hxxps://spoo[.]me/yOVzwj

Analysis

user interaction
yes
max time kernel
22s
max time network
24s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
25/04/2026, 03:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://spoo.me/yOVzwj
Sample260425-d8av9aev5x

Score

6^/10

discovery persistence

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 7 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
35	discord.com
2	discord.com
5	discord.com
10	discord.com
32	discord.com
33	discord.com
34	discord.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Checks processor information in registry 2 TTPs 20 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	5084	firefox.exe
Token: SeDebugPrivilege	5084	firefox.exe

Suspicious use of FindShellTrayWindow 6 IoCs

pid	Process
5084	firefox.exe
5084	firefox.exe
5084	firefox.exe
5084	firefox.exe
5084	firefox.exe
5084	firefox.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5084	firefox.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 4608 wrote to memory of 5084	4608	firefox.exe	79
PID 4608 wrote to memory of 5084	4608	firefox.exe	79
PID 5084 wrote to memory of 4936	5084	firefox.exe	80
PID 5084 wrote to memory of 4936	5084	firefox.exe	80
PID 5084 wrote to memory of 4936	5084	firefox.exe	80
PID 5084 wrote to memory of 3748	5084	firefox.exe	81
PID 5084 wrote to memory of 3748	5084	firefox.exe	81
PID 5084 wrote to memory of 3748	5084	firefox.exe	81
PID 5084 wrote to memory of 3748	5084	firefox.exe	81
PID 5084 wrote to memory of 4808	5084	firefox.exe	82
PID 5084 wrote to memory of 4808	5084	firefox.exe	82
PID 5084 wrote to memory of 4808	5084	firefox.exe	82
PID 5084 wrote to memory of 4808	5084	firefox.exe	82
PID 5084 wrote to memory of 4224	5084	firefox.exe	83
PID 5084 wrote to memory of 4224	5084	firefox.exe	83
PID 5084 wrote to memory of 4224	5084	firefox.exe	83
PID 5084 wrote to memory of 2016	5084	firefox.exe	84
PID 5084 wrote to memory of 2016	5084	firefox.exe	84
PID 5084 wrote to memory of 2016	5084	firefox.exe	84
PID 5084 wrote to memory of 2016	5084	firefox.exe	84
PID 5084 wrote to memory of 1292	5084	firefox.exe	85
PID 5084 wrote to memory of 1292	5084	firefox.exe	85
PID 5084 wrote to memory of 1292	5084	firefox.exe	85
PID 5084 wrote to memory of 1292	5084	firefox.exe	85
PID 5084 wrote to memory of 1484	5084	firefox.exe	86
PID 5084 wrote to memory of 1484	5084	firefox.exe	86
PID 5084 wrote to memory of 1484	5084	firefox.exe	86
PID 5084 wrote to memory of 1484	5084	firefox.exe	86
PID 5084 wrote to memory of 3888	5084	firefox.exe	87
PID 5084 wrote to memory of 3888	5084	firefox.exe	87
PID 5084 wrote to memory of 3888	5084	firefox.exe	87
PID 5084 wrote to memory of 3888	5084	firefox.exe	87
PID 5084 wrote to memory of 1652	5084	firefox.exe	88
PID 5084 wrote to memory of 1652	5084	firefox.exe	88
PID 5084 wrote to memory of 1652	5084	firefox.exe	88
PID 5084 wrote to memory of 1652	5084	firefox.exe	88
PID 5084 wrote to memory of 2980	5084	firefox.exe	89
PID 5084 wrote to memory of 2980	5084	firefox.exe	89
PID 5084 wrote to memory of 2980	5084	firefox.exe	89
PID 5084 wrote to memory of 2980	5084	firefox.exe	89

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "https://spoo.me/yOVzwj"
1⤵
- Suspicious use of WriteProcessMemory
PID:4608
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url https://spoo.me/yOVzwj
  2⤵
  - Checks processor information in registry
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:5084
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1968 -prefsLen 27097 -prefMapHandle 1972 -prefMapSize 270279 -ipcHandle 2044 -initialChannelId {34b30820-e771-42db-b623-b37a9f2718a2} -parentPid 5084 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5084" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:4936
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2412 -prefsLen 27133 -prefMapHandle 2416 -prefMapSize 270279 -ipcHandle 2436 -initialChannelId {85235bcf-a81a-4919-88ce-5cb1412ead19} -parentPid 5084 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5084" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:3748
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3800 -prefsLen 25213 -prefMapHandle 3804 -prefMapSize 270279 -jsInitHandle 3808 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3816 -initialChannelId {810e9338-e870-4be2-b120-60a12125a9e3} -parentPid 5084 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5084" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:4808
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3968 -prefsLen 27323 -prefMapHandle 3972 -prefMapSize 270279 -ipcHandle 4060 -initialChannelId {f528f4d9-c842-44e7-9e24-0312003619ac} -parentPid 5084 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5084" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:4224
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2692 -prefsLen 34822 -prefMapHandle 2936 -prefMapSize 270279 -jsInitHandle 3248 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3040 -initialChannelId {b64ea666-2aaf-4e9a-a1f4-cd14bebdd7ae} -parentPid 5084 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5084" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:2016
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5072 -prefsLen 35010 -prefMapHandle 5080 -prefMapSize 270279 -ipcHandle 5088 -initialChannelId {9c210397-6564-4013-84ca-116aca5af0d3} -parentPid 5084 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5084" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:1292
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5436 -prefsLen 32952 -prefMapHandle 3124 -prefMapSize 270279 -jsInitHandle 5468 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5476 -initialChannelId {c0515cec-03a8-4d61-b625-3203bc6f7745} -parentPid 5084 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5084" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:1484
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5716 -prefsLen 32952 -prefMapHandle 5720 -prefMapSize 270279 -jsInitHandle 5724 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5732 -initialChannelId {a666b913-67b8-4444-ac7b-c2d2260a8806} -parentPid 5084 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5084" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:3888
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5904 -prefsLen 32952 -prefMapHandle 5908 -prefMapSize 270279 -jsInitHandle 5912 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2956 -initialChannelId {c66b8eb5-5b58-4804-8209-87db0d36d27a} -parentPid 5084 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5084" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:1652
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3428 -prefsLen 32952 -prefMapHandle 3816 -prefMapSize 270279 -jsInitHandle 3912 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3900 -initialChannelId {c446d6fe-0366-4dbb-94bd-73c4f5e5c0af} -parentPid 5084 -crashReporter "\\.\pipe\gecko-crash-server-pipe.5084" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:2980

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\85vpkkl6.default-release\datareporting\glean\db\data.safe.tmp
Size 5KB
SHA256 7438ab17bc6a538fca650e3844325a0ab5c7938d908d981bdd94110ed01904ea
MD5 17726f7c339e790149f540ea03859581
SHA1 3b5b3a8fcf02053d3dd6bd4e1f966c35dfcbfa85
SHA512 5e0edc7c7dd0747df25db46ae9c9a3e03e4f099031724b838465dcb5d1492bac82f59e4d18bafc48e4c5e620583301f62568c05a58d9368c03c2b33205b7386f
SSDEEP 96:wV52FoFWFHFs/dd66Joz0dzgClKtmc0d/U9ShSdF95/7bkW6QXjrcEq0JyUR6F9M:wB1d66Joz0dzgCl6mc0dfOv5zboobRJH
TLSH
T124C1AB25F7298A3BC444023BCCA51F401E76385BD85E3F2972DC64492D663DE7A8E17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\85vpkkl6.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 5ccf622d6b095f66a3d21a8b948f6963092d76552253a6858d3fe8883c7ae1ee
MD5 60b43471655bd2e9089e751fe2343228
SHA1 f2204c929a93292183229940b28548324c301451
SHA512 cce3d84b449f0db9b66f11df406da8bcff81e1f5d24a29bce534e2c6cffedac5045a6259074346eaec51976f705c4392c4ec145753a1254cd1f409c92e9eca8f
SSDEEP 192:wB1d66Joz0dzgCl6mc0dHOv5zboHpZRJyj9iD:8d66JozQzgC1jqboJZRJyjo
TLSH
T137E1ED64E628863BC414037BDCA51F810F36389BD84E3F29769C64082D563DE7A8E1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\85vpkkl6.default-release\datareporting\glean\events\events
Size 1KB
SHA256 bcc763f11939e91b8bbd61a4e8e7948e28c25c5bce62ba903ce1c7483787f559
MD5 0f6de6994e39b1529e8ce99b9a36a350
SHA1 9611ea898d4367b365f64841bf556eb2c7085fea
SHA512 dc4e3ecae4938c361e18ceaf53b80d48d8c570442f1297cd3462da3eb27d8283436afe4ecb0ce6da82726b949fe95623d704a3177c639acc2655559b979ee5c0
TLSH
T14021795C3AF84D2EA8DBE29C7484028E53598E0604C76E430E43DE8CCDC6EDA326E438
MD5 SHA1 SHA512 TLSH

Submit Download

5889b65d-00ad-4e7c-998b-16329f0f0a76

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\85vpkkl6.default-release\datareporting\glean\pending_pings\5889b65d-00ad-4e7c-998b-16329f0f0a76
Size 883B
SHA256 a075901d59c7c7547ff8570c3e887edfcec6110993a70e017cd38d5c07ea8c38
MD5 4eb8eb96bd05c602263877046b5858f3
SHA1 a644b38d0f2a425f555f50e9bbb21ea8e5a1afc2
SHA512 ac5f399894a771d3a83fbe8d1788ac8c044400d0ba94bdfe75d90ecaabc32b5f37c271e6fe3c9946947b9b827398dec7f73478903a375ef7ce240b00fa31b069
TLSH
T19B11DC41E630B9B2CD28928FC5D17B415BF4B423C0C948147EE54A140D7DA2EA3AA64B
MD5 SHA1 SHA512 TLSH

Submit Download

7b3839ad-089f-465d-8516-f92c48c10317

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\85vpkkl6.default-release\datareporting\glean\pending_pings\7b3839ad-089f-465d-8516-f92c48c10317
Size 235B
SHA256 a6465b980dd5b8adbb2fa025a1e0d85f5e1f48a8e7db53040183be832f0e745e
MD5 336c022014aa71ab6f625ff845d85127
SHA1 25616027880c55e67a1b25e9d92d91fd7eaf55ad
SHA512 2208c39c7d6e9b26a7489976d3f4123eafdd1fa6dcd08db532f719ee0387b5a12bbd72cf8d3ff32d9cf714d653208c7a4edf26a81460a39b8b96ad5264f94bdb
TLSH
T179D097C0289C631D08401F0BF1B038C232898C3364789C10D69145348AFDBC801E1C2B
MD5 SHA1 SHA512 TLSH

Submit Download

9b25ff7a-9d94-496a-b233-397e0980ab25

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\85vpkkl6.default-release\datareporting\glean\pending_pings\9b25ff7a-9d94-496a-b233-397e0980ab25
Size 2KB
SHA256 7c835fa24b6c4174ed263e9ee769257baacf2d6c976c7e67c9515252aee529cb
MD5 ebcbb5d0ce747c88ad850c35cc91f428
SHA1 db5d76ed0d9272b9cb5dffad54db35d9264b0ffb
SHA512 5b70b2aa385db9a4b2d3de68eb864988bbaa7e9f053e79f721572acb3c8467462aa9e03b9fca10f829565339833420c61dbee9f2d1a04903a24b6d1d9cef6a69
TLSH
T1CF41111875789C7E9CCAF29D9482328D63A14D1300C61C432E96DF0C8DD679E736A42B
MD5 SHA1 SHA512 TLSH

Submit Download

9b600790-6262-4e58-b847-ac2601dcbc4c

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\85vpkkl6.default-release\datareporting\glean\pending_pings\9b600790-6262-4e58-b847-ac2601dcbc4c
Size 16KB
SHA256 2944b8151089f7a1489f6e40a4347ae2029b3790f6320c636318c3233f21ce0b
MD5 ee69e6c7f6ed69efd1cd4913fc550582
SHA1 f5ef563fb779d5600de5b8461db48f42b1e20eb1
SHA512 3337ab75773f2803d0c95e49bc9361fb4656b6b79c25d21046fa718e81f0913d418b66696b6bbcd37f4a6a9e66d9109be18189576aa30d81d634b098ff106d89
SSDEEP 192:gwRhwRD0B8N1qb1bzx08QAzYXWzWPDv8v+tZszYdYO2YsEqgLP6UGmGDvc3m+WFy:PDe2b1bl0tAzYXKWPDMJum+IE1L
TLSH
T10A72A956586049BB8291E79994F8BFC3E6F538CF4C414FC99BE4BE082DDE06E112784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c3069e16-7823-4ffd-a75b-953a23336afc

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\85vpkkl6.default-release\datareporting\glean\pending_pings\c3069e16-7823-4ffd-a75b-953a23336afc
Size 235B
SHA256 0a84a2679d34919ebbda6ad2cff5afb674f7973a24624eb2c1a8272f09dfa6f7
MD5 078560288d3f6ab62fe2b110b2b839a2
SHA1 70856b3ed549cd0c6f7b2555373702cf7d3d2a60
SHA512 9aacfaeca08f1fea6a5253ff92c43bf2bec0c8bdbf8fe8849f3c5c5a6a088e85e141bf6d96971648621afbffec5f802a31c148062c308315bf1e4daf2c10c54e
TLSH
T1C3D097D028D833AD08140F03B0E2A8C730988C332064B850C7A105788AF8AC8431281A
MD5 SHA1 SHA512 TLSH

Submit Download

c30eeca5-b2b9-4f34-bc81-4bd42e1369a0

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\85vpkkl6.default-release\datareporting\glean\pending_pings\c30eeca5-b2b9-4f34-bc81-4bd42e1369a0
Size 886B
SHA256 c557306e548f7d2f809bcdfea7ceb06ddbfc087fc68ce681914e50ed35db2dde
MD5 33b8280230473a17516322461f09515d
SHA1 cd7475756064e63123d098d563fd5ff86f808375
SHA512 2363c7221b6772d38f3c9429a6e74bdcc42f69015b603a25a20fc6e9e106655ae47dffdf8294ff98bd0bc9033011bd8e868c87469419210854d3abf31a8347b2
TLSH
T1601100418630BAB3CC28928FD5D2B78297F07423C0CA4C14BED44B084DFA61EA3A760B
MD5 SHA1 SHA512 TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\85vpkkl6.default-release\prefs.js
Size 6KB
SHA256 186529efa370fc73889ba8688a2092df4d0b26e821b67d9a4e4d2d7b57ded08a
MD5 3831ac3c9b35b015138df1d745a4a2c7
SHA1 bbf0ed91da2d57160a4095c22413d17255ca82a6
SHA512 379579cb007f294bb2c48bd90f10ebc5581f1ab3f288da2b340a86f518861bec92f2e0fc56e6d15060f1be5bf7268c1359057f67af95acded068fe430979dcef
SSDEEP 96:xHHJUTUtBoqGqV0fYKjzDnjb1zSeSSlldv9j2nYtHFLkBw88H8L4cnZhLMR:njRmfYcDf7SSDFoBw886s
TLSH
T132E11F7894188F7FA4B677ACAC6488316AB2413B7BBF68C750B544C5054CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\85vpkkl6.default-release\prefs.js
Size 6KB
SHA256 5b6a212415730e697cafd786a1a0026e20d1baef3fcff584430784c16f7e8c45
MD5 0ff8a1a34e8a61001b6d2c2eb4cfd4a9
SHA1 bde7341cb57b162ac481cc39b817394a33982f2b
SHA512 5df9a593968f58d0262df7206b1e1c89902139d27c3f189c94b846ba373366ff86ae6f270bf00d60e4cd45c5244d7a87de62b737c9274b297e24355a487ca98b
SSDEEP 96:xHHJUTUtBoqGqV0fYRG1zSbSSlldv9j2nYtHFLkBw88H8L4cnZhLMR:njRmfYRGWSSDFoBw886s
TLSH
T117E1217994188F7FA4B677ACAC6888316AB2413B7BBF68C750B544C4014CF3446F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads