f0d65e1672e61cd50f9ea142ebfec61596ec2c4eed46ed3f3e011895d047d022

Analysis

user interaction
yes
max time kernel
56s
max time network
58s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
17/07/2026, 04:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
V1.2_nosave.ahk
Size 859B
Sample260717-e8wndsew7w
SHA256 f0d65e1672e61cd50f9ea142ebfec61596ec2c4eed46ed3f3e011895d047d022
MD5 5cffe999f36e96f2f72b3999ab6269ec
SHA1 a5468fb5e1754986920c32d0654faa25b8a429c2
SHA512 39d6370575cafa7e316a65a07e6a2fecc4a7ff5062bb8a02ce30a2dc643e83f98692836a169e1ff8acc6cbb933b1470c9cd86fe88b4d90f8d6456c03f4a787af
TLSH
T137110C6D97D2EDB02B809735B9C4BE0F028DF30C3A0D16A41BD1648CE4110B44AF01F6
MD5 SHA1 SHA512 TLSH

Score

3^/10

persistence

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Checks processor information in registry 2 TTPs 19 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\CurrentPatchLevel	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\Local Settings	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\Local Settings	cmd.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	108	firefox.exe
Token: SeDebugPrivilege	108	firefox.exe

Suspicious use of FindShellTrayWindow 5 IoCs

pid	Process
108	firefox.exe
108	firefox.exe
108	firefox.exe
108	firefox.exe
108	firefox.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4084	OpenWith.exe
108	firefox.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 4084 wrote to memory of 1976	4084	OpenWith.exe	92
PID 1976 wrote to memory of 108	1976	firefox.exe	93
PID 1976 wrote to memory of 108	1976	firefox.exe	93
PID 108 wrote to memory of 6120	108	firefox.exe	94
PID 108 wrote to memory of 6120	108	firefox.exe	94
PID 108 wrote to memory of 6120	108	firefox.exe	94
PID 108 wrote to memory of 5756	108	firefox.exe	95
PID 108 wrote to memory of 5756	108	firefox.exe	95
PID 108 wrote to memory of 5756	108	firefox.exe	95
PID 108 wrote to memory of 5756	108	firefox.exe	95
PID 108 wrote to memory of 6012	108	firefox.exe	96
PID 108 wrote to memory of 6012	108	firefox.exe	96
PID 108 wrote to memory of 6012	108	firefox.exe	96
PID 108 wrote to memory of 6012	108	firefox.exe	96
PID 108 wrote to memory of 3644	108	firefox.exe	97
PID 108 wrote to memory of 3644	108	firefox.exe	97
PID 108 wrote to memory of 3644	108	firefox.exe	97
PID 108 wrote to memory of 1264	108	firefox.exe	98
PID 108 wrote to memory of 1264	108	firefox.exe	98
PID 108 wrote to memory of 1264	108	firefox.exe	98
PID 108 wrote to memory of 1264	108	firefox.exe	98
PID 108 wrote to memory of 1344	108	firefox.exe	99
PID 108 wrote to memory of 1344	108	firefox.exe	99
PID 108 wrote to memory of 1344	108	firefox.exe	99
PID 108 wrote to memory of 1344	108	firefox.exe	99
PID 108 wrote to memory of 4372	108	firefox.exe	100
PID 108 wrote to memory of 4372	108	firefox.exe	100
PID 108 wrote to memory of 4372	108	firefox.exe	100
PID 108 wrote to memory of 4372	108	firefox.exe	100
PID 108 wrote to memory of 716	108	firefox.exe	101
PID 108 wrote to memory of 716	108	firefox.exe	101
PID 108 wrote to memory of 716	108	firefox.exe	101
PID 108 wrote to memory of 716	108	firefox.exe	101
PID 108 wrote to memory of 4468	108	firefox.exe	102
PID 108 wrote to memory of 4468	108	firefox.exe	102
PID 108 wrote to memory of 4468	108	firefox.exe	102
PID 108 wrote to memory of 4468	108	firefox.exe	102

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\V1.2_nosave.ahk
1⤵
- Modifies registry class
PID:3272

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4084
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "C:\Users\Admin\AppData\Local\Temp\V1.2_nosave.ahk"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1976
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url C:\Users\Admin\AppData\Local\Temp\V1.2_nosave.ahk
    3⤵
    - Checks processor information in registry
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SetWindowsHookEx
    - Suspicious use of WriteProcessMemory
    PID:108
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1936 -prefsLen 27097 -prefMapHandle 1940 -prefMapSize 270279 -ipcHandle 2024 -initialChannelId {189fc934-d2fe-4271-a67e-88307cf483a9} -parentPid 108 -crashReporter "\\.\pipe\gecko-crash-server-pipe.108" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
      4⤵
      PID:6120
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2424 -prefsLen 27133 -prefMapHandle 2428 -prefMapSize 270279 -ipcHandle 2436 -initialChannelId {671c6757-ecaf-4307-975a-ab459140f259} -parentPid 108 -crashReporter "\\.\pipe\gecko-crash-server-pipe.108" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
      4⤵
      PID:5756
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3908 -prefsLen 27274 -prefMapHandle 3912 -prefMapSize 270279 -jsInitHandle 3916 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3924 -initialChannelId {c27acb9c-3192-4ea7-bc29-2dde1c3194bf} -parentPid 108 -crashReporter "\\.\pipe\gecko-crash-server-pipe.108" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
      4⤵
      Checks processor information in registry
      PID:6012
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3916 -prefsLen 27274 -prefMapHandle 3912 -prefMapSize 270279 -ipcHandle 4144 -initialChannelId {6e556ee5-9b01-4f48-bfdd-5c52f4f11667} -parentPid 108 -crashReporter "\\.\pipe\gecko-crash-server-pipe.108" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
      4⤵
      PID:3644
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2732 -prefsLen 34822 -prefMapHandle 2736 -prefMapSize 270279 -jsInitHandle 2756 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3188 -initialChannelId {6569a7a9-f26d-4006-acdc-140816800360} -parentPid 108 -crashReporter "\\.\pipe\gecko-crash-server-pipe.108" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
      4⤵
      Checks processor information in registry
      PID:1264
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5048 -prefsLen 35010 -prefMapHandle 5052 -prefMapSize 270279 -ipcHandle 5064 -initialChannelId {63370a4f-43ec-4682-bdcc-1a3d931dbfc2} -parentPid 108 -crashReporter "\\.\pipe\gecko-crash-server-pipe.108" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
      4⤵
      Checks processor information in registry
      PID:1344
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4856 -prefsLen 32952 -prefMapHandle 4860 -prefMapSize 270279 -jsInitHandle 4864 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2636 -initialChannelId {b20bbc7e-c636-4508-9547-9c9ce5ea0490} -parentPid 108 -crashReporter "\\.\pipe\gecko-crash-server-pipe.108" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
      4⤵
      Checks processor information in registry
      PID:4372
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3068 -prefsLen 32952 -prefMapHandle 2916 -prefMapSize 270279 -jsInitHandle 2996 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2992 -initialChannelId {f599496a-0d78-4b83-a442-7bc2aee919f5} -parentPid 108 -crashReporter "\\.\pipe\gecko-crash-server-pipe.108" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
      4⤵
      Checks processor information in registry
      PID:716
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5692 -prefsLen 32952 -prefMapHandle 5696 -prefMapSize 270279 -jsInitHandle 5700 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5708 -initialChannelId {0e495ea7-d2a6-412b-99a4-c4e3ceeeea8e} -parentPid 108 -crashReporter "\\.\pipe\gecko-crash-server-pipe.108" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
      4⤵
      Checks processor information in registry
      PID:4468

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\z75qv1qk.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 1a8e5aa4ca6124fe0aed6fd76a0b67deacf79e51ef7dcb6ffdb29b625522e8cf
MD5 1ae5ac9fe10c7bdf32f0f6aa33650d6a
SHA1 246c85ac403822f240442a8f6f1162e282b1fef2
SHA512 85b596679a8106cf795a78df2e1b68204401a83afab7df513a30d2a9688ff6d38b3e340a141c807192f9bf228310c47ae0712912be1a94af8b8ee7097068a493
SSDEEP 192:LM1d66JoztdzgCl6mc0dcOv5zbo8bAmyjHxC:ad66Joz/zgC1j9bo8bAmyj
TLSH
T11CD1EE64F638467FC448423BCCA61F400F76355BA88E7F1931DC64092D9A2DE768D17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\z75qv1qk.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 6bd0e55af5f6382889dcf81b45f16777daaaf1287d06e1f5f3d06a66477d92c4
MD5 a9acb57615956dab7816498381482427
SHA1 1d4a5dcf772612466ee0e336f1903641f1b0835d
SHA512 65ec15490a81671fb14a32d4c5cbeedd56bf6efa330bad8cc50d0fa597c60b39e380110d8c04b499328dc14dae4d547fd5a83bb7d7d6f00ac8608dd23d02f34d
SSDEEP 192:LM1d66JoztdzgCl6mc0dDOv5zbo7rZAmyjvyK:ad66Joz/zgC1juboHZAmyjj
TLSH
T1E2E110A4EA28467FC408437BCCA61F404F39395AA84E7F19759C65082D5B2DE37CE17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\z75qv1qk.default-release\datareporting\glean\events\events
Size 1KB
SHA256 2810effdfc47988e9815d2a734fe2df011d72722b4ca7ebbd0a509dbdf8ed4b2
MD5 cad1f807a2687a053d7695c99dd3dd0b
SHA1 793326ad727ee5aebed5615d8d4918420d979e7c
SHA512 8bffce3cb483a78e7fbff0247eeee644a21c35dacc773ed6d60b75dead1e7a06f9113ff88e9e2a8133fdf03f889c4597d76b337d85ac792683da7290ebe0ccc7
TLSH
T16621675C3AF94D7AACC7E69C7480118E93158A0A14871C431D22FF8ECE91FD933AA63D
MD5 SHA1 SHA512 TLSH

Submit Download

30e0749a-3c99-4d61-8d60-01ba4edd5e00

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\z75qv1qk.default-release\datareporting\glean\pending_pings\30e0749a-3c99-4d61-8d60-01ba4edd5e00
Size 235B
SHA256 31f1a8d7cf0a3b7defe369f7bfdf003cc5f27654251d1e5f91e1ab9ad27f3f85
MD5 0bbf26f8c331c4630d5d5c958123e721
SHA1 abc337fd8ed00539fc08698de1de5a663bc1df91
SHA512 a38253404965924e7c53a7d94a7e608c8578ded6f86c416e74ff275031fa89a0e9aedf32dbdbf9284445fe80c54dde2cb9d8da5d66b22379f6ab0cde105bebd1
TLSH
T1E4D097A0E8A86B2D4D240F0BB0E03AC23094CC3328746C10C6910674AEF8AD9019281A
MD5 SHA1 SHA512 TLSH

Submit Download

4c544e11-e740-4f58-9c04-ef9ca9f0a214

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\z75qv1qk.default-release\datareporting\glean\pending_pings\4c544e11-e740-4f58-9c04-ef9ca9f0a214
Size 16KB
SHA256 01cc489f6de1b4d8cdaa4b864bdedd4e1533ff6b2269bef5cb7203ce3a30b237
MD5 8aa82c02710d3b7e2a7bf0793bb5c5f8
SHA1 50f4ebd95f24a781cc68457e50a03d716faf8d7b
SHA512 11fc12efeddc4ad1a56cbd0ce26c2d73c265d4c59e22d00f71826a6092037cf272706c01b1270ec4f331da84e7150a4a1d629bfdc94fa063a87dd00b9b359a77
SSDEEP 192:18R0xdJkgKkSfeT7z1/XfYIlBRzZ1RdZUbJtFW4XUltugbPxdbaSRzxiInoLcRrL:aR0eLkS2T7FPDHvZwGbaSRliIn9RrL
TLSH
T12B72D856186056BA8251E36994EC7FC3E6F638CF4C019FCE97E4BD085DEE0AE112784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6d8e5c1e-84ac-471e-8d5e-edd316b9227a

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\z75qv1qk.default-release\datareporting\glean\pending_pings\6d8e5c1e-84ac-471e-8d5e-edd316b9227a
Size 883B
SHA256 d0a0fb38e695dd864b664e3232e208a1433d608e323ee4f4cdced58abd5c4875
MD5 c7eec4b7754b2855b1ecedefecccabf3
SHA1 a0c4300a80171b1e6f6173ab422f8cf7f92ef8fc
SHA512 0f5d0e94b540177c5bc24053b5fa6cbbd95114137e7872078c4e8e7db671a22c8cf67197315f38d2d630ef3d6d3ed652571edd55a2171d6fdfd22ae1ef7a1c5c
TLSH
T116110490963575F2CC78D34FC965770187E4751381C655082EA55F040E7E93B979A30B
MD5 SHA1 SHA512 TLSH

Submit Download

6e13014f-19d7-4228-89be-a122d1a7f45b

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\z75qv1qk.default-release\datareporting\glean\pending_pings\6e13014f-19d7-4228-89be-a122d1a7f45b
Size 235B
SHA256 5dda748ec3d75968e7c13af8b8b41b89e92a33d906042aaaa370b2f67c28375e
MD5 6cf457949190a17b4ad1cfe38e1bbb8f
SHA1 c74bdff8914d9031cbb81f936f5eac0bac33620c
SHA512 d6400db64bcbf34c7110dc2b30b4a509d4fc9c168f56776390711b989cc773325389b37601735852ceb6caf86618620916b4699d03dc472da650ad0559f66fa3
TLSH
T102D0978028A863AC4C040F02B0E429CB31858C3310A56820956246B99ABADC882A1907
MD5 SHA1 SHA512 TLSH

Submit Download

d6a25582-8c4f-4b8a-b84d-4344550f3b69

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\z75qv1qk.default-release\datareporting\glean\pending_pings\d6a25582-8c4f-4b8a-b84d-4344550f3b69
Size 886B
SHA256 30c35835a293b22d234079d9a874d3052fdaf747934bf830e9d86e10d1096893
MD5 88492d1667130b1dd2ac496c4bb3c3ef
SHA1 b59abcd7eb4f34a87a87b66ff9d5d25c3bf5452f
SHA512 254cc39a12b5533b49922b0b64443ba81ae2776f628d580cbf6807a3504f423c1fc91893ea6706c9f02cb9c111cbc6b3276e58db84317e256b8d406c82fed5df
TLSH
T1A51127818938B5F2CD38D34B84E17B51CBE4312381C6590C3E955F184EEB52F53A630B
MD5 SHA1 SHA512 TLSH

Submit Download

f1a50f4a-f1f5-4775-89ac-24a76ce2e0a1

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\z75qv1qk.default-release\datareporting\glean\pending_pings\f1a50f4a-f1f5-4775-89ac-24a76ce2e0a1
Size 2KB
SHA256 22e8bfbe9231cacc53392278376d424b2cb3de4a56fe244e0a9b83b08a110307
MD5 06eabc7097b620c6255bd435d007b63c
SHA1 102856f25e4a7490093bb692f4f2d3e3f2933127
SHA512 8114f664e0983dfb84a04ecb27d927c07a9ee0db55e0f270deb4a531fc396f8d8acb84d405708362fb2f3b95dd37a8f08bad8356f8d827840a3dc915eb4b7c50
TLSH
T1C8413498357C9CB65CCBE24D9482338E93646A0314C61C831E41EF0C8E926AE736F52B
MD5 SHA1 SHA512 TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\z75qv1qk.default-release\prefs.js
Size 6KB
SHA256 570c81d44aecb4bafe9ab226f3679d707a4e21226ce4efab37a45edbb44327b0
MD5 89e849b8cded14e10198a39a1875afec
SHA1 8d5ee2439ae112510d925753259bdb5e987affd4
SHA512 516b933e32c83e757679085b0e88cab53ea3950993a0f8257e630098720f905334ab100b495c936a3ff37c54b2a25bae688d7486215649ba4faa66f3589b5fef
SSDEEP 96:xHSUTUNqGq1DfG45G1zSrSSlvdv9jRfnNeRHIcSqZJghBw88u8L4cn1VnAx:cgR1DfG45GuSSP49IjzBw88jM
TLSH
T14EE1107890088F7F74B6776CAC6888316AB2413BBBBF68D610B554C4054CF3845F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\z75qv1qk.default-release\prefs.js
Size 6KB
SHA256 4fdc69f57ef21bbb880a73321dc5c0b8eaa203a7fc06279f1d2d852299c36e1a
MD5 35cd55b06bb177e4e3120f356840d4dc
SHA1 4a1eaa61e93c55b86e135c7b50f63042df05dcc1
SHA512 733cb303da82b1f420d0c05f6a93846d970dfb970386b4e2eaff7f92331848bd287ba7eb86c742fc33a577ea5bd926e6dbbeaa358aa1fa3b5d5a58a051b103ba
SSDEEP 96:xHSUTUNqGq1DfGkM1zSnSSlvdv9j4nNeRHIcSqZJghBw88u8L4cn1VnAx:cgR1DfGkMOSSj9IjzBw88jM
TLSH
T1EAE110789408CF7F74B677ACAC6888316AB2013B7BBF68D650B55484054CF3442F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads