7eea3041a8bab3eecaeddaaca5b5106e3eedb3c0afbc3875143d12cd7d0dc7cb

Analysis

user interaction
yes
max time kernel
142s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
06/07/2026, 11:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Cookie_Decryptor_v3.exe
Size 557KB
Sample260706-nclb8aas6m
SHA256 7eea3041a8bab3eecaeddaaca5b5106e3eedb3c0afbc3875143d12cd7d0dc7cb
MD5 6ad8cf928e5bbede12f0b4631d84da3b
SHA1 41cc43e184d9411895e4c575a500990fb5f96995
SHA512 1f09a50f1dae53162733d24b245c6dfe90ae68f1c610a9aeed541f829ab528e5a3658c4e0434df6f7d09320e463441674f06dead4f740f93fc49c136a36a8f16
SSDEEP 6144:eK1+Az3hil7De6fAzCSsXuDOuU5/0Fn+eiDNEVc4/2LVV:Q4hA7DeYAOSG
TLSH
T12EC4191AA66852EDD17BC07882878F32F921308907357BFB56D1427A2F25EF96E7D310
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

persistence

Malware Config

Signatures

Checks processor information in registry 2 TTPs 18 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings	firefox.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	4740	firefox.exe
Token: SeDebugPrivilege	4740	firefox.exe

Suspicious use of FindShellTrayWindow 7 IoCs

pid	Process
4740	firefox.exe
4740	firefox.exe
4740	firefox.exe
4740	firefox.exe
4740	firefox.exe
4740	firefox.exe
4740	firefox.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4740	firefox.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 3492 wrote to memory of 4740	3492	firefox.exe	99
PID 3492 wrote to memory of 4740	3492	firefox.exe	99
PID 4740 wrote to memory of 4112	4740	firefox.exe	100
PID 4740 wrote to memory of 4112	4740	firefox.exe	100
PID 4740 wrote to memory of 4112	4740	firefox.exe	100
PID 4740 wrote to memory of 4636	4740	firefox.exe	101
PID 4740 wrote to memory of 4636	4740	firefox.exe	101
PID 4740 wrote to memory of 4636	4740	firefox.exe	101
PID 4740 wrote to memory of 4636	4740	firefox.exe	101
PID 4740 wrote to memory of 1500	4740	firefox.exe	102
PID 4740 wrote to memory of 1500	4740	firefox.exe	102
PID 4740 wrote to memory of 1500	4740	firefox.exe	102
PID 4740 wrote to memory of 1500	4740	firefox.exe	102
PID 4740 wrote to memory of 312	4740	firefox.exe	103
PID 4740 wrote to memory of 312	4740	firefox.exe	103
PID 4740 wrote to memory of 312	4740	firefox.exe	103
PID 4740 wrote to memory of 4456	4740	firefox.exe	104
PID 4740 wrote to memory of 4456	4740	firefox.exe	104
PID 4740 wrote to memory of 4456	4740	firefox.exe	104
PID 4740 wrote to memory of 4456	4740	firefox.exe	104
PID 4740 wrote to memory of 1400	4740	firefox.exe	105
PID 4740 wrote to memory of 1400	4740	firefox.exe	105
PID 4740 wrote to memory of 1400	4740	firefox.exe	105
PID 4740 wrote to memory of 1400	4740	firefox.exe	105
PID 4740 wrote to memory of 2720	4740	firefox.exe	106
PID 4740 wrote to memory of 2720	4740	firefox.exe	106
PID 4740 wrote to memory of 2720	4740	firefox.exe	106
PID 4740 wrote to memory of 2720	4740	firefox.exe	106
PID 4740 wrote to memory of 4684	4740	firefox.exe	107
PID 4740 wrote to memory of 4684	4740	firefox.exe	107
PID 4740 wrote to memory of 4684	4740	firefox.exe	107
PID 4740 wrote to memory of 4684	4740	firefox.exe	107
PID 4740 wrote to memory of 3648	4740	firefox.exe	108
PID 4740 wrote to memory of 3648	4740	firefox.exe	108
PID 4740 wrote to memory of 3648	4740	firefox.exe	108
PID 4740 wrote to memory of 3648	4740	firefox.exe	108

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\Cookie_Decryptor_v3.exe
"C:\Users\Admin\AppData\Local\Temp\Cookie_Decryptor_v3.exe"
1⤵
PID:860

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3492
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:4740
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2020 -prefsLen 27099 -prefMapHandle 2024 -prefMapSize 270279 -ipcHandle 2100 -initialChannelId {ff4ae4ce-d3b6-48b2-b7f8-44d267cc18ad} -parentPid 4740 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4740" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:4112
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2464 -prefsLen 27135 -prefMapHandle 2468 -prefMapSize 270279 -ipcHandle 2488 -initialChannelId {a1bdd7bf-1ceb-458a-9e67-03c3d25ca988} -parentPid 4740 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4740" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:4636
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3836 -prefsLen 27276 -prefMapHandle 3840 -prefMapSize 270279 -jsInitHandle 3844 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3764 -initialChannelId {4c1db4c2-fc3a-4a22-9ee7-be40f2b25eb3} -parentPid 4740 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4740" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:1500
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3992 -prefsLen 27276 -prefMapHandle 3996 -prefMapSize 270279 -ipcHandle 4080 -initialChannelId {03be44a1-8a41-4701-a6fb-b79e62dde95a} -parentPid 4740 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4740" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:312
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 760 -prefsLen 34775 -prefMapHandle 1640 -prefMapSize 270279 -jsInitHandle 1668 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 1624 -initialChannelId {e3a6b52f-32d0-4296-83ac-d8bf24affe15} -parentPid 4740 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4740" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:4456
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4816 -prefsLen 35012 -prefMapHandle 4820 -prefMapSize 270279 -ipcHandle 4828 -initialChannelId {c9829b62-83ec-46b2-9943-f417a5d1ffb5} -parentPid 4740 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4740" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:1400
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3020 -prefsLen 33031 -prefMapHandle 4732 -prefMapSize 270279 -jsInitHandle 1244 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2660 -initialChannelId {bfd074b9-ed36-40e1-bfb1-1ad9af7137b8} -parentPid 4740 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4740" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:2720
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5712 -prefsLen 33031 -prefMapHandle 5716 -prefMapSize 270279 -jsInitHandle 5720 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5660 -initialChannelId {27389e7d-cdb2-438a-a74b-2b6b00d9a4c8} -parentPid 4740 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4740" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:4684
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5920 -prefsLen 33031 -prefMapHandle 5924 -prefMapSize 270279 -jsInitHandle 5928 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5868 -initialChannelId {cecca63e-fa65-4ad4-8a4c-05de4ab78721} -parentPid 4740 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4740" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:3648

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\db\data.safe.tmp
Size 3KB
SHA256 52097ab372ad152e211a03603e049c5fe7e7608c83fa4f518b93f630aa8a1534
MD5 03f1edb13031e91aa762a5ddbca7da1f
SHA1 560fc2f0bd4f6b615118ee0e32cb508683356526
SHA512 fd31546b185464590c0e1d2f37ec09cf14733375bdaa39409ce192c8e722d8cb5c08cac23d38b7481a2fcfe9b5f85d65ea206e81459a95b6808aed63b4488fc4
TLSH
T12661BA58F228463FE449813ACC961F411F34745698AF7F2A39AC618D1E572CE778D07E
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 06fd1b927cffdd6c207add62bd84b6539cf752fd525710a2c7dc40bee9b09ee9
MD5 c3510db2042cf82d169992ac3c7d2ff3
SHA1 c4bb7e950bdd9ee422a7bd159d0cf03edbaa3275
SHA512 742b8724a422f9372d404b45ef56665335a3e29491bfe90b6a7995ed04ff02e04cd893e1cfa5420698f5c7ec03d081042a8db9e2c4be3327bce6e4cef54c0a12
SSDEEP 192:YOv5zbo7fZDLyj1xc8r8B21d66JozGzgCl6mc0d:jboLZDLyjkCd66JozGzgC1j
TLSH
T188D1CC68F628463BC418423BCCA61F400F75389A988E2F1936DD745D2D572DEBB8E17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\events\events
Size 1KB
SHA256 07fbf6a0a90abb0c65c7bce3985342c9bf4d7702ffae450f978f9c1c21a7dbfe
MD5 de7c87bb49b1f49cc2be2b26b1b492e7
SHA1 cac403ee515275233dcd72f45622ede8bc3594df
SHA512 f33e893fec3bb8344564979c8953292fe0758399d4fc0179f8da7d1d53b0ffd5910b9bbe8d55e0bdc1810c89b4ebda2049b889b9ff977d20752c311264da60e6
TLSH
T146214C5C3EB84D6E988BF69C7491118ED3594E0644C71C470E52EF8ECE95AED326E43C
MD5 SHA1 SHA512 TLSH

Submit Download

17657d3e-ac5c-48a7-abec-dd044126f329

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\17657d3e-ac5c-48a7-abec-dd044126f329
Size 235B
SHA256 1a2d4d39d5f679c31fea241fa28adaf3cf3ad7e0f8b62b9f0b34b067e2a2d43d
MD5 762d68888b3933708246f9f4f7f6c06e
SHA1 f2aafa4828afb5cfa15dd1cfbcf119edbd72cf93
SHA512 5c2230b2ad525533e97a267cc7df994d9e8f3506456f09572a1103ed12ff04fbb8a06a5db9a3c136aaddc2c8891b191fbabd428c5688e51a9f6d1d4d98c2409d
TLSH
T196D097C414987BBC08000F07F0E02DC730844C3318609810D6704AB8E9F9DC8921280A
MD5 SHA1 SHA512 TLSH

Submit Download

2eb7ef7a-9b9a-49fe-956f-f4f895335fd5

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\2eb7ef7a-9b9a-49fe-956f-f4f895335fd5
Size 883B
SHA256 9c60a3b43a60a4d28a11a864737fb27886da81d4a85a938bbfb68300b04d0bbd
MD5 06126217acd5f6165911eed36f503b10
SHA1 535515b86ca4c062115c8e87ae3cbdab06ab1ff2
SHA512 75c070f139ef7f01aa37812b32f72fe5a00c74c78eb35d4090c9a23c7c9c8ea98b3f314edf5c39237bccd1b6f925acf580b2d4615015c280767a7ca5b9f2d6b8
TLSH
T1E7112381A5347972CC6CC25BC8557B425BF4352380CA54187EE14A080D7EB1EA36B25B
MD5 SHA1 SHA512 TLSH

Submit Download

7bd1d552-7cdd-43ed-ab73-64a18b3e681b

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\7bd1d552-7cdd-43ed-ab73-64a18b3e681b
Size 235B
SHA256 61472866dde2f905129eb286a8ba9c23f3f3c7f0985b3f4cfb7fce0210b1ae5f
MD5 f83350429a3fbfbd67456dda0484e05b
SHA1 a59138e640a07d1638997750f11a4cd5958eba83
SHA512 23adf1e3b682fc1c7122beb74a18ddf5f500d74a91b9e7282e37ce5926356b9eb3a282163f1013f813374e44081196155064c50b499c425ee75ae4e60ff568c4
TLSH
T126D0A79064987BAD09280F17B0E16ACA30544C375564A8609BA1467899BDEC8917195A
MD5 SHA1 SHA512 TLSH

Submit Download

7fd42e00-8919-4a69-9f4a-14856204062c

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\7fd42e00-8919-4a69-9f4a-14856204062c
Size 16KB
SHA256 81e9378a4b2ed1ca70293b18866c5abfafabb2288de648c52bb920ae5c50a0f4
MD5 119d6ecd0d94d9abac63a09b97bb42da
SHA1 72ce9d8195e3233ce731801181276dcd74a16458
SHA512 59b076fd928392209d3eab23cb0381c58dda0dc69a1c30b191f2fc7b22bd628d05cd9c62040d089dd1708e18e409964bfd1d9fa0e2c9e61f0522211a904ce373
SSDEEP 192:JtMzwmaiitjBw7VUcBjSNe/zh6WiMKe1PBisG94PQR527kF/xL6GBybaeZq3ufWS:qwmgtjBYUcBjSNIF6nwsJ9VCf7L
TLSH
T1C272C956286055BE8251E3A998FCBFC3E6F528CF4C019FCADBE47D0869DE05E112784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

edbdd1b2-f831-4bd1-a408-fa231d248e74

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\edbdd1b2-f831-4bd1-a408-fa231d248e74
Size 886B
SHA256 178d1309905e5b299618eb14f72b1abf86fd5bd7e645aaf41ace6cba9dacc6c8
MD5 fb4824cdd820fd5145b6912620e57d2e
SHA1 6decf52dfe632f0b99856dd0db79ea685a32cb49
SHA512 aba945bbca3215582e828b2a9eef054c34801b4ec52acab87bee5e0aca6ce15d1211d3d4e31389ac0d1bd0bdb18fee3011cf445b6cff0b06c36eaedcedf91eea
TLSH
T138112781DA387572CC6CD24BD8B17B424BF47423C0C619147E9117140DBB61FE7A725B
MD5 SHA1 SHA512 TLSH

Submit Download

eec5ac4f-c9a7-4eed-abeb-e35cc239cfa8

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\datareporting\glean\pending_pings\eec5ac4f-c9a7-4eed-abeb-e35cc239cfa8
Size 2KB
SHA256 bbafffd9a84a85251e42c2abf578c8dbab9c06a2e820fae45a60b2877e81da5f
MD5 0ac9c37f99c01cd549d280515d83ff11
SHA1 c25a82bbd5a75fb0904d20370d38c8fd7447ae1b
SHA512 8c29a6d3ffdeb32457316e14634a58e8fde03c9e12222ac14af7521e6dd0eff7e72135470f401d5ebbe9ecb3021dfb9c2d59839d1e754743f644ddd63e4df495
TLSH
T16241435C35785CB69CDAF58DD842378E53B4491700C21C432EA2DF0C8CA6ADA336B57B
MD5 SHA1 SHA512 TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\prefs-1.js
Size 6KB
SHA256 3f625ecdae277d8b4e2eb25165bb58d861cad6801fbd3f8652a2ec8b1cf00d1d
MD5 0f5c3e006b994eac63fe85e7748c9cc1
SHA1 f0edd329dfacbbcd3e74c98e0cc0ea8f964c7bf4
SHA512 401e9483065eefb2053eefafc27f40dd65aa066e2b657198b877819b859fe0ec8c1f77b4fdbd674286615742051c2e18b0c8ea736ab10188e38f92fab7e329a5
SSDEEP 96:xH07wUTUzqGqvf8PW1zSEISSladv9jXBn/5H1Bw88n8L4cnDOaGS:acORvf8PWxISSCn1Bw88M
TLSH
T1EEE1107895088B7F64B6776CAC6888316AB2013B77BF6CD750BA54C4015CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6apqb380.default-release\prefs.js
Size 6KB
SHA256 3ce9af2c821ce025a71333bbda2dbe04da392e0ae724f40ac813543bcf7d5a35
MD5 8ff28baf4987e4d8923f7958a7202c47
SHA1 a23b66e9cc721180e25bee413c02af94ee8e168a
SHA512 d009e9d48ea4c85133c1e46f3765a6ccd61a95cc361c3a4c85113f5dbd0acbcea8c9582f0ce62584eac515f7a80ac73d631fc624ef1a8f1089e3d6c022bf3a4e
SSDEEP 96:xH07wUTUzqGqvf8nm1zScFSSladv9jpn/5H1Bw88n8L4cnDOT:acORvf8nmtFSSs1Bw88L
TLSH
T1CDE11F7894088B7F65B677ACAC6888706AB2013B77BF2CC750B654C4015CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads