10c1084169eca8143aafe9e0bd5c4c3e13d06fa2e1b8fea9b6de6b393f219906

Analysis

max time kernel
150s
max time network
158s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/11/2026, 12:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-11-11_53f3c536c0d654c2ad2effbbbe0d9f79_glassworm_icedid.exe
Size 16.7MB
Sample261113-pewfmsbt4s
SHA256 10c1084169eca8143aafe9e0bd5c4c3e13d06fa2e1b8fea9b6de6b393f219906
MD5 53f3c536c0d654c2ad2effbbbe0d9f79
SHA1 235f20f7639e7955962edc0f5cfaafbce6bffd63
SHA512 0701a04eb02a409f81f813547459719727b3a28220812cf954dd166eb3af0a8bb6dfd17c2a9b2a75260e55b9f4de5b8fefb66678923e8855efdee205a634074f
SSDEEP 393216:hLCqAXVRizJ9jzEZS0z4KzYIwF9ZLfU5R3uYuCTI+1Db:rAXVMzYEUYV91oReYuCs+xb
TLSH
T1C607221123FC421AFAF37B799A7452509BB6BC977A38D79E0188556D0D72BC0CAE4323
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery trojan

Malware Config

Signatures

Executes dropped EXE 3 IoCs

pid	Process
2540	GamesTikBR.App.exe
3232	GamesTikBR.exe
2088	GamesTikBR.App.exe

Loads dropped DLL 2 IoCs

pid	Process
2540	GamesTikBR.App.exe
2088	GamesTikBR.App.exe

Checks whether UAC is enabled 1 TTPs 2 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	GamesTikBR.App.exe
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	GamesTikBR.App.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Windows directory 9 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4304_835748102\_platform_specific\win_x64\widevinecdm.dll.sig	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4304_1541828082\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4304_1541828082\protocols.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4304_835748102\LICENSE	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4304_835748102\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4304_835748102\_metadata\verified_contents.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4304_835748102\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4304_1541828082\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4304_835748102\_platform_specific\win_x64\widevinecdm.dll	msedgewebview2.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Reads the TCP/IP host and domain name from the registry 1 TTPs 4 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	GamesTikBR.App.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	GamesTikBR.App.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	GamesTikBR.App.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	GamesTikBR.App.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe

Modifies registry class 20 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-2304238888-3968896904-642854331-1000_Classes\gamestikbr-launcher\URL Protocol	2026-11-11_53f3c536c0d654c2ad2effbbbe0d9f79_glassworm_icedid.exe
Key created	\REGISTRY\USER\S-1-5-21-2304238888-3968896904-642854331-1000_Classes\gamestikbr-launcher\shell\open	2026-11-11_53f3c536c0d654c2ad2effbbbe0d9f79_glassworm_icedid.exe
Key created	\REGISTRY\USER\S-1-5-21-2304238888-3968896904-642854331-1000_Classes\gamestikbr	2026-11-11_53f3c536c0d654c2ad2effbbbe0d9f79_glassworm_icedid.exe
Key created	\REGISTRY\USER\S-1-5-21-2304238888-3968896904-642854331-1000_Classes\gamestikbr\shell	2026-11-11_53f3c536c0d654c2ad2effbbbe0d9f79_glassworm_icedid.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2304238888-3968896904-642854331-1000_Classes\gamestikbr-launcher\URL Protocol	GamesTikBR.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2304238888-3968896904-642854331-1000_Classes\gamestikbr\ = "URL:Games Tik BR Launcher"	GamesTikBR.exe
Key created	\REGISTRY\USER\S-1-5-21-2304238888-3968896904-642854331-1000_Classes\gamestikbr-launcher\shell\open\command	2026-11-11_53f3c536c0d654c2ad2effbbbe0d9f79_glassworm_icedid.exe
Key created	\REGISTRY\USER\S-1-5-21-2304238888-3968896904-642854331-1000_Classes\gamestikbr\shell\open	2026-11-11_53f3c536c0d654c2ad2effbbbe0d9f79_glassworm_icedid.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2304238888-3968896904-642854331-1000_Classes\gamestikbr\URL Protocol	GamesTikBR.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2304238888-3968896904-642854331-1000_Classes\gamestikbr-launcher\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\GamesTikBR\\Launcher\\1.57\\GamesTikBR.exe\" \"%1\""	2026-11-11_53f3c536c0d654c2ad2effbbbe0d9f79_glassworm_icedid.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2304238888-3968896904-642854331-1000_Classes\gamestikbr\ = "URL:Games Tik BR Launcher"	2026-11-11_53f3c536c0d654c2ad2effbbbe0d9f79_glassworm_icedid.exe
Key created	\REGISTRY\USER\S-1-5-21-2304238888-3968896904-642854331-1000_Classes\gamestikbr\shell\open\command	2026-11-11_53f3c536c0d654c2ad2effbbbe0d9f79_glassworm_icedid.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2304238888-3968896904-642854331-1000_Classes\gamestikbr-launcher\ = "URL:Games Tik BR Launcher"	GamesTikBR.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2304238888-3968896904-642854331-1000_Classes\gamestikbr-launcher\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\GamesTikBR\\Launcher\\1.57-sector7g-20261110\\GamesTikBR.exe\" \"%1\""	GamesTikBR.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2304238888-3968896904-642854331-1000_Classes\gamestikbr\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\GamesTikBR\\Launcher\\1.57-sector7g-20261110\\GamesTikBR.exe\" \"%1\""	GamesTikBR.exe
Key created	\REGISTRY\USER\S-1-5-21-2304238888-3968896904-642854331-1000_Classes\gamestikbr-launcher	2026-11-11_53f3c536c0d654c2ad2effbbbe0d9f79_glassworm_icedid.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2304238888-3968896904-642854331-1000_Classes\gamestikbr-launcher\ = "URL:Games Tik BR Launcher"	2026-11-11_53f3c536c0d654c2ad2effbbbe0d9f79_glassworm_icedid.exe
Key created	\REGISTRY\USER\S-1-5-21-2304238888-3968896904-642854331-1000_Classes\gamestikbr-launcher\shell	2026-11-11_53f3c536c0d654c2ad2effbbbe0d9f79_glassworm_icedid.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2304238888-3968896904-642854331-1000_Classes\gamestikbr\URL Protocol	2026-11-11_53f3c536c0d654c2ad2effbbbe0d9f79_glassworm_icedid.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2304238888-3968896904-642854331-1000_Classes\gamestikbr\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\GamesTikBR\\Launcher\\1.57\\GamesTikBR.exe\" \"%1\""	2026-11-11_53f3c536c0d654c2ad2effbbbe0d9f79_glassworm_icedid.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3232	GamesTikBR.exe
3232	GamesTikBR.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs

pid	Process
2496	msedgewebview2.exe
4304	msedgewebview2.exe

Suspicious use of AdjustPrivilegeToken 3 IoCs

description	pid	Process
Token: SeDebugPrivilege	2540	GamesTikBR.App.exe
Token: SeDebugPrivilege	3232	GamesTikBR.exe
Token: SeDebugPrivilege	2088	GamesTikBR.App.exe

Suspicious use of WriteProcessMemory 42 IoCs

description	pid	Process	procid_target
PID 628 wrote to memory of 2540	628	2026-11-11_53f3c536c0d654c2ad2effbbbe0d9f79_glassworm_icedid.exe	90
PID 2540 wrote to memory of 2496	2540	GamesTikBR.App.exe	91
PID 2496 wrote to memory of 52	2496	msedgewebview2.exe	92
PID 2496 wrote to memory of 4912	2496	msedgewebview2.exe	93
PID 2496 wrote to memory of 4912	2496	msedgewebview2.exe	93
PID 2496 wrote to memory of 4912	2496	msedgewebview2.exe	93
PID 2496 wrote to memory of 4912	2496	msedgewebview2.exe	93
PID 2496 wrote to memory of 448	2496	msedgewebview2.exe	94
PID 2496 wrote to memory of 564	2496	msedgewebview2.exe	95
PID 2496 wrote to memory of 564	2496	msedgewebview2.exe	95
PID 2496 wrote to memory of 564	2496	msedgewebview2.exe	95
PID 2496 wrote to memory of 2744	2496	msedgewebview2.exe	96
PID 2496 wrote to memory of 2744	2496	msedgewebview2.exe	96
PID 2496 wrote to memory of 2744	2496	msedgewebview2.exe	96
PID 2496 wrote to memory of 2744	2496	msedgewebview2.exe	96
PID 2496 wrote to memory of 2744	2496	msedgewebview2.exe	96
PID 2540 wrote to memory of 3232	2540	GamesTikBR.App.exe	97
PID 3232 wrote to memory of 2088	3232	GamesTikBR.exe	98
PID 2088 wrote to memory of 4304	2088	GamesTikBR.App.exe	100
PID 4304 wrote to memory of 4752	4304	msedgewebview2.exe	101
PID 4304 wrote to memory of 2612	4304	msedgewebview2.exe	102
PID 4304 wrote to memory of 2612	4304	msedgewebview2.exe	102
PID 4304 wrote to memory of 2612	4304	msedgewebview2.exe	102
PID 4304 wrote to memory of 2612	4304	msedgewebview2.exe	102
PID 4304 wrote to memory of 3864	4304	msedgewebview2.exe	104
PID 4304 wrote to memory of 5696	4304	msedgewebview2.exe	105
PID 4304 wrote to memory of 5696	4304	msedgewebview2.exe	105
PID 4304 wrote to memory of 5696	4304	msedgewebview2.exe	105
PID 4304 wrote to memory of 6128	4304	msedgewebview2.exe	106
PID 4304 wrote to memory of 6128	4304	msedgewebview2.exe	106
PID 4304 wrote to memory of 6128	4304	msedgewebview2.exe	106
PID 4304 wrote to memory of 6128	4304	msedgewebview2.exe	106
PID 4304 wrote to memory of 6128	4304	msedgewebview2.exe	106
PID 4304 wrote to memory of 4260	4304	msedgewebview2.exe	107
PID 4304 wrote to memory of 4260	4304	msedgewebview2.exe	107
PID 4304 wrote to memory of 4260	4304	msedgewebview2.exe	107
PID 4304 wrote to memory of 4216	4304	msedgewebview2.exe	110
PID 4304 wrote to memory of 4216	4304	msedgewebview2.exe	110
PID 4304 wrote to memory of 4216	4304	msedgewebview2.exe	110
PID 4304 wrote to memory of 4644	4304	msedgewebview2.exe	111
PID 4304 wrote to memory of 4644	4304	msedgewebview2.exe	111
PID 4304 wrote to memory of 4644	4304	msedgewebview2.exe	111

C:\Users\Admin\AppData\Local\Temp\2026-11-11_53f3c536c0d654c2ad2effbbbe0d9f79_glassworm_icedid.exe
"C:\Users\Admin\AppData\Local\Temp\2026-11-11_53f3c536c0d654c2ad2effbbbe0d9f79_glassworm_icedid.exe"
1⤵
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:628
- C:\Users\Admin\AppData\Local\GamesTikBR\Launcher\1.57\GamesTikBR.App.exe
  "C:\Users\Admin\AppData\Local\GamesTikBR\Launcher\1.57\GamesTikBR.App.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Checks whether UAC is enabled
  - Reads the TCP/IP host and domain name from the registry
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of WriteProcessMemory
  PID:2540
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=GamesTikBR.App.exe --webview-exe-version=1.57+2026103004 --user-data-dir="C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=2540.4700.7859541290530080866 /pfhostedapp:8575bd5533801932d88269f6bc26e80b49ef9752
    3⤵
    - Enumerates system info in registry
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:2496
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView /prefetch:4 /pfhostedapp:8575bd5533801932d88269f6bc26e80b49ef9752 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7ffad8325fd8,0x7ffad8325fe4,0x7ffad8325ff0
      4⤵
      PID:52
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView" --webview-exe-name=GamesTikBR.App.exe --webview-exe-version=1.57+2026103004 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=2476 --field-trial-handle=2480,i,18153015346647711504,12373831573057341503,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:8575bd5533801932d88269f6bc26e80b49ef9752
      4⤵
      PID:4912
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView" --webview-exe-name=GamesTikBR.App.exe --webview-exe-version=1.57+2026103004 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=3232 --field-trial-handle=2480,i,18153015346647711504,12373831573057341503,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:8575bd5533801932d88269f6bc26e80b49ef9752
      4⤵
      PID:448
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView" --webview-exe-name=GamesTikBR.App.exe --webview-exe-version=1.57+2026103004 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=3344 --field-trial-handle=2480,i,18153015346647711504,12373831573057341503,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:8575bd5533801932d88269f6bc26e80b49ef9752
      4⤵
      PID:564
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView" --webview-exe-name=GamesTikBR.App.exe --webview-exe-version=1.57+2026103004 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3580 --field-trial-handle=2480,i,18153015346647711504,12373831573057341503,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:8575bd5533801932d88269f6bc26e80b49ef9752 /prefetch:1
      4⤵
      PID:2744
- - C:\Users\Admin\AppData\Local\GamesTikBR\Updates\ready-1.57-ffc32ddf402546c681a1581d20e6fd6f\GamesTikBR.exe
    "C:\Users\Admin\AppData\Local\GamesTikBR\Updates\ready-1.57-ffc32ddf402546c681a1581d20e6fd6f\GamesTikBR.exe" --wait-for-pid 2540
    3⤵
    - Executes dropped EXE
    - Modifies registry class
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of WriteProcessMemory
    PID:3232
  - - C:\Users\Admin\AppData\Local\GamesTikBR\Launcher\1.57-sector7g-20261110\GamesTikBR.App.exe
      "C:\Users\Admin\AppData\Local\GamesTikBR\Launcher\1.57-sector7g-20261110\GamesTikBR.App.exe"
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Checks whether UAC is enabled
      Reads the TCP/IP host and domain name from the registry
      Suspicious use of AdjustPrivilegeToken
      Suspicious use of WriteProcessMemory
      PID:2088
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=GamesTikBR.App.exe --webview-exe-version=1.57+2026111103 --user-data-dir="C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=2088.3104.11938889447293090259 /pfhostedapp:8575bd5533801932d88269f6bc26e80b49ef9752
        5⤵
        Drops file in Windows directory
        Enumerates system info in registry
        Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        Suspicious use of WriteProcessMemory
        
        PID:4304
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView /prefetch:4 /pfhostedapp:8575bd5533801932d88269f6bc26e80b49ef9752 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x12c,0x1c8,0x7ffad8325fd8,0x7ffad8325fe4,0x7ffad8325ff0
        6⤵
        
        PID:4752
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView" --webview-exe-name=GamesTikBR.App.exe --webview-exe-version=1.57+2026111103 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1884 --field-trial-handle=1888,i,6925193163680503813,15167224910807193719,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:8575bd5533801932d88269f6bc26e80b49ef9752
        6⤵
        
        PID:2612
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView" --webview-exe-name=GamesTikBR.App.exe --webview-exe-version=1.57+2026111103 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2476 --field-trial-handle=1888,i,6925193163680503813,15167224910807193719,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:8575bd5533801932d88269f6bc26e80b49ef9752
        6⤵
        
        PID:3864
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView" --webview-exe-name=GamesTikBR.App.exe --webview-exe-version=1.57+2026111103 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2820 --field-trial-handle=1888,i,6925193163680503813,15167224910807193719,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:8575bd5533801932d88269f6bc26e80b49ef9752
        6⤵
        
        PID:5696
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView" --webview-exe-name=GamesTikBR.App.exe --webview-exe-version=1.57+2026111103 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3332 --field-trial-handle=1888,i,6925193163680503813,15167224910807193719,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:8575bd5533801932d88269f6bc26e80b49ef9752 /prefetch:1
        6⤵
        
        PID:6128
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView" --webview-exe-name=GamesTikBR.App.exe --webview-exe-version=1.57+2026111103 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4000 --field-trial-handle=1888,i,6925193163680503813,15167224910807193719,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:8575bd5533801932d88269f6bc26e80b49ef9752
        6⤵
        
        PID:4260
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView" --webview-exe-name=GamesTikBR.App.exe --webview-exe-version=1.57+2026111103 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4228 --field-trial-handle=1888,i,6925193163680503813,15167224910807193719,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:8575bd5533801932d88269f6bc26e80b49ef9752
        6⤵
        
        PID:4216
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView" --webview-exe-name=GamesTikBR.App.exe --webview-exe-version=1.57+2026111103 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4788 --field-trial-handle=1888,i,6925193163680503813,15167224910807193719,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:8575bd5533801932d88269f6bc26e80b49ef9752
        6⤵
        
        PID:4644

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

GamesTikBR.App.exe

Path C:\Users\Admin\AppData\Local\GamesTikBR\Launcher\1.57-sector7g-20261110\GamesTikBR.App.exe
Size 15.8MB
SHA256 d823f594eca0ab9f65997905831c43307ca748402433bfaae76ec1733fb1bd0b
MD5 d285e83d24fc87a07e442c1a0a86e441
SHA1 c51fc8bad2cce2c3da0ac78140dbad134f13ce28
SHA512 c7f7cf7cf39a9f30ebb9bcd88391e0ccb48ef0d035703733af6ca19e9558019c6b9ec13b35793c2943ea11c2ade5a276ef4b1486d9102e55553bec6f8f73b545
SSDEEP 393216:0NMKSSFsLQyEZS0z4KzYIwF9ZLfU5R3uYuCTI+1D:IQYEUYV91oReYuCs+x
TLSH
T13EF63310E7E8472EED6B9335C771E382D721B492D639EA2E14C8C9C44D927807B7E94B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE-WebView2.txt.new-c80f7780c7294f64867fc457cbc57ba6

Path C:\Users\Admin\AppData\Local\GamesTikBR\Launcher\1.57-sector7g-20261110\LICENSE-WebView2.txt.new-c80f7780c7294f64867fc457cbc57ba6
Size 1KB
SHA256 0af8f1b807512aae39c2ac1aa4d0cae65cabecb6fd554b8439a5162a0d6eca55
MD5 89ac2d3232149f6c00251de9162fa6e3
SHA1 cd2c6e9501dc013d2842a186a019513aa3bf4a85
SHA512 0da86e742bac37773de1c72ced90a44a43617e4a2bb8a4c12cc702e08cdb0b167a40107bda557cc0ef11bef06b8135dfdd8ff6f897c23b58c974a65905743b7a
TLSH
T18B31655B12440FA75AD32A927566ADC0F09DD02D3F376E05186EF388577B62EC9B7040
MD5 SHA1 SHA512 TLSH

Submit Download

GamesTikBR.App.exe

Path C:\Users\Admin\AppData\Local\GamesTikBR\Launcher\1.57\GamesTikBR.App.exe
Size 15.8MB
SHA256 ab5a50ef593257d693783d57ad432a02e64574f42c2ebe4c246ae78b9a883d6c
MD5 383a4345ddc28d720775b5d52033cb70
SHA1 56d6eafd2780e6e6b123785be50f9ebca56d8915
SHA512 6bb494fe0cd07aca3f8f9d815491c391b06c223a71860f1ac305bd7f2cf1fa2810f04c251782a95b22b449a6b081959e67fff6b426277da53cc0ffdadf82a2c1
SSDEEP 393216:YLCqAXVRizJ9jzEZS0z4KzYIwF9ZLfU5R3uYuCTI+1D:EAXVMzYEUYV91oReYuCs+x
TLSH
T16CF6331095E8475AEF9BB375C774E782D73094A39629EA2E14C889C80D827C1DBDE34F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GamesTikBR.exe

Path C:\Users\Admin\AppData\Local\GamesTikBR\Launcher\1.57\GamesTikBR.exe
Size 16.7MB
SHA256 10c1084169eca8143aafe9e0bd5c4c3e13d06fa2e1b8fea9b6de6b393f219906
MD5 53f3c536c0d654c2ad2effbbbe0d9f79
SHA1 235f20f7639e7955962edc0f5cfaafbce6bffd63
SHA512 0701a04eb02a409f81f813547459719727b3a28220812cf954dd166eb3af0a8bb6dfd17c2a9b2a75260e55b9f4de5b8fefb66678923e8855efdee205a634074f
SSDEEP 393216:hLCqAXVRizJ9jzEZS0z4KzYIwF9ZLfU5R3uYuCTI+1Db:rAXVMzYEUYV91oReYuCs+xb
TLSH
T1C607221123FC421AFAF37B799A7452509BB6BC977A38D79E0188556D0D72BC0CAE4323
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Web.WebView2.Core.dll

Path C:\Users\Admin\AppData\Local\GamesTikBR\Launcher\1.57\Microsoft.Web.WebView2.Core.dll
Size 681KB
SHA256 d60e6e94245078cb56e44ebd5f360dc04bf18e460136be93bfc4cfca43b98505
MD5 e336cd4cc1f67e3f57ead4e72a24c93b
SHA1 c03565235315e597786b287b52e00f27bf0de806
SHA512 950516cb1f7a493592c0ad4c39c0df9a5c0cd44225cff17e2561d72d908c4f7b8623ef28610c66c6cd0b963ac89fcae9ab41a9a99b42249114963f7e21e92bb2
SSDEEP 12288:RJ4dCXzRKX4EcJupbSRi461R1VFrP3224c+iKmDRkRFNBMUFeA+imQ269pRFZNIz:RJ4dCXzRKX4EcJAD1RnQk
TLSH
T14DE4301223FD8619F5F27FB9997412609BB6BC97BD78C38D0698642D0D72B819DA0333
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Web.WebView2.WinForms.dll

Path C:\Users\Admin\AppData\Local\GamesTikBR\Launcher\1.57\Microsoft.Web.WebView2.WinForms.dll
Size 37KB
SHA256 6a9e6856f23c463783c3afb0ca5d78f56324c86657162ccb16d5227b3233b32a
MD5 f1a15a22fe0874e4bb2e8f05dfd62f57
SHA1 aa06e407c7b4241ae559aee616ef156540a76a12
SHA512 5c467d9f6d27b12931777520e10c85599742f9fa9a9add3971be9a862bfa278c526310368e8a8d79d39673c2af5c1fa3daca0829127b755728596770fe460198
SSDEEP 768:psQNb2vIYymJ22Mss+5JQ+ZDgcEST3p4Jjrjh2jeFSUyauTv1JKia5/Zi/ZGQSxx:pzb2vLbJQ+ZDgcEST3p4JjrjaeFSUyaN
TLSH
T151033A4087ECC517EAEB5F78A8B4856107BABEC37DA1D7980D88B1E90C73BD055113AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebView2Loader.dll

Path C:\Users\Admin\AppData\Local\GamesTikBR\Launcher\1.57\WebView2Loader.dll
Size 190KB
SHA256 3426dcc55fdfb8b5e7ac623cf33b4ccf283fbf68a0c5a65bddfdb4d749a8abee
MD5 f1426c839cbf0e9a4eae7c67916cedff
SHA1 60cdeba80ce6357d9598947bd65f2db31e5efa2c
SHA512 392d172f8e960a2d18d18175813e091c27d12065db06c4fcaabb6429bbb1306a3087fff33e51bf9226759b34d454109c11a310711ff9f7c6f9d8f78164b661f3
SSDEEP 3072:hJoWXgNjIFnTf75x2v/KUUbPXGUIufAuzA2dTZnaZED3JU9jfbKuFjaS3:LKI175Av/KLB9zz3nyED3JU9DKC
TLSH
T142145D06B3E940F6F976D67C89A38A46F67278110710AAEF0360473D5F2BBD49A3D721
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

165425dc-c844-4f22-be40-2b5ccbb3cc69.tmp

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\165425dc-c844-4f22-be40-2b5ccbb3cc69.tmp
Size 16KB
SHA256 c86f6b344b860a5f856e3c2532d6c767765dff812e1f9c377910edeaa8702168
MD5 f5aecf87eb47d85ccfdcb3e79b9eed41
SHA1 dfd6c46f5af5ab289b279b4cd1b762b48bd77c85
SHA512 f9231e147d9607093f585523100c49656c26ba91ebe418f17a78e2fd8db1c15f48eb2d7792a19194ca7c1705b869e4c16d3f62bb7db2e4b4c8399c3b85d34512
SSDEEP 384:Z+OBqImmJvGBLx3NaFMJF93NBSrop/Vsbg6rJ:0cvGtlN9w0CB9
TLSH
T13F72AF3A1C756E232CF7C5097A897B878BA562A3C0D57BD4CDEC9F0E126F0841352D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9d5c9bbb-2782-45f3-9744-fdbb65a271ca.tmp

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\9d5c9bbb-2782-45f3-9744-fdbb65a271ca.tmp
Size 3KB
SHA256 f104cedf5ea9275e4b6991eaf9d8308de4f98c099324272ef08219be2c811aeb
MD5 ade049988899a0d465fa95d4b1c77bc1
SHA1 659318983f380bd4bea6d23b340f59ff27c5d187
SHA512 60ac509076c7ee584d1e9aecd7e5e9973dc2d755f6017a6b3e1e66254179ed283d09d7f600587eefafe03b32be3f24d626e2a8ba9d12cb996d8ae8dd73823879
TLSH
T1B061973769B4A9274DF2DA0574863E56A7A15073E5827F95C5FC0F0C02E72982352C27
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\AutoLaunchProtocolsComponent\1.0.0.12\manifest.json
Size 135B
SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
MD5 616eb6b585f16811dc5db5063e088cd7
SHA1 fc50aa7b747f9367d2b177eab7ab12cdafdeea85
SHA512 cdaf55640f0279c1cee06338912a07bc8bc8cb3780f70202363e25b327eb94a524c0acdd25cc2b22fbb1895d32af888857b17b3f0d7a2064f51ccdf1bab57f79
TLSH
T1BFC04C668D41DEAB00A647A56B295315E23B4B4B5044400A7AB5429C1A285964271844
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 0d0933bb531ccfeb19c949abf18969f6fe794ef7c47caaad6fcae44f7c4eada7
MD5 6f3f17766572d4ea63b3e1a7febd6945
SHA1 807377099f7616a308e56e4724f5fd9d404b7bd0
SHA512 71f64a7dfa6c351647de3712ceb77e6d0b894a126084d988db5ea0cf87953b0bb5fcdabcbc5f403197a503851e993cd25d6aa58cf7923abea1b77b77c299bc35
TLSH
T161D0241337410134C0303733100171CC5540C00F4115C145543DC57D3F140541F435D1
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 f0c3458a64de616d945f951d436a5b8eaac8f4005abd67f030be41610f9d83a6
MD5 d86b20c35cc0991f3e36ebed4d33add5
SHA1 a45e1af1604d3bae80be0fa73afea3aa81eb0ae4
SHA512 c6b92fb00efbd145fad0644bdba04f77749e74038c760d293ef81bc23242fbf6144036ae5b568ee26a79e02e6ea7c89b5b194c35ad211459271b4561ccdccba2
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 e2d026e5d594be6d14aee932f537bf974196642d90fc0a9478e793d7ff7d18ce
MD5 6a372ed02ab938f748f9c3458729f8c8
SHA1 76fa09771843c9011345ebeee279a68e30af6add
SHA512 ccb04d6da245edbebf56bfc2b132d5f00bbf6b373c3b1271427fd18928d6cbc7faa63103275f9b0aca369d1565db75c7d5650246ae7fd467bd4f0db8ad8a9ec0
TLSH
T190D0241333410134C0303533104371CC5440C10F4015C045543DC57D3F140541F035D1
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

f_000008

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\Default\Cache\Cache_Data\f_000008
Size 240KB
SHA256 bdfb40cdb03c008cb6f79500ab534564ee1feccbc2d3d7cfafe1f6b97089f6a2
MD5 db78245db39d04e246c729294db85580
SHA1 08078efbfedc311a5fb0593f07772996cf947cbe
SHA512 3f212925295f1d74937e2ad97814d113614846ca21ec044e1a4ae3fd71387c8ea261651c335c813df69197c20436316851963805aad6a8a45030c62c8f72b90e
SSDEEP 6144:OYys8/BsKXdgGLfezN/Qcsj9GTok3oOA7eSS:Oi8/Bt9fRjgTok3y7eSS
TLSH
T18D34232978A893E17AD1F84EF7E4B1411F08E488A45837D59C9DC94B8B318321EFBF59
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000a

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\Default\Cache\Cache_Data\f_00000a
Size 17KB
SHA256 3658dfe2a69442af3ebbd7d76b505478eaf3464955e6798543280f62f8b80ad8
MD5 861ad96d477d637fb3ddaab0914e87cd
SHA1 9377b9d487e7f3a48fdd0ee90b4d85b055506fc3
SHA512 2c4a3bfa50a096652303f0f102c45c683e7993cdc1ea8dfc3ce120df4508a0b4cf4dcb09c6e3b497d0583cba339607cc5431a6537044dedef7b03b8c83af1822
SSDEEP 384:6blC25mX95SScp3nwemG9cYInDxGPFadCDF6wdbefKcE+xMK9wzSqWy1:KlC2AUVpA/YQoeCDldbqxh9w+qP
TLSH
T12182D01592F2A750B658327B57D1354FEB2FE2EBC83A8E2DB440F881C560C51C05B4D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\Default\Code Cache\js\index-dir\temp-index
Size 600B
SHA256 0772b0a380cfe429a3747b5db9be6a98ce120310fbeb1b1d74f24fc9e75e35bb
MD5 755fce48f3ebb212704534af1081f7cc
SHA1 a49a400c3c55b720ddbeb9125782599ebc41a6e5
SHA512 f61c254f7c96c5143f60a0b98cc2e04c25fb50aae0787e79edaa2eb5759712894b95adb4d4439a7c8854b056937f6f4fc118843cb6f7635f6340f34a6c19a533
TLSH
T1DBF0DFA5502D74D6D308E7F972D6FA02FBFBD2340CB32F07792129B0964479944B5914
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\Default\Extension Rules\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\Default\Extension Scripts\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\Default\Favicons
Size 20KB
SHA256 2db221a44885c046a4b116717721b688f9a026c4cae3a17cf61ba9bef3ad97f4
MD5 b40e1be3d7543b6678720c3aeaf3dec3
SHA1 7758593d371b07423ba7cb84f99ebe3416624f56
SHA512 fb0664c1c83043f7c41fd0f1cc0714d81ecd71a07041233fb16fefeb25a3e182a77ac8af9910eff81716b1cceee8a7ee84158a564143b0e0d99e00923106cc16
SSDEEP 24:LLiXxh0GY/l1rWR1PmCx9fZjsBX+T6UwcE85fBmI:iBmw6fU1zBmI
TLSH
T1AA92EE075E383407DBA10E7D266B187A8E3FE26C5FA29C94347410618CF9482D5394FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\Default\History
Size 164KB
SHA256 deba77bc71479c2e98a7f985233a7dc3a386ebc0dce33a347c6ac21d9ee1c573
MD5 a52a55fd35156c4962d5056465aa9d95
SHA1 c22a74097d6717d550758cf6f7ac16c3a4bce1e8
SHA512 2683277a6451aec89c9e40cc554ec5d16f22cb44c12ff404ea6c13acd8306552861b279f9a4e6aea3b715ece2e0f1969ff4c37f4c2e4b67336c4aa07d0a2adc7
SSDEEP 96:MBaLqL/uejzH+bF+UIYysX0fxQp97sXEHt/DfLVVVN6zRk/E0:MBGqL/tH+bF+UI3iWGVsXWNVVV63
TLSH
T10FF3EA1E5F643722CDBD923668E745B3597CF03F876326856CA114B1CEE2652A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\Default\Login Data
Size 42KB
SHA256 0c1c2e0223f73fea44686ae44f4e78411de421f7aef7d89617be3837d3fdbc11
MD5 cec405af1bb4df2029eacdcbc7e05fd6
SHA1 835e45888f49095a184a62a229a437399c9c62cd
SHA512 4ce266cc942447ac963f4652c058a28d7641e37a06a5cfa4b290e70d77efb80e00312363ee5adb9e502fa32ad1cf661c18ac9581d1fcb2f83e7cb6429325458e
SSDEEP 96:klpeymwACn8MouB6w9f/FlXqiEqUvJKLuyn:klrAG7Iw9ftFqidn
TLSH
T1B213350F2B682401C8AD8636ACB114B66E7CA13F4B639FD52CB104259D75C63B12D5EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

22a382c8-5b16-485c-9d44-f2d1eec5541c.tmp

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\Default\Network\22a382c8-5b16-485c-9d44-f2d1eec5541c.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\Default\Network\Network Persistent State
Size 61B
SHA256 e1b77550222c2451772c958e44026abe518a2c8766862f331765788ddd196377
MD5 4df4574bfbb7e0b0bc56c2c9b12b6c47
SHA1 81efcbd3e3da8221444a21f45305af6fa4b71907
SHA512 78b14f60f2d80400fe50360cf303a961685396b7697775d078825a29b717081442d357c2039ad0984d4b622976b0314ede8f478cde320daec118da546cb0682a
TLSH
T139A00254944498FF4655836A05654463C7AA504780285E565B24115E42A25AD0450947
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Trust Tokens

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\Default\Network\Trust Tokens
Size 36KB
SHA256 2d4ccf8ac8ae4f5c6ec8e0566210ff56585b6ba0290501a1a11ed9b23bfc226e
MD5 7289d4bdfbd73ed571278f95cb4c1939
SHA1 7c911f54243d9777a34666f4526a49c7e7aea244
SHA512 6e7d48e18b0317449807c4ac2c377b3cccf5bd6121077d51152d7e188ba1ea3cf62372b7611036938986dd0c84465dbd747fe8580e3a699f8470229a6d57a749
SSDEEP 24:TLB3lIIAoDJ84l5lDlnDMlRlyKDtM6UwccWfp15fBIe:T131DtX5nDOvyKDhU1cSB
TLSH
T1D8F2689BE93C6FA3CCC56FB08B47E5B51F752BDEE68276C4247130A10EA860055E7443
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a0a9887b-b180-41e3-b9cc-15606365a633.tmp

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\Default\Network\a0a9887b-b180-41e3-b9cc-15606365a633.tmp
Size 1019B
SHA256 f5dbc8e763a6d36ac93a01d5dc7b6868b33291a9567ab6c389dbbc8e7d6369c8
MD5 a46691a416307254d4d5942e070dc4c0
SHA1 00b9caa729d8646ca744eb345e30b1eee0f8344e
SHA512 e3cf762cca771d6d719b9203f4acc0be916f3d75e435db495a7d2a1c6dd88fc9133e7f2886f2c5ae8c854020c4aead5254bcf04cfdd75596dd93a9889c9500ed
TLSH
T12D117BB2C2E4476D89A626F466303D37EF1E082483682D1AC5DAEB9F93F58B4E25150D
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\Default\Preferences
Size 5KB
SHA256 fafd12014aa6328f406ebd5d703b66fb662eb2fa8e4f477002a6e240e25ffa1e
MD5 a003ba4179777b1f4cf08298db14a755
SHA1 6c5365b4c8d2e43b573104005325b620ed830483
SHA512 885d2b800ecca457a1d7756def60bb1d0fd7fddf59a7694037136db49e54aba606ca9ca710d35238b8f0b090b52ea82cb518b29d53ca2301dc2f215333e5ce33
SSDEEP 96:rj/drmVOxALRdo616ZZs7/x+6MhmuecmjeVXSK+g5I8XM1C7K:rbBvA3ojsV+Fijc1jg6K
TLSH
T1CDC195065A28797B4CC6F519BA357E83D2F9503235D62D58EBF88A2C08EA5CC6217D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\Default\Preferences
Size 6KB
SHA256 54939e8c98d57b5cd1c9283771d358984a4bb734e20fa4c09ec6566a17e6528e
MD5 6478298b90b9fdfe2e0833e28a938e5d
SHA1 45c4d62ab551e9bc1a056d8548ae2507398a77ef
SHA512 5cbb1909c0351335e98960ff7fceadcc1ea9519511f1a1dda0ce5222b2f640404a7fb39f52f01da45c7cda49e1c36918691a1fc8902f0701905dda73fa3cf364
SSDEEP 96:stv/drmVO7b9KukMLdo5h16ZTHs7/x+6Mhmuec1uq1ejeVXSK+gr28XM1C7K:st3BNDBoKHsV+FJuqQjc1xG6K
TLSH
T1EDD1A6055E24793F4CC6F119BA25BA96D3F5503235D15E48E7FC4A2C19EB5CC6207D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Safe Browsing Cookies

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\Default\Safe Browsing Network\Safe Browsing Cookies
Size 20KB
SHA256 0628922305d2478ba75a48efadf932d439616eaf1ff908be334793f7bde28107
MD5 91dbaf73c1a8c55254d90272f998e412
SHA1 2b86b31c8c00c937291e5ac3b1d134a5df959acf
SHA512 109f4f59616cc1d1682b4d9468804f7668c77ce1878afec06a57037193f31a9c1c39f5d269277462936373b129d26488cddcc34d455c27185534e7754baaa988
SSDEEP 24:TLWr6bXYFpFNYJqH1kwIY6UwpQ9YH8rwZ6HfB:T+6LopFS+awWUOh8B
TLSH
T126926B4E5F346221C0F48B36EDE1855B2F7C201CD3B32655DA5860F3DE9299BF10956A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\Default\Secure Preferences
Size 6KB
SHA256 cfede0bc0fa30ada61dfe5ce17d992aa4954ed84398f962bfaa274c483955d97
MD5 194c2e886cc9795ee9535f0cc7c0b065
SHA1 0d369bf34070bc94a183062a5de251d8a7a0fc29
SHA512 04baf59a2e68090d9d6792d29345995474a86a8d0edf2a344c145be7f7ab620970479b23378e22e783f434308149e764d072434d0bcd4dffc2096307bbf84df2
SSDEEP 96:vIiEPlf/ROo1pkF5d1mij7VaTEv9V5h5pg5+e0Mhrjagf0HP+wZmca/3kvB:RwvKl9lsb0Hxfa+B
TLSH
T11BC1C7A74529C579BF404BEADC387ECF99AA01DF98D6880696E2C58806C2EFD11DE4C4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\Default\Service Worker\ScriptCache\index-dir\temp-index
Size 72B
SHA256 599b7e113c261678b313f013082d07f5b8d0492c198a882f71e5e2da2c8699c8
MD5 6a5210285ff35e5ae836071de1e09474
SHA1 b6470dba576d2ab26a8d02caae19b6b65be60ff9
SHA512 cce190e9a08c42777a86da2b5b8f2fe66e7f0fce25312a8c960d4bbb241d3b4b82ff213d98e9b5b238732aaf4d9f3747e97de0733f408a052fed3ca4b1ecb891
TLSH
T13BA0021751435151CD2143F0124F53CB22115935612367014FF0E6859C52550E2251C0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 48B
SHA256 88c68460a07360b570397764174d3ffe85d6d4ef37161a2da67ff0d788b771e0
MD5 4e79f5cef75356e3a6ea14eddff9d247
SHA1 d7ec390914bb7b7b9bc35f26dc094d8ed7d5c8a3
SHA512 257a691047482b2cddca02e1b31394984a78d92ca2af38fcca03ada279ac8be5968ab987eb17e4f1fc190661a4499dd1832bad58f310e27f682398d8c3081258
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\Default\Shared Dictionary\cache\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 48B
SHA256 e9418d7476358d918af16cde93fc9c05012a4ee4e63e70e3355c680361e44776
MD5 34b1ce1c97220bea1d0707d7b1fa338e
SHA1 6fab1757267a639d751ff3eac3f697bdb391e84a
SHA512 6ab51fc90061abee6c511f7f705b144281698aa715f5873b222d6e6bf7a9f83225d50387b9bd2200a9e690e844d4cdc3fd1ff041cffcc21ec08549ca0335e651
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\Default\Shared Dictionary\db
Size 44KB
SHA256 79b107307408e5ad9a145c87533316174fd13f4ad943497d079522fbe325b3b1
MD5 71ccdda9f3186c8e729bb559f93bb992
SHA1 3712c11bb21b8e2a74bb879d47b2819ed1ac14a8
SHA512 19f8134fcd1211964111b07884b52878b1649644b6ec623bb586df1a9b7dabc7f8c8a755d2a52c908b563bdd968135f4f703cc35103696e40d0ab0020c8dc4bd
SSDEEP 24:TL6iuaJhPwMuz6G0ZestjteXUSQeCl7ZIeNa6+6Uwg8hPq81fBG:T2TaOk17ZfnUdoqSB
TLSH
T1B0139A0F2E587564D1BD0635E9A34E6B2B7E30489B8329D125F02AF24DE251C5D2F27F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\Default\Site Characteristics Database\000003.log
Size 40B
SHA256 f096bc366a931fba656bdcd77b24af15a5f29fc53281a727c79f82c608ecfab8
MD5 148079685e25097536785f4536af014b
SHA1 c5ff5b1b69487a9dd4d244d11bbafa91708c1a41
SHA512 c2556034ea51abfbc172eb62ff11f5ac45c317f84f39d4b9e3ddbd0190da6ef7fa03fe63631b97ab806430442974a07f8e81b5f7dc52d9f2fcdc669adca8d91f
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\Default\Site Characteristics Database\LOG
Size 317B
SHA256 d918937fe2435989c99d9da8391ba02572271148b6095ddc4d3f6362486fc345
MD5 542721926d218be7c3d5a70e75c6a4cf
SHA1 711df59cd5d81c2f5089c42d0a946b85acca652a
SHA512 9b73cc6d7d82e434163e8422674d3bcf3267f09f1193c25ab43c14c271d9a2b938e1b22d02964282ea3d2be519784a16c6277ef2d7379ad15c3c4566c873abf6
TLSH
T133E0266099CD8A7B078919EF6675E30CCB656012FBC6222A2F68DACC22070487842B06
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\Default\Sync Data\LevelDB\000003.log
Size 46B
SHA256 a2ca52e34b6138624ac2dd20349cde28482143b837db40a7f0fbda023077c26a
MD5 90881c9c26f29fca29815a08ba858544
SHA1 06fee974987b91d82c2839a4bb12991fa99e1bdd
SHA512 15f7f8197b4fc46c4c5c2570fb1f6dd73cb125f9ee53dfa67f5a0d944543c5347bdab5cce95e91dd6c948c9023e23c7f9d76cff990e623178c92f8d49150a625
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\Default\Sync Data\LevelDB\LOG
Size 291B
SHA256 c5761d2a85fe7cc0fb081a2c9a53408927b8b15b8da7c96b764e791c42e10f02
MD5 e410e02bedebe63317bee8f383077146
SHA1 87319ecfbaccb9ddffa8c08b2b5b952064e3811a
SHA512 0c5a683b999c896d498973558d76b6df0c47413e3708736bfd7d8f3aebdeba14e65cc6e1d6670385adbe2e41f80ee325c53b89da9fe3faf66afff66a1534e36f
TLSH
T112D0CDB0C9CD86360B8489E746B9A31DC7B49417A7C2364D5B5CDDCD254700878B0782
MD5 SHA1 SHA512 TLSH

Submit Download

Visited Links

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\Default\Visited Links
Size 128KB
SHA256 316a4571caac884d66764cee7203f95ec4cb747cbd79c15575b686abf8cc0b01
MD5 2f50ae164e6638fd4768575803bd4771
SHA1 68a4517ef9cbd9262e81ac484948697ea7a9c96a
SHA512 af05949bdac48089d526c99df10985c43200625f6e5022d66ca7d78b1fd747b711c8667b2841cab511f0977506a43dd8ce3abdb60c87911d9be50e03d8c12ae2
SSDEEP 3:ImtVlS/l:IiV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\Default\Web Data
Size 210KB
SHA256 db93cc6874e6ae80c9a151c1dd6a326ffee07b127e5899438873c19399c79b85
MD5 de64b3487ba692a60d246d8fecc05bbb
SHA1 e2c1d6c0c2ef943be79fee667d2895d5579f279f
SHA512 13e75703aa5562b559896e564a264385fddfcde4ca29de673c1ba7582425776f51c6aeda5a324d89207b0d69b0c915284a1290577774220302a45d3b0fae8f1a
SSDEEP 384:FihpPI2DnEDsKc1IysvHEBMehIv0QKIqJOw:wzPDDnEAKc1Iys/LIIvfKIqJOw
TLSH
T1A724554A7B746100DDE2D9B21CB080771A3CB16D8F22E6925DB264694DF7853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\Default\shared_proto_db\LOG
Size 289B
SHA256 82a6e25860b8a01516a831894c73acbd8390e36ddc2a78578c82386ab55dc431
MD5 75f1bf73f2eab39cfe4698020f28d584
SHA1 fb6679ebdf115d97c0ea8d604d0a3ceb84b01845
SHA512 f9c44a9e94c583da478db69390379d509739772f733a60073b131ca8e547a1332b691a6062b44cf362c7adbdafcb83f4b9ae8d4bb1cd1d41146ee64d8b0cdd74
TLSH
T165D0C291ECCD85AF06A849FB16B6938CC75C6427BFC1260E6F44C98D24431487C55A0B
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\Default\shared_proto_db\metadata\000003.log
Size 392B
SHA256 8466a78f1d18bdfb9b466ba853680021bddafea6f3ac01621d24c7cdd480455c
MD5 d32d7a97a0964982a2fefb18af5a571b
SHA1 c7fefbe529f4e5d858adb0eef5d79083108e719f
SHA512 bf6c646b19c725cf9afc37749e3fc59fb40129c924feaedbc4b1d2ace27a1e49674403242aca63f08b239a6b5e0875b5e59b1a160000f45634fa3c68097d0143
TLSH
T135E05B06F320C504D00FD67E503597225778E4859FBCED4F4C7960152F726490E4B3D5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\Default\shared_proto_db\metadata\LOG
Size 307B
SHA256 05923f776954aa2893bcc323e03ddb1e1b5af8d674bb3af573b6559bc29146c0
MD5 877779c11a0dd3d928faa105ab6b55d2
SHA1 8900184c3b9c00389312722305fb50a68d21acf3
SHA512 900585e94defa2e404ce66754f8ca0812d6e3c4507a994311d7423913defee3087da668053060c12079adeabf1ea2cab8c111677542728ce05384ed409799a4a
TLSH
T157E08C90E8DD85AF069548B716B6938CC7692827BF812B0E6F84CE8D59431897859A06
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\GrShaderCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\GrShaderCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\GrShaderCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\GrShaderCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\Last Version
Size 14B
SHA256 d75607a88bb0f572f8863a3ea4737b635664178e97e0b7cb057887f2736fe3fe
MD5 3b746b6e8b8e101ee7cd41df1bb565d0
SHA1 ff5ff645ada097814fb4890d00dba8a309e1a506
SHA512 71d487cff7f744f046d993889c770a877075378b8d47d6c2f80fd94a5c1150a627f4a69d9e55f272f3aa4257e5dbb5296643591d5d23804a95550a3f2d91e2d9
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\Local State
Size 1KB
SHA256 0932d5ad92bdb766096c3fcfbb3f4e25f865bdc22da2d645a0a819c08ac0ad82
MD5 b73d23b1b94615b65d8334a4881d69a1
SHA1 6c6527dcb31dbce611a525a030c97e6f6bd6e3a6
SHA512 b2e5599e11f325a72f3229e117b70118b3c5c63695138a41924487c404077c9eb7fda646f785c82430ca004eb6ac0bd67c17a0382c30c5f56990c73d4f4dceb0
TLSH
T1B32195B2E5F89B329891634A21567D974F6150B7C1029F44A5ED4F1C13EB18C627EC32
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\ShaderCache\index
Size 256KB
SHA256 756359862738ad1dd271e94e98a22a0d3b10806cccfeccde76be93a0735cee05
MD5 72190d84882d20e25642c65587557f25
SHA1 699c8da4e1802fdc067170b96e8b24728203e16a
SHA512 eb73050a025a715b05b1a1e9fe8f8a361890405811e906afa5fe5c56386dd28e0224a61c8ea16b22d30428695e93b2e37e57bd1c61f03f6c18e140e3dfa95795
SSDEEP 3:LsOllllklkXlZ7nYqX:LsUlPFnH
MD5 SHA1 SHA512 SSDEEP

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\WidevineCdm\4.10.3112.0\manifest.json
Size 1005B
SHA256 1cc15465230ffb75fd028ee3b2189c8774f56bc7dee8dd17b952e6ca92144004
MD5 58954048e70c81669675d4f87ab50af1
SHA1 8ab675ea31801bbb91c33fd381f4c202bfd7882e
SHA512 f9b8c236c9404936b93ba92550c21a0344b657c42cd98e091cda32e33fed860d59ac0cb97451ca61b2d8e6a943a983ded569b1d7ecd541e832e3ca87b39ecbd0
TLSH
T161115E00DD384DD326D4B6A21CC6580957661DAF5CC27E54379E161D4F1C8AB927376C
MD5 SHA1 SHA512 TLSH

Submit Download

b8b78842-08d2-4626-8360-1382d9f90231.tmp

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\b8b78842-08d2-4626-8360-1382d9f90231.tmp
Size 3KB
SHA256 84ca5e7e4b357dca076a7de1982463a07be215681e89547b42ec0ec9e07927bb
MD5 968a150d8c0625ab23242a92fea24cb9
SHA1 cd9d4320c90d13147b77d93cd028c883be0dea45
SHA512 87c2d976f6fcde95b111fc6560c78e5df65f1109212e3686923c8b28cb7f714d6c862978eafd83354784e1ca506b6f3ea68a2cd4dc8d23d7547dfb1c004a7e9e
TLSH
T18B71843665B4A9378DB2DA0979863F43ABA55073D5867F95C6EC0F1C02E72D81342C27
MD5 SHA1 SHA512 TLSH

Submit Download

cf179bbc-3760-4182-beab-79504710ba19.tmp

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\cf179bbc-3760-4182-beab-79504710ba19.tmp
Size 3KB
SHA256 7777e98c1d1a14cc3db5990e43961f35d4c88c2585f862f809a766b43af7db6c
MD5 3fdca01740b1a626f53051e42e45e9f6
SHA1 f7375c464faa25875e3b8b935083aaf3258a2af6
SHA512 530e6b2bcb648df72a4ece6245e381c5bfc916c90c494576c95196aaf00632790482bdce8cac55b3140454dabf5bd6f377deebeaa8271aee098bb3055a9de673
TLSH
T18271963665B4B9374DB2D50575863F47A7A55073D4857F95DAEC0F0C02E72D81342C27
MD5 SHA1 SHA512 TLSH

Submit Download

d12078b0-5309-49a8-80df-f3b83fdac4e6.tmp

Path C:\Users\Admin\AppData\Local\GamesTikBR\Profile\EBWebView\d12078b0-5309-49a8-80df-f3b83fdac4e6.tmp
Size 2KB
SHA256 8708bea6c0cf2900d4083f142c44215725f5687787756ba35bc2507b959a1b5e
MD5 c2c9142e316a2e8a4ff218aeaaeee66c
SHA1 2a16f98b5fa129f90f717bb4077d9bea25c95b65
SHA512 ae9bb71db5d050c0b00d75b1500ba1b449efba41fe3d15e01b75a5c072bc83abc2f98189a5e0a8712ea15bc16aabec2b37b6ec53883209d0378efcaa01005ad0
TLSH
T1C351C7336964AB3785B29648754A3E538F7250B2DA132F909AED0F0C02EB15C2356C37
MD5 SHA1 SHA512 TLSH

Submit Download

GamesTikBR-Windows-1.57.zip

Path C:\Users\Admin\AppData\Local\GamesTikBR\Updates\GamesTikBR-Windows-1.57.zip
Size 15.8MB
SHA256 59655ba06f8e65d88de0ec11b95b6881547c658aded44f4ce38046e4f2adc0a7
MD5 394d3c3f2b68cfcd8e73d98a3098ee59
SHA1 0c1a370f4a5e4dd8312634e752a5733e70625234
SHA512 d43f1fc1b44cc4966e61591cf5a4aee1f4784d37c69c189b0e0f90775b04ad2958da429982f477a7d3a20b8909691daa8231ffdba4510211289a99e42c7e97d8
SSDEEP 393216:WZGwpTwMSRlRCg4IToV0aQJ665B7AjRVmcWeYzCCtNiR1:msRfsVJQA6/IRvWeY2C3iz
TLSH
T176F633D9595509C98051C3138C3963E3F332A56E0EBE4FAFA557AF4243EB95B03A24CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GamesTikBR.exe

Path C:\Users\Admin\AppData\Local\GamesTikBR\Updates\ready-1.57-ffc32ddf402546c681a1581d20e6fd6f\GamesTikBR.exe
Size 16.7MB
SHA256 0ffdbe258eeb7514c33baa990a0f436543ec405d6589cf00e40ba507c56ae762
MD5 84be45b5ac6768af9681bd7190d4f3d1
SHA1 39c030b36b6730102268d0cc1a4f0d7e349565d8
SHA512 5f5e3f872ccd64ffcfb3ed86794299ac863ef9b2d4e9ea95bad4c2d922f3bdcf45b74ddc54f50ade4d39219c1a556db365bda459545ab528758a50bdd3e7a318
SSDEEP 393216:FNMKSSFsLQyEZS0z4KzYIwF9ZLfU5R3uYuCTI+1DS:XQYEUYV91oReYuCs+xS
TLSH
T1CE07221123FC422EF9F36B79DA7152509BB6BC93BA38D74E0188955D0D72BC09AB4723
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Games Tik BR Launcher.lnk

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games Tik BR Launcher.lnk
Size 2KB
SHA256 7f8b7ed4d4086c6e22d5b7224fcbf19093c3d99ee6249a8f308c4685080d4ea9
MD5 1de26375e1539827d6eb508895d9b680
SHA1 61dcadbaf340b42614f3032590ea3c5c538b53f4
SHA512 f65c6692588eeb26a315f4953a59684804e7b9d12145c1c073b71704e17a6c41e39b3d9499d1202e3f48faf6f88d2d052d89536f349b877da0327942f35085c2
TLSH
T11741C95104C9AA11C3F7AA7684F751B9E6787833DB419B2D1050F2030A66F0A9D28F6E
MD5 SHA1 SHA512 TLSH

Submit Download

Games Tik BR Launcher.lnk

Path C:\Users\Admin\Desktop\Games Tik BR Launcher.lnk
Size 2KB
SHA256 7e28292a0231a031d84e4ff7a5e34937718e118e971b929b5bb097a3f8e29c84
MD5 a39d55a4c9e7c060ddc7c13ff1cb99e6
SHA1 0e379c945258fd4cb5d976e6abb75872100e3033
SHA512 c083c72e587cfbbaa7407e2d9a2796313d7ad47a852d1fd2129967f160a3f0111e89cc76094c7dd9017211f549fd9fdca52421452f4238488a2fdcb32d0363af
TLSH
T18C41F05104C99611C7FBAB7694F752B9E67878338B419A2D5050F2030B72F4ADD68F3E
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.fingerprint

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4304_1541828082\manifest.fingerprint
Size 66B
SHA256 e84df839eb3dee2a10ba66de65c372c6e2bba0cbab46a39af041f4eeaab1ffe8
MD5 06d2b48de0edcb3e022ed639f0fb0085
SHA1 32f93d5a76998c407087269794026d1ea028828f
SHA512 3c883d4c342f95f28e4a76c73ce7151e8a76d6f5b2c86f90a9ee7f9976ae7e1be94c963489b326d2ff5f7c6423b29552d9aa09b65c17396c2f66ce271fe19506
TLSH
T1F3A022E32CE8880EACEC0AAB020A0AFA0ECC8000020280C80008080220028F0008CA8C
MD5 SHA1 SHA512 TLSH

Submit Download

protocols.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4304_1541828082\protocols.json
Size 3KB
SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
MD5 5e2067a92dcfcb05537479c384a89725
SHA1 eeed29b07d865ac4d46629fddadad629d0ad4e2b
SHA512 c96c5f9cb7a169ad91b070b567cf9fa8f35951ccc5aa930e97dbeccbeac27f7e9dde1379138c9ba6b0d10339f9cb053ef21f19f06d7560f97d5d23a27c8ed4f6
TLSH
T17D7184B7862088194E360AB4AA0DF10DF93702DF2AF598D3B27D455F1F712BB3946249
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4304_835748102\LICENSE
Size 473B
SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
MD5 7406820f5d56fda6baffa951c60679d2
SHA1 e7d4894993e506e235d55b3e47aed019d0584148
SHA512 e70868507c08436b51bb4fd7a582ec0bf81ae0fb5d3d3f20374f584574e54eca81f3cb0530fddcf2d1773c33774f5df58f55ed2a45149c86d33e1e50f64c1d36
TLSH
T13AF0DC7ABA23532245D603C7011450D53B270BF4F25422D0E3E881E5336B178C1FE084
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4304_835748102\_metadata\verified_contents.json
Size 1KB
SHA256 a6ce8c1d0d27c54034e67a83270bf3fd2bdfcc45ffc4b9084357169c00c90f77
MD5 42b331a107b7320d16f115eb7872b3c5
SHA1 3438a81f13c76becc7eb8bf0a7881088e5ad358b
SHA512 afc9393c7a63ec8d95c708eab601ab76887e4600a03b10f3c8c6e6c78c1c48d8b8bc6f059f8f38e66f1e54c5040656b75b6d46b91a795f76dbb5d3c6ac59b333
TLSH
T12F31B7414DD5369EA14E42245AB873AB9F0E71B372C8A51DA9C5900CF4F914ACBD308F
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4304_835748102\_platform_specific\win_x64\widevinecdm.dll
Size 21.9MB
SHA256 e1f9ad648017e2cb0f0cd798d815dc51012b279ba32571e7b6eb5120b0ed2c05
MD5 046fdd0c07bbac0c160b03a2cea5ad4b
SHA1 fbe9107b962ff2c77070579a8769ce7188c4b473
SHA512 0a3e385a3d27883e6495e4cb4fd20bd5dd0c61176e04df2762fca9d13847c9ae88de7ac57648732ce6d6cce27f2eb9da4dbf9c54d1953504de784c4cb35c8fd2
SSDEEP 393216:DKuarWwW0LmrEr38dudevJCJU2kpq1gL2aVRHk:MWCmz0dwJIkpqCw
TLSH
T15A37E14AE35350E9E81ECDF0866E9A62E4343C4E03319BEF17D47A355A727C42A39F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

widevinecdm.dll.sig

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4304_835748102\_platform_specific\win_x64\widevinecdm.dll.sig
Size 1KB
SHA256 868171d91275d1e180a452621f66428afec0a9288ab96344ce92fc904ac1f70d
MD5 c7bf17a2f118fdb4a4344196706b6393
SHA1 d07695b35bf2f4bd746586fe56ce2ae9d7c99f69
SHA512 11abb5b2ea4120df63216ac38aa85c8deaa7d96b9e0a8867b8f281b0652211f4600bd4107d182f3ea0c657d8a1675ff56d0279837a7c33410a7968f2c5a9a754
TLSH
T1742108F4A215A94A7F50C142053DE827CF3E8AC12C6188B644BFC23628EE7C00F8457C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.fingerprint

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4304_835748102\manifest.fingerprint
Size 66B
SHA256 56d1fe98928ebd4be664fc103e35673a15c2dfa98ff241478bbd39beb15a0754
MD5 bef72178d2d9f61006676a8323ac4a20
SHA1 281541cc22aaab5d71703791192ef66ee2e831ba
SHA512 ee3664c72ee9a894249799b642ed8c1f10b7a7a422d1277d7097f43b4f892d7b267200d323f861bb90b0436262da13dd3c674c4425dfdc264c1cce3755a593a3
TLSH
T154A022CE0CC208BC30008300FC8C8B222000282823280022F8A023CA32EF30AB000C02
MD5 SHA1 SHA512 TLSH

Submit Download

memory/628-21-0x00007FFADD0D0000-0x00007FFADDA74000-memory.dmp

Download

memory/628-1-0x00007FFADD0D0000-0x00007FFADDA74000-memory.dmp

Download

memory/628-0-0x00007FFADD25F000-0x00007FFADD260000-memory.dmp

Download

memory/628-2-0x0000000000B70000-0x0000000001C22000-memory.dmp

Download

memory/628-27-0x00007FFADD0D0000-0x00007FFADDA74000-memory.dmp

Download

memory/628-31-0x00007FFADD0D0000-0x00007FFADDA74000-memory.dmp

Download

memory/628-32-0x00007FFADD0D0000-0x00007FFADDA74000-memory.dmp

Download

memory/628-44-0x00007FFADD0D0000-0x00007FFADDA74000-memory.dmp

Download

memory/2088-378-0x00000000004E0000-0x00000000014AE000-memory.dmp

Download

memory/2540-37-0x0000000000780000-0x0000000001746000-memory.dmp

Download

memory/2540-212-0x00007FFADD0D0000-0x00007FFADDA74000-memory.dmp

Download

memory/2540-40-0x00000000025D0000-0x00000000025DE000-memory.dmp

Download

memory/2540-39-0x00007FFADD0D0000-0x00007FFADDA74000-memory.dmp

Download

memory/2540-43-0x000000001D300000-0x000000001D3AE000-memory.dmp

Download

memory/2540-36-0x00007FFADD0D0000-0x00007FFADDA74000-memory.dmp

Download

memory/2540-48-0x00007FFADD0D0000-0x00007FFADDA74000-memory.dmp

Download

memory/2540-52-0x0000000025D50000-0x0000000025F12000-memory.dmp

Download

memory/2540-53-0x0000000026450000-0x0000000026978000-memory.dmp

Download

memory/2540-46-0x00007FFADD0D0000-0x00007FFADDA74000-memory.dmp

Download

memory/2540-42-0x00007FFADD0D0000-0x00007FFADDA74000-memory.dmp

Download

memory/2540-64-0x0000000020AD0000-0x0000000020ADA000-memory.dmp

Download

memory/2540-56-0x00007FFADD0D0000-0x00007FFADDA74000-memory.dmp

Download

memory/2540-65-0x00007FFADD0D0000-0x00007FFADDA74000-memory.dmp

Download

memory/2540-169-0x000000001F720000-0x000000001F732000-memory.dmp

Download

memory/2540-66-0x00007FFADD0D0000-0x00007FFADDA74000-memory.dmp

Download

memory/2744-175-0x00007FFAFF680000-0x00007FFAFF681000-memory.dmp

Download

memory/3232-291-0x00000000009D0000-0x0000000001A88000-memory.dmp

Download

memory/4216-622-0x00007FFAFE550000-0x00007FFAFE551000-memory.dmp

Download

memory/4216-621-0x00007FFAFFAF0000-0x00007FFAFFAF1000-memory.dmp

Download

memory/4912-173-0x00007FFAFF680000-0x00007FFAFF681000-memory.dmp

Download