150f83392e6bb3504f2e70c79b4976f47d4fd2f707247f588b172032a70c489b

Analysis

user interaction
yes
max time kernel
58s
max time network
59s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/08/2026, 07:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
external.exe
Size 409KB
Sample260825-h76zhsfk21
SHA256 150f83392e6bb3504f2e70c79b4976f47d4fd2f707247f588b172032a70c489b
MD5 7a2b0a33541b2c8182d54cab5cb53201
SHA1 038461542d4a7fc74b134599aebe9ec33688ca30
SHA512 458c9375fd063e7258c713b601f460dc79bc776e01c648c03287e8cdf52cc4c78b886fb6b77c295b7d6877ae172c40f24393dd48552462a085d41fee5fba82a1
SSDEEP 6144:S5cSFN66thFHwKgcPfUi2UaD+oOKR8i+yRWtomygiPqnlAkO5b2m5Q6XePex:SrdFkcPVaD+oOKRuDiSnKA2Xe
TLSH
T1F9948D84F1E448E8D06F603895A6BA1FEA39349C171049DB73F845483FE37F1A6BA716
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

persistence

Malware Config

Signatures

Checks processor information in registry 2 TTPs 22 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings	firefox.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	3964	firefox.exe
Token: SeDebugPrivilege	3964	firefox.exe

Suspicious use of FindShellTrayWindow 5 IoCs

pid	Process
3964	firefox.exe
3964	firefox.exe
3964	firefox.exe
3964	firefox.exe
3964	firefox.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4108	external.exe
3964	firefox.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 3032 wrote to memory of 3964	3032	firefox.exe	99
PID 3032 wrote to memory of 3964	3032	firefox.exe	99
PID 3964 wrote to memory of 2364	3964	firefox.exe	100
PID 3964 wrote to memory of 2364	3964	firefox.exe	100
PID 3964 wrote to memory of 2364	3964	firefox.exe	100
PID 3964 wrote to memory of 1888	3964	firefox.exe	101
PID 3964 wrote to memory of 1888	3964	firefox.exe	101
PID 3964 wrote to memory of 1888	3964	firefox.exe	101
PID 3964 wrote to memory of 1888	3964	firefox.exe	101
PID 3964 wrote to memory of 1416	3964	firefox.exe	102
PID 3964 wrote to memory of 1416	3964	firefox.exe	102
PID 3964 wrote to memory of 1416	3964	firefox.exe	102
PID 3964 wrote to memory of 1416	3964	firefox.exe	102
PID 3964 wrote to memory of 444	3964	firefox.exe	103
PID 3964 wrote to memory of 444	3964	firefox.exe	103
PID 3964 wrote to memory of 444	3964	firefox.exe	103
PID 3964 wrote to memory of 760	3964	firefox.exe	104
PID 3964 wrote to memory of 760	3964	firefox.exe	104
PID 3964 wrote to memory of 760	3964	firefox.exe	104
PID 3964 wrote to memory of 760	3964	firefox.exe	104
PID 3964 wrote to memory of 5600	3964	firefox.exe	105
PID 3964 wrote to memory of 5600	3964	firefox.exe	105
PID 3964 wrote to memory of 5600	3964	firefox.exe	105
PID 3964 wrote to memory of 5600	3964	firefox.exe	105
PID 3964 wrote to memory of 5612	3964	firefox.exe	106
PID 3964 wrote to memory of 5612	3964	firefox.exe	106
PID 3964 wrote to memory of 5612	3964	firefox.exe	106
PID 3964 wrote to memory of 5612	3964	firefox.exe	106
PID 3964 wrote to memory of 5624	3964	firefox.exe	107
PID 3964 wrote to memory of 5624	3964	firefox.exe	107
PID 3964 wrote to memory of 5624	3964	firefox.exe	107
PID 3964 wrote to memory of 5624	3964	firefox.exe	107
PID 3964 wrote to memory of 5636	3964	firefox.exe	108
PID 3964 wrote to memory of 5636	3964	firefox.exe	108
PID 3964 wrote to memory of 5636	3964	firefox.exe	108
PID 3964 wrote to memory of 5636	3964	firefox.exe	108

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\external.exe
"C:\Users\Admin\AppData\Local\Temp\external.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4108

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3032
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:3964
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2016 -prefsLen 27099 -prefMapHandle 2020 -prefMapSize 270279 -ipcHandle 2096 -initialChannelId {d6bb2185-66e5-453d-a97f-feaaeacea92e} -parentPid 3964 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3964" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:2364
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2460 -prefsLen 27135 -prefMapHandle 2464 -prefMapSize 270279 -ipcHandle 2476 -initialChannelId {321623e3-31c4-40e5-a719-b044fb43cc0f} -parentPid 3964 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3964" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    - Checks processor information in registry
    PID:1888
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3980 -prefsLen 27276 -prefMapHandle 3984 -prefMapSize 270279 -jsInitHandle 3988 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3996 -initialChannelId {2423f685-1aef-4ba1-9d72-1775a2f3c8a6} -parentPid 3964 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3964" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:1416
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4144 -prefsLen 27276 -prefMapHandle 4148 -prefMapSize 270279 -ipcHandle 4224 -initialChannelId {77b8127c-0959-4d02-bb8e-b995280e3e4f} -parentPid 3964 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3964" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:444
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2672 -prefsLen 34775 -prefMapHandle 2768 -prefMapSize 270279 -jsInitHandle 2664 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2844 -initialChannelId {4cf81282-1df7-4d17-9701-38e3ef9abf50} -parentPid 3964 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3964" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:760
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5056 -prefsLen 35091 -prefMapHandle 5060 -prefMapSize 270279 -ipcHandle 4516 -initialChannelId {343aa794-b542-457c-b33b-063526545c70} -parentPid 3964 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3964" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:5600
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5204 -prefsLen 32979 -prefMapHandle 5208 -prefMapSize 270279 -jsInitHandle 5212 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5220 -initialChannelId {54ffefad-b040-426d-a27b-fdc789d84a65} -parentPid 3964 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3964" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:5612
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5360 -prefsLen 33031 -prefMapHandle 5364 -prefMapSize 270279 -jsInitHandle 5368 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5372 -initialChannelId {efece7f7-1816-4e28-8f83-fac8b62eae16} -parentPid 3964 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3964" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:5624
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5752 -prefsLen 33031 -prefMapHandle 5756 -prefMapSize 270279 -jsInitHandle 5760 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5720 -initialChannelId {8dbd2d5d-a8d6-466f-9eae-bd6d7bd19762} -parentPid 3964 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3964" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:5636

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 bf0320caf869408d31e9383f5b807e166255ee3000b82b3c9975a00b1c9139f2
MD5 6cd83d069514256670346c97c6db8946
SHA1 2540dac9af371305a037d23505169aa66c2b5ae9
SHA512 228de91d24184b4573eee0c485d34d21b30a4f952f2d5844626bd4d9dda26d766eb5716c2bbb74113837b2cc05094863761b0b28593f140c113d68061b909a4b
SSDEEP 192:DOv5zbowbRgcyjP8B61d66JozGzgCl6mc0dz:MbowbOcyjmkd66JozGzgC1jd
TLSH
T13AD11E64FA28863FC418523BCCA51F414F36385B984E7F15359CA4182D5B2DE7ACD1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 3fc041cc3c89404fad675dfb07473d9b3144b7a2f9d488ae51a58d28dc2c8e19
MD5 0225d6922490f8b07dd8d4a2bcd68f29
SHA1 cc9744c219f6304bc735b296821427c571f92b0c
SHA512 d3a7bac4e938a29fbc5894dc72229f9d41fd42c63d730a0c89bd0d5bfb78cc83fdd684619e79ccbde1139f1934603310d37b83d1a263b3ef36a95f223f45ae5a
SSDEEP 192:AOv5zboPOZRgcyjP8B61d66JozGzgCl6mc0dz:rboWZOcyjmkd66JozGzgC1jd
TLSH
T10EE12FA4FA29863FC418427BCCA51B414F39385B984E3F15359CA41C2D572DE7ACE1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\datareporting\glean\events\events
Size 1KB
SHA256 6a63f882123348747f280dd3ebeade862bbb7e3e45967573b3adce26a57c69c7
MD5 3d3d1383600da72744edfc01234e2bf0
SHA1 c3e13d8f0aa2dd0733a9bdfdf4ac0db018fde769
SHA512 4afb43e548de03a17f997771d8427b7fbbbc737ce86a0c17a47d4a839e027665092a1c1885092d96a6db073781d90c3d6c29fc2d6d509d85920f7ea47fa8b1f2
TLSH
T1B921375C39B98D6F99CBE29C7482028F53918E5709872D430D02FF8DCE81AD9366A538
MD5 SHA1 SHA512 TLSH

Submit Download

3d8838b6-86b9-4f54-9b57-2d75b6beefd8

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\datareporting\glean\pending_pings\3d8838b6-86b9-4f54-9b57-2d75b6beefd8
Size 15KB
SHA256 ec8d50574b26a578cf4de5e18f91b345355f336a543747591b611efea0afc128
MD5 c16db82eb8ebde80401e93f936e8aae3
SHA1 63ad4a6ee50fdb67949b9c2757eb46b9e1d3b6b8
SHA512 cd16921d7ca56726c4191edfcae5fbbcc9b78bc5825e12e8951dac6f9eb669ce9051c1d76b1a110a4c1ac301798334bbc2021e3f34fbbffbb5e612bc363de369
SSDEEP 192:E3COIZ9N88j5CugOEPpGMnnFfj0veq3DTX/oFIyBh7sxo2rqieOKtAMnIzxU6SRi:E3Cr9N8SMpfBtcK6MnIlU6SSCgc4n
TLSH
T13072C9166830457A8291E369D4ECBFC3E5F538CB4C419FC99BE4BD086DDE0AE112794B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

728b7c7e-e981-40fd-b38b-0509d8e757ba

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\datareporting\glean\pending_pings\728b7c7e-e981-40fd-b38b-0509d8e757ba
Size 235B
SHA256 37eeb25e97bd1961570711d200ea39b6e9b40e6144078c356e149fcb91dbefea
MD5 488f729126fd315ff988a54da9607884
SHA1 d8a4801f29454ca5a7c666c1b902f51afbf12a0e
SHA512 33f6a80891b5390198b3635a7970fcb47aa414ff5eaeae055c2d7f3eb188e1c61541e2673232388d5b436276451ac6cb6c6d1d901141bfee45d1ff46e637c5de
TLSH
T12AD097825498A72D48240F07B0B12DC230894C331465B811D66280749DBDAD4822681F
MD5 SHA1 SHA512 TLSH

Submit Download

74107816-2502-4086-a83b-6d96dddd631c

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\datareporting\glean\pending_pings\74107816-2502-4086-a83b-6d96dddd631c
Size 235B
SHA256 637d289dee9ef8e04931421397dd5f7ec4f1746f3374bbbe854e024af40a98a7
MD5 d94c2f813439bc3231cf5b84643d237b
SHA1 f0d7700ee6bd93ad4b87b6f91490558776dd79fe
SHA512 b5afc9f42dcb1cb4386635535f6d2a36b18ead0f3f8c484772b2f43d7c49918ee44e0679ed2f23c025b9dfd1062cb1acf314fe8a196501fe35b6adae5c89b6ca
TLSH
T17FD097806888675C08140F87F4A0A9C230898C33A460B850EAA28874A9FDAC88132916
MD5 SHA1 SHA512 TLSH

Submit Download

791b97f5-a278-4e95-bcc0-d33612dacda4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\datareporting\glean\pending_pings\791b97f5-a278-4e95-bcc0-d33612dacda4
Size 2KB
SHA256 47b23a860d1b77f9e9597396cb2a461de2686229a5e0946436a060d78d8dd2b0
MD5 0e47d51c4b24f57c506f57764b4d11fd
SHA1 5d97308e85c4e3056cd21f830e9debc13b41a411
SHA512 eec26d63b983a6a647a7feaf2075327bb8b983bf029b98a49d5903aa724aac9440298c37f74fa12b23d9e0f40e70d5006c5e2b12d5b9e9adff7e889b07e7d2a4
TLSH
T1FE41335836F89C7B8CAFF58DD481234E57645A1340C568832E61DE0C8C9A79D636A43B
MD5 SHA1 SHA512 TLSH

Submit Download

7a430048-9961-4be3-a2fd-62e820971302

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\datareporting\glean\pending_pings\7a430048-9961-4be3-a2fd-62e820971302
Size 883B
SHA256 16252bd990d00eb1bedaa84b47866381bbab79e53ecb3fa5916e98429f0fc1d8
MD5 cc09f985d6a397eb0dc5993dad8fb2ff
SHA1 d15a06c4d01399786973dcb6793d8aed56c2dfe1
SHA512 5d488b9ac4b0c1d9c2cd9037460cedb1418f21154f13987ab1f3ef58f5c7ad288b83c9f553dafc7ebbd5643853c935e3388d27002c7b2e36b8552fe5b5bb5aee
TLSH
T101110091A639B5B38C7CD20B895577424FE4352380C994143EA189280E7E52AD3A6A4F
MD5 SHA1 SHA512 TLSH

Submit Download

a18671eb-5201-46c2-839f-7608ee8131d8

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\datareporting\glean\pending_pings\a18671eb-5201-46c2-839f-7608ee8131d8
Size 886B
SHA256 bedd9f4e3568f1d5259dc3d6133bd8449abb7cbd6c438882e00713ed4e5408c5
MD5 34eb7faa9b754308c89406f7a583a31e
SHA1 6ed6318b9b126c3cc389dec6b247f1a31445fba4
SHA512 efa44ce3bae693b4a9a46181e3538af5ca5c2e2e9769174c9709af50f969cd7214e731677a3b9e7f022d3e4ee7e1013cdd1ccb8007c80fba5dcf8e24f3e63e53
TLSH
T165110050A779B9B38CBDD24B99917B438BE0302380C659483E809E180EBA51EA39760B
MD5 SHA1 SHA512 TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\prefs-1.js
Size 6KB
SHA256 c33a880e0902b8ad401eaa68d9514e386c8fe943d7fd9facd946b503b204a7fa
MD5 507bd198d18e3df33f23ba4ed063a53c
SHA1 b87fa11a4e57ec195415821a9e31119ecefa01da
SHA512 bdac32976e114635417ec7ba1cfb82f6fbcde1dbaccaf6accdec030073ca070799b1e6401fa6bf6dfeb64efadd602862cbe2738f8f00949f55f5d7e263d8f736
SSDEEP 96:xHiUTUMqGq/fSbC1zSmSSlmdv9jXnytHlAsO7HjvsBw88n8L4cn23U1jGS:U/R/fSbCbSSdxisIHzsBw88C
TLSH
T15FE130789008CF7F64B6766CAC6888315AB2013B7BBF28D350B594C4015CF3446F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\iorza73p.default-release\prefs.js
Size 6KB
SHA256 5a0c7680dc8908c0e42c251d521ffee1b9e8483226c7367d144c71263301a463
MD5 2c5637a2ada88859f5ef83d0b7851784
SHA1 6bafbefca4ae28f8d4fc0ce3e267ca1ec311fff1
SHA512 6b74088065674ba55c9b84f3e76fa96b634b0b8b0b4ae4894e4096b18c27c34d0be638b385afd96c93bb3e1de114ff4c1110036bc10475d1755d0226d4fdce27
SSDEEP 96:xHiUTUMqGq/fSrO1zSmSSlmdv9jTnytHlAsO7HjvsBw88n8L4cn23U1jGS:U/R/fSrObSSxxisIHzsBw88C
TLSH
T1D3E12F789008CF7F64B676ACAC6888716AB2013B77BF68D650B594C4015CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads