799a026e6fe1823a5875cff1f57d23b6309e58e86417e82db6bbea53d46e564f

Analysis

user interaction
yes
max time kernel
155s
max time network
162s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/08/2026, 16:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
svc.exe
Size 70.1MB
Sample260819-twjkmayalg
SHA256 799a026e6fe1823a5875cff1f57d23b6309e58e86417e82db6bbea53d46e564f
MD5 d65ca6aad2e22918c4ca7595f9c1fbfc
SHA1 10044a1f7aff9af82c6bb05c154c1bfe77e4925b
SHA512 8b5aaa1d40d89224aadd9f13b79ccc85d36e7428a9e74977d82c81b652da88fab35a760b347c1e6298d985913f7c4c57b425ed911fa699e69661f36e6de121ae
SSDEEP 786432:xG0MtsFd+U4DVOK33ZiSOH0q4DlpFcz7yV:xGeFdX0Zi0ySV
TLSH
T13FF7BF15E3D84B16E63FC2BDC2638512E6B1B8531351D7CF0498DE992F63BC1AB36262
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

persistence

Malware Config

Signatures

Executes dropped EXE 1 IoCs

pid	Process
7524	dnSpy.exe

Loads dropped DLL 64 IoCs

pid	Process
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe
7524	dnSpy.exe

Contacts third-party web service commonly abused for C2 1 TTPs 6 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
110	raw.githubusercontent.com
111	raw.githubusercontent.com
1	raw.githubusercontent.com
19	raw.githubusercontent.com
108	raw.githubusercontent.com
109	raw.githubusercontent.com

Drops desktop.ini file(s) 3 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Documents\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\Documents\desktop.ini	firefox.exe

Checks processor information in registry 2 TTPs 29 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\CurrentPatchLevel	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-2301830172-776172150-2531349243-1000_Classes\Local Settings	firefox.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\Instance\	firefox.exe

NTFS ADS 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\Downloads\dnSpy-net-win64.zip:Zone.Identifier	firefox.exe

Suspicious use of AdjustPrivilegeToken 7 IoCs

description	pid	Process
Token: SeDebugPrivilege	4892	firefox.exe
Token: SeDebugPrivilege	4892	firefox.exe
Token: SeDebugPrivilege	4892	firefox.exe
Token: SeRestorePrivilege	5568	7zG.exe
Token: 35	5568	7zG.exe
Token: SeSecurityPrivilege	5568	7zG.exe
Token: SeSecurityPrivilege	5568	7zG.exe

Suspicious use of FindShellTrayWindow 10 IoCs

pid	Process
4892	firefox.exe
4892	firefox.exe
4892	firefox.exe
4892	firefox.exe
4892	firefox.exe
4892	firefox.exe
4892	firefox.exe
4892	firefox.exe
4892	firefox.exe
5568	7zG.exe

Suspicious use of SetWindowsHookEx 7 IoCs

pid	Process
4892	firefox.exe
4892	firefox.exe
4892	firefox.exe
4892	firefox.exe
4892	firefox.exe
4892	firefox.exe
4892	firefox.exe

Suspicious use of WriteProcessMemory 48 IoCs

description	pid	Process	procid_target
PID 3464 wrote to memory of 4892	3464	firefox.exe	95
PID 3464 wrote to memory of 4892	3464	firefox.exe	95
PID 4892 wrote to memory of 2452	4892	firefox.exe	96
PID 4892 wrote to memory of 2452	4892	firefox.exe	96
PID 4892 wrote to memory of 2452	4892	firefox.exe	96
PID 4892 wrote to memory of 3044	4892	firefox.exe	97
PID 4892 wrote to memory of 3044	4892	firefox.exe	97
PID 4892 wrote to memory of 3044	4892	firefox.exe	97
PID 4892 wrote to memory of 3044	4892	firefox.exe	97
PID 4892 wrote to memory of 3560	4892	firefox.exe	98
PID 4892 wrote to memory of 3560	4892	firefox.exe	98
PID 4892 wrote to memory of 3560	4892	firefox.exe	98
PID 4892 wrote to memory of 3560	4892	firefox.exe	98
PID 4892 wrote to memory of 932	4892	firefox.exe	99
PID 4892 wrote to memory of 932	4892	firefox.exe	99
PID 4892 wrote to memory of 932	4892	firefox.exe	99
PID 4892 wrote to memory of 4652	4892	firefox.exe	100
PID 4892 wrote to memory of 4652	4892	firefox.exe	100
PID 4892 wrote to memory of 4652	4892	firefox.exe	100
PID 4892 wrote to memory of 4652	4892	firefox.exe	100
PID 4892 wrote to memory of 6008	4892	firefox.exe	101
PID 4892 wrote to memory of 6008	4892	firefox.exe	101
PID 4892 wrote to memory of 6008	4892	firefox.exe	101
PID 4892 wrote to memory of 6008	4892	firefox.exe	101
PID 4892 wrote to memory of 2076	4892	firefox.exe	105
PID 4892 wrote to memory of 2076	4892	firefox.exe	105
PID 4892 wrote to memory of 2076	4892	firefox.exe	105
PID 4892 wrote to memory of 2076	4892	firefox.exe	105
PID 4892 wrote to memory of 5784	4892	firefox.exe	106
PID 4892 wrote to memory of 5784	4892	firefox.exe	106
PID 4892 wrote to memory of 5784	4892	firefox.exe	106
PID 4892 wrote to memory of 5784	4892	firefox.exe	106
PID 4892 wrote to memory of 3160	4892	firefox.exe	107
PID 4892 wrote to memory of 3160	4892	firefox.exe	107
PID 4892 wrote to memory of 3160	4892	firefox.exe	107
PID 4892 wrote to memory of 3160	4892	firefox.exe	107
PID 4892 wrote to memory of 3052	4892	firefox.exe	108
PID 4892 wrote to memory of 3052	4892	firefox.exe	108
PID 4892 wrote to memory of 3052	4892	firefox.exe	108
PID 4892 wrote to memory of 3052	4892	firefox.exe	108
PID 4892 wrote to memory of 2476	4892	firefox.exe	110
PID 4892 wrote to memory of 2476	4892	firefox.exe	110
PID 4892 wrote to memory of 2476	4892	firefox.exe	110
PID 4892 wrote to memory of 2476	4892	firefox.exe	110
PID 4892 wrote to memory of 1228	4892	firefox.exe	111
PID 4892 wrote to memory of 1228	4892	firefox.exe	111
PID 4892 wrote to memory of 1228	4892	firefox.exe	111
PID 4892 wrote to memory of 1228	4892	firefox.exe	111

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\svc.exe
"C:\Users\Admin\AppData\Local\Temp\svc.exe"
1⤵
PID:1192

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4564

C:\Windows\System32\DataExchangeHost.exe
C:\Windows\System32\DataExchangeHost.exe -Embedding
1⤵
PID:5264

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3464
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Drops desktop.ini file(s)
  - Checks processor information in registry
  - Modifies registry class
  - NTFS ADS
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:4892
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1948 -prefsLen 27097 -prefMapHandle 1952 -prefMapSize 270279 -ipcHandle 2036 -initialChannelId {e41440ea-2ffc-4dc1-b14f-997283f27d81} -parentPid 4892 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4892" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:2452
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2420 -prefsLen 27133 -prefMapHandle 2424 -prefMapSize 270279 -ipcHandle 2432 -initialChannelId {74339d80-9c14-4ec8-953c-ef86b8eee2f8} -parentPid 4892 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4892" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    - Checks processor information in registry
    PID:3044
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3696 -prefsLen 27274 -prefMapHandle 3700 -prefMapSize 270279 -jsInitHandle 3704 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3712 -initialChannelId {97efbfd6-a8d5-4897-b2b3-c4b930bde885} -parentPid 4892 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4892" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:3560
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3884 -prefsLen 27274 -prefMapHandle 3888 -prefMapSize 270279 -ipcHandle 3908 -initialChannelId {3912d708-a0a7-45f9-a043-3d9b8295f160} -parentPid 4892 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4892" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:932
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4516 -prefsLen 34773 -prefMapHandle 4520 -prefMapSize 270279 -jsInitHandle 4524 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4532 -initialChannelId {d514e732-e130-46ce-8c74-b96370844d2e} -parentPid 4892 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4892" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:4652
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 3008 -prefsLen 35010 -prefMapHandle 4912 -prefMapSize 270279 -ipcHandle 5080 -initialChannelId {305909bf-9e97-4071-9ec5-12aa7c5f2b39} -parentPid 4892 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4892" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:6008
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2940 -prefsLen 33031 -prefMapHandle 1628 -prefMapSize 270279 -jsInitHandle 3144 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2800 -initialChannelId {686866d6-a297-4873-b201-d32e0de324e1} -parentPid 4892 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4892" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:2076
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5796 -prefsLen 33031 -prefMapHandle 5792 -prefMapSize 270279 -jsInitHandle 5820 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5828 -initialChannelId {48086307-21ad-4fb4-ae77-1fdb8a81c274} -parentPid 4892 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4892" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:5784
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5992 -prefsLen 33031 -prefMapHandle 5996 -prefMapSize 270279 -jsInitHandle 6000 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6008 -initialChannelId {94ac4170-6f84-4738-a790-6ca6f2555e9f} -parentPid 4892 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4892" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:3160
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6368 -prefsLen 33031 -prefMapHandle 6372 -prefMapSize 270279 -jsInitHandle 6376 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6380 -initialChannelId {2b21fbf3-195c-4958-87d6-a585d4b815eb} -parentPid 4892 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4892" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:3052
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2860 -prefsLen 33031 -prefMapHandle 2960 -prefMapSize 270279 -jsInitHandle 2964 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5048 -initialChannelId {63b637b3-d9ca-42f1-a1c1-2e1c06149186} -parentPid 4892 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4892" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
    3⤵
    - Checks processor information in registry
    PID:2476
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5860 -prefsLen 33031 -prefMapHandle 1228 -prefMapSize 270279 -jsInitHandle 5888 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5788 -initialChannelId {2a0925b6-d1c4-4fee-8a2e-7cd87bfab43e} -parentPid 4892 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4892" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
    3⤵
    - Checks processor information in registry
    PID:1228

C:\Users\Admin\Desktop\svc.exe
"C:\Users\Admin\Desktop\svc.exe"
1⤵
PID:4820

C:\Program Files\7-Zip\7zG.exe
"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Downloads\dnSpy-net-win64\" -spe -an -ai#7zMap14236:92:7zEvent18632
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:5568

C:\Users\Admin\Downloads\dnSpy-net-win64\dnSpy.exe
"C:\Users\Admin\Downloads\dnSpy-net-win64\dnSpy.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
PID:7524

C:\Users\Admin\Desktop\svc.exe
"C:\Users\Admin\Desktop\svc.exe"
1⤵
PID:6712

C:\Users\Admin\Desktop\svc.exe
"C:\Users\Admin\Desktop\svc.exe"
1⤵
PID:6808

C:\Users\Admin\Desktop\svc.exe
"C:\Users\Admin\Desktop\svc.exe"
1⤵
PID:6880

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

3434CD4FB57A6A7429D8D1948DB9155934616A50

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\yt3t4i5l.default-release\cache2\entries\3434CD4FB57A6A7429D8D1948DB9155934616A50
Size 46KB
SHA256 0c547c741f474ffbef10ab0fa5ec6f5b151f4d6af237072911ed5de465e1cd6c
MD5 c310bb86bc286079fdd568f6a69b8147
SHA1 c6a333f25d05b4787c5d0fe87f161f4b6a2745bc
SHA512 2fadf70c2577dc35c98da1886bde6ba15a7af7dbd00a3a8686a32daca1ffe85bd63a7574b329fe5ac43ec7f43e91f5686b7462958ca8942d109deb851e1c08bb
SSDEEP 768:tS9MnP6wumBEE2A4q03nY0ZIIBw7a+xpg48ywG5JhoASvcSCc:QMn/zEBQAYcIIBvQIGThGvcM
TLSH
T15623AEF0A43A296D47324D51F52E72E93834A017D481EDEF9434A2ADD4A173372CABF9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

86DDBDE5E1EAFC4C588EE71FB531985C95CCC542

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\yt3t4i5l.default-release\cache2\entries\86DDBDE5E1EAFC4C588EE71FB531985C95CCC542
Size 16KB
SHA256 10eb70812e6134bf246e8647aa9061756c1678ddf2d61d732bf722f920dd771a
MD5 4cf0d48c0a81467f6480c97b0dc66fd4
SHA1 9d69104d31645f7fe4e957641e915402bd539bac
SHA512 95ffdd21a6cbebda5741be78851d90494ea498083f7b773fc2f768fc022b283de5d8de864b1a58c61be5eaa49e9d5dbe7a62432af325f70feb6dc34de65ce437
SSDEEP 384:HXkRyiO024Y3DL84KKDL849B7SOEAd9KVRaAcP+AWRMAawR:3mZY3DL8lKDL8CB7S/AmVAf+hRMg
TLSH
T1CA728E3D4F003CAC15A780F8C5A583A98D18B7A7DFEAC0AD21583D0DC798969B5F548F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yt3t4i5l.default-release\AlternateServices.bin
Size 21KB
SHA256 fa096b55ceb028590cc6d8511ab8666461e553c6b797cfb6c6b42eeee382f870
MD5 ffc40d2d4498eab358c3aea14fb2e6ee
SHA1 2ea270e548ac6995d3449d4545c943285ecc2114
SHA512 0180c85cf327c6b3ae42a02a46922b53f45fc5ad50c3bed7f928e6023d3ba67406e8896b11b466574ec1f06ff0ebda5765e83938a13e0f10edf8fa6408228e77
SSDEEP 96:ur5bS8HT0OQyx2+OBCsM/ppE7chhbI56LQKykeyuZg7y8tbn4LOnJ4:IO22bQmZZUFt
TLSH
T108A277F36BB26462F0D28FB444A8B58C9C331729486C95D4CA4494EB03D6EA5D17FBE8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yt3t4i5l.default-release\AlternateServices.bin
Size 10KB
SHA256 ca1d72a90cceb79602198878827914b366a62f1494f4b5111796731b85ac855d
MD5 0d9ad5b362c6e875fcc6a94f0deb7a48
SHA1 7551fd219cdad649f884e44b46648fe384da025b
SHA512 02a6bada757bf54b7fc77b5a535ceb6957c11a8eb542edb8dd89871a19cd6cc721ea6c24acdcd69c38c2881eec6586930affae76ffc7bfc22ff233cfeec24f3b
SSDEEP 48:ml3JbQH+4wFXH+B1+mO7aN1BEL3CM/p7:ml5b0+FFXm+z7aHBELyM/p7
TLSH
T14A2272E76B726462F092CFF48069B58CAC330729146CD594CA4494FB03C6EA9917EBE8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yt3t4i5l.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 9a90001e2d411e090219d568bb1abe9f58f902820705af1a5eb707a7da71081e
MD5 781af968b8520e5e241c17b3f89845c2
SHA1 1ba59fe4a1233f23a352e484cce8614ac6e889e3
SHA512 4cb98074d6cac2981848f148fc800a6612e78935c2cba57b87b0789803ef0396d8299abe429d02130c9dd9e80fc3926cd75fdfc6548fd6afd08f5c55b66e62ce
SSDEEP 192:p1d66JoztdzgCl6mc0d4wWwPOv5zbo8bUwWlyj7wZxI:nd66Joz/zgC1jwbo8bslyjF
TLSH
T1A1D1ED68F629463FC855023BCDA61B400E32395BA84E7F29719D740D3D462DE7A8D17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yt3t4i5l.default-release\datareporting\glean\db\data.safe.tmp
Size 57KB
SHA256 64d799fbb39d39136940ebbfb4d466f9ba57e59f3f4051456726b9a17bec26c2
MD5 fc369021914a8b492fdc94285a446638
SHA1 c18dd94f392ac36ff5f891d7244d2458db3756d7
SHA512 8b37a11032f745f2c4426ab381a399a85cdaddbdf07a8bbd5c26298a451e5624b53bb3983d2d90e31c147f0d9a072fb82f17c68f265ff603472c6c25de24b895
SSDEEP 768:f051qwC/Y62W53vrLtjIwXtYMKTTvIHGcm+uY9YBKAc9c2E6bUbQb8b5UM:9wC/12W53jLtjIwXtYMMTI90F7
TLSH
T1C0431144EB1A943FD82802BA9CD61B103F79F889590A2FAB371C55786C872DC3D5E17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yt3t4i5l.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 97c3b3e0797d4de38421ee9f0a037b6083774fd0c2997a91d2e4bdd4b293c5ca
MD5 3946a565e5855e0de5ca6e25824cf6b3
SHA1 d769356750cae41f206abd80f170421692a8beb1
SHA512 53797d36184354bfe8fffeeaa0a4851973bde3c9685f6f7f74d18d7af5af6d64f5354ef4a90176b903eddee1a0707b1155ac33c53255270c8102d248a0a4b81b
SSDEEP 192:p1d66JoztdzgCl6mc0d3wWwPOv5zbo7+ZUwWlyj7wZ+o:nd66Joz/zgC1jnboaZslyju
TLSH
T18FE11FA8EA29863FC815027BDDA61B400F35388A984F7F29759C741C2D472DE768E17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yt3t4i5l.default-release\datareporting\glean\events\events
Size 1KB
SHA256 e4408134fb93fb0864e826bc29d6a04a418a1883b92435ad00789e93a0b6bd29
MD5 17c3db90ebce6e7b3791b84bf4c8c477
SHA1 a13c834e633f62c9c15f2d8562991aee3e64d4bb
SHA512 00ef6b7a44318d498e02fb9b42f1ed822f5d21320ee2e500ef0c2458cf57eb24ce25915864c22e86ad3d4403e58bf03f8c7f52757fe8f16b625b71dfb6b52b17
TLSH
T192214C5C79B84D6AA8CBF29CB440028E63654E0B444B1C470D03FF8DCE92AD9326A47D
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yt3t4i5l.default-release\datareporting\glean\events\events
Size 4KB
SHA256 ead87c6b560f758174a61989f10676d9fab28835bab1f2a01fa17315ddfd9749
MD5 dba0f439f8933308a1b08c9fb54a42d0
SHA1 9fd4dcc50925f938d56337c799d42bce1b8d5f6f
SHA512 54a2e2a34f8ac60189a1dc2a99ce0487eda04640107589c4391239eba3fc0ad00c9027cd97eea6edf4d5563e0f092e036aff10b3ae81e069e9e9e4d3bf6a8155
SSDEEP 96:Nm0KNdMdhwy4tnFo64CgJ0IY29EnnEgK+NjK2F:NcTmhBoVA25K2F
TLSH
T1AFB11F1CA4B80CBF69DFD2ADB401038E56AD4F07D58F1C474C9BFE4D8D86A99324E468
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3713c508-067e-4351-b6b2-73e0cc8fe782

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yt3t4i5l.default-release\datareporting\glean\pending_pings\3713c508-067e-4351-b6b2-73e0cc8fe782
Size 16KB
SHA256 8c0f8c67938750e3fe8201a388b002815fae549c4ea38d8fac612a24fbbbfcbe
MD5 ba25738421a651c99a144ce41001de2b
SHA1 5b856d07a8d48ca1f733ab71d116d6355c31b92d
SHA512 48aad6b634dd93580c87b4760c54b74c497b7655080381719ee2c7bf6723f0a492e664b7273338a38cbb59d86e55ad5e396a264fcdacc0fdb49d13e1515fe65b
SSDEEP 192:GfCCHpqIoGUkEkEZT1HdfBuTbIteSKJ5uixbKzSM+epPjH3Z2Upqn23KLlKOWsXy:OCCJxUk92dfETbIteSvixbKmM+eVpqi
TLSH
T15672B8566820457A8691E768D4FC7FC3E6F128CF4C418FCE9BE4BD086DDA0AE112794B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

50062734-daa1-4a03-877b-e6b31cdb862b

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yt3t4i5l.default-release\datareporting\glean\pending_pings\50062734-daa1-4a03-877b-e6b31cdb862b
Size 235B
SHA256 05200fbf78de737f08c8389359c68e878075ccb38c99080ad90ccecfe105a3eb
MD5 58098704ba83542d13ed1cf76533d3c8
SHA1 221a42fe26e340f1ca8fb66ea19969df006a03b8
SHA512 0a6efc48cbb07b7692e896275b98c294027e0cd7a3d2f91befddd58c292267b34faae061187945cddd7699dd81c2785ad59c4aeccd856b1a5424c0b5788939d9
TLSH
T18BD0978058DC236C08080F06B0A0B9C631848C3310B9A810CAA104349ABDBC50212C26
MD5 SHA1 SHA512 TLSH

Submit Download

57137b7f-3684-4f72-b088-33366628a622

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yt3t4i5l.default-release\datareporting\glean\pending_pings\57137b7f-3684-4f72-b088-33366628a622
Size 883B
SHA256 817b5fc2ec55b7270e3551b8922e8474fb3ac663ac05b2040156679e443b181a
MD5 d51557ab8b82d8afe551fb3946f3fe55
SHA1 b8ef2100a3fb3dec977f7c4e610af2c7ce50dfc5
SHA512 7df6156e6ec040c1cb6093811d5a2ad3fbf6751765cb3e411ee2a9e3b9aa53a9c9e9b154562307cf22e9d29ec0bb58a5f0f009ab201505ffb68b4f39affd3690
TLSH
T11D116380D5317AB2CC78924FCAD5378683F4B42380CA84043EA16D080DBE75EE76371B
MD5 SHA1 SHA512 TLSH

Submit Download

8e651b66-ce79-4f1d-80a2-60beb73900b3

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yt3t4i5l.default-release\datareporting\glean\pending_pings\8e651b66-ce79-4f1d-80a2-60beb73900b3
Size 2KB
SHA256 4ec70f731293036bb2ce5e72fa662fef22ac78c86de1854f17a1976553b9b0fc
MD5 b9ce0a6d7b083bb1b5a0907ada909a5b
SHA1 45bf486186dcf031eb28ba097df2659fa689d722
SHA512 1e35bbb4ed06cb8aa469c4b2bd6b43a4b7f99facb24086db8af377624ede6e9dbd50e5a9e10ef8bc4493051d4498b539df471e5bf60a53ca4c95993a7cc981da
TLSH
T15B41106C36784D768CDBF15D95C2238E93A0995304C628432E66EE0CCEC679E736A52B
MD5 SHA1 SHA512 TLSH

Submit Download

b42adfe7-58d1-4e73-9840-d8f6e6013f86

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yt3t4i5l.default-release\datareporting\glean\pending_pings\b42adfe7-58d1-4e73-9840-d8f6e6013f86
Size 886B
SHA256 7975b30ac4ecf1bade6e960982fd28b79dfb25ef5fb6d6a39775e6f0797ec6eb
MD5 d64a232a08eb3156857118504ad79a6e
SHA1 15b98d07593b8cfb1ffed29db11beac5b29b06a3
SHA512 45e029e6612050d85314367b6f4cf240b50e90b56f7f9e0d85f618ff5ae894779a40a2a8bcd84977a0ffb953ef1cfbc41f60edf6136325ef829cdc0ed5a37c61
TLSH
T1351144C04931B5B2CDB8925B85E1774187E0B02380CA4C183E51AA080DEA25EA757317
MD5 SHA1 SHA512 TLSH

Submit Download

b7e886bd-a518-4a8c-a891-9294ea617f04

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yt3t4i5l.default-release\datareporting\glean\pending_pings\b7e886bd-a518-4a8c-a891-9294ea617f04
Size 28KB
SHA256 df22bfd5e5a7493c8013a582f7dc202d319e7446953ba8b2400c4b8708e4a97f
MD5 8be1857f5c038b7a0935fea6c8175c11
SHA1 b0d1f9f4170f5799af4bc95e7d58e653e8e16e88
SHA512 0378aaabede3ed943810a56321e6f4fd9819c32d1d780af9181ef3f35a61bd921056b52670af30cd2083dde20364be02d0c81af9c3bc4cc338a5271f2e13064d
SSDEEP 768:HkSvnLA5Wwy+Dh1I9QmA4gDB0Jtcjv1Cro9TphRH12RIT:Euqpy+j74gNL71CkURIT
TLSH
T198D2D9FDCE1240473E65E21EF2E6ADAB2027193209CDC7DD69FD483A26C697B1527318
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cb84e106-5180-4f03-858e-fcb1a9d2d6f2

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yt3t4i5l.default-release\datareporting\glean\pending_pings\cb84e106-5180-4f03-858e-fcb1a9d2d6f2
Size 235B
SHA256 7e11f21f73458ddc312743ae6880bf22d209c81105459abc8e014957944ab099
MD5 350d3593bc79a8aee82a9f4b57df7383
SHA1 baeb1ed9fd0070b0b8e09759c4e283388956d41c
SHA512 fd60c20345d79e23f268b3e7bc56b4eaee668ab5107304612c17fd8ef90fa032b3965cab6df4b96b6577dfee4a39e68c307547ffcd06ecdb80c49710ae73465c
TLSH
T17CD0978628886B6C48100F02F0E069CA30868C336478E820EA5206388AF8AC90113827
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yt3t4i5l.default-release\extensions.json
Size 16KB
SHA256 fa8f67ca65d40988ec270eddb667840623049139f014272d55348cf91a514228
MD5 4a99e009596ea3c15dc987dcc4fb970d
SHA1 52367bcc4a3b98ebee7ac56e5d714efab47a8f05
SHA512 c424ab4acfdd5a13b3673bca18fec7165c9ccb969255f2f43b3c86fbcffb2a7e321f0d370779e4f32b2a6d9314961077208f94e117ee39bec5179319213dce57
SSDEEP 384:lkI4vlUmldvB8dhWM94ze96oML4HIL4PqtL4H6tL4HxL4HeQ4hn:2I4dRfSXJ42614q4St4at4J4T4t
TLSH
T1EE72521545049EB8298FA79BAA367E01C37D573B60845C38F4DD8FC802FA5B902FB65B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yt3t4i5l.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yt3t4i5l.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yt3t4i5l.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yt3t4i5l.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

places.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yt3t4i5l.default-release\places.sqlite
Size 5.0MB
SHA256 f0ea2a3eb917e76b8856039fca6feb1ad6b3502c8fbd270bbbf63707a774421d
MD5 b3d0a08dfde4acbf535ce18058ecf74d
SHA1 cff2970203affaa07bff05ce6d7d4bbc504e9c4e
SHA512 664f54318848216bb633f59e839693306ddf5a9e61b58c0a6cc96e3661db2898e5efd645ce44c83bf766c53d2003b9915d18115cbcadb9d9049d9540174a72b9
SSDEEP 384:M8r54w0VW3xWthYygJmFY8u6+f9VHIVuG8:rqVW3ocygz
TLSH
T1E636D8AB7A201545C9DA9132FDE36B08183FB206C9373742399415AE8EE0723795DCFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yt3t4i5l.default-release\prefs-1.js
Size 7KB
SHA256 1760513f290c184bcfe80790ee9f0cb444d89ed1234efc7b4a46675293c0ee68
MD5 6fa6bb484dd228e4177c009442771b65
SHA1 c81754f3eb8bda7cc809cf792a74ea7f4f33ec03
SHA512 51108c31270b5f8c3b5fd7d3270f5a99cc967806bf5846b08404a23fa93ea6536b530f11d3f285b3ce5964a66ad7b636e1e7830552ce960379f52b28e871868f
SSDEEP 96:xHLUTUhRqGqUfjpzIObzSBGSSlcdv9j2nTRH0wkysLBw88u8L4cndBOsGS:B+RUfjpzILGSS790wkZBw88Rh
TLSH
T199E1207894088F7F68B6776CAC6888316AB2013B77BF68D750B654C4055CF3841F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yt3t4i5l.default-release\prefs.js
Size 12KB
SHA256 b575ec746b5f83cf17b8ef378235d216a2d4657b3cf69671076063be3f374471
MD5 38da940d584822abdb8dcc9dfebcd8fa
SHA1 f95a1f951eede2fa2951f592e6e762c530aa8241
SHA512 86e15258f9580e304a47a162ba9af4e2263fbe7627599be3c66d7b52f334e3444480d65d971e25f6c7cc5e9e197c776ca82a40eabc6cd7b15e7f6d680724e2ce
SSDEEP 192:X/CRUf+pzILGSSbXLR6wkxDKOBw88OioAtGnoh:Ns3RaHw/AS
TLSH
T1F942DE3CD0018B7F20BA327DAC615AB019A1063BB6BFBCD709FD9895044CF2445E6AE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yt3t4i5l.default-release\prefs.js
Size 6KB
SHA256 0b559864e115523bf9b46a6da57039eade2d71c910af1612243be973adc90efd
MD5 f46f41888f9c9b47a4638703c58d557b
SHA1 dea30e65a6104ab9b88d9beba2e0a0edd6e797c5
SHA512 209247e657c92a550327e608172eeada3ce3ab5a4c526b32d12dedeb69e273501045b6a24fbb0ebd63382664a0ae9cd40b07ce80efd798891902c4c84314d0dc
SSDEEP 96:xHLUTUhRqGqUfjyq1zSRSSlcdv9j2nTRH0wkysLBw88u8L4cndBOR:B+RUfjyqkSS790wkZBw88Ri
TLSH
T1E2E1107894088BBF64B6776CAC648C316AB2013B7BBF68D750B65485054CF3841F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yt3t4i5l.default-release\prefs.js
Size 12KB
SHA256 f6aeef228325500b0e47ee5206dc6efb275bb885657dbfc093a70e0d459b5562
MD5 802220ac40ed5481242dfc0288870066
SHA1 d57f22735d1bdcd564ee5b2bd55ee36941b79d0d
SHA512 3c53549038be13b432508aab717a613bb5c7806c0868762da927274ebcaaca4f8a3fd44682fe36d621632b5d9d59b14a0c62bac3b086686d4792beb7b71e390d
SSDEEP 192:X/CRlf+pzILGSSbXLR6wkxDKOBw88OioAtGnoh:Es3RaHw/AS
TLSH
T19842DE3CD0018B7F24BA327DAC615AB019A1063B76BFBCD709FD9895045CF2445E6AE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yt3t4i5l.default-release\prefs.js
Size 8KB
SHA256 236a666c18c04f9df6ef74da36e6577db860e6ba0ce66c0bd1459453422f5d8a
MD5 b9573bb8e915264bf5281e828baff31e
SHA1 30015a9cefa69dad40e59a0f59d427e95e18d6d9
SHA512 c14c90a4513e76e9cab8c7b608da18220d981a2e3b28bbcb6288ba72016d48846d76cc648b744bdfbd23dbc6d98ce2f91cdd2ce5668fdc5d64f04d0ce6cedeb4
SSDEEP 96:xHLtTUhRqGqUf+pzIObzSBGSSlcdv9jOnTRWRpowkysxmXBw88VTGY8cz7C48L4O:BHRUf+pzILGSSb8R6wksBw885Xmh
TLSH
T1E4020F389004CF7F64B676ACAC6449716A72023BB7BF68D714B95884014CF3845FAAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yt3t4i5l.default-release\prefs.js
Size 6KB
SHA256 98c3c833bfe706efcc7a83446cd48c4e38d743a1b225c51f43ae2d3acf63cfd8
MD5 1b3ecc07ea9b505c0e32a8acfb4f0a0f
SHA1 e1a3439be135ec0ceca8788ee90c5563b8ef93af
SHA512 d776c54f8dd14be37b22c31fe03502476f073aca6dfadf9a53f33849184f6354d54f827c785f6e0168a1129213185d2a368762512241ec09436e4f6e266be647
SSDEEP 96:xHLUTUhRqGqUfjpzI1zSBGSSlcdv9j2nTRH0wkysLBw88u8L4cndBOsGS:B+RUfjpzIcGSS790wkZBw88Rh
TLSH
T1BEE1207894088F7F68B677ACAC688C316AB2013B77BF68D750B65484055CF3841F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yt3t4i5l.default-release\sessionstore-backups\recovery.baklz4
Size 2KB
SHA256 759e93e14bf310a15e2fc379fcf4ae5ab281a629ea2cf979a4ad5b2270862123
MD5 0a0e14a3fb3dbe3510144b5e7536966f
SHA1 5b3085304ae202741b158c2c0da1763f520eb9e8
SHA512 7630c3423c4daa7558bcfa0de37ea19bae7b8d362d268b029f406a5c6a5f2ec6c345131173ce8b156001d0bbc1eba09df87f3872bd158c5458180b33f928b3d5
TLSH
T1D7515D671C2F3CFB3471D5A5B8DF0FD08A62243044F690757D59AD2201DD20AD996E6F
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yt3t4i5l.default-release\sessionstore-backups\recovery.baklz4
Size 8KB
SHA256 c2aab7bdc7b74a12fc819636411277ef5b1825f3284de1bb097de050cb895a3a
MD5 9e5e062201e996d2ae594c0e63cab79d
SHA1 afb249e6a49e95d9885665348f986d6da1c4a738
SHA512 6a146ed80820492032c85fe9a4ff02468b856e9b6795140048ee606a74508cb026a58f11583a3c79caef42b3d5ccada239bd70deb5f1ba881c427d55f6a2493c
SSDEEP 192:55Muwy3RJpOA49FItfaEj2PIsSX9G4cBHqFeX2hmyyQI:wu3xOvzqaxPIsSXo8Fe0myq
TLSH
T10202AE6AE4355F2A8C257C8440DDAE0C779668A1A7FB8201CB1C2DB7C2E378456FC14D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yt3t4i5l.default-release\sessionstore-backups\recovery.jsonlz4
Size 13KB
SHA256 2851422b0f062df2583d9c38474713fdcfcd3dad9c8e83bae4c786a12f33acff
MD5 23a9e915d1ff586190f34addf8f57e1b
SHA1 6adb3f2634d3e00dc972d7f23c5db551c4837214
SHA512 817ce35dc7b6e7cd56cae1f7b28c5eecbfa2fbd5d5704b4ebe20484bfcb88e4835498a30d32de6b1f96a3e42d8bb11fdf41087355ca619ba457ff905b84159dd
SSDEEP 192:95MPCpwy3RJpO149XvkDluWvS2RGVk86qq/mR/XtzfShypzwjX7N+ylddT:kS3xOeN8luW627iFzfmymjUwT
TLSH
T1A852A062D134BE69483C355D84E96E1DDBF66C508BF154C4EE092CB591DBE0B0BE02C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yt3t4i5l.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 7.3MB
SHA256 a67a762024b3aab38890b52c17d226579330e0a2c7e9e5134247fca6e7eb453a
MD5 cc1c4a6cc74f4648032e234f0501293e
SHA1 6ef6d654ff5201d734bfb1866b6b9d75b207f56f
SHA512 3fd6d04447c27a0b8c89c60fef1d31320ce4b027522482ce4538c901a77fb33f7ec8940135f3096c1f43086f7dee977c344815ff8bdaba72a089c7f6f348dd88
SSDEEP 49152:b9yWkWn/X1He4y2D3/Y/Srq0Tllsa31o96z2QGr5lxRIcW9wXtU6RoE3BwYFY2NQ:qpx+QGA4uv0HrQHaUop
TLSH
T1F9765CE420E19253F38644B3719993FB20EFC01C6036CE44579496FAA9748EB8E977BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yt3t4i5l.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 7.3MB
SHA256 2b639c6ddf20bc54659ff8695b79f103c74639f6f7b7ef5966a1876c4c96ee0b
MD5 e538ca4af936b44e8fd4ea0e63112e89
SHA1 235983455d03fa6475742a0a1868f38f3048861b
SHA512 c57fd35222023e4780c7c55a3545ff0e39cf3e1048d51f530a52af7486767dc312de75ccdd4896d1e9fb215e41774496c5b0aa06a7dcbeaa9ac695b9901cae4e
SSDEEP 49152:b9yWkWn/X1He4y2D3/Y/Srq0Tllsa31o96z2QGr5lxRIcW9wXtU6RoE3BwYFY2Nh:qpx+QGA4uv0HrQHaUok
TLSH
T1CF765CE420E19253F38644B3719993FB20EFC01C6036CE44579496FAA9748EB8E977BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yt3t4i5l.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 5.0MB
SHA256 da1ce5c157a250e9373dd4795826a7cfa2d6ef2d4138005d90228a556ca0e2f0
MD5 e91fe5a95a70df19ab7436667f743a1d
SHA1 2c0fa4c86f62323ea0d73d9c3c0eff6114c57b2c
SHA512 cd294e6773677500c737d7857966e7ddc25cbaa70ac3fde5e378efb7d88a3e8242d32c7f8d3885a562b6fa111e0d7def2e22f5680ddf977ee3a183cb5b820ac1
SSDEEP 24576:Ofau7hzU/DU/cDROUx2AXYV0GH61Y4z3CoMZZxp17OPT90HecLEZgWjigHr:Ofau7haIEo5YYRH61Y4eoMZHp120H5gL
TLSH
T183362AF820D1A257F3814033664593EF21EFD00C6037DA085BA956E9A578CEF9E16B7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yt3t4i5l.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 5.0MB
SHA256 09fe5c744dbcc75d4b70d5e7ed8f88dc47e6f292b47873b6765560f0b375e35e
MD5 125b1518f73bca841c1b2ee03b66d298
SHA1 b8f538da073a96e0174d553a4a3dacb7832387cf
SHA512 e3ccb3ac0bf41af22cdb3d276e9b401e0c09785ac9c40a3ccb0551f4c40078d837c95f060a02bc1b59ef590d863def95ba079792909fd6b5d4b045fb2cb60867
SSDEEP 24576:ufaI7RzUEDUncDBUUx2AXYV0GH6gY4Z3CoMOZxpAZOPTs0uRcLEZgWjigHr:ufaI7RRIce5YYRH6gY4goMOHpA90uygL
TLSH
T15F362AF820D1A257F3814033664593EF21EFD00C6037DA085BA956E9A578CEF9E16B7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DirectWriteForwarder.dll

Path C:\Users\Admin\Downloads\dnSpy-net-win64\bin\DirectWriteForwarder.dll
Size 485KB
SHA256 1f1093930ebc3779f2d4659ed3a31fd05cfa1dbffc0f7575955cb28e7b990c64
MD5 fe18b6ed4c63d18156217dc30f1482e5
SHA1 1d1eccc4e03b086d49c453b4e5716e164892f006
SHA512 c5c6e64eb2ab0ef93f6d823e002f895333983f4d151ac7296c7de65e9fb8096502f8db3035ded3612fb9c6c99a8a1c09c81c3ff84dca7e1b5c5b803d10e36052
SSDEEP 6144:aWmS5E0UvK2VMFiQT29ukf5rP22hTITqu2C9Bj1LRP60M8xsVaam53EvW+0Y9seY:aWmaMVMFoxuTRghYZIHQa12N
TLSH
T104B48E55FF463A93E5ADD17B4623CF62CA34ECB14723B3D7860262A02C1B3D6A53A714
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Win32.Primitives.dll

Path C:\Users\Admin\Downloads\dnSpy-net-win64\bin\Microsoft.Win32.Primitives.dll
Size 22KB
SHA256 e38a1bdac35ec926b8bf766fceec70293ba64d49380369ea4fdd8116280fd8a2
MD5 61919123a166bc20a0f81c5abbf954de
SHA1 5cf381490ca233cf848320f698b75bcd796bf8d9
SHA512 7e445ae08a3f35ae336b27f0e27772f316369131c8ae61ac23ac519264c4697342a0f4a0cb2feb7e49c2140505984ad1bf8c38b43225b50a565d781d1992156d
SSDEEP 384:dWhqpWnxNFikn5ChT8ENc4xOxdHRN7kHTPfVlGs5Rb:5CNFi25hqjikC
TLSH
T12BA23A70C7BC4647DC7AA97096E5E506AE3963C62B5152DF0C58F2480C87BC29F35B3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PresentationCore.dll

Path C:\Users\Admin\Downloads\dnSpy-net-win64\bin\PresentationCore.dll
Size 8.2MB
SHA256 d9108c34ce90cfe678a8151ff48ccb814f7865263b233176a27c4745344a1a3f
MD5 8248dae04024364aec8b53ce0a292ec7
SHA1 02d208a9641770565ba0b5cb670c02eb72cf4edd
SHA512 b65b492e9a110cb73135aa74e22626b53776784bad2966831125736706efb183e598f78175517150889cf42ddee1dfa4d79ce8d38474137df91dd185f1787fe3
SSDEEP 98304:JGwrvzgRxG9bdBMSwDtmNe6plxqt33PtNlHm0fDFbZ7Pktg:JGwrERxibdB6wgwxqt3ftNlGMFbxMa
TLSH
T19E968D04ABC84B25D02FD535D9915452EAF4B0A21772C9CB394CEB9C2F977E23B3A523
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PresentationFramework.dll

Path C:\Users\Admin\Downloads\dnSpy-net-win64\bin\PresentationFramework.dll
Size 15.3MB
SHA256 eef58ba8dbac8f889aaf29a5fe90d5bf910a677386621c8ad24f58372ec83a1c
MD5 bf7eb047ba48d932a1d0702eb1aa69be
SHA1 ae5cae052b827eaacd8aed2f2b91748838fc9392
SHA512 b1b9856df06185672bece73873bdc9d91dbadd0c2d13f1739dc1ab3efeed75ce57e8b7b81df4b86c050fb1100693c44a120155d0bb27b028bcd6c74c12e6e7fc
SSDEEP 196608:BPzxKnB9y2yVzpHoFOxQSdpWkneQL42N5Ym79dTK:Dohy5pHoFOx1BF42PYma
TLSH
T165F69D05E7D44B31D86ED6389653211AC5F4B4954332C7CF0851F2AA1EA7BEB2B7E232
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PresentationNative_cor3.dll

Path C:\Users\Admin\Downloads\dnSpy-net-win64\bin\PresentationNative_cor3.dll
Size 1.2MB
SHA256 06b419e54fcd90b0e6cd7dc31f952b2f7e1f185d83089fae73444d6f22b1eecb
MD5 12348e9b2da243ba759ab906c6255b83
SHA1 5e8267d10e8229b8c147af90af01f1ceb49bb1de
SHA512 2152b908401cc10bd4b9597d701adc3d9a6e71f4b6cd1f1ac300d442be3eb4871ddb250c833eaade942b7e0a19c0fbe19ba0083482104ae2ea02a7ac88659ba9
SSDEEP 24576:kSEpeMjbGZoAcMWtE1mcUozPGnpJpuj4XY8Pj38i+bJjtaY7DHJDiMBaPnd4/pZX:kSVMj4oAcMW4UozPKpuj4I8Pj38i+Ztz
TLSH
T1F7454A72D2E642E4C47FC1B8C6469727FBA0741A231C56DB47A08B592F27FE0963E364
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Collections.NonGeneric.dll

Path C:\Users\Admin\Downloads\dnSpy-net-win64\bin\System.Collections.NonGeneric.dll
Size 96KB
SHA256 dda6e3fd90dcfa60c661a5c760268248e1379c07bd9c266a784d5b63f94b22a1
MD5 2e493ec3902127e6ae28eea5fcb8d8de
SHA1 554530e3655166bc7430060ead50056d00b1c0d5
SHA512 17921b9c3f5ced1537915c562745d30985058e8a81932c5dd6dca72e42d6bf1b37d32991b6a16d2802ec3153b39b60979d6bf7c2b3e0fd7e7b2ea26af6bccb9f
SSDEEP 1536:jrIOp2NRwhSz0XtS3gmjPOLOcZANjMMc7YXkeYS1t:jrdpMwhFA3gmjqrZGQrYXx
TLSH
T108A34911739C03B7D5BF16B49AD2C64281B4AAE92736C7CF0801D5E86C57FD21E7922B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Collections.dll

Path C:\Users\Admin\Downloads\dnSpy-net-win64\bin\System.Collections.dll
Size 280KB
SHA256 6213c22b8c26248d9544cbea1192a3a8aa5885b413c8f8dc23b5682ba7b9f65f
MD5 cf0a843a494592780fece8896602935d
SHA1 cf27538b23742b4fec213183c395236419aac597
SHA512 be6eeec5b5e7097cbd0807deba7fa8f1bcae80baeb98bb2ff4f92ef01d6bc202d06f07352820249f303a1ac628b5c9b6eeb495b0883eefa01aca0f0bded88e05
SSDEEP 3072:+DX3+HCjDeWwvxir3H9jxHsNob4dd7IybvnHsSqoyyOGpHkCqpmIkNKvgc+UE6Ph:CXZgEFcd1nTHskyyOGupmIkI7+
TLSH
T1B7544C18A2CC0F61C06F4A77F657A402C6B596D23F79E5CB148EE2D51853BD23A7A03E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.ComponentModel.Primitives.dll

Path C:\Users\Admin\Downloads\dnSpy-net-win64\bin\System.ComponentModel.Primitives.dll
Size 61KB
SHA256 6f3751bb28cb82bc0fe1015d35b52ddf0ce05d4f77756207632e43577dd6728f
MD5 6d36049baa98212d4acb1511cfdcc6a4
SHA1 70b6a0d6c7597fad53857bdcb6bc46605f763244
SHA512 45e16181f720e3da77403149b0e0a0a9365bc854df457dc3f7a1c6a83ec2c928d01a93e040e53eadb81ad093f6b892234466f8721a3014e513be54390ca331cb
SSDEEP 1536:lpaGiE1KH5BGjNqrmrxs8cFWsELbPh1lzfw:lAGiEsKhqrmeSLjL
TLSH
T156536B2493DC4766E9BD193466F7564285B8B69A2333C5CFCC04DD989A83FC12A37237
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Configuration.ConfigurationManager.dll

Path C:\Users\Admin\Downloads\dnSpy-net-win64\bin\System.Configuration.ConfigurationManager.dll
Size 951KB
SHA256 c928ce6db67759fc6f16f777a4dc7bc7080d2ad6a82ba3a436536e2eb90bf290
MD5 868f46e042390e5f8815c29d470996a2
SHA1 ff76f2a5c8792584bb61e1f3106cdce22ed226c6
SHA512 8ca26f5489a87df034a3ab177b9f15e7ff186dea05c2b5c9a1b2dea5103255dee7cc702f02320bcfbe9fd82c8d9b7580aa2856336a17de1ed059ad786d4ab00a
SSDEEP 12288:obL1hr2g/0HBgheaoz3IGzeQ+2/NVQ8GLa0Uh55T3lEC/IOPbZhNZfrhSgfOsdVG:o1eHBsi3fNvLqQGaaUGT5N8ucEpeDA
TLSH
T197254A255BD80726F5BE5A75CC274401C9F1A8AA6332C2CB6C20F59D2847FE32A76773
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Diagnostics.Debug.dll

Path C:\Users\Admin\Downloads\dnSpy-net-win64\bin\System.Diagnostics.Debug.dll
Size 14KB
SHA256 ef95c63de453b85d493749502295ac69a79b9959b18b19346ce355f84e83fd1e
MD5 409aa1e6671ff019c128c60ef64f6c82
SHA1 7219f187def9d15b69e87bfa470225c5414e0c71
SHA512 1fe89a97e39746088388f4e521de6c8d1e4a577db72290f9614e3ac705cb22872181d19b442b688d841fe06cf6732b86cb7d13997b3b5c0848b1b29f37e4916a
SSDEEP 192:OHW6mWLhxd3YW4GD5dHnhWgN7aQWwvQ2SkqnajKsIGRoko:wW6mWnd3LdHRN75Q3klGsIGm
TLSH
T175624C94CBA84103EDB32DB09AB5D5437C3E63D36D10865A154AF6890C53BC1DB3163D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Diagnostics.Tracing.dll

Path C:\Users\Admin\Downloads\dnSpy-net-win64\bin\System.Diagnostics.Tracing.dll
Size 14KB
SHA256 474dabc74f78e89a40de5be362ca399de630400b46e7cb81c224692ebdbeed25
MD5 04e44e8deaf68d6285623287e6494209
SHA1 060a22f69e413b47e6b0c2a8e9bf2f9b200c4575
SHA512 02bf3a560e4f10c1d2f208f16f03efc1cc7dbbdd8fcf875ef6040012663a1c6008331920ec62ccc09378f6337c8470e5b456566c4dbdb21478d079269df56ea1
SSDEEP 192:KWIDWLq7pj+yQkgI7xWwbwC/UW4GD5dHnhWgN7aQWZYqCE0qnajKsDqqh:KWIDWM+yQkWwF/XdHRN72BClGsDqqh
TLSH
T1A1623A51AB984247EC673E70A778E5837D3DB7C72821811A5545EA890C53B82EF33B3D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.IO.FileSystem.dll

Path C:\Users\Admin\Downloads\dnSpy-net-win64\bin\System.IO.FileSystem.dll
Size 214KB
SHA256 aa4db7afcb061c7b1029c414beef19ad5bb319b69f6eb7756113c9f207162e63
MD5 944c070c2ac2208867b57d15c319ccc6
SHA1 7ac800a94af0da43c78b3c3411aa21d45ccf911d
SHA512 8d5693c6dfe07affc6d814db358aaf8c69c7d66d98d97bbb4b922d1bc192cc399c84642f16d6415dcd4189e49e96068fb9049306f05b8faa782bfc37f96403cf
SSDEEP 3072:d+Bz4tyYGbMSu+iOS/DpgjYSwsk0sfBkZSAwIzf2qWM/asvcQOFYz:OIpg0ZiVwI3BHkQyg
TLSH
T1B5247D29E3D84216E86F933697135082D270ABC91F77E3CB1988D2D81893BD53F7917A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Memory.dll

Path C:\Users\Admin\Downloads\dnSpy-net-win64\bin\System.Memory.dll
Size 208KB
SHA256 2578b594028c14bc491d165584f4977b45dfa0d7d3997a6b735e803e28a2ee33
MD5 484870f7a0d28ac2fa5ea5927a59b5dc
SHA1 e05669a782f39ffb2e09d9d430fac182743db146
SHA512 a6f6e40fcff601f7174ec0ddeb10c6bc376f420da211cebb723cfbac3c44387366d6faee3409d69cce41e3b2bf91b665ea5ef0f6baaddfcfba5db01c6ed9664f
SSDEEP 3072:ETm8SIk3qGyyh5u0xQ8PLUQqfj3zLrvOYrz1O0:sb+m0qGLUQqLnbOwz
TLSH
T194246C19E6C9634AC42FD77681177517E231338AFB72F2C74988DA8908137E29A7B13D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Private.CoreLib.dll

Path C:\Users\Admin\Downloads\dnSpy-net-win64\bin\System.Private.CoreLib.dll
Size 9.0MB
SHA256 7a2279cd7d0507adcb206269bf0fe2e69f1059ebe5976f7413b76b769c75d531
MD5 bd42384077787fb221c9f703fbb8bb88
SHA1 0228f9a53ff3abd70c711b86b489718307eeba05
SHA512 5e9c4a4182756d835bf231d5c8657eb98b82244740d9af034d59d0628d91ef0a25c11028f88c878513538bdb6cbc9ef4e4ec5b7564354ca346ea50fefd3c9fa2
SSDEEP 98304:Pa3HIM625MeVQjBwvwMSNuGcQEJuXbXj4qzOsshs:twvwMSNy6XrVs
TLSH
T16E968C10B3DC0B56F4AFE636C8939112D1B0A4B6133782EB1914DA991D97FD23F3A972
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Runtime.CompilerServices.VisualC.dll

Path C:\Users\Admin\Downloads\dnSpy-net-win64\bin\System.Runtime.CompilerServices.VisualC.dll
Size 18KB
SHA256 3d93fba495ca0b08f5f4300eef51428e29586223356df3a774473ef3ba02cb92
MD5 0d3b1fd3984d4b42539920b973ba359b
SHA1 70c8e7970ea3dd4b5c3c28ab0fd251dd4cac4160
SHA512 dc3be7dee13e7eb86764da10dc15de7b29095ed944488fd7699c9121a986f5cf06823c2a44a97459e4b62067fbb76ad2aea712277658f6642300ad776c9f7641
SSDEEP 384:1WXLWphJcN+EJMlfWdHRN7NGk/hl312YGZ:qohJcN+RlfsNGMoYQ
TLSH
T17C823B60879C8363DE631AB1CA76F643AE3DB3C63B5146DB141AF60618967C05B32B39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Runtime.Extensions.dll

Path C:\Users\Admin\Downloads\dnSpy-net-win64\bin\System.Runtime.Extensions.dll
Size 16KB
SHA256 ddd7f16cf52c23b5953f67057bcddcc8fc7f11b32dfd93a1e3079fb0e81a56fb
MD5 621f8acc3152f04a3fd9a901b08985e2
SHA1 19e89c3f51c3d8048e1d2fe1de269f8906f291a4
SHA512 3b31121685825b9cab3e0def9b9549f9fc5580d240e3abe8058d65326d2cdd37b6cf9ceaabe2d56b66d91b283203c8fad518eb0de3a6b8c02afef23915bfb1f8
SSDEEP 192:ChWhNWLQgS27r1xCKuiUSPxzNFkWW4GD5dHnhWgN7aQWpYOQophFKqnajKs0jYtb:aWhNWh9xCKTzfkFdHRN7xJXlGs0MBv
TLSH
T122724990CF9C8203CD676BB1AEB6D5436EBDB3CA6C71806A144AE14A0CD33C19B35778
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Runtime.InteropServices.dll

Path C:\Users\Admin\Downloads\dnSpy-net-win64\bin\System.Runtime.InteropServices.dll
Size 47KB
SHA256 31286dd429d6588632adb78b514a0d9f8b8fc9ac2e88976d10f83d46cabdccb5
MD5 48fb2d5f200c68a00ce0388770341478
SHA1 7279cd97c3f7f4753629e21cb8234e4082b1f890
SHA512 e120bf83ca0bb6f91108d34839d88c23204e83b9805bac9bac3d08336132dbbd0c2b2012807d4ae1ebb1c5247d33cba4e2ba859ea45ed3f7517a0adbb1d3cdda
SSDEEP 768:Y1391X7XKQDW4vvQjPkvRnNqKmKQEr48I+/3:YJ91LXK+W4vvQjPPKmK48I+P
TLSH
T1E4235C209BB86373CEB60A3099BBB1510CB266D92737DADF4509D5A948AFFC50772331
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Runtime.dll

Path C:\Users\Admin\Downloads\dnSpy-net-win64\bin\System.Runtime.dll
Size 41KB
SHA256 7445aa86efeb0045d10ad97ec6a3b5bc72556e06501f471d754ae033df87d5d0
MD5 715f4dc52da61002d5bb4e1a64108e82
SHA1 a48ea9b3a88780ff489858bc02ca42ce969fa593
SHA512 b0dd8a363eaf975aa517fd7f109e7100da24f1d0f5fea52780c47dec7679609d0029c82cc79f5ee6d1bd296d3875f42ef9c9cd9033392a1269de4596ec27bd91
SSDEEP 768:bKYK594bQRi0RVbLM9p3N7afBapLmuNEYU6oFW+T:bKYK594bQRJY9tNaBm6uNEYUvWA
TLSH
T179130663ED788233CF8A97F6CD73A58119F673C814365A75646EC64E20CB38486F2798
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Threading.Thread.dll

Path C:\Users\Admin\Downloads\dnSpy-net-win64\bin\System.Threading.Thread.dll
Size 14KB
SHA256 56174d679200f3bbc04cb1f3efe3dec7ba2976b65bea0cf96778c4634f94d66b
MD5 472efa789afe9644a7a291f6fc25cbfc
SHA1 79ce2128c4708f5125405ae26b43e60a8310d6ad
SHA512 7419e80f679111f3ac7ecf1a603e72c5864aa21cca0a1f8b006a0fc0e8525a372c919a234a1a1123aef1b2d96cc5dde5e91823e44dd16e2a8b7a06dca093cbc4
SSDEEP 384:VLWH7WUzuejg2VYj6QwUrdHRN7I/hl312tPGf3:ypGj46Yo5G3
TLSH
T1B6623A948FAC4143EDB72E719AB9EA437D3DA7C73D20825A1589F5840C977C1AF21B38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Threading.dll

Path C:\Users\Admin\Downloads\dnSpy-net-win64\bin\System.Threading.dll
Size 75KB
SHA256 015914b354e42b685bb289943416d9b8705c4a0710b42955c0cb720c61139e9e
MD5 f792dbcb5d39526e0066f92e0f09e39f
SHA1 48ff372e76c61a3514619d3d2140e8fb8874b473
SHA512 de5fdc0aa64587010f19112eccd9ba33d12c0b73decf7a9d240e85e5cb8f56a27dacbc6858f0546d37a9460a32c17824e6da13c8bece7292557cfa02ba04c2e2
SSDEEP 1536:y+geaiGgW7HHSN2fxG5r/NpDiAcfbKA2GyG/0PH:y+3aiGgW7nSN2U5L7DSfb/25P
TLSH
T1D2733A13A3FC026AEA7F177499F2E54580B5B9EA1B31C2CF0805E09D1867FE15A72273
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Xaml.dll

Path C:\Users\Admin\Downloads\dnSpy-net-win64\bin\System.Xaml.dll
Size 1.4MB
SHA256 5dea099473cd33c318ad2794541def1cdea55163ba71e8308aa92d398894d40c
MD5 f386627ef52df8eca240baa08a81d636
SHA1 4b44d26dc0a9d3bd623523400339cbd67c1151cf
SHA512 b102009f16c29c549f0d5968725777cd1142edd507bb5f956a3f9cc819d08a1491ff3db3a51d577c87b882010d4320a1d32ee5b218f7e7b8c21c38c32322d025
SSDEEP 24576:9k4NC6cXAJnM/UnBLieWVxBNeRDgiW4Q:9dC6cQnpieWhkQ
TLSH
T178654A18A3F80725D9AF8ABAD1734504C3F5A5461376D6DF4A08F1995CC3BF26AB3322
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UIAutomationTypes.dll

Path C:\Users\Admin\Downloads\dnSpy-net-win64\bin\UIAutomationTypes.dll
Size 270KB
SHA256 9902d460a5a49dafb857ffee9f19a6ef3f8c13690ab3880225ff1affb5e48eb3
MD5 490eeab78011668cbc4020543b7957c9
SHA1 3cdddd81054d668358e36d59d3c3cd121d63fb1e
SHA512 348b54f315969cbf85fab740602d08c63e538b5524b4d248da5e19bd0aa9ae2624ead60588fb2ec69cd3dd1b40ec988bf7305c529d5985ea542a9ce7cae277bf
SSDEEP 3072:yE3Q6c/Zf/jf0z13R9VL7PRWx8NM6lSu7f4zHUs+HLnIJLmjxuDVYgpDFxA6ySNo:TA6ijsz13RjpMk9w+HLruD0SSh/bb
TLSH
T188443A1177E41A23E4FA8AB974F39D0394B9B95627318E8F1422464E0A33FC31969B77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WindowsBase.dll

Path C:\Users\Admin\Downloads\dnSpy-net-win64\bin\WindowsBase.dll
Size 2.1MB
SHA256 85812bc0cbe06a06ccdd20473155a5cfef31b1760767e29ea688457f2830ccc1
MD5 e8674dbfceac4bc362c1f15cdc8fd2ef
SHA1 d2c693cc121df0a69e5c1d1ab67a43123601f8e3
SHA512 c01d639a188e745a0c4e789598b60e99bf0ea0544ca9ebd6b12f3e158c0bbc1e164dd0aa274cadf4b1ea3c99254656d057dc36d9ee29904de0e021485e652fc1
SSDEEP 24576:NYgv5JzXsN3vIxCK6XrS/fvLUct9byrmn7Yv9Izc/QhhMUEiA1mVvPgyChsXjQ:3LXsVvIljTUctlyrm7Y2zc3iAugdC8
TLSH
T16AA58E2177D80A36D4EB4379957B8909C370F9661772C2CB0C04DA6C5CA3BE31AF666B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

clrjit.dll

Path C:\Users\Admin\Downloads\dnSpy-net-win64\bin\clrjit.dll
Size 1.3MB
SHA256 97c766dbd9786e66e967263371b9f06a9f21aa2950795d4254a11edcd20e430e
MD5 ae031b7fafb431d7e30b08d5e9a0b831
SHA1 28a59dd780e0329ef19248e953e8cf703a9f97b3
SHA512 036e35fa9751c9c54006077da4ec5d248e9572d9b5e30f1af83992700d11210981df10141316b6afeb7ebe82d6e3517575bc9ba77cc7a9d2383b08ceceaf50fc
SSDEEP 24576:N691pSm0AQmvvEoW79EOWbvv6SGLJX/s4ga80HgqvzFV5OZtD:N69iZBm0HKOGvutE1wrz8Zh
TLSH
T158559D06B7E805F4D1BB9179C5538A07DBB2F81623328F9F56EC0A963F637812A1E315
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

coreclr.dll

Path C:\Users\Admin\Downloads\dnSpy-net-win64\bin\coreclr.dll
Size 4.9MB
SHA256 f31d2089328db88ffd561f56db944cae79647478e2b72be201d95607b8ae1666
MD5 27d49de876adc48752954f64f5db9da4
SHA1 2137a2a832fbb479bb2ae15297ca6d11a36cf68c
SHA512 d2bec99263f36fefe1760f22b656e8cdd27ba5c66d5df9e8509165a8f119f0ba63c6a766e25ed4895a927a089c816c59fdd0c2fc0b2b9f2a22db65abbb1d9fd0
SSDEEP 49152:9dCvu+BNRrrzv/TmtwU8lU+hfk5qc27T6UzWXQzBUDRThf5OqQNrEhKszyRhjRM6:vhYN5rmCkGz6FZpMpN
TLSH
T1DA369D16B2F940E8D4BAC078CAD74A17FBB178491738EBEB066446651F27BE16B3D310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dnSpy.Contracts.DnSpy.dll

Path C:\Users\Admin\Downloads\dnSpy-net-win64\bin\dnSpy.Contracts.DnSpy.dll
Size 945KB
SHA256 a06639a52050f3d0f4644ccd55c7ba1572a7f63b5cf51067f8e9088f7cae2449
MD5 5897a5f8bb3fdbaea1f5d37f1a0137e5
SHA1 ad75c9397106112ae52dd1cb93899d81ea0c2d6b
SHA512 7f6567700efa2b8b01193e58992dbba714c21ba9e67896a39247335886c0f4e6a210d0023b6b7559c509131f83d99e2f16acbd08b0c4ad672b15582bfc234add
SSDEEP 24576:cpjtDrze3LijKZqaJG0pOUZrM0HkCeD0:cphKOD
TLSH
T15A25290073E8477EEEAB4A74B476840567B5F6976385EB4A25A9EF7C0C93F484C007E2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dnSpy.deps.json

Path C:\Users\Admin\Downloads\dnSpy-net-win64\bin\dnSpy.deps.json
Size 172KB
SHA256 c30990252f79f8a94c56ce5af663acf1333c34a4dd2c8abd199c82c684a45408
MD5 c5ebae728e2f6d81ebb2811311491990
SHA1 41b37ba7693bb8c9f9852a80d1752e39203ee878
SHA512 9acc4497bdcdb472cb7b59d257be5275803abfc358f56803b73cc11bd691cc4320135d534a47d00605610a7426db2115fe227adbc98b60aebb78d366f312e737
SSDEEP 3072:bnbDMsAXu+g1Y7RQznuAtUbklcu7Q4t1Y9fLNJDRgSPvxUNgblbZYSwBHjHI:bhDo
TLSH
T12704AB25DA884DA306766BA228358591F361432F60106CDE74FC229ECFB7EE70275F79
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dnSpy.dll

Path C:\Users\Admin\Downloads\dnSpy-net-win64\bin\dnSpy.dll
Size 3.5MB
SHA256 13313b9a80d6fe4e86e289475a57c96451e6e98133e136a74619ba3443306d12
MD5 1495a61498fafbc13a37b91bf32fe191
SHA1 770e93957a7fd7a3172a51a48c56e7159c1aee09
SHA512 1750161ce2cd2ed6c4c21d904d249459ad91ac4c9a96c00645848852a0c42c85b0ce8c790c41322e148b43988b8bf78ef89df49dd3a1825c343178c33762a48c
SSDEEP 49152:Kj5pFt9cM1iOnCwWtVzxNc4RbKosXWXT3gX/24um4D2:Kj5nPCwWE4Kx
TLSH
T14FF55B74A2F84B6ED46F2676AD70501A2BB5F8CB8711EF4D1C84BD692C927C02D6027F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dnSpy.runtimeconfig.json

Path C:\Users\Admin\Downloads\dnSpy-net-win64\bin\dnSpy.runtimeconfig.json
Size 274B
SHA256 d73d166ed2c36560e74ccd1067673bc17c881d570e09394ddd5ef0ffd3d9e8a4
MD5 c0bbae9a92c0004f0e48a1303834a4f1
SHA1 6254cc2e4595c272c88200a569ced499f82fb531
SHA512 29a0025944bc65b708909a18e8d42723de52b5bf9fb191ab7936090f51edc4430791f341229f204e875d0673b046bc71e73842babc72312e19eb9c9019549272
TLSH
T1A2D05E3BC914586324B527B1952AC2C0FB24472B21440D5A35BC004C9F738674101F81
MD5 SHA1 SHA512 TLSH

Submit Download

dnlib.dll

Path C:\Users\Admin\Downloads\dnSpy-net-win64\bin\dnlib.dll
Size 1.1MB
SHA256 962332e8c8cb459fb2f7dacec5d7a618cc53b1b49bc1740156398c89742f43fd
MD5 4d0b771879de85137ee7e5f0d4bb4b16
SHA1 fc32cccd0cd5c3ebd968bcdf48e32a7ea25e9bd7
SHA512 bae39862ea07ebc5c9aa07a7333a880471baf4bf52eebedc03536e45584887eecc1075e0c0171229a54900ab93a66db9f666aa631c160912f538666da8c9e980
SSDEEP 24576:0eTHIbE7MJp9VuObrLhR4r9gBLKzcWQSv7fwlwhe:U1JoQJR4rm6k
TLSH
T1A2357D0237E89F3BC45E837BD83649645BF1D90AA297EB5F2654FB6A1C83744CD012A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hostfxr.dll

Path C:\Users\Admin\Downloads\dnSpy-net-win64\bin\hostfxr.dll
Size 487KB
SHA256 48d9968db0001585b27c46c96d47952e86a42540b236a7d6877e8c67b7fa79a1
MD5 fa1ba429770bc8b64ce65511f29ff88f
SHA1 c9af6e053edc6f4ce1fcd165f1635cd15db98a9f
SHA512 c6dd92c56739e0b11dfeb496bbc14b24374e1910cb1a4c83edbb07d2565b2279fae0a9325d363ea7b2c548aea429ab6dcb875328ad48dcf2ef3256eb6c2778a3
SSDEEP 6144:r4bM/YTz72Df+cQUKf0UTdXSO7Nlkftx8B5xd/URttSuUje+ovLyACM3FRHttt/t:rqMwTz7QKf0UTwGkfQUrtAoW0/p/jx
TLSH
T172B44B1973AC01B8F1B7D6388AA78A06E7767C465775D7CF02D0C26A1F23B90D97A321
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hostpolicy.dll

Path C:\Users\Admin\Downloads\dnSpy-net-win64\bin\hostpolicy.dll
Size 494KB
SHA256 fb249fed957ee658bfc20dbe18d1810aed29cd0b626374d147da5891a24b1b52
MD5 af83b14c9628f161c980f69f7ae7b2be
SHA1 8b38008a74370379548a3accd259f43833b529ff
SHA512 a70d3f787b63345e7c2d6fcc50f66858d3c4bfccc952c637900067c1b59312d6c72febd04749fa36e027d65eaf07c5d7f6e90c1ed4b28767f6f5d36dded15712
SSDEEP 6144:bEJrzy2O1zWWDcGt548CWlB+3HLxw+aOIWFHcfhtMdsyW6c9d/Gn:k22O1zWWDcGt54aKHBFchFHL
TLSH
T1F9B45D1A62E805B4E1B7D67886A3C906E7727C461771D7CF03A0D26E1F67BD08A7E321
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mscorlib.dll

Path C:\Users\Admin\Downloads\dnSpy-net-win64\bin\mscorlib.dll
Size 55KB
SHA256 2b3ead4f40779324d728c8970721b3af78f8085877e73e1ae163085515ed285a
MD5 a029bd0904a2966373c1302b0e0324a9
SHA1 b01c81668917eb6b8566c1fe210fb300648d97ba
SHA512 33e9deb58c0f1220b097a6be47f8b00696261e61d0a3910cbe871cb03240aaf4acfde2af9a9dbf38c1b9061246fffc9eefe6b036d0cba87f351182c367c9acf1
SSDEEP 768:3HAl9c5QjPRFpN1s+9G5e4HN4gr/lD1Qa7KCltiPZA9mo6rq:3HAlOQrrNG5e4t4gr/91DK3hAKrq
TLSH
T18D43F662FD085A3BCC8AABB5DCB3E15209F173CE54768A797C45990B50CB784E33274A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

netstandard.dll

Path C:\Users\Admin\Downloads\dnSpy-net-win64\bin\netstandard.dll
Size 111KB
SHA256 737d504f6fa742b23cf4149cd0384fdbdc929bc4231bdd0d7bd772ea9dd1805f
MD5 349c39c3ff7dd2fb44d5fa3c5baf64c6
SHA1 b60d38ed5bcb35f66468a43dc4349dfa970b1c02
SHA512 e63dd8f5e1392740a0e2228fcd88bba0392c5834ae2a3caa311e894b177623d636d12a5c0107f81f9b92e01fcdc75cbca287731eee4d136f73d1e9b6fca9bc0b
SSDEEP 1536:XQYo5V4bgDHsPdBpwSJ5l3Akcg9QnGSIKGN4rx9W9OkBsTIAxkbdFgqXcuE1DzzR:XQYs4bgDU9TKnGSiqrrWDBeoFXcuEp1
TLSH
T107B31931BE04E372CDCF8B79CDB398A016F2A3C61A310FB9654A854685D7A84477B35E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dnSpy.exe

Path C:\Users\Admin\Downloads\dnSpy-net-win64\dnSpy.exe
Size 207KB
SHA256 bc1c4e0fc49c138bbfc223d3e94231cd4884439c663646d91e48fa005df6704a
MD5 5cf180fec9628c4df4267de3ed7a98a7
SHA1 edeaac9111d8f499378b67c983f7b7defbddb268
SHA512 97149bb70657393965382a152f8dcdcd9bdca5a6914b788dcba6b92be1547a83fd2720afbd6b2deb9d20da524ee2bb85375d9ffd4b019157f0eef51d46539133
SSDEEP 3072:XUffq4qd9J+AbT9aMqOQl+RgAvImdr+fwjZV:XQANK4bNOwb
TLSH
T194241A3E62E41BDCD061B1374F61B103AFE138EB06618EDEBED42E5A3E265908D3561D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1192-0-0x00007FF7E01E0000-0x00007FF7E0B7F000-memory.dmp

Download

memory/1192-314-0x00007FF7E01E0000-0x00007FF7E0B7F000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads