Overview

overview

7

Static

static

3

tor-browse...14.exe

windows10-2004-x64

7

tor-browse...14.exe

windows10-ltsc_2021-x64

7

tor-browse...14.exe

windows11-21h2-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    39s
  • max time network
    48s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    03/08/2026, 03:59

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    tor-browser-windows-x86_64-portable-15.0.14.exe
  • Size 108.2MB
  • Sample260803-ej4bya1zaz
  • SHA256 f4048faea4c26e0241104ebb6cb0979937532961737ea5d87e5387196a8116ae
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL 3 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\tor-browser-windows-x86_64-portable-15.0.14.exe
    "C:\Users\Admin\AppData\Local\Temp\tor-browser-windows-x86_64-portable-15.0.14.exe"
    1⤵
    • Checks computer location settings
    • Loads dropped DLL
    • Modifies registry class
    PID:948
    • C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
      "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe"
      2⤵
        PID:3144
        • C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
          "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe"
          3⤵
            PID:4868
            • C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
              "C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe" -contentproc -parentBuildID 20260518170000 -prefsHandle 2548:26451 -prefMapHandle 2552:276385 -ipcHandle 1824 -initialChannelId {8158e867-e5b2-45d6-910b-48a3daa9ff97} -parentPid 4868 -appDir "C:\Users\Admin\Desktop\Tor Browser\Browser\browser" - 1 gpu
              4⤵
                PID:2080

        Network

              MITRE ATT&CK Enterprise v16

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              LangDLL.dll
              • Path C:\Users\Admin\AppData\Local\Temp\nst3507.tmp\LangDLL.dll
              • Size 7KB
              • SHA256 b797e5a7de359c0c934cddef8e9d3a78e6d3d68e6ac83d2ddad915770cbace53
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              System.dll
              • Path C:\Users\Admin\AppData\Local\Temp\nst3507.tmp\System.dll
              • Size 23KB
              • SHA256 4bc489ab81c6f1d7e9cc6c2e8a3157183e7b0ee5199b4c6e8044aa32da2dea1b
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              nsDialogs.dll
              • Path C:\Users\Admin\AppData\Local\Temp\nst3507.tmp\nsDialogs.dll
              • Size 13KB
              • SHA256 7ecc85cfcc4bde6146ed8e0067341b1a56306f94893702ee772bda8725712aeb
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              profiles.ini
              • Path C:\Users\Admin\Desktop\Tor Browser\Browser\TorBrowser\Data\Browser\profiles.ini
              • Size 103B
              • SHA256 11dedeb495c4c00ad4ef2ecacbd58918d1c7910f572bbbc87397788bafca265c
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              omni.ja
              • Path C:\Users\Admin\Desktop\Tor Browser\Browser\browser\omni.ja
              • Size 26.6MB
              • SHA256 0fad030bd7cf187db0f681f32a477d87ae8d69dec1f4852a589a9c8b2ef899c8
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              channel-prefs.js
              • Path C:\Users\Admin\Desktop\Tor Browser\Browser\defaults\pref\channel-prefs.js
              • Size 429B
              • SHA256 7d9d37eff1dc4e59a6437026602f1953ef58ee46ff3d81dbb8e13b0fd0bec86b
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              dependentlibs.list
              • Path C:\Users\Admin\Desktop\Tor Browser\Browser\dependentlibs.list
              • Size 55B
              • SHA256 612e53338b53449be39f2e9086e15edc7bb3e7aa56c9d65a9d53b9eb3c3cc77d
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              {73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
              • Path C:\Users\Admin\Desktop\Tor Browser\Browser\distribution\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
              • Size 815KB
              • SHA256 e4280bb2ae87b7dce2c43e416dab60f15a791d439bf9dde2d15b91c14b4163d1
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              firefox.exe
              • Path C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
              • Size 1.7MB
              • SHA256 51534655250d77174ef98a69dd065d6714a39375795828688283e9a40d04be0d
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              firefox.exe
              • Path C:\Users\Admin\Desktop\Tor Browser\Browser\firefox.exe
              • Size 896KB
              • SHA256 470b60e28a708636a0a6ec5696f01982c75ef6ed5d79dccea2cee4f6b19f4ca0
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              freebl3.dll
              • Path C:\Users\Admin\Desktop\Tor Browser\Browser\freebl3.dll
              • Size 941KB
              • SHA256 1d5831f0bbee15a2d9678bc0a23349ff8879e76ac045d0e20cc161fcee627c1f
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              gkcodecs.dll
              • Path C:\Users\Admin\Desktop\Tor Browser\Browser\gkcodecs.dll
              • Size 8.8MB
              • SHA256 6ddf6b853a6feb252274c716edbf87c56e5193de56f6bfa18a8b07d5a6c79d13
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              gkcodecs.dll
              • Path C:\Users\Admin\Desktop\Tor Browser\Browser\gkcodecs.dll
              • Size 187KB
              • SHA256 34e4cdf0e12c0df31cc370edbe85df59ffa065b32c0d5fdf97b6a747a5dde2f4
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              lgpllibs.dll
              • Path C:\Users\Admin\Desktop\Tor Browser\Browser\lgpllibs.dll
              • Size 343KB
              • SHA256 a5060a6320af6434d0c377686b719057332537a3208d8520f6b6fce4be4144b7
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              lgpllibs.dll
              • Path C:\Users\Admin\Desktop\Tor Browser\Browser\lgpllibs.dll
              • Size 187KB
              • SHA256 f5347ac52a04b735cb77e16807109579314e97bb6195d4b72ef7eb1ea126b801
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              mozglue.dll
              • Path C:\Users\Admin\Desktop\Tor Browser\Browser\mozglue.dll
              • Size 975KB
              • SHA256 c33afb87cac05a0d37c4f50523fc272c18840083c23e9f00bec9e8061c0468ba
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              mozglue.dll
              • Path C:\Users\Admin\Desktop\Tor Browser\Browser\mozglue.dll
              • Size 640KB
              • SHA256 009f6e375655ff7e3654dea588ca5f4e9d88a55ba20e403d2249d033b383e6bb
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              nss3.dll
              • Path C:\Users\Admin\Desktop\Tor Browser\Browser\nss3.dll
              • Size 2.6MB
              • SHA256 67171929f55044df8379c37bd869da659b5312a22d6fb1a27a59e7ae6b328c94
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              nss3.dll
              • Path C:\Users\Admin\Desktop\Tor Browser\Browser\nss3.dll
              • Size 187KB
              • SHA256 ef7e81087954a5a2258fcac7297d67fefbb7db9b40dba162f69143976f9a11bc
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              omni.ja
              • Path C:\Users\Admin\Desktop\Tor Browser\Browser\omni.ja
              • Size 19.5MB
              • SHA256 64ab9993ef01d2e305e4ad02f3f0f96e6e48abfe05be23c90a5e3a34e8b77017
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              softokn3.dll
              • Path C:\Users\Admin\Desktop\Tor Browser\Browser\softokn3.dll
              • Size 281KB
              • SHA256 4bc3b3579ed46f6bbc8ed7cc60006a667cc26a1cadd787933340fd0e112ef46e
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              Tor Browser.lnk
              • Path C:\Users\Admin\Desktop\Tor Browser\Tor Browser.lnk
              • Size 829B
              • SHA256 b685166de51d169451550d794c3535dbbff6213c21dc5f72eb4290a0b488bd90
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              memory/948-194-0x00007FF991E47000-0x00007FF991E48000-memory.dmp
              Download