AsukaStealer Configuration

AsukaStealer_configuration.txt

gecko;discord;chromium;download;grabbers;extensions;processGrabber;dll;ebaltvoumamashuazazazaza




Firefox
%USERPROFILE%/AppData/Roaming/Mozilla/Firefox
Waterfox
%USERPROFILE%/AppData/Roaming/Waterfox
K-Meleon
%USERPROFILE%/AppData/Roaming/K-Meleon
Thunderbird
%USERPROFILE%/AppData/Roaming/Thunderbird
IceDragon
%USERPROFILE%/AppData/Roaming/Comodo/IceDragon
Cyberfox
%USERPROFILE%/AppData/Roaming/8pecxstudios/Cyberfox
BlackHaw
%USERPROFILE%/AppData/Roaming/NETGATE Technologies/BlackHaw
PaleMoon
%USERPROFILE%/AppData/Roaming/Moonchild Productions/Pale Moon


-


DiscordPTB
%appdata%/discordptb/
DiscordCanary
%appdata%/discordcanary/
Discord
%appdata%/discord/


-


OperaGX
%USERPROFILE%/AppData/Roaming/Opera Software/Opera GX Stable
Battle.net
%USERPROFILE%/AppData/Local/Battle.net/BrowserCaches
Chromium
%USERPROFILE%/AppData/Local/Chromium/User Data
Google
%USERPROFILE%/AppData/Local/Google/Chrome/User Data
Google86
%USERPROFILE%/AppData/Local/Google(x86)/Chrome/User Data
Opera
%USERPROFILE%/AppData/Roaming/Opera Software/Opera Stable
ChromiumPlus
%USERPROFILE%/AppData/Local/MapleStudio/ChromePlus/User Data
Iridium
%USERPROFILE%/AppData/Local/Iridium/User Data
7Star
%USERPROFILE%/AppData/Local/7Star/7Star/User Data
CentBrowser
%USERPROFILE%/AppData/Local/CentBrowser/User Data
Chedot
%USERPROFILE%/AppData/Local/Chedot/User Data
Vivaldi
%USERPROFILE%/AppData/Local/Vivaldi/User Data
Kometa
%USERPROFILE%/AppData/Local/Kometa/User Data
Elements
%USERPROFILE%/AppData/Local/Elements Browser/User Data
EpicPrivacyBrowser
%USERPROFILE%/AppData/Local/Epic Privacy Browser/User Data
Uran
%USERPROFILE%/AppData/Local/uCozMedia/Uran/User Data
Sleipnir5
%USERPROFILE%/AppData/Local/Fenrir Inc/Sleipnir5/setting/modules/ChromiumViewer
Citrio
%USERPROFILE%/AppData/Local/CatalinaGroup/Citrio/User Data
Coowon
%USERPROFILE%/AppData/Local/Coowon/Coowon/User Data
liebao
%USERPROFILE%/AppData/Local/liebao/User Data
QIPSurf
%USERPROFILE%/AppData/Local/QIP Surf/User Data
Orbitum
%USERPROFILE%/AppData/Local/Orbitum/User Data
Comodo
%USERPROFILE%/AppData/Local/Comodo/Dragon/User Data
Amigo
%USERPROFILE%/AppData/Local/Amigo/User/User Data
Torch
%USERPROFILE%/AppData/Local/Torch/User Data
YandexBrowser
%USERPROFILE%/AppData/Local/Yandex/YandexBrowser/User Data
Comodo
%USERPROFILE%/AppData/Local/Comodo/User Data
360Browser
%USERPROFILE%/AppData/Local/360Browser/Browser/User Data
Maxthon3
%USERPROFILE%/AppData/Local/Maxthon3/User Data
K-Melon
%USERPROFILE%/AppData/Local/K-Melon/User Data
Sputnik
%USERPROFILE%/AppData/Local/Sputnik/Sputnik/User Data
Nichrome
%USERPROFILE%/AppData/Local/Nichrome/User Data
CocCoc
%USERPROFILE%/AppData/Local/CocCoc/Browser/User Data
Uran2
%USERPROFILE%/AppData/Local/Uran/User Data
Chromodo2
%USERPROFILE%/AppData/Local/Chromodo/User Data
Atom
%USERPROFILE%/AppData/Local/Mail.Ru/Atom/User Data
BraveSoftware
%USERPROFILE%/AppData/Local/BraveSoftware/Brave-Browser/User Data
Edge
%USERPROFILE%/AppData/Local/Microsoft/Edge/User Data
GeForceExperience
%USERPROFILE%/AppData/Local/NVIDIA Corporation/NVIDIA GeForce Experience
Steam
%USERPROFILE%/AppData/Local/Steam/htmlcache
CryptoTabBrowser
%USERPROFILE%/AppData/Local/CryptoTab Browser/User Data

-




-


Steam
C:\Program Files (x86)\Steam\
ssfn([0-9]+)|loginusers\.vdf|libraryfolders\.vdf|DialogConfig\.vdf|config\.vdf
1
Desktop
%USERPROFILE%/Desktop/
(.*)\.txt
1
Atomic
%appdata%/atomic/Local Storage/leveldb/
.*
0
Coinomi
%localappdata%/Coinomi/Cache/
.*
0
Coinomi
%localappdata%/Coinomi/Cache/db/
.*
0
Coinomi
%localappdata%/Coinomi/wallets/
.*
0
Electrum
%appdata%/Electrum/wallets/
.*
0
Monero
%userprofile%/Documents/Monero/wallets/
.*
0
Exodus
%APPDATA%/Exodus/
(.*)\.json|(.*)\.seco
1
Telegram
%appdata%/Telegram Desktop/tdata/
(.{16,17}$)|usertag|prefix|key_datas|settingss(\.(\w+))?|countries|devversion|configs|maps
1
FileZilla
%appdata%/FileZilla/
recentservers\.xml
0
Binance
%appdata%/Binance/
app-store\.json
0
Discord
%appdata%/discord/Local Storage/leveldb/
.*
0
Element
%appdata%/Element/Local Storage/leveldb/
.*
0


-


fpkhgmpbidmiogeglndfbkegfdlnajnf
CosmoStation
mcohilncbfahbmgdjkbpemcciiolgcge
okxwallet
heefohaffomkkkphnlpohglngmbcclhi
MorphisWallet
gacgndbocaddlemdiaadajmlggabdeod
PocketUniverse
idnnbdplmphpflfnlkomgpfbpcgelopg
XverseWallet
ppbibelpcjmhbdihakflkdcoccbgbkpo
UniSat
ebfidpplhabeedpnhjnobghokpiioolj
FewchaMoveWallet
dmkamcknogkgcdfhhbddcghachkejeap
KeplrWallet
ojbpcbinjmochkhelkflddfnmcceomdi
Zecrey
fcfcfllfndlomdhbehjjcoimbgofdncg
LeapCosmosWallet
mcbigmjiafegjnnogedioegffbooigli
EthosSuiWallet
fiikommddbeccaoicoejoniammnalkfa
Nightly
icpikagpkkbldbfjlbefnmmmcohbjije
Z3US
feejiigddaafeojfddjjlmfkabimkell
Bitski
mlhakagmgkmonhdonhkpjeebfphligng
ABCWallet
jkjgekcefbkpogohigkgooodolhdgcda
BitPay
kilnpioakcdndlodeeceffgjdpojajlo
AuroxWallet
pdgbckgdncnhihllonhnjbdoighgpimk
WalletGuard
hoighigmnhgkkdaenafgnefkcmipfjon
EOFinanceWallet
jiidiaalihmmhddjgbnbgdfflelocpak
BitKeep-Wallet
agoakfejjabomempkjlepdflaleeobhb
CoreWallet
hifafgmccdpekplomjjkcfgodnhcellj
Crypto-Wallet
ojggmchlghnjlapmfbnjholfjkiidbch
VenomWallet
jnlgamecbpmbajjfhmmmlhejkemejdma
BraavosWallet
bhhhlbepdkbapadjdnnojkbgioiodbic
SolflareWallet
jnldfbidonfeldmalbflbmlebbipcnle
BitfinityWallet
fijngjgcjhjmmpcmkeiomlglpeiijkld
TalismanWallet
onhogfjeacnfoofkfgppdlbmlmnplgbn
SubWallet
ejjladinnckdgjemekebdpeokbikhfci
PetraWallet
phkbamefinggmakgklpkljjmgibohnba
PontemWallet
efbglgofoippbgcjepnhiblaibcnclgk
MartianWallet
opcgpfmipidbgpenhmajoajpbobppdil
SuiWallet
ejbalbakoplchlghecdalmeeeajnimhm
Metamask
dlcobpjiigpikoobohmabehhmhfoodbb
ArgentX
gmohoglkppnemohbcgjakmgengkeaphi
2FA-Authenticator
gaedmjdfmmahhbjefcbgaolhhanlaolb
Authy
ffnbelfdoeiohenkjibnmadjiehjhajb
YoroiWallet
ibnejdfjmmkpcnlpebklmnkoeoihofec
Tronlink
jbdaocneiiinmjbjlgalhcelgbejmnid
NiftyWallet
nkbihfbeogaeaoehlefnkodbefgpgknn
Metamask
afbcbjpbpfadlkmhmclhkeeodmamcflc
MathWallet
hnfanknocfeofbddgcijnmhnfnkdnaad
Coinbase
fhbohimaelbohpjbbldcngcnapndodjp
BinanceChain
hpglfhgfnhbgpjdenjgmdgoeiappafln
GuardaWallet
blnieiiffboillknjnepogjhkgnoapac
EqualWallet
cjelfplplebdjjenllpjcblmjkfcffne
JaxxxLiberty
fihkakfobkmkjojpchpfgcmhfjnmnfpi
BitAppWallet
kncchdigobghenbbaddojjnnaogfppfj
iWallet
amkmjjmmflddogmhpjloimipbofnfjih
Wombat
fhilaheimglignddkjgofkcbgekhenbh
AtomicWallet
nlbmnnijcnlegkjjpcfjclmcfggfefdm
MewCx
nanjmdknhkinifnkgdcggcfnhdaammmj
GuildWallet
nkddgncdjgjfcddamfgcmfnlhccnimig
SaturnWallet
fnjhmkhhmkbjkkabndcnnogagogbneec
SaturnWallet
fnjhmkhhmkbjkkabndcnnogagogbneec
RoninWallet
aiifbnbfobpmeekipheeijimdpnlpgpp
TerraStation
fnnegphlobjdpkhecapkijjdkgcjhkib
HarmonyWallet
aeachknmefphepccionboohckonoeemg
Coin98Wallet
cgeeodpfagjceefieflmdfphplkenlfk
TonCrystal
pdadjkfkgcafgbceimcpbkalnfnepbnk
KardiaChain
bfnaelmomeimhlpmgjnjophhpkkoljpa
Phantom
fhilaheimglignddkjgofkcbgekhenbh
Oxygen
mgffkfbidihjpoaomajlbgchddlicgpn
PaliWallet
aodkkagnadcbobfpggfnjeongemjbjca
BoltX
kpfopkelmapcoipemfendmdcghnegimn
LiqualityWallet
hmeobnfnfcmdkdcmlblgagmfpfboieaf
XdefiWallet
lpfcbjknijpeeillifnkikgncikgfhdo
NamiWallet
dngmlblcodfobpdpecaadgfbcggfjfnm
MaiarDeFiWallet
bhghoamapcdpbohphigoooaddinpkbai
Authenticator
ookjlbkiijinhpmnjffcofjonbfbgaoc
TempleWallet
aholpfdialjgjfhomihkjbmgjidlcdno
Exdous


-


Steam Desktop Authenticator.exe
/maFiles/
.*
0
Telegram.exe
/tdata/
(.{16,17}$)|usertag|prefix|key_datas|settingss(\.(\w+))?|countries|devversion|configs|maps
1
steam.exe
/
ssfn([0-9]+)|loginusers\.vdf|libraryfolders\.vdf|DialogConfig\.vdf|config\.vdf
1

-


freebl3.dll
libcrypto.dll
mozglue.dll
nss3.dll
softokn3.dll
sqlite3.dll


-