721551b65afc79ef4bdf7f94e27ad3850e73cfefcfe510cb5e27dea2d3b11830

Analysis

user interaction
yes
max time kernel
207s
max time network
213s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
06/07/2026, 12:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
KB.Android.Emulator_0.1.2_x64-setup.exe
Size 5.7MB
Sample260706-pxkrvsft4z
SHA256 721551b65afc79ef4bdf7f94e27ad3850e73cfefcfe510cb5e27dea2d3b11830
MD5 4273d239d57bb52d25304fe00d226914
SHA1 827e66cf6428407b6761c8ea231a73f0bf82de1c
SHA512 06d45118129feb86b549080c978df92fa28b23fe292f88b5b9e4dbb6bd6eaf8dae75fdda8008deb8b3c209124fe45fc3dc95c405c0cdc90d3d31cabbd3e99eff
SSDEEP 98304:tPI+KRPXHcc1knRucZFzEXGC2IApLrrgtPTftPp/alS7CN5+tu+:tPYRfccdKFWGC2Iu3mPjtPpiDzKu+
TLSH
T1565633373D50D8B6EBF690B8CCC29A8A872FEDF85784251EC7705D1C89E84634C8659B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery execution trojan

Malware Config

Signatures

Checks computer location settings 2 TTPs 2 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-4045429996-2364296335-1634900306-1000\Control Panel\International\Geo\Nation	java.exe
Key value queried	\REGISTRY\USER\S-1-5-21-4045429996-2364296335-1634900306-1000\Control Panel\International\Geo\Nation	java.exe

Executes dropped EXE 4 IoCs

pid	Process
956	kb-android-emulator.exe
4416	fullscreen_daemon.exe
6036	java.exe
1080	java.exe

Loads dropped DLL 33 IoCs

pid	Process
4544	KB.Android.Emulator_0.1.2_x64-setup.exe
4544	KB.Android.Emulator_0.1.2_x64-setup.exe
4544	KB.Android.Emulator_0.1.2_x64-setup.exe
4544	KB.Android.Emulator_0.1.2_x64-setup.exe
4544	KB.Android.Emulator_0.1.2_x64-setup.exe
4544	KB.Android.Emulator_0.1.2_x64-setup.exe
4544	KB.Android.Emulator_0.1.2_x64-setup.exe
6036	java.exe
6036	java.exe
6036	java.exe
6036	java.exe
6036	java.exe
6036	java.exe
6036	java.exe
6036	java.exe
6036	java.exe
6036	java.exe
6036	java.exe
6036	java.exe
6036	java.exe
1080	java.exe
1080	java.exe
1080	java.exe
1080	java.exe
1080	java.exe
1080	java.exe
1080	java.exe
1080	java.exe
1080	java.exe
1080	java.exe
1080	java.exe
1080	java.exe
1080	java.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	kb-android-emulator.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Windows directory 15 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5636_292600020\crl-set	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5636_1355637793\model.markov	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5636_1355637793\passwords.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5636_1355637793\test.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5636_292600020\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5636_1355637793\female_names.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5636_1355637793\ranked_dicts	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5636_1355637793\english_wikipedia.txt	msedgewebview2.exe
File opened for modification	C:\Windows\SystemTemp	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5636_292600020\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5636_1355637793\male_names.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5636_1355637793\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5636_1355637793\surnames.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5636_1355637793\us_tv_and_film.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5636_1355637793\manifest.fingerprint	msedgewebview2.exe

Command and Scripting Interpreter: PowerShell 1 TTPs 4 IoCs

Using powershell.exe command.

execution

PowerShell

T1059.001

pid	Process
2560	powershell.exe
1952	powershell.exe
1972	powershell.exe
4560	powershell.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	KB.Android.Emulator_0.1.2_x64-setup.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	java.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	java.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	java.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	java.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe

Kills process with taskkill 1 IoCs

defense_evasion

pid	Process
3388	taskkill.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134278154779123845"	msedgewebview2.exe

Suspicious behavior: EnumeratesProcesses 14 IoCs

pid	Process
4544	KB.Android.Emulator_0.1.2_x64-setup.exe
4544	KB.Android.Emulator_0.1.2_x64-setup.exe
4560	powershell.exe
4560	powershell.exe
4560	powershell.exe
2560	powershell.exe
2560	powershell.exe
2560	powershell.exe
1952	powershell.exe
1952	powershell.exe
1952	powershell.exe
1972	powershell.exe
1972	powershell.exe
1972	powershell.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
5636	msedgewebview2.exe

Suspicious use of AdjustPrivilegeToken 7 IoCs

description	pid	Process
Token: SeImpersonatePrivilege	4544	KB.Android.Emulator_0.1.2_x64-setup.exe
Token: SeImpersonatePrivilege	4544	KB.Android.Emulator_0.1.2_x64-setup.exe
Token: SeDebugPrivilege	3388	taskkill.exe
Token: SeDebugPrivilege	4560	powershell.exe
Token: SeDebugPrivilege	2560	powershell.exe
Token: SeDebugPrivilege	1952	powershell.exe
Token: SeDebugPrivilege	1972	powershell.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
956	kb-android-emulator.exe

Suspicious use of WriteProcessMemory 25 IoCs

description	pid	Process	procid_target
PID 956 wrote to memory of 5636	956	kb-android-emulator.exe	95
PID 5636 wrote to memory of 3956	5636	msedgewebview2.exe	96
PID 5636 wrote to memory of 2804	5636	msedgewebview2.exe	98
PID 5636 wrote to memory of 2804	5636	msedgewebview2.exe	98
PID 5636 wrote to memory of 2804	5636	msedgewebview2.exe	98
PID 5636 wrote to memory of 5404	5636	msedgewebview2.exe	99
PID 5636 wrote to memory of 2420	5636	msedgewebview2.exe	100
PID 5636 wrote to memory of 2420	5636	msedgewebview2.exe	100
PID 5636 wrote to memory of 3608	5636	msedgewebview2.exe	101
PID 5636 wrote to memory of 3608	5636	msedgewebview2.exe	101
PID 5636 wrote to memory of 3608	5636	msedgewebview2.exe	101
PID 956 wrote to memory of 3388	956	kb-android-emulator.exe	102
PID 956 wrote to memory of 4416	956	kb-android-emulator.exe	105
PID 956 wrote to memory of 4560	956	kb-android-emulator.exe	109
PID 956 wrote to memory of 2560	956	kb-android-emulator.exe	111
PID 5636 wrote to memory of 5276	5636	msedgewebview2.exe	114
PID 5636 wrote to memory of 5276	5636	msedgewebview2.exe	114
PID 956 wrote to memory of 1952	956	kb-android-emulator.exe	115
PID 1952 wrote to memory of 1940	1952	powershell.exe	117
PID 1940 wrote to memory of 6036	1940	cmd.exe	118
PID 956 wrote to memory of 1972	956	kb-android-emulator.exe	119
PID 1972 wrote to memory of 1748	1972	powershell.exe	121
PID 1748 wrote to memory of 1080	1748	cmd.exe	122
PID 5636 wrote to memory of 4724	5636	msedgewebview2.exe	123
PID 5636 wrote to memory of 4724	5636	msedgewebview2.exe	123

C:\Users\Admin\AppData\Local\Temp\KB.Android.Emulator_0.1.2_x64-setup.exe
"C:\Users\Admin\AppData\Local\Temp\KB.Android.Emulator_0.1.2_x64-setup.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:4544
- C:\Users\Admin\AppData\Local\KB Android Emulator\kb-android-emulator.exe
  "C:\Users\Admin\AppData\Local\KB Android Emulator\kb-android-emulator.exe"
  2⤵
  - Executes dropped EXE
  - Checks whether UAC is enabled
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:956
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=kb-android-emulator.exe --webview-exe-version=0.1.2 --user-data-dir="C:\Users\Admin\AppData\Local\com.kb.androidemulator\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=956.1496.13432351842665916644
    3⤵
    - Drops file in Windows directory
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:5636
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.kb.androidemulator\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.kb.androidemulator\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7ff97bf8b078,0x7ff97bf8b084,0x7ff97bf8b090
      4⤵
      PID:3956
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.kb.androidemulator\EBWebView" --webview-exe-name=kb-android-emulator.exe --webview-exe-version=0.1.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1808,i,11218134839822132101,17780675305103219534,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1804 /prefetch:2
      4⤵
      PID:2804
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.kb.androidemulator\EBWebView" --webview-exe-name=kb-android-emulator.exe --webview-exe-version=0.1.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1996,i,11218134839822132101,17780675305103219534,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2100 /prefetch:3
      4⤵
      PID:5404
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.kb.androidemulator\EBWebView" --webview-exe-name=kb-android-emulator.exe --webview-exe-version=0.1.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2368,i,11218134839822132101,17780675305103219534,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2384 /prefetch:8
      4⤵
      PID:2420
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.kb.androidemulator\EBWebView" --webview-exe-name=kb-android-emulator.exe --webview-exe-version=0.1.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3472,i,11218134839822132101,17780675305103219534,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
      4⤵
      PID:3608
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.kb.androidemulator\EBWebView" --webview-exe-name=kb-android-emulator.exe --webview-exe-version=0.1.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4492,i,11218134839822132101,17780675305103219534,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2212 /prefetch:8
      4⤵
      PID:5276
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.kb.androidemulator\EBWebView" --webview-exe-name=kb-android-emulator.exe --webview-exe-version=0.1.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=792,i,11218134839822132101,17780675305103219534,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:8
      4⤵
      PID:4724
- - C:\Windows\system32\taskkill.exe
    "taskkill" /F /IM fullscreen_daemon.exe
    3⤵
    - Kills process with taskkill
    - Suspicious use of AdjustPrivilegeToken
    PID:3388
- - C:\Users\Admin\AppData\Roaming\com.kb.androidemulator\fullscreen_daemon.exe
    "C:\Users\Admin\AppData\Roaming\com.kb.androidemulator\fullscreen_daemon.exe"
    3⤵
    - Executes dropped EXE
    PID:4416
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    "powershell" -Command "Expand-Archive -LiteralPath 'C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\jdk\jdk.zip' -DestinationPath 'C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\jdk' -Force"
    3⤵
    - Command and Scripting Interpreter: PowerShell
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:4560
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    "powershell" -Command "Expand-Archive -LiteralPath 'C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\sdk\cmdline-tools.zip' -DestinationPath 'C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\sdk\cmdline-tools-temp' -Force"
    3⤵
    - Command and Scripting Interpreter: PowerShell
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:2560
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    "powershell" -NoProfile -Command "& 'C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\sdk\cmdline-tools\latest\bin\sdkmanager.bat' --list"
    3⤵
    - Command and Scripting Interpreter: PowerShell
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of WriteProcessMemory
    PID:1952
  - - C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\sdk\cmdline-tools\latest\bin\sdkmanager.bat" --list"
      4⤵
      Suspicious use of WriteProcessMemory
      PID:1940
    - - C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\jdk\jdk-21.0.4+7\bin\java.exe
        
        "C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\jdk\jdk-21.0.4+7/bin/java.exe" "-Dcom.android.sdklib.toolsdir=C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\sdk\cmdline-tools\latest\bin\\.." -classpath "C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\sdk\cmdline-tools\latest\bin\..\lib\sdkmanager-classpath.jar" com.android.sdklib.tool.sdkmanager.SdkManagerCli --list
        5⤵
        Checks computer location settings
        Executes dropped EXE
        Loads dropped DLL
        Checks processor information in registry
        
        PID:6036
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    "powershell" -NoProfile -Command "& 'C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\sdk\cmdline-tools\latest\bin\sdkmanager.bat' '--install' 'system-images;android-36;google_apis_playstore;x86_64' '--sdk_root=C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\sdk'"
    3⤵
    - Command and Scripting Interpreter: PowerShell
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of WriteProcessMemory
    PID:1972
  - - C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\sdk\cmdline-tools\latest\bin\sdkmanager.bat" --install system-images;android-36;google_apis_playstore;x86_64 "--sdk_root=C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\sdk""
      4⤵
      Suspicious use of WriteProcessMemory
      PID:1748
    - - C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\jdk\jdk-21.0.4+7\bin\java.exe
        
        "C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\jdk\jdk-21.0.4+7/bin/java.exe" "-Dcom.android.sdklib.toolsdir=C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\sdk\cmdline-tools\latest\bin\\.." -classpath "C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\sdk\cmdline-tools\latest\bin\..\lib\sdkmanager-classpath.jar" com.android.sdklib.tool.sdkmanager.SdkManagerCli --install system-images;android-36;google_apis_playstore;x86_64 "--sdk_root=C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\sdk"
        5⤵
        Checks computer location settings
        Executes dropped EXE
        Loads dropped DLL
        Checks processor information in registry
        
        PID:1080

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

sdkbin-1_02c91cf8-sys-img2-3_xml

Path C:\Users\Admin\.android\cache\sdkbin-1_02c91cf8-sys-img2-3_xml
Size 132KB
SHA256 2078b3d1100dd584d0158d13dffb2f1993b8ad3922bf857dc392a20a41008fde
MD5 e0a5168dd752d9bae8e1392095184a3f
SHA1 de9ce582c30a59d13e2a0563ae4cf1f973cd4d76
SHA512 95fa7c45ebf0fcf76030903b7c2902d6c6ba739e12ea39362bb6b77ade69550ef1b6a340fcabb1db13f23fd30a9fb990fdb37935280780d45d32a6fe196c92e4
SSDEEP 3072:cA6pwBIbODqZWxxx5Oa8s+w/EZDcv6pJr8DsXkSHA:cPptb3ZiFO1wYDzpODx
TLSH
T1B3D374AFB300137306C602767B4AE1DAE62BD03C76AB92516459D15C23B5F3C43BBAD6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

java.dll

Path C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\jdk\jdk-21.0.4+7\bin\java.dll
Size 115KB
SHA256 7dcc28780ffd09f92646f473139cd77e2e4272fc098bfe9210c441711f3a3cd5
MD5 770a59fb146bb687a05cf0ecc861318b
SHA1 81a8bfc7869de6a5a28d777e9fc2c859fcb3d768
SHA512 35c24bd47ce44ca4d3b404f46b430d23054d455bd00d3d1e3ff9a5906f4ba3a93d95f2f75b691e28b2c3b7cb4914bd7478e593c7536a1b151c8fd85b0dfe0fdd
SSDEEP 3072:v5UIhBIAGZD8JQMoQ15yT7+eEayNG3l1qhDrPwGqB:6IhBIPHjQ15yXn/1sw3
TLSH
T1F9B33A5BB3654092F47BB5BC811A854BC37274B11245E30E43A9CAAEEF9FB713D0A781
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

java.exe

Path C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\jdk\jdk-21.0.4+7\bin\java.exe
Size 45KB
SHA256 3b14783c431c5abe073c84a1573908844e4f406b556ca5706dc129ff74069350
MD5 051399a73d2ed44fe041b8506e5c89fd
SHA1 2dd7a059ba19291e7c84792442d2e6d083cb85a9
SHA512 ada4d12cd3871740f4bb946c3beddf942602b30b0612f09380c971a6d1e471aaa7db783616b128cd4c7c9ae954ca38fbe8aae9faed58646568643291121da31f
SSDEEP 768:GUmjFxM5R2TyJ5R3s8D/bkt5Ruz3Vb3Hw5Rn5iRBEsqER:GNvM5RdJ5R3sozkt5RA3Hw5R5iDQER
TLSH
T1E8235D876E183C81F06F84F188A7796645B4BD132BD163FABDD6B20E4C31391A81769F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jimage.dll

Path C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\jdk\jdk-21.0.4+7\bin\jimage.dll
Size 29KB
SHA256 d113b00bca7e620a6b6d2c4094a10b287ecc2930e697d15001c37aeee662bf5a
MD5 e639089b9dbc4f5057ebca8507830a4b
SHA1 200dac63d00c9e95c7338239739ee1ab9d7d0a12
SHA512 ae5b435d97a98fb2f24114a7990585bce06455291fc2e19bf0f02e680bcfb3c77fe4cea5d078765c10423e67d5cdcd6633e7829267a82991b56555df7ad0e1a5
SSDEEP 768:8etTSB+LFFGyyD6ouIR52EyvZ8ln5iRBEC1:QlWouIR5LyR8l5iDV1
TLSH
T10FD27D9ABB645951E567D538C09B9E2BD6B2F5925F10838F0B31024E0F333D07B29B16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jli.dll

Path C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\jdk\jdk-21.0.4+7\bin\jli.dll
Size 84KB
SHA256 8710d0eea0efc28809cc71876dcafd3b6d82b892c56d75f6031636ac2dc5d559
MD5 d3bb06cf4130f40f850c1c59262390ee
SHA1 a7f3b74f81e10bda44074ac8f2c6c6002b21dead
SHA512 a252266286c07359fa7574a14cfd3c99a58095df5dd5dd19feb7091c1a109027bc340b194fefd9e9105f37fe919debb24cbd956f03e907d2377183faf9cf8d9b
SSDEEP 1536:iunMSe1CB5jz+dFDeb5M+UvaRnlYnsNIO9TR7tVZx5iDqV8:b++l+YW1iRlYnsH9TR7LZ3C
TLSH
T1F8837E9613E021E0DEB785B5CAB5950BC3F2F0562761838F13A885E60F637617E1CBDA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jsvml.dll

Path C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\jdk\jdk-21.0.4+7\bin\jsvml.dll
Size 846KB
SHA256 44c38383a1e6f64177b451813a5cfec660c5550139dde457435ada52ad7d6ff3
MD5 88494ed78d72f1b8d0f03505050643d9
SHA1 0f3eba6351475a0998223b40a0fab20cfe4eea50
SHA512 7b9298ea3f12b39248db8eee8478e55f80e95874dc7a8b766bb349e7117b56ed5f119f4e2ac75acfeb1d67b4201a214120fdba1edfbfaf7ab8a44f1dd4c521ab
SSDEEP 12288:LRybOUKnvJNeCs5wHu4rh/V71AVNV+Ssc35:LobO7JN3qwHprhN7wj+9O5
TLSH
T1BF05AF82F81284CDC03134B014FFBD95A92A1CE941BC0E732772AE9D2AFDB467957A74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140.dll

Path C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\jdk\jdk-21.0.4+7\bin\msvcp140.dll
Size 552KB
SHA256 a2931aec337070a30d5919d7e9f1ac2a152eaf7acfa3ef66bd02c2f9490197be
MD5 7f5ceb4270b46bcfcd76a8f5107fe969
SHA1 de458daa3c1d352391caad01c1e24120db693a40
SHA512 7b04f26630df34fbca7b359dd84307378514a47aa1889cf666e0a8c49cff082437dc8f5183d45ca2e66297a3dac81b1affffa056095f9d93f481c1c04122aae0
SSDEEP 12288:uBSNvy11qsslnxU/1ceqHiNHlOp/2M+UHHZpDLO+r2VhQEKZm+jWodEEVAdF:uBSDOFQEKZm+jWodEE2dF
TLSH
T15BC40823B75906A0E195A3BCA1C34316D7F0BC4A8312A3C792FAD65E2F5B7D1673B190
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

net.dll

Path C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\jdk\jdk-21.0.4+7\bin\net.dll
Size 55KB
SHA256 bd11dfa123ad0ea828357590f510e911b9cd1e4150808eefba050f1ed107120e
MD5 89f4b2010ba361a029d0d42810af698b
SHA1 d80d162ea4e480860d8b955422539533df16ec47
SHA512 9cadae7d21a153a3e8a560400bcaff61656ef4cbd28eeaa7beb2515f7acd8e8777c380fa485f31c6ef91adb61549df5429d17bf0ed48edea1fd59f2be607fee7
SSDEEP 1536:C7+Z+29hcbOSwhnqa/QHTEEnUn82mFX5W5iDk/Ol:NfDTJ/CED82mB5SxOl
TLSH
T10A436B4697A854D1F827C67C82A34E16CAB2F4B06210479F03B5C6AE7FE77B23B25741
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nio.dll

Path C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\jdk\jdk-21.0.4+7\bin\nio.dll
Size 75KB
SHA256 78d4e01debeb58e64517ad1b2b42335f608500a85715e47a0164e6dc7a724dfd
MD5 a990a02dd118b58e0832468e13514a64
SHA1 edfe4b785bf61364abe0c8edebe56a0256f96d54
SHA512 26242de3f76b56e22b2b3b6faadaaa5e61abeee7ee93f880fcd59acfac591f00385c6f7e63b2e0d9d4ae7bba4916a6d23520a5c48d6a09a543653fd7b87eb0e0
SSDEEP 1536:bCxcxzmqHiOKMW0yusCAZMVMXRrwCEdo78Vhf5iDa5:bCyxKqHICyujAKVERkCEy2Rd
TLSH
T15A7329A35374859BE86A7138824B5347E632FC114510935F53688B66AF2F2B37E3E783
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

classes.jsa

Path C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\jdk\jdk-21.0.4+7\bin\server\classes.jsa
Size 12.9MB
SHA256 53894d44c29139d3807ddcced522124a91fd1c9e6165e3a78899bc773c8b310e
MD5 dc951382281d68bab255ba216e887efa
SHA1 ac44e237cb3c9f491276407cefd9a92c9e1d99eb
SHA512 854dc8ec0c09172d05982188d8346fd7780c26ff862e8e8e35bfae69eeddab62e40e7242d9c743d09fe1d7c0a46873f9f80a8a59fcc31f63f39acf13be15dd62
SSDEEP 49152:OgKrqaza2ND9Q9vjkPhLuKXDqut67q3UdKHx5O:OUSDKwPhLReucH
TLSH
T1F8D6F917FA8096ABE13D96358CEA07907333F865AB034B072656B3BDEDC35958E474C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jvm.dll

Path C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\jdk\jdk-21.0.4+7\bin\server\jvm.dll
Size 13.2MB
SHA256 1728c3a6b21db0aef2fdeb941f3023a89319fe98692d228f36157a8a3d487b92
MD5 c56aecc3884c33bab7b2e19dc499c556
SHA1 8ac425ea9502ba6725a695c12f29a6842b9dcfca
SHA512 ac274ff18825cc0f9e06e9b7063d4b54e866e3811a68571b86273c419a208a4150d4c6aab8ab2a920f6a03f37052ce1be776c94ffae5461aeb40aab0600b5a7c
SSDEEP 393216:ig2oToh5hcUGaGxwJ8zbv8AlE5AZYVxg2yg5IicakgCeeV9TiLIFTzuw7gXnIaWo:C/uIR0eBtV3
TLSH
T14FD67D1667AA01D1D42BC1788A6B8D1BC7F2B4A54374EFCB11F02A6E2F23BE5553E314
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140.dll

Path C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\jdk\jdk-21.0.4+7\bin\vcruntime140.dll
Size 94KB
SHA256 8a94b86afc8820899d5012dbbc532d314cad54d49ce59d7b4291901df2f210e6
MD5 1ec873bc9494791fc396f1a715bdc7a0
SHA1 0b605452589632f7ff8d381d504ce4e41de411ba
SHA512 7994eb313d60792165169810f0d5ab4ddeeef5972193c9ec97d6f609e277c8a75332d2eb02c7ee9749bf8802bf406e9c212681761e5bb267fc02fdf445e09d97
SSDEEP 1536:wcghDMWyjXZZIzpdbJhKm6Kuzu8fsecbq8uOx5iDlJBd:wVHyQNdbJAKuzRsecbq8uO3WBd
TLSH
T10D936B4A72A542F7D0AAD278C1E31A16E7B1B800877093CF03B54A665F27BF15E3E356
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140_1.dll

Path C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\jdk\jdk-21.0.4+7\bin\vcruntime140_1.dll
Size 35KB
SHA256 6c9527d76b411e45ba9809db2a8133f4da1b93164c0ac601f0f30c99f24f8a65
MD5 8156ea6c7e8bad31ed4f328b6809aab3
SHA1 b3689ceee3d4b3d671bbc1624aac6aefde6f1753
SHA512 1ebaab63f7399dd02a7f691bed6e7342ac7546fbff37c5a3a265f347e2cf10f8cbfa16d8aba3e2ff1a116d431ba9ad5ae4f02221a23b9a9f81846b0473d07727
SSDEEP 768:u0Q4HUcGJZekJSam1BbuBSYcCZbiPn5iRBEemj:ufnDex5izbiP5iDZmj
TLSH
T17EF24AE463B95491E0ABD6B5C8D31E27EA74F8618B60538F0B60815D2F237E0B67E317
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zip.dll

Path C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\jdk\jdk-21.0.4+7\bin\zip.dll
Size 84KB
SHA256 3c2e3448a40a77cd12a9163506a08c5481ab540007d78aed7fb11d43f5df92d4
MD5 5bdaa8bafa655fdb710936e62c1d48b1
SHA1 463c24f9837db970a3189a8dfb4df3092524aa90
SHA512 a7b36c6f75e8402b04936c42ae29e21b13af1b887c9b309a30c85d6a0215c4d8b9eb4bddf59c34857600cc2553d74dc5c9dc435dd1e7e7c7e31b3c19f096a7c4
SSDEEP 1536:wvHSkWnbUY6ijLGBHtr2RKVWjGIOQIOhWNPi5iDzJF:wvHSkWnbz6ZaR6WjkGhWNPO6
TLSH
T195838C959AB05251DAFA95B0C9F34A2EC3B6B02143D0174F539C979A2F136A13F083FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ADDITIONAL_LICENSE_INFO

Path C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\jdk\jdk-21.0.4+7\legal\java.desktop\ADDITIONAL_LICENSE_INFO
Size 49B
SHA256 ebf9777bd307ed789ceabf282a9aca168c391c7f48e15a60939352efb3ea33f9
MD5 19c9d1d2aad61ce9cb8fb7f20ef1ca98
SHA1 2db86ab706d9b73feeb51a904be03b63bee92baf
SHA512 7ec63b59d8f87a42689f544c2e8e7700da5d8720b37b41216cbd1372c47b1bc3b892020f0dd3a44a05f2a7c07471ff484e4165427f1a9cad0d2393840cd94e5b
MD5 SHA1 SHA512

Submit Download

ASSEMBLY_EXCEPTION

Path C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\jdk\jdk-21.0.4+7\legal\java.desktop\ASSEMBLY_EXCEPTION
Size 44B
SHA256 b998cda101e5a1ebcfb5ff9cddd76ed43a2f2169676592d428b7c0d780665f2a
MD5 7caf4cdbb99569deb047c20f1aad47c4
SHA1 24e7497426d27fe3c17774242883ccbed8f54b4d
SHA512 a1435e6f1e4e9285476a0e7bc3b4f645bbafb01b41798a2450390e16b18b242531f346373e01d568f6cc052932a3256e491a65e8b94b118069853f2b0c8cd619
MD5 SHA1 SHA512

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\jdk\jdk-21.0.4+7\legal\java.desktop\LICENSE
Size 33B
SHA256 86e0516b888276a492b19f9a84f5a866ed36925fae1510b3a94a0b6213e69192
MD5 16989bab922811e28b64ac30449a5d05
SHA1 51ab20e8c19ee570bf6c496ec7346b7cf17bd04a
SHA512 86571f127a6755a7339a9ed06e458c8dc5898e528de89e369a13c183711831af0646474986bae6573bc5155058d5f38348d6bfdeb3fd9318e98e0bf7916e6608
MD5 SHA1 SHA512

Submit Download

jvm.cfg

Path C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\jdk\jdk-21.0.4+7\lib\jvm.cfg
Size 29B
SHA256 aa9efb969444c1484e29adecab55a122458090616e766b2f1230ef05bc3867e0
MD5 7ce21bdcfa333c231d74a77394206302
SHA1 c5a940d2dee8e7bfc01a87d585ddca420d37e226
SHA512 8b37a1a5600e0a4e5832021c4db50569e33f1ddc8ac4fc2f38d5439272b955b0e3028ea10dec0743b197aa0def32d9e185066d2bac451f81b99539d34006074b
MD5 SHA1 SHA512

Submit Download

sdkmanager.bat

Path C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\sdk\cmdline-tools\latest\bin\sdkmanager.bat
Size 2KB
SHA256 14866e8b3ede1d90b633042748254bd264e0678f68b9390540e839588dbb47f4
MD5 0cbc41b0d09381a0a8a054378d90d163
SHA1 cce511a45fe04bfa216d82195b45b7675f755ba0
SHA512 d8449fec7ebae25394802be91f9b9197169c02aa8d6fe75893e1a3b7d4f85ce27256f210b965457e9839b5a058ddd4a1d78c34843b442926fd797669a4d884e2
TLSH
T1E441F0DBA753516A7FBD06536B2C4691B62352730F8BB00C706F491CB03234661C2EAE
MD5 SHA1 SHA512 TLSH

Submit Download

annotations.jar

Path C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\sdk\cmdline-tools\latest\lib\annotations\annotations.jar
Size 10KB
SHA256 ee3bfd9cdb5012bdb61520f8654a785577e9bb337e5939c5c6149a446684ee16
MD5 e6623d6c8cd1ef453578803df4ea3733
SHA1 d70720d1aed8e56163636f82782985acfe66eba8
SHA512 89c2f99247d7016e999f5a62e3c0d355c190c44e1763dcb5024f2aaf49db533746b0852175851d16a7d4f65b8deb62a00298a73ee7d1d48c16fb5ee20e7064ef
SSDEEP 192:IKt6rNmgmMRIVg9M52mKnA0yupfteaPDOVDPya58:I06m3kHA7uPeaqS
TLSH
T1FF222B976E2E412CDC6B40B3703CA1A3F955A7A4B057426B2FB098CC3A1ED605746CCF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tools.common.jar

Path C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\sdk\cmdline-tools\latest\lib\common\tools.common.jar
Size 532KB
SHA256 3cf93a2b4d422e751e28cd9c637852f9a1976c6af0093e88cf82c71a1f29a8e6
MD5 4d25b82bda58a1d3546a4ba602120db9
SHA1 d48d2673b89ae927c45a44a35d21f960c0b3404c
SHA512 c1ea2cf6ee6273b2b4f949344be4ff1cc34188960e8da584e77817d70e07887fa128ca286aef63598692b4980c8830d938d19f46d19522f2d72bf75a104adde5
SSDEEP 6144:x7/L8dANvvtjVwRhw5JHUNH2O2ETKjL59nCC+mgRWwEjhAGNuKTDDkKC2JnUw9gw:F/LaAdWwPUNH1rTKH59zdK+AGwKC2JnB
TLSH
T1A9C4E1127F6CDC3DD50B52B9611CE5228CE847ACA42791733B74ADCE28A4CA64396FCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jsr305-3.0.2.jar

Path C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\sdk\cmdline-tools\latest\lib\external\com\google\code\findbugs\jsr305\3.0.2\jsr305-3.0.2.jar
Size 19KB
SHA256 766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7
MD5 dd83accb899363c32b07d7a1b2e4ce40
SHA1 25ea2e8b0c338a877313bd4672d3fe056ea78f0d
SHA512 bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804
SSDEEP 384:ryPbH105/su/xBbxi9hjroa9QG3Y2Wzxv9JMrRuuWPyEQoT49Mozkd1qQsFuHSdx:rimrliZro6pQZdGI+K83GK
TLSH
T1209209B8B52C0532ED0B99F751B03537783E6AA0430AD34174B29832393AD71BF8AE57
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

error_prone_annotations-2.16.jar

Path C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\sdk\cmdline-tools\latest\lib\external\com\google\errorprone\error_prone_annotations\2.16\error_prone_annotations-2.16.jar
Size 15KB
SHA256 2668536a354cda63d19885fcabdecd8d6298aec4260cdfdf34b722e964d60396
MD5 b807805b6d863d9f7a68774c59d2bd53
SHA1 3fdb501b45ba22c6e9c0f2abdb6ed747a48c71af
SHA512 e0bd89bc7b396fecf09cc2fec7de51fb3c5abdcd927b73653cf198a5fd670c7bf62a6be37221eb3f66eaaa190db0d9f0a28b3b0f3085d72d6be516116a4fe452
SSDEEP 192:oNVAPSM/8r/OsM+yi9+NArUtYjNkYLKEuPluPARU0MYeHkOh5wfio3eXpCn5B8WX:wVRq8bOP4r+YerPHMBYf/3QpCv
TLSH
T1CB72E9E7B24D343BFC1B98BB6220102A7839FCE8B91E3B955AD0164D15F0D495F4A78B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

failureaccess-1.0.1.jar

Path C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\sdk\cmdline-tools\latest\lib\external\com\google\guava\failureaccess\1.0.1\failureaccess-1.0.1.jar
Size 4KB
SHA256 a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26
MD5 091883993ef5bfa91da01dcc8fc52236
SHA1 1dcf1de382a0bf95a3d8b0849546c88bac1292c9
SHA512 f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae
SSDEEP 96:6nc3+Tkadi8HKcL9CpLPu6+Lh61QyBcajLHtlqekr7ztyldIag4m85Bx:gc3+WTzpMyBcctlqGgZCBx
TLSH
T1989197F32A8DD4EFE64ACDBB06A1D5157530CA9B410EA1073A9570F40FA1DC44B06ECE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

guava-31.1-jre.jar

Path C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\sdk\cmdline-tools\latest\lib\external\com\google\guava\guava\31.1-jre\guava-31.1-jre.jar
Size 2.8MB
SHA256 a42edc9cab792e39fe39bb94f3fca655ed157ff87a8af78e1d6ba5b07c4a00ab
MD5 e37782d974104aa3b0a7bee9927c8042
SHA1 60458f877d055d0c9114d9e1a2efb737b4bc282c
SHA512 532664e3dd33699bdfb296e355bc58fde77edc019c10f464ae49fe2494a68fd25d1623a9c86bc72830ca9f1354226366ac6f3c09d77be952641e971386a4ebbb
SSDEEP 49152:X+GWMKp96fG5vlDOZCAz9iKJfWYNl/AWWNrgwYjTW82yp1jQq7oWo0ugz61zT:HWFzwGiZCPCDYW6rufDw
TLSH
T174D5D0977DDCD43EFBCBDA335024926E3C180B69D009A55711A42DAD28A6C4D0F26BFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar

Path C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\sdk\cmdline-tools\latest\lib\external\com\google\guava\listenablefuture\9999.0-empty-to-avoid-conflict-with-guava\listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar
Size 2KB
SHA256 b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99
MD5 d094c22570d65e132c19cea5d352e381
SHA1 b421526c5f297295adef1c886e5246c39d4ac629
SHA512 c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f
TLSH
T1C64134B97F91A62EFB8CF9728322B516B43115E3F42E1657766934740E35C009A418D9
MD5 SHA1 SHA512 TLSH

Submit Download

j2objc-annotations-1.3.jar

Path C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\sdk\cmdline-tools\latest\lib\external\com\google\j2objc\j2objc-annotations\1.3\j2objc-annotations-1.3.jar
Size 8KB
SHA256 21af30c92267bd6122c0e0b4d20cccb6641a37eaf956c6540ec471d584e64a7b
MD5 5fa4ec4ec0c5aa70af8a7d4922df1931
SHA1 ba035118bc8bac37d7eff77700720999acd9986d
SHA512 51ea975179f809cb260751d11a513881b643bf016d15949bcb63b57d3c8868a2197e0620ccbaa5739e032797ec6faa3aa6d64606e999fce32930314780ca4115
SSDEEP 192:Z6XofCki4/RcMgS+JFEGFDOMHfYqzQzKRosZDrjq:Zuof/cnFFEuOMHfY3eo+q
TLSH
T13C02F9E33504A1AAFE5E4833679506927C3E50D8A1C92330A9792CB27927C5D7F6E48F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jna-platform-5.6.0.jar

Path C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\sdk\cmdline-tools\latest\lib\external\net\java\dev\jna\jna-platform\5.6.0\jna-platform-5.6.0.jar
Size 2.6MB
SHA256 9ecea8bf2b1b39963939d18b70464eef60c508fed8820f9dcaba0c35518eabf7
MD5 3c345206c4f2243e5d1d7caceb9243cd
SHA1 d18424ffb8bbfd036d71bcaab9b546858f2ef986
SHA512 e55cb2eb60742d4a1de61e5d85b4c71d1a6769ef793b9cb5454ed1775ed593201e3c833e42ea033c99ee256217fde17bac5b93c8f12cbb90795c14956eb31d61
SSDEEP 24576:fX6iOcPDYAC2kwdDUBka05C1DtK2ayNlBdB:SiOSDvCCDUBkaJtK2ayPBj
TLSH
T13BC59623EA63CD62DFB44AF7A2D303451637B6606D0B86BD47C46C91DFA114B5BA0BB0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jna-5.6.0.jar

Path C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\sdk\cmdline-tools\latest\lib\external\net\java\dev\jna\jna\5.6.0\jna-5.6.0.jar
Size 1.4MB
SHA256 5557e235a8aa2f9766d5dc609d67948f2a8832c2d796cea9ef1d6cbe0b3b7eaf
MD5 56892d6f4d27019833fd53b7cc57ec86
SHA1 330f2244e9030119ab3030fc3fededc86713d9cc
SHA512 f250d92a70ef686466d44592a10513420dc6d6ec188e479f4ceb5ee6615505f3aad2941949364c89f09781b3f8bb09e0679f779ce81c1231f714f9a4f7d769ba
SSDEEP 24576:6LAIvJGolQdaB+864NkvCUea8M7FSeOag5hW/XZ7Nb6ndJRWPTgTq3bICEz2lbE:6UIvJGokaB+L5vCU3lsBzIP7qJgPbLIB
TLSH
T10C653333104DD099ED2EC6FB81C637D17C6763B52143606E1EE06D811A3AA2B2BF957A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

checker-qual-3.21.2.jar

Path C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\sdk\cmdline-tools\latest\lib\external\org\checkerframework\checker-qual\3.21.2\checker-qual-3.21.2.jar
Size 216KB
SHA256 7e8554c902b9b839e61396cfe3a64c84ecabfb8eb652c410bfd8e4f5c1a8ece8
MD5 a4ceb77f13e6dcc1cb34d55e3f87f4fa
SHA1 630f15607e9850363c10c81283a65bfbce622146
SHA512 a8fb8591388ecd5bfda44472c2252671b8bf707b973a4281e89a8eff522044bd20c25a8aa4a5d00b3f4f5f72d45db1bdeb1340e585b3efcd770bd1413810cc0f
SSDEEP 3072:aP9UG/TzVtvT3Ak/cP3KRnexPrLCdcNegmVE0+TD:aP9UG7zD3jcPoexaieMdTD
TLSH
T18924836EF9FC48B9E03340B060839812B9941848B395685F2DF06B47DDEEE8546D7BDE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libsdkmanager_lib.jar

Path C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\sdk\cmdline-tools\latest\lib\sdklib\libsdkmanager_lib.jar
Size 41KB
SHA256 b9aba113c0c042b4e61a7d554383cf9acb2570bfe7fb37472b909ae4ede6c28d
MD5 cdfb116cddc424fe3627da6a46615f95
SHA1 3b6d74d19cb0026a50d8c87eff8d14efff0208c9
SHA512 d66e0061b87129e2ea1c6b924065688ad4ee9f2f66a64549be379466e93a2a6556e52294d0aef8835e3939cc2a3ef10619160692ac1612c424e93b48d5d7762b
SSDEEP 768:8yo1n0uTf+02TOKxQs0HP97ejsz2zEXVkU4eX5HECb+2ZVftS/PFW:K1n0uTETZxAH1KjsAYX5HEi+AVft/
TLSH
T17913BE277B7C5C3ADE0F92767536E220B888062D54276017627018EC986EF4E83D3FE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sdklib.core.jar

Path C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\sdk\cmdline-tools\latest\lib\sdklib\sdklib.core.jar
Size 1.4MB
SHA256 30356f6250dfb627c2eed4f6b52681c50fc6f7c108410b29e8c85985a729b1c7
MD5 227abaa2634537e87fd0f484a2e81b28
SHA1 002f40f18d4c5f6c954a462e0ce5f163140cb209
SHA512 1eae48d27edfedebd9fc9b0c7a2ae2d6c5efeec05e470444dfe7d3e845dacd8c64dd76b956c85c018631354bf611bfadc5f28cf1723b26ed0f6e71ede7d48432
SSDEEP 12288:GrGk68NPXOFpcHIenBZngvDkmInugW1BDzLqfbUbrFHlLFXlao7LN5A4Hr404wE7:BkAAxuAQHIvbWna
TLSH
T1F7654B44BAF09E30C887087AF8A5690EBF78857B70245590B5CC4BE82F91E4467F7BE5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sdkmanager-classpath.jar

Path C:\Users\Admin\AppData\Local\KB Android Emulator\android-sdk\sdk\cmdline-tools\latest\lib\sdkmanager-classpath.jar
Size 2KB
SHA256 32374d527d254b985e4ac58891ca522be9779eaeb55d02fc654cb9a16c531c91
MD5 6c7511b8dbd8a83bcd766cc214c2ab91
SHA1 c655588a37c3bd7473d71a0b9f9c3a18fbaefb5c
SHA512 a9ebc7045dc1c6ae71f4dc89e2cbd1bd22157f23972d42dcaf6b88d2c17f57cbd241f4706a2e661049bd8b7171f74f0c7ae12febc4dfd699c79a6ba81954f8b5
TLSH
T11551D06353411730AD838C63E93071E5E0746A8AE0D7EEBCDAAD51422AFF64543F105E
MD5 SHA1 SHA512 TLSH

Submit Download

kb-android-emulator.exe

Path C:\Users\Admin\AppData\Local\KB Android Emulator\kb-android-emulator.exe
Size 19.7MB
SHA256 ca322e53008372d17ae739031ae8759208fc72d905c1e7fa749cad642d56a4a1
MD5 284ba29230a5d9ae70218e812f1107ce
SHA1 4aeb294f345e26cb4a8ae94832d58deea437eeae
SHA512 a5a84e98cca31e60cd5ecf27fc4eff496358e56fdd83d823289fedcd862e9a4ed10d37811838b462e924a37abc3d4c9f667459c722f9ba0b1e56493d9619ee28
SSDEEP 196608:eprpYYPWiuWFI3sBjnrtJUW3/c0zvLF7dNEKRNQD74QC:mYYPWiuWFI3sBjnr4ejzzXNHNWjC
TLSH
T1392708257A5B996CD04AC47483478A720A3130DB1B39B9FF549892383F6EBF46F38359
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

powershell.exe.log

Path C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\powershell.exe.log
Size 3KB
SHA256 03ef59b8353eae626d77544758a4336849dac47a7afa30668ca67b48efd8d6ed
MD5 68885a588c3a18af3231775c1ce60817
SHA1 decf1b996efb13f99861bd3d95eccd1beba975b2
SHA512 b07ed2e47ac7850fa22eca8c5584532ab7c3a49f871bc5d4214bf879d5e2a1b1895ae55e7ea792023fcf1f462b8c14ee22d0e1dc993d28fab9c48c328a8f782a
TLSH
T1B871ED313275B0E4C9567F47192819C063BF8385FA98AF5CB65C621EDA2740B9F222F3
MD5 SHA1 SHA512 TLSH

Submit Download

StartupProfileData-NonInteractive

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
Size 1KB
SHA256 a4de3e3d1a52543866ac55112cfe2ced44ab1c570496c98d67ca80d9d063e701
MD5 cc007ae3d958096e92e4efe515360a08
SHA1 7fe7788a6eea4f425436a35db914effd661e5b10
SHA512 1d96ca7cb29d2304bbe7e770b02a195f7002ac983066bac21a303ad40478d1a845307cef7e9e5a4779cbec778a8caca4489f5e66a5888a7bf986f7ffe551597a
TLSH
T126319927B3DCC8E4C885463B009E9D2076B6D3C381DA8EDB7BC8D608A17F688CB20190
MD5 SHA1 SHA512 TLSH

Submit Download

StartupProfileData-NonInteractive

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
Size 1KB
SHA256 96cf07932644e4ee78525349f8bb48c058f721501099c88219e792d75f259cfb
MD5 06beb671025589e050d2b020f5766838
SHA1 db1e5b58d854ba64f8f9ec67965cbd90faf83449
SHA512 912e918d8dd5b3db12b2736f5af4b971a05a546bb3217eef0821c5623975ea1680e3ae433e31c2e038f998cd698b1b46b0fd761e0a852b9920c8488c70f2f0d0
TLSH
T1AB315727B399C9E4C989463A009D9D6076B693D380DA8EDB6FC8D608A07F588CB24590
MD5 SHA1 SHA512 TLSH

Submit Download

__PSScriptPolicyTest_cf5rkgcy.qch.ps1

Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_cf5rkgcy.qch.ps1
Size 60B
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
TLSH
T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
MD5 SHA1 SHA512 TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsoDCA6.tmp\System.dll
Size 12KB
SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
TLSH
T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

modern-wizard.bmp

Path C:\Users\Admin\AppData\Local\Temp\nsoDCA6.tmp\modern-wizard.bmp
Size 25KB
SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
TLSH
T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsDialogs.dll

Path C:\Users\Admin\AppData\Local\Temp\nsoDCA6.tmp\nsDialogs.dll
Size 9KB
SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
MD5 8f0e7415f33843431df308bb8e06af81
SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
TLSH
T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsis_tauri_utils.dll

Path C:\Users\Admin\AppData\Local\Temp\nsoDCA6.tmp\nsis_tauri_utils.dll
Size 33KB
SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
MD5 948eaa3cb78c2dcdd9eb1ab120ae0f65
SHA1 75197fee3c6a814fe035788d1c34ead39349b860
SHA512 f7c511e8c73ef6ee9b72c88cd73b2d454a6ffc12144118df2276ea3f5c34175df0d9d15a435035575ca2b171789fe348d7a9028b702b47dda749ee17e03ae7c1
SSDEEP 768:K/wOD4gzTVpAVk2h5Rsekk55aCukBFKpnp0jdhK7W+qVG:8wODZzTrAV5Oevq4DtXHVG
TLSH
T188F24A48FDC57EBAE2CF05710809467E4A6FC8081700C96BE3722EA3D5A67329ED525F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.kb.androidemulator\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 49d7f1da3653ef131b0e9714c0856b967c883cef6fd93c5390bdcac101fa767a
MD5 49a8512588699fffc02ec681b66431b1
SHA1 19bc509cf98dfcec46d5cb35f7889efc74a06c8e
SHA512 68ecae48c575dfe5047310d4bf7730d2e4a283f8271651197a9e3a8fd5228c928242771300bb1014eb92c401a9a08ec0e8058e085bee92211adbe02e27e7b231
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.kb.androidemulator\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 76eece88f97f98f687df5bfeae678daca2cf9479e8f1161910dbc707bc38d4e3
MD5 bee7cff5ddb33853ff1db0337bb93863
SHA1 dcec9a4db77c916197ded30a3b59e4fec141be7f
SHA512 f80740dc3d37a5b0264e5cdcf667df96e58e8bc686bf76684317f52c48b6a43601374cabfa3dac1b665926ff8b29d2b90c34b5869141b898e7b79b5a4b7ba874
TLSH
T16BD0241333434135C01030330043750D0540D71F40474105743CD51F7F4C0D00D13C41
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.kb.androidemulator\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.kb.androidemulator\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 8f0ed4a496761987192114c78e8afa7b123dee7c69952a7ecf656b53bc85e2d9
MD5 6deb635ed891c7010f4120460cdd93b1
SHA1 07df868aa282950616785a2d75706b50164a25da
SHA512 b66cc7d5ce6c4af46a288e549b5a812c4d42ddd6f99e90ef938a9d08c0d0e56d9a7a4e8a3513b1580b3c7829e4664436482b6a8839fff7dee3502edbd3322e81
TLSH
T148A0022562840143D695137455D202D13674C83602174F724DE108648CB538957418A1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59b1d2.TMP

Path C:\Users\Admin\AppData\Local\com.kb.androidemulator\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe59b1d2.TMP
Size 48B
SHA256 7b2b2e08393d32ba4e15544803d2708886ee928558507009af56b3adb4dcbd55
MD5 2c19eed745045713f840edc3eb055144
SHA1 11b1cfe4273c48563bd5594ec79643aef01ad0ad
SHA512 a35a9fae41b316ec3e3ea9504b31fcf4958d3e5eaffef68b95bdbd32bb12af7d0ff4c81965dc1816fb8c94c5e37b71292cb14c0d1bbf8fe47830180c3af35a31
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\com.kb.androidemulator\EBWebView\Default\Extension Rules\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.kb.androidemulator\EBWebView\Default\Extension Scripts\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\com.kb.androidemulator\EBWebView\Default\Network\Network Persistent State
Size 821B
SHA256 9fb79cc3ea553266e68783a0290a16629072326e06cc8a85db836b652a26db94
MD5 8c58c50ded897e50cdae3b8b7a80d60e
SHA1 8a4f068a79c982707524bafec1a0849fb46d5988
SHA512 d2344c593b4961167f9e1c4def380a28cadf3cb79b1c9f4db319e0782291c8e71438daf9aa37729ee5ed34ce3b03d89b378a174fb9bb9728b39502b6f7a0075f
TLSH
T178018EA2C3D4C67D8A5117E427347827CD2E091992283D37CDEAEBDA57E1475D21060F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5a7466.TMP

Path C:\Users\Admin\AppData\Local\com.kb.androidemulator\EBWebView\Default\Network\Network Persistent State~RFe5a7466.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\com.kb.androidemulator\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.kb.androidemulator\EBWebView\Default\Preferences
Size 6KB
SHA256 de91a04083cad9ec5885b1b31be1025012bc9202ef2d96b297a57c71da4d2d34
MD5 34a87fbc9451513ee4584d13b81fa16c
SHA1 b92c59061a4ae68479ce1ca65c05056b0fedc073
SHA512 3f186279c28bbcbe00fd7019f9feba6dc4e92c3f27a626831ecfca39506518a3a9eefbffdf84a095390a66ec879f5f6445c6bc1b4b1ea57671d7a9338c001d18
SSDEEP 96:stEY05el18b9effkZ8i0vhEAktKm/7qx+WVHMSm+uecJ6H1iYsQjq+g4bMOB:stEY0gRfMZ8paLH/S+WiT6HwYs3ebMC
TLSH
T193E1B8435F2869774CC7F619BA35BB12E6FA102265D50E98EBFC8A1C05E76CC630790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe59fb00.TMP

Path C:\Users\Admin\AppData\Local\com.kb.androidemulator\EBWebView\Default\Preferences~RFe59fb00.TMP
Size 6KB
SHA256 487dae60be2f0df59b1b0f2df1b3a239fe422e5eacbbde7bab10093f66149658
MD5 f96e767cb912f81b35ffd48c7c3adf3b
SHA1 75f0caa79e391c6007db8ea025bec3bef0c33a59
SHA512 53a3defaba6efbd59dc4283c9a55f77b7ed252afbd8f9224c49bbb2efeb0e494c14bc01fc1cf5831f2645472985ffd1049aeb2c97bc3751c46b9fda4ee556995
SSDEEP 96:stEY05el18b9kffkZ8i0vhEAktKm/7qx+WVHMSm+uecJ6H1iYsQjq+g/bMEB:stEY0gHfMZ8paLH/S+WiT6HwYs3hbM8
TLSH
T1DDD1C9435F2879774CC7E219BA35BB12D6FA102166D50E99EBFC8A1C05D76CC230790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.kb.androidemulator\EBWebView\GrShaderCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.kb.androidemulator\EBWebView\GrShaderCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.kb.androidemulator\EBWebView\GrShaderCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.kb.androidemulator\EBWebView\GrShaderCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.kb.androidemulator\EBWebView\Local State
Size 1KB
SHA256 c5756d30925e6ca38ea0a6ba269a0eed4250831a7b069cb05da254976f9f5163
MD5 01444a99824cb75bd82ccdfed739d95d
SHA1 f92c5cef695873800c4a8e6edc743d2f14feaf2c
SHA512 e8728069c5406e578ed01f7f21caf7723aa3e45927aeedc6c346f644a1859246b92417291554fe5b47770a11141d13675f7bad3ea58bb5797e1e0ad6599863ae
TLSH
T1C83182F3E09067324EC6A29675933A939E71606AC2529F9891EE0B0803D72CCD52AD33
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.kb.androidemulator\EBWebView\Local State
Size 2KB
SHA256 525b07431284ef6563890b11d5b7851f0ea86954bff59734de788181f5d5466f
MD5 c36e22f760c3538c2416944fcccbb81b
SHA1 033e6aac8341f93fd65e59bfc29ff39a27db18bf
SHA512 53f16138f7c923440d75fe4befd56ee1a9cdf87e37dd3cb8b661ca73d65273842c186cd618c51d0164ab77f7dd680d3cdbe2ce025ec68bbb975ccb712c6bc884
TLSH
T13251A5B3A804A6378AE3C6447D963F23DE356166D7922FA085ED0F1803DB78C2302C27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.kb.androidemulator\EBWebView\Local State
Size 16KB
SHA256 17c0139ca1ae8ce2253f17854679cc095d63f6b794d731b61c4dd6e90f5f2556
MD5 bd624dafa91c3d987e73d1905c20ff9a
SHA1 820a680a0565d22f4d34cbba39d307d17130e5d8
SHA512 713a387a32bb37f69e99020679a376bfad8f5926e9a564f39c7b213d8276a23d7cfba141c1b9cda45e8c17b4dc405a2e6fb3520e3e5caaa09e1b82e28f6f0a4a
SSDEEP 192:zNBsrSABD6KZenoX+pshLTGbdna37W6h6DWYP9E4Y53yJGPa/a7vnNbY7ooDUh5d:z7srv+89zHqlDNP9oid6NbEHxaFvNX
TLSH
T1E8728E33A428A6374EF29949F8866E177F78609A81C21BE4D9D90F4E43DF5C92317E13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.kb.androidemulator\EBWebView\Local State
Size 3KB
SHA256 75b269479ce9b376a653cae3b328e0489e54d77f8fcfbdeb89e76e12572eaf9b
MD5 1f4ad021a775d5e164a7e644a1016492
SHA1 35da518b11057617993d50df08d3e3976088012d
SHA512 ffaff44bbb17244ecfb7272fd8bbaa3216f584298aead3e91148d6a868a024fc2fa257959833e1ac0efed25801e4bf943c2d70d263a2d10ac8d92a3b54f80be2
TLSH
T16B719477A864A5374EE3DA44BDC62B12BAA56127D6D23FA5C9EC0F0C02DB3C81342C17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State~RFe595e14.TMP

Path C:\Users\Admin\AppData\Local\com.kb.androidemulator\EBWebView\Local State~RFe595e14.TMP
Size 1KB
SHA256 2339bbe57be05d33146e9de38d1a946147154a1f0eea22e7e95d0117fa4e8030
MD5 05d17efefce0e52be9921846cb072563
SHA1 ed61b7902188f416ef256414b9d694b7a1146210
SHA512 c76c649f1c2c287b82d0c3b8ab816c1b1ae86f7f88e8d04e244d2e3f5f891a5848f7a0a862fa64525e7c94c1c95887ede650d65c73ab934b823b26b349ce964f
TLSH
T1852184F3D48466329EC6D565B5A37AC71E70A16AC2519F58C1EE070907CB6CCC627D33
MD5 SHA1 SHA512 TLSH

Submit Download

fullscreen_daemon.exe

Path C:\Users\Admin\AppData\Roaming\com.kb.androidemulator\fullscreen_daemon.exe
Size 232KB
SHA256 bb86b73e95bc9986ca81ed96eb339e6b030d93b959f7e7db7262dc7a42863cfe
MD5 b76099a8feb8872ebd4be6e5e4e231fa
SHA1 d3a792e33c9e097cef10c31c1690a366e13d38bd
SHA512 854f47c1426daf314173b835f7e0dabba77aab834123fc9e5397337cf1302109cdf690f286e6bfb2a2ae6b57ef808dfd120abe8b4081ec4a9b64ddd06d092f08
SSDEEP 3072:BF9SZ1/G52Y4Df1QtHsoGpRX/jQcVzMqLu1wDA0V/+VUYp0yFpP6wsZB6uQ6qlCu:BF9w1+52j5QaDWqLcwDmVxpzvZx6eC
TLSH
T1CF348E1672950CFCE967C03D82558652A533B8990B32DEFF0364423DAF67AE65E3CB60
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2420-155-0x00007FF998690000-0x00007FF998691000-memory.dmp

Download

memory/2420-156-0x00007FF998E10000-0x00007FF998E11000-memory.dmp

Download

memory/2804-77-0x00007FF998220000-0x00007FF998221000-memory.dmp

Download

memory/3608-144-0x00007FF998220000-0x00007FF998221000-memory.dmp

Download

memory/4560-292-0x0000028FA8570000-0x0000028FA8592000-memory.dmp

Download

memory/4560-301-0x0000028FA8A20000-0x0000028FA8A2A000-memory.dmp

Download

memory/4560-300-0x0000028FA8A60000-0x0000028FA8A72000-memory.dmp

Download