Analysis
- user interaction
yes - max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
10/08/2026, 02:50
Behavioral task
behavioral1
Sample
KikoFluEdge-windows-setup.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
General
- Target KikoFluEdge-windows-setup.exe
- Size 21.6MB
- Sample260810-dbspsszdnf
- SHA256 ad1347e83857cd6d1d1e4a362c08fdd295f390606d5274ca37b580c76340efea
- MD5 f4539d75141f8e6e9cf52f0eca5f9f85
- SHA1 55d396d6dd429540f4155a8aafaf773f79a08cd8
- SHA512 7d261c9cf963533ff6c226ee9e954e0943fde66a2b39a4aa1a62da27603729802daf1619bbe6ce5aa6f046509a6118e8bcea8266925e2d073b47bb8cd673af5b
- SSDEEP 393216:cEBNPvWievtEgBcm21EO0hxX5wk+4EPkiuEroDQJSIcFbXugvmHs/Ius:DBNnWt2ccm2eOuxJwD4EsJEoDQt0Tugi
- TLSH T17337333BE18B653EE06E0A367AB2A114443B7A6156134C5696FCF88CDF351711E3EB83
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Executes dropped EXE 2 IoCs
pid Process 2224 KikoFluEdge-windows-setup.tmp 744 KikoFlu.exe - Loads dropped DLL 18 IoCs
pid Process 744 KikoFlu.exe 744 KikoFlu.exe 744 KikoFlu.exe 744 KikoFlu.exe 744 KikoFlu.exe 744 KikoFlu.exe 744 KikoFlu.exe 744 KikoFlu.exe 744 KikoFlu.exe 744 KikoFlu.exe 744 KikoFlu.exe 744 KikoFlu.exe 744 KikoFlu.exe 744 KikoFlu.exe 744 KikoFlu.exe 744 KikoFlu.exe 744 KikoFlu.exe 744 KikoFlu.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Drops file in Program Files directory 62 IoCs
description ioc Process File opened for modification C:\Program Files (x86)\KikoFlu Edge\dartjni.dll KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\data\flutter_assets\shaders\is-HJKT216QYQ.tmp KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\is-NIYRGDIXL2.tmp KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\data\flutter_assets\assets\icons\is-KJKZ71U2GU.tmp KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\data\flutter_assets\packages\cupertino_icons\assets\is-9CY5HQTKV4.tmp KikoFluEdge-windows-setup.tmp File opened for modification C:\Program Files (x86)\KikoFlu Edge\dynamic_color_plugin.dll KikoFluEdge-windows-setup.tmp File opened for modification C:\Program Files (x86)\KikoFlu Edge\whisper_ggml_plus.dll KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\is-65ZM7CXNY0.tmp KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\is-P0FAJRSSD4.tmp KikoFluEdge-windows-setup.tmp File opened for modification C:\Program Files (x86)\KikoFlu Edge\KikoFlu.exe KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\data\is-CNELCDLBY5.tmp KikoFluEdge-windows-setup.tmp File opened for modification C:\Program Files (x86)\KikoFlu Edge\media_kit_libs_windows_audio_plugin.dll KikoFluEdge-windows-setup.tmp File opened for modification C:\Program Files (x86)\KikoFlu Edge\libmpv-2.dll KikoFluEdge-windows-setup.tmp File opened for modification C:\Program Files (x86)\KikoFlu Edge\window_manager_plugin.dll KikoFluEdge-windows-setup.tmp File opened for modification C:\Program Files (x86)\KikoFlu Edge\sqlite3.dll KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\data\flutter_assets\assets\icons\is-T8P7DOFOHR.tmp KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\is-ITWY9DMCI0.tmp KikoFluEdge-windows-setup.tmp File opened for modification C:\Program Files (x86)\KikoFlu Edge\desktop_multi_window_plugin.dll KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\is-H4QO5VLSUO.tmp KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\is-YU6DP5GJVJ.tmp KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\is-T1SGTAXNZU.tmp KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\is-0IM39MOCP5.tmp KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\is-41ANLHZH52.tmp KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\is-JDY7FLZ2WG.tmp KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\is-TJJV90QDYL.tmp KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\data\flutter_assets\assets\icons\is-JNX591BWBX.tmp KikoFluEdge-windows-setup.tmp File opened for modification C:\Program Files (x86)\KikoFlu Edge\flutter_secure_storage_windows_plugin.dll KikoFluEdge-windows-setup.tmp File opened for modification C:\Program Files (x86)\KikoFlu Edge\screen_retriever_windows_plugin.dll KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\is-TDND0323HB.tmp KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\is-7B8JAHYC1C.tmp KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\data\flutter_assets\packages\media_kit\assets\web\is-94EIINLHY4.tmp KikoFluEdge-windows-setup.tmp File opened for modification C:\Program Files (x86)\KikoFlu Edge\local_auth_windows_plugin.dll KikoFluEdge-windows-setup.tmp File opened for modification C:\Program Files (x86)\KikoFlu Edge\share_plus_plugin.dll KikoFluEdge-windows-setup.tmp File opened for modification C:\Program Files (x86)\KikoFlu Edge\flutter_windows.dll KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\unins000.dat KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\is-3V1DL5QST3.tmp KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\data\flutter_assets\assets\icons\is-WPF2KKIOXN.tmp KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\data\flutter_assets\packages\whisper_ggml_plus\assets\models\is-PVA8AEGEO8.tmp KikoFluEdge-windows-setup.tmp File opened for modification C:\Program Files (x86)\KikoFlu Edge\unins000.dat KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\is-DV9CKO1GLJ.tmp KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\data\flutter_assets\is-62WYE6F59V.tmp KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\data\flutter_assets\is-W3V7TORHCB.tmp KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\data\flutter_assets\fonts\is-6KN4MHXO2V.tmp KikoFluEdge-windows-setup.tmp File opened for modification C:\Program Files (x86)\KikoFlu Edge\connectivity_plus_plugin.dll KikoFluEdge-windows-setup.tmp File opened for modification C:\Program Files (x86)\KikoFlu Edge\permission_handler_windows_plugin.dll KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\is-YHDBWI514Y.tmp KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\is-KVDBRBW7MQ.tmp KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\data\flutter_assets\is-YC5V6FQ5SN.tmp KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\data\flutter_assets\is-T5EXULO607.tmp KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\data\flutter_assets\is-IBNURONVF0.tmp KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\portable_config\mpv.conf KikoFlu.exe File created C:\Program Files (x86)\KikoFlu Edge\is-N6G8GHZ4EK.tmp KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\data\flutter_assets\assets\fonts\is-7VZXV95HK6.tmp KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\data\flutter_assets\assets\icons\is-3EB43NNLS1.tmp KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\data\flutter_assets\assets\icons\is-VFOOPKU14I.tmp KikoFluEdge-windows-setup.tmp File opened for modification C:\Program Files (x86)\KikoFlu Edge\url_launcher_windows_plugin.dll KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\is-8GYJL6JDZ0.tmp KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\is-5KWIGZLADI.tmp KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\data\flutter_assets\shaders\is-PUYVLDU9ZR.tmp KikoFluEdge-windows-setup.tmp File opened for modification C:\Program Files (x86)\KikoFlu Edge\smtc_windows.dll KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\data\is-Q1KN0LROJF.tmp KikoFluEdge-windows-setup.tmp File created C:\Program Files (x86)\KikoFlu Edge\data\flutter_assets\packages\wakelock_plus\assets\is-TAKHV3AILU.tmp KikoFluEdge-windows-setup.tmp - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language KikoFluEdge-windows-setup.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language KikoFluEdge-windows-setup.tmp - Inno Setup is an open-source installation builder for Windows applications. 3 IoCs
Inno Setup installer
resource yara_rule behavioral1/memory/3936-0-0x00000000006E0000-0x00000000007C9000-memory.dmp innosetup behavioral1/memory/3936-27-0x00000000006E0000-0x00000000007C9000-memory.dmp innosetup behavioral1/memory/3936-146-0x00000000006E0000-0x00000000007C9000-memory.dmp innosetup - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2224 KikoFluEdge-windows-setup.tmp 2224 KikoFluEdge-windows-setup.tmp - Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 2224 KikoFluEdge-windows-setup.tmp 744 KikoFlu.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 744 KikoFlu.exe - Suspicious use of WriteProcessMemory 2 IoCs
description pid Process procid_target PID 3936 wrote to memory of 2224 3936 KikoFluEdge-windows-setup.exe 86 PID 2224 wrote to memory of 744 2224 KikoFluEdge-windows-setup.tmp 95
Processes
-
C:\Users\Admin\AppData\Local\Temp\KikoFluEdge-windows-setup.exe"C:\Users\Admin\AppData\Local\Temp\KikoFluEdge-windows-setup.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:3936 -
C:\Users\Admin\AppData\Local\Temp\is-UIT6HGT9DT.tmp\KikoFluEdge-windows-setup.tmp"C:\Users\Admin\AppData\Local\Temp\is-UIT6HGT9DT.tmp\KikoFluEdge-windows-setup.tmp" /SL5="$1101F4,21432960,893952,C:\Users\Admin\AppData\Local\Temp\KikoFluEdge-windows-setup.exe"2⤵
- Executes dropped EXE
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:2224 -
C:\Program Files (x86)\KikoFlu Edge\KikoFlu.exe"C:\Program Files (x86)\KikoFlu Edge\KikoFlu.exe"3⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:744
-
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files (x86)\KikoFlu Edge\KikoFlu.exe
- Size 334KB
- SHA256 a6543c739192d309c97ccd89ef2965bc4795fffe2ef8054108facb893e0ad4e7
- MD5 6c97ecb1ae6074075bbd7969f9ba17e7
- SHA1 d7b6726fcac6a953ab7f7f278f254e161a07f086
- SHA512 d120d6396d23e86899fdf545669120e4e1a01df1db5e8159c6a2031ce55822b986d247d5a298907145dc727f366de5ca94bafeb3cf6516d81854aa9cb6b48181
- SSDEEP 6144:IHXkVkNmpjlmpSi611JgblQh3aToYuKCj0rwj0UeCe7L+6rURqwnQAw6cjm3tzX3:Q0XiOoQh3aToJ/j0rwj0UeCe7L+6rURt
- TLSH T13F747015A93490BAD195867CCDC24984DF237C451B6C5ECBA7A0FA9A0EF1590FE3B23C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\KikoFlu Edge\connectivity_plus_plugin.dll
- Size 95KB
- SHA256 701428209f9c70bcee667c38a416255897632f90474e51e577a52bb4522c1107
- MD5 0c0e764b8b184765864a971f56764233
- SHA1 76bf2f122067dcf5c382e6e02d0e85df0c3d39c3
- SHA512 245ef03aa0a878bdd8acd0f064d178a42d0f953638c72edb1b870b3d859c509aec0e5a91bf1a40868eaebe86944d5c083e0a5283c96d9651ade010bb98ba8c30
- SSDEEP 1536:IZ2SeS4fNMwi/uIIxLNoQrJaXTvSzuaa2IDB5v316i4zX7:ICrMwi/uICDKTsuWcB5v316iar
- TLSH T14CA31A2ABA59406FD21AD4F8CA574D05CB72F89607A1A7CF27900ADF0F27BE50E3E511
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\KikoFlu Edge\data\app.so
- Size 18.2MB
- SHA256 65ec7d200d79436d3dde5269a33f6c3634b719003e809c23ed336b9a91d240cd
- MD5 b36df545f5c13affce9d127d9666db10
- SHA1 a44879fd270372280898e0c10a6bbb99c245a6ab
- SHA512 bceef3bc0616abad787bd44a38ee7a43c6f97bfff5d28de8f30a47b8717ed9ac09b14206cc5b27f34cc6acb4da698e80b7a50cc5b59057bf4a6bfc6524b914ec
- SSDEEP 196608:bCWVlJS4MIrVnliF3vyBRPRxLMfU4nSPSOTu5H91FvQU9L8ccx+:bXJ5rV3UUDPSOTS9v
- TLSH T13C17FA97C0A44360F462F737B75F2EE26E1479E84E34B64A0B854A653D9BDE0478E233
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\KikoFlu Edge\data\flutter_assets\AssetManifest.bin
- Size 1KB
- SHA256 627e17381952015f07dc029d9b3180d28dc1adb86f55a0cfba11e7e5fd07917d
- MD5 44c27318ef07954cb0a6a13e7e60a06f
- SHA1 64356d343d72c4f723a3db90f19b7aa03ef0f684
- SHA512 ac042cbc840cdac311f17991939eead9a48273d6971a00f0b5dec79106c26853258695ab722ee2ce7d32b5c1e989182b29d07d9763b0d256a759a486aa525734
- TLSH T18011D389563A998B2B04BC0C18A140A63C074F6CEC14EAEE33B44146F4F5C1E68BFA77
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\KikoFlu Edge\data\flutter_assets\FontManifest.json
- Size 282B
- SHA256 b080449b6ae93a691df4f2fb5e25cce5ee1416bdeecf3023134ddc596ec5433c
- MD5 e03457f877304770c4d2e85adc3bee49
- SHA1 a359c97caf3bce2c46c4aab7cb0fa69c4837a7e2
- SHA512 c7d9ff25d21a83cc719b83edfbb83ca5a5cf6ec3323adc2d9457dc7aafa034b0ce81cbc6cf0c38912674323ab3f0b0889c390111274784211359894f018463c2
- TLSH T136D0124F59190AF6458CD885B0F212A37C542947AB8AEC8EE3A50E98D3B12581738267
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\KikoFlu Edge\data\flutter_assets\NativeAssetsManifest.json
- Size 131B
- SHA256 4ac70f7d67abb2ffc105d2cabfdee68c9aa138d132107e5be4949c539f7ce379
- MD5 93fd9d2b0d844c5bddd73c3ae2973328
- SHA1 73aea486854647bc6c20f32a4df178e36eb39643
- SHA512 8c0815974fd8fc1a2dfd12c05c5100d07bad5fe4126577b590e910bdf492e5acde0055deaeac357a1470dff9a279453d1cbed9eeb41b959604c2e9c0b5cc8242
- TLSH T14DC02B9681000B6134C85705E8090BC0015D3310E8721C9C05E0410C0F0050EC1100B0
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\KikoFlu Edge\data\flutter_assets\assets\fonts\GoogleSans.ttf
- Size 129KB
- SHA256 ece53e6cca855f01d759722d01bdfea7f1d80fb219399a8a98be00a1fcedd269
- MD5 494161e83b78d75b1fbe809ecefd6866
- SHA1 e61d3e01d062623424071a6bc1cbe73335d7d3ea
- SHA512 049edf5e84e4c11ed23f1f8acdf78dc2642c10121e41a283dec390062a9e6571ddb33d458228be4bfd48260cd75df8f1e16df02fed9b4beccdea5eade7d246e9
- SSDEEP 1536:OBjAYTpoVvboywtYu0vFfthUty8h+sT/Kzpa4c8PfMwqTHBVB/LPGmrOmDIrO:OJTpoqJtYHvlthh8T2ddpkVdPGaB0rO
- TLSH T1E3D34C45FB43E709EA237E3C6592E3629F25B829996EC3CFB1411EB1B8DE1910CC1746
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\KikoFlu Edge\data\flutter_assets\assets\icons\app_icon_login.png
- Size 12KB
- SHA256 a76cd35a72fd48dae8f9927dc116147527a8a48c15e4aca71d41ac57d6ca9bf6
- MD5 d997b913ab36cde648b5a460b4b5af3f
- SHA1 a8c04949f91319edfbef601f52c9d665fbbb8ce4
- SHA512 5215887d6e52cdce22cfc05ebbc4cc3c58ba8008872d9b63b78d17d91ed9f1ae27c53334f894a23e556f25b12e26d1ab57415f7fa0b5b79c5c6c70eba1025dd7
- SSDEEP 384:Ej+bYLwP6rrasHp9C7+wxzvOGmumuWsM6a7nV:Ej+UmYraSpkyimluHM64V
- TLSH T15B425A9E419084C1FD622A11FCCB0AA8F613EAF83850E979C154A7970F3C45D0EB9CCB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\KikoFlu Edge\data\flutter_assets\assets\icons\app_icon_opaque.png
- Size 10KB
- SHA256 5473e793ba0542d3104333a7128ef6669f23c838d8c5baeac45a6fc064bdfdac
- MD5 2ec4a2e5d189aec3881b2e0a6a536ebd
- SHA1 ce80489f4e0cce30901404985128c830c9433cad
- SHA512 1932562892295b9807a46bf0b96d00ae7d4fd9ca669648f24b541d86a23227646e601449d524f1ffc5d95e841e4ec1e6869b3a6867a72ef6565d6f2d3859d0e1
- SSDEEP 192:wnvLMQ1k3tuRcvIQ1B+KDZs8iOmzn3Xz//qPAj5mdLobfYhYJ8dkd:uLMQ1i86F+KSrznqAuMb4YF
- TLSH T1B2223A4B21209F96D8DA3B931E2A6E553419059F4B85149033EBC792206CC981BFBEB7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\KikoFlu Edge\data\flutter_assets\fonts\MaterialIcons-Regular.otf
- Size 1.6MB
- SHA256 d9865b671a09d683d13a863089d8825e0f61a37696ce5d7d448bc8023aa62453
- MD5 e7069dfd19b331be16bed984668fe080
- SHA1 fc25284ee3d0aaa75ec5fc8e4fd96926157ed8c4
- SHA512 27d9662a22c3e9fe66c261c45bf309e81be7a738ae5dc5b07ad90d207d9901785f3f11dc227c75ca683186b4553b0aa5a621f541c039475b0f032b7688aaa484
- SSDEEP 24576:PsSIRolMKvGXtkXKLkMp2fXrNsAxI6zD2/qxDoq4eeeDrG2eOeGr2lkzhlTMrRoV:P9njdzbwc9
- TLSH T1787529100276EF4CC1EF507D43B74A48F4C59AFEA53ABB1AF9B64795220BDBDA1C8181
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\KikoFlu Edge\data\icudtl.dat
- Size 842KB
- SHA256 998367809a821d595928089c197b3f7959f0420f81f79d4d0daee53378492ed5
- MD5 018361032ba13dfeab636138ab6b9831
- SHA1 8f9c259d3a330786ab8bbd49e7e79abfa1d552ed
- SHA512 d7d3fffb41576cf2c90cd260727cc0ea23c5a4c458f84b01426c2a4578004b94168047c7282222e9ffade2f082e189cf167146cc3303bd7dbbb252a593236967
- SSDEEP 12288:8Mlhw771h0jM7ykPG07rr4c8w0P4N48Rkjt3dPHz982VYhq:Zhw3zVtjLbGu4RjTPHzMhq
- TLSH T199056A17B0435E6FE0C48277C652E7B65637838DEB3317EAB698B5593E8A1C20241BCD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\KikoFlu Edge\desktop_multi_window_plugin.dll
- Size 131KB
- SHA256 89055d9d21c979673e14341a58eecfd966603321892e5fd6b1aefff3ed5afa6f
- MD5 2b0794994dede5f674b059236d5d6cb8
- SHA1 f5744faf94264bb20110018b1197a67332531627
- SHA512 72e71e5302d82554a1fefc08ba80757df914794053fc012df763d15b13c14b45e31eadd916ab029f9dd3530874391e3bd6f4446ad093b2166802ac5aa1f314c7
- SSDEEP 3072:znd4pC9g4+bHxi7rNzxg8vNPc/kky0Pi8z:BkC9gxiNztvNPc/kky0Pi8z
- TLSH T154D32B2AB75800BAE22AD1FCC9974906DB72F8860771A7CF17904BDB0F57AE45E3E510
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\KikoFlu Edge\dynamic_color_plugin.dll
- Size 78KB
- SHA256 f8b67b9bca72f9e6714e407a7b86f56c3e8bf81ad71f2400e7e98ef839f26be4
- MD5 ce1c740c50a16c6eccdebeb3c399eede
- SHA1 c8d6c512533b0597cff7969050bf06db5c68e1ac
- SHA512 cc00c52a6df47e1cfbda4c8da732d0771b2d1f668da9f845b9b19b3d3eb2e4670fc444f4e9346de87a03a3e110ef9d5f9a20ff3efe025572fe4c5de94adf837a
- SSDEEP 1536:4YSg/l+Px6imajmnT7aNyrKXmOikuuNelaVl5r21vcXlI:4YF4P4imajmctif3lab5r21vcXl
- TLSH T1F0731B2AEA59406BE21AD8B8CA574D05CF72FC864B9197CF67400EDB0E67BE40F3E101
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\KikoFlu Edge\flutter_secure_storage_windows_plugin.dll
- Size 155KB
- SHA256 c81b90e663dd791f8181662577d87677274e600b15a2c98ee4f26793eb185d73
- MD5 0635337fb03c30a1577f1315d72789ae
- SHA1 f656da7541ad61fd1a6aae872a59ba66d0b065e5
- SHA512 1e96f705e6a8d5cf152da2764b9a7e1900ed760537200ed8c1929374a1ca21807846ee10148993096b38fc43c9d4ebfcad87309af25aada1372ccd3d0a380044
- SSDEEP 3072:Ns9y3p1/DC05yObrjSkQTdypMiuffJ3LmHA6AN3a5vfrd4HeI:NcEp1/DC05y8I8miuffYAJ3a5vB4HeI
- TLSH T1A3F33B27B759406AD256D1F8CA534906EB73BC86473167CF03919ABB0F17BD86E3EA00
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\KikoFlu Edge\flutter_windows.dll
- Size 20.3MB
- SHA256 a147927018fcc1a843fb3938ead58838d2e185ce7d840bc4191a7a1b90c21015
- MD5 da6ee9a0525b9774f584020f9b7f7215
- SHA1 488f97f1798ea4c6b083699c984a45b72d7b10fe
- SHA512 9001dcabab5130841784ab0882164959cf6b179ce17ba3ba5cc780a1c39021baf8434cd4077d5fb71058e7f638b372ec69ff81cde3d8faf7551a2c9d41507360
- SSDEEP 98304:zE7hoeyV+kw1ULtPbwDggwZr3hH5epehPTuwTlckSTKZSx8tkvMzVdD+cWUN25e:z3IgBfefQzH7wpuIFybvI9RA44
- TLSH T10E276C03E29640EDC059E179971BAA27F670B8490B20BADF3B5C47253F66BE01B3E754
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\KikoFlu Edge\libmpv-2.dll
- Size 14.8MB
- SHA256 0a5a0b476866c91a639a4e511e8153968f8fa23564461b0aa09acdba816164a4
- MD5 4eda7466f01800ef8a35ea6587a2fa96
- SHA1 6ea4f01569226f5c7cf70963920088c3e3e804c0
- SHA512 1f7f2a05ae67a37efd56aeb5d14368985b831b34a6817f1ff9cbdab4964271240ea17aef855f761de4bbd5a7fb553183a8c164ebe75259e0143363a26e5b0a24
- SSDEEP 196608:/Js6zoW8p6Xk9pR/IKVVLpxOeZyT69VvAsy:/m6J4ptLLpxJD9Rby
- TLSH T133F68D07E29354ADC66BC130CB66D772A720BC1C02F56ABB3654F6F02E32E907B5A715
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\KikoFlu Edge\local_auth_windows_plugin.dll
- Size 172KB
- SHA256 f03b7806220cb0550c730517d0bb2da6fb6ab337bb3884162a44bfff3e282866
- MD5 d2d3bd96df09fae0a3fa1e88cb768a47
- SHA1 2767d29af4c595c63323754b1a13b3b95e85304a
- SHA512 f1373384be2813df14dd67665b56035ac457b8d692d55d7af732f242b736b794af51b33986e57a6f17a8df16ecfbbf1ca87741ac037b5e9ba945504db37dfe04
- SSDEEP 3072:QNvv3OSmSyVBW+c+bGpNiQdaXlsqcLyZlNC5Fel4YYNUsdwum:K3OSmSD+bG7imoeLyrw5Fel4YYNUsdwt
- TLSH T164043B57FAA94066D22BE17CCD874909FB72B4A5475197CB235007BF1E27BE8AE3E100
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\KikoFlu Edge\media_kit_libs_windows_audio_plugin.dll
- Size 12KB
- SHA256 2e66237a1b1f5b4e8fc1caae6a7be2a51fe655939dd134963a3d597cb2bf745c
- MD5 e18a349d64635449e9cf7985e2b0d131
- SHA1 5a4855db0a83d506b03b84d60dfc72735fd7336b
- SHA512 5e6e7c2335d968b2c0ce9c4df30665d6a735beb348f96dc87d47cc38a9305036e14077bdb720c50e301e4c315281be30f7e692d07b2234a7facb4c21d62d7891
- SSDEEP 192:X2jD69xiHLVKwgXrMvDKLzwlNrsIHqVRVfWSAvX2TrWDty6yfF9ZeP:XCD69QKwQMvDKLslGV1FSP
- TLSH T1AE42F847BB590AA5E63543BCA0930F04A6B5FC315BA267CB23E5905E0F673C5B07FA60
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\KikoFlu Edge\permission_handler_windows_plugin.dll
- Size 115KB
- SHA256 bf1e4803a4680cbc3a06281c74f9635d47a079fdfcceb1fa63794351f4dc8cdd
- MD5 48475c7c68fe89c65fcee432860dfb06
- SHA1 e034874487715236be2aa4cf49c5dd6c39a3242e
- SHA512 fa27f8f43092c05e8f1ebf2c0bf7772521de6ad86e9e3362e7f463c03f2d4e8db0216d42f34dcb1905f76c23b30b0ef919efb2e1c07e953b86243c67362ebdda
- SSDEEP 3072:sQ1QdhT+L/pUiyRpyvhaT5gg95vT4/nomZi:p1QdNE6iyRp8aT5gg95vT4/nomZi
- TLSH T1A8B34D2ABA6D416BE226D57CCE974D05CB72B88557A197CF13500B9F0F23BE84E3E610
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\KikoFlu Edge\screen_retriever_windows_plugin.dll
- Size 117KB
- SHA256 3ec4d11b4895f089456c09c7410ea275d9b3d9e8ae195bf4f39e33e3753b9c16
- MD5 ae4bbbcd00af61e949d18665d3053559
- SHA1 3e9e4987cf38aeaec6b43b965e8dd0c47e2d79d5
- SHA512 8c60132be8286cde2a6c9c782e463d9e8b5aac4e9e91a6822c92fe413dc75e68718efc864e96f1e7bc35b23fa0e43830da9bdce392fed4601f03980c0c8c80b3
- SSDEEP 1536:6c9Ys2aAdctejCjdpvW+HvEtIiAh4moShqU3lVPw8W2VqPYWi5AuZCk/PnIjx:6cYhcMQLEtIiW7VzVr5AuZCk/P8
- TLSH T18DC31B2BB65D40ABE21AD4F8CA574D46DB72F8954B6167CB17800A9E0F1BFE90F3E500
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\KikoFlu Edge\share_plus_plugin.dll
- Size 135KB
- SHA256 1028ffb0f81ba9e0c5a7cba94a05d7ada6f3237feb05d84abd4e2cf5a12e2f51
- MD5 b1c7e5b6c6ba1122b6e28cdf9c739989
- SHA1 abacadfc576be343a66f4bbd9842b56d642d6328
- SHA512 91610a9c128ea8900d161eb9c88a35cfa29cde1cd393a064c8ae5e2a6e63fb8dc67b38722a667169fd52f895971dac737830074151624857a1ae01b02e1810eb
- SSDEEP 3072:DLFZOsfxBfwixce5CW9RtG+LCx5Fw439BUre:DL7rfxBYixD5VU5Fw439B
- TLSH T1F8D31B27BA1D809BE136A0B899478E05DB72F8D35B9197CB3750079F0E67BD80F7A211
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\KikoFlu Edge\smtc_windows.dll
- Size 269KB
- SHA256 2c53c3e263608c77b36f339f300e33e841bb4f55136eafe6575c49a6597a3ad2
- MD5 80dd0831463c829f1ca9c4649df0fc27
- SHA1 cc81a1c412a55dd3527ca84e70abd31ed5621d56
- SHA512 668135fd528baea7f7470ffd2adc9d5a0b559c53ecf66cbe75988321302288283ede4ea5c64937efd4d7592af141dadf7a7411a8f42a4dff66323682cf7b6910
- SSDEEP 3072:SbLy6XzdFf0o3aD4gOaf69N0ENlDxtaQYjflpTdReaCWqZ3NzEs+NJgN63yjP:4Ly+3f0t4pafqfPj4LPsgON63yL
- TLSH T19B443911BB852C68D45AC87482478A966EB174CB0F3AF5EF059542392F3BBF96F3C604
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\KikoFlu Edge\sqlite3.dll
- Size 1.6MB
- SHA256 35a668f1ba0700d3ae2647f09e375bd0335a9fb43decea5fbeb742bc2657abe7
- MD5 5c1937a0dfa98a1392fb26022005ab5a
- SHA1 eb07623128c2b14e9c08d2cd5af7fe01dd4d7005
- SHA512 a5af3e29ac769c30ea650574a500911bd89dce51d2672eb218aa330faca0c45612d1fbcc544ede42b6556d4bf17123d8ccd5a8342af870a92416339e4842af56
- SSDEEP 24576:MsZfYc5iW+GgpG0gWJipOJ3KTnA9GZdbVNlBGQDUBQ17HugD4sBwUFGeqTf:LJ5iWypIaipRM9SdbV0S4dUA
- TLSH T16A759E47F3B8009DD0A7C1B9851B6707E7B174052B60ABDB1590CAA96F63FE216BF324
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\KikoFlu Edge\url_launcher_windows_plugin.dll
- Size 96KB
- SHA256 c959fd16c4d695bf3d3a5cad52450602032489bd248f95c3d70c493f791ce852
- MD5 6c6d098122b5148ca9ecdff4538f3ceb
- SHA1 cf0ad1739bfafdc7bd4133370ccb2b223c74f1dd
- SHA512 76a607d3e3ab10b9aed496b627058ff6b79c0502ea45574f2fd3441cb3164de8e06283e389d86df07c98bf8732a02f02ad9b905ed9f6901389c2892c3b0acb71
- SSDEEP 1536:C347yxZcZiRaWEi6X/j27otOAUJZmU5rUV9JD1zO:6DxZcZWnEiibZgR5rUV9JD1
- TLSH T1E4A3192AEA5D40AFE22AD4BCCA574D01CB72FC85476167CF27905EDA0E27BD90E3E501
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\KikoFlu Edge\window_manager_plugin.dll
- Size 128KB
- SHA256 8e5a0f8b54f4d35b891ba1884a20827de0ba8d03626e9c749f774d699a580df7
- MD5 b8d4924ea7a7ac17756739c33668e9c4
- SHA1 7df7141ecb9346b90dc86994186a2da422f8d1f5
- SHA512 61209a74c79b3c6ac91ede592ade1f56b54f522188249df3d63634736c80653ed6f7715c39253c1b2396e0d358e2e3731d87b9eeb483c2af5bf4c92423cd49a2
- SSDEEP 3072:Iff0MEKDa6rcAR/xiIIMsmmBMPAsygzTBBLAy:8f0Mv26rcARZiIIvBMPAsygzTBBLAy
- TLSH T1FAD34C2AF65C40ABE12AE4F8C9835905DB72F8854B62A7CF17500EDB0F17AE45E3F911
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\is-UIT6HGT9DT.tmp\KikoFluEdge-windows-setup.tmp
- Size 4.2MB
- SHA256 c633e41d5ac7f07175b7f113ba9ba77e7916e8d8b8324b366b25c2ee4e32eda5
- MD5 d9f7d0fe3346df6921090c9b271ad615
- SHA1 a717ae7c097c1c75370bc8519c943a62878815cd
- SHA512 722cd56c39c0490e6b0cfadc78ccae7e3c2e5676011b9662931764ccbcd264fd3110c41e024edc18e2b82058dd8e6a97432f7909210552b94da5d53fb87dd78e
- SSDEEP 98304:z9SZUvl30aj90ZFcvdQ0hdgvminQLMj+Jc333Pq:IItJj90Z6RgKwNq
- TLSH T101268F03F388753EE4A71A3A883FA254583F7A213916CD476BFC295C4F396416D2A787
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\com.meteor\KikoFlu Edge\flutter_secure_storage.dat
- Size 502B
- SHA256 2095adc7af0e6fe6a16ad35656940d7794a16bb0e214dd40cb41e8ecdd28a7ff
- MD5 1f767778774d5e4d6c852db9a218a4aa
- SHA1 476c06e236fde04e90e139e9bfbf1ce1453340b4
- SHA512 f01253591bf5f09b80100668022f6cc47d4d6740eb10c97d39eee991779f8afa94e28d439bf0ce837748bfb664af4c228477e76bfd4f9b36d6b0f4114f6165e3
- TLSH T170F00E51810F8023D6A36E3964DA1188429AE92C660F8486F7769B1DF544126E0D9660
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\com.meteor\KikoFlu Edge\flutter_secure_storage.dat
- Size 582B
- SHA256 d59f35369c6791df25edaf53a6c384bfc06ead6cfb941c51699f19e936e551ab
- MD5 ec73be87b14da7240855a32c5cee0dd9
- SHA1 3c1bc11a82e99489392e49ea07b3ab6b96b92d8e
- SHA512 0cb4e48e2cd6923210d9765b22761b4ee3b139508113e83f0704b2e0fb882dd916e459528c243fecf29ff795fe6a23bc64c6fea29a48620ed25b98ea4128bf26
- TLSH T117F04769527001F5C1017FBC49A3B45090C7928C4127C78CFD9646522DB64A84291AD9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\com.meteor\KikoFlu Edge\flutter_secure_storage.dat
- Size 294B
- SHA256 4ea4abd063db20faf6807e9294c2d50d7d457e65d25642836e84e9784d962ba5
- MD5 4820ec9079135e24c789a157f1af88d2
- SHA1 358917535791830042cda9331b97f6ea8a60a6b5
- SHA512 1c00f1c69b2b531b42be09881be58136d065c141abe34ebe6b55636a2df69a2f2d539353c6a30f6d91bc9c956c9ff710b3f3e79aca5ff7e29b9c986b17b4c0c2
- TLSH T16FE0EB274261209BE40F0BB43B8B6900A268CD10BA23E3DCE3C04363B622F20C214999
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\com.meteor\KikoFlu Edge\shared_preferences.json
- Size 31B
- SHA256 533b9eed8e7d7dabe73255378f5ab7e81e0c9991ee04d6808b5bec3b1bd4c6f3
- MD5 0a295f2e8588b004a8bf7f108b7251f7
- SHA1 5684246c94e123b8bdbabf21a2bb4f4f0aa3665b
- SHA512 e883016b818709df0b0a995eba7d65c26c5a32548aa2751b081d798b55da3e40e87ebd4d18cc4c649784803d4b8b2906155219af54a4c07d6db0a739a418fd2b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\com.meteor\KikoFlu Edge\shared_preferences.json
- Size 1KB
- SHA256 301d37030aecbfbd8323e1b9cea01071bbea5388d25cf66605bf5bee6bf658ab
- MD5 042102fbd76a52fe9cb9e6f96b995a81
- SHA1 f1e59c24cf2fdd0c61a69d4412c113bfe238a021
- SHA512 61591c1678758b903c8d2970092917f5726018a72e8e234cbded298f0a7ba4ce218469bb0e6f253bf0604f6b21224800b78a2c3cdd9c5d611b30baae411bef25
- TLSH T1BD41D78936B0C86DFA43DEED073C2DF76921298A8FA92574075CD18D4E1DA31D598402
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\com.meteor\KikoFlu Edge\shared_preferences.json
- Size 1KB
- SHA256 f4877230bb801a041e43a4c799a52bba57c725b2c745a6f0e4e8400cf7d01cee
- MD5 c198a7f8c672d9f1fd502f99d02d30fa
- SHA1 ea788d44f66baadcc1f075fb0dfc65a93e16dae4
- SHA512 5c2014c9816ac3bbc35d63c8eb64bf0c3c49bc310e1671f3d3618859dca3ad4b250b8d5ef3c5b63690c9c921f73ace0b44918aabb6b26fcfcf0e84462deff96a
- TLSH T18D41D78936B0C86DF943DEED073C2DF66921298A8FA92574075CD18D4E1DA31D598402
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\com.meteor\KikoFlu Edge\shared_preferences.json
- Size 2KB
- SHA256 28561903c20a38e41a8a1b082bc15b9c8a0399f7adb78401c62449ba0fe59f6b
- MD5 c3d2c674aa0a0c3f4093d2bb5e325c3b
- SHA1 6fe5de6191f9f6db2c6853484ac0fa80f95b66d6
- SHA512 768cab8d153fa50080852b1bb0015a72d929bd220287eaa463739c2ff553a49421577be41dcba6752747b11622d871b5b08c913a40af31432433f4dfb26d7a3f
- TLSH T1EE51064471AACA4EF9039FE8073C2EB398A03D8E0E2D197843ACF29C4D19D38D628002
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\logs\app.log
- Size 1KB
- SHA256 1d6335490104884b323081c505559a808780ead7b8b680bed3b1847e2763e665
- MD5 5f91c976f5f3cb2e2607e061457bfaf6
- SHA1 75d4b93b636006c140edebd1f9122cce0d0b9303
- SHA512 12d5fb5b5a3f76e058990e70c02327a7cd1d6a036a3ba162ef5899df9a73475c2b9595670f898f3a3c89b9c3979305a8fd1fd4f2a53cee6a4060006738ba0cce
- TLSH T17611CE298B3579869E529A219375B17C2D61F25E1FF2A04C9C2CCB4C447A618B70EFD3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\logs\app.log
- Size 2KB
- SHA256 13a243d0304a03469c2f2ceffb38d4914fe4b682581d27576efec3144962cfa1
- MD5 059a341d2f7659c7c497429763a7bd3c
- SHA1 cdd3df0b01ee9a2bdc10441aa6d04fbc5abfc2ea
- SHA512 e5c7a067eda47513669d123aef6595920bca2d9c86037a84c691807ec8c0995289a507c2683a67916a7db66915028e05739d6890bee05822b03957bc0affdd65
- TLSH T1E851126A833474C7AE50C650A32131782A57F11E2FF6B09D8C19C70D18AA6697A1F7A3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Documents\logs\app.log
- Size 4KB
- SHA256 df1e302f33dc28fedacf3103b469bc6e11e1061e223b665d6bf81bcf9ff064ad
- MD5 dcf49d8fd6c28d6ab6811f0a3c9a8315
- SHA1 6fd489e4c02cab912e082d605ca162bdce7cc95a
- SHA512 83da9c9eaa165af32dce36f6deab5bcfd55c0efffe6a2d3ee671348776219922b9ff87787859eb554e28503f15f216826df502f79d6bb3632f69f9d31e023dec
- SSDEEP 96:IiqEdY1XheG1My1MZ1Mg1fGd5UGDTfGDjdGki0PKnQqo9unl2CTW0n0S7hcPuMla:2EG1XIG1d1Y1J1fGd5UUf6gaPQoamS7Z
- TLSH T123910169CF38B5E21D00F78063213138256AE11B6FFA78AEDC08964D5DAB5103A4FB66
- MD5 SHA1 SHA512 SSDEEP TLSH