e64775374097f1b1c8fd4173f7d5be4305b88cec26a56d003113aff2837ae08e

Analysis

max time kernel
1555s
max time network
1549s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
23-07-2023 20:28

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

putty-64bit-0.78-installer.msi
Size

3.5MB
MD5

108b432c4dc0a66b657d985e180bec71
SHA1

262812d43303b7ddc7c04a1c243172ebe6579f00
SHA256

e64775374097f1b1c8fd4173f7d5be4305b88cec26a56d003113aff2837ae08e
SHA512

5ddb97078b417f22c54dce768564dec58fd92a9c190f7a6cac9c7979a0f136dd439da1d59dd3c088e709433f5c4f79c033abd4b6ca8989d38620c20f4623386e
SSDEEP

98304:Ujhyh9EoxGHgBRn8Tg4IDrwRW8FMDMb34+NHC6:UjhyJPR8Tg4IDrwdFMD048

Score

8^/10

Malware Config

Signatures

Blocklisted process makes network request 4 IoCs

flow	pid	Process
6	4116	msiexec.exe
8	4116	msiexec.exe
10	4116	msiexec.exe
13	4116	msiexec.exe

Executes dropped EXE 2 IoCs

pid	Process
868	NjRat 0.7D Danger Edition.exe
5584	NjRat 0.7D Danger Edition.exe

Loads dropped DLL 8 IoCs

pid	Process
868	NjRat 0.7D Danger Edition.exe
868	NjRat 0.7D Danger Edition.exe
868	NjRat 0.7D Danger Edition.exe
868	NjRat 0.7D Danger Edition.exe
5584	NjRat 0.7D Danger Edition.exe
5584	NjRat 0.7D Danger Edition.exe
5584	NjRat 0.7D Danger Edition.exe
5584	NjRat 0.7D Danger Edition.exe

Enumerates connected drives 3 TTPs 23 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\E:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe

Checks processor information in registry 2 TTPs 5 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3011986978-2180659500-3669311805-1000_Classes\Local Settings	firefox.exe

NTFS ADS 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\Downloads\NjRat.0.7D.Danger.Edition.zip:Zone.Identifier	firefox.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
868	NjRat 0.7D Danger Edition.exe

Suspicious use of AdjustPrivilegeToken 47 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4116	msiexec.exe
Token: SeIncreaseQuotaPrivilege	4116	msiexec.exe
Token: SeSecurityPrivilege	3348	msiexec.exe
Token: SeCreateTokenPrivilege	4116	msiexec.exe
Token: SeAssignPrimaryTokenPrivilege	4116	msiexec.exe
Token: SeLockMemoryPrivilege	4116	msiexec.exe
Token: SeIncreaseQuotaPrivilege	4116	msiexec.exe
Token: SeMachineAccountPrivilege	4116	msiexec.exe
Token: SeTcbPrivilege	4116	msiexec.exe
Token: SeSecurityPrivilege	4116	msiexec.exe
Token: SeTakeOwnershipPrivilege	4116	msiexec.exe
Token: SeLoadDriverPrivilege	4116	msiexec.exe
Token: SeSystemProfilePrivilege	4116	msiexec.exe
Token: SeSystemtimePrivilege	4116	msiexec.exe
Token: SeProfSingleProcessPrivilege	4116	msiexec.exe
Token: SeIncBasePriorityPrivilege	4116	msiexec.exe
Token: SeCreatePagefilePrivilege	4116	msiexec.exe
Token: SeCreatePermanentPrivilege	4116	msiexec.exe
Token: SeBackupPrivilege	4116	msiexec.exe
Token: SeRestorePrivilege	4116	msiexec.exe
Token: SeShutdownPrivilege	4116	msiexec.exe
Token: SeDebugPrivilege	4116	msiexec.exe
Token: SeAuditPrivilege	4116	msiexec.exe
Token: SeSystemEnvironmentPrivilege	4116	msiexec.exe
Token: SeChangeNotifyPrivilege	4116	msiexec.exe
Token: SeRemoteShutdownPrivilege	4116	msiexec.exe
Token: SeUndockPrivilege	4116	msiexec.exe
Token: SeSyncAgentPrivilege	4116	msiexec.exe
Token: SeEnableDelegationPrivilege	4116	msiexec.exe
Token: SeManageVolumePrivilege	4116	msiexec.exe
Token: SeImpersonatePrivilege	4116	msiexec.exe
Token: SeCreateGlobalPrivilege	4116	msiexec.exe
Token: SeDebugPrivilege	2136	firefox.exe
Token: SeDebugPrivilege	2136	firefox.exe
Token: SeDebugPrivilege	2136	firefox.exe
Token: SeDebugPrivilege	2136	firefox.exe
Token: SeDebugPrivilege	2136	firefox.exe
Token: SeDebugPrivilege	2136	firefox.exe
Token: SeRestorePrivilege	5624	7zG.exe
Token: 35	5624	7zG.exe
Token: SeSecurityPrivilege	5624	7zG.exe
Token: SeSecurityPrivilege	5624	7zG.exe
Token: 33	3768	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	3768	AUDIODG.EXE
Token: SeDebugPrivilege	2136	firefox.exe
Token: SeDebugPrivilege	2136	firefox.exe
Token: SeDebugPrivilege	2136	firefox.exe

Suspicious use of FindShellTrayWindow 17 IoCs

pid	Process
4116	msiexec.exe
2136	firefox.exe
2136	firefox.exe
2136	firefox.exe
2136	firefox.exe
4116	msiexec.exe
2136	firefox.exe
5624	7zG.exe
868	NjRat 0.7D Danger Edition.exe
868	NjRat 0.7D Danger Edition.exe
868	NjRat 0.7D Danger Edition.exe
868	NjRat 0.7D Danger Edition.exe
868	NjRat 0.7D Danger Edition.exe
5584	NjRat 0.7D Danger Edition.exe
5584	NjRat 0.7D Danger Edition.exe
5584	NjRat 0.7D Danger Edition.exe
5584	NjRat 0.7D Danger Edition.exe

Suspicious use of SendNotifyMessage 11 IoCs

pid	Process
2136	firefox.exe
2136	firefox.exe
2136	firefox.exe
868	NjRat 0.7D Danger Edition.exe
868	NjRat 0.7D Danger Edition.exe
868	NjRat 0.7D Danger Edition.exe
868	NjRat 0.7D Danger Edition.exe
5584	NjRat 0.7D Danger Edition.exe
5584	NjRat 0.7D Danger Edition.exe
5584	NjRat 0.7D Danger Edition.exe
5584	NjRat 0.7D Danger Edition.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2136	firefox.exe
2136	firefox.exe
2136	firefox.exe
2136	firefox.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3668 wrote to memory of 2136	3668	firefox.exe	99
PID 3668 wrote to memory of 2136	3668	firefox.exe	99
PID 3668 wrote to memory of 2136	3668	firefox.exe	99
PID 3668 wrote to memory of 2136	3668	firefox.exe	99
PID 3668 wrote to memory of 2136	3668	firefox.exe	99
PID 3668 wrote to memory of 2136	3668	firefox.exe	99
PID 3668 wrote to memory of 2136	3668	firefox.exe	99
PID 3668 wrote to memory of 2136	3668	firefox.exe	99
PID 3668 wrote to memory of 2136	3668	firefox.exe	99
PID 3668 wrote to memory of 2136	3668	firefox.exe	99
PID 3668 wrote to memory of 2136	3668	firefox.exe	99
PID 2136 wrote to memory of 3588	2136	firefox.exe	100
PID 2136 wrote to memory of 3588	2136	firefox.exe	100
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2796	2136	firefox.exe	101
PID 2136 wrote to memory of 2532	2136	firefox.exe	102
PID 2136 wrote to memory of 2532	2136	firefox.exe	102
PID 2136 wrote to memory of 2532	2136	firefox.exe	102

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Windows\system32\msiexec.exe
msiexec.exe /I C:\Users\Admin\AppData\Local\Temp\putty-64bit-0.78-installer.msi
1⤵
- Blocklisted process makes network request
- Enumerates connected drives
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:4116

C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3348

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3668
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  - Modifies registry class
  - NTFS ADS
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:2136
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2136.0.832198849\706588396" -parentBuildID 20221007134813 -prefsHandle 1900 -prefMapHandle 1892 -prefsLen 20938 -prefMapSize 232675 -appDir "C:\Program Files\Mozilla Firefox\browser" - {630ecb0a-3c38-471d-9486-24ff3866ab28} 2136 "\\.\pipe\gecko-crash-server-pipe.2136" 2004 26ead0b8c58 gpu
    3⤵
    PID:3588
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2136.1.844103679\1244705093" -parentBuildID 20221007134813 -prefsHandle 2380 -prefMapHandle 2376 -prefsLen 20974 -prefMapSize 232675 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {2924298e-f0e3-44c3-b893-375d6e2ba139} 2136 "\\.\pipe\gecko-crash-server-pipe.2136" 2392 26eac830858 socket
    3⤵
    PID:2796
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2136.2.1319287139\743066674" -childID 1 -isForBrowser -prefsHandle 3216 -prefMapHandle 3212 -prefsLen 21077 -prefMapSize 232675 -jsInitHandle 1092 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {92e10331-fb92-40a4-8a3f-fc6dad076be3} 2136 "\\.\pipe\gecko-crash-server-pipe.2136" 3228 26eb0e11558 tab
    3⤵
    PID:2532
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2136.3.796722906\1825064710" -childID 2 -isForBrowser -prefsHandle 3792 -prefMapHandle 3788 -prefsLen 26437 -prefMapSize 232675 -jsInitHandle 1092 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9d33c3b7-4323-4be5-a2dd-7cf73b84d469} 2136 "\\.\pipe\gecko-crash-server-pipe.2136" 3160 26eaf4be958 tab
    3⤵
    PID:2016
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2136.4.1218744726\831912212" -childID 3 -isForBrowser -prefsHandle 4256 -prefMapHandle 3792 -prefsLen 26496 -prefMapSize 232675 -jsInitHandle 1092 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {34618a0f-a4ea-4bff-b202-e369d89b49d8} 2136 "\\.\pipe\gecko-crash-server-pipe.2136" 4272 26eb1daa858 tab
    3⤵
    PID:1448
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2136.5.489049853\348988519" -childID 4 -isForBrowser -prefsHandle 5020 -prefMapHandle 5024 -prefsLen 26577 -prefMapSize 232675 -jsInitHandle 1092 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {97b21cda-95d4-4f23-a296-f8f4779f5363} 2136 "\\.\pipe\gecko-crash-server-pipe.2136" 4956 26eb1c3f258 tab
    3⤵
    PID:224
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2136.6.344160701\1402547237" -childID 5 -isForBrowser -prefsHandle 5156 -prefMapHandle 5160 -prefsLen 26577 -prefMapSize 232675 -jsInitHandle 1092 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {8f2e39ca-cd28-4594-9849-4cc203dbb57e} 2136 "\\.\pipe\gecko-crash-server-pipe.2136" 5148 26eb34aa458 tab
    3⤵
    PID:1716
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2136.7.1188117847\1980845294" -childID 6 -isForBrowser -prefsHandle 5204 -prefMapHandle 5208 -prefsLen 26577 -prefMapSize 232675 -jsInitHandle 1092 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {33fa2aa9-0e15-4d07-aae1-e01472e89e41} 2136 "\\.\pipe\gecko-crash-server-pipe.2136" 5196 26eb34abc58 tab
    3⤵
    PID:4100
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2136.8.2130013501\1465466758" -childID 7 -isForBrowser -prefsHandle 4540 -prefMapHandle 4548 -prefsLen 30064 -prefMapSize 232675 -jsInitHandle 1092 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {0354e54e-aaf8-4380-b693-372ba6f39c52} 2136 "\\.\pipe\gecko-crash-server-pipe.2136" 2940 26eb8106258 tab
    3⤵
    PID:1712
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2136.9.1601505638\1200404624" -childID 8 -isForBrowser -prefsHandle 5872 -prefMapHandle 5756 -prefsLen 30200 -prefMapSize 232675 -jsInitHandle 1092 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9c73511f-c111-4dd2-a2a8-aa07e4717427} 2136 "\\.\pipe\gecko-crash-server-pipe.2136" 5868 26eb9ddbc58 tab
    3⤵
    PID:2184
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2136.10.470426827\384075203" -parentBuildID 20221007134813 -prefsHandle 6676 -prefMapHandle 6672 -prefsLen 30200 -prefMapSize 232675 -appDir "C:\Program Files\Mozilla Firefox\browser" - {6216faca-a9c8-4036-bbc1-b13ec6909566} 2136 "\\.\pipe\gecko-crash-server-pipe.2136" 6668 26ebad05f58 rdd
    3⤵
    PID:5284
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2136.11.1815628952\1462199697" -childID 9 -isForBrowser -prefsHandle 6716 -prefMapHandle 6852 -prefsLen 30200 -prefMapSize 232675 -jsInitHandle 1092 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {87983bdf-fb31-414f-afc7-5270c093ec1e} 2136 "\\.\pipe\gecko-crash-server-pipe.2136" 6676 26ebc20e358 tab
    3⤵
    PID:5756
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2136.12.982709418\513683952" -childID 10 -isForBrowser -prefsHandle 4472 -prefMapHandle 4468 -prefsLen 30200 -prefMapSize 232675 -jsInitHandle 1092 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {232d53df-49a2-4f33-8a23-fddcedd7c816} 2136 "\\.\pipe\gecko-crash-server-pipe.2136" 4460 26eb17f5758 tab
    3⤵
    PID:2932

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:1488

C:\Program Files\7-Zip\7zG.exe
"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\" -spe -an -ai#7zMap3817:108:7zEvent16565
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:5624

C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\NjRat 0.7D Danger Edition.exe
"C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\NjRat 0.7D Danger Edition.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:868

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x378 0x3f4
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3768

C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\NjRat 0.7D Danger Edition.exe
"C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\NjRat 0.7D Danger Edition.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:5584

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\CLR_v2.0_32\UsageLogs\NjRat 0.7D Danger Edition.exe.log

Filesize
774B

MD5
049b2c7e274ebb68f3ada1961c982a22

SHA1
796b9f03c8cd94617ea26aaf861af9fb2a5731db

SHA256
5c69c41dceda1bb32d4054d6b483bb3e3af84c8cf0a6191c79068168a1d506b3

SHA512
fb2ee642e1401772d514e86b0b8dd117659335066242e85c158b40e8912572f2bd7b9a0f63f9b9f4d7a2e051579345215f6b1f147881f3d1e78f335c45d78ebf

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\activity-stream.discovery_stream.json

Filesize
157KB

MD5
3e35e43bb0e20eabcaa0acba11946c79

SHA1
92e6241de7f1b5a290a3f9695b41c15cbc396e49

SHA256
4be397ed865be153519787c3f63bd158ad49114a5a35bce73467bd4f3db0ee8a

SHA512
aeefd87a50296eb442f7f8be2843aa133076e191f64b5cf067ed83b69f558cee02ff165184234fde3081a4839d455945f0b8817b21dbffe53c2010d5d9c6bdff

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\cache2\doomed\11848

Filesize
8KB

MD5
f7f575fc61e82074d8b95572042f4ba0

SHA1
b0662dd050537a10b77ca5d0f234b8cf486d64de

SHA256
2ee7f6c482ecb79ef917098afd6ae9b2c8b93775fe20b260a58ed624445b5aba

SHA512
39cae85112d080d0dfbb9e12e2d1412ab081955224f3ff0d025a14ec8af72b3308d301d48c03eeb301cce635caaf5a4eabcba084d16f15b9e3a13f0e0732f5c5

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\cache2\doomed\17976

Filesize
15KB

MD5
a4bd7c9b8e4413310d227462f446676f

SHA1
b488c5544a18c3ed50794ad806cf8c29dd37b50e

SHA256
6831a90b82286a285fcadb5a7906423ff85da71fd640020fdd5e8e7c2d58345f

SHA512
d35123b76b39c09aa302d1294041982f34a4313841bb761eae10cfd126fa85c06819cd17c52f5a66a9ef9c6dee08abf6898581530f8578aee0ceb0cf35b4e076

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\cache2\doomed\19758

Filesize
15KB

MD5
492f942426d138b9dcba5f6cb366833d

SHA1
feff9ae44592901d960c5c891042b72a1548131c

SHA256
c79ae636e906061511ba4f58cbea894340ac4d03d5c4f36905841f0c46edfb44

SHA512
96fca4f98376cf5fe95f82239113042e213c198d0b9e60930b7443e623f9844908f458c288ef82177ab98a7cadf4b3ba9ba54a2adffe2231cf7f047c80c34699

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\cache2\doomed\20630

Filesize
9KB

MD5
337d985e1b0388dcedf8f77365362c49

SHA1
590d3be6c5be65b5d0a6e8acf2ccdee7e9119b2b

SHA256
ce76360868bb982ca788aae034737302ea1ac10bd41d0021168b10fc255f0055

SHA512
95959a09d9cb05260d546df62b97553a227a7a19e2e01983fadb4def872c7448d7c170bc1884f5d921c1fcc27a978533e521270ac7fcc351f166584d0ae3938a

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\cache2\doomed\26944

Filesize
15KB

MD5
28b72f5c08759c9755cd1f77e107d191

SHA1
045fb8518bfa7f333b835465d84f48aede87b757

SHA256
f8ce13ededd73547bc7f228d51e8a7281fd7fe41bd8c5e2e7742a064fd6769a7

SHA512
1d9678f004cf3497ee9d3087760346ab53049ee37b5a39df9791737c64423f0ff3449a1d6fb6e7623e152843bd5ff9b64ecbad3a4c1215e2b3f2b35ac7f748e9

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\cache2\doomed\27507

Filesize
15KB

MD5
df228e81d55d89ae40da9fd2ed1cb254

SHA1
f8ba79a6ba031930dd8a65178a805e5f4cc9bb77

SHA256
5b25a81ae0283aac7c4f5fdf6e50cc19f615ab2fc8a1b1462378124be6c283f7

SHA512
054ab5a70096e9b7897fa48ccc205d296f743e6ece018bf8fcf2858d9e8a1c7f58a3071c6b67a7c464616d344a997d7ca24c58f6ed5791e46dd80b21616332b4

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\cache2\doomed\30177

Filesize
14KB

MD5
1362a4fefd98730fc598b5e2992b5618

SHA1
ecfd1658e3d8a47643530965c882333cdb395cfd

SHA256
c9a79cb1efd8ee091be26e9cc9ab02f92c541be738439042759a0651cb2c8721

SHA512
4350fdc21ed20c0d8c4f28e16efc4bb78ee0d7ab3aecb2bb4281f83a04578869b066ed87754d8318327a232844b1734f284825bd99280f12c34c7a1823afa526

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\cache2\doomed\996

Filesize
15KB

MD5
5f2a1d50e1943176ad204ef4c1c6d0d1

SHA1
78869c9fbee7d0cfc5ae9000c00b5433d472cfa7

SHA256
5bdb93352a2ead642b90b92d91575c67188647d680a6dca3a5a57154f5c58f30

SHA512
086657feb7ed5155183cccf148ec6acceb71385d83c4b8a41acdf8b6f98bb53870c1c1c7e9b6ecdd452b8adffed32ac52cb4e04e4ab671bf2975be104d502542

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\cache2\entries\1944E74FDBB6A63C44694A32653C7866FE814868

Filesize
999KB

MD5
c0fda7346aefd561847f42793889db9a

SHA1
ac89dc1e93638850cef85e61412aade63eb2a44c

SHA256
0a72c7e4161c9e42bfb4b6cd8e6c167422fccbbea5c6757edacf7a41310a24da

SHA512
0cf694ae00fa72ee09c984d9ebef0e548d6f83b318bdb2339b9f7fed42183a974893fd8de85f9a1d2b203441f6a6b9369e593f7078e52ee776f49dac0b761f83

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\cache2\entries\215D49FF643493224227B22C54616CD2BE054B23

Filesize
343KB

MD5
d2489a43b3da26ddd60374f2e93c0682

SHA1
18407b976a0da9bbeb164880550174cb0fe001b7

SHA256
fd1e066424b70344e802ffa849e482bccbaf204ed13f57e847d6b88f18e6f419

SHA512
8db59e7fd6c499103f7dcb7d2f8373c12867209ba7e82bce15e8759123ec0a3d5d2cfa4706bbf69119cb527e89bc7078c53334fcdfd9a1ce26158b64c113eb67

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\cache2\entries\21C733A4DC63C9060D7B19B2B5312C27674F8D0D

Filesize
99KB

MD5
0c16a3f58352235a6f7d40e2e25315f0

SHA1
4ccf75e3b16daea5a9615482faa57fcb887d2db8

SHA256
6ed6b0667f4ed98feffc0aa2c67155c8f8a9b2e63cbecb8b202fda81bad95219

SHA512
3b2c7122a45255f6e1a6ea5acc0ee30a515601780189e37d7e26f0ab91a4f4c58ba81dfa1bf1a7736ab81c7ce8a14eb0f209b68c31f04a7d522474a497bf4d23

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\cache2\entries\2B61D3A351FF10C6DCDBB93E2780006E8533629D

Filesize
22KB

MD5
1df78b800ea36301df25602ab09d2f74

SHA1
63ee1309c52e6f797dc6ee927e5a5b4b6e0f40e1

SHA256
c90b60bd45d63ac544ef4ffa818369a7bfd8e439d54c3c282d7a9d1c52032cd9

SHA512
24737fc3bc8053a5c45ecf0955652f095fc4a3bb23f412c823174a610021b4134f3721d0aea02ed6abeaecfb2156da62561e0ace3ae3b5c96bc76e256c1b4d2f

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\cache2\entries\40A21EC5E702B343FA39FD08DDD683740B612237

Filesize
21KB

MD5
2f282b73c3801b0820257e27e0b69408

SHA1
281178155810d58a3b469262ea757a704503ef3f

SHA256
52a295870759fa31c7d21f61dbfe394f2965eb91ea5ce48ba894b4aa2808dbc2

SHA512
2f181de8510813366fc31bc0bebd3706d6d273d7d7ab089bf80dcc2418f47928e254c0cad5edafe8e82e3a559d328d307d046c6edcd6f56014a6073cd5f955e1

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\cache2\entries\5CC726E981024967D69A08D036973E9D1B616627

Filesize
100KB

MD5
0c56bc71da873bb5b6c7736906a52f1c

SHA1
79d7a08754d91cd14a7d47b3859d2561907e0e13

SHA256
d06a832648caba776785b8265874d5739fbdc60ded47ae6fa0d79547913f35d1

SHA512
77916fb92a512466207e3b6b0524c571a774ce77e0c06430fbdb120712a869bdff72ccabfc70a7ff8743406001e1844ff9f91e634e77883989ff98977dfe7c32

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\cache2\entries\5EBC198C0F85348FF51AAA143D47F47EA300405B

Filesize
15KB

MD5
a005550e87584283177808c1a3389e19

SHA1
443cd18dba3449b2cff5b4904deef657eff852b4

SHA256
7232ecb79cb5e2b8a1cf6a2b348c3919e250064c67fed91e1d4ee1526b7fa0fb

SHA512
4b12bbafb3ddea32201767c9fdbf4bbca32f07f0317e15b5e9627329a591f17146045d6a7a80e165aa6b1c7b52114bd21c3442231d258ae662d07d70e1206d1e

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\cache2\entries\82725590E89D9C0A9218A3C9AF68FE1AC9BEA941

Filesize
228KB

MD5
47bf3f81b867c89bf9ef41e5b99e231e

SHA1
115f453ef7031250171ee84dc92ab775c08e0e70

SHA256
0ed83449e4fef0a221e4606815f8e64205c2a0e8bb4a5564d3d6789ba27fb192

SHA512
0bc44b972f30a856eeac74f1254a62a41649b71b5f9eab89827fe67ce1f56a99393cec442c51c5c170ba77ab369fe9b864c71e7575762492811ba0632e589234

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\cache2\entries\8C90DCCF140162BCB25BA5FED2E0978241BD3A5C

Filesize
67KB

MD5
650e7e54d2575002e4196063db413c49

SHA1
3b8bfcbb81f03ab9889a41aaf9ecbcb41c0aec6d

SHA256
3b3c86508ca620ff26ff2ab8d91a054653b7f2eb239cac90f7143c50337f1955

SHA512
f880751c68a313960ec48d182bc22ef2c2c251d67f970c6243304bb86e9e49929c6bb2385958682c3d6b3759d781f5adc29bf6e80cad65dbffc06145e6128583

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\cache2\entries\8FA3BAE990EBC1F67C2040C4B849E598F0111537

Filesize
15KB

MD5
2f77d2fbd6af8ada794f123219e773b6

SHA1
65fe7c3b95abc8648ff8838f9c414ef05f66dbd9

SHA256
22972556c0b7df10e295665ebb5c703d8e494a15099bf4c5a15dc1e636d6d569

SHA512
b069daf5ac55161b9c6e163a7316f2be47788a0ff98beb84388c8eff51a5165d250f83b50281c2e27a1604e09a7d93674f40d4b66e68d6d26cafa9c1ae2057ab

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\cache2\entries\9E42D640A41FDB552EF131C1703BCAA914A48953

Filesize
565KB

MD5
3a08817091f8eeefd9b7d1121fbdcd10

SHA1
183922f2e49ba15485c9661d34069a8133e64dc0

SHA256
993b1e3602a49a9d32186fc2a31b2869e91cbad4561cbb29d504e75eea57a70f

SHA512
50173ada48d239995acdbfdd585351b80aa0bb28f6d138260653ba16f9adcb299295b14dfef09999dd6767cd55457d241984375729d0d715cf30ee08bd1fc0a6

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\cache2\entries\9FC8C85689D31525EACE26158B83B464F43A027B

Filesize
24KB

MD5
f99197a9894f25dc401c97c6639b9446

SHA1
80a6e4cb98eb1c10eebf8c7888c66fab47c8bbfa

SHA256
ef7806257b2aa94a44a347238ded5869ed20f43c3309b76001439d39411a3230

SHA512
0b074b0a910dd79caf8af8a63ad749344781625dae564df82d8a704ff5a9b9dc3ba5fdeb982deb61aeb093f4acd9584d4e8e15617fc1b086c8c401ca0f93a199

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\cache2\entries\B52F8844EC4328C19BD0DB9D89D44611600E252C

Filesize
107KB

MD5
fa3e22c9f050a50774a6e9148c5b00f9

SHA1
7846785c96a5c53a01ca81c044b76c519666e67f

SHA256
e97166bd63bd1ed6ed6e59df9875695b44a85179cd6e455514813c762b9042e2

SHA512
dbd83a17a31e38dcd116b5bead093e5296803af870d5e66087dbb0e167d5c1b6903b99ee498ec17032ecb3a01245d94896eb7b881dc509442b4ce27fef2fc861

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\cache2\entries\C01A5A91B3215B34E7411A2001698454305F7026

Filesize
13KB

MD5
d5410a2a30b61949b93e6e7639eb80a9

SHA1
8e2252805b4fddccdd2eb557a5e67524ad29e6fe

SHA256
e018887f2d6136829b887b1e3cab06ecfd1a714e06c2d760d587d82a05ec6af4

SHA512
f0eb5984a544139b4335850e03e6a0e700b2044ae36f73827312e3aa24186d0ef15f8e5c76100de003258934aba4a20c93fbdf20fe5b89b92c5fe7e38c66f940

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\cache2\entries\C83EB21E8CFF71428E92C4711D3D7B34BD3E22DF

Filesize
15KB

MD5
fb6fae89b79f7336ce6b9ae253da5e10

SHA1
26d007a076c0ca40bd45e4a44ea388d69ad59253

SHA256
dd336e1b97fd2d004d9c1325f478f79dd5dc0e42cec0f5251f68ea6369ca753b

SHA512
0b25b0102c5c482ceeba25c96a9f341bfc22c6556374e2a8739141698b18d7c39e50dbb936e88d79ac023f4c7a17a02427318e1f4b69738a4a59e386ee873085

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\cache2\entries\ED9826654AE8BD972BDE17A9E0A449D3F881E430

Filesize
14KB

MD5
53a5ed260cf6933cfee1579deadd1d13

SHA1
6a05d94e235f824baeaf922e1e336970cccc04bf

SHA256
1c1c6950cbb345706995077ec0e893e5baef9365bc4cf774f7a63871fa8b61d1

SHA512
d0785fe5a027133f2dd40d34b730c7077020cca884c8d253d1ef6ae6d6e9f40c5680f74fe0e4b14c3b12431c6f10730d4e0b35b897b883548817d9f177124977

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\cache2\entries\F96A1A8368D3C3DD1FA81D170326E6C1C65D342F

Filesize
30KB

MD5
36d7ed47ea59aaffc63822b5feefdefc

SHA1
a7e7e91124eb098309c2602c3d514111edede65e

SHA256
6269ed6a768f3d860e9272d9c5e4b52b8d7ae5b5d8d50c3e8f2e492285a0898a

SHA512
77685caabc6b30289de3dcec490dc31e0bc5c8822f4436b5803cc593f9b82f5d887fb62cae56662f07d7a8cd1b28fbe11a854ee00010fa0a70ca4be3c3dc8695

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\cache2\entries\FDEAA0815DBBE19DF0AB32A1F5FBBAAFEB520D6D

Filesize
140KB

MD5
c2de520c7f2edfeee7590b1cfc219cf4

SHA1
f14535469eef34d1ec990bbc97a84fedbb4ed37e

SHA256
281502f45c4597f35612b4051d2cb3eec34da1ee2686aa445cdb549e22eb2e2a

SHA512
44378dfc76834c385f920c5d107bf85570db3850d528f3192790e18cc4ecc8c33b9efe1b5f580cb40ccdc6707c2389904f23769eafa2c207092b9c25ffda01de

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\jumpListCache\mtPU8NceFC6E5EshqRF1_A==.ico

Filesize
691B

MD5
42ed60b3ba4df36716ca7633794b1735

SHA1
c33aa40eed3608369e964e22c935d640e38aa768

SHA256
6574e6e55f56eca704a090bf08d0d4175a93a5353ea08f8722f7c985a39a52c8

SHA512
4247460a97a43ce20d536fdd11d534b450b075c3c28cd69fc00c48bdf7de1507edb99bef811d4c61bed10f64e4c788ee4bdc58c7c72d3bd160b9b4bd696e3013

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\personality-provider\nb_model_build_attachment_arts_and_entertainment.json

Filesize
67KB

MD5
6c651609d367b10d1b25ef4c5f2b3318

SHA1
0abcc756ea415abda969cd1e854e7e8ebeb6f2d4

SHA256
960065cc44a09bef89206d28048d3c23719d2f5e9b38cfc718ca864c9e0e91e9

SHA512
3e084452eefe14e58faa9ef0d9fda2d21af2c2ab1071ae23cde60527df8df43f701668ca0aa9d86f56630b0ab0ca8367803c968347880d674ad8217fba5d8915

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\personality-provider\nb_model_build_attachment_autos_and_vehicles.json

Filesize
44KB

MD5
39b73a66581c5a481a64f4dedf5b4f5c

SHA1
90e4a0883bb3f050dba2fee218450390d46f35e2

SHA256
022f9495f8867fea275ece900cfa7664c68c25073db4748343452dbc0b9eda17

SHA512
cfb697958e020282455ab7fabc6c325447db84ead0100d28b417b6a0e2455c9793fa624c23cb9b92dfea25124f59dcd1d5c1f43bf1703a0ad469106b755a7cdd

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\personality-provider\nb_model_build_attachment_beauty_and_fitness.json

Filesize
33KB

MD5
0ed0473b23b5a9e7d1116e8d4d5ca567

SHA1
4eb5e948ac28453c4b90607e223f9e7d901301c4

SHA256
eed46e8fe6ff20f89884b4fc68a81e8d521231440301a01bb89beec8ebad296b

SHA512
464508d7992edfa0dfb61b04cfc5909b7daacf094fc81745de4d03214b207224133e48750a710979445ee1a65bb791bf240a2b935aacaf3987e5c67ff2d8ba9c

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\personality-provider\nb_model_build_attachment_blogging_resources_and_services.json

Filesize
33KB

MD5
c82700fcfcd9b5117176362d25f3e6f6

SHA1
a7ad40b40c7e8e5e11878f4702952a4014c5d22a

SHA256
c9f2a779dba0bc886cc1255816bd776bdc2e8a6a8e0f9380495a92bb66862780

SHA512
d38e65ab55cee8fef538ad96448cd0c6b001563714fc7b37c69a424d0661ec6b7d04892cf4b76b13ddbc7d300c115e87e0134d47c3f38ef51617e5367647b217

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\personality-provider\nb_model_build_attachment_books_and_literature.json

Filesize
67KB

MD5
df96946198f092c029fd6880e5e6c6ec

SHA1
9aee90b66b8f9656063f9476ff7b87d2d267dcda

SHA256
df23a5b6f583ec3b4dce2aca8ff53cbdfadfd58c4b7aeb2e397eade5ff75c996

SHA512
43a9fc190f4faadef37e01fa8ad320940553b287ed44a95321997a48312142f110b29c79eed7930477bfb29777a5a9913b42bf22ce6bb3e679dda5af54a125ea

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\personality-provider\nb_model_build_attachment_business_and_industrial.json

Filesize
45KB

MD5
a92a0fffc831e6c20431b070a7d16d5a

SHA1
da5bbe65f10e5385cbe09db3630ae636413b4e39

SHA256
8410809ebac544389cf27a10e2cbd687b7a68753aa50a42f235ac3fc7b60ce2c

SHA512
31a8602e1972900268651cd074950d16ad989b1f15ff3ebbd8e21e0311a619eef4d7d15cdb029ea8b22cf3b8759fa95b3067b4faaadcb90456944dbc3c9806a9

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\personality-provider\nb_model_build_attachment_computers_and_electronics.json

Filesize
45KB

MD5
6ccd943214682ac8c4ec08b7ec6dbcbd

SHA1
18417647f7c76581d79b537a70bf64f614f60fa2

SHA256
ab20b97406b0d9bf4f695e5ec7db4ebad5efb682311e74ca757d45b87ffc106b

SHA512
e57573d6f494df8aa7e8e6a20427a18f6868e19dc853b441b8506998158b23c7a4393b682c83b3513aae5075a21148dd8ca854a11dabcea6a0a0db8f2e6828b8

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\personality-provider\nb_model_build_attachment_finance.json

Filesize
33KB

MD5
e95c2d2fc654b87e77b0a8a37aaa7fcf

SHA1
b4b00c9554839cab6a50a7ed8cd43d21fdaf35dc

SHA256
384bf5fcc6928200c7ebb1f03f99bf74f6063e78d3cd044374448f879799318e

SHA512
9696998a8d0e3a85982016ff0a22bb8ae1790410f1f6198bb379c0a192579f24c75c25c7648b76b00d25a32ac204178acaccd744ee78846dfc62ebf70bf7b93a

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\personality-provider\nb_model_build_attachment_food_and_drink.json

Filesize
67KB

MD5
70ba02dedd216430894d29940fc627c2

SHA1
f0c9aa816c6b0e171525a984fd844d3a8cabd505

SHA256
905357002f2eced8bba1be2285a9b83198f60d2f9bb1144b5c119994f2ec6e34

SHA512
3ae60d0bf3c45d28e340d97106790787be2cc80ba579d313b5414084664b86e89879391c99e94b6e33bdc5508ea42a9fd34f48ca9b1e7adfa7b6dd22c783c263

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\personality-provider\nb_model_build_attachment_games.json

Filesize
44KB

MD5
4182a69a05463f9c388527a7db4201de

SHA1
5a0044aed787086c0b79ff0f51368d78c36f76bc

SHA256
35e67835a5cf82144765dfb1095ebc84ac27d08812507ad0a2d562bf68e13e85

SHA512
40023c9f89e0357fae26c33a023609de96b2a0b439318ef944d3d5b335b0877509f90505d119154eaa81e1097ecfb5aa44dd8bb595497cdecfc3ee711a1fe1d5

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\personality-provider\nb_model_build_attachment_health.json

Filesize
33KB

MD5
11711337d2acc6c6a10e2fb79ac90187

SHA1
5583047c473c8045324519a4a432d06643de055d

SHA256
150f21c4f60856ab5e22891939d68d062542537b42a7ce1f8a8cec9300e7c565

SHA512
c2301ed72f623b22f05333c5ecc5ebf55d8a2d9593167cc453a66d8f42c05ff7c11e2709b6298912038a8ea6175f050bbc6d1fc4381f385f7ad7a952ad1e856b

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\personality-provider\nb_model_build_attachment_hobbies_and_leisure.json

Filesize
67KB

MD5
bb45971231bd3501aba1cd07715e4c95

SHA1
ea5bfd43d60a3d30cda1a31a3a5eb8ea0afa142a

SHA256
47db7797297a2a81d28c551117e27144b58627dbac1b1d52672b630d220f025d

SHA512
74767b1badbd32cacd3f996b8172df9c43656b11fea99f5a51fff38c6c6e2120fae8bdd0dd885234a3f173334054f580164fdf8860c27cbcf5fb29c5bcdc060d

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\personality-provider\nb_model_build_attachment_home_and_garden.json

Filesize
33KB

MD5
250acc54f92176775d6bdd8412432d9f

SHA1
a6ad9ad7519e5c299d4b4ba458742b1b4d64cb65

SHA256
19edd15ebce419b83469d2ab783c0c1377d72a186d1ff08857a82bca842eea54

SHA512
a52c81062f02c15701f13595f4476f0a07735034fcf177b1a65b001394a816020ee791fed5afae81d51de27630b34a85efa717fe80da733556fdda8739030f49

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\personality-provider\nb_model_build_attachment_internet_and_telecom.json

Filesize
67KB

MD5
36689de6804ca5af92224681ee9ea137

SHA1
729d590068e9c891939fc17921930630cd4938dd

SHA256
e646d43505c9c4e53dbaa474ef85d650a3f309ccf153d106f328d9b6aeb66d52

SHA512
1c4f4aa02a65a9bbdf83dc5321c24cbe49f57108881616b993e274f5705f0466be2dd3389055a725b79f3317c98bdf9f8d47f86d62ebd151e4c57cc4dca2487c

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\personality-provider\nb_model_build_attachment_jobs_and_education.json

Filesize
33KB

MD5
2d69892acde24ad6383082243efa3d37

SHA1
d8edc1c15739e34232012bb255872991edb72bc7

SHA256
29080288b2130a67414ecb296a53ddd9f0a4771035e3c1b2112e0ce656a7481a

SHA512
da391152e1fbce1f03607b486c5dea9a298a438e58e440ebb7b871bd5c62d7339b540eed115b4001b9840de1ba3898c6504872ff9094ba4d6a47455051c3f1c5

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\personality-provider\nb_model_build_attachment_law_and_government.json

Filesize
68KB

MD5
80c49b0f2d195f702e5707ba632ae188

SHA1
e65161da245318d1f6fdc001e8b97b4fd0bc50e7

SHA256
257ee9a218a1b7f9c1a6c890f38920eb7e731808e3d9b9fc956f8346c29a3e63

SHA512
972e95de7fe330c61cd22111bd3785999d60e7c02140809122d696a1f1f76f2cd0d63d6d92f657cdec24366d66b681e24f2735a8aabb8bcecec43c74e23fb4f5

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\personality-provider\nb_model_build_attachment_online_communities.json

Filesize
67KB

MD5
37a74ab20e8447abd6ca918b6b39bb04

SHA1
b50986e6bb542f5eca8b805328be51eaa77e6c39

SHA256
11b6084552e2979b5bc0fd6ffdc61e445d49692c0ae8dffedc07792f8062d13f

SHA512
49c6b96655ba0b5d08425af6815f06237089ec06926f49de1f03bc11db9e579bd125f2b6f3eaf434a2ccf10b262c42af9c35ab27683e8e9f984d5b36ec8f59fd

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\personality-provider\nb_model_build_attachment_people_and_society.json

Filesize
45KB

MD5
b1bd26cf5575ebb7ca511a05ea13fbd2

SHA1
e83d7f64b2884ea73357b4a15d25902517e51da8

SHA256
4990a5d17bea15617624c48a0c7c23d16e95f15e2ec9dd1d82ee949567bbaec0

SHA512
edcede39c17b494474859bc1a9bbf18c9f6abd3f46f832086db3bb1337b01d862452d639f89f9470ca302a6fcb84a1686853ebb4b08003cb248615f0834a1e02

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\personality-provider\nb_model_build_attachment_pets_and_animals.json

Filesize
44KB

MD5
5b26aca80818dd92509f6a9013c4c662

SHA1
31e322209ba7cc1abd55bbb72a3c15bc2e4a895f

SHA256
dd537bfb1497eb9457c0c8ecbd2846f325e13ddef3988fd293a29e68ab0b2671

SHA512
29038f9f3b9b12259fb42daa93cdefabb9fb32a10f0d20f384a72fe97214eff1864b7fa2674c37224b71309d7d9cea4e36abd24a45a0e65f0c61dc5ca161ec7c

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\personality-provider\nb_model_build_attachment_real_estate.json

Filesize
67KB

MD5
9899942e9cd28bcb9bf5074800eae2d0

SHA1
15e5071e5ed58001011652befc224aed06ee068f

SHA256
efcf6b2d09e89b8c449ffbcdb5354beaa7178673862ebcdd6593561f2aa7d99a

SHA512
9f7a5fbe6d46c694e8bc9b50e7843e9747ea3229cf4b00b8e95f1a5467bd095d166cbd523b3d9315c62e9603d990b8e56a018ba4a11d30ad607f5281cc42b4cd

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\personality-provider\nb_model_build_attachment_reference.json

Filesize
56KB

MD5
567eaa19be0963b28b000826e8dd6c77

SHA1
7e4524c36113bbbafee34e38367b919964649583

SHA256
3619daa64036d1f0197cdadf7660e390d4b6e8c1b328ed3b59f828a205a6ea49

SHA512
6766919b06ca209eaed86f99bee20c6dad9cc36520fc84e1c251a668bcfe0afcf720ea6c658268dc3bbaaf602bfdf61eb237c68e08d5252ea6e5d1d2a373b9fe

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\personality-provider\nb_model_build_attachment_science.json

Filesize
56KB

MD5
7a8fd079bb1aeb4710a285ec909c62b9

SHA1
8429335e5866c7c21d752a11f57f76399e5634b6

SHA256
9606ce3988b2d2a4921b58ac454f54e53a9ea8f358326522a8b1dcc751b50b32

SHA512
8fc1546e509b5386c9e1088e0e3a1b81f288ef67f1989f3e83888057e23769907a2b184d624a4e4c44fcd5b88d719bd4cca94dfb33798804a721b8be022ec0c6

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\personality-provider\nb_model_build_attachment_shopping.json

Filesize
67KB

MD5
97d4a0fd003e123df601b5fd205e97f8

SHA1
a802a515d04442b6bde60614e3d515d2983d4c00

SHA256
bfd7e68ddca6696c798412402965a0384df0c8c209931bbadabf88ccb45e3bb6

SHA512
111e8a96bc8e07be2d1480a820fc30797d861a48d80622425af00b009512aacb30a2df9052c53bfbf4ee0800b6e6f5b56daa93d33f30fecb52e2f3850dfa9130

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\personality-provider\nb_model_build_attachment_sports.json

Filesize
56KB

MD5
ce4e75385300f9c03fdd52420e0f822f

SHA1
85c34648c253e4c88161d09dd1e25439b763628c

SHA256
44da98b03350e91e852fe59f0fc05d752fc867a5049ab0363da8bb7b7078ad14

SHA512
d119dc4706bbf3b6369fe72553cfacf1c9b2688e0188a7524b56d3e2ac85582a18bbee66d5594e0fb40767432646c23bf3e282090bd9b4c29f989a374aeae61f

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\personality-provider\nb_model_build_attachment_travel.json

Filesize
67KB

MD5
48139e5ba1c595568f59fe880d6e4e83

SHA1
5e9ea36b9bb109b1ecfc41356cd5c8c9398d4a78

SHA256
4336ac211a822b0a5c3ce5de0d4730665acc351ee1965ea8da1c72477e216dfa

SHA512
57e826f0e1d9b12d11b05d47e2f5ae4f5787537862f26e039918cb14faff4bc854298c0b7de3023e371756a331c0f3ee1aa7cebbbf94ec70cdfc29e00a900ed1

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\hw21aoqh.default-release\personality-provider\recipe_attachment.json

Filesize
1KB

MD5
be3d0f91b7957bbbf8a20859fd32d417

SHA1
fbc0380fe1928d6d0c8ab8b0a793a2bba0722d10

SHA256
fc07d42847eeaf69dcbf1b9a16eb48b141c11feb67aa40724be2aee83cb621b7

SHA512
8da24afcf587fbd4f945201702168e7cfc12434440200d00f09ddcd1d1d358a5e01065ac2a411fdf96a530e94db3697e3530578b392873cf874476b5e65d774a

Download Submit
C:\Users\Admin\AppData\Local\Temp\tmpaddon

Filesize
442KB

MD5
85430baed3398695717b0263807cf97c

SHA1
fffbee923cea216f50fce5d54219a188a5100f41

SHA256
a9f4281f82b3579581c389e8583dc9f477c7fd0e20c9dfc91a2e611e21e3407e

SHA512
06511f1f6c6d44d076b3c593528c26a602348d9c41689dbf5ff716b671c3ca5756b12cb2e5869f836dedce27b1a5cfe79b93c707fd01f8e84b620923bb61b5f1

Download Submit
C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

Filesize
8.0MB

MD5
a01c5ecd6108350ae23d2cddf0e77c17

SHA1
c6ac28a2cd979f1f9a75d56271821d5ff665e2b6

SHA256
345d44e3aa3e1967d186a43d732c8051235c43458169a5d7d371780a6475ee42

SHA512
b046dd1b26ec0b810ee441b7ad4dc135e3f1521a817b9f3db60a32976352e8f7e53920e1a77fc5b4130aac260d79deef7e823267b4414e9cc774d8bffca56a72

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms

Filesize
20KB

MD5
c72e08eba5f443771aefc338a473fcb5

SHA1
7f24c1ae80f2d9d6d717213383f0e3433c0de109

SHA256
90356b95ad6c620b03a807c4ddc0f087f30ecfe09a72f5738b37ae71e109986e

SHA512
215c1c268768e42cdbfdcd54d0d6b9972dd19d9514e9ec124ea3013b0faa9e188b7d0987afd2072e5093ef0f464973b97a81b9900a623f6861af93ba66dace6e

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hw21aoqh.default-release\SiteSecurityServiceState.txt

Filesize
706B

MD5
9d26e8234a1fed0ab4008d7153b2d2da

SHA1
376acde1aa97c9f5f185cd515629d538d847457b

SHA256
f9ee57a3f5ff4bf56c7ac6c4bd036cac6b736fdb3fbde9fc0f08ff7a607bf6fe

SHA512
6a7c91fd7b826de867b03e3639548e3a149adeaf366b9f0ac0a703cfc2842b5803b1bfe36afc7e5228467258f51792c3fb49d369d3f426c4260e8f9a1a35831f

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hw21aoqh.default-release\addonStartup.json.lz4

Filesize
5KB

MD5
110257930d3212f2a56a87ef830b7a72

SHA1
f25159215732c2581686c5af699668be23a19414

SHA256
f6e170e6ffe3ba8322b8cb1d000427a517c2c611ca06faffde47cbb2f7bcf846

SHA512
7c687cbb7368025ab78d8a69ad59eb6cfe1cfda666812168508da5fe1de7084e7aa935b1d936d952d77771846357892387a36cddfbe6eb6ed3b00961fe3254f8

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hw21aoqh.default-release\bookmarkbackups\bookmarks-2023-07-23_11_glpT1zBd-82rkOotrGGfYA==.jsonlz4

Filesize
941B

MD5
e3a765ed2fddbff66e4278dbdfd1d4cd

SHA1
f8b08001b1968c3f2ae04760b2c72cd77dddf016

SHA256
0375a5ffc243d2df1dd4234e721fa72ca4c45b85144f5d4c9c59ccc2a542e8c5

SHA512
ec5bb6681f6e1157fd7ea1e6aec37096c91c21eec6a4051e9deba4ae9813a1a882710291f4cf56edcba87923056fdc54fa57e846653ec112a0843e70c7eaadf5

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hw21aoqh.default-release\broadcast-listeners.json

Filesize
216B

MD5
19af7e781426b1b9f9611991bbad3466

SHA1
c17b4bf974218c6731db9d11852ee0cf980f151e

SHA256
52457a5dc1aa7ac16fd38f2d90533d564acea6d18a8c4c88c24cf2ec9b0a6ceb

SHA512
172c9671cfcfbcf2c2ff7bc742304487d32334815327c95694ec5885bda5ff047b17032fe22d89f40c4b435f838f739835a31cea995443f768010119722381a8

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hw21aoqh.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.dll

Filesize
997KB

MD5
fe3355639648c417e8307c6d051e3e37

SHA1
f54602d4b4778da21bc97c7238fc66aa68c8ee34

SHA256
1ed7877024be63a049da98733fd282c16bd620530a4fb580dacec3a78ace914e

SHA512
8f4030bb2464b98eccbea6f06eb186d7216932702d94f6b84c56419e9cf65a18309711ab342d1513bf85aed402bc3535a70db4395874828f0d35c278dd2eac9c

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hw21aoqh.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.info

Filesize
116B

MD5
3d33cdc0b3d281e67dd52e14435dd04f

SHA1
4db88689282fd4f9e9e6ab95fcbb23df6e6485db

SHA256
f526e9f98841d987606efeaff7f3e017ba9fd516c4be83890c7f9a093ea4c47b

SHA512
a4a96743332cc8ef0f86bc2e6122618bfc75ed46781dadbac9e580cd73df89e74738638a2cccb4caa4cbbf393d771d7f2c73f825737cdb247362450a0d4a4bc1

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hw21aoqh.default-release\gmp-widevinecdm\4.10.2557.0\LICENSE.txt

Filesize
479B

MD5
49ddb419d96dceb9069018535fb2e2fc

SHA1
62aa6fea895a8b68d468a015f6e6ab400d7a7ca6

SHA256
2af127b4e00f7303de8271996c0c681063e4dc7abdc7b2a8c3fe5932b9352539

SHA512
48386217dabf7556e381ab3f5924b123a0a525969ff98f91efb03b65477c94e48a15d9abcec116b54616d36ad52b6f1d7b8b84c49c204e1b9b43f26f2af92da2

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hw21aoqh.default-release\gmp-widevinecdm\4.10.2557.0\manifest.json

Filesize
372B

MD5
8be33af717bb1b67fbd61c3f4b807e9e

SHA1
7cf17656d174d951957ff36810e874a134dd49e0

SHA256
e92d3394635edfb987a7528e0ccd24360e07a299078df2a6967ca3aae22fa2dd

SHA512
6125f60418e25fee896bf59f5672945cd8f36f03665c721837bb50adf5b4dfef2dddbfcfc817555027dcfa90e1ef2a1e80af1219e8063629ea70263d2fc936a7

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hw21aoqh.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll

Filesize
11.8MB

MD5
33bf7b0439480effb9fb212efce87b13

SHA1
cee50f2745edc6dc291887b6075ca64d716f495a

SHA256
8ee42d9258e20bbc5bfdfae61605429beb5421ffeaaa0d02b86d4978f4b4ac4e

SHA512
d329a1a1d98e302142f2776de8cc2cd45a465d77cb21c461bdf5ee58c68073a715519f449cb673977288fe18401a0abcce636c85abaec61a4a7a08a16c924275

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hw21aoqh.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.lib

Filesize
1KB

MD5
688bed3676d2104e7f17ae1cd2c59404

SHA1
952b2cdf783ac72fcb98338723e9afd38d47ad8e

SHA256
33899a3ebc22cb8ed8de7bd48c1c29486c0279b06d7ef98241c92aef4e3b9237

SHA512
7a0e3791f75c229af79dd302f7d0594279f664886fea228cfe78e24ef185ae63aba809aa1036feb3130066deadc8e78909c277f0a7ed1e3485df3cf2cd329776

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hw21aoqh.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.sig

Filesize
1KB

MD5
937326fead5fd401f6cca9118bd9ade9

SHA1
4526a57d4ae14ed29b37632c72aef3c408189d91

SHA256
68a03f075db104f84afdd8fca45a7e4bff7b55dc1a2a24272b3abe16d8759c81

SHA512
b232f6cf3f88adb346281167ac714c4c4c7aac15175087c336911946d12d63d3a3a458e06b298b41a7ec582ef09fe238da3a3166ff89c450117228f7485c22d2

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hw21aoqh.default-release\prefs-1.js

Filesize
6KB

MD5
4d5c8f406540e404dbebf4744ed4b84e

SHA1
347d85bf2cd0086664262d7d09dea67f42bb8e64

SHA256
4e19e04db15c3cb231d4e57de80f61890f2046828fc3da6c890602926120ab9a

SHA512
e4de413e99881fcc7bfa1a9e6e2e8301cf173dfdb1332338a6d9be4934ac98a7a421b68e2c3c660f235f8edd575084480b808006e709e50a184976a42cd2f1f3

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hw21aoqh.default-release\prefs-1.js

Filesize
8KB

MD5
f9c6c112f6c4b75ed043c456b29bee9d

SHA1
dcd68d714757b8a0f6286f171d7ffdb5975af376

SHA256
4b2e81578319592768d3b192db599135736b52b5495fbf5134c3d8190134dfc6

SHA512
236075578aeb20aae123ded85fa460918bc77106302711a96521acad50a0e3abc1f4b23ce95fff89feb5b9d7a79633b77ad50fcc3e5a7ce09b5b2e2e4e020fd2

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hw21aoqh.default-release\prefs-1.js

Filesize
10KB

MD5
89326830dcd3719b677d2ad3d05b93b9

SHA1
2d3e521b88307e520215749a9187d99b973878f7

SHA256
013bf40e56815c4f6a11b61447c2646244112fdbf9270c7961f7f5bcd387297b

SHA512
4ff962ed49067d668029db474e89cc68fae232ae3035e2c822255cf6c8385a53a5cec2311aa195ac20bfff44929d48a70a9eac7df577958feab059f884d1b0cb

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hw21aoqh.default-release\prefs.js

Filesize
6KB

MD5
f6684fb8929f09f9ae46d5c567c46538

SHA1
24639de801ba7de6192107b9ac6926fdc5a21a13

SHA256
e5282042b8746272298ac16c79098f1baf979b4569c4d0b6d3220132718eb0f5

SHA512
308289d509019915dd7c78f98a4edce2e9a228494adf5dd573fc8ffa7c51665b9c482fd93cd11cb5e9f54ec7fa22c5a54b468257261658682723cf08dd3b4e1b

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hw21aoqh.default-release\prefs.js

Filesize
6KB

MD5
50a22a7f8983bd42c02770da99dcdef5

SHA1
ec9e71b3b88b6339ef9ad0fbca6569e4be401664

SHA256
29c7956c230d8ea7792d315ac5d41fb90665f4b94a36e0ed80a0d78bab4a76fa

SHA512
9d1ccace1dda12e9c8aee7c7772102e0bcffa7a1cfb5d896a99076fa045d01ea1dce8a82af8248893e2397125a1ee26b24022063f759c24bf94bf2a6b44efbaf

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hw21aoqh.default-release\sessionCheckpoints.json

Filesize
90B

MD5
c4ab2ee59ca41b6d6a6ea911f35bdc00

SHA1
5942cd6505fc8a9daba403b082067e1cdefdfbc4

SHA256
00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2

SHA512
71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hw21aoqh.default-release\sessionstore-backups\recovery.jsonlz4

Filesize
3KB

MD5
2cdfc433cef78a2dd431dd22ac696832

SHA1
3b4b0b8c77b3afe37c1affb7344b1c3fc6562efa

SHA256
69e381a4065dd5235c5e516fa3e0deb19bc290216a80359fbdb22abf9ec0c393

SHA512
61017e5f3dcb1aeec68131ac0e66edb984eaeaa7761d5214acc97e52d133e87202826b551b8e3a0a11ce970913b7cf63f066c018aded0b6f4d55cea0bc2bdf14

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hw21aoqh.default-release\sessionstore-backups\recovery.jsonlz4

Filesize
5KB

MD5
ac64bfc583f9fc7c06a692d478ebf90d

SHA1
c4ff325461564ce3b1ddf0c05831713468f20332

SHA256
63d6d48014c93d3c9cf2b484612055c0c96139f5848d48a51c662c94fd889fb2

SHA512
f553e8319081d3d821be2b5fdc763a1dc56ccb4218b94de6aa35e5f769d21dc42fd9dcf39d3bebab6e4609a45eedeb1048360ab6ee4d90ccb8c4c5b02ff1ac12

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hw21aoqh.default-release\sessionstore-backups\recovery.jsonlz4

Filesize
1KB

MD5
f3e9e521077e580f1234b59e4d97cd33

SHA1
77c133c4e446d06a55f107f682a1964d9bb1fbaa

SHA256
e0e5b33732611426b55496596ad96b2b5cec8ca1b2afea3c1165ef525094cfae

SHA512
ff9275fdb26c4ce512487f369fdbfd327b173ed6c34dba67b63aabae315274892b23b303462c03228ac0e4810efccb326f9d6b8107d70449c9b7a0cf23606b3f

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hw21aoqh.default-release\sessionstore-backups\recovery.jsonlz4

Filesize
9KB

MD5
886262602fa78252e20d03a448c76ec6

SHA1
5087d68d13f86d42501ec5708e7ca1bda28352ae

SHA256
1baea8133d7d45990e357925d11aab4da32590f7967d39775af8145bc94649a0

SHA512
3a1a554dd2b24b32731c9c08e7a765e46f1538e08ae5428db8ec80ad1e4490f41d72372b05f6b5c5b1bb5966327c0ded21bd6db2bfc7b710819eb78e4fb42019

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hw21aoqh.default-release\sessionstore-backups\recovery.jsonlz4

Filesize
6KB

MD5
0ede22978b249a556366e852d46f9c1f

SHA1
31389028612e2abe7a97364268c2d87bc17832ea

SHA256
7585c012089557607a8d10ec306a55ef43ecba4929da830d0789bf6ab3e654ee

SHA512
151e91a59362431a050a82b137e61c95305ea65079f183af82fa2081427a40b739b5ae793ae14ffd64ec58c3f81d0a5c9331816fc4979c0ff72ef13c02f4ac5e

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hw21aoqh.default-release\sessionstore-backups\recovery.jsonlz4

Filesize
12KB

MD5
f2d25d00fb37f41eab60fbb64404685e

SHA1
3f799402b0bb98bfb8c97fe7dfd38429042736c6

SHA256
1f9c99a87234c12e22de3114e2d69a073115cab78ed8fa849aeecfb5f77b2c14

SHA512
18e8c3b70a9d27dfc005b1e70f4864ab340ab7b2f8f4bc648b06f1b0d8bc1df7a6d1ac24afcdfe46f3ebfe3a0df0751854357a91530017c10fabc79a5015f5e6

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hw21aoqh.default-release\sessionstore-backups\recovery.jsonlz4

Filesize
9KB

MD5
af6e75611ad488906411a73e88b985a2

SHA1
36d37fd33ed92efaf3b104ebddb9b1a29d277a95

SHA256
d7bab2dd04d812ce22f14a9d18e240fab461cb1e7d0e5c91de5f39daa91d43c9

SHA512
6871b148160c2e6ea1772ce8f50843ec0332cec5ae36f2d7272575b590eb3733f0765ba0b372d3b94610e884635a7a6fc8261617c396d4f8bdd7f828937553c0

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hw21aoqh.default-release\sessionstore-backups\recovery.jsonlz4

Filesize
12KB

MD5
c771d7c86d474d17fd3fe61ad2c7e015

SHA1
a0a3b64229b0bb4f208c7c6b731920f140168e2d

SHA256
d374341a2823f42f32031778dde2d8facb0de77fc6087a6cb6b638de36043dd6

SHA512
cd86adf2d0f72a38c443255212ab122920fa3abbbc1029e83d82df9e0606c927e68b023823fedc6e22b6249e7507cdc652b23c100f2f9a588ca38204c9d8b54c

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hw21aoqh.default-release\sessionstore-backups\recovery.jsonlz4

Filesize
12KB

MD5
3cc16e97ad1c31d392ca4c037914bbe0

SHA1
a5c12631b74ae972a6171d8963a66919a871dee8

SHA256
2b0481f4c4aa38fd20bbaf68fda795648383487355843fc10d8cd3d0ff1a63e2

SHA512
1a0a17cf962d0c260d3b0f53a3cc8aa31e223fc9067c198007521012317066f7484fb4cbb60c79342221dffdbb93fe8ae3ee63f320a0cb02d9c8bb7eff162696

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hw21aoqh.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

Filesize
392KB

MD5
be15a493d989afd745f986007e6decc0

SHA1
55c3909eb5c45b5e09caca19464764be97584a18

SHA256
f4e772f50353eb8ed0e64284126bc77ee7993c3557b621130899f8f901556003

SHA512
f1fd211c39afd3f15ef9c70f874fa5bcd4b3693ab27a2a71b764f1e8e5f5cfed07e285f3173519962a7694a711428de3a1bc279f4d22a4a1dca065c1992e3732

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hw21aoqh.default-release\targeting.snapshot.json

Filesize
4KB

MD5
9fafb01f9a4458954e43229af49badcf

SHA1
6c00ca3417a5fcee3a2c76a531532d7d8374b805

SHA256
40065ea07f3df5a5d45cac909cc1dceb1bc099620f69c42e4a866059db8a0466

SHA512
0b81076e1849e5b05aaf3ebfe4575deb25a7d91067601902cef82a4c0c787128840d5824eb015a1e8d4707e90e604d864371c75fa603056066c1b4500ec4aa73

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hw21aoqh.default-release\xulstore.json

Filesize
139B

MD5
e100a4d4dc3a8bdf8611d1272b2f132b

SHA1
7c6420a0d4cbeaa3a653d8d1f82b38259cbd6165

SHA256
048f65eb336bb7cfd204cedcfdfb61218cc5a81ba05ad1398378b31f843d7a6f

SHA512
a5943c251007fa49d70107d0769d63474b3454d29f74a087030dcaa73f9181c4b7b07a9c00ed07f803fd5df4060b5b822f430d545be0c539e6a0fc06d1b9fbf6

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition.zip

Filesize
15.8MB

MD5
18b9e23e509ff221ebb1b8a0ce4bc82b

SHA1
bacab6a415515e94b3083c4f7ebda6a82e1d4c7f

SHA256
4b649c32035e383706673ffe6471d6c711989a206d6f96fdd905dda207a5f0cb

SHA512
26091095397f3b229439bb4838f3321de63b9084beab20391a3f85fa8038836d9d0a96a44c7de1d860b182d0b072e0c752494201eb50fd36444cfe742d310ca1

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition.zip

Filesize
15.8MB

MD5
18b9e23e509ff221ebb1b8a0ce4bc82b

SHA1
bacab6a415515e94b3083c4f7ebda6a82e1d4c7f

SHA256
4b649c32035e383706673ffe6471d6c711989a206d6f96fdd905dda207a5f0cb

SHA512
26091095397f3b229439bb4838f3321de63b9084beab20391a3f85fa8038836d9d0a96a44c7de1d860b182d0b072e0c752494201eb50fd36444cfe742d310ca1

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\GeoIP.dat

Filesize
1.2MB

MD5
797b96cc417d0cde72e5c25d0898e95e

SHA1
8c63d0cc8a3a09c1fe50c856b8e5170a63d62f13

SHA256
8a0675001b5bc63d8389fc7ed80b4a7b0f9538c744350f00162533519e106426

SHA512
9bb0c40c83551000577f8cf0b8a7c344bc105328a2c564df70fabec978ad267fa42e248c11fb78166855b0816d2ef3ec2c12fe52f8cc0b83e366e46301340882

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\NjRat 0.7D Danger Edition.exe

Filesize
8.2MB

MD5
eda04645089d60f5cb602c8012a33e07

SHA1
85ae9d1a404d0a2063bee3d8d7bb9bef233fa71a

SHA256
e6cff62a0e8e7c654eec97093a1295773f223cd3a6a11f65c91491cfbd6be751

SHA512
fe9a1bddd90aabb6f5abb1d15666e75ab3c6136d1dbf2c79f0bbcd1dffe2089ac8a73ffe11b3d1cbbd6b393fc51f921fd5c50bf490a38e9038d2c366aaa9468d

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\NjRat 0.7D Danger Edition.exe

Filesize
8.2MB

MD5
eda04645089d60f5cb602c8012a33e07

SHA1
85ae9d1a404d0a2063bee3d8d7bb9bef233fa71a

SHA256
e6cff62a0e8e7c654eec97093a1295773f223cd3a6a11f65c91491cfbd6be751

SHA512
fe9a1bddd90aabb6f5abb1d15666e75ab3c6136d1dbf2c79f0bbcd1dffe2089ac8a73ffe11b3d1cbbd6b393fc51f921fd5c50bf490a38e9038d2c366aaa9468d

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\NjRat 0.7D Danger Edition.exe

Filesize
8.2MB

MD5
eda04645089d60f5cb602c8012a33e07

SHA1
85ae9d1a404d0a2063bee3d8d7bb9bef233fa71a

SHA256
e6cff62a0e8e7c654eec97093a1295773f223cd3a6a11f65c91491cfbd6be751

SHA512
fe9a1bddd90aabb6f5abb1d15666e75ab3c6136d1dbf2c79f0bbcd1dffe2089ac8a73ffe11b3d1cbbd6b393fc51f921fd5c50bf490a38e9038d2c366aaa9468d

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\Settings.ini

Filesize
15B

MD5
332f4072f2109e4d81f2701c2387b186

SHA1
36bbaf7dfa5a6d6d52ab04f533359f3c65cfa8e4

SHA256
17f547710bf4fefb27ff4470e0f78089c4888567eec25380e136d9fde1e02276

SHA512
53841fa1fb9f0fc1c6633e863f1195d27c8dfed1c0caa7ae519d224893eab3fb23487b130539b5c1839eb8aa99d51b3450b6d15cc63275c0a32841897c84d67a

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\Settings.ini

Filesize
12B

MD5
fa215bfeceebb9ca76847501891b87be

SHA1
bde34652bfb19d9c77508de3d420ad333f1af288

SHA256
fa7da5217b20e7aff54612af74268bf21f410d4ef0841a4325bbfce8e93abcb5

SHA512
a697506ad92bda8407015a5dd6dcaf094f8da97d3d89573c7edcb052948792ec7b37019c561edcfd8870abe6410d4f8fefab6e97ecb1915f98c7598f5fea21c5

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\WinMM.Net.dll

Filesize
43KB

MD5
d4b80052c7b4093e10ce1f40ce74f707

SHA1
2494a38f1c0d3a0aa9b31cf0650337cacc655697

SHA256
59e2ac1b79840274bdfcef412a10058654e42f4285d732d1487e65e60ffbfb46

SHA512
3813b81f741ae3adb07ae370e817597ed2803680841ccc7549babb727910c7bff4f8450670d0ca19a0d09e06f133a1aaefecf5b5620e1b0bdb6bcd409982c450

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\WinMM.Net.dll

Filesize
43KB

MD5
d4b80052c7b4093e10ce1f40ce74f707

SHA1
2494a38f1c0d3a0aa9b31cf0650337cacc655697

SHA256
59e2ac1b79840274bdfcef412a10058654e42f4285d732d1487e65e60ffbfb46

SHA512
3813b81f741ae3adb07ae370e817597ed2803680841ccc7549babb727910c7bff4f8450670d0ca19a0d09e06f133a1aaefecf5b5620e1b0bdb6bcd409982c450

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\WinMM.Net.dll

Filesize
43KB

MD5
d4b80052c7b4093e10ce1f40ce74f707

SHA1
2494a38f1c0d3a0aa9b31cf0650337cacc655697

SHA256
59e2ac1b79840274bdfcef412a10058654e42f4285d732d1487e65e60ffbfb46

SHA512
3813b81f741ae3adb07ae370e817597ed2803680841ccc7549babb727910c7bff4f8450670d0ca19a0d09e06f133a1aaefecf5b5620e1b0bdb6bcd409982c450

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\WinMM.Net.dll

Filesize
43KB

MD5
d4b80052c7b4093e10ce1f40ce74f707

SHA1
2494a38f1c0d3a0aa9b31cf0650337cacc655697

SHA256
59e2ac1b79840274bdfcef412a10058654e42f4285d732d1487e65e60ffbfb46

SHA512
3813b81f741ae3adb07ae370e817597ed2803680841ccc7549babb727910c7bff4f8450670d0ca19a0d09e06f133a1aaefecf5b5620e1b0bdb6bcd409982c450

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\WinMM.Net.dll

Filesize
43KB

MD5
d4b80052c7b4093e10ce1f40ce74f707

SHA1
2494a38f1c0d3a0aa9b31cf0650337cacc655697

SHA256
59e2ac1b79840274bdfcef412a10058654e42f4285d732d1487e65e60ffbfb46

SHA512
3813b81f741ae3adb07ae370e817597ed2803680841ccc7549babb727910c7bff4f8450670d0ca19a0d09e06f133a1aaefecf5b5620e1b0bdb6bcd409982c450

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\WinMM.Net.dll

Filesize
43KB

MD5
d4b80052c7b4093e10ce1f40ce74f707

SHA1
2494a38f1c0d3a0aa9b31cf0650337cacc655697

SHA256
59e2ac1b79840274bdfcef412a10058654e42f4285d732d1487e65e60ffbfb46

SHA512
3813b81f741ae3adb07ae370e817597ed2803680841ccc7549babb727910c7bff4f8450670d0ca19a0d09e06f133a1aaefecf5b5620e1b0bdb6bcd409982c450

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\WinMM.Net.dll

Filesize
43KB

MD5
d4b80052c7b4093e10ce1f40ce74f707

SHA1
2494a38f1c0d3a0aa9b31cf0650337cacc655697

SHA256
59e2ac1b79840274bdfcef412a10058654e42f4285d732d1487e65e60ffbfb46

SHA512
3813b81f741ae3adb07ae370e817597ed2803680841ccc7549babb727910c7bff4f8450670d0ca19a0d09e06f133a1aaefecf5b5620e1b0bdb6bcd409982c450

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\WinMM.Net.dll

Filesize
43KB

MD5
d4b80052c7b4093e10ce1f40ce74f707

SHA1
2494a38f1c0d3a0aa9b31cf0650337cacc655697

SHA256
59e2ac1b79840274bdfcef412a10058654e42f4285d732d1487e65e60ffbfb46

SHA512
3813b81f741ae3adb07ae370e817597ed2803680841ccc7549babb727910c7bff4f8450670d0ca19a0d09e06f133a1aaefecf5b5620e1b0bdb6bcd409982c450

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\WinMM.Net.dll

Filesize
43KB

MD5
d4b80052c7b4093e10ce1f40ce74f707

SHA1
2494a38f1c0d3a0aa9b31cf0650337cacc655697

SHA256
59e2ac1b79840274bdfcef412a10058654e42f4285d732d1487e65e60ffbfb46

SHA512
3813b81f741ae3adb07ae370e817597ed2803680841ccc7549babb727910c7bff4f8450670d0ca19a0d09e06f133a1aaefecf5b5620e1b0bdb6bcd409982c450

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\plugin\1.dll

Filesize
367KB

MD5
c3e8ff959a4027bc8cd67e26d3003370

SHA1
5469f8a06813027ab3f8bcfaf4d5c87810ab347a

SHA256
afda8e5fb125e27aa1062365ab4b77c4fa3acd14a6e435ab7ddde18644266af3

SHA512
d0f461200daa100f6d05320c538d793e662f9ddfb13fa70351bb1bdf21cf7a1c256d284c3378551d288d7275cfa9cb32e84cdb13e7bc49ca4b5483d8ef999f15

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\plugin\10.dll

Filesize
1.1MB

MD5
e3bf65ce42edca6891fb7123711ace2c

SHA1
455a838ce4c51976faa9312ae212d7fc82ff7e19

SHA256
4d04ead199b9f3433314ac5a4c5466d0ce5e4c43e2fdd381ae0d6a1e705e6f1e

SHA512
1bce779f1afc8a10c9dffe245ebfb9c46c69cf805cc24dfbb5edfe6e3577b0b34e7ee59763a31e05579f22a584628c10c87fcfb6e9f180d16a0648b6fe05f490

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\plugin\2.dll

Filesize
271KB

MD5
07194ab187366cab46972f2f2f1ef0b5

SHA1
14927d4482a318004a42a5cf8cc40ad08673a302

SHA256
7ab30a602581387fa97faf7f8100d2c98bd3407372f723f805f2346addb7d008

SHA512
989720c17fca490d1fb3a6166f713b07410b0525c7ee142d192de4f5a044f904633b3eb8c3e83f8448bc7ee3da5cb448711067025cdf037d20cf1e9d18131446

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\plugin\3.dll

Filesize
223KB

MD5
fc2c601bba0029124a120db3035b5652

SHA1
a56b3b16e0814ed4da024ab2eee968c17c004698

SHA256
666f19c5d6528c4e071b4414aa410eae3497c809107739db87e39374ceb8593c

SHA512
0c49ad30c8bbf125fa3a47ac63d862063b8feadd87968356237a7df08b8cf4ed4b66e1a8852303b32f6d8ff168a24743fc7adeb94de4aa6f72aed3f2c279b95c

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\plugin\4.dll

Filesize
202KB

MD5
621ff03775382229afbc039efba07212

SHA1
3bcf1669b70df52059d2fb5c9025ad3fd30170ad

SHA256
d22944f50fdbe7b9fc55807ebca0275e59a0ede94226e2ce365bc507bc96ec68

SHA512
3168bb66d0e2a72df58c46275916fc9cd1d92512b4221fc0259859904d174f9a4b4cec3ff43ec91e4a084ebe4cbfd7349cfba230b1e56403bf36a711d2d8b90b

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\plugin\5.dll

Filesize
292KB

MD5
54b06dbc99832ca8a54232351af21059

SHA1
42367bca4add1792f841f9c20bf8d6a6410c0ae1

SHA256
4b6914d1ca3c871a2e79d54bb19a7a66e207548214b215698ac3371595cecb5a

SHA512
e49dbe7b2a58dc5be68cc79aca83a090486786454d03461ae256f5a0b098d8e00f18032bf1eddd7ed7e863580b8c463771704df404009d3ba1b375b4ec9bd87a

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\plugin\6.dll

Filesize
628KB

MD5
633b07e6516aea1d677b8d64bfcb04e7

SHA1
8f55062fbec6bea8f8cb689e5228cb0f4b759b59

SHA256
0d01cc53ba6630b8bae7674cfd4deebe6cb0c9e5d2029e3f29c0bc25b2760207

SHA512
456207a76294bfc5f8f88b3c893b1d931604f935a67770349d6ef831674a65de73ed6d01b2c51c0a3499c30543e5011490b0ebfb34598d00504f1574adae3df4

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\plugin\7.dll

Filesize
31KB

MD5
ba2d32d8118f59ae4aab0bae941542ed

SHA1
b627f2ffb0c8d82e8b9413228a8b75e70d716f2e

SHA256
814ac620ea996b45e8c0fc55ae57e10c11add1cf4fbe9d260a5f13052051b420

SHA512
1181d91e843f1a51248e4080fe91539d77c749125017fb3a1382da3c7b15317337510a0e18827a7ef6ad091c66ff70801f68597895e81c08e6daf96ca0ade839

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\plugin\8.dll

Filesize
259KB

MD5
8ca640310df5533abc19acd7dabc829e

SHA1
38d126c7d252c5aa5963be1022060869bb3daea9

SHA256
06b3345a22309557ec7168efe1d4bb48a6180a9643faa472c9c90b004ce0a1ac

SHA512
a7d699d09e0e78815e842eae633b44c03ad0c974985cf2faa4f8f64ab8ceec164f75390f120170847c59a4f09d9bcb3ab0c3f0377afa5cdf834b4612528a15df

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\plugin\9.dll

Filesize
469KB

MD5
1a018036c48b4cd8e0c7d1a7ebea06a9

SHA1
8ec946a133f07bf62754caddf3a884020f430f8d

SHA256
45aa36d007d27ca8e9659cd004a98f048b232161202553da643c4d1df3427459

SHA512
a8a8cbb9a1bfbdbe610bcde92d49674ee155d11fb6992dcd74551926fb3c1d8c2eebc773655638f785079961129cc9112718f2d4764812bbca9f085d3d7bd79a

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\plugin\andex.dll

Filesize
100KB

MD5
6032ce8ceea46af873b78c1f323547da

SHA1
8c5bd4a70e0f21aeba41c07976ace2919b64fd80

SHA256
19dc8c66d04d1a1d781e59107e2a1db5fd6288761c9dfd0c6909e533e79d04e7

SHA512
3ada1663cb730f43b44e32ceade5d0b9cae20d1c20001691a1d226d99c82510e001581f67f5131d6c21e0e0cf98e5089c3d0f22a6a1e3347053ed73304ccc6fe

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\plugin\cam.dll

Filesize
63KB

MD5
a73edb60b80a2dfa86735d821bea7b19

SHA1
f39a54d7bc25425578a2b800033e4508714a73ed

SHA256
7a4977b024d048b71bcc8f1cc65fb06e4353821323f852dc6740b79b9ab75c98

SHA512
283e9206d0b56c1f8b0741375ccd0a184410cf89f5f42dfe91e7438c5fd0ac7fa4afbb84b8b7ea448b3093397552fd3731b9be74c67b846d946da486dcf0df68

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\plugin\ch.dll

Filesize
75KB

MD5
8e39d0bb786fb308842102fb90211910

SHA1
fcc8a86135ac63aaf51e6d80472813b5385feb4b

SHA256
57a02c05691f47b13a6bd77258a559ff193a2e3bc19b6d4339ffd06d2f47569e

SHA512
ace89e18827953ccd61af94ac49cc3b1005be3ab0ab5a44c28d690b33bbfa89c2e4e34970d3a8898e65d63f9956747708e2b64afa21c7fe5799131702fc45850

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\plugin\chrome.dll

Filesize
29KB

MD5
685c1eade930e2b40f02f98328fca44d

SHA1
e42f950e1dbed069d7c337c9ff09f55fb90afdf6

SHA256
ec85087f6830b71f106871c59dc8ffa0de91cc3d8ce8c269b7264359d9b4e80b

SHA512
aceb433536f6f8f684219c2d62b64604175d1eb8fb0c3d0aba819c81b6793f2f96b2c8b13d7311f7513234d8d9e62dbb61750156d9ee8d8fdfdb7b5ec69262fd

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\plugin\cmd.dll

Filesize
29KB

MD5
189937260ddfd3b529ed1f5d80e9ac08

SHA1
70e63e7ac92f55228a81aae93960df6551cb65a9

SHA256
1adfc8c1d730b305aa7b79973a2a9d7bd7437742e464de3671448b70658b860a

SHA512
053d95d415ca3cbedae305eeb000c57978d96e6bb86319e6f600f7e3236ed95ae8b412d76494d1b4ab7f57956b4869799240b99b3f310dcda2b522eefbb6d464

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\plugin\dneg.dll

Filesize
176KB

MD5
0edfdfc37d6e263002e8294424783c35

SHA1
e7bf2e195ff32d5f6d5b09164de94e83d1f0f3f2

SHA256
5b9c1b0aedcd82ce25b5f7d6ced6b38943b5c0ca14f09a27b4bfb4eb4f0204d5

SHA512
14b4bd0a6e6ef26a4713cdb115f298d35530864b00a4c5a9d84c7e27086d232bca2ae18c58831a72ff687b4511735bb0669a5136b59b4813464bb25c384b123a

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\plugin\duck.dll

Filesize
63KB

MD5
d7d46952778a85491b34f62991a060d4

SHA1
ff30ef03867eb74f2454375cbe3508ee26b07163

SHA256
5d1217e2c9e820c3e7b2fc28fab4e40d85e0e9f4362e66a451e42d597b8c2650

SHA512
7c9b4c254a1977d1a16ac3aa8ce81d897eeda4465e51c9f0cbe2c03326cc6c3bb7acb89d8d1f4ce1dec03118574b57f30a3400b2dc47b70aa87bfd2f4f99f8bc

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\plugin\explorer.dll

Filesize
29KB

MD5
9cc05ec9d58102696092dd1ab9103fc2

SHA1
d4019f352ea64504a357c6447c56f79e06602131

SHA256
2e05264acc620b4828ec23550351bdaa7cc429fb273ecc4450ea58f2b20b7f61

SHA512
a74f5ebbe8f154857af1408aabc2fab30240ff5dd892d5aa9b510c63d51cb8c67605ff6c34459d620c10bb9d13085ac34072235b7bea274605014f9f8a7dbe55

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\plugin\explorerr.dll

Filesize
29KB

MD5
2407032a11e906cb7eb171d4e8256992

SHA1
f6dfc9b6632435136167a16f8a5b23fa624246aa

SHA256
b9347d22eab0264a0253aebcfb735ea687453fc85d9a906933673017abe4285e

SHA512
55bed6d2c026c2f29a13f9d17e9c3d0594158cd8caab8a8fe9dd6fdbc5816efddf2c006489c062b7c191d5f6b40541f7d51d58da0353f5c9853162b13c8b325b

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\plugin\firefox.dll

Filesize
29KB

MD5
1dae4ce0658e69e451d007200a69de1e

SHA1
141f5b6c4ec400fe58ffdf384a08c138875ab904

SHA256
2fb77c75a773abb9f61c6c918c2ad90d2f694a3f4822e0f934d9549b386cd8ca

SHA512
786b69e5b96fd4ace34fa7226da9d4a0be7cd4f5b475116ac1a07d34a7a2891c5511fb3ff14540719a989e72d5c84c12dc7f0faeab108adb87746d6a611beb44

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\plugin\gren.dll

Filesize
155KB

MD5
8775af76bef724f22a0b5bb7c787a1cc

SHA1
39620f580705b8b214f94acc7d1c81bceec15ba9

SHA256
9a8f461b55d753e7f66f3db602a29a079efe626c514920d933a471489ccab951

SHA512
966de3d1d6463eb15ed0b1ad6e1902d343c1b587abecf4fa27798bd576effadbe99a7f787de320cf815dacbfb5795e3dff369802e13d95c96fcb9c54e32bf61f

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\plugin\hms.dll

Filesize
61KB

MD5
f4407493019fe05f34b074539519ebc4

SHA1
b3f5ff69ff4fee493440c133f033a0d05a6edd43

SHA256
a5c1bdc7b8c0e456edac031568c8acca0524eeec7e91977d63c41c0a82c608c5

SHA512
24668bd17617e038544ed5cc92385cba01ec1b70725930457a5deb6f4ef1a079e3af8d7f592dad851fb1685387daaf47cc02a6c406042dc7ec1f406d2ab3bfc4

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\plugin\inf.dll

Filesize
19KB

MD5
cef141d894400bc2e0096d1ed0c8f95b

SHA1
1bcef29980686dc4cf8ff13f251f1ead7ba6e2d2

SHA256
9648ffd2eb53744c5f78dc8442a8bcbbe9831db1e198be370a62cbf9f51cd896

SHA512
794e7cc5a899407414bb3bbe2f2aadbfcacdeda2eb0381249b8dd5ed342534910b85b1450f509f1d6b36109efdc82eb3ef1eba36b76ce123b1034192d871d2d7

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\plugin\mic.dll

Filesize
50KB

MD5
d4c5ddc00f27162fc0947830e0e762b7

SHA1
7769be616d752e95d80e167f2ef4cc6b8c3c21fe

SHA256
b6fb6b66821e70a27a4750b0cd0393e4ee2603a47feac48d6a3d66d1c1cb56d5

SHA512
9555f800213f2f4a857b4558aa4d030edf41485b8366812d5a6b9adcc77fc21584e30d2dd9ce515846f3a809c85038958cb8174bf362cf6fed97ca99a826e379

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\plugin\p.dll

Filesize
29KB

MD5
a7a746707ca4e136585570eef6daf2d4

SHA1
50705953b5184d8c0fea9c10619d765648976b78

SHA256
d3cf09c638fb94b81343c94dd1a9d7ee385a5240a1f3d78fc70dc591b417999d

SHA512
dc97a3cdeb599c976bac9ef4e901c97e4bf02035b6ea60c0e8d9a288b220ca66545a4810842623574293ff09bd4c60fdfaa878fd4e7aa2dbd493d4f001fb0ce5

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\plugin\pd.dll

Filesize
139B

MD5
7e3c8627a5f7d7b9a8e54541bf4e1eec

SHA1
92907340746a489ba6bdc1a887bf68b160057a3a

SHA256
8701c0d8266cefd9ffb4006a278e9d28963e90e1688f5e1f5c65db6a132be733

SHA512
cf06e93ae7d4942539d5dbac9253c696663c7164697018c5bb9d2b92bfb27eb25a861acaadd81506c124f0ecd43230343f4c2f3257ed9106907bc0270494ffb4

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\plugin\plg.dll

Filesize
28KB

MD5
0cbc2d9703feead9783439e551c2b673

SHA1
4f8f4addd6f9e60598a7f4a191a89a52201394a8

SHA256
ea9ecf8723788feef6492bf938cdfab1266a1558dffe75e1f78a998320f96e39

SHA512
06f55b542000e23f5eeba45ea5ff9ffaddddd102935e039e4496af5e5083f257129dab2f346eeae4ee864f54db57d3c73cf6ed1d3568087411203769cf0ddd66

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\plugin\ps.dll

Filesize
29KB

MD5
cc65ad514684506f9f22c71d94c537ea

SHA1
36e2bf3159d14552279fc1b80db80a8c177925f4

SHA256
d215b8cc095e913f2d3adbd88ae7691be657104dd52340efba670d04eff1e368

SHA512
5c505b4c49df8e7e83af47719f79018358a39f1df552b2b90dda244b1e41a30559cbe66b1d415a836f403452c5493b26e28ef170376eb5f1a310733e65d8eeed

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\plugin\pw.dll

Filesize
403KB

MD5
b8cb1a1d76fe3fd71ac5b5fc175b699d

SHA1
611589181cb1bb72a279e44116fa3ed7c1256ded

SHA256
6d0b37a62e1d2215e2fd8936d3d1d13cd1d620d7678c773e013e70ccf55a674d

SHA512
280d2dbb4702498e11879c1fbf62c6eac8a2c97c2cc520f310e658ee5162329e24ba23d752ba8f549c0ffc85d5c83781ea1c10788ad6546258f83ed9c3c2cc25

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\plugin\red.dll

Filesize
61KB

MD5
35be497312c0fa928c92fa3e2fca1783

SHA1
0adbaa1b4d0b9cccb45d0d50021035e254409beb

SHA256
7ff23f4e452d1073547790f12070518b20bb4a305effebbb90212ce141d64e84

SHA512
211643da52801dbea616e1a05d38c4ca4069d96cb50ee6c9ea6ecc43d6abc16750d4f19814061c8f48c924b6c61ae2d93e36a6a0d4493446fa7c1538f4f958a4

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\plugin\rq.dll

Filesize
23KB

MD5
2490eda5b4450138ba79f39fcc90048a

SHA1
f8af994fdeeb8afbf7d95e816da389a7eb09806e

SHA256
3bc2898da9cd9e202b7795b330fa3daff81a4b02ab4ecfe47fdd712c53252f12

SHA512
4f96028666bcb0a80730e8429082c2ab839fe8662086ad9735641fe8e55d51f909171124b1500c1da4065f26a9d3118c8b6c24d1827d12c5c887cd1e358a2d58

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\plugin\sc2.dll

Filesize
12KB

MD5
19967e886edcd2f22f8d4a58c8ea3773

SHA1
bf6e0e908eaad659fdd32572e9d73c5476ca26ec

SHA256
3e5141c75b7746c0eb2b332082a165deacb943cef26bd84668e6b79b47bdfd93

SHA512
d471df3f0d69909e8ef9f947da62c77c3ff1eb97ac1dd53a74ad09fb4d74ec26c3c22facc18ec04f26df3b85b0c70863119f5baa090b110ab25383fcdb4e9d6e

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\plugin\spark.dll

Filesize
29KB

MD5
c78f9243c3e40ab2f4198a61538c7efc

SHA1
e9944ff9f066c8be968f55e319667f27bc41d5db

SHA256
4c19b629100abd685a936f1dfed09dab57c69733e9547ee1a9b9fd1d19d0f6e8

SHA512
d1ca85d6767ea1ebd5ebdb2e9822f04a59404d3d61c4579f01704633c9d1fa12a783447a781808ed840523ae5884d984ef95a6f3663d3e6d1ef1c13829c2ad4b

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\plugin\t.dll

Filesize
29KB

MD5
771c11ce7b5e13bc7415aab054af9e4a

SHA1
0bf166884a46b66471a4e03517d14cb1efa37e5c

SHA256
712626ed1ae9b07a876300ee93619e76834b9c2e64d724bcc1daef3060d6cdaf

SHA512
4b7097f4e0d3e2736447ba1ec7ecbcf304cf6cfdc955841f780f35585cb0c9b71600273ee21a8b34ab337a279d857a899bc078eff3b6cdadfc6f0a8c6fb4220d

Download Submit
C:\Users\Admin\Desktop\NjRat.0.7D.Danger.Edition\plugin\vu.dll

Filesize
28KB

MD5
6c2210ba180f0e1b9d831c3c6c14c8b4

SHA1
00bebdf704f4cabf254583c6ad87c6e72872b61a

SHA256
501c36ac282029ccf7950a4957d4c10ea72fe18f0ad8d6daeabfe628fa4070a7

SHA512
26a63ad05199cf45acd7519fbc63945097b4c4a89bb2cdfa4f87ba004e1ce106220b0b99419e656de26d164265b3868a9ce541c71b05d4e4db1a9a1343130e9b

Download Submit
C:\Users\Admin\Downloads\NjRat.y6337gmA.0.7D.Danger.Edition.zip.part

Filesize
15.8MB

MD5
18b9e23e509ff221ebb1b8a0ce4bc82b

SHA1
bacab6a415515e94b3083c4f7ebda6a82e1d4c7f

SHA256
4b649c32035e383706673ffe6471d6c711989a206d6f96fdd905dda207a5f0cb

SHA512
26091095397f3b229439bb4838f3321de63b9084beab20391a3f85fa8038836d9d0a96a44c7de1d860b182d0b072e0c752494201eb50fd36444cfe742d310ca1

Download Submit
memory/868-2979-0x00000000012E0000-0x00000000012F0000-memory.dmp

Filesize
64KB

Download
memory/868-2923-0x00000000012E0000-0x00000000012F0000-memory.dmp

Filesize
64KB

Download
memory/868-2981-0x00000000012E0000-0x00000000012F0000-memory.dmp

Filesize
64KB

Download
memory/868-2982-0x0000000074B20000-0x00000000750D1000-memory.dmp

Filesize
5.7MB

Download
memory/868-2973-0x00000000012E0000-0x00000000012F0000-memory.dmp

Filesize
64KB

Download
memory/868-2921-0x0000000074B20000-0x00000000750D1000-memory.dmp

Filesize
5.7MB

Download
memory/868-2922-0x0000000074B20000-0x00000000750D1000-memory.dmp

Filesize
5.7MB

Download
memory/868-2977-0x00000000012E0000-0x00000000012F0000-memory.dmp

Filesize
64KB

Download
memory/868-2974-0x00000000012E0000-0x00000000012F0000-memory.dmp

Filesize
64KB

Download
memory/868-2924-0x00000000012E0000-0x00000000012F0000-memory.dmp

Filesize
64KB

Download
memory/868-2972-0x00000000012E0000-0x00000000012F0000-memory.dmp

Filesize
64KB

Download
memory/868-2970-0x00000000012E0000-0x00000000012F0000-memory.dmp

Filesize
64KB

Download
memory/868-2969-0x0000000074B20000-0x00000000750D1000-memory.dmp

Filesize
5.7MB

Download
memory/868-2968-0x0000000074B20000-0x00000000750D1000-memory.dmp

Filesize
5.7MB

Download
memory/868-2976-0x00000000012E0000-0x00000000012F0000-memory.dmp

Filesize
64KB

Download
memory/868-2978-0x00000000012E0000-0x00000000012F0000-memory.dmp

Filesize
64KB

Download
memory/5584-2994-0x00000000012B0000-0x00000000012C0000-memory.dmp

Filesize
64KB

Download
memory/5584-2998-0x00000000012B0000-0x00000000012C0000-memory.dmp

Filesize
64KB

Download
memory/5584-3017-0x00000000012B0000-0x00000000012C0000-memory.dmp

Filesize
64KB

Download
memory/5584-3018-0x00000000012B0000-0x00000000012C0000-memory.dmp

Filesize
64KB

Download
memory/5584-3019-0x0000000074BC0000-0x0000000075171000-memory.dmp

Filesize
5.7MB

Download
memory/5584-2996-0x0000000074BC0000-0x0000000075171000-memory.dmp

Filesize
5.7MB

Download
memory/5584-3012-0x00000000012B0000-0x00000000012C0000-memory.dmp

Filesize
64KB

Download
memory/5584-3010-0x00000000012B0000-0x00000000012C0000-memory.dmp

Filesize
64KB

Download
memory/5584-2997-0x00000000012B0000-0x00000000012C0000-memory.dmp

Filesize
64KB

Download
memory/5584-2995-0x0000000074BC0000-0x0000000075171000-memory.dmp

Filesize
5.7MB

Download
memory/5584-2988-0x00000000012B0000-0x00000000012C0000-memory.dmp

Filesize
64KB

Download
memory/5584-2987-0x00000000012B0000-0x00000000012C0000-memory.dmp

Filesize
64KB

Download
memory/5584-2986-0x0000000074BC0000-0x0000000075171000-memory.dmp

Filesize
5.7MB

Download
memory/5584-2985-0x0000000074BC0000-0x0000000075171000-memory.dmp

Filesize
5.7MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads