Overview

overview

7

Static

static

7

08c3b4a696...18.exe

windows7-x64

7

08c3b4a696...18.exe

windows10-2004-x64

7

$PLUGINSDI...ff.dll

windows7-x64

3

$PLUGINSDI...ff.dll

windows10-2004-x64

3

$PLUGINSDI...lp.dll

windows7-x64

3

$PLUGINSDI...lp.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...ON.dll

windows7-x64

5

$PLUGINSDI...ON.dll

windows10-2004-x64

5

$PLUGINSDI...cr.exe

windows7-x64

7

$PLUGINSDI...cr.exe

windows10-2004-x64

7

$PLUGINSDI...ls.dll

windows7-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows7-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

DownLite.exe

windows7-x64

3

DownLite.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    148s
  • max time network
    125s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/10/2024, 03:58

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    08c3b4a6961c962a3371c6bcdb0aa6e0_JaffaCakes118.exe
  • Size 5.4MB
  • Sample241002-ejzczswdmj
  • SHA256 61e4d701e2e08bff206ec405ac27ea3fce687165b85c5bdac6cdf48d066dbe9c
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
adwarediscoveryspywarestealerupx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 4 IoCs

    Detects file using ACProtect software.

  • Executes dropped EXE 13 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops Chrome extension 1 IoCs
  • Installs/modifies Browser Helper Object 2 TTPs 4 IoCs

    BHOs are DLL modules which act as plugins for Internet Explorer.

    stealeradware
  • UPX packed file 6 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Drops file in Program Files directory 12 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 17 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • NSIS installer 2 IoCs
    installer
  • Modifies Internet Explorer settings 1 TTPs 22 IoCs
    adwarespyware
  • Modifies registry class 64 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of WriteProcessMemory 54 IoCs
  • System policy modification 1 TTPs 2 IoCs
    evasion

Processes

  • C:\Users\Admin\AppData\Local\Temp\08c3b4a6961c962a3371c6bcdb0aa6e0_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\08c3b4a6961c962a3371c6bcdb0aa6e0_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:1536
    • C:\Windows\SysWOW64\RunDll32.exe
      RunDll32.exe "C:\Users\Admin\AppData\Local\Temp\nsf6080.tmp\OCSetupHlp.dll",_OCPID974OpenCandy2@16 1536,41FDC416A39743FEBFBCC5879EA8C4E5,B4D91743E59D48BB82D60E3A5F424798,25B30383FDFB48D7A24FCB3886A536EA
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      PID:1112
    • C:\Windows\SysWOW64\RunDll32.exe
      RunDll32.exe "C:\Users\Admin\AppData\Local\Temp\nsf6080.tmp\OCSetupHlp.dll",_OCPID974OpenCandy2@16 1536,C6246199ADF141419549CD036EE0D4A2,F7DF75CAAF0A4A3CAF9FD88C84BE11F7,25B30383FDFB48D7A24FCB3886A536EA
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      PID:2200
    • C:\Users\Admin\AppData\Local\Temp\nsf6080.tmp\setup_cr.exe
      C:\Users\Admin\AppData\Local\Temp\nsf6080.tmp\setup_cr.exe
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:2760
      • C:\Users\Admin\AppData\Local\Temp\nsb7D6F.tmp\Hnaadvbqr.exe
        "C:\Users\Admin\AppData\Local\Temp\nsb7D6F.tmp\Hnaadvbqr.exe"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Drops Chrome extension
        • Drops file in Program Files directory
        • System Location Discovery: System Language Discovery
        • Modifies Internet Explorer settings
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of WriteProcessMemory
        • System policy modification
        PID:3956
        • C:\Windows\SysWOW64\cmd.exe
          C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\nss808C.tmp\CookieDbIndex.bat
          4⤵
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:2448
          • C:\Users\Admin\AppData\Local\Temp\nss808C.tmp\scs.exe
            C:\Users\Admin\AppData\Local\Temp\nss808C.tmp\scs.exe "C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\databases\Databases.db" "SELECT id FROM Databases WHERE name = 'crossrider_cookies_35382' LIMIT 1"
            5⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            PID:2472
        • C:\Users\Admin\AppData\Local\Temp\nss808C.tmp\scs.exe
          C:\Users\Admin\AppData\Local\Temp\nss808C.tmp\scs.exe "C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\databases\Databases.db" "INSERT INTO Databases (origin, name, description, estimated_size) VALUES('chrome-extension_nnlomafmkpiclmaaekkhpoecnclldmaa_0','crossrider_cookies_35382','Crossrider Cookies Store',50 * 1024 * 1024);"
          4⤵
          • Executes dropped EXE
          PID:3728
        • C:\Windows\SysWOW64\cmd.exe
          C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\nss808C.tmp\CookieDbIndex.bat
          4⤵
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:4280
          • C:\Users\Admin\AppData\Local\Temp\nss808C.tmp\scs.exe
            C:\Users\Admin\AppData\Local\Temp\nss808C.tmp\scs.exe "C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\databases\Databases.db" "SELECT id FROM Databases WHERE name = 'crossrider_cookies_35382' LIMIT 1"
            5⤵
            • Executes dropped EXE
            PID:4168
        • C:\Users\Admin\AppData\Local\Temp\nss808C.tmp\scs.exe
          C:\Users\Admin\AppData\Local\Temp\nss808C.tmp\scs.exe "C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_nnlomafmkpiclmaaekkhpoecnclldmaa_0\1" "REPLACE INTO cookies (name,value,expires) values('InstallerParams','{\"value\" : { \"source_id\" : \"0\", \"sub_id\" : \"0\", \"uzid\" : \"0\" } }','2111-09-11 21:16:31');"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:212
        • C:\Users\Admin\AppData\Local\Temp\nss808C.tmp\scs.exe
          C:\Users\Admin\AppData\Local\Temp\nss808C.tmp\scs.exe "C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_nnlomafmkpiclmaaekkhpoecnclldmaa_0\1" "REPLACE INTO cookies (name,value,expires) values('InstallationTime','{\"value\" : 1727841551}','2111-09-11 21:16:31');"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:4520
        • C:\Users\Admin\AppData\Local\Temp\nss808C.tmp\scs.exe
          C:\Users\Admin\AppData\Local\Temp\nss808C.tmp\scs.exe "C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_nnlomafmkpiclmaaekkhpoecnclldmaa_0\1" "REPLACE INTO cookies (name,value,expires) values('InstallationThankYouPage','{\"value\" : false}','2111-09-11 21:16:31');"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:2900
        • C:\Users\Admin\AppData\Local\Temp\nss808C.tmp\scs.exe
          C:\Users\Admin\AppData\Local\Temp\nss808C.tmp\scs.exe "C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_nnlomafmkpiclmaaekkhpoecnclldmaa_0\1" "REPLACE INTO internaldb (name,value,expires) values('InstallerIdentifiers','{\"value\" : { \"installer_bic\" : \"B2367B2CA4DB429086EAD8BD38AC9AB0IE\", \"installer_verifier\" : \"dee7a9f99575aa2341d72534308db4a1\" } }','2111-09-11 21:16:31');"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:3336
        • C:\Users\Admin\AppData\Local\Temp\nss808C.tmp\scs.exe
          C:\Users\Admin\AppData\Local\Temp\nss808C.tmp\scs.exe "C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_nnlomafmkpiclmaaekkhpoecnclldmaa_0\1" "REPLACE INTO internaldb (name,value,expires) values('chrome_enabled','{\"value\" : true}','2111-09-11 21:16:31');"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:4008
        • C:\Program Files (x86)\hosts\hosts-codedownloader.exe
          "C:\Program Files (x86)\hosts\hosts-codedownloader.exe" /installapp /agentregpath='hosts' /appid=35382 /srcid='0' /subid='0' /zdata='0' /bic=B2367B2CA4DB429086EAD8BD38AC9AB0IE /verifier=dee7a9f99575aa2341d72534308db4a1 /installerversion=1_27_153 /installerfullversion=1.27.153.7 /installationtime=1727841551 /statsdomain=http://stats.weservstats.com /errorsdomain=http://errors.weservstats.com /codedownloaddomain=http://app-static.crossrider.com /externallog='C:\Users\Admin\AppData\Local\Temp\hostsInstaller_1727841551.log'
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:3308
        • C:\Program Files (x86)\hosts\hosts-helper.exe
          "C:\Program Files (x86)\hosts\hosts-helper.exe" /externallog='C:\Users\Admin\AppData\Local\Temp\hostsInstaller_1727841551.log'
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:3460
        • C:\Windows\SysWOW64\regsvr32.exe
          regsvr32 /s "C:\Program Files (x86)\hosts\hosts-bho.dll"
          4⤵
          • Installs/modifies Browser Helper Object
          • System Location Discovery: System Language Discovery
          • Modifies registry class
          PID:1496
        • C:\Program Files (x86)\hosts\hosts-bg.exe
          "C:\Program Files (x86)\hosts\hosts-bg.exe" /executebg /externallog='C:\Users\Admin\AppData\Local\Temp\hostsInstaller_1727841551.log'
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:4236

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        icon16.png
        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnlomafmkpiclmaaekkhpoecnclldmaa\1.23.3_0\icons\icon16.png
        • Size 1KB
        • SHA256 e17f7fa24d6ecd81bc2abb172a0c1eeceff830867ea45728eb93918eeb4c607a
        • MD5 SHA1 SHA512
        Submit Download

        hostsInstaller_1727841551.log
        • Path C:\Users\Admin\AppData\Local\Temp\hostsInstaller_1727841551.log
        • Size 4KB
        • SHA256 d9b6e905749ec257fb650b8a5fad56232d8bf9d6b193c49bfe9ef5fbed2b5211
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Hnaadvbqr.exe
        • Path C:\Users\Admin\AppData\Local\Temp\nsb7D6F.tmp\Hnaadvbqr.exe
        • Size 3.1MB
        • SHA256 c4927a7adb6f99589eced1b4a6e4056f52245ae3015b927d70622121270be5e1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        InstallerUtils.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsb7D6F.tmp\InstallerUtils.dll
        • Size 104KB
        • SHA256 4618571c27877641f83bfb312aa5b66ebe4a8954dc898ce4e640aeaea4dc0693
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        StdUtils.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsb7D6F.tmp\StdUtils.dll
        • Size 14KB
        • SHA256 0ebd62de633fa108cf18139be6778fa560680f9f8a755e41c6ab544ab8db5c16
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        System.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsb7D6F.tmp\System.dll
        • Size 11KB
        • SHA256 dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        InstallerStuff.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsf6080.tmp\InstallerStuff.dll
        • Size 115KB
        • SHA256 77ecf5896f33bbc002f00dd4742c00a20981bbc618563e49f34ea8f740da890d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        OCSetupHlp.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsf6080.tmp\OCSetupHlp.dll
        • Size 848KB
        • SHA256 4d1ad8aaf803660ee9d989a8a9cb3129397a97e4d0fa4b50ba7fb700b9d4d7b6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        System.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsf6080.tmp\System.dll
        • Size 11KB
        • SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        nsDialogs.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsf6080.tmp\nsDialogs.dll
        • Size 9KB
        • SHA256 e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        nsJSON.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsf6080.tmp\nsJSON.dll
        • Size 6KB
        • SHA256 18f2b2f20c65a022a1c8aaf776b4c9be6c193b73c2079d9d65d56b802fcadfb5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        setup_cr.exe
        • Path C:\Users\Admin\AppData\Local\Temp\nsf6080.tmp\setup_cr.exe
        • Size 3.2MB
        • SHA256 6df47c38d9452173201fb301c3a7225221d4cafeaf07a3edc1dae9ea6135b86d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        CRNSISPlugins.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nss808C.tmp\CRNSISPlugins.dll
        • Size 202KB
        • SHA256 d22c4dba24a3fe2fee0e5e22bb1744b8b11e8e3dd4190267a9086c9efb514537
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ExecDos.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nss808C.tmp\ExecDos.dll
        • Size 5KB
        • SHA256 d387b725afbd2a6f9b44999278d21025fae55b391e45f7751b88dfb13511a993
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        UserInfo.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nss808C.tmp\UserInfo.dll
        • Size 4KB
        • SHA256 564c80dec62d76c53497c40094db360ff8a36e0dc1bda8383d0f9583138997f5
        • MD5 SHA1 SHA512
        Submit Download

        ZipDLL.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nss808C.tmp\ZipDLL.dll
        • Size 163KB
        • SHA256 6bbeb39747f1526752980d4dbec2fe2c7347f3cc983a79c92561b92fe472e7a1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        hosts.xpi
        • Path C:\Users\Admin\AppData\Local\Temp\nss808C.tmp\hosts.xpi
        • Size 76KB
        • SHA256 01fcc24c1d9d68fcb99b7bccc254e660d4f01c6d0f5bf37af3ac0626912ae9d1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        md5dll.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nss808C.tmp\md5dll.dll
        • Size 6KB
        • SHA256 fbed2f1160469f42ce97c33ad558201b2b43e3020257f9b2259e3ce295317a70
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        nsislog.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nss808C.tmp\nsislog.dll
        • Size 42KB
        • SHA256 271d539fe130276189e0a32b8a0bc9f08f2d92f7e17f85d88726735f14ea6144
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        nsisos.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nss808C.tmp\nsisos.dll
        • Size 5KB
        • SHA256 ba79ab7f63f02ed5d5d46b82b11d97dac5b7ef7e9b9a4df926b43ceac18483b6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        temp_file_after.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\nss808C.tmp\temp_file_after.tmp
        • Size 465KB
        • SHA256 3d98372fbac56338b06f24aeac4f52cbbcc4977d2f7d86adfb92cfc1a9d5607e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        temp_file_after.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\nss808C.tmp\temp_file_after.tmp
        • Size 304KB
        • SHA256 3a55b9b3d0226e810e33dea581f40cd634580bffc6edc591e67df7153851296a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        temp_file_after.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\nss808C.tmp\temp_file_after.tmp
        • Size 330KB
        • SHA256 31804e16546b6b9d914698c6c5cb4bea0c0a8ba27bcd085abd5a83119f23f0bc
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        temp_file_after.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\nss808C.tmp\temp_file_after.tmp
        • Size 432KB
        • SHA256 d39b7e365de13379ca4dd4f2bcb0f83b4d85c383912cdcdc7fda23ae1b083ea2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        temp_file_after.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\nss808C.tmp\temp_file_after.tmp
        • Size 384KB
        • SHA256 9983f6e68b7243a97b90ff21e64c30bf28831e7dbfbd1ee5afde4f806a74448f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        temp_file_after.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\nss808C.tmp\temp_file_after.tmp
        • Size 462KB
        • SHA256 b7ac77b1c6bba01fcca0790ccc77196ed7ab013c95613c40b302055d96693f6e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        temp_file_after.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\nss808C.tmp\temp_file_after.tmp
        • Size 730KB
        • SHA256 05e97c8a5777931dbd1a14b3e08c7aab07e4c285b87efa1dae8bce0c4092dbf0
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        temp_file_after.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\nss808C.tmp\temp_file_after.tmp
        • Size 875KB
        • SHA256 043263a827d1399a6a67c283c2dae406a399f7e976a95c897b20a5d70cefcd06
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        temp_file_after.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\nss808C.tmp\temp_file_after.tmp
        • Size 167KB
        • SHA256 65952c10bd4d364832de4e56c2e161501758e88fea26df146e3a28d42b30f44f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        pageCode.js
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lzsht85k.Admin\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\extensionCode\pageCode.js
        • Size 1B
        • SHA256 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
        • MD5 SHA1 SHA512
        Submit Download

        button5.png
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lzsht85k.Admin\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\skin\button5.png
        • Size 1KB
        • SHA256 e358d97ba4c51b987fe73ea0ac0f14f9b2375e299f3e859fc37c21ab8b051ee6
        • MD5 SHA1 SHA512
        Submit Download

        icon128.png
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lzsht85k.Admin\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\skin\icon128.png
        • Size 3KB
        • SHA256 f4223da0667e669eedaf4878678dae1637dec401ff7bde29dd56b8d1fc4e8d3c
        • MD5 SHA1 SHA512
        Submit Download

        icon48.png
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lzsht85k.Admin\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\skin\icon48.png
        • Size 3KB
        • SHA256 8b1bc99525aaa27b37216beda75ae7b457e0d8792b91506a736e7415f67788f1
        • MD5 SHA1 SHA512
        Submit Download

        chrome.manifest
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome.manifest
        • Size 732B
        • SHA256 05c4744db6cacb64b25a23eff0c748ac24e6fb74e2791341cb26e154861e598b
        • MD5 SHA1 SHA512
        Submit Download

        api.js
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\api.js
        • Size 17KB
        • SHA256 6e8e5a4e707c5a0b8146387b44c66cdbd33a6e48c985e3800f9dced605f69545
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        asyncDB.js
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\api\asyncDB.js
        • Size 4KB
        • SHA256 3277002ef6bf5cce6c956dc6e0638c6091351b723023bb63416e60a034c1fe17
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        background.js
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\api\background.js
        • Size 904B
        • SHA256 e5be4a0d2f826fc13592de1befcab2b639ba169b3c74069f604dd16739d20779
        • MD5 SHA1 SHA512
        Submit Download

        browserAction.js
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\api\browserAction.js
        • Size 7KB
        • SHA256 c11736a73ed063efe51c0fe49d236bdf7d3972ede001763749ed060b1b028581
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        contextMenu.js
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\api\contextMenu.js
        • Size 5KB
        • SHA256 d8a5816494dbfc96b41c00913f4d61c30ebafd454b5d7107d3a876a2dd1dffe5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        dbManager.js
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\api\dbManager.js
        • Size 4KB
        • SHA256 aa61b53209da3e4ac51c69326d7d31168cd14e34808d8c71784e804aa970e486
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        dom_bg.js
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\api\dom_bg.js
        • Size 1KB
        • SHA256 0e095eb0e16c343ac812721b182bea66498fca55ecd899ab5eabf9e0afb792ce
        • MD5 SHA1 SHA512
        Submit Download

        fileManager.js
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\api\fileManager.js
        • Size 848B
        • SHA256 7817b095e2386aa2aeafd5a7c3b0b974efaab2c71f0b3833ad344ff6c80d1e08
        • MD5 SHA1 SHA512
        Submit Download

        firefox.js
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\api\firefox.js
        • Size 258B
        • SHA256 5609ed9fa249166c8dafe7eda048c86486574445244d2dc509fb617b87b5d7f7
        • MD5 SHA1 SHA512
        Submit Download

        firefoxNotifications.js
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\api\firefoxNotifications.js
        • Size 1021B
        • SHA256 db1a27b86d4a1848cc0e8c5f1887ece15ebab250bcb025d1e0aa2d3c029d9b40
        • MD5 SHA1 SHA512
        Submit Download

        firefoxOmnibox.js
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\api\firefoxOmnibox.js
        • Size 1KB
        • SHA256 cb043a814632118b25b305ca6cb0abffa1e10a502df054f2a17554bedc299913
        • MD5 SHA1 SHA512
        Submit Download

        message.js
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\api\message.js
        • Size 2KB
        • SHA256 1501c3e6e1b668a191ace44009710e603d9f036e3d4dc405654162f65674a953
        • MD5 SHA1 SHA512
        Submit Download

        request.js
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\api\request.js
        • Size 2KB
        • SHA256 306b1301a4f737d7a7995168a969bc730f26857a39949fcd4899d1dd0a6a3f9d
        • MD5 SHA1 SHA512
        Submit Download

        tabs.js
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\api\tabs.js
        • Size 2KB
        • SHA256 34989f3c20224496c68d06621e67628d3ab4dd5d558175593710c395369121ed
        • MD5 SHA1 SHA512
        Submit Download

        webRequest.js
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\api\webRequest.js
        • Size 1KB
        • SHA256 8e82ea7cc89b91e80b5bd904ae3efbc34daac4374f1c6089fa25ea9ec2ece2a9
        • MD5 SHA1 SHA512
        Submit Download

        background.html
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\background.html
        • Size 1KB
        • SHA256 3f20ea55cdb879a1babf8ac3372e2cba7bd21586017e7e22dd49050cb1d03140
        • MD5 SHA1 SHA512
        Submit Download

        baseObject.js
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\baseObject.js
        • Size 19B
        • SHA256 b0e6494d211fdfc5b0eb3f6668ccbdfd8f99d065440e4c60776e32e1b574ff44
        • MD5 SHA1 SHA512
        Submit Download

        browser.xul
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\browser.xul
        • Size 3KB
        • SHA256 d0ef8d510db101253558497c1ebb21410da1f44653d59362cca22e55b5025172
        • MD5 SHA1 SHA512
        Submit Download

        IDBWrapper.js
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\core\IDBWrapper.js
        • Size 3KB
        • SHA256 4c2e7321e1db1e55ac0d22934c916467d45767c85a65843b942891f983102da6
        • MD5 SHA1 SHA512
        Submit Download

        console.js
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\core\console.js
        • Size 1KB
        • SHA256 dc619581ed2a7ef130c5bc780ce0c18bff78ca27ce98a0689bf3178b2b2967a5
        • MD5 SHA1 SHA512
        Submit Download

        consts.js
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\core\consts.js
        • Size 1KB
        • SHA256 2f39c546d790606df3c1885603984d2bfc94965222b48f6eed74447552114673
        • MD5 SHA1 SHA512
        Submit Download

        delegate.js
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\core\delegate.js
        • Size 1KB
        • SHA256 1f3b9ab2bad072151166127c9bb92405e031ad8afdfe2f9dd5ebde86ccc0236f
        • MD5 SHA1 SHA512
        Submit Download

        httpObserver.js
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\core\httpObserver.js
        • Size 2KB
        • SHA256 dcb0ee2e8733c03f33347148eee0c60d910c0bf511c75c959b0e46eb9afcb915
        • MD5 SHA1 SHA512
        Submit Download

        installer.js
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\core\installer.js
        • Size 581B
        • SHA256 cb89a5f1f1d1bf601c8e257562287e5011cb982dab2a673658eb9c6f9065a9bb
        • MD5 SHA1 SHA512
        Submit Download

        pluginsManager.js
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\core\pluginsManager.js
        • Size 4KB
        • SHA256 a00e24fe9cfbbba7fb75c930449d86250c96644755fa3c78324fd7aa3eb04f9a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        prefs.js
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\core\prefs.js
        • Size 1KB
        • SHA256 6b97194d415ded6da5abcec8566073bc3714d2915ab48b2f96e4b5ca72043b67
        • MD5 SHA1 SHA512
        Submit Download

        progressListenerObserver.js
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\core\progressListenerObserver.js
        • Size 1KB
        • SHA256 96474c2cef1c5bc83df3d8bfc19d4853968925ea981b0a5c09b160fc15b59f18
        • MD5 SHA1 SHA512
        Submit Download

        registry.js
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\core\registry.js
        • Size 1KB
        • SHA256 2ff6758a857e848cc6d30ddc02d18000cc062048b1df0b9ab59e9b9cd08107c5
        • MD5 SHA1 SHA512
        Submit Download

        reloadObserver.js
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\core\reloadObserver.js
        • Size 255B
        • SHA256 9ed7606361daf6580e6ad953e7c60e33ab4dfb0e07087c577aa4c9475276ed4f
        • MD5 SHA1 SHA512
        Submit Download

        reports.js
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\core\reports.js
        • Size 3KB
        • SHA256 0c4cc49edbd5ba2c99efb98fcba81d1390f87d1c6a7a749f0bec4bbf2adf0e2a
        • MD5 SHA1 SHA512
        Submit Download

        requestObject.js
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\core\requestObject.js
        • Size 1KB
        • SHA256 4b5d3e7c0a686c55dfdf2348533a6aa8ac2a768bad01673bbee717a92dce44b1
        • MD5 SHA1 SHA512
        Submit Download

        searchSettings.js
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\core\searchSettings.js
        • Size 3KB
        • SHA256 594d3976d286423db7a94be62ad9bbc5ca9d5144fb94c7f061f4a2e14e5b82f5
        • MD5 SHA1 SHA512
        Submit Download

        uninstallObserver.js
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\core\uninstallObserver.js
        • Size 1KB
        • SHA256 430d1975bfbdc7f878e442a0c8f9cf9d0a3a1c3a5752b5b13e226e11b2ba6aec
        • MD5 SHA1 SHA512
        Submit Download

        updateManager.js
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\core\updateManager.js
        • Size 9KB
        • SHA256 5250fe36cd0617f8497a8f2da1003fbfebe97b01f26f030728a26d33a438fbd7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        utils.js
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\core\utils.js
        • Size 8KB
        • SHA256 89e7e4c46c456bf2464a0997d864baa564da84eaf59306b153c38e08d643a00d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        xhr.js
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\core\xhr.js
        • Size 2KB
        • SHA256 9cf418b2562821adfc68368a469d843e7dee0f0d087a45866c0d8279c52fcb29
        • MD5 SHA1 SHA512
        Submit Download

        dialog.js
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\dialog.js
        • Size 1KB
        • SHA256 caf871b1b90ce840acddd2cf04237dff5d3a992dce765a3996f630c669bd728c
        • MD5 SHA1 SHA512
        Submit Download

        main.js
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\main.js
        • Size 30KB
        • SHA256 ae4b7f033e53b8887c054e25fa6d3e7d754e2c97011632940685c84011e478f4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        options.js
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\options.js
        • Size 1KB
        • SHA256 12bdfbb75c0b57ed66756b12d52a8538ca83eae7f5c5c3574af3f24a0d38a78d
        • MD5 SHA1 SHA512
        Submit Download

        options.xul
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\options.xul
        • Size 1KB
        • SHA256 9a36a603d325f00e102539ec8a5409b1b65318145fdadf70bdb8a429af471fd2
        • MD5 SHA1 SHA512
        Submit Download

        search_dialog.xul
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\chrome\content\search_dialog.xul
        • Size 2KB
        • SHA256 d61aae08a32e9987caf41d35bad06f2a2cee4bc094bafca7afec0648a2edd1d6
        • MD5 SHA1 SHA512
        Submit Download

        prefs.js
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\defaults\preferences\prefs.js
        • Size 3KB
        • SHA256 86cc451482895a5969813477f72812ae03fe462c7a11fb6f106d67905565f5ae
        • MD5 SHA1 SHA512
        Submit Download

        install.rdf
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\install.rdf
        • Size 1KB
        • SHA256 167c43e0790c97ce7d1c76969c37a8e314016b22ec5d10effabb7bc17d5c6499
        • MD5 SHA1 SHA512
        Submit Download

        translations.dtd
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\locale\en-US\translations.dtd
        • Size 425B
        • SHA256 10762cb296f01536427e6592d4c79b08ac48b1c45d12e7b36aabcdd3c1bd299f
        • MD5 SHA1 SHA512
        Submit Download

        panelarrow-up.png
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\skin\panelarrow-up.png
        • Size 917B
        • SHA256 758210b28ee3298facef83c81272ef4121f337392ef5bdd44e47222ec4966beb
        • MD5 SHA1 SHA512
        Submit Download

        popup.html
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\skin\popup.html
        • Size 349B
        • SHA256 af11066b4ff2a7d851cf85d97b655557240303c89b1615ca0ad753926af3602c
        • MD5 SHA1 SHA512
        Submit Download

        skin.css
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\skin\skin.css
        • Size 990B
        • SHA256 f3fee308a875a4d7cca4cea16ce548dd652df2f10ea8dd2d1aa11c2ecdef4b0f
        • MD5 SHA1 SHA512
        Submit Download

        update.css
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\pj0o4bl8.default-release\extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com\skin\update.css
        • Size 140B
        • SHA256 4f0795bbc78e195bd977cf489c05543ac86bd10f95fbb83a5db11b17c7d7f664
        • MD5 SHA1 SHA512
        Submit Download

        memory/1112-13-0x0000000002900000-0x0000000002901000-memory.dmp
        Download

        memory/1112-276-0x0000000002900000-0x0000000002901000-memory.dmp
        Download

        memory/1536-25-0x0000000073910000-0x000000007391A000-memory.dmp
        Download

        memory/1536-603-0x0000000073910000-0x000000007391A000-memory.dmp
        Download

        memory/2200-15-0x0000000000C10000-0x0000000000C11000-memory.dmp
        Download

        memory/2200-280-0x0000000000C10000-0x0000000000C11000-memory.dmp
        Download

        memory/2472-605-0x0000000000400000-0x0000000000474000-memory.dmp
        Download

        memory/3728-630-0x0000000000400000-0x0000000000474000-memory.dmp
        Download

        memory/3956-479-0x0000000004310000-0x000000000433D000-memory.dmp
        Download

        memory/3956-281-0x0000000000D30000-0x0000000000D39000-memory.dmp
        Download

        memory/3956-76-0x0000000000D30000-0x0000000000D40000-memory.dmp
        Download

        memory/3956-279-0x0000000000D30000-0x0000000000D39000-memory.dmp
        Download

        memory/3956-347-0x0000000003660000-0x0000000003670000-memory.dmp
        Download

        memory/3956-576-0x0000000004300000-0x0000000004310000-memory.dmp
        Download