.82 --user-data-dir="C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=5344.3156.7629660900785788784 /pfhostedapp:47d3d734a5257a33c8651547db5030e05cf60a87
      4⤵
      Drops file in Windows directory
      Enumerates system info in registry
      Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      Suspicious use of WriteProcessMemory
      PID:2148
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView /prefetch:4 /pfhostedapp:47d3d734a5257a33c8651547db5030e05cf60a87 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x164,0x19c,0x7fff8bd25fd8,0x7fff8bd25fe4,0x7fff8bd25ff0
        5⤵
        
        PID:1068
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView" --webview-exe-name=Scryde.exe --webview-exe-version=0.4.82 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1716 --field-trial-handle=1720,i,11865997809259545720,11659100884939724567,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:47d3d734a5257a33c8651547db5030e05cf60a87
        5⤵
        
        PID:2280
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView" --webview-exe-name=Scryde.exe --webview-exe-version=0.4.82 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2024 --field-trial-handle=1720,i,11865997809259545720,11659100884939724567,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:47d3d734a5257a33c8651547db5030e05cf60a87
        5⤵
        
        PID:4260
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView" --webview-exe-name=Scryde.exe --webview-exe-version=0.4.82 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2280 --field-trial-handle=1720,i,11865997809259545720,11659100884939724567,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:47d3d734a5257a33c8651547db5030e05cf60a87
        5⤵
        
        PID:1948
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView" --webview-exe-name=Scryde.exe --webview-exe-version=0.4.82 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3532 --field-trial-handle=1720,i,11865997809259545720,11659100884939724567,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:47d3d734a5257a33c8651547db5030e05cf60a87 /prefetch:1
        5⤵
        
        PID:3068
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView" --webview-exe-name=Scryde.exe --webview-exe-version=0.4.82 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=3980 --field-trial-handle=1720,i,11865997809259545720,11659100884939724567,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:47d3d734a5257a33c8651547db5030e05cf60a87
        5⤵
        
        PID:568
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView" --webview-exe-name=Scryde.exe --webview-exe-version=0.4.82 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4204 --field-trial-handle=1720,i,11865997809259545720,11659100884939724567,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:47d3d734a5257a33c8651547db5030e05cf60a87
        5⤵
        
        PID:1432
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView" --webview-exe-name=Scryde.exe --webview-exe-version=0.4.82 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4640 --field-trial-handle=1720,i,11865997809259545720,11659100884939724567,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:47d3d734a5257a33c8651547db5030e05cf60a87
        5⤵
        
        PID:1920
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView" --webview-exe-name=Scryde.exe --webview-exe-version=0.4.82 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4796 --field-trial-handle=1720,i,11865997809259545720,11659100884939724567,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:47d3d734a5257a33c8651547db5030e05cf60a87
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:3572
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView" --webview-exe-name=Scryde.exe --webview-exe-version=0.4.82 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4332 --field-trial-handle=1720,i,11865997809259545720,11659100884939724567,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:47d3d734a5257a33c8651547db5030e05cf60a87
        5⤵
        
        PID:2968

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Scryde-update-5840.exe

Path C:\Users\Admin\AppData\Local\Temp\Scryde-update-5840.exe
Size 9.3MB
SHA256 7fb22c1d9c5d2afe436884a4cf58ae8a26f6bb88ce02d8c0c5309837dc927724
MD5 1ba71ab407a95c1c02d34227f54f2318
SHA1 aac28cb457c8f59e3cd31e292d2a8bf8db295ccc
SHA512 ed430e71686e3003a9cc77cda33fd8b4d791f4f3f5b6b882a4e9e5cd3f25a58afe84535f02cfe7dbd7779ab2a6317da23b23d487faf2c0e3bc2a53ba95f76ec1
SSDEEP 98304:vFkxJf7c7bqMiEfzVawaTeHFPVLM78JMwgZI1fax07m+7wicib:K7abqOVawQ+LM78JMwg6au7mWwxib
TLSH
T15EA67D43F6A181E8C06EC174C35AA633EB72B88D0934B6AF5BD45B212F66F506F1D349
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 1755c9735385ef25d8026ef695e69756840d851ed59e03be5b80059a65b9aa56
MD5 a5cb8698696c9c8bfe68a4b4bb2111bb
SHA1 d41c50bedf453269f068dd0c73977344efb6d2ab
SHA512 e4136bbc902c5e1b7cb88234df1ab66e982651dc51d7e595429be0daed55ebccde65013226e3151ff408b9b9d53abfb085b3447719bfe7c87864950ca9045126
TLSH
T160D0121632425134D0102073094272481880C51F840640905439C55D5A294500903443
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 2dab18186050a8f6ef418185fa2d11bb5f672753b7122a78b86d9b609b2e02f0
MD5 cb924fb877a7c7aa92c5d00c2c2f9e4d
SHA1 a1c8c2e5e05683dd23f4fbaab7fe878b7cb341c2
SHA512 4adf4f0bbf0447f0f3e62901f6456ea2451ee4a35caa13a8d31c014a5aed005bac9994048bc105cc2f9667a228ad56baaa6b0740f9cc5c390939407338d2dcac
TLSH
T192D0121636426134D0102172090172481980C41F850641905439C56D5E2A4500903443
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 0707b733ed4bdb44e8647eb411c9e661251356270d234f8dfd7d871396ecaf79
MD5 490278688e72d094a76b2eabffe3a4ac
SHA1 b81ebfe36f327ee1d0e4ef69ff99a8791688490c
SHA512 1e76e1ca736998d9ee06ee5302949686b064dd7cbc22da8ba64984d76a823c99d31adb8881a9c7414d523fab206aaa9234a3fb3f12f166e85669030d0190238e
MD5 SHA1 SHA512

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 f272d1a5e2ccb5f4b08e5b018455e38ba299e68aa79cbe0d013868ab9a233de1
MD5 a6bfca92809021a9cad41be860fda395
SHA1 352d8b43ed92c3217c427881973a5425c0324602
SHA512 83a824af90a88bd3350fcdc2cba09a7a5ee3d38d411e14bf3df90914d4c585403e0158920a3c5d6511301d8e44801aac020b98a0c6f6e5409f71ee9e9a57a61b
SSDEEP 3:MsFlYhXllLlX8lgEfKl9VKlll+flrz1l:/Fiz10gtl9gllsN
TLSH
T15213021C9790CD86C94C1C349497CF7053A0D40F45260363109324A52C48B029C04100
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 ba7ad07acb1468d2d20fc6f1a045ed8f1c981f7e868aab97fa2bf6920b046280
MD5 ad74f9acd0a80426b3c63119046b46fa
SHA1 768985b6e6f832cca4844e361b6d0ecfe7f0e582
SHA512 5162b55f35715503963aae02ce6677ed7a97bcebb5cfb89c464f7b104707a327172b540231fdc126813d9f2263c9276d0ce323009b04b3e4eaef1e1f38e490b9
SSDEEP 6:/M/PXGuEVtt1UEMcB/eb7Nj7NkcQyV/1xUR:U/PXKHUEMsQ9kcQyVg
TLSH
T18D4412CD5F49D506D66446B0E9D8CB3D933DC4D439B5AB13FE6158862CC5B88195230C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 5f7999b05df7f58b6233ec298de17c89b7ee14d58afabee269dfb7e9185df6b5
MD5 efb58aa99a9869ae060ac07f1c63f165
SHA1 3500fe51380291f6c4d0247e01f68b15c6472c42
SHA512 31af45251447c8a4c7d1a6702d8425b6bfa13e763d151537ba40925490d9d545f44675ba9b1ad2f5be9a28729fa000ce428d58252fad6943c7e106769fdaf632
SSDEEP 96:2bZJbwWx4J19EfOhIvskRBj+l+OqS6zR:2bH9Q195h0sUBj+Fqt
TLSH
T14F25E8CB9FB863A3D7A6EC70FCC5C4793DF021866BD660435203C53A10C2BC51A5661E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 af15ef3eb2bd54c6203a13ed43a189bd1acbf1b64d1d528f46a2777a7be21019
MD5 4fc0e7d6e2cc9cae8dc5ccd1b10b5bf9
SHA1 61cb29c1dc644f2568ce41ca1f76ed05e5a708ab
SHA512 9865d57fd7c8f330e212a521efabbd377cd11f53b08582c952f5ec82ba83e19591a903eafefb2bb79df6e4e23f9fcfedcad06e74be05d77eb3af50880be3f5b5
SSDEEP 192:w4jLGFxOQ80uqD1QnSzshn0tr91vABJI3F:1ja/9NhQSzshnurPvJ1
TLSH
T1AB168DA15127D214F94B98F5698A4A290D23A7E92539D8C60397BF780070F4A377B8F3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000003

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Default\Cache\Cache_Data\f_000003
Size 343KB
SHA256 e2a4615d87b1d9d4f0737522a12475f5a4571887ec694e35e73aa905f5525e20
MD5 ce31773250ebbec8d01a0d7b7c7d7eb1
SHA1 99a6daea2960cf9d898b124ab6c37f146aeaecf7
SHA512 ef69e60fcccf6368d82ca7bbdd45ef13b76463a172b4da9f8941eb755d45bac5b77f437495ec02efa3bbd8f6dbe1c10cbb2cd9a22d1b3430dbe28bf98fe51b21
SSDEEP 6144:8b9qIYVGHha8cjKwz1PeQziJEQTypYA4l1vwi0Bn2DVaTcSfQQWa3:8pZHgdz5RiJEolCixDcTCO
TLSH
T1287423CCEC2C52B1CD48F238D03534889EC59A999B18BFB952C7299DF9C3C9CC96751A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000006

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Default\Cache\Cache_Data\f_000006
Size 677KB
SHA256 edfa306b2519ac4bf02959ee6cfbfef6ec8ca77c531be44b8d90027bf8981f05
MD5 a7e78649a72ed403a64ebecf1d221313
SHA1 88233151bbc4e8d463b6279f0776c97ac430d85f
SHA512 8288f53858bf5c99c1009744b7b7662e5c1c0db9e1e7dfec049a6c470098e236ca3f74645fc72f0ace278c73a30508793eebcb740ada234782741fd80e84fc94
SSDEEP 12288:agHjRivsdtMjkITZEVfbv3n0lIefPLhQFS5EomFX0jMxtFzW30S+NRohG/qyR3o+:vHjROuApijYIYhQojmCjqI0SCo8/qyRp
TLSH
T1ECE4238657973DCA9EDCC0AE08955C4DF2D7F69708CFE7678A692C73602422344C8A9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Default\Cache\Cache_Data\index
Size 256KB
SHA256 ee815743020d820459464f75e8bf1f8bf9db1a5fc438da94bd6df42a53bc2b06
MD5 3a16a5a03c2cc7faa9c71f662abd2be0
SHA1 1a8e02a404d4dbcda475845f0d58cfb3ad573813
SHA512 8a55a5c6926eda0c2b7b79214be6dfab18ee819edaf71ee6828f2bad06b8af29bbd5c340898e383ea823c1e8f88d3274c1ca35acb660a44f202d3bb7efa0620d
SSDEEP 3:Lstl8lNllkll/lEtlc+lNncNtl:LsX03lEtEtl3WN
TLSH
T1D944043C13410455C1C4037C5703D3311734C0F4450FC347014501500C41F404F05051
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

87184ba5f9b7c7e4_0

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Default\Code Cache\js\87184ba5f9b7c7e4_0
Size 256B
SHA256 1a5b86a976951b79174d57ed06a0452a85d9f499b31cb3dbfdd5cf861b5d8545
MD5 458a604f568cf9081745142a18024693
SHA1 b3dc40d683f46f1feede0a14d455fd61abf4326e
SHA512 e919ac63c913c99a6a176d217d193521a6dcf8bbe008b269dd8cc9a5b9bc3fb280c2365eb2ca0855b91b1967628abc0ae15728329a1303391b644cc1766b9f8d
TLSH
T196D097CFCA32A140C4AB68F0CEBBCC26C753C2B8004AD202022589A032C0ED8AC8C318
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 4c31ac93c42f8fd17462e27133a1eede455e280387c69b7af4413ac052ab3ffc
MD5 3a850e066368441286277085a33f41be
SHA1 75bc5dc4500ae329fe949e810f723b9dcb2e4450
SHA512 4e1103bbedea374ee1036e63104d263e525f26134b1d37f04f9b2030cfa53a98e10c79b46778c1c74b00162fd6366b947aa537b5e77ad708394bcce1f7fc8599
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 8df5e954c4baff8adda45a13d02ee25cea05fa1babcddb823dafcf0d080265b5
MD5 3c2fb4588460dd1693ae06bb622b1c6c
SHA1 c1b11b9c0012b3ebccc17fa081213cabd5d4a5e2
SHA512 b6cb88a20f25ac4d04fda163007740b8696861e2ada07d76ddae425658e2e0ac78eaa0d633580f9d6190b2f27a7b69bdca37522adace4053ed672827d8bdafe4
TLSH
T138A00210056200A2D118177251C101607EB95E585B2747435CE111E59C62B91D302484
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 020aaf7f7f6c8f7b3bed92250ae2e5f8e6016c418909e59dac6e62891f7dad22
MD5 aaa84ad4023615a997e26e38f430bb57
SHA1 59881f7b29246fbc42a7c325d6b8f75dc9b7bbef
SHA512 9cb179ce8a535982d70f5ffc7a2492efe37a836536e2e704d5e3ab5e57547bbbbb57a09693f9ef22ff97f43dec7b3364ed6a1dc19fa259dea10d84908136b5db
TLSH
T126B00110409750D3E344B7B6D4E70452B9B56EAD1F634A1258A222B69A22BA8EA02441
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Default\Code Cache\wasm\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Default\Extension State\LOG
Size 299B
SHA256 28cd948593431768293fd5c81069648a7f79d42cd237eeb8603e866d11e3dbdf
MD5 0398d64ee9ab23ea2cf39aa6ae48c4cc
SHA1 f102f24c02a228b3f749170b886d56c581a99edb
SHA512 78e19fa30123c744dbd8a0cadb5c204c3adc0d4140c6c7615ea44deff2e1f091d38f25ece2d69bca2dc895ac70ea51fa3b89c4eb16bdea5ad7c16117a349a75f
TLSH
T119E0CD05548D84A54558CCF7CDB907C8CB703248B7CC37464BDCCA0830CB90AA8917B1
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Default\Favicons
Size 20KB
SHA256 2db221a44885c046a4b116717721b688f9a026c4cae3a17cf61ba9bef3ad97f4
MD5 b40e1be3d7543b6678720c3aeaf3dec3
SHA1 7758593d371b07423ba7cb84f99ebe3416624f56
SHA512 fb0664c1c83043f7c41fd0f1cc0714d81ecd71a07041233fb16fefeb25a3e182a77ac8af9910eff81716b1cceee8a7ee84158a564143b0e0d99e00923106cc16
SSDEEP 24:LLiXxh0GY/l1rWR1PmCx9fZjsBX+T6UwcE85fBmI:iBmw6fU1zBmI
TLSH
T1AA92EE075E383407DBA10E7D266B187A8E3FE26C5FA29C94347410618CF9482D5394FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Default\History
Size 164KB
SHA256 2a82f24f8db787ccb7698847dd2fdf247ff2ea22850c162c5aadc7c40efd99e8
MD5 adaa0a07af02de26a3a6c7b00b0d65ef
SHA1 8f400dc9e73b4cd37e93001021b958a722de1390
SHA512 a7e8bc272449be1d367c6edd111d7de03170ed5c87207eca3a0f07a2162047daa78b433901c9343954a07f39802b27cd61018909341a0c4035acb3b105d3d9a3
SSDEEP 96:8BJ325LqL/uejzH+bF+UIYysX0fxQp97KlEHt/DfLVVVN6zRk/E0OLEV:8BA5qL/tH+bF+UI3iWGVWWNVVV63qV
TLSH
T14BF3FB5E5F243312CDBD913B68E745B3597CF03F87236A866C6204B1CEE2656A02C4BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3d3296fc-edda-4a13-8f9d-d63af4fea283.tmp

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Default\Network\3d3296fc-edda-4a13-8f9d-d63af4fea283.tmp
Size 1KB
SHA256 82fad5fa566b539820d1cf546caea49a28d421d2a8e634d0daf78f1c44da3c51
MD5 481d803197bcdffcdd7c9d8aaf2fdc71
SHA1 350433c1152a6348a66901795d0e3c7e78c83356
SHA512 3f935168b542a05738cf3d1f661845e7bd935a59c9ab0926c93470a9ded73414130fd6a726c6cc8ba856586c2aea4279e7e2da32e6707aedc2b9cd4d7d6ac795
TLSH
T1D731C09283E4C36D871177E057347927CC2D010D92286E37DEEBEBA66BD2471E12160B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Default\Network\Network Persistent State
Size 245B
SHA256 5dbdae4909569fb610c915b108dbbc6211c978f9fcf61017df5005ad9077e8b6
MD5 48250092790c29ab1df46d7e9da0dbac
SHA1 9f77a7fda4f18b51ca6ba64f87737703b2d9ad1c
SHA512 36c154759df993703a03cc01e8fa81da99b90a6a49cd893e4a9a821eff251bb2cb5c4ad6a43f0ef409d75f07336a59380dbe2ca475d024408d6146fe1317e87f
TLSH
T1DFD095654170D9FE074153A056246517C9790006522C4E76DB75777547624BCD010803
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Default\Network\Reporting and NEL
Size 36KB
SHA256 713e148490863705d4a9296fe902e51f6a851a0e85eeea0714a0d2c1c1eedf8f
MD5 837f132cd207b5c39a5b94d5e5043c71
SHA1 8938115a5ab3a2585f10bf72d303994287127625
SHA512 36328e2e4bbe06dc78f52fed38c82d26db515ed9b1afe459ef763752c69a0544d70acff1fc9b3835f2a052020294de7fa898c843704562c77ebdf9ee89d3cb8d
SSDEEP 96:YIEumQv8m1ccnvS6A7ZJbwWS7ZJbwWIZdm:YIEumQv8m1ccnvS6iHcHcm
TLSH
T151F2CAAE0B1CB305C1F4A534E6D009D7BD6A090E9B95AE95AEE902F2FF461F2B438115
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Trust Tokens

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Default\Network\Trust Tokens
Size 36KB
SHA256 2d4ccf8ac8ae4f5c6ec8e0566210ff56585b6ba0290501a1a11ed9b23bfc226e
MD5 7289d4bdfbd73ed571278f95cb4c1939
SHA1 7c911f54243d9777a34666f4526a49c7e7aea244
SHA512 6e7d48e18b0317449807c4ac2c377b3cccf5bd6121077d51152d7e188ba1ea3cf62372b7611036938986dd0c84465dbd747fe8580e3a699f8470229a6d57a749
SSDEEP 24:TLB3lIIAoDJ84l5lDlnDMlRlyKDtM6UwccWfp15fBIe:T131DtX5nDOvyKDhU1cSB
TLSH
T1D8F2689BE93C6FA3CCC56FB08B47E5B51F752BDEE68276C4247130A10EA860055E7443
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Default\Preferences
Size 6KB
SHA256 5a98aba7a8ea79c23155407880ab4a6fa6b783be2765c8be237f0104fced36e1
MD5 ccbbe688d2d210dae4f16f6c64cef128
SHA1 0632625c9a5f0f0d58be343d5cd4f6db5c6b8186
SHA512 ae0955eccef93af350173f701bad5ebcffdab90fc1ae6462bc7308b0aecba66a49f4381fbbfb7ff8f24998b5427b70a01c63e0ae90ec7d50703c80bd453c5ac3
SSDEEP 96:stB//dM++2ERuVbDBk+zmdo5h16Z0os7/x+6MhmuecJ5vMkkje+PK+gVFSd28XMz:stBHOb2uWXYonosV+Fd5vwjtShSdG6K
TLSH
T1FAD1A5059E34797B4CC6E549BA39BE17E3F9602274D52E48EBF84A2C04D76DC230790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Default\Preferences
Size 6KB
SHA256 8b554f80026cdc35b32f6d1fae62a1e00d87c0718a1225489f0a43936d9088df
MD5 95b4e341ba2bfa6768dae2281732e304
SHA1 3267d0420e183a019837687c4706913771360912
SHA512 c1a34fc75d07effd3829eba35cc423389ea843965794c4b5f80752394ae0e6299679faa9df1df13d27ca8146395b4015f752d53983ba6d5e7c8d1e50fa685db2
SSDEEP 96:stB//dM++2ER1GVbDBk+zmdo5h16Z0os7/x+6MhmuecJbH47Uje+PK+gSnFDd28U:stBHOb2uEXYonosV+FdbYYjtSyDdG6K
TLSH
T1E4E1B5065E34797B4CC6E55DBA39BE17E3F9602275902E48EBF84A2C04DB6CC230790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Default\Preferences
Size 6KB
SHA256 f888ede79abd7aaec28d0c89ff8f7ba14c454abd45126adf634d5c270ef81362
MD5 ecc32fa0793342409aaacdb31ed1e54c
SHA1 edb0cd2ec241636a191db1ee7bc429dd62a832e3
SHA512 ff5ea59ec2244edad8768d6dbe15134e78c70e25ff65ea71e385f28511d492cc1243729d65aa4dc30489437328c5c2e658dd8c27ca7ed1177a1b3f8ec47852b9
SSDEEP 96:rB//dM++2ERuZb9Bk+zmdo5h16Z0Os7/x+6MhmuecJpP1eje+PK+g+FS4I8XM1CO:rBHOb2uwXYonOsV+FdpPQjtS6S4g6K
TLSH
T15CD1A806AE34797B4CC7E519BA39BA17E2F9503274D52E48EBF84A2C04D76CD630790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Safe Browsing Cookies

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Default\Safe Browsing Network\Safe Browsing Cookies
Size 20KB
SHA256 0628922305d2478ba75a48efadf932d439616eaf1ff908be334793f7bde28107
MD5 91dbaf73c1a8c55254d90272f998e412
SHA1 2b86b31c8c00c937291e5ac3b1d134a5df959acf
SHA512 109f4f59616cc1d1682b4d9468804f7668c77ce1878afec06a57037193f31a9c1c39f5d269277462936373b129d26488cddcc34d455c27185534e7754baaa988
SSDEEP 24:TLWr6bXYFpFNYJqH1kwIY6UwpQ9YH8rwZ6HfB:T+6LopFS+awWUOh8B
TLSH
T126926B4E5F346221C0F48B36EDE1855B2F7C201CD3B32655DA5860F3DE9299BF10956A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Default\Secure Preferences
Size 6KB
SHA256 20040eaab84895d963e33084ba3bf0868bb1b26ea46abee8e8e3e03419b42945
MD5 b1d76b4aee6441e97b2fb5835a27ae5a
SHA1 375c9773f0d0ae367a83fb2e58f68887ba3c5578
SHA512 0a769a3710b3b9f5071cb79d714b0add044183daba7de43dc0e48487665a06f9b420180f9913daad0371fe402fa2932d2027aad52ea669bff3e5e42a16bfc11b
SSDEEP 96:v7ni24Plf/ROo1pkF5d17ui2m7VaTEv9V5h5pg5+e05rCnWS1hGnVcj:zi2cv4r229lZrCnvLV
TLSH
T118C1B6A7052DC579AF448BEAE83D7ECB99A600CF88D54C1597D2C48806C2FFD21D94D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 48B
SHA256 e7cc33b0fa91e122ee3cc4d8400b56f2c8cde08ee633424601eb8f4408ff8607
MD5 c0342bb899bcad6e2f8303b4d44aead9
SHA1 5b1e2d07f16f8a07ebc67a4d9bb598c95cf4464c
SHA512 08eb73fa4addaa2479bf634e3e76ea081caf330363f9a989e9d0affa19afaed6535a80092695b4f47148064069e37819b0cc2df1ff3f8f42cda5bb46d5db5c45
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Default\Shared Dictionary\db
Size 44KB
SHA256 79b107307408e5ad9a145c87533316174fd13f4ad943497d079522fbe325b3b1
MD5 71ccdda9f3186c8e729bb559f93bb992
SHA1 3712c11bb21b8e2a74bb879d47b2819ed1ac14a8
SHA512 19f8134fcd1211964111b07884b52878b1649644b6ec623bb586df1a9b7dabc7f8c8a755d2a52c908b563bdd968135f4f703cc35103696e40d0ab0020c8dc4bd
SSDEEP 24:TL6iuaJhPwMuz6G0ZestjteXUSQeCl7ZIeNa6+6Uwg8hPq81fBG:T2TaOk17ZfnUdoqSB
TLSH
T1B0139A0F2E587564D1BD0635E9A34E6B2B7E30489B8329D125F02AF24DE251C5D2F27F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 846bf27c9d6d9a53e819eca972423fec30192da7007f0eb6840e32e9daae3f40
MD5 5ed981a5b600067dcf4a6dbd17e1f00e
SHA1 545d22a0df4878284b5024ccbe2b45aa1eb19825
SHA512 531eb8dad062935cfd3a8b7c6543cffa5bb9ea4c581445cf82d27a04e37be2803af247eeee0295405d4328c11ee63d0fa8a9e6c86e3ba6df9edf362f486a14fd
TLSH
T15FB012D07B00A22BC0D80E3D02D4C7A06372E203B5005C138C448FA25FA63E82E008D5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Default\Site Characteristics Database\LOG
Size 329B
SHA256 258c52450d5ac91743af80a9209de35346ed97669558dae87310f907474636d7
MD5 d4a0b5dbbb0a1897b991be1783d9a72e
SHA1 d3babe3f64c59eaad45d336d40d3531709aac1cd
SHA512 b6adbf00189b35d17598c9c9cc71163892994bd322f1f91b6f299e2b1fd468e0d6106ca527e1dfda008b4d2c89909c27c7fc17fd944e99640efdebffa576cb5e
TLSH
T159E0266124CE866B428BC4FF8D759B8CC3717248FBCD2BA69EB8D304714F804B082B52
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Default\Sync Data\LevelDB\000003.log
Size 46B
SHA256 a2ca52e34b6138624ac2dd20349cde28482143b837db40a7f0fbda023077c26a
MD5 90881c9c26f29fca29815a08ba858544
SHA1 06fee974987b91d82c2839a4bb12991fa99e1bdd
SHA512 15f7f8197b4fc46c4c5c2570fb1f6dd73cb125f9ee53dfa67f5a0d944543c5347bdab5cce95e91dd6c948c9023e23c7f9d76cff990e623178c92f8d49150a625
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Default\Sync Data\LevelDB\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Default\Sync Data\LevelDB\LOG
Size 305B
SHA256 9450f68560a0525ef270b0ec97c8408822ecd873414f53295b94ef2caf801dea
MD5 961f22cf5ffc83d35851045bfbafbd44
SHA1 fafde6736d86922a9d2ea68b26b387e621409cb2
SHA512 f0723a2720d8b7b9315c7640486d14aa94caee4368de36f3a7744bf4abbeea1443c940a60cb02d5bc35bd6a39fb5066c938225122e8f941c3c59977ed5932624
TLSH
T1F0E0867154CD85754545C4F7CDB55B89C374A648F7C93B868B989508744B509A0A0691
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Default\Sync Data\LevelDB\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Visited Links

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Default\Visited Links
Size 128KB
SHA256 fc8dcfdd37ef70fc2545674f2814e5161fc9a19ccf66c030a55858adb2d4c283
MD5 9f9752657714e549992f1de70b2b2184
SHA1 6d94904078a70348e6d9c764b07c6f267612d4a8
SHA512 56b5abb3fa0b32de4d14f9aabe60e40970e4e68924a172d2884bb407e3a0cf4557d986d35ea03881465866f0ded20370f83f41910a3e50d22b637da6dfc5595c
SSDEEP 3:ImtVuH1sIPlluMI+1:IiVuVpnu
TLSH
T117D30445C1150401C404D03074014F3D0073C54701110F410F340C0347470555D13411
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Default\Web Data
Size 210KB
SHA256 db93cc6874e6ae80c9a151c1dd6a326ffee07b127e5899438873c19399c79b85
MD5 de64b3487ba692a60d246d8fecc05bbb
SHA1 e2c1d6c0c2ef943be79fee667d2895d5579f279f
SHA512 13e75703aa5562b559896e564a264385fddfcde4ca29de673c1ba7582425776f51c6aeda5a324d89207b0d69b0c915284a1290577774220302a45d3b0fae8f1a
SSDEEP 384:FihpPI2DnEDsKc1IysvHEBMehIv0QKIqJOw:wzPDDnEAKc1Iys/LIIvfKIqJOw
TLSH
T1A724554A7B746100DDE2D9B21CB080771A3CB16D8F22E6925DB264694DF7853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Default\shared_proto_db\LOG
Size 301B
SHA256 6ce89cd1c1e063ec0a1f621b51ddaffd3f38077ec923d056bdebcc6a22c43549
MD5 22dfa46cb96dc07d160565c19dc2093c
SHA1 8285eff718005ab26943c6010b57db18ec4317f3
SHA512 58f0bf3e84cc324e4f557c07ded76f48f84822c9b54447f9b053a37ec5f1c8d0c7598b20f114953ae1f90b6cb240aa679538bec904e4d9ad6db94a54923f1e1e
TLSH
T17AE0CD52B8CD94EB4254C4FB4C754BCCC764264AFFCC178A4F90C54C304B509B490673
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Default\shared_proto_db\metadata\000003.log
Size 392B
SHA256 1b8d4261ed3789aa8614cb5e41b1c5cb1cc61b0ca9dbbfacbd3dc751514f82ce
MD5 477d54f8af80d8bcbeb8cf95e0d2fe64
SHA1 f1800cdafde332c91a7dc7061f5247c416d0aa86
SHA512 85abf75b059b5b2955e377b128502c0919297a66e6399987b1262d61473556752260b0d299083e89b859ea6e9c6761b4c3875c9518406bac1a5289ebe1b8bbe4
TLSH
T13AE02B06F320C000E10AD33A6479A7220374D8215FB8FD0F483741112F715411D073E0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Default\shared_proto_db\metadata\LOG
Size 319B
SHA256 a9e590f4aa1fe36cb9ce9548659451f12c88cdc4d0b2a65230b5c657eb7d1235
MD5 16f7862d2bb4d29a43b8ed63e4681c91
SHA1 52f0973eee6f73d8b2c6e07734309de5017d542f
SHA512 38827880ee7422ba3feab0455d27c0ab6e47b414ca2647ca6d5ffad1fee2ded677d51a39b9592d65ea9e23b3e4134d2e26e12d233160604d9c760d34c16db2ed
TLSH
T142E02691B88D80EB4256C4FB4CB54BC8C320368DFF8C1F468E90CE08704B906B081762
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\GraphiteDawnCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\GraphiteDawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\GraphiteDawnCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Last Version
Size 14B
SHA256 d75607a88bb0f572f8863a3ea4737b635664178e97e0b7cb057887f2736fe3fe
MD5 3b746b6e8b8e101ee7cd41df1bb565d0
SHA1 ff5ff645ada097814fb4890d00dba8a309e1a506
SHA512 71d487cff7f744f046d993889c770a877075378b8d47d6c2f80fd94a5c1150a627f4a69d9e55f272f3aa4257e5dbb5296643591d5d23804a95550a3f2d91e2d9
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Local State
Size 2KB
SHA256 a9ed84a36c6b2596714736e09bb0d173ba205f77a49e5715e764e0dada94ce3d
MD5 ffa0c0f3bdeaf36400ef5b0349e85e0b
SHA1 5815540ed6097365c33b9448ee168c287fba4079
SHA512 5b6cb0e7bf31bd2e5ddca71c682fd84653e1139bdc99ff154f255a95b81daafdf89a696dc079e41ad79b8052da1fb51a1ae966437b78252c5286521516323705
TLSH
T14451A573A9606A37CAA39A48794E7F63CF7941A59E422F909ADC1B1C00CB64C1347C76
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Local State
Size 3KB
SHA256 6b4249779b357c2cfc350cb0a81b8f20bb4ee4f302ea388c3703412b80cdcfc5
MD5 67cbae91da54ada05cec9d4bf53d285c
SHA1 1e780e86d22abe840e55e8dbc6e8afa8fc5b3448
SHA512 03fa09bec60e48cb066e0ec765065336a747f747e8cfd25e73253f41ab62329fc5a564d29252ec25a8db08f785023f522569a130bc4585fe74446c7e231bf2b2
TLSH
T19671857B99B4A93B8EA39A0979892F17E7A54126D9813F94DAEC1F1D01C73881353C13
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Local State
Size 4KB
SHA256 c0f709095dcb652e633bf15ff20e62be74aea02cac47247a8f51c419375b0064
MD5 0122058533eaecf2d2576ca3e61b36a1
SHA1 17fd34ee31080211b6f1318036ef9dd917db224d
SHA512 104fd9b3c3c0f237a0ac8446efb0e0c878404d88bb4335bed416fd201a2ef4dc16737fb6f7800c76eda9d28c3d5b56feddc1123ee7d6150088956b75a9753fb8
SSDEEP 96:SJXB3NkGSCMQ1fm46t08kh/cI9URoDotoN5BlrB/fZ586pyZKIZZTdJYa:ST3NBSPjnaeoDUaBj/fZ53Qlv
TLSH
T1BD91947AA9B4B83789B3C90979996F03E7B5406799853F94DAEC0F1D01C728C1386C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Local State
Size 4KB
SHA256 e26f141478356dac3fddefa4a2c9c0c7ef93b19513ed1b24adbbe08b61b55ca8
MD5 e0def3a89b9b146f92708bb16b7251b9
SHA1 431c2c8f9a491566eae7c172072302962ec5372f
SHA512 b03be2813dbd3aae653e2bbb14c2524e0376849b86c2cdcbd7a8aae705cf4a141e1bcb2554bed105a4d3891798290a8d35ccd64774ca61ce80d65af5d41f00a9
SSDEEP 96:SJXB3NkGSCMQ1fm46t08kh/cI9URLl8DotoN5BlWB/fZ586pyZKIZZibrJYa:ST3NBSPjnaeiDUaBE/fZ53QEb1
TLSH
T1B891947AA9B4B83789B3D509B9997F03E7B5406799853F98DAEC0F0D01C728C1347C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Local State
Size 16KB
SHA256 51c7c96bdf3f03319f7133eccd225d1235624b5d13238466502cf01b25fb9e9c
MD5 c02f0c4930ae6993696da46b581ad672
SHA1 a9d93886a82f5ec3eb3475d376e871cf84bb91a5
SHA512 fd739c2d09635c52dafd25133b5815d08be175fe74663730b25adde034f0c3b99cf9b63d25a93f7c6118d1be421125664c7ac9a3ae92a97ea90fb54781dc3b0a
SSDEEP 384:y+aQikB+z/xvxjg/qhEW3NBSpwVI3s9zG:d/UxvxjgC+WtqcFG
TLSH
T17B729D2F99B97D26D1B3E5057A591B8BCBB894A285C16EB44EBC2F0906C73C80307C22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe5a8e28.TMP

