Resubmissions

15/01/2025, 14:20

250115-rns3zsvnb1 10

15/01/2025, 14:19

250115-rmvkesvna1 10

General

  • Target

    20705626067.zip

  • Size

    13.6MB

  • MD5

    8703d12d7f010947e014077430816c33

  • SHA1

    0c6afe5835a9e45be5069a9b754fde73517ddee4

  • SHA256

    68ce0596f2dd777965778b1f99874ff65b447c01732e67c856523ae0598e121f

  • SHA512

    f2b49c873873e6ab67ab5716a1212f4c210b28f6474619d35ca8b8bb7f6dcbc69d2dfb0f0775c2b2f2960174d8ef41f9b4d565c25bd5f518afb4ba99bb5e6ea2

  • SSDEEP

    393216:p2fGGat93XymCJ3+YBYqUy/2XY2cwSuvw1uHMjE5P:p2eG2VCV+u87Y2Nbvw1uHMo5P

Score
10/10

Malware Config

Extracted

Family

skuld

C2

https://discord.com/api/webhooks/1322398794419015753/NZNEWJwo5JJ1lKwMMwjjMMzRzkgLEEjAnLjtCAVrQHzUKbBfWb1O9aM5Shlyd-Za8Ry1

Signatures

  • Skuld family
  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • 20705626067.zip
    .zip

    Password: infected

  • 437f40de057f8531472991cca6b59bc93e73a898fb26e2b1b22ecf4a64a299a1
    .zip

    Password: infected

  • comet executor/Comet Executor/Microsoft.Web.WebView2.Core.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • comet executor/Comet Executor/Microsoft.Web.WebView2.Core.xml
    .xml
  • comet executor/Comet Executor/Microsoft.Web.WebView2.WinForms.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • comet executor/Comet Executor/Microsoft.Web.WebView2.WinForms.xml
    .xml
  • comet executor/Comet Executor/Microsoft.Web.WebView2.Wpf.dll
    .dll windows:4 windows x86 arch:x86

    Password: infected

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • comet executor/Comet Executor/Microsoft.Web.WebView2.Wpf.xml
    .xml
  • comet executor/Comet Executor/WinFormsApp1.deps.json
  • comet executor/Comet Executor/WinFormsApp1.dll
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/BrowserMetrics/BrowserMetrics-6767B53B-5130.pma
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/BrowserMetrics/BrowserMetrics-6767C100-5D90.pma
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Crashpad/settings.dat
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Crashpad/throttle_store.dat
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/CrashpadMetrics-active.pma
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/CrashpadMetrics.pma
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_0
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_1
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_2
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_3
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000001
    .gz

    Password: infected

  • f_000001
    .js
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000002
    .gz

    Password: infected

  • f_000002
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000003
    .gz

    Password: infected

  • f_000003
    .js
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000004
    .gz
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Cache/Cache_Data/index
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Code Cache/js/271fba2ca5ed7af1_0
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Code Cache/js/4e889ed8af707cda_0
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Code Cache/js/6d8f733d4c0e0eac_0
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Code Cache/js/80097f9974b9e5cb_0
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Code Cache/js/8dce8f5fdd19f871_0
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Code Cache/js/9fb21c2f98539608_0
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Code Cache/js/bfdd0071170555f7_0
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Code Cache/js/index
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Code Cache/js/index-dir/the-real-index
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Code Cache/wasm/index
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Code Cache/wasm/index-dir/the-real-index
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/DIPS
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_0
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_1
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_2
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_3
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/DawnGraphiteCache/index
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_0
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_1
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_2
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_3
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/DawnWebGPUCache/index
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/EdgeEDrop/EdgeEDropSQLite.db
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/EdgeHubAppUsage/EdgeHubAppUsageSQLite.db
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Extension Rules/000003.log
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Extension Rules/CURRENT
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Extension Rules/LOG
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Extension Rules/LOG.old
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Extension Rules/MANIFEST-000001
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Extension Scripts/000003.log
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Extension Scripts/CURRENT
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Extension Scripts/LOG
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Extension Scripts/LOG.old
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Extension Scripts/MANIFEST-000001
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Extension State/000003.log
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Extension State/CURRENT
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Extension State/LOG
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Extension State/LOG.old
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Extension State/MANIFEST-000001
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/ExtensionActivityComp
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/ExtensionActivityEdge
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Favicons
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/GPUCache/data_0
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/GPUCache/data_1
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/GPUCache/data_2
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/GPUCache/data_3
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/GPUCache/index
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/History
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Local Storage/leveldb/CURRENT
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Local Storage/leveldb/LOG
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Local Storage/leveldb/LOG.old
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Local Storage/leveldb/MANIFEST-000001
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Login Data
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Network Action Predictor
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Network/Cookies
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Network/Network Persistent State
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Network/Reporting and NEL
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Network/SCT Auditing Pending Reports
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Network/Sdch Dictionaries
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Network/TransportSecurity
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Network/Trust Tokens
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Preferences
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/PreferredApps
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/README
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Safe Browsing Network/Safe Browsing Cookies
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Secure Preferences
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Session Storage/000003.log
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Session Storage/CURRENT
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Session Storage/LOG
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Session Storage/LOG.old
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Session Storage/MANIFEST-000001
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Shared Dictionary/cache/index
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Shared Dictionary/cache/index-dir/the-real-index
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Shared Dictionary/db
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/SharedStorage
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Site Characteristics Database/000003.log
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Site Characteristics Database/CURRENT
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Site Characteristics Database/LOG
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Site Characteristics Database/LOG.old
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Site Characteristics Database/MANIFEST-000001
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/000003.log
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/CURRENT
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/LOG
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/LOG.old
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/MANIFEST-000001
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Top Sites
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Visited Links
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/Web Data
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/heavy_ad_intervention_opt_out.db
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/shared_proto_db/000003.log
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/shared_proto_db/CURRENT
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/shared_proto_db/LOG
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/shared_proto_db/LOG.old
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/shared_proto_db/MANIFEST-000001
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/000003.log
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/CURRENT
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/LOG
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/LOG.old
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/MANIFEST-000001
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/GrShaderCache/data_0
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/GrShaderCache/data_1
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/GrShaderCache/data_2
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/GrShaderCache/data_3
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/GrShaderCache/f_000001
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/GrShaderCache/f_000002
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/GrShaderCache/index
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/GraphiteDawnCache/data_0
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/GraphiteDawnCache/data_1
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/GraphiteDawnCache/data_2
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/GraphiteDawnCache/data_3
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/GraphiteDawnCache/index
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Last Version
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Local State
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/ShaderCache/data_0
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/ShaderCache/data_1
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/ShaderCache/data_2
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/ShaderCache/data_3
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/ShaderCache/index
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/SmartScreen/RemoteData/customSettings
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/SmartScreen/RemoteData/customSettings_F95BA787499AB4FA9EFFF472CE383A14
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/SmartScreen/RemoteData/edgeSettings
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/SmartScreen/RemoteData/edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/SmartScreen/RemoteData/topTraffic
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/SmartScreen/RemoteData/topTraffic_638004170464094982
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/SmartScreen/local/downloadCache
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/SmartScreen/local/downloadCache_
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/SmartScreen/local/uriCache
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/SmartScreen/local/uriCache_
  • comet executor/Comet Executor/WinFormsApp1.exe.WebView2/EBWebView/Variations
  • comet executor/Comet Executor/WinFormsApp1.pdb
  • comet executor/Comet Executor/WinFormsApp1.runtimeconfig.json
  • comet executor/Comet Executor/bin/Xeno.dll
    .dll windows:6 windows x64 arch:x64

    3a1f9d973bff43051a3daf411f707362


    Headers

    Imports

    Exports

    Sections

  • comet executor/Comet Executor/bin/libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    680b5c239d82da8e527bf24b921948fd


    Headers

    Imports

    Exports

    Sections

  • comet executor/Comet Executor/bin/libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    b14ebe784f458189a17382fee793f658


    Headers

    Imports

    Exports

    Sections

  • comet executor/Comet Executor/bin/xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • comet executor/Comet Executor/bin/zstd.dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections

  • comet executor/Comet Executor/comet.exe
    .exe windows:6 windows x64 arch:x64

    d42595b695fc008ef2c56aabd8efd68e


    Headers

    Imports

    Sections

  • comet executor/Comet Executor/cxapis.dll
    .dll windows:4 windows x64 arch:x64


    Headers

    Sections

  • comet executor/Comet Executor/runtimes/win-arm64/native/WebView2Loader.dll
  • comet executor/Comet Executor/runtimes/win-x64/native/WebView2Loader.dll
    .dll windows:10 windows x64 arch:x64

    f6946d311bccc86e2042a388e375de41


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • comet executor/Comet Executor/runtimes/win-x86/native/WebView2Loader.dll
    .dll windows:10 windows x86 arch:x86

    72229ff546c74d09d9030ca49ce61b31


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • comet executor/Comet Executor/workspace/.tests/appendfile.txt
  • comet executor/Comet Executor/workspace/.tests/getcustomasset.txt
  • comet executor/Comet Executor/workspace/.tests/isfile.txt
  • comet executor/Comet Executor/workspace/.tests/listfiles/test_1.txt
  • comet executor/Comet Executor/workspace/.tests/listfiles/test_2.txt
  • comet executor/Comet Executor/workspace/.tests/loadfile.txt
  • comet executor/Comet Executor/workspace/.tests/readfile.txt
  • comet executor/Comet Executor/workspace/.tests/writefile
  • comet executor/Comet Executor/workspace/.tests/writefile.txt
  • comet executor/Comet Executor/workspace/IY_FE.iy
  • comet executor/Comet Executor/workspace/KavoConfig.JSON