hxxps://pixeldrain[.]com/u/Uox57KhW

Analysis

user interaction
yes
max time kernel
784s
max time network
673s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 05:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://pixeldrain.com/u/Uox57KhW
Sample260930-ftrasswt7j

Score

7^/10

discovery

Malware Config

Signatures

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000\Control Panel\International\Geo\Nation	Launcher.exe

Executes dropped EXE 4 IoCs

pid	Process
2652	Launcher.exe
5472	HolyKnightRicca.exe
2328	UnityCrashHandler64.exe
4812	Launcher.exe

Loads dropped DLL 6 IoCs

pid	Process
5472	HolyKnightRicca.exe
5472	HolyKnightRicca.exe
5472	HolyKnightRicca.exe
5472	HolyKnightRicca.exe
5472	HolyKnightRicca.exe
5472	HolyKnightRicca.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	HolyKnightRicca.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	HolyKnightRicca.exe

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Launcher.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Launcher.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5772	chrome.exe

Checks processor information in registry 2 TTPs 6 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000\HARDWARE\DESCRIPTION\System\CentralProcessor\0	HolyKnightRicca.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	HolyKnightRicca.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	HolyKnightRicca.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	HolyKnightRicca.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2091445952-3649787497-104050984-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4384	chrome.exe
4384	chrome.exe
2652	Launcher.exe
2652	Launcher.exe
4812	Launcher.exe
4812	Launcher.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4220	chrome.exe
Token: SeCreatePagefilePrivilege	4220	chrome.exe
Token: SeShutdownPrivilege	4220	chrome.exe
Token: SeCreatePagefilePrivilege	4220	chrome.exe
Token: SeShutdownPrivilege	4220	chrome.exe
Token: SeCreatePagefilePrivilege	4220	chrome.exe
Token: SeShutdownPrivilege	4220	chrome.exe
Token: SeCreatePagefilePrivilege	4220	chrome.exe
Token: SeShutdownPrivilege	4220	chrome.exe
Token: SeCreatePagefilePrivilege	4220	chrome.exe
Token: SeShutdownPrivilege	4220	chrome.exe
Token: SeCreatePagefilePrivilege	4220	chrome.exe
Token: SeShutdownPrivilege	4220	chrome.exe
Token: SeCreatePagefilePrivilege	4220	chrome.exe
Token: SeShutdownPrivilege	4220	chrome.exe
Token: SeCreatePagefilePrivilege	4220	chrome.exe
Token: SeShutdownPrivilege	4220	chrome.exe
Token: SeCreatePagefilePrivilege	4220	chrome.exe
Token: SeShutdownPrivilege	4220	chrome.exe
Token: SeCreatePagefilePrivilege	4220	chrome.exe
Token: SeShutdownPrivilege	4220	chrome.exe
Token: SeCreatePagefilePrivilege	4220	chrome.exe
Token: SeShutdownPrivilege	4220	chrome.exe
Token: SeCreatePagefilePrivilege	4220	chrome.exe
Token: SeShutdownPrivilege	4220	chrome.exe
Token: SeCreatePagefilePrivilege	4220	chrome.exe
Token: SeShutdownPrivilege	4220	chrome.exe
Token: SeCreatePagefilePrivilege	4220	chrome.exe
Token: SeShutdownPrivilege	4220	chrome.exe
Token: SeCreatePagefilePrivilege	4220	chrome.exe
Token: SeShutdownPrivilege	4220	chrome.exe
Token: SeCreatePagefilePrivilege	4220	chrome.exe
Token: SeShutdownPrivilege	4220	chrome.exe
Token: SeCreatePagefilePrivilege	4220	chrome.exe
Token: SeShutdownPrivilege	4220	chrome.exe
Token: SeCreatePagefilePrivilege	4220	chrome.exe
Token: SeShutdownPrivilege	4220	chrome.exe
Token: SeCreatePagefilePrivilege	4220	chrome.exe
Token: SeShutdownPrivilege	4220	chrome.exe
Token: SeCreatePagefilePrivilege	4220	chrome.exe
Token: SeShutdownPrivilege	4220	chrome.exe
Token: SeCreatePagefilePrivilege	4220	chrome.exe
Token: SeShutdownPrivilege	4220	chrome.exe
Token: SeCreatePagefilePrivilege	4220	chrome.exe
Token: SeShutdownPrivilege	4220	chrome.exe
Token: SeCreatePagefilePrivilege	4220	chrome.exe
Token: SeShutdownPrivilege	4220	chrome.exe
Token: SeCreatePagefilePrivilege	4220	chrome.exe
Token: SeShutdownPrivilege	4220	chrome.exe
Token: SeCreatePagefilePrivilege	4220	chrome.exe
Token: SeShutdownPrivilege	4220	chrome.exe
Token: SeCreatePagefilePrivilege	4220	chrome.exe
Token: SeShutdownPrivilege	4220	chrome.exe
Token: SeCreatePagefilePrivilege	4220	chrome.exe
Token: SeShutdownPrivilege	4220	chrome.exe
Token: SeCreatePagefilePrivilege	4220	chrome.exe
Token: SeShutdownPrivilege	4220	chrome.exe
Token: SeCreatePagefilePrivilege	4220	chrome.exe
Token: SeShutdownPrivilege	4220	chrome.exe
Token: SeCreatePagefilePrivilege	4220	chrome.exe
Token: SeShutdownPrivilege	4220	chrome.exe
Token: SeCreatePagefilePrivilege	4220	chrome.exe
Token: SeShutdownPrivilege	4220	chrome.exe
Token: SeCreatePagefilePrivilege	4220	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe
4220	chrome.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
5472	HolyKnightRicca.exe
5472	HolyKnightRicca.exe

Suspicious use of WriteProcessMemory 22 IoCs

description	pid	Process	procid_target
PID 4220 wrote to memory of 4344	4220	chrome.exe	89
PID 4220 wrote to memory of 5080	4220	chrome.exe	90
PID 4220 wrote to memory of 5080	4220	chrome.exe	90
PID 4220 wrote to memory of 5772	4220	chrome.exe	91
PID 4220 wrote to memory of 1940	4220	chrome.exe	92
PID 4220 wrote to memory of 1940	4220	chrome.exe	92
PID 4220 wrote to memory of 5404	4220	chrome.exe	94
PID 4220 wrote to memory of 5404	4220	chrome.exe	94
PID 4220 wrote to memory of 5584	4220	chrome.exe	95
PID 4220 wrote to memory of 5584	4220	chrome.exe	95
PID 4220 wrote to memory of 3272	4220	chrome.exe	96
PID 4220 wrote to memory of 3272	4220	chrome.exe	96
PID 4220 wrote to memory of 4000	4220	chrome.exe	98
PID 4220 wrote to memory of 4520	4220	chrome.exe	113
PID 4220 wrote to memory of 4420	4220	chrome.exe	114
PID 4220 wrote to memory of 4804	4220	chrome.exe	115
PID 4220 wrote to memory of 4384	4220	chrome.exe	121
PID 4220 wrote to memory of 5008	4220	chrome.exe	125
PID 4220 wrote to memory of 5008	4220	chrome.exe	125
PID 4220 wrote to memory of 3108	4220	chrome.exe	136
PID 2652 wrote to memory of 5472	2652	Launcher.exe	142
PID 5472 wrote to memory of 2328	5472	HolyKnightRicca.exe	143

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://pixeldrain.com/u/Uox57KhW
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff9643cc728,0x7ff9643cc734,0x7ff9643cc740
  2⤵
  PID:4344
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1720,i,12211251925794642048,251579780558444014,262144 --field-trial-handle=2028,i,15123291675136968939,9750407089402417145,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2024 /prefetch:2
  2⤵
  PID:5080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1616,i,12690525146861860343,11118023336152228308,524288 --field-trial-handle=2028,i,15123291675136968939,9750407089402417145,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2280 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2400,i,13124386985732730311,2741467564592738515,524288 --field-trial-handle=2028,i,15123291675136968939,9750407089402417145,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2516 /prefetch:8
  2⤵
  PID:1940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3240,i,18374805169376196943,17753450585279969281,2097152 --field-trial-handle=2028,i,15123291675136968939,9750407089402417145,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:5404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3236,i,12991232848029246796,13414740799840669352,2097152 --field-trial-handle=2028,i,15123291675136968939,9750407089402417145,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:5584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3952,i,8533374360481514775,9657598156173456239,2097152 --field-trial-handle=2028,i,15123291675136968939,9750407089402417145,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4352 /prefetch:2
  2⤵
  PID:3272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5332,i,9392374856468077836,11534567405023228221,524288 --field-trial-handle=2028,i,15123291675136968939,9750407089402417145,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5340 /prefetch:8
  2⤵
  PID:4000
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5668,i,9139111150661246,16859906529189800798,524288 --field-trial-handle=2028,i,15123291675136968939,9750407089402417145,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5336 /prefetch:8
  2⤵
  PID:4520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5664,i,1243381792863181318,16963594991172646155,524288 --field-trial-handle=2028,i,15123291675136968939,9750407089402417145,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5384 /prefetch:8
  2⤵
  PID:4420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5448,i,121220066707256592,1606803239490410518,524288 --field-trial-handle=2028,i,15123291675136968939,9750407089402417145,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5744 /prefetch:8
  2⤵
  PID:4804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4820,i,14207678723998113657,11705797546385917963,262144 --field-trial-handle=2028,i,15123291675136968939,9750407089402417145,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4568 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4384
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4332,i,2245379379395643367,12461881052637242546,524288 --field-trial-handle=2028,i,15123291675136968939,9750407089402417145,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5524 /prefetch:8
  2⤵
  PID:5008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5672,i,13080523899233593644,8915070004875624241,524288 --field-trial-handle=2028,i,15123291675136968939,9750407089402417145,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4312 /prefetch:8
  2⤵
  PID:3108

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1872

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5672

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2880

C:\Program Files\7-Zip\7zG.exe
"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\" -an -ai#7zMap16575:198:7zEvent2371
1⤵
PID:2680

C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Launcher.exe
"C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Launcher.exe"
1⤵
- Checks computer location settings
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2652
- C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\HolyKnightRicca.exe
  "C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\HolyKnightRicca.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Reads the TCP/IP host and domain name from the registry
  - Checks processor information in registry
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:5472
- - C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\UnityCrashHandler64.exe
    "C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\UnityCrashHandler64.exe" --attach 5472 2230583627776
    3⤵
    - Executes dropped EXE
    PID:2328

C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Launcher.exe
"C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Launcher.exe"
1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:4812

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 8544ebec010f05b2bbd27e423ee5954827d96e65e214dc58096a4e10b44f269a
MD5 47f6fe38ff41767172158d793b725f69
SHA1 e5bc3ace827163c5d3270200ef320f52fa90d051
SHA512 19640c7b8cbeca3ceff48a50b390ed6a208c82e79bfcbee318e6568d159bdf2d73b34377144d7b12ae9cdb537f82b1e62af43fff71a191da239b6af204aa586d
TLSH
T1D9F0F9B5C921FC7718FD5B2D20944B87E755131B3780945F3A3D420D8F785374A8581C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 216B
SHA256 89c396b8323408eb1fe2189e2030611cfd07dbdeb6324474961b0b447823645e
MD5 87208975f09188caf87808e76a423d79
SHA1 5a3b6040402c9b2449220beba0f43aac826dc061
SHA512 41bcf69cf66f98946e564ddac469aa0e6388ad58e3f040eb920840b9ec64b919b4ce2840ec3988d3a1f32e1f4e9b3cbe24fb807c1f9da73f096d366b1ef9658d
TLSH
T14ED080D06E910256E708D27F1CF20A04B4301557809787CEC2DDD7D43C116543712CD5
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 c7f0922214d4519f0c47b67eb7dc16e375df5ec5fb3bad005453da24eca8a6e6
MD5 71d6536f38900421a5ae8758244a339d
SHA1 5e1227797ec932b43d144da94d2378c0bdc6d9bd
SHA512 ed6d5acfd0dff4ffd882980b305c2e6132fff7c4475059f783ad0d2bd4d794fe58bd76a96a525a4fb42c58adf48be07590fb41bd7514d86c35cd787969c20216
SSDEEP 3:MsEllllkEthXllkl2zEUlt5PSll:/M/xT02z/vS/
TLSH
T10444041C7FC3CC15C50050345411C3740370D4103515574334511F137DDF5410D00401
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 1578fae6a889b3f226b0997df20a0972ee3ea1a7092b18b1606f9b94aed7ff81
MD5 db41669801b48bc35104a5ecdcd80b46
SHA1 b39558800c00f48d3f6656c63e3b0e00a62e18e2
SHA512 a9b7f8ecefc2206ab17baa24888ba73c6cfb279defb95da4303d0b851fccdf36e14aeecbfb4e2e04ca57a0dc0833c83f85c84d7e328dc954ff9b83984d81f50a
TLSH
T124518DF7C3D88A3DC90156F4AB156E1BCE6D0A14522C3C56D8E8AE5F53E28B1D34068E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 60093aacd6b32355a84ffdccb90818f2a42fe5fcf17006d466bfbb12aaa86e42
MD5 b0e8c9fc5d20f9ec3488a845925764b4
SHA1 70b93dcc7d948b8621c82477d30bdfdfc5a0b2ac
SHA512 67bcc877c5d3cae02db2b81d3f350d4972e9bd8d65b1f43a46c6e9c4f8cb9362d0c6207662d9f16f1803d9d05864349b3d923e2d2e90f906107796d0a203e9a0
TLSH
T1D7619EF7C3E8863DC90156F4AB152E1BCD6D0918532C3C56D8E8AE5F53E28B1D34068E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 838716e7b0babc98da1c6d9647e13fdaa78d18d492d2b2b868e4bdc7c69ed61a
MD5 6a8954265702e7bee7a3a5e8fc60c84c
SHA1 758118b4711a9a3e60c82ef9a31fb0886bdca192
SHA512 3d92a14fb34a42f7d41064831458461fbcb6862ccc15cc5168e32bd83b4fd5124fb6abc2162f6d84558772603ff855fa7c3c6f8112066adc0a00987f15f41bb2
TLSH
T1A5619EF7C3E8867DC90196F4AB156E1BCE6D0914532C3C56C8E4AE5F93E28B1D38068E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 691B
SHA256 4045dd049b104a0653e1e3c68814f0528de6965e1b6d98a32f01d6a6ebb76a8d
MD5 f1b4f54a00a10bf81b195bd00911c93e
SHA1 af547c250b5651eb5115ba9b20bee8bf84713e8b
SHA512 64e283c7a037674b76a4afde643c25e63b3e7785ca7430b3c93f8ace50c043fb9b692699d6f2e586ab03e009a8e050fcef6f34c17180719bb62c13c4caa9b20a
TLSH
T19C017BAB92AEB467517E84B71D04784A69FE7431018168F0DE96826CF0926F30B12063
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 3fa751559407e3482e8ff88a516234b5ac48c82f2336a6fea07f83ffeff369fa
MD5 6226df31dd73e6b2ef7b77a42c1726d5
SHA1 1b9b8ab39249b1cb9ecac1f15f83975eeed38727
SHA512 c49e4e83d1e2dd9eb9d194c16175ee5c13c2faa630b318c17ce28f50858ee1c11724a3b6794565748e64c9ee494d88cba44bffb08b562fb48a4a95c14608c7a0
SSDEEP 192:hRCTf1hf7qhhvTv7GpoPRpOldklhw96Hsb+WNnJADPFYIHejQkwp8yIsnAUgE:hRCTfDarCMXWd8Wsw+xYJkOE
TLSH
T10B52A22EFD10797B9CCBD229EA617B67E3F5102920902E88E6FD893C14E76DC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 5c3779de9fac874b57fed1ac13d5ab5a792878d12cd77a3a55cd3c7251c301dd
MD5 d1faad10219b215f03cbbb985d87996b
SHA1 084a2e217288ed77331cf1526194ad4ca8f22e97
SHA512 0750f20993f279852dec4b09f5e7913e6ab2ec484f5c9771d76e3b5aa2c4122c76e0dc2554c4c85934f0eafc5ddbddd9cb0693748e8cb188716a54eed35ea5b6
SSDEEP 192:hRCTf1hf7qhhvMv7GpAPRp23hg96Hsb+WNnJAD3t2lHejQkwKVyIsnAUge:hRCTfDaYCUXw2sw+R2okqe
TLSH
T14D42A22EFD20797B5CDBD229EA617767D3F2002524902E88EAFC893C10E76DC2217457
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 2993e0ead48354b62b2f4963fc2ba403baf1f97d35abc3049c8b6f3c7d972233
MD5 76897d7ad4be1a88edfe0aeae09202bd
SHA1 cbab1f2c02765c38df93aaeacb4c4d9719897fc5
SHA512 a3f40ebb614320b7554be3e796b0eae68368df17ee78203f1614f187edcdbd51bf3a03b318f8f88959812bb359d529fccf61644f5906c63430e8bd594c285d5d
SSDEEP 192:hRCTf1hf7qhhvpv7GpAPRp2ldklhw96Hsb+WNnJADPFYsHejQkw98yIsnAUgE:hRCTfDapCUXed8Wsw+xYVkqE
TLSH
T1C042B32EFD10797B9CCBD229EA617767E7F1102920902E88EAFD893C14E76DC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 9e90ccf157038f0584318fc344c4dc5bb7bbee7745d049ef3483a34e2d983218
MD5 e849124e1fc0ca3ce8075c8358c358de
SHA1 d3a9df6bf4db5a866687407738461e78dff578eb
SHA512 01b699b1f6afaa567924b0f9e8a67dd74430fe33ab7fd6411a47f2793bd9eb8269bef980e091df8435766ca1009972e3d63b2f0b453fdfc944f85e0660713cf5
SSDEEP 192:hRCTbFhf7qhhvTv7GpoPRpOldklhw96Hsb+WNnJADPFYIHejQkwp8yIsnAUgE:hRCTbTarCMXWd8Wsw+xYJkOE
TLSH
T10C52A22EBD10797B9CCAD229EA617B67E3F1102924902E88E6FD893C14E76DC3217457
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 6e5387e356b19ef5f222b97a0fdeb0e94d43b362fb4859aef1bcacedbcc518b1
MD5 1ff55aac0b779fe575e448670c56f711
SHA1 4b2e0e2dba5e60de98e74405b7786fbdf08ec273
SHA512 61a3d074588eea766b611abb0cf3c5e840c31ec1cf502c341d22f6f446c257439a2c43d49727c0e3f1320c266de9736c00a42bded582204ff6d06eeecdf78262
SSDEEP 192:hRCTf1hf7qhhvdv7GpAPRp23hC96Hsb+WNnJAD7L1eJHejQkwK8yIsnAUge:hRCTfDadCUXwUsw+xeUkNe
TLSH
T14C42B32EFD20797B5CCBD229EA617767E7F6002524942E88EAFD893C10E76DC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 9a371422050af7833cd367d139f3e385269104608e665001e4042997e7cd4b72
MD5 3eee57d3dd4498304879244669fda9d1
SHA1 af0c239a05b527a340aa9275688cdcdfd7bcb317
SHA512 15e594c1939a96dd2f089ee852aea5c3a0089a2f6faab79d4a2c9d8c276c0da340a1ffdc180783fcdedc070dadce279a582e536adb3e81d85e5237813b137502
SSDEEP 192:hRCTfFhf7qhhvTv7GpoPRpOldklhw96Hsb+WNnJADPFYIHejQkwp8yIsnAUgE:hRCTfTarCMXWd8Wsw+xYJkOE
TLSH
T17952A22EBD10797B9CCAD229EA617B67E3F1102920902E88E6FD893C14E76DC3217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 2402969cd2ec72ea72b513389c43205a9ee2bceca1c456ef576613e3544e19a0
MD5 ef2f6beced6ed991eb5f4b124485b70c
SHA1 13ae98461b417e18835295fc68f98db326a5bad0
SHA512 5adbe06b2aba408c8975b2dfc7f1c8c160dc3367ebb5f8a049421cc510b871c0310b3c4cd24506c3615f6972ff559c98cb7cd22bc47816248c6501f19779082b
SSDEEP 384:tyjCjRyjH7KxkXqKf/pUZNCgVLH2Hfgslqq7pLuLceSzyjDXODRyjr+ErU3J6HG2:Ie0r7KxkXqKf/pUZNCgVLH2HfgsMq7pw
TLSH
T1A0720A77BC0C9A7B0F94C68CD8167E4FEDB5024B65D9886443FA983503D5BDA110A1EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 0afcb4642f169209c18a0f87bfdbb197e59298142246c6f33195ceea10293cd1
MD5 ed8db430b115c35d24562eb250b1758d
SHA1 00d6455347c09f9780a086e8a3d7cdc8fce9f8ae
SHA512 b9e1d76e5cff273a1b5262ec4bb0929b71400a2160e3a5c58c80085da8e646c764b660e8ba653d323ff1cf8e018fb15e6219b719051eaae9042e38b42eb4a7e5
TLSH
T108B0120AD0453301CC0513701554909436608F35F21313D541F01FC1D8311A1405B21A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe592be8.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe592be8.TMP
Size 96B
SHA256 e1ab2d2ca57dc9d62f33e07d7363cdec2aecb8df98300740692e92351806cd6c
MD5 fcc0d2763966387e69f0ac1fd8ab9bdb
SHA1 c2d5aa095208a2368890b84b77f226b4bc9b5ee1
SHA512 850b5afbd459d2bde33e679199e443037fb7b1df654f0a21f18fad030c70d93120bea6e4ea38da3b59126bd7804719b2d82451f14ee9b7183f6cab38477860b9
TLSH
T1ACB0228FC002BB03E00203B83F80C0C83020CF30C203020282E00B22FC302B000A0020
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 171KB
SHA256 1b4b3a022a40d9397016b04d1b1efeda5c6852e012cf2dd763fb7c38f059111f
MD5 e8e10da9b89f09c3c7cbd486c7ee6fc8
SHA1 6c577c5473fccd30d45cd4ae9b4c30dc56d0c04c
SHA512 668e11a4f4e4125e73a2549fe8d681f4feaa0634c7397a562a13291a3f8eb3613e16fc65faa5f53f7e3d4acae8a5625ff313ccc244fb7b988eba6f3514666ca9
SSDEEP 3072:XuY2dYlEeQK8vsP0Ts+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8Pl:XuFKEe110Ts+hFD+7t56OD9ZfSApprB
TLSH
T1640412226694C8F7CAFC6441A147B200DE7569ED54E93E0E80549F8FE1AF8490BA3F37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 96342ce2a47e5ab18b422d06f1b36eba02aee9f69813490bf67645fa23907730
MD5 ecc7d7a6e26debdfca2efdaa16ecc2e7
SHA1 630ab450c7b8951d746f7ce39f870dd570575f5a
SHA512 b2d4896a4b8f377542c64a63b9cf80103781574d025f443012f993eaa0a745f2ae3eca843bfcd978194e77e07ec22486ba6faf24ba91a5894a8ef65c9225f8f8
SSDEEP 3072:UT+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gB:UT+hFD+7t56OD9ZfSApprB
TLSH
T154D31232AA95D8B7C9FD6141A187A300CE766CED45DE3A09444A4F8ED09FD4C07B3A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 130KB
SHA256 02c7343b6ae7783361389b294926b44317b29c6473f3282b004e10664caed93a
MD5 19ad2fd8954a4f2d74f279a8877d123b
SHA1 8d2f6fe317f098a4adfd6dd748e190d110814ef9
SHA512 cdca7d8767b5b781925c90bcbb9c2c573bd73b6bea7036f6ce99af3bf067ab111a1f180bb8b654f7fed2cb7cf0c51b4df5ccd38e3929617e0ffb46c2a6dfe85f
SSDEEP 3072:U6+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gB:U6+hFD+7t56OD9ZfSApprB
TLSH
T1BBD31232AA91D8BBC9BC6141B157A300DE76ACED45DE3A09444A5F8EE05FD4C07B3A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 a77ea6d12136d17c73016fac41070ea44f3b6e092d879c7672dd74deddac29f6
MD5 12688bcaafcc7fbe9d71bcdaa54d52ac
SHA1 40768617cb7cf158d40154489e9368134528225e
SHA512 79fe2487160506108252392f44c55902297d0ad50c89c9753463792f95ae18c80de2eb182f3481da667b996f11315290fee0ebd19a4b6c293a59a78ac41477b4
SSDEEP 3072:jFs+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gB:jFs+hFD+7t56OD9ZfSApprB
TLSH
T153D30232AA95DCB7C9FC7141E187A304CE7668ED85DE3A0944465F8E909F94C07B3A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 0a1d95d113a2bcb01305c2eb2581546e5b9a87e08807177e8ce44fbd01d46948
MD5 f1539c23b5378a8eec960935fa8e70de
SHA1 e9b9abf931151c4f62f13ca90ccbfd9204c23b2e
SHA512 ae32c680c4dd1543d5be7322653c4f0582507b384779161641172eaeff2c3a90ae0637a563d0232c562e8c865580f9a68989c106998f8d3ceb405252d1ac71c8
SSDEEP 3072:XY+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gB:XY+hFD+7t56OD9ZfSApprB
TLSH
T16FD31232AA95D8B7C9FD6141B187A300CE766CEE45DE3A09444A4F8ED09F94C07B3A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 131KB
SHA256 009548f57f46420e4400ad592af5c1fe36a3954123987d7eb759bc97b2a9a7c6
MD5 469b840a3b443ec9dbcd4d6fc7aa6358
SHA1 d54dbe49f36b029c2f51d846059ebd15bda7cad3
SHA512 051e07961a40b77dab65bd6a78cac8cc1a9e57d20a324c82d33ec80e48dc48975c6fe2b4f4666c2764f43159cc98604b2c62c7936fbef5f690fecf3e3f590181
SSDEEP 3072:XT+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gB:XT+hFD+7t56OD9ZfSApprB
TLSH
T1A2D31232AA95D8B7C9FD6141A187A300CE766CEE45DE3A09444A4F8ED09F94C07B3A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 132KB
SHA256 7d7e967bd1763daaf2badbd2de2bcb83e9f834cef3c85e098e950691adcd4380
MD5 91e9ec9c81b981bcb09c28a69038a82e
SHA1 fc4288f8e8641fbda088bfac0a0e04a64bcb97c3
SHA512 5706140046b91a2e62e3ff122064fae37a85b727fe41529a04116589b522b8044fd825d30c789093116924bcf4af7ea9410c0f8b0e57ba08b4d26d0b2d733c88
SSDEEP 3072:jdY+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gB:jdY+hFD+7t56OD9ZfSApprB
TLSH
T1CCD31232AA95DCB789FC7141E187A300CD7668ED85DE3A0984465F8EA09FD4C07A3A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 226KB
SHA256 970c871e450559f384a54d28a3dea13753a015299f4263df54de7af972561de3
MD5 a43941e6e163337c22b0ed791470a39a
SHA1 891b586825bd39e9c71b2087cd5ee82f564fd23a
SHA512 7f197e4ffb5ea281653edd392e1475b229c367563a22b738a966fe7934b09fa4897739ac1c4622551e7f47f5a8232a5dc39dac667aa8dc305bee7c815b2d887b
SSDEEP 6144:X4FKEe1106bxJ+De8pqv/LNCh+hFD+7t56OD9ZfSApprB:UKEe11xbx2bpW/LNuyFSXD9ZfS4j
TLSH
T1123413326E84C8BBC5BC611121977200EDB575FE95F92E4E81969F4ED16B40A0BA3F33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Launcher.exe.log

Path C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\Launcher.exe.log
Size 2KB
SHA256 4577d3e9cb0cc3d72f9887508c61018540921e9794bafe635362fea05213e1f7
MD5 fcac989bc56d8823815c808212dd223d
SHA1 78a2610b1462bb4f8d9d70b7a997f6d979646e33
SHA512 65cc310e4e64c783f4dd39e92edf5b4a44ccb644521fe0b1fae2389478f782ac9fbef18b2d74c6f893ace00b7553e00f0f78c94b86c2ce31e836344b2e7fbec8
TLSH
T13A51CB3035B1A4D84D136F6318782AC562EF4748BB646F4CB519725ED92A007AF261F3
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

GameAssembly.dll

Path C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\GameAssembly.dll
Size 43.3MB
SHA256 5d815721f6b45251137dc8ab78446faa3a79cfc3bc0520fc4d8eb8c872bdb52b
MD5 1bad75f9fa2944def3de495863197e00
SHA1 9b0d10eede5581b2e06e08ba327f2e5375ac1cb4
SHA512 bd93bb571e0f65ffa2cf9d7a582e319b69681152ac1ea34755a835967cdf57639441161606b10c561dba11754e68594f8805688a579707da76690a10e402ee80
SSDEEP 393216:O2bb3NWnwsgjBClGTGsr0v1POzaVXigJaD81pVVlzZZFRYkOtu/r+rZ:vwwsgUlYWOGVzeoo
TLSH
T1FEA74A59B6759028C06FE1B4AA13049BDEF138406F306BCB26904B8D5F73BE5E47BA71
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HolyKnightRicca.exe

Path C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\HolyKnightRicca.exe
Size 638KB
SHA256 f589ce137b123167532464efd183e14cbb8ec1bc21b604feb08e00180a643304
MD5 3731ed32501c4d269235f3b8d1e256cf
SHA1 b5a567848a19f78ad54e7541eb159fd1c22f61ab
SHA512 2ef0ef13ca8d87856cf90f2eaf4fb5ba37096d42420bedbd9ad95ca6a46db5ffb6f9a05b2c8172a0ef297c538c1485917b13a43620dddbf57d8ddfbc46c875e5
SSDEEP 12288:YoCCYFCjZqsxwAlPXglBl0v5Aimeqaq/f0zOeLNtGYFjQWKqgwVz0t:bb4sTwzOCQqLpe5tGYV1Kq6t
TLSH
T194D44A7607EF18AEC0C77CBD4B55A229E6B6DD61052F83139B32396DDE3E6C0AD81580
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cri_ware_unity.dll

Path C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\HolyKnightRicca_Data\Plugins\x86_64\cri_ware_unity.dll
Size 1.1MB
SHA256 2ef8508bbe4894a27c6a4699b2202f32a7d32232106c36988aa4244012958cf1
MD5 98a041f4a72f29752fdc6fd8041de9c2
SHA1 f8eac2ccfc2c1588f2b1361e6771ad98efc95f6c
SHA512 b477a93dddfa597db7c74397acc23965d8732639dedb67f865cf68e877f08f41e8e8e2424d598eb050c9982a835422111dac333a1ad66624c09a10b4a308fe25
SSDEEP 24576:ybTFpS4EEtohFG6TLKRYvwqhtg+SBbI9R8NHTEZWuwaBbp2CYHGPD:ybTe4EEt0FJTO6vMF89R8NHTEJBb1
TLSH
T1FE459D1A637581B9E1A7C175C617DE0FE7F1B44207348F9B47E08AAA6F23B601A5F321
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lib_burst_generated.dll

Path C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\HolyKnightRicca_Data\Plugins\x86_64\lib_burst_generated.dll
Size 117KB
SHA256 e24fed479af21d30f481e9e7a19a4bf6f2d3842b188d7222abaac62c6e29906f
MD5 4505c317df43ff743ecdb8ea9cb162c8
SHA1 4dfded55f8ea8f147f5004e05db15a5e37d763d9
SHA512 4841c4ddb7658b8d56d58affdd10f7c11a98c234d2b39f5c4f7a0ab1a6e33399fa7af932cb1c41cfb017c91d9ca727b80f76c61783d818f35a1d4766bd6589a8
SSDEEP 3072:0mFjxvxKPWDg3fyocX15cO2EvU6tqFhXh2ff+:0aFs1hW/2EM4f2
TLSH
T13DC339A5F5D995B8E11A487081A9BA17F8313C404F045EE7A3E099AC2FB53C67EF2D12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

unity default resources

Path C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\HolyKnightRicca_Data\Resources\unity default resources
Size 4.6MB
SHA256 35491e99796daf1f9386e2cc0d10abb8944873fd8be7698d6ae15918b294a6ee
MD5 ed33cf3880bc573776a36f0e499d18c0
SHA1 f314ae4bdb9d222878a78e06f97f38c06ab58311
SHA512 fcb28e0b670a0c0b8fc4801ed55e3946f857f7b1f243237ca0303b57b9ba9fc1fcae298188039bf869a89de1c7d329a06d731574385b8fee0c0175bf9dc4c859
SSDEEP 6144:nETVhI8aICPGrdVKIaglj3aDopEOD2hq/3YWO/OJ9WqOmKySHCkcChWcbjutYRKy:nEouljbKhqgPOjdOZb8dQ
TLSH
T11126910396A0E4DAD89B30BD893B2DE0D19F95F8C6D50FC2272B1128DBA35B767119DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RuntimeInitializeOnLoads.json

Path C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\HolyKnightRicca_Data\RuntimeInitializeOnLoads.json
Size 1KB
SHA256 f38052a4006e9a19ad0a6909ec0f6d717ceec75123c7e49119c155b5d24b63a3
MD5 c8f04e57913f95210f367e9901783f3d
SHA1 93c1ba23042b66c2fbd57c1fe672e9c051274b07
SHA512 59ffccbc1f9ec5cbbcad0c0fb795474c2bc86a41758a9442d74f8ce62c26993e96bf3770dbef890ffb6d1ef962c167a1416a55664ccb416ba16d01bc12032cdf
TLSH
T1CE413E9C63828F7F4F0BE3637D2F0A4E21A6070E59C64990E8790F3F649679815DB56C
MD5 SHA1 SHA512 TLSH

Submit Download

ScriptingAssemblies.json

Path C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\HolyKnightRicca_Data\ScriptingAssemblies.json
Size 4KB
SHA256 26b499c3cd996455daa606f73b2b64072ca1b24989d51f69950024f1d979a9bc
MD5 ee98134c83df3a94c4ea8cad2475dd44
SHA1 42bf29c5074165b1cd1a4fced77fd3aa0472a0e9
SHA512 8f2ecc0b74bfddb3dd8b2c47196066b425cf711a60ff6201c93445c3385fd3dc76a0b2ab8c485e317abb5a1e582428da24f6499ce3c9c31cf8f0408e326ee811
SSDEEP 48:YXNAYrwXrjFR/ClouNzwVPQGoSfTG/fnPLyXyFr3tEV6o6bc:Gmjr/MouNzwyPLZdEVyc
TLSH
T104915CBA858B62C32ECD5ED39C759C8C39D701920E6190110EAEA79FE839CD63D4DAD0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

costume.dat

Path C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\HolyKnightRicca_Data\StreamingAssets\Default\costume.dat
Size 2.0MB
SHA256 58f37e7be1b08bf84de9387d7495ed6ee5c57468e0eb064a814ef76410ddb5f3
MD5 4d532ae01c8ddf5acc62e4d39cf63ffd
SHA1 9a8e6c6dfadc463d0b82aace5cb1212616138b38
SHA512 95f3ef5e441585eaad973e7e02953d5beed6c005c983ff69ac61198b1882333dd0c893b9ae6086fb799686913a8555aa54d1c5ff53641030ad423900bdd04b45
SSDEEP 24576:aWOGpow7Nsyjd10JmV9eN+p3ErIYE1Q0qBumeJan4UnEIRBtjt/8GP2zh19fmAGL:TpMqCWYV0qcmxjz2z5fmZo5EQuWo
TLSH
T127A533615AA93EF6052C8764307F4F3E13F01B67E8480AC79BE409AB6957701AC7F939
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

advData.dat

Path C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\HolyKnightRicca_Data\StreamingAssets\JSON\advData.dat
Size 14KB
SHA256 6a7eea3d4dfa92b535592931382f76e461fbd876acdf12e6eadab7ef0b27c053
MD5 970200e8e5671002efc7a45eaaa6d52a
SHA1 1c8147275922a11fdd5ccde25d4877368ca1f878
SHA512 a6379f7544d49a614f66163e08d7247a9b056fb73ba13411c080ae528beb46f77dbb98d86189e5aae9e57788994ebd506860abf46dcf7955ffc3bf9261faa586
SSDEEP 384:7SMYxe0T1kRVxMsgRV80NP8KDj34XcyGq:7rYxe0sVyRK06tGq
TLSH
T1DA52D199EF42E16A2369834B9B4F283A50878247FC84D5436BBFCCFD60E3F502719605
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

customCostumeData.dat

Path C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\HolyKnightRicca_Data\StreamingAssets\JSON\customCostumeData.dat
Size 79KB
SHA256 8da73bca689f90e1cb56857da5f0eec7d7f8635c806f59f82cfa95eb010e7ab0
MD5 d587559783b5f12be98cc5f87be85c05
SHA1 f26d69c8e1f348b5bc213380878bf0a9264012ff
SHA512 31d312ad65d30048c02547e4b122877be51b4ad589ca1aaa5bf764528176f319a161f9a9e46ccf1af348cfae23f717179ea6e2a03e137aabe3d502bf728b8950
SSDEEP 1536:MY+lSbZ1eGxEb98yx7ffjpCYWN5mEHF+JEt46dG8tMmf/7dxdBXx:M66k8rjpPWN5mEl+it/dbZfxxHx
TLSH
T19D8312D607DEA823CA674701E7D71516576F3EC028D92D2AF52031E6E6762EC8B2106C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dictionaryData.dat

Path C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\HolyKnightRicca_Data\StreamingAssets\JSON\dictionaryData.dat
Size 17KB
SHA256 4d296a62a4a815f5b31ff445bc901157cab1f9c437f75b3aa2c910464adb612c
MD5 e6a88a82b84ebb958079204b934c04ab
SHA1 dae3f2e781fc10fe72e13d0bff83bdbf149b7fc8
SHA512 435d7da61ce3b1ded317b17cd069f50594ae4e6bb15147fdbb7bfea9162ca77727fd19b2f6e3794cc478893f208a9e285cc2fd8a2e47fb6d9907a2192666a822
SSDEEP 384:kFOkZzIXC16HVihQ+0zxgI/JOBeceUcn2GZSKesK72FK:kFOTbV///wBTetZRe7AK
TLSH
T12272C02EDF5DE40C263087BA011D0DAAB2D8F6073C071D05EB41DB8B59A6161B987C56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

characterName_noTranslate.dat

Path C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\HolyKnightRicca_Data\StreamingAssets\Lang\characterName_noTranslate.dat
Size 1KB
SHA256 9b79274fbd6ae35f286f22c6764ab990b770f485c651114f951e29ed77fa3709
MD5 f92c28da7c4eddb6213ca6a7fdedc30d
SHA1 f5f4cd79239e413f190edf6ec6ca933b2128a836
SHA512 f1ad2eed66e2ba4fbe69de3d7dd8e839e40927cc9ebd0883eabf36a917fad4e015647a2de9eff7b56ea646248222dc583d6e1ce79c7d178999c700ffc5351961
TLSH
T15A31C91BA5F6C9D036508F5656B53870F06A877293586B51071723E04B47E07B08E215
MD5 SHA1 SHA512 TLSH

Submit Download

costume_noTranslate.dat

Path C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\HolyKnightRicca_Data\StreamingAssets\Lang\costume_noTranslate.dat
Size 832B
SHA256 f71fc76072a987f933fe8676c510cdef5f5b7bffc897e65f4f9129b470bcdf73
MD5 5ba019621415acd5711228bd2d8405a9
SHA1 9036abdeba3969360d8ea418b416e03e7afece00
SHA512 4e0b100d39154881581578e28d560407d99122f6f4dfcea714e21d5e53ce8fc0ce42714ad56251c0158fc446da97e21db8973724dd4ad5f05b635174eee5fbcc
TLSH
T1EB019631D5102CC8CB073CE01F83F53539B01B2A6A3005304865A8E494654D53A9E3F6
MD5 SHA1 SHA512 TLSH

Submit Download

advName.dat

Path C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\HolyKnightRicca_Data\StreamingAssets\Lang\en\advName.dat
Size 4KB
SHA256 e16f957eacbd975f1217a3b13738baf6492455b9d378ab52a1824a3b1146e1d2
MD5 a85c747b4e18c377eb04a7e939772cd1
SHA1 2a3c78cfcbd227a56cfdbf01d15df7502acffe62
SHA512 38f01f1b1b4a69e30d40aa673ddb5536d522ff1f44b3cdb53e9bb0011c99fff0902e1c66fb59c902c65abcb76c0e238c6a8180512ab2774418559094e58c7028
SSDEEP 96:S82tCldO+AH9az1/UpyOsRHAJTV9dPoOj794IetVqRy:+tCldaIpUVsRgJVokp4Hz
TLSH
T172918EABDDA60AEFAD2371C00257A225444A71A0EFA57B58D7CC8750C6889F6FB825C0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

atdCutName.dat

Path C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\HolyKnightRicca_Data\StreamingAssets\Lang\en\atdCutName.dat
Size 36KB
SHA256 e191e8a02eeb2d7c738f6be6bdea2e721bf98c956df2daeb6956bc544fc55bbf
MD5 1982c2eaca4c540e7c9719a327a74b14
SHA1 33fa36716eac0f8d10dd76969c4ff5be9980e4f6
SHA512 2cf14829d37d0d5d3a4a54787bd8b8aadd4a869e261397ac500683de95284e553ce049708c94ead07d023fcf6b309955d552f5d2578a8fee0033e1ba7acfab2c
SSDEEP 768:sis7ZhS+iuvs7oJHMpCBV57lb8uAGKi4MlmvtmrcfKrOIvPmP:wVMO+oBM0BV5pb8uAaI3ftIv+P
TLSH
T150F2F1F1D3DC8DF0AA3A0565201933C458547472C5B128BB8FFCA6F31A276296808AEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

characterDictionary.dat

Path C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\HolyKnightRicca_Data\StreamingAssets\Lang\en\characterDictionary.dat
Size 13KB
SHA256 23ef60e1b2ff407ee7812e156719f4c34a5c9f7837ecfd9bd1f37825d52a8089
MD5 7a8a74d064bb684a3db33179587988e1
SHA1 0977eadd16151bed5dc1e1d9926cdea5aa88799b
SHA512 b6efb47e67d3d7ac23446f4ff2d8729e75942aee6b4ab4ed5c4b4a0f97d7c0b51e7e3b71c5baa8573fc99cdc3f8d32dba941b89645bdbe8a6142277f7a23c471
SSDEEP 384:FvGZw1yh4Cqz4RvzYY156vEgJCpQLCR2F/Qp0Wn:FvHCq8ZYAQ/ApCCR2mpL
TLSH
T12A52D0043DF76E6F8B18520076D29EA1E008B67175533EC3B0F6E46249CB7F98B4905A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

characterName.dat

Path C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\HolyKnightRicca_Data\StreamingAssets\Lang\en\characterName.dat
Size 7KB
SHA256 cad25981997fb37c69db5a6cdf4b3d33c1cc4c6582c29068d311b399db1c317c
MD5 759b9fdb0f1e5c00e69086c89b4fb5eb
SHA1 00da8a8e5a41129a4e542f7bc36d74851db47e5a
SHA512 17c14b0fb2a61e9949bc7bd233d1d5fe54949ff6cf8ee7d6308ddcbc598546b008ed00fc1af26427a6e49f540c5f13897f32770b2a1d173a9d191944408841d2
SSDEEP 192:JYhse7D63bVjHVlrLMH2naBkBrn4bv+iN4krLhIK0VxE5B+nWy8g:JFe7InrLA2naBkNbiNtrLhI5xEep
TLSH
T16AF1AE7F86534B99D233716C22A3BE111D8AC3B06D2C1F112A3F508634890D867B4EE8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

costume.dat

Path C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\HolyKnightRicca_Data\StreamingAssets\Lang\en\costume.dat
Size 15KB
SHA256 328083ad311c6111159268825b534765da82c2887383486d914f62f2297f8c42
MD5 8ff011439698495deff0ab2a2e1cfd25
SHA1 4cdb0fbfb5c430dca10653e72d53537b87633b60
SHA512 e1f785056650170c66fb1f5b4ea07a2e6a017bd8d9f8beba762c2bb8c88153dfdd23f2b23c2f2fd1bedf5b95781bd26b2b97f7e1f9bf503b8ee8851a1da99123
SSDEEP 384:3GlWxKWc/knYbcd/oDGOURm2RzMt1t3jYnnVratmchE6sYQFUM+lxRugK:3GgxUknYbcjVrMft3mnVrcbRJQFUMuuz
TLSH
T1AA72D0484564DCF0703FF2BD1807D7DAB3A0E6696B9A6764110B294E02EC5A3FBE0977
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

information.dat

Path C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\HolyKnightRicca_Data\StreamingAssets\Lang\en\information.dat
Size 9KB
SHA256 858fbac7cb97f415b79cf1cae1e3cbd1183b7b3b8bad19626d49c76b20ef31d0
MD5 67af245d5572ef95b23d213c58d192bc
SHA1 a1cb85a1f1bb6b04a88423e1113ff2aaa604ce87
SHA512 2f5d30222a73a1674210f2116f4e49e4f2b66c9559e8835745b721cce8e3d9fc808d72ca69302bcdd5ecc0656c40de3b76e11da7b2f9511396533bed0961fd67
SSDEEP 192:iEKvK5wt4RL3kEjv1X6PZNmb1ivleb1dCx3f582lcUIgLm:jKvK5NBpFsZNo23u2qUN6
TLSH
T1A0129EC9EFA47E7166E8E95DC9D2B0004F1B914D8E6FD0F72D0C64C0AB664C0AD919EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

item.dat

Path C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\HolyKnightRicca_Data\StreamingAssets\Lang\en\item.dat
Size 7KB
SHA256 3f0c73cbe79357fb9bf784a4ad7af6db2220ec13b38cec82c7a0ba16a00e6d0a
MD5 8ecfc87048e0ecadbe5891332626f4f9
SHA1 4782d8916bb7f554dd2be1df70da0cf70f74d8be
SHA512 32d512cc100ba57c41f32eb6d944ab2ffbb931c25c6bf39161e9a889c75d1640834e2ce18fcc6d5ecf250e9a57d08800302063c617b339fd9d71ac5ebdb1b50c
SSDEEP 192:PgBBEBsblSKGu86pEoue66ZjTzYfrYol6SmbitaF8d2DqvtiVU:kECFXIKzi9gSMieDqvtiVU
TLSH
T1D3F19E7A12F229009E16F3DB45154F328F99D4ECA1F1B21CF2CA517AE55248CED59CF8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

menu.dat

Path C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\HolyKnightRicca_Data\StreamingAssets\Lang\en\menu.dat
Size 31KB
SHA256 fa52bd9ccd84801f997b9ec80584a72117708df79798a1233321838074add192
MD5 e46da3c90f9976cfc3eff2134de52447
SHA1 7e284d6192d886bca55f20fa024efc0259442a7d
SHA512 897cc4dbe6bd283448bec3057b2b8508b6b340e90320307c01b4cb9c6bcbe07f707a61144f9ba41483c4313bff5041f58684416b58e78bd4a371666f13f5258e
SSDEEP 768:7JLhp16Q3b3Lb3ZDzyBa7lFXvas7YFd7LGe5XG0FqOKdNO:7JLL16Q3b3LbdXXasU/p+O
TLSH
T189E2F1DAF5D13242142D6FA611A2B2C0FF70D71CF7AD5B96326E99EDC329A700970368
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

skill.dat

Path C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\HolyKnightRicca_Data\StreamingAssets\Lang\en\skill.dat
Size 8KB
SHA256 40e24a5fc2f24b470b0d4a9dd2124139bda75569d20bbbb68ab1aae2a1ba40cf
MD5 ef728537880034848abe2fef86a5dd58
SHA1 5f941c6ced4f605a8f5698d989d1fb5e25c2b2d6
SHA512 88017e12a7c9adfbb6032ceb99ec5e5c295338d8941d3ff09a2173e64294e82933186050a46ce51df12e85d8dce7f60bdc8a385735c70421f4b2140cb18a6702
SSDEEP 192:1kLMnUZVUtT4gmkzWgTKpfwt8HBxqnqfknvhGEBCVB5:1kdVU1UVBAqfmhGEBc/
TLSH
T13B029D34B6F17D8D08C2D96BCFC81764BB249A3AD9E474B6B180C7B9089015F446BA66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

stage.dat

Path C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\HolyKnightRicca_Data\StreamingAssets\Lang\en\stage.dat
Size 9KB
SHA256 69f935f91a57149cee8e26736dc8bdf9b8c2789a230e3e4236558eed7dc13866
MD5 8cc8b887d4d893d74b566a7d8aa8fdfc
SHA1 96737c4724b1a90348cac1b07994a925c194e24b
SHA512 61c722004c4f9332592feb447429d1444f85ded52934da4d45e44f05c581c237b6baeaa894d01709726ed23988d772a4aa0883ef89bd906a3abab031beb2cc46
SSDEEP 192:Kb6AzR30xE4jyxjHH5ueLsb4fUrDKQcm80sr5DQ9CpLlr:VljmZ6yUPKQcm8wcpLF
TLSH
T1E822BF9D369333E11AEA923F505D60F36CFDE30309109C248269306A3F8CBB787568C6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

stageScene.dat

Path C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\HolyKnightRicca_Data\StreamingAssets\Lang\en\stageScene.dat
Size 21KB
SHA256 6aea30682fdf5beead1945ffcc4028a8637aa77c00c5807d44d045ed392b73fc
MD5 96d0f73c04974afe3d207631598da0d9
SHA1 fb90f40d8a51f046d2879bbf8cd42583d612cf0e
SHA512 58124059ed6620c7bb889a316460036e73aba2d3b1881bf205bf62b4c76318a52e475e4eb15b018dd0fb4d3be49f4804e505bcf76dec3502b29a6824dcaf50d6
SSDEEP 384:hymtF68zR4Af9AyUypZsJpz/buaiT5tiO8abDhggPmy:TM0qAf9AyVU7z/bMtpRbDhg+5
TLSH
T151A2D1A63F39E77383EBBDC35725E23A47DE83695ACF03C389D13F141548495AA144A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

system.dat

Path C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\HolyKnightRicca_Data\StreamingAssets\Lang\en\system.dat
Size 20KB
SHA256 4e78a4269d4adf108c3cfcb2bf6c17c101149d4b9bf0290226edb349e04d539c
MD5 3c61fb503780534a8307c5735bee4b3f
SHA1 ca48f63ef6d2a0d7c34fab575d1ff4a2ca663ea8
SHA512 045a0aa2429c7965253caeb2c92742c28204ec43e9dc78755aa90d8457291a55b4eaccf38393ce97385eafb791adf4c34e642f0c6d30423f89e07f95cea1cb8b
SSDEEP 384:yvTJxXbdpecapX9OMJ0KbQyCnY80JNFilKUkMDuNTUyfjxXZ9nAQ031n:wTJ5OcapXHJXCY80NFilKUkMDuN4yfji
TLSH
T150A2E1E4402224CA691A915CF0AC474E85A9B27B03BED2EF569264A2CFC0BFDA05157F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

uiLabel.dat

Path C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\HolyKnightRicca_Data\StreamingAssets\Lang\en\uiLabel.dat
Size 50KB
SHA256 0b716553e8b0ddbafa54827a9c69760075a5f9f1b3cb21bcb0c6ccf111092a90
MD5 92d869975061f543f7acdb2a5e60b5e6
SHA1 87f5c665a04f48dc8281e14cc0d6b1a485fdf225
SHA512 dde83d044857e1209f2e798b0fc7c184bc40b94d09d42edd81fb9817100b66f689f321d0ab5d3b4db88f9f865e0ae8b566a1ae9186132b4e7d412280ee22e480
SSDEEP 1536:g9AglsMQ8XYHht0/MA6yIli3ry9jQ4n024S:g9Ay0n26ArH4n0Y
TLSH
T1A2330206859BB5F7323B385A60D0BE45213752B77C89E0119FEA09CEB1B8590A73CDD6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

information_noTranslate.dat

Path C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\HolyKnightRicca_Data\StreamingAssets\Lang\information_noTranslate.dat
Size 96B
SHA256 5e1d5805a668d58b41711c96730ed6cfa13962f59b2a07e69de39c20fcb0ddd4
MD5 42d1881ff164416eff2214ad4ef96d6a
SHA1 07ce3c106d515004fac414edcd00e4ce1c852d56
SHA512 23037b79199c40f31de7991ddb33bcdad8b016057549eaa34330fc6d0bdc164b26fbc26d27f4aedb93fd8f1e3bd60be19efdb823423a92792bcd426dedce9b27
TLSH
T1FDB012D44024DC6B8081A9C286D54908F1553491F8130050C241ECF47F907F3020BC54
MD5 SHA1 SHA512 TLSH

Submit Download

system_noTranslate.dat

Path C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\HolyKnightRicca_Data\StreamingAssets\Lang\system_noTranslate.dat
Size 2KB
SHA256 012a350c7bc73f9421d5aa7244129ad159baa6d44e194acd0e0216c240cc2279
MD5 9cb19a3375aff52b718790bdf326aa94
SHA1 4433331d932c9cee30c22d613ef253d7eddf8113
SHA512 87c068718d1895afea46f31574877bbf4ab63c6a47b55ac47ac6b940fd327dcdf5d8bfae0253cdc69eccfc1d3b9a84ec2b26f6b60d0781662b474b53c21fe50b
TLSH
T104517C280EC8235BA23A41A57CB9037C3A9842AD5ABAC8336BB470CA4710DD0577797A
MD5 SHA1 SHA512 TLSH

Submit Download

uiLabel_noTranslate.dat

Path C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\HolyKnightRicca_Data\StreamingAssets\Lang\uiLabel_noTranslate.dat
Size 3KB
SHA256 1e4df0f13330580e4e847b1f2c4c8f7a9e8e91816cc5554dd12a728f7a5feed2
MD5 c376ca0d2d678a261db2ed4c248a89e8
SHA1 c1b254fc65b2ec9aa7e09a86118189d7d13ddc0d
SHA512 e190ac6ac49b3b0e45ed04f16c9ebb2f1ee9718652718bb743da0ed4b51941549e800fd6f50b4cc0179c52d9134319bc55048b7163d1ad8e3e8b35dc63f35310
TLSH
T1B3718D2423D5CCD363F98F7293058614FE5E1143BACC02C9A980B25EC0D95F05E3ADD8
MD5 SHA1 SHA512 TLSH

Submit Download

still_anvFortGoblin_04.dat

Path C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\HolyKnightRicca_Data\StreamingAssets\image\still\still_anvFortGoblin_04.dat
Size 587KB
SHA256 50892a85ea9a299a546b3b7aba08c6bc7f45f88e8af0ad055de682fb9e252382
MD5 9126bcc84dd1ba37bc61772d207b7c63
SHA1 2148f361873bd1e290c2af9e0a3ea9fdbf5d920e
SHA512 363481cb4e16df5acd0e0d527dc3a8fd01de86db8175a6b311c4da4c23e4d0d7540e96d683ce49fd0d35fcbccd97baf71ab9e93c7d00815077cd0262a96f6ab3
SSDEEP 12288:3ZvknZI8SQnjp0AjgBBmepQ6MqOb5e0PoCe4aVT4uatlnL8TYy:3hknbjFneAoCe4aVTTatlL8ky
TLSH
T191D4233B90F4186A8EC46F6863F99BABD4C47018E373FA865D59F8C86E510D181D7633
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

still_anvFortGoblin_04_r15fallback.dat

Path C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\HolyKnightRicca_Data\StreamingAssets\image\still\still_anvFortGoblin_04_r15fallback.dat
Size 597KB
SHA256 47dff4ea41715ef19d77cb42fc3823136ee7659d8008c8f475e9366a95aa7668
MD5 ddf0b47e377cb8eb496ccbbf588b8759
SHA1 fd6353cc3d634d40f36a4f16a45ccee9cc5b65d1
SHA512 fd76663494a5b1b4642bb038b5dc76fba89dca456938f2a9b9a6aeb589bd8a6479ad30795bd5dc12a56b7ad84047c4b44df87acfbd3954f5bc779e1873b2b51a
SSDEEP 12288:az/bZ30wR7BUsBR12OaAqobrwEeOOAclgZHc3kynZb8Edvzkpf4FHzXLMkStOF3Q:0b10wR7msT12L7uwPOOxOZHc3xnZ3ldc
TLSH
T106D4232AC9BA6F14538F79F22C95C8758618357B130E443EC6C5EAD8425A46F33773B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app.info

Path C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\HolyKnightRicca_Data\app.info
Size 26B
SHA256 dfa6fb25a6a33c6cc3c6472c197e029d6c1e8cceaef443604f5b367bd63646d3
MD5 afc5bb81b1e3212776e3bff65d23b30a
SHA1 8a741a3695a146e6e279ab43fda5f7dcfe203201
SHA512 81258f4ef1e3341d39ff61477e661d9b4af510e47a559d4520f46e935bef0091a01868b8bd041a93d8b365809b6fc00f0ac4a4d1869a565943de982551433617
MD5 SHA1 SHA512

Submit Download

boot.config

Path C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\HolyKnightRicca_Data\boot.config
Size 66B
SHA256 f8aafbb28e37ba98f50f98a0e509fa8d43eb55e8a274a427791abbf2fef3dd01
MD5 e9120dd6342e09183285a967200cd300
SHA1 ccdfa1fc78a6b765246493a2634e5c42581dbfde
SHA512 9370e3139d409d0db04cafdde4eb60039b7184dc84b62fc63429bfad9f282d0f945d6d4b138b70c4ae0ca5acf58f7d8d02779e13bdff30862fb3d513baac85d3
TLSH
T194A00204FBFC3B826A4D843599A86ED3639A1506DC1A21FD6AE43075135E80E56878AB
MD5 SHA1 SHA512 TLSH

Submit Download

global-metadata.dat

Path C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\HolyKnightRicca_Data\il2cpp_data\Metadata\global-metadata.dat
Size 9.7MB
SHA256 bff3a0eab42457ae0358ed563ef814c887ff6dfc88a10f2c0f79102999e5e8eb
MD5 f254a73e16427cfe0e249ffa31108ffb
SHA1 8efc2041c1048bbdaaed786851c4716e47004ae2
SHA512 d8044253d8542e4aaedf43f3bb533f66100f79af9796a6aefae2893e9f01b7445c72c0ad429d0eb4637528608359e9c811c05054852989a7621efe22dd76f4fe
SSDEEP 49152:MggdH2YThJDTnDLmCTGk/KAqa7Z9NeHeBjrs6SBIUNR6MvQS3laCd8QcXXW2NtRW:MzLjr5C/eQARvIO4JaK
TLSH
T1FFA6F993B661CD72C72552378C7BD1C067A0AE995E01438B3B05FB7D74B6205AE832FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mscorlib.dll-resources.dat

Path C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\HolyKnightRicca_Data\il2cpp_data\Resources\mscorlib.dll-resources.dat
Size 329KB
SHA256 c5baa176a5b72cd545266340e42102d393a5e43d38c95796bc828918bb95277f
MD5 21d06dbc8af6432b2b49536ed30609af
SHA1 11a1c0e2ab2f8c06fe4507535ed47e0dd279a60d
SHA512 2971f54eaa14c3ce6e2352e5a1aea5b044f0894bf4eac92de8cd92515b6473b5ca56ebfcad4369a9d4935cbefea2540a83f332fd4d832c37768310e8776ceb5e
SSDEEP 3072:c5j+evAPQ48RhHkXKSmLZsumnWpevI1kMqXkD3by+BEL:crvS8rHXSmJmnjvXkSr
TLSH
T1F7746CD8B5728E76FE57A9BCE85E928D43D9C1E2C182523B3D75C2E04D52386181EE3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnityCrashHandler64.exe

Path C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\UnityCrashHandler64.exe
Size 1.1MB
SHA256 2149096538582113ee2e60cdfae2acd33def8b04d5db303cc5bf4eeaf54831df
MD5 04218c59636bf9610e6741013ada59a2
SHA1 488a02a6cb531ceee4e0186d630edb99a45ad1ee
SHA512 9f93e4ef59d3be5a491a81d2d8e79205c58f4526777470a1ccc6b7118d7f8d778f9bdad1c8d2be1f9447c912b345ef43d4d84ff0d613c9c7e2e2cf12b20bc257
SSDEEP 12288:u1HNlcYyeraLLuLiT2SSYHdSbM+Fh6wk2AdgoRZVQfz2fzA1W:clcYK2WTBSYHdWFUbdgdz+zA4
TLSH
T184356B6AAA6800F9D5678039C9564A0FF3F27C1503619BDF1390B7AB2F376D41E3A721
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnityPlayer.dll

Path C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\UnityPlayer.dll
Size 28.0MB
SHA256 1f6ca16e687b774abac8baa69efff4e04f5848ce71d553a1e1eae067f0a783d1
MD5 496a973cc961fbaffcf715de0af0dfa1
SHA1 e609a6fb5312763fdd79528115174f1036cbf715
SHA512 1e213346c6f297bea187a2b27297f078f60e8cfb830ed00aa76aae75f50c0da5661b4914d0baa4e94f59f788aa85c58acc4631bb0069881d1117a5fecaae0146
SSDEEP 393216:JZHyxCKocAY/hvLLw3BhiKxW8kVKkrl5oGUowzkxoRf/kHFru33Se4YzoLoEAfFD:JG6Wb5Gmr++W
TLSH
T1DC579E9662B800D4C47BD078D65BA91BF7B1304A03718AEB13E14AA96F77BF0267F750
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

baselib.dll

Path C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\baselib.dll
Size 395KB
SHA256 7efbb390a85fc6846350ef0d3df807a11c9dcd62b6045c9ee2fa4b4e17496447
MD5 5d93e6b6e846544d9bba40af45e79632
SHA1 7947062f6c2045a983d7fd98a491dbc0272f2dda
SHA512 1e572d6a43ed35a4a02028e469bcba081c5a90cd9b08d17e82e845e30f335474bbc09f745d75f63172676b90ba7cdb44c35ea06ff106495ea987b3962dbb59d7
SSDEEP 6144:WmLYuq1+dNhJ6d0BNxcHqT4PxAVsyyhcm7vv78sdTW4FYVXpi6XVvfBH4A:tYuamvq+GyYoGd816A
TLSH
T14B846B9AF76408B5E56B9074C9B3890BE3B27C49076087CF23A4439A6F33F91563E761
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

launch.txt

Path C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Game\launch.txt
Size 206B
SHA256 17afb38df357ecdcb0e1155b4cce48ac537bd59d825e94923d84b0934dea5f89
MD5 c759b2583a44058d8279ee9ba7e0b215
SHA1 aa43526332bdf7a58c6abb221df696f2cef3cb22
SHA512 5ddc9c75ba0d9a8024713941f7cc9416fdb33033a96a64d65f1312c974e6819ddaf83fe9bdd89e9f365234c0d515eb1e3641ca9ec61b8973e40a8e86dadb1ee8
TLSH
T1B7D02238E416087AB03008C7A040050376317F098274BC0BB3B300248697D003282F48
MD5 SHA1 SHA512 TLSH

Submit Download

Launcher.exe

Path C:\Users\Admin\Downloads\HolyKnightRicca_v141en\Launcher.exe
Size 2.1MB
SHA256 2ca5aadaad8e39cc128ce9ab32d9211c5719cead4af1ef3e8fcda9afe6ae716e
MD5 ef498f997af9af0a50af4d68542fd93a
SHA1 aacc3b9490cdf0efcd7e96f1e75203fa6f7dcad7
SHA512 8da0c2b934fce83a259f32ae66c14c388da1782cc5ba69e97cda5b391d00d4296db3aa32f5264276a3ecb0d8b5b07c2b5df5e4e57809a3002e63f1b419fcc0b3
SSDEEP 24576:rNZZ5sC/YmqQq8Jyd6Oi4sTwzOCggZfDP1/diVMXNL2PVh6B+BzjmcmW+/q4sTw1:t5MdDi43iCZZfDPPiVpBzjFYq43iC
TLSH
T162A5CF6257FC4A2BD1CF7E7C6B20851A96F2EC06527AD7075A05B8BD8C6B7C08D80763
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2652-4355-0x0000000006180000-0x0000000006724000-memory.dmp

Download

memory/2652-4360-0x000000000A6D0000-0x000000000A736000-memory.dmp

Download

memory/2652-4359-0x0000000009470000-0x000000000947E000-memory.dmp

Download

memory/2652-4365-0x000000000B660000-0x000000000B682000-memory.dmp

Download

memory/2652-4358-0x000000000A620000-0x000000000A658000-memory.dmp

Download

memory/2652-4357-0x0000000007390000-0x0000000007398000-memory.dmp

Download

memory/2652-4356-0x0000000005CB0000-0x0000000005D42000-memory.dmp

Download

memory/2652-4366-0x000000000B690000-0x000000000B9E4000-memory.dmp

Download

memory/2652-4354-0x00000000058C0000-0x00000000058D6000-memory.dmp

Download

memory/2652-4353-0x00000000033A0000-0x00000000033A8000-memory.dmp

Download

memory/2652-4352-0x0000000003380000-0x000000000338C000-memory.dmp

Download

memory/2652-4351-0x0000000005810000-0x00000000058C0000-memory.dmp

Download

memory/2652-4350-0x0000000000CC0000-0x0000000000EE4000-memory.dmp

Download

memory/4812-4393-0x00000000067C0000-0x0000000006B14000-memory.dmp

Download

memory/4812-4394-0x0000000006B30000-0x0000000006B38000-memory.dmp

Download

memory/5472-4450-0x000002089B080000-0x000002089DE83000-memory.dmp

Download

memory/5472-4453-0x000002089B080000-0x000002089DE83000-memory.dmp

Download

memory/5472-4438-0x000002089B080000-0x000002089DE83000-memory.dmp

Download

memory/5472-4442-0x000002089B080000-0x000002089DE83000-memory.dmp

Download

memory/5472-4447-0x000002089B080000-0x000002089DE83000-memory.dmp

Download

memory/5472-4448-0x000002089B080000-0x000002089DE83000-memory.dmp

Download

memory/5472-4385-0x000002089B080000-0x000002089DE83000-memory.dmp

Download

memory/5472-4451-0x000002089B080000-0x000002089DE83000-memory.dmp

Download

memory/5472-4449-0x000002089B080000-0x000002089DE83000-memory.dmp

Download

memory/5472-4452-0x000002089B080000-0x000002089DE83000-memory.dmp

Download

memory/5472-4395-0x000002089B080000-0x000002089DE83000-memory.dmp

Download

memory/5472-4454-0x000002089B080000-0x000002089DE83000-memory.dmp

Download

memory/5472-4455-0x000002089B080000-0x000002089DE83000-memory.dmp

Download

memory/5472-4456-0x000002089B080000-0x000002089DE83000-memory.dmp

Download

memory/5472-4457-0x000002089B080000-0x000002089DE83000-memory.dmp

Download