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Local State~RFe5a8e28.TMP
Size 1KB
SHA256 0dc76cd258cf97865302e52f9e06f0165ac9c1e8946b562c16be2c0499c76c15
MD5 ecc69a0e5bbc3dd35ce98b87cb2725d5
SHA1 2dfd18c653c36ccee96b589f05f01d81a817e44f
SHA512 f15d6b084f091aed08fd9dab9111b88a5c2df71e8d0d635c7197a290e87bdc5d033a386e8c3bb65cfa845038611e8dca0d1157b4d459bd8d6243734ebc6f5777
TLSH
T1CA3194B6CAA02F729D92A14A325AEEA3DE71006A87410F80A5DC1B2D00C718C677FC32
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\ShaderCache\index
Size 256KB
SHA256 ba8dfab3cc1303cb5f7eb6ec0c756717e324e00f7fa122d884b2ffd72c074bcc
MD5 10d58ed839a0198c8bc9c4765599c6b4
SHA1 485af5f88070c474fda1f5c284a3523d30b92cb5
SHA512 f36c87813872934f4b459744dd560ad4725475d31a3de76e9531011799e1f4bcee052ff2e63b82b58ad051e4c0d11886a89bbc7c19cdf86ef2a39e8f7756e72c
SSDEEP 3:LsOllllklkXlitG:LsUlPit
MD5 SHA1 SHA512 SSDEEP

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\tech.scryde.kiten-tensei\EBWebView\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1016-112-0x00007FFFACB70000-0x00007FFFACB71000-memory.dmp

Download

memory/1432-498-0x00007FFFAD0C0000-0x00007FFFAD0C1000-memory.dmp

Download

memory/1432-499-0x00007FFFAE210000-0x00007FFFAE211000-memory.dmp

Download

memory/3572-539-0x0000011A84F90000-0x0000011A84F91000-memory.dmp

Download

memory/3572-537-0x0000011A84F90000-0x0000011A84F91000-memory.dmp

Download

memory/3572-548-0x0000011A84F90000-0x0000011A84F91000-memory.dmp

Download

memory/3572-547-0x0000011A84F90000-0x0000011A84F91000-memory.dmp

Download

memory/3572-546-0x0000011A84F90000-0x0000011A84F91000-memory.dmp

Download

memory/3572-545-0x0000011A84F90000-0x0000011A84F91000-memory.dmp

Download

memory/3572-544-0x0000011A84F90000-0x0000011A84F91000-memory.dmp

Download

memory/3572-543-0x0000011A84F90000-0x0000011A84F91000-memory.dmp

Download

memory/4124-19-0x00007FFFACB70000-0x00007FFFACB71000-memory.dmp

Download