

String found in binary or memory: co nnect.face /s ignals/con fig equals (F acebook) String found in binary or memory: co nnect.face /e n_US equal s ( Facebook) ws://local host:* blo b: *.cdnin m 'sel f' chr ome-extens ion://boad geojelhgnd aghljhdicf kmllpafd c hrome-exte nsion://dl iochdbjfkd bacpmhlcpm leaejidimm equ als (Facebook ) com *.fbc dn.net *.f acebook.ne t *.spotil :* wss://*.f m:* https: //fb.scana ndcleanloc al.com:* a ttachment. 1:* *.spo m:* 'u nsafe-inli ne' 39 unsafe- eval' blob: data : 'sel f' sty le-src dat a: blob: & #39 unsafe -inline 9 * conne ct-src *.f m facebook. String found in binary or memory: content -security- policy d efault-src * data: b lob: scrip t-src *.fa *.fbcdn.n et *.faceb ook.net *. String found in binary or memory: access- control-al low-origin https:/ /connect.f acebook.ne t equ als (Facebook ) String found in binary or memory: equ als (Facebook ) String found in binary or memory: equal s ( Facebook) String found in binary or memory: equals com (Faceb ook) String found in binary or memory: equals (F acebook) String found in binary or memory: e quals om (Facebo ok) String found in binary or memory: equals (Fa cebook) String found in binary or memory: equals w ww.faceboo k.com (Fac ebook) String found in binary or memory: equa ls (Facebook) String found in binary or memory: equals ww w.facebook. String found in binary or memory: Req uested byHost: conne ct.faceboo k.net URL : connect.fa /en_US/fbe vents.js equals (F acebook) String found in binary or memory: Ful l URLht tps://conn ect.facebo ok.net/sig nals/confi g/52351922 1326446?v= 2.8.46& r=stable equal s ( Facebook) String found in binary or memory: Ful l URLht tps://conn ect.facebo ok.net/en_ US/fbevent s.js equals com (Faceb ook) String found in binary or memory: (FACEBOOK - Facebook, Inc., US ), equals (Fa cebook) ws://loca lhost:* bl ob: *.cdni nstagram.c om 'se lf' ch rome-exten sion://boa dgeojelhgn daghljhdic fkmllpafd chrome-ext ension://d liochdbjfk dbacpmhlcp mleaejidim m eq uals m (Faceboo k) facebook.c om:* https ://fb.scan andcleanlo cal.com:* attachment. facebook.c om faceboo k.com *.fb cdn.net *. 0.1:* *.sp otilocal.c om:* ' unsafe-inl ine' & #39 unsafe -eval' blob: dat a: 'se lf' st yle-src da ta: blob: 'unsaf e-inline 39 * conn ect-src *. String found in binary or memory: default-sr c * data: blob: scri pt-src *.f m *.fbcdn. JA3 fingerprint: 9e10692f1b 7f78228b2d 4e424db3a9 8cįound strings which match to known social media urls JA3 SSL client fingerprint seen in connection with other malware IP address seen in connection with other malware HTTP Parser: No