8f1d22491209068f7f9ee24359724a2db6a521acea1ca9176cc39fe56b9c57ea

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/10/2026, 04:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-10-28_58967b89b375cb51ed65ac71d2d8726c_coinminer_dosia_glassworm_icedid_poet-rat_quasar-rat_snatch_vidar.exe
Size 15.7MB
Sample261030-encd1swt3j
SHA256 8f1d22491209068f7f9ee24359724a2db6a521acea1ca9176cc39fe56b9c57ea
MD5 58967b89b375cb51ed65ac71d2d8726c
SHA1 0fbf098464d6c0d82a0ca22b2ede3badc70b8697
SHA512 8e74d674c5461ebe65e944e1ccf3144f5ff538989dac4bb3cd2514f9a6965e0a7451b35a5332c5150662ba1a54251f9002b00f368ccf14f86043ab8360d087ed
SSDEEP 98304:2yYsF0JWSifqDJi5x4oaiafekhjC68eWaJEWdxPe9E4Y5ELbGWCoEOp+:4GVLg44wotu/Wd4LLyWCBn
TLSH
T1D1F65A47ECA915E9C0AED13085669513BB317C894B3123D71BA0F6346F77BE0AEBA314
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery spyware trojan

Malware Config

Signatures

Executes dropped EXE 2 IoCs

pid	Process
548	repairhost.exe
2840	launcher.exe

Loads dropped DLL 1 IoCs

pid	Process
2840	launcher.exe

Checks whether UAC is enabled 1 TTPs 2 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	2026-10-28_58967b89b375cb51ed65ac71d2d8726c_coinminer_dosia_glassworm_icedid_poet-rat_quasar-rat_snatch_vidar.exe
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	launcher.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 2 IoCs

defense_evasion

Debugger Evasion

T1622

pid	Process
4852	2026-10-28_58967b89b375cb51ed65ac71d2d8726c_coinminer_dosia_glassworm_icedid_poet-rat_quasar-rat_snatch_vidar.exe
4852	2026-10-28_58967b89b375cb51ed65ac71d2d8726c_coinminer_dosia_glassworm_icedid_poet-rat_quasar-rat_snatch_vidar.exe

Drops file in Program Files directory 40 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4732_561633040\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4732_498119434\Filtering Rules	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4732_498119434\Filtering Rules-AA	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4732_498119434\Part-NL	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Mu\LICENSE	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Mu\Staging	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4732_498119434\Part-ZH	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Sigma\Analytics	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Sigma\LICENSE	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4732_561633040\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4732_498119434\manifest.fingerprint	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Mu\Cryptomining	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Mu\Other	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Sigma\Advertising	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Sigma\Social	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4732_498119434\Part-FR	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Sigma\Content	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4732_498119434\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Mu\CompatExceptions	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Mu\Entities	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Mu\Social	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4732_498119434\adblock_snippet.js	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4732_498119434\LICENSE	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4732_498119434\Part-ES	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4732_498119434\Part-RU	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Mu\Analytics	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Mu\Content	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Mu\Fingerprinting	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4732_498119434\Filtering Rules-CA	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4732_498119434\Part-DE	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4732_498119434\Part-IT	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Mu\TransparentAdvertisers	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Sigma\Cryptomining	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Sigma\Entities	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Sigma\Other	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Sigma\Staging	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Mu\Advertising	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Sigma\Fingerprinting	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\manifest.fingerprint	msedgewebview2.exe

Reads the TCP/IP host and domain name from the registry 1 TTPs 4 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	2026-10-28_58967b89b375cb51ed65ac71d2d8726c_coinminer_dosia_glassworm_icedid_poet-rat_quasar-rat_snatch_vidar.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	2026-10-28_58967b89b375cb51ed65ac71d2d8726c_coinminer_dosia_glassworm_icedid_poet-rat_quasar-rat_snatch_vidar.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	launcher.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	launcher.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe

Modifies system certificate store 2 TTPs 3 IoCs

defense_evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25	2026-10-28_58967b89b375cb51ed65ac71d2d8726c_coinminer_dosia_glassworm_icedid_poet-rat_quasar-rat_snatch_vidar.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25\Blob = 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	2026-10-28_58967b89b375cb51ed65ac71d2d8726c_coinminer_dosia_glassworm_icedid_poet-rat_quasar-rat_snatch_vidar.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25\Blob = 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	2026-10-28_58967b89b375cb51ed65ac71d2d8726c_coinminer_dosia_glassworm_icedid_poet-rat_quasar-rat_snatch_vidar.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4852	2026-10-28_58967b89b375cb51ed65ac71d2d8726c_coinminer_dosia_glassworm_icedid_poet-rat_quasar-rat_snatch_vidar.exe
4852	2026-10-28_58967b89b375cb51ed65ac71d2d8726c_coinminer_dosia_glassworm_icedid_poet-rat_quasar-rat_snatch_vidar.exe
3428	msedgewebview2.exe
3428	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs

pid	Process
1848	msedgewebview2.exe
4732	msedgewebview2.exe

Suspicious use of WriteProcessMemory 31 IoCs

description	pid	Process	procid_target
PID 4852 wrote to memory of 1848	4852	2026-10-28_58967b89b375cb51ed65ac71d2d8726c_coinminer_dosia_glassworm_icedid_poet-rat_quasar-rat_snatch_vidar.exe	85
PID 1848 wrote to memory of 3524	1848	msedgewebview2.exe	86
PID 1848 wrote to memory of 632	1848	msedgewebview2.exe	87
PID 1848 wrote to memory of 632	1848	msedgewebview2.exe	87
PID 1848 wrote to memory of 632	1848	msedgewebview2.exe	87
PID 1848 wrote to memory of 744	1848	msedgewebview2.exe	88
PID 1848 wrote to memory of 448	1848	msedgewebview2.exe	89
PID 1848 wrote to memory of 448	1848	msedgewebview2.exe	89
PID 1848 wrote to memory of 1632	1848	msedgewebview2.exe	90
PID 1848 wrote to memory of 1632	1848	msedgewebview2.exe	90
PID 1848 wrote to memory of 1632	1848	msedgewebview2.exe	90
PID 4852 wrote to memory of 548	4852	2026-10-28_58967b89b375cb51ed65ac71d2d8726c_coinminer_dosia_glassworm_icedid_poet-rat_quasar-rat_snatch_vidar.exe	97
PID 548 wrote to memory of 2840	548	repairhost.exe	101
PID 2840 wrote to memory of 4732	2840	launcher.exe	102
PID 4732 wrote to memory of 2248	4732	msedgewebview2.exe	103
PID 4732 wrote to memory of 3376	4732	msedgewebview2.exe	104
PID 4732 wrote to memory of 3376	4732	msedgewebview2.exe	104
PID 4732 wrote to memory of 3376	4732	msedgewebview2.exe	104
PID 4732 wrote to memory of 4212	4732	msedgewebview2.exe	105
PID 4732 wrote to memory of 956	4732	msedgewebview2.exe	106
PID 4732 wrote to memory of 956	4732	msedgewebview2.exe	106
PID 4732 wrote to memory of 3800	4732	msedgewebview2.exe	107
PID 4732 wrote to memory of 3800	4732	msedgewebview2.exe	107
PID 4732 wrote to memory of 3800	4732	msedgewebview2.exe	107
PID 4732 wrote to memory of 1436	4732	msedgewebview2.exe	111
PID 4732 wrote to memory of 1436	4732	msedgewebview2.exe	111
PID 4732 wrote to memory of 1128	4732	msedgewebview2.exe	112
PID 4732 wrote to memory of 1128	4732	msedgewebview2.exe	112
PID 4732 wrote to memory of 3428	4732	msedgewebview2.exe	113
PID 4732 wrote to memory of 3416	4732	msedgewebview2.exe	114
PID 4732 wrote to memory of 3416	4732	msedgewebview2.exe	114

C:\Users\Admin\AppData\Local\Temp\2026-10-28_58967b89b375cb51ed65ac71d2d8726c_coinminer_dosia_glassworm_icedid_poet-rat_quasar-rat_snatch_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-28_58967b89b375cb51ed65ac71d2d8726c_coinminer_dosia_glassworm_icedid_poet-rat_quasar-rat_snatch_vidar.exe"
1⤵
- Checks whether UAC is enabled
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Reads the TCP/IP host and domain name from the registry
- Modifies system certificate store
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4852
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=2026-10-28_58967b89b375cb51ed65ac71d2d8726c_coinminer_dosia_glassworm_icedid_poet-rat_quasar-rat_snatch_vidar.exe --webview-exe-version=1.0.0.0 --user-data-dir="C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=1 --mojo-named-platform-channel-pipe=4852.4676.15082381194641008715
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:1848
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x15c,0x160,0x164,0x138,0x16c,0x7ff97808b078,0x7ff97808b084,0x7ff97808b090
    3⤵
    PID:3524
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView" --webview-exe-name=2026-10-28_58967b89b375cb51ed65ac71d2d8726c_coinminer_dosia_glassworm_icedid_poet-rat_quasar-rat_snatch_vidar.exe --webview-exe-version=1.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1716,i,6767369932951100514,13825844729053611644,262144 --variations-seed-version --mojo-platform-channel-handle=1672 /prefetch:2
    3⤵
    PID:632
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView" --webview-exe-name=2026-10-28_58967b89b375cb51ed65ac71d2d8726c_coinminer_dosia_glassworm_icedid_poet-rat_quasar-rat_snatch_vidar.exe --webview-exe-version=1.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=2016,i,6767369932951100514,13825844729053611644,262144 --variations-seed-version --mojo-platform-channel-handle=2032 /prefetch:3
    3⤵
    PID:744
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView" --webview-exe-name=2026-10-28_58967b89b375cb51ed65ac71d2d8726c_coinminer_dosia_glassworm_icedid_poet-rat_quasar-rat_snatch_vidar.exe --webview-exe-version=1.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=2348,i,6767369932951100514,13825844729053611644,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:8
    3⤵
    PID:448
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView" --webview-exe-name=2026-10-28_58967b89b375cb51ed65ac71d2d8726c_coinminer_dosia_glassworm_icedid_poet-rat_quasar-rat_snatch_vidar.exe --webview-exe-version=1.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3656,i,6767369932951100514,13825844729053611644,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:1
    3⤵
    PID:1632
- C:\Users\Admin\AppData\Local\kun-assistant\launcher\f8259ab0b9b1d172cd2bc27d3948885a\repairs\763c33b9a4f95c789170cf008c2bcc5d\repairhost.exe
  C:\Users\Admin\AppData\Local\kun-assistant\launcher\f8259ab0b9b1d172cd2bc27d3948885a\repairs\763c33b9a4f95c789170cf008c2bcc5d\repairhost.exe C:\Users\Admin\AppData\Local\kun-assistant\launcher\f8259ab0b9b1d172cd2bc27d3948885a\repairs\763c33b9a4f95c789170cf008c2bcc5d\repair.json
  2⤵
  - Executes dropped EXE
  - Suspicious use of WriteProcessMemory
  PID:548
- - C:\Users\Admin\AppData\Local\kun-assistant\launcher\f8259ab0b9b1d172cd2bc27d3948885a\repairs\763c33b9a4f95c789170cf008c2bcc5d\launcher.exe
    C:\Users\Admin\AppData\Local\kun-assistant\launcher\f8259ab0b9b1d172cd2bc27d3948885a\repairs\763c33b9a4f95c789170cf008c2bcc5d\launcher.exe --resume-repair C:\Users\Admin\AppData\Local\kun-assistant\launcher\f8259ab0b9b1d172cd2bc27d3948885a\repairs\763c33b9a4f95c789170cf008c2bcc5d\repair.json
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Checks whether UAC is enabled
    - Reads the TCP/IP host and domain name from the registry
    - Suspicious use of WriteProcessMemory
    PID:2840
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=launcher.exe --webview-exe-version=1.0.0.0 --user-data-dir="C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=1 --mojo-named-platform-channel-pipe=2840.4848.11773507500280742276
      4⤵
      Drops file in Program Files directory
      Enumerates system info in registry
      Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      Suspicious use of WriteProcessMemory
      PID:4732
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x164,0x168,0x16c,0x140,0x74,0x7ff97808b078,0x7ff97808b084,0x7ff97808b090
        5⤵
        
        PID:2248
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView" --webview-exe-name=launcher.exe --webview-exe-version=1.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1892,i,4650725568513528289,5875095347372400999,262144 --variations-seed-version --mojo-platform-channel-handle=1888 /prefetch:2
        5⤵
        
        PID:3376
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView" --webview-exe-name=launcher.exe --webview-exe-version=1.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=1788,i,4650725568513528289,5875095347372400999,262144 --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:3
        5⤵
        
        PID:4212
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView" --webview-exe-name=launcher.exe --webview-exe-version=1.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=2368,i,4650725568513528289,5875095347372400999,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:8
        5⤵
        
        PID:956
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView" --webview-exe-name=launcher.exe --webview-exe-version=1.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3552,i,4650725568513528289,5875095347372400999,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
        5⤵
        
        PID:3800
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView" --webview-exe-name=launcher.exe --webview-exe-version=1.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=2036,i,4650725568513528289,5875095347372400999,262144 --variations-seed-version --mojo-platform-channel-handle=4676 /prefetch:8
        5⤵
        
        PID:1436
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView" --webview-exe-name=launcher.exe --webview-exe-version=1.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=4564,i,4650725568513528289,5875095347372400999,262144 --variations-seed-version --mojo-platform-channel-handle=4800 /prefetch:8
        5⤵
        
        PID:1128
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView" --webview-exe-name=launcher.exe --webview-exe-version=1.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=4572,i,4650725568513528289,5875095347372400999,262144 --variations-seed-version --mojo-platform-channel-handle=4684 /prefetch:8
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:3428
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView" --webview-exe-name=launcher.exe --webview-exe-version=1.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --always-read-main-dll --field-trial-handle=4232,i,4650725568513528289,5875095347372400999,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:8
        5⤵
        
        PID:3416

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Debugger Evasion

T1622

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Debugger Evasion

T1622

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Advertising

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Mu\Advertising
Size 19KB
SHA256 231be4e0be45f588b161634c816b9a5a49f530c0dcb55461d37715a94482dca1
MD5 897eefe311c18078a34e06f3cf624a6a
SHA1 98246e769fb513b8aead588024d1ceadc65422d9
SHA512 0fad93ec06d6cadb4c2e72b3355b509d5b9995706d6b7e9e69df21d9907dd3d4156eaba62a6c64ed34a6747046ffff841cc79020aff0a29690258ab487bbd6cd
SSDEEP 384:/j+Vafk2xyJEYoAYiQZU8rYvepdFhQXVVRwjSTV2quzxmVUiKF4EysZ4y5:zfEHoAYiQHriepdFWlVmjSTV2qwFOs1
TLSH
T16A926151887035622F2F50CDE0583F8E1199667540AEE6DE9FE48666F28C0F37894EFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analytics

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Mu\Analytics
Size 3KB
SHA256 bba2063d20d70f4ab06dc2ae04c2564cc2b8c631b6dab68248957dbdf107fdd2
MD5 b55f84fa839160086b8b337b59f80ded
SHA1 0fde6cb65ef56264517aab0eb5ea93667f5985c2
SHA512 6750626e0efca608abafe63926229887a68c9f3e657cb78921daf9c6b3ce11d6bfe1ba83fac775a8d1b6b69cbc00dc193fcb818c70ded3ea159b6241fd2823ce
TLSH
T1CF815415A4A014433E2E5668E03C76B912E8253880E9FBD9EFB19965F30C0D778E597E
MD5 SHA1 SHA512 TLSH

Submit Download

CompatExceptions

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Mu\CompatExceptions
Size 689B
SHA256 5b462316a51c918d0bae95959bf827cb9c72bbd84ffb0e43b750aa91fbf3ba53
MD5 108de320dc5348d3b6af1f06a4374407
SHA1 90aa226d3c9d50cf4435ecdd2b8b0086d8edeb8b
SHA512 70f30c45e20b7cddd0cba6476af9338975cec8e40b8b19603af5fa859a34c6eb2138957daaa263633fe65213e2186402d05d9d29ad53e8f311335555116314c2
TLSH
T1E101E6F18EBD58313C74967C876C0E8FB9A5636F2898F2E96502CC87E3C054761A6C78
MD5 SHA1 SHA512 TLSH

Submit Download

Content

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Mu\Content
Size 4KB
SHA256 9a63f38e22b8573cbd47a4ef7b67ccb0934b87239e075c5cfafc7a1014e340c6
MD5 0e3ce75aaf5e674dcd7508251bb839c5
SHA1 35d4a84a8d946263e6b1d06fadc31c5753a946f0
SHA512 80d49bfdbcce2ac21c5c39c6c538135a9768b5fadd73137f6b5916fe6740827fda06c154508c0f9810723c397a22f3d93542f3e972ed3b736f7478ea2e6dc0a9
SSDEEP 48:lAHJBLfUUIAPMsb2zIEcySe00woiyKIdw5uZWhDNB+jS+3NrSA6CdM+3+1oH:lApdOAP7bercySB/1ylw5usB+WB8x+yH
TLSH
T13991B7037E4409276E95D105C0ED209E2C71ABB0C85DEDC99B964B7FBBC8C8BA4961FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Cryptomining

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Mu\Cryptomining
Size 552B
SHA256 bdee796bf07922c152d770cd5928955f1b12c12515c4db6fc0ab8d2ad0c44c4e
MD5 39461c6ea4ff09d663a65d133eb47c98
SHA1 c41f5b5ac9a202ec7dd12122e64b858379a9a815
SHA512 a8e195fb9bfa68dbb064a0f8a41cd86aef5fca43349388294d364b5fd556f0a01674bffcbb5eb2a36e3fea9c64bf575b5e7ed674661dcb7544ed7a961686d4f8
TLSH
T14AF0C0E5C82197766FD544A1E05E7389F4844BB26094F3D50B56321996E8A432684DEC
MD5 SHA1 SHA512 TLSH

Submit Download

Entities

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Mu\Entities
Size 68KB
SHA256 f6e93c83d9e3cfdff064535647cee76fc85aa1c86fd22a93dcf3d2c377346d94
MD5 478a605d5578236f2d1ddc93c2f22456
SHA1 917f05453d497b3e3de684a905e141972c34a267
SHA512 26d75309976fac0bd03ffe7596209c50ead7518584dd9f27d12a86d80ecec0889bb58da1b8dc8cdb38fc6bfdca7928a54c5a15903c4b8d293633d4d58ec147b5
SSDEEP 1536:Wz20p1W8VMVLwecMFUh+oP9jt1PNEOjy+in:W2W1WUMzUT1jpw
TLSH
T152630877BC500D3384FB804BB09D2D6C21249FE5D8ABFED89BB1516612839C4B5D86FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Fingerprinting

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Mu\Fingerprinting
Size 1KB
SHA256 05b29240a28bb75b4535d558edc510eb92df0ac27e9502498b99cdbc576b8298
MD5 f665b35df3c2a7b4efd9dc396f2af9bf
SHA1 2833c37d7d92a4cd1e413eba0d6717e90e69f973
SHA512 e7930341af55bae220962d79ce9aa056bbd1c9fe3cfaf0fd4181d9aa4257b5679648e4aa19561c2f9b5c8fcc6e6757d3616726eb28e77a2b899fa25f7d1b6706
TLSH
T1DF211F8295D038716E6E1488D55C3F9C129A2B7001E6F5DCCEF486A1B61489F7180C67
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Mu\LICENSE
Size 34KB
SHA256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903
MD5 d32239bcb673463ab874e80d47fae504
SHA1 8624bcdae55baeef00cd11d5dfcfa60f68710a02
SHA512 7633623b66b5e686bb94dd96a7cdb5a7e5ee00e87004fab416a5610d59c62badaf512a2e26e34e2455b7ed6b76690d2cd47464836d7d85d78b51d50f7e933d5c
SSDEEP 768:Mo1acy3LTB2VsrHG/OfvMmnBCtLmJ9A7D:Mhcycsrfrnoue
TLSH
T1B6F2735FB74413B2018206A26A9F68DEE319D07A73664095785DC15C27B3E3483BFBED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Social

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Mu\Social
Size 754B
SHA256 4955c3e7f56641a4ae0ce9c79b4ceee4b21733b0f6dedc980bf8d822a792eba2
MD5 1d06d58fe9131c14ba5ba5ff740b020f
SHA1 e6ed812e23e201b20170e928686a5d612165df85
SHA512 2854c73c6ef4d271d0e992113732ad65e406d6310711551952b4d451e2c577a2c3dcb06052e3ab30003b01619a39e87e5dd28d54f459f94efe879d1a79039b8f
TLSH
T14E0126DB1A1450027FAAC495E4458B6948B00630445DFDE582B8D27BA08EC97F39F7B9
MD5 SHA1 SHA512 TLSH

Submit Download

Staging

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Mu\Staging
Size 36B
SHA256 411a706def2e70f96a507208bf80bceb93e950c4c2d671cd1ddb4134ce54b2a9
MD5 0163de1b14421d4eee3757ff76fd81e4
SHA1 96c75c4fe1e3f33a367f45293bd1bd8bff1c06f4
SHA512 80114d59db8f3654dd6821589e5ad03daa923a35610a372756a8865b3e769621e32ef2aed92c2494de2b9fc06d9796b12f1e3bb75873ed794e8c9ae8a0d5e965
MD5 SHA1 SHA512

Submit Download

TransparentAdvertisers

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Mu\TransparentAdvertisers
Size 105B
SHA256 d2cd0bef5f45daf490c53e705d6f67dfe12390c72a00efa6f5117432bd8edb8c
MD5 57d5a3548911886de2f3bd3172e808ed
SHA1 ca932af3b25f245ce931fbc6cf10299e5fbe35a7
SHA512 933194509d305b2a60b38c149ba1d74e142ef15647242b287844d263006d33ffa38b6ea263c89cb821a9277d41f0cfda95a0eda830f3a5ef8df5ba80d3bbc818
TLSH
T1FEB00170D480008ADF4062C1D032DD98E08D5377A138C4CAAAF80C66F2433CAD1A38F9
MD5 SHA1 SHA512 TLSH

Submit Download

Advertising

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Sigma\Advertising
Size 21KB
SHA256 5c62ee354070033dba1bad40dcde115a81db45943b2274fae7059a5aa5c61d33
MD5 452f3e9d40539cd65cafbd008308b5b8
SHA1 34203b4a803009ff56bb28d3a14305348082990f
SHA512 08504c06b603db3cb12f0ed6e30e733c2a2c830cad1124771c64b0e7b8480113383440325c56116fb57bde458b393ce182a3af75f0cef146ad6a8872ab9a964b
SSDEEP 384:oQh4q3kwr8CPLo3AptN7NoTn5LTDq3ZXmRHAez/GRQMKWxV1R:wqRr82LKAptNJoTNT2JXm1AezO2MKWx5
TLSH
T16CA2B361996025513E6F009DF1993FCD5AA8233080E9FAE9CFA0C676B35D4D335948FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analytics

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Sigma\Analytics
Size 3KB
SHA256 d303be86132f8d7131941d41736694c2e29647ebaeccb38c0976fe66616ec8af
MD5 c4c782264f4a6a6ba84801c8c148afdd
SHA1 f138b8f526133c5dd612f79825f4706569fd18b2
SHA512 e1d3b123a7eabfe72d4df981e1015ca616c51fe7d94de91223e9c7f4eb98ed7d3ebcf7b5c7e08579db502c7b3529e095d314dc71b8cf5e79081c678e73aa646e
TLSH
T1F261C814312434212E1A126ED55E3E8E6AF8223904FCF7E14FF18A71B2194DB38E873B
MD5 SHA1 SHA512 TLSH

Submit Download

Content

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Sigma\Content
Size 5KB
SHA256 70c295600066e9d3feeacd6bfc735bbcac6243694e4259477822d3db252729e1
MD5 7c5f5e42e885211f783a06b1317ba145
SHA1 079ab890b012120b89f776e4bfe67f3789f67096
SHA512 ec581f41917ee010d71a021cf16648fa757327198113dc3daff3adb33ee739da3f40d87a6f3e49004106770ea705e6b800fe263d21eccd33d7883fd1ed8c82eb
SSDEEP 96:02KCCvwLR/tE1LYSeyTPXD7fOiCrC400uvuJEjchVEy8Upy4uILrqNaRq3:02KCMwtWLYSe8miZHvui68kRBg3
TLSH
T169C183B2495079522F3E01C6F9E6265488E483715CBEEBC787E0C62CDD0E9E335A835B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Cryptomining

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Sigma\Cryptomining
Size 32B
SHA256 696e930706b5d391eb8778f73b0627ffc2be7f6c9a3e7659170d9d37fc4a97b5
MD5 4ec1eda0e8a06238ff5bf88569964d59
SHA1 a2e78944fcac34d89385487ccbbfa4d8f078d612
SHA512 c9b1ed7b61f26d94d7f5eded2d42d40f3e4300eee2319fe28e04b25cdb6dd92daf67828bff453bf5fc8d7b6ceb58cab319fc0daac9b0050e27a89efe74d2734e
MD5 SHA1 SHA512

Submit Download

Entities

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Sigma\Entities
Size 128KB
SHA256 a5409d2c6a8cbd9339a95a5e09fcaedd4546a49d47fc4ebeda2d8749cfc66987
MD5 87b4b75312dedc7106ac746153153c1a
SHA1 54fd4b67eb16620ce0dafe8eb641f6a256dfc4f0
SHA512 f594a5039c73db236f97dd50c3eb007f2fa2ff44d558222cf983dcd703d89f9b1e832bd3c249a20bfa592656e9c2e61a41f90df1b927fdd8f490d36734f92d30
SSDEEP 1536:e9nKLDxqghS81HcmcgqPvD2E/FwoqtK1Gmbpq6CXkkqGqnuP7Sr:GnANN1Pt3/oqtKAWvCJqGqnuPK
TLSH
T1A8D30938FE60C8185CEB041B91296DDC5B801BDA5AA6FDC9EF7F78190242DDD33285B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Fingerprinting

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Sigma\Fingerprinting
Size 2KB
SHA256 5306139881e81eebffd97de016130fdbb04e3ae976d94ad7a74e5dee63fbafcd
MD5 427724f72baa3d5c91671853a89245e5
SHA1 a33deaa88143c298e0732ecb233663c372cb0e2b
SHA512 bd0027e9bd25fa3426dfe85f67bac14bc3124bbbd6493c1d1aafc33343dcb008a8a418134deda235b71377ff970fcdc45ce4e6b1eae79fd3adf1bc3ba2e2103e
TLSH
T19441552354202051BEBD498CF59A3F4D29E5623984DDF6D5DFE08936721A8E734908A7
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Sigma\LICENSE
Size 66B
SHA256 44071e0fcffb9a9a32e8fa7010bb18dbc41afd0b176f81bf700b15b638a88a51
MD5 5b7baf861a48c045d997992424b5877b
SHA1 2b2bd9a13afe49748abf39faf9eb29ed658f066e
SHA512 4820b41aa5ff4d934a583e1f0b93b1512631102bb2dfdb74792a2f0dcf9907da7680c02a5ddd2492a1e6d58cdada3453d9e38bb8deab6ce831ff36a7f8de016c
TLSH
T1A8A0025216021A6312E295EA5E589B4FA50A1AD5255C0341164904D898B01D995E87AE
MD5 SHA1 SHA512 TLSH

Submit Download

Social

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Sigma\Social
Size 3KB
SHA256 28ac79097cf67587a228fdfe4746a1a9b31dae94d5a63bb3fcaa82443d69e7af
MD5 af4c6f2598c45087a32c4f410f242553
SHA1 cad2a50e20ee6f699e21e78c58991a6a25a55ec0
SHA512 7d378b90e3cb7feac3580bc7858b6d8a4967c77196be5b7d94ef076a7e1e8166156e62954998fa6931593db5c8a8dcaacdfe3421bd39e6517f6c6094caf4f4a1
TLSH
T17B61DC32C550A9932E5D0C81EDC55E704DD8067ECCA6F4E287B082F8F0AD8977D90BAB
MD5 SHA1 SHA512 TLSH

Submit Download

Staging

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\Sigma\Staging
Size 1KB
SHA256 f90f4cb0976a046e93978971b58fba24bc93b0129e8612fdd0e5646a1bebed22
MD5 5d7f5a0c242d9d1290c8ad0bd57be3e7
SHA1 d454811443284aeaa0294d30caf65e624182b150
SHA512 5d36ffb2ec4d162c49e5dd1207bee8b51f36d91ab38d23ff85d4467ced3a7e0f4f639b230623804260d8b03e49ef124e6ae9714f63c896c024215bfbd13dbc88
TLSH
T1A621E2194E908CB11E596745D20A535ABDEA617D38E7F4CB8EA8DE7FC2CE85702344A0
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.fingerprint

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4732_1060155070\manifest.fingerprint
Size 66B
SHA256 403e6e5965571238c03bb289a9e533261775fe381e5a91300788cd37e465b4a2
MD5 bd493e5a161e6d66c7253da476ecb4b6
SHA1 4ce1686e9532aa7190f90457cc648bd55e1a8bf5
SHA512 ae673a5aaf2d5c73eb3a0331cd9dc6b7d8d481aff6afb3015c745079debe10a73c089026c2c614bd847d3d364bcac6e6910f896e785225d88ef81a98ac24c15b
TLSH
T186A022E2E8F3B8802CA0200C08CB32C0A022B3E300800EF8C0000E8C02A2C2CF020AA2
MD5 SHA1 SHA512 TLSH

Submit Download

Filtering Rules

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4732_498119434\Filtering Rules
Size 2.1MB
SHA256 5e301c48e6d7290990971e9f0bcb2263c8adba06ed0a2c6db5086949825d999b
MD5 43f62d9f35fa6597cec4e2ad5643e282
SHA1 8dba6404724ffd6a2e89901e8dc6e5e55fed3374
SHA512 91891d23464f89e6769d9ec7a28867e28f77925e6e3b3b75fb628d8672157ba239676c07699c931ac307a21ccc4dae95dd707d410f988ff82be4015103d4d6a3
SSDEEP 49152:ua2qP9SKIrivd04TxN/7Uw+zJEhs6dl61n4Kmq9SL6bbBT0HjTsQc8cxjw:u8d
TLSH
T1BAA55D237518BDF45BB31F3EA44B6D48823962A483E3EDC5EA2BD10ED5E014F79601B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Filtering Rules-AA

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4732_498119434\Filtering Rules-AA
Size 2.3MB
SHA256 95beb1f39b4cd5b29f5ebaced4a33753fb0bb876f078ed3de041f12be16cec5c
MD5 b91a6cf79bedefedcb5603d3477cc3ed
SHA1 b3512a426a6a613f8cdf7f9ae3a0d02b700d1843
SHA512 9d85945f7f963fd9277adc20a0af459e8bb5904ef7038584e510ebd041b3029bf24ecae2047b24ecfa853154beef7e2bc5bd34ff8d90aeda000fbcdde741341d
SSDEEP 12288:DUoPNPlfiCBGkqNEWymqMD2N3FRgVfFRg3oFRgHsFRg/sFRg7dFRgImFRgJ1FRgs:JNhiSGkqdT5+9
TLSH
T189B51BF69947509145B9631938ADB2C82B14A28147ECCBF2EBB4C4AA2791DC737C05FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Filtering Rules-CA

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4732_498119434\Filtering Rules-CA
Size 11KB
SHA256 65aa171487dca70aad69973d0459c6a4b0882fcc6223bdfb53cd9ab711c5b125
MD5 40b3ba01a09be340fdf879f97b31c867
SHA1 b6ac58d1653c1b76e0e9898b17cfea3e6b56de94
SHA512 97f82f162588a761a13a2efd38d2c9518954400c7898cdd12923ce26e90818d94310b4a9f2a2cb2f55f5101c9a2e177dc1b14de8c9486eafc910271e2991dea9
SSDEEP 96:MKSlCviF3P2DoTc+cTKSlCviF3P2Do3lTKSlCviF3P2DoT:MaviVucryaviVualTaviVuC
TLSH
T17C3275333E488D6792A4C1A0DC92752C9E3087D98C9CBEC31235B9776BD1E6A508B5F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4732_498119434\LICENSE
Size 24KB
SHA256 ed0f972d56566a96fb2f128a7b58091dfbf32dc365b975bc9318c9701677f44d
MD5 aad9405766b20014ab3beb08b99536de
SHA1 486a379bdfeecdc99ed3f4617f35ae65babe9d47
SHA512 bd9bf257306fdaff3f1e3e1fccb1f0d6a3181d436035124bd4953679d1af2cd5b4cc053b0e2ef17745ae44ae919cd8fd9663fbc0cd9ed36607e9b2472c206852
SSDEEP 384:mva5sf5dXrCN7tnBxpxkepTqzazijFgZk231Py9zD6WApYbm9:mvagXreRnTqzazWgj0v6XqK
TLSH
T140B2526EB64903731AF30116AA4B64DBF31ED03F362A4564346CC1481FB6E7443FA6EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Part-DE

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4732_498119434\Part-DE
Size 305KB
SHA256 367ad4a5699a69499d13e8bf9ed5e8bab3573e3731ff8127178e539735ba46a8
MD5 fa08e85d713ad46803e924d443e4bf7e
SHA1 bbcce20f5ce73be4b34cf5c43d6f71bb4ae2c5ff
SHA512 884314e04cab57c9907f90525a4fea7710fdff5e47db4500c03d4dc6c5491a3f4df4868620a2a1817444ee75bfc913e79f9a414e3a68108deb7abab700ae9f85
SSDEEP 6144:7FjHKfRBie5M0SPtVRY7od0x6qNgKWIescUHVTl1dKcJEtmmt4l843NWKOb2P5+S:5T41N/IuscpL1Kxa
TLSH
T10264C693296AFAB12A320E7D600A1C4C5322F111C2C7DDD9F775C98DD1E468BBAC16F9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Part-ES

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4732_498119434\Part-ES
Size 137KB
SHA256 55e005c8aea4180093fcb56f4ddeb9fc763892d8cf1fcc840f612a7531b7ed18
MD5 6e8f660d075254a08948dc3517304256
SHA1 bc8abaa82d6d555ee9482c568a1d661453fbc956
SHA512 cc3484fe628e4242eeec2ce969c51e817ec9ab3feecec8d8097f43a319c9dc226771eefe63316d8ec2ad895f23ed4603c4836faa49369db785580455ecf21f37
SSDEEP 3072:NiZ3EhHST197h/6Jl06bBeS1G56asSnGpFrUboki9a8jRU+Zw1:/RxbR1EnYpLv/Vy
TLSH
T166D30D55AADCA8B55A73102C64D9254C911772D082CECDE4FB6686CECAE05CF3BA03FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Part-FR

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4732_498119434\Part-FR
Size 528KB
SHA256 56e80041432156be4f08bac11e3494f2f06f65b61a60b7dcb61d15debb7b318c
MD5 6804859c589fa0ce46529c3a53b882d6
SHA1 70ffd62bb826e29500d36bbdd7c8d9c6895e2d1d
SHA512 3a659c284f55d203fded7f2754673e55a43d2c131b4790fcfe374af138158a690b5a330d4e720348c03aabb561b0aee7d818dcc111698c05ecd99c239d07735c
SSDEEP 6144:zfi0kH6u1I6c2Qiw934vv8gxK2SzX6rDVu9cBwZp0CiEksn7p0heBB6pHIgnb3hc:aT43+R5I7p0ABaIgne
TLSH
T114B45D136619F9F11FB31E3D640B5C088235B2A183E3EDD5EA67C14DD4E468FB9A02B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Part-IT

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4732_498119434\Part-IT
Size 216KB
SHA256 e1552312fc16e0f279e72f7eb4189a47e0beb36733220b0ef605f66defcc5fa7
MD5 268f6a3c0990d434175268cf09cfa6ad
SHA1 464e10c57c536e6bb55a326a48469246a9241505
SHA512 5154048a794227c45b950ec2d2ca378f9e7a9542b9fc79c1fef1f1615e97a263168927d883967b06f8b52227a47e3ac75ac7061b25400ebaa63e4536a368d50a
SSDEEP 6144:1quRAGty7QiWYIeezuu2CGiXTyRl+XPWRq14T/KfY:HRZtQl+XPWRS4T/5
TLSH
T16524E9176A54EDBE4E22156CA09F5E0C7225758182C7CED4F3D5C08DE5F827A2BA03EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Part-NL

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4732_498119434\Part-NL
Size 79KB
SHA256 935465fc40adbb4ae89ba37542ed37609014666c67fdf5115927809d69144b41
MD5 65126d1e76de4f0872e6cfa96609beba
SHA1 95268d3b2134894040afd0530d062a3b836f63c7
SHA512 0c6dd17cf622ad1a1a4ddc43fdc6f36567a98309e145e16d95edf38e9b21905867b28865bee591b52eecaa371138ac436eee6d18ff8d78f4c8f7031ba4e7ad84
SSDEEP 1536:x3ACbKFpRTfKGy7Dpj+u9huKCe/MELfmoRyQpnokj:x3ACbYpxfKGy7Dpj++hu8/L7moRyQpnv
TLSH
T14A83D70AAD68F8754A331D2FA4990D1C9625B600C7CAFDC4E725908EC9F52DF2AD07ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Part-RU

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4732_498119434\Part-RU
Size 1.2MB
SHA256 f8abf856660805e271d9d2033accf4f8cc43b19b7662fc2b96f56739229a90fe
MD5 e946014ae78f059f0698731a745a3f00
SHA1 afeb8dc2d86d2763b69f97717e454a7c6b8a267a
SHA512 3c699d3205c3a000c13d20411a0e958f2107f62d813591652cfc573f9a29647badfb1703e499a8896644f1485ecc19cdcaca0c6bd5ec1e5e328339c95784cfa3
SSDEEP 12288:4o9g8Q9u1Xku8Uc24wpDs2zGFtyKnVgLxB7rsvAyLuQCdj9/CwYJWj0Ek0ozM/vQ:4Oe9u1Xn1KFtyKnKq1CvH0Ra3Rnkd
TLSH
T1F44560137254F9F04F734E7E549A9C089275B1A083D7EDC5CA29C19C98F2A9FFA402B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Part-ZH

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4732_498119434\Part-ZH
Size 686KB
SHA256 9645edd48b978354345b657bacb3f30be1f450300856a82ba4d5dbf1236c7c9e
MD5 3e8cbee42dcb97db0df88cb96643e3fc
SHA1 94cd9e2bc876e04bfd2f311cdc160b6ae1d3c9f3
SHA512 319c69fcba623a0fea9ba4e1dcfabe3e9bd47f31dce7146e317835331217730fb61d0449abe7e66b1bc6f06a50c12269f7f09dbb633c85b4fd8dcc7b21c95304
SSDEEP 12288:g3gaBN1zyZzxT04duSeYXzhW+svzgAfk+XTAdXUd84nT4x09/xSE8Y:CgaBN1zyZzxT0N9YVW+sv8Afk+XTAdXy
TLSH
T114E491132168FCF51EB21E7D284B6D48813A76A047E3ECC6D62BD54ED6F025F39A01B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.fingerprint

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4732_498119434\manifest.fingerprint
Size 66B
SHA256 b1c8d3a1e8d3d85433eaa60a50001e5d1599809fb03a7b31bc19f963058a0d54
MD5 58d2918fbd8bfa6cecc58ecb48dd0723
SHA1 1c6f36fa1434000e97d6f32f32edf02772bb40ad
SHA512 31a3a6d71ec58392f3330df1cb23088c437d72c8709da71598fd626af76b45f26091daa1ae3d49ef15929b6b518a3fac0a911d09cf79ef67bc823d52db4580a5
TLSH
T18FA0220C20C82AA088BE0A0302082803832000A0AC383380A30CA3C8BC0C80820C00FA
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.fingerprint

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4732_561633040\manifest.fingerprint
Size 66B
SHA256 946f3a9e019b0d80f5671de782f295132341f663f74aebad7628f22e528d6d52
MD5 3fb5233616491df0ec229ba9f42efdb8
SHA1 18a8116e2df9805accd7901d2321c3fa92da1af4
SHA512 e9b17ac626bf6508db9a686825411e90d316a0f1dacbf63dbec5baaaf6b96af4dbc9a7332975b6d5c16c43757d79fddca6b888ea97bc07a8dffb1b3a06366b4d
TLSH
T1F8A022A0C302202228A00E0A82E20223200EA80CE880002328AC8E2A080833B00A8200
MD5 SHA1 SHA512 TLSH

Submit Download

launcher.exe

Path C:\Users\Admin\AppData\Local\kun-assistant\launcher\f8259ab0b9b1d172cd2bc27d3948885a\repairs\763c33b9a4f95c789170cf008c2bcc5d\launcher.exe
Size 15.6MB
SHA256 7fae693c0007879fd0d991805e6f5d4b659da3b02f9f47ea37d59ead62ee6494
MD5 4798e5d7dcec661ba5e566f90b343503
SHA1 f044c448c7e38be2cbb31eb8cd24f3fa5e1b7fcc
SHA512 844f7f01c1c55daaa43ab97642598297c3d4345fd54ab33140fcfd5689319d6fe6585d8b19188ae11475eb9d7c912ce02ff0309f94ddec18dde75761692ab518
SSDEEP 98304:pwzHMNxENM1MAlATU6oxickIlvlSD4wl5shEYfl+YEjJs0cBioEO:IC4Al/7Ak4MYaiBO
TLSH
T10FF65903EDA519E9C0ADD13089769213BB71BC491B2123D71B90F6283F73BE4AEB9754
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

repair.json

Path C:\Users\Admin\AppData\Local\kun-assistant\launcher\f8259ab0b9b1d172cd2bc27d3948885a\repairs\763c33b9a4f95c789170cf008c2bcc5d\repair.json
Size 1KB
SHA256 81ed3933eb72510d8bfae225ac47548e8385b5f1d9489c00b60d0aeb4a9a00f7
MD5 7a76f8c3c6592590c1e9910a12f36863
SHA1 5416a0397d520c44fcd0a1b24fe83f5e5dad1dac
SHA512 acbf4cb4710c5b7023803090ad351eb56d632e2e5fec56c17cf9c4073b1c84a8b7d54e7e3b521dcb16c5f49e87f83f8012a13b68de3101de21fba380a34ba4f4
TLSH
T1B811A52DEA90EF304D995BC2450E3837968F31A062C00A39DEA8DBC950DE5FD3C5AA31
MD5 SHA1 SHA512 TLSH

Submit Download

repairhost.exe

Path C:\Users\Admin\AppData\Local\kun-assistant\launcher\f8259ab0b9b1d172cd2bc27d3948885a\repairs\763c33b9a4f95c789170cf008c2bcc5d\repairhost.exe
Size 6.9MB
SHA256 2341b2192145869cbe69e62605dbfce0086aac8272dfd6395a0ee1bf2dcac1e5
MD5 bf3b5bc37ed18befbab7f57bf8e173f5
SHA1 2dc1b353995f9f23f1a739ff42c06bcb84168db5
SHA512 5db18554734bb40cbf59ac6ae400000779e9d059208b72d98be7dc764577871f194b4a1121e962e33d7e15820167f61154b46064292d099784470a38c9d75295
SSDEEP 49152:bSGatXW3U30aRdGjbWgqYQUJC2ZhGbl/ezj9kHWvEHLAJKNWgeg+iSVWLxeqKCKa:bfekhjC68eWaJEWdxPe9E
TLSH
T192765A07EC9518E9C0AED23085669652BF71BC494B2123D71B90F6347F77BE4AEBA304
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

state.json

Path C:\Users\Admin\AppData\Local\kun-assistant\launcher\f8259ab0b9b1d172cd2bc27d3948885a\repairs\763c33b9a4f95c789170cf008c2bcc5d\state.json
Size 60B
SHA256 4fcf8dceebe22e191b754dc884f08561ee8309324424b000e188351f7f3b2491
MD5 6cff6c2e758d71c49bf726a4686ce27d
SHA1 51d477bdaa5c2cb08fb6a6e138069a3d6002b5ed
SHA512 abac234a8236d3d962d0dbdb51531f3225c91986340e22967c43afa118dcd482532c813dbb0cbe853f32de59ee0412670873ef665f44b7d371299526454fa9cf
TLSH
T195A0023355C65E51A9690011DD4560203C4A02F481455C1841A0670F3A255D6635E5C1
MD5 SHA1 SHA512 TLSH

Submit Download

state.json

Path C:\Users\Admin\AppData\Local\kun-assistant\launcher\f8259ab0b9b1d172cd2bc27d3948885a\repairs\763c33b9a4f95c789170cf008c2bcc5d\state.json
Size 100B
SHA256 df2a344a07ff6f533ba715a8dccde42faa108b31f71c6dc4fc07c5dbf4cd26ee
MD5 ebb7770f77cb5d506c85cf58b8d5580d
SHA1 5a18c4ce5c8a91f77a06a0f005bc7f33d71f7a2a
SHA512 9687381c2d674c682179c64a1024fb4616ba40073d3607228408fdcc736a48b954277551b92f99c3c0fc0ff0b41ba87cd1f2ecb570366da71092487688d5d063
TLSH
T13EB0122381865E71ED0C0482DCCC2120984E01B480000D140449E31E76605D4835D5A5
MD5 SHA1 SHA512 TLSH

Submit Download

record-3549432367

Path C:\Users\Admin\AppData\Local\kun-assistant\launcher\f8259ab0b9b1d172cd2bc27d3948885a\repairs\record-3549432367
Size 41B
SHA256 92112658ae6d0e64474c1154269597a9485ffdfd1095789df0de7f885a100f6b
MD5 fd8da3556913b3b5ae50e4849e336452
SHA1 43011a2bb8e1b35d70c02c235001318d159110fa
SHA512 5c55c9c176ef5b2c5c97be82c76961f6113f5d314dc97c05e53d7e995876ab1cdab0b5afa0944299a18528e28f8dc6d3cb7166e87a80a98d80be3c17539d7c09
MD5 SHA1 SHA512

Submit Download

WebView2Loader.dll

Path C:\Users\Admin\AppData\Local\kun-assistant\webview2-loader\c4674acf95f0800793a4a6d61132adf5dfa694c218e482d86093494c4e84100a\WebView2Loader.dll
Size 134KB
SHA256 c4674acf95f0800793a4a6d61132adf5dfa694c218e482d86093494c4e84100a
MD5 f9f8ce6ca48034e8dc2502ce95a9f2f0
SHA1 fd62cb963ef76019e29b5e6cd0dd579469958748
SHA512 ab4060d81c79b1bae4a540c7a4f163eb65f3149a943f81a242a8a21260a9ccd746a9b2aecb8bcee4bd6ea979ac32a9d0fe04541b34158b611e01d62e7c1b4fcb
SSDEEP 3072:j1Ua32yCHjjTrxvJ7KP+6hJug3esZTbEtnDzUwsramuLcr:TmyCDj31JGW6fhEt0Ti+
TLSH
T158D35B4B73E5007FE1668274C9A34A0AE776B8511B609B9F03A4436A1F237D1AE3DF71
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2a876cc4-fcec-484c-9e85-aa0ee84591fc.tmp

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\2a876cc4-fcec-484c-9e85-aa0ee84591fc.tmp
Size 3KB
SHA256 99057a45b827c3a6659802dec46b4d93a8514c12dbdb47bab2a814f7fd219f6f
MD5 a852e36ca81f8c7e501af292305f580b
SHA1 7e2c8542bb16ae21ea4c853ac33338420889b18e
SHA512 6a313e85cea78c5759ff67e8aedd703c652b11a14f674fe14f6978a8bad21410049696ac62cc57eeafa67fe2f093d4f6c9b1409f52ad63c61990b0132b806907
TLSH
T14071A436A974A97B4DE6DE01B8853F13FBB61123D1952F94D6ED0F0C01DB2982342C27
MD5 SHA1 SHA512 TLSH

Submit Download

8397e15e-16ae-4e16-a861-0745bce160c5.tmp

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\8397e15e-16ae-4e16-a861-0745bce160c5.tmp
Size 2KB
SHA256 0e6c739e36b633eb0447a5831700545816be778f10ad2ca4a7bac7076fb30ca4
MD5 58c2ac73c93733ccd04197da403c1200
SHA1 82703514c0323eddaa4efe068cbb2bd075b4eaae
SHA512 80f6bf2c4ead015ef7b031eab41a1143d4d67cc705171c9fb0685c7b16886250a4659afa1a852bd2df9525c52562b14f825665274c5fd5f17a0e10c1e2db16c5
TLSH
T14B51D872B8249B7788E69E05B94A3F23EF7A50A2D2551F50A6ED0F0C01DB55C3346C37
MD5 SHA1 SHA512 TLSH

Submit Download

9855b12a-90fb-4e39-851d-0979654938d8.tmp

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\9855b12a-90fb-4e39-851d-0979654938d8.tmp
Size 17KB
SHA256 fcffe966c1d97cfdce825e70451bc82e3d176dc439f5fce54006a263d3983d35
MD5 0ca1afe26d921543b40637106e2a6f09
SHA1 b229bef80dfe87f231666a06e40a30832ad0a677
SHA512 8c202da28288c039a311fd9c85576adddb9dbc4e9c2d7013f7f4a4983a21409ad9e4f6f96b0fbee8f92f80ecf6fbbbcdf7ec16fe3f329dc5b57e457233552ef2
SSDEEP 384:zf+OBqImmJvGBLx3NaFMJFU3NbAYB+Fi2LDzhg6rU:qcvGtlNUvKiCg
TLSH
T10582AD792C65AE672CEBC94ABA4D2B47EBB51163C0D42FE8C8FC9F0E115B1841353825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 eb1e3f96c0915575f39feb0ec072a2afa4104c010ecd88077daa8bad1b8a2a05
MD5 48e6bf4a8b2e9221a126e4ee9e439c31
SHA1 ee5daf6d8c7499a9c5e4d1ad9eafbafe147f16dc
SHA512 93bd431c793a94759ac9babf65e848d7c57695ef6fd13fe4b0a348ea216639c8d0e28420b9df31ac62066b4f38a73d192d3bb3a11a623a15f565d2741d6945d1
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 804767a6e95b783eb2e9a70fa73443040b22102efb1d25d00bedd938a439bd7b
MD5 804fef5b3ffe3957caa42cf4558337d6
SHA1 f06bed503b0d563248d862d370731ba9dd262d8b
SHA512 39a0ffdfad0d2c66e1f30f0404447f2ef85dd483f9e5d1930b494300dcc177d126aac2a407df077b19b5912305932d9397759b0bbb5d09ad62bdae22778348da
TLSH
T1C3D02B512B010A74C12068731343D2051D80F21BC105C09CB428C46C1D08CD00E164C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 0fef79bbf2a1548d686169e2d4c63ead7e24f998430fb4b4e09caf21a85ae8f0
MD5 5dd8a5ac9bf4114cb06296acf69e81c4
SHA1 774fc27344b3524d5e4a7bb892610b3347f2aa57
SHA512 a1a1e1d6ac173fafb0d33a022f4c14ebc54ea9b2d3cc0a4690f6918c20662130d7750d220c352350eda3e70176b4a3c9a8f8084436068d5aa594acb419e67fa1
TLSH
T1F0D012511A110A64D5115972134795052AC5F51EE205819CB939C46D9E6A8B00D925D6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 2d27921a5800d2641c04feec8f80d1878addf551824fdfa838acea4fffed3980
MD5 fa75aed9bf416c0bdca385f76aea121b
SHA1 daab093e82a4bc6d7af286d86462de725d9fa077
SHA512 2d29fb41316dd4a85d61e40e5998cb868fe763ea696d2ae49541321353bf03c44a5f51130fa0138b5919d5752ba0f503015708f739e2d44b4d3d31c59fe7bb74
TLSH
T1C8D012511A110664D5115972130795052AC5F51EE205819CB939C47D9E6A8B04D925D6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 1e9efee4381b37cc7d3015e073913180be12fa8de0fa9ec5f34de7854d4e60be
MD5 c1111914018cebaab748d2976c2043d9
SHA1 052412dec55c78ce58923b4714e9980fd065a4c1
SHA512 c94eb5239d78746e23adfe0358ff5099d00ff99e7e5ab0fb4c7ab99c944a766301691dbe36936ee428610d47d84014f62c820c915b7b6712258fbafdebd330d4
TLSH
T135D012963E020134C05030B3110362080C00D21B810980886438D55D1E09C500D17441
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

02b122e2-ab79-4a8f-b452-624d43d64741.tmp

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Default\02b122e2-ab79-4a8f-b452-624d43d64741.tmp
Size 6KB
SHA256 459ac561d5da2d70fe53b25a05f1c54e3f9cf7d4addf18bbeeecae02c830d61b
MD5 55a59083803aa3dd58beb2253b5f9f10
SHA1 d192f6fbc2e23f46c4118f55ae621e3074d7a249
SHA512 c51b5ac02c60fbfcb6bafbea3106c0b52eb8b6f88bd95094c15d4cd4fffa07e1f0f1d8e590ceaef49d36740dd6204fa2e116d19b9ad17d355d6b5cd1b8fb053c
SSDEEP 96:stiY05TVJozbDRffIZ8i0vhEgklm/7qx+WVHMSm+uecadQjg+gxbb6MEB:stiY03+fAZ8paS/S+Wi8dFT6M8
TLSH
T101D18706AF2869774CCBE61DBE35BB42D2FE106225D40E98EBFD851C09D65CC530791B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Default\Cache\Cache_Data\index
Size 256KB
SHA256 736978aff4439e0c07fccd65abe1bfba4f8ede1a5a471e5654efe136a4fe795c
MD5 81a829a77bea6bbc8d0475a7cf3a2fba
SHA1 7f5a82b0226d53d8c7816222a1d6b651215f9d62
SHA512 dcef8f332d4b3b99d22ed3df7508d6fee0b1b8050c4acff9a2b1f82758583e4e3aa3c4be6b4b8aa2c4331393f4902478ee20df6a992237c3f80269aeaba29470
SSDEEP 3:LstlNllkll/l1Aj:LsX3lEte
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Default\DawnWebGPUCache\index
Size 256KB
SHA256 d8f7c8ac23976d7f5aa5328fa905c132418071f4671e4e07cae772e5e49532a9
MD5 4269a88da68105187edbb7c11fb7422e
SHA1 f59257830e06aa7d40b34daf6ef31c89e2af9317
SHA512 9c0ed22bc8dfbfca70a3ebef8e5d6b1ebf8c994b3e63ec175339edffaf072bc270c11046755d8b5d5c949e57aeb7521a3548f6268130f98a997820e0863e43fd
SSDEEP 3:LstlNllkll/lAVa:LsX3lEtp
MD5 SHA1 SHA512 SSDEEP

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Default\Extension State\000003.log
Size 114B
SHA256 e2610960c3757d1757f206c7b84378efa22d86dcf161a98096a5f0e56e1a367e
MD5 891a884b9fa2bff4519f5f56d2a25d62
SHA1 b54a3c12ee78510cb269fb1d863047dd8f571dea
SHA512 cd50c3ee4dfb9c4ec051b20dd1e148a5015457ee0c1a29fff482e62291b32097b07a069db62951b32f209fd118fd77a46b8e8cc92da3eaae6110735d126a90ee
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Default\Extension State\LOG
Size 311B
SHA256 d3f0f76c98d6fa7a33b137a586b50b776250c1876d396b3ce8435be3769843da
MD5 ee11eb571e127e9548c30616ec24595d
SHA1 8ee560982ba5eceabc89f145ef8158edbdab9a40
SHA512 73b082ee86f94c822a0a2524398ed6fdecfe8107bf8279a0160cd99cd1e1cc87ed75d6719af47e40c2f1cb944bbdbcd68b9fe0e2313501826af39ead03b0dd0b
TLSH
T13EE08610589DC12D88B85DF74D76535ACF607009F59536294BAEDF8D305A18DB541285
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityComp

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Default\ExtensionActivityComp
Size 4KB
SHA256 8c471cab38a1696289186d01b06ff6af2a888852dc18d6fb8d2a0e54898104ed
MD5 d25d5e1dc1d93430e64ee17e48ce442e
SHA1 d5c7ca9a57e6cc68927a249fe8e601d52680ac7a
SHA512 f4cff7510b4ad81090e0b1842652f8eb7995f7aefd0ce651151bc24ca3a4305d34ecae41cf193d9b846e8f6359ccf545e5d05e63e6e766fa9761ccebce620f6c
TLSH
T154819284F7C02420DA306EF7A5024BB85E62CA82A5124F93487002D0FCA78ECDC75AAA
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Default\GPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Default\GPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Default\GPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Default\GPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

History

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Default\History
Size 184KB
SHA256 7ac0739f534f89ae63c46cd41f0cffaf0335fe348933e3e3d660044351f2a746
MD5 c77e3d0b59e286bc3b50eff7cb8f464c
SHA1 b260bf6f86fb9aff5b2396bfb49dea658a6f05e5
SHA512 e9d95b19019dda281d5cdc16315ae5368b3bab7786955354de93dabe5885c958c556a09e4b57a707244e0052cbabb00029619deba1810677bf9ea06e7287e8fb
SSDEEP 96:xhBttejzH+bF+UIYysX0fxQp97fEHt/DfLjLqL/hbgI4VgNr2jWRk/E0:xhBqH+bF+UI3iWGVfWN3qL/8VgZQW3
TLSH
T1AA04EC1E5F743612CDBD513668E745B3597CF03F8B636AC62CA114B1CEE2652A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1383424b-ec5a-4052-a8d9-ba74a1956a3b.tmp

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Default\Network\1383424b-ec5a-4052-a8d9-ba74a1956a3b.tmp
Size 188B
SHA256 bbd6109a743d45655fc0c503967f973e792b10f52627a2e1f0f044ba4fddb7f9
MD5 9544a33775c4178e83190e76254bf434
SHA1 7ae4bc41765f02aab9d158ed7098053ff6355689
SHA512 580a17bf9e7fd31ebd4a214e888ce5183a49caef74fb647abb364f39250acec9b85706daf20a9ff924ce94f56fe8280830f29584aa7b011ade8dc25a3bd4711b
TLSH
T155C02261C0A9B13A10B8052208806D016E3AB07802415CE88157476991901BA421B012
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Default\Network\Reporting and NEL
Size 36KB
SHA256 951ea521116baf347ce89b628eabc22479fb8e3edfb7597659db2174fbb59804
MD5 fa739570350b78ef09e5d8ca61d0d71f
SHA1 d4e932ca96e76aeb84d3a151d847658df6a5555e
SHA512 8dc44c2f20c0a051568e7479e4553dbbf8ad4ee6b4d5474d8493c4b957f563f858918d862621ff7ccb190be693877dfb0a1245998925f47f9976d431a007ac86
SSDEEP 48:TqIopKWurJNVr1GJmA8pv82pfurJNVrdHXuccaurJN2VrJ1n4n1GmzNGU1cSB:+IEumQv8m1ccnvS6
TLSH
T1BDF2149E0B1D3A10C4F89674EAC10DC37D7D141D8B96EFC45AEC06F2FF866A2A538429
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Default\Network\TransportSecurity
Size 188B
SHA256 a1962b94748b67d3543d18de7047de47f7d0a35878b20318aa0aae216a685af7
MD5 4e2fc7f9131e72313ecae59f7a972c08
SHA1 6bbf4c88df85420106122da032bd2b65d6b7ada9
SHA512 e92dfd3ff8d86b451f0a7a4811af6ecaa9993d17ce34ad4ab5da50fab7de8d7a10440fb2b16a7828c260a42066c145c1d0deeb2ac9c4bc8b8530db16004bf114
TLSH
T13BC022714029A236506806324DC0AD206E37B130008158F882630238A0540F66213852
MD5 SHA1 SHA512 TLSH

Submit Download

Trust Tokens

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Default\Network\Trust Tokens
Size 36KB
SHA256 19e1e0d60dc0a70455014fec98b5e4b73e93a80651600368745ab0d4a49c9529
MD5 4203aba60fd9de5b4232fc624db3f817
SHA1 1f07dfc552d6b509c83c36cb05986007ce29e250
SHA512 6240f8ef505e093f0ea99306adfa90969b3de094cde08b61076bd2c737763c0815108f532ec17e766fe15f9b1bcb9d82096f799ef04d50c3ce2305d8247bfeb1
SSDEEP 24:TL33lIIAoDJ84l5lDlnDMlRlyKDtM6UwccWfp15fBIe:TL31DtX5nDOvyKDhU1cSB
TLSH
T15EF2469BE93C6FA3CCC56FB08B47E5B51F752BDEE68276C4247130A10EA860055E7443
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Default\Preferences
Size 6KB
SHA256 dfc85f9e1c0290e3bef2a57e9b5da17e9555dd8b9fc5a590427e5ac4c964c8f6
MD5 1db1d2d2981b4dac52b0221a3346fca3
SHA1 0b2f6cb53ef3a59ac17e23ad9e7d928ecaae6f79
SHA512 9642b63e03aadd2e7ec9ca218b9eb90c2969f58c3ae62e980eb18d6ef4e7d86c99e45fab15eb1143ca441aee74a16907abb8dfc8b532a7d1bddf2611d5260373
SSDEEP 96:stiY05TVJoZb9RffIZ8i0vhEzklm/7qx+WVHMSm+uecadQjg+gxbbQKEB:stiY03ufAZ8pa5/S+Wi8dFTQK8
TLSH
T17AD18706AF2869774CCBE619BA35BB42D2FD106265D40E98EBFD861C09E66CC520790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Safe Browsing Cookies

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Default\Safe Browsing Network\Safe Browsing Cookies
Size 20KB
SHA256 e87b3d155c7582d4c1d889308b58f84e8fe90a1581014b21b785d6694bd156cc
MD5 a156bfab7f06800d5287d4616d6f8733
SHA1 8f365ec4db582dc519774dcbbfcc8001dd37b512
SHA512 6c8eeab3ae6fb0d5be7758cca521665b216f31aed1aeeeaf121c99dc9f0192b385de0da36e94f90dd4a9bbbac6be2c5a55d2f284a24ccb7dec2c5302fb9b027c
SSDEEP 24:TLekLbXYFpFNYbatqn1kweka6za6UwpQ9YH8PATZ6HfB:T66LopFMatSaw/auUOt8B
TLSH
T101928A4E5F346220C0F44B36EDD189672F7C212CD3A72699DE1420F3DE929ABF1095AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Default\Secure Preferences
Size 6KB
SHA256 c1b65c807801eb5945a1e54f0b1d289af2bfb5e84034584a0699c80208267844
MD5 2c815c9bce72724e5199ce1647060ce0
SHA1 1d50a830fbdf663e5a3407c2a8fa879c99875967
SHA512 31f76123b4c7aa23e0587bb7c708fc1dcf7ae860d3539ee19ad9e967875d03f58f1edd63e5208c964628e80908ae297f8f3def497924c072e49c25ea8bb40ab5
SSDEEP 96:Hl/iFPlf/ROoKOpkF5d1/iI7sMaTEv9V5h5pg5+eexp3uXkmYV4hoEo:HUFWGfM9lbNmYzd
TLSH
T1F8D1D6A70639C574AF889FEBDC393ECBD9AA019F88D54C0696E6C44806C2EFC11DE4D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Default\Shared Dictionary\cache\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 48B
SHA256 2263b4109b9e1f21f5d20a6d660f59e3284705fa9b91e01ac19f486ff197a68b
MD5 909cd3d5ba2ecd839f099cf9a38d6329
SHA1 40c701f479bf0316730258e85628e6124c633589
SHA512 700421c8c54bf3ce6801a98a7f35b6810cd54abeb0a18d9e8d70a1df68507f7c07acbba817c778884a0ba62232b549d11fa7332e0b443f514e4f6706d7a6f94c
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Default\Shared Dictionary\db
Size 44KB
SHA256 f8e7cd835195e4eff7855d20676484ca75f7e7e4fe5b13164fc926b365e1dea0
MD5 b581f0ff8f8aa3371ae47b48c95329e8
SHA1 4f588efadf3675f3526cbe762c50eb8e79d9f2e5
SHA512 e0a79452acb39838afea8ce34e05c7e5cde68f2a786fe4423ddf2588fc6047339e8e4c3140d7e0447f938b2266f52b9ddbdcc0f40c495d833b47b3f27d7996de
SSDEEP 24:TL6xgJhPwMuz6G0ZestjteX4yNQeYlv+1b3IeNS6+6Uwg89oIPq81fBG:TFOIy4m1b3fbUdSo2qSB
TLSH
T16513AA0F1E187551D1BD0235E9E64E6B2E7E204C9B8369D125F01AF24DE251C9D2F27F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SharedStorage

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Default\SharedStorage
Size 4KB
SHA256 1fe8f6113488865c546d2faa55b21482662ce4be19d4f505eeefa09bc3131489
MD5 b9263bbf24428aaca95d04d04f3aeb6f
SHA1 5346015345f6df766df4bc9b42da076f6fdd440f
SHA512 5bc2978bc96e1347500db552e2a2dfd9e5df25c8e16d3ab57e5519de43cb9c08f5aeefd1a6f6947d7fa253505918763b932f622636fc2a7a429fa72a5b49c7cc
TLSH
T1EE810440534000F1D05407F755D1130C0F07D3D4D5410F0355010041CC51D445C70FC4
MD5 SHA1 SHA512 TLSH

Submit Download

000001.dbtmp

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Default\Site Characteristics Database\000001.dbtmp
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Default\Site Characteristics Database\000003.log
Size 40B
SHA256 f096bc366a931fba656bdcd77b24af15a5f29fc53281a727c79f82c608ecfab8
MD5 148079685e25097536785f4536af014b
SHA1 c5ff5b1b69487a9dd4d244d11bbafa91708c1a41
SHA512 c2556034ea51abfbc172eb62ff11f5ac45c317f84f39d4b9e3ddbd0190da6ef7fa03fe63631b97ab806430442974a07f8e81b5f7dc52d9f2fcdc669adca8d91f
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Default\Site Characteristics Database\LOG
Size 339B
SHA256 17cb0f21c0a531ca6c6280aeda3b09ada124a9b20e4e2afa1a3e663afdba086a
MD5 d9a654964568371f7b1801e5d6a96d7b
SHA1 e0c762712e05abe6495775654134ff69975f46c1
SHA512 6dcd8a138247a762d16a16c4c566a2e8ba48fce2a543325e9e29dc14938e345566c30210663537a92c7321554f1c430928228941e69991211e99555a48acb602
TLSH
T104E0203054CAC53F85D905FB0532A31DCB61F004F5E571351F79EB8C254F088B442741
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Default\Site Characteristics Database\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Default\Sync Data\LevelDB\000003.log
Size 46B
SHA256 a2ca52e34b6138624ac2dd20349cde28482143b837db40a7f0fbda023077c26a
MD5 90881c9c26f29fca29815a08ba858544
SHA1 06fee974987b91d82c2839a4bb12991fa99e1bdd
SHA512 15f7f8197b4fc46c4c5c2570fb1f6dd73cb125f9ee53dfa67f5a0d944543c5347bdab5cce95e91dd6c948c9023e23c7f9d76cff990e623178c92f8d49150a625
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Default\Sync Data\LevelDB\LOG
Size 317B
SHA256 f9b4836316fa02c7935c74bdc97e80bc6fc2fc3d46d92a8d147bb3689e9fb2cd
MD5 2f878f59222a930c8bd35ee0f72922d2
SHA1 73d15ac7cf96acfa5e608c10b66ca014d2da8cb9
SHA512 f369ffb4fddadcae8a7ffbc133a7f702433e077a4cc078a22733d7c09164818b8afcc10aabb85b54d071dbe8bfc8fc5cd7774701645ca44e28146770c7a63d6c
TLSH
T130E0867098C9C13A88E889E70975532ACBB0F405F7C636298F69DB4C254A088B551685
MD5 SHA1 SHA512 TLSH

Submit Download

Visited Links

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Default\Visited Links
Size 128KB
SHA256 e5a852c3e968053bffb171102e55573b3e63038402f9de6b7c902cceb56e8407
MD5 a58db3fdde08a0be781b56b85f358994
SHA1 d6bd9c17721c16530ce1a8d04585f945fe5ae420
SHA512 0ce3c2814cf994f1f08f8959dd7d82c7987cc4d795a106be7963aa8879d95344ce1590e3674b0f2ec1fdb6b28d8b9f91821555379ca1c6f749d5c15b7faedb25
SSDEEP 3:ImtVWp+:IiVW
MD5 SHA1 SHA512 SSDEEP

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Default\Web Data
Size 216KB
SHA256 2a7b3bb5ac287c4d5fd81c76626b1e8e15f32f34d2b37738fdc98fa6ad43baaf
MD5 4ebc7325aec489f53e4635ea414d14a5
SHA1 c85641375cd9bd4a26922883598a02e8861a6bec
SHA512 a2ad8a907e9d3405fefc533ef4ae65fcb32615914163af646c6af02a412df1d3a2250d0ec8e04ab5d04b6d8453122d43d97aa3340358fe5e7c748e9e2117fb74
SSDEEP 192:njQLsS6Xuv9PhDnLUMjA03VpQYouZtuQKIqJZWTVTdhsrV0dwe:nEL3CuvrDnwMjA0FpQY5Z0QKIqJE6K
TLSH
T14924440A7B746001EDA6E9721CB080771D3C61AD8F22E6826DB254694DF6853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d4b8689f-8422-4fe0-bf6e-569ee87ce541.tmp

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Default\d4b8689f-8422-4fe0-bf6e-569ee87ce541.tmp
Size 6KB
SHA256 12784613d4e69c1beaa16c7fccd2e8a4f6225a0010f241e267f483dda5c18ce9
MD5 286f73f8b9ad3c1e193c6fd4e4691b50
SHA1 d5bb013daf80d4de112765d058546f39fa13b9f9
SHA512 719310e5417d952b79bacb4889a8ef0a9196470daa0e237783a6f8936474e93ace6151501849792e1ed0d6d8043f149f4c62231e6b51ae0636c21d3cdd3454d7
SSDEEP 96:stiY05TVJozbDQffIZ8i0vhEgklm/7qx+WVHMSm+uecadQjg+gHoNb6MOB:stiY03bfAZ8paS/S+Wi8dFxs6MC
TLSH
T196E1A806AE2869778CCBE61DBA35BF42E3F9106225D00E98EBFD861C05E65CD530791B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Default\shared_proto_db\metadata\LOG
Size 329B
SHA256 5ffe955563cb3652fa9662d412e08a2f2a72c2ab7ca249ff6b561cd811df6f3f
MD5 9ec1a4b2282a3df46fdd3e55922d076a
SHA1 5ab92ffaf0309a2708355356ff65cb1e9a65257d
SHA512 0e822f16c314ef1dc033740f6d94234d20bf09b30a0b01c78dd1a9e5d5a7b331a78344e424fdd396ae2e683e49f3f9276f254da8d3b4a5dca623591dc92f421d
TLSH
T11CE02010BC99C05F84B924E708725355C7107405FA553A394F5ACF4C180A489B541142
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Last Version
Size 14B
SHA256 06205ebe5acf3073d12a4ac419377a3449e6d6b5fa7fa2b1c4201f007c4ddd91
MD5 96fb5f155aee0f8cd88274656c58ca83
SHA1 1fe86d9df188b0f86ae2d8da8f7c1ef663258baf
SHA512 fee0061ef23ef3fc35d050501b47db921f490c2aec2a016304c9f27228d3ecf7df9641fd681d9babd275ffd3dbd20e33e38fa5bf583c2852ffcd4b04bedf015c
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Local State
Size 1KB
SHA256 e5da74c2b32616acd43b487f6a6fa43c73773111265e021996ad64b92125a080
MD5 2f39508311811e6cbedbf93b17e80112
SHA1 503155b306a13313748897ce1ffe77fa0ea8808c
SHA512 dd35c2459574a88c4852cafd29760e9b9dc278ba7a48ae920236413ae9e1e7dc86d0092ad8409224d25310d97b6d389c90a6e0156705b0a2f2d3c1701eb0c9b6
TLSH
T18121B4B2D4605FBA6CD85E16B2127E97FF7150A682184F08E2EE0B0802DB19C213BC33
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\OriginTrials\0.0.1.7\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\ShaderCache\index
Size 256KB
SHA256 9fa9646044954c942b3a47d389747c5e529bce1d62b0167623b64f1e1beaed37
MD5 0da44b4b2418a374304c10d719b20d56
SHA1 516c6c67b789bdf914783b70892870dac09e4e98
SHA512 fa9a0bf732d2978cfdf170a21135d744477ec6cea58a716814ca624eea32ebae8a6fe43a6713e21d386b757c934bd410ccdf42ba2e1d55e77159093f20a037c4
SSDEEP 3:LsOllllklkXlw:LsUlP
MD5 SHA1 SHA512 SSDEEP

Submit Download

adblock_snippet.js

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.84\adblock_snippet.js
Size 2KB
SHA256 9aa899e0bf660ee8f894b97c28f05db06cc486915953b7f3b2ff9902fa8da690
MD5 f5c93c471485f4b9ab45260518c30267
SHA1 ee6e09fb23b6f3f402e409a2272521fdd7ad89ed
SHA512 e50a1baf20db9bc867e85ab72f9976430e87d8516ca552f9342a5c91822c9e1404e4f915042d48d841cca3fb16fd969bf0aa01195791ce29de63c45814fcdcda
TLSH
T1C541F146AB3477B703EC24D158271C03B3684494562CE519FB51EBAEAE1C46B4EEED23
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.84\manifest.json
Size 116B
SHA256 181a1631374b5ac1fff89559f7e23498ad9ee4796885d7b956d5e7d5f9c3f8c7
MD5 daf93729356a67ea1f849554827fdab1
SHA1 17dad0cbc82d5e04fb068896a5832f983e124c01
SHA512 473d9d608f2f3324d5db6eddeb4554a7271df4a6b62377820d935c001a8a2376479aa4d3e3b80ffbfdd3ba80f56fe72f1bc9dd020bcb396182b753353b883a30
TLSH
T1FBB09262A8084633249523F4A2639363CBA86D4A91346606091B9480659E73B22A5219
MD5 SHA1 SHA512 TLSH

Submit Download

Other

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\Other
Size 34B
SHA256 2b4a47b82cbe70e34407c7df126a24007aff8b45d5716db384d27cc1f3b30707
MD5 cd0395742b85e2b669eaec1d5f15b65b
SHA1 43c81d1c62fc7ff94f9364639c9a46a0747d122e
SHA512 4df2ce734e2f7bc5f02bb7845ea801b57dcf649565dd94b1b71f578b453ba0a17c61ccee73e7cff8f23cdd6aa37e55be5cb15f4767ff88a9a06de3623604fbf0
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Trust Protection Lists\1.0.0.38\manifest.json
Size 132B
SHA256 de864bf0ab8abacfba536d4e9764eca658f903bd2457f955e128c4ee181c7e58
MD5 c9209ab189a035569ba3c65d7375d220
SHA1 1987aaec8f436325415fe36c168c9a37829523f9
SHA512 60495e096f78de05c6025a9d7b69aef9dce0d08ec1abbd4ccba206827a8c25d8449f54f93637599649762ec09a034d32fc8afc06199b1b57cd010ff1a0c850c0
TLSH
T17FC092615802797A14DEB7F00D29CB926AB3CB2E18A4650546F5C228ED2DCDFB5B330B
MD5 SHA1 SHA512 TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

b8da978c-cf3c-4319-831a-0622e52bf832.tmp

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\b8da978c-cf3c-4319-831a-0622e52bf832.tmp
Size 16KB
SHA256 90b68b8df6abb4984548747d1da5a7765ed4a9ba224f3a0a8c7db16103b88ad8
MD5 6b99dd1bfd7db5674835d16a371ef9d3
SHA1 eaf9a7de53f711d4eda9fed969e8107247a44f49
SHA512 83dba8d341360ecef7b28e0c327330617f3b7f1fe85f74879f5d412180c2ab127b11dfeae95ac4a7b26b629f5a456be750c056a1fdcb17af3e01b718d622b6f9
SSDEEP 384:zA+OBqImmJvGBLx3NaFMJFU3NbkUB+kYLg6r5:tcvGtlNUB7YRV
TLSH
T1F072ADB52C756E272CEBCA0AF98D3B47CB791193C0D56FE9C8EC8F0E019B1842352925
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cf268738-4b4f-4064-8139-a6220e0c592e.tmp

Path C:\Users\Admin\AppData\Local\kun-assistant\webview\launcher\EBWebView\cf268738-4b4f-4064-8139-a6220e0c592e.tmp
Size 1KB
SHA256 57681e5b802f4d295a7f95e125edff2fcf7f5f0385b041d8b34c60886f28cca7
MD5 7d8f96ddbb576557ac8116197ee9907c
SHA1 b0d36eb324735c4126edaea5950590a47e18626e
SHA512 43ff63a9d500d8ead230ee21d2787ac9ce45919256cdff077932ed45f78375c8350c8f111b46c6ab33dc8227cbfcff4282ab872e378db3663ec32559f53205e7
TLSH
T16C3185B1A4605F766CD9AE56B1423E67EF721066C1154F08A2EE4B0801DB58C716ED32
MD5 SHA1 SHA512 TLSH

Submit Download

state.json

Path C:\Users\Admin\AppData\Roaming\kun-assistant\launcher-update\f8259ab0b9b1d172cd2bc27d3948885a\state.json
Size 291B
SHA256 55444815643f817dfc3ef56c11d7ee3de8825640ca0d195545615d62a0a5fcd9
MD5 aa17020a05d2f1b58a46fa3d996cb45f
SHA1 9e9a5ab13099a71b63c460a6978b8607388ffba4
SHA512 7bdcd7b090a603b8f57bf4b1db57d67cdd2e8226145dc55177cb0b9becaf6f60a3389e8c7ab92bb75d5d020c195a642a37016159a657607a53b82d1b039833be
TLSH
T18ED0EB0FCEA166F0038C0BC2244F4DCF868B220438C40AB6EC6AA393240F2BC3C82438
MD5 SHA1 SHA512 TLSH

Submit Download

memory/448-61-0x00007FF992930000-0x00007FF992931000-memory.dmp

Download

memory/448-62-0x00007FF992F30000-0x00007FF992F31000-memory.dmp

Download

memory/632-35-0x00007FF9931D0000-0x00007FF9931D1000-memory.dmp

Download

memory/632-421-0x00000247DBD80000-0x00000247DBE1B000-memory.dmp

Download

memory/1632-147-0x00007FF9931D0000-0x00007FF9931D1000-memory.dmp

Download

memory/1632-390-0x000001E592E70000-0x000001E592F0B000-memory.dmp

Download

memory/3376-577-0x0000019C77340000-0x0000019C773DB000-memory.dmp

Download

memory/3428-873-0x000001E566120000-0x000001E566121000-memory.dmp

Download

memory/3428-869-0x000001E566120000-0x000001E566121000-memory.dmp

Download

memory/3428-868-0x000001E566120000-0x000001E566121000-memory.dmp

Download

memory/3428-867-0x000001E566120000-0x000001E566121000-memory.dmp

Download

memory/3428-875-0x000001E566120000-0x000001E566121000-memory.dmp

Download

memory/3428-879-0x000001E566120000-0x000001E566121000-memory.dmp

Download

memory/3428-878-0x000001E566120000-0x000001E566121000-memory.dmp

Download

memory/3428-877-0x000001E566120000-0x000001E566121000-memory.dmp

Download

memory/3428-876-0x000001E566120000-0x000001E566121000-memory.dmp

Download

memory/3428-874-0x000001E566120000-0x000001E566121000-memory.dmp

Download

memory/3800-578-0x0000011A4AE70000-0x0000011A4AF0B000-memory.dmp

Download

memory/4852-0-0x0000016776080000-0x00000167760A8000-memory.dmp

Download