02d7f6e8b66e3444cfd4b1daeca26601cf7057260bc35c9367bf5a8fc31a046f

Analysis

user interaction
yes
max time kernel
149s
max time network
154s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
31/08/2026, 22:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LunaExecutor.zip
Size 73.6MB
Sample260831-2c73wazdpf
SHA256 02d7f6e8b66e3444cfd4b1daeca26601cf7057260bc35c9367bf5a8fc31a046f
MD5 0a91e380d994c9752721a9336d52a209
SHA1 8eba4c9dfc82f440eab086968c2bb80179650ebf
SHA512 1bf3648ca76fa5e34103a26c88bedd45041f6af5e7bad55473a981ad6dba1f017cac4dfae29d0b1d9b8f63314d5173c7fad9d93c550484e1414aecdb112fd6cc
SSDEEP 1572864:foOzOggPdH/NMQmyCiI0bMoIhoneShAtK/X7IZ6eaB:wOzOgSlmyCYbqhbShzX7e6
TLSH
T19B08334C883682F3D2FDD2327A2D6528B1F76FD5044CA5DB360E69E44763B91CA9390E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

persistence

Malware Config

Signatures

Checks processor information in registry 2 TTPs 22 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\Local Settings	firefox.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	2432	firefox.exe
Token: SeDebugPrivilege	2432	firefox.exe

Suspicious use of FindShellTrayWindow 5 IoCs

pid	Process
2432	firefox.exe
2432	firefox.exe
2432	firefox.exe
2432	firefox.exe
2432	firefox.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2432	firefox.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 2576 wrote to memory of 2432	2576	firefox.exe	100
PID 2576 wrote to memory of 2432	2576	firefox.exe	100
PID 2432 wrote to memory of 5000	2432	firefox.exe	101
PID 2432 wrote to memory of 5000	2432	firefox.exe	101
PID 2432 wrote to memory of 5000	2432	firefox.exe	101
PID 2432 wrote to memory of 3836	2432	firefox.exe	102
PID 2432 wrote to memory of 3836	2432	firefox.exe	102
PID 2432 wrote to memory of 3836	2432	firefox.exe	102
PID 2432 wrote to memory of 3836	2432	firefox.exe	102
PID 2432 wrote to memory of 4476	2432	firefox.exe	103
PID 2432 wrote to memory of 4476	2432	firefox.exe	103
PID 2432 wrote to memory of 4476	2432	firefox.exe	103
PID 2432 wrote to memory of 4476	2432	firefox.exe	103
PID 2432 wrote to memory of 2316	2432	firefox.exe	104
PID 2432 wrote to memory of 2316	2432	firefox.exe	104
PID 2432 wrote to memory of 2316	2432	firefox.exe	104
PID 2432 wrote to memory of 1788	2432	firefox.exe	105
PID 2432 wrote to memory of 1788	2432	firefox.exe	105
PID 2432 wrote to memory of 1788	2432	firefox.exe	105
PID 2432 wrote to memory of 1788	2432	firefox.exe	105
PID 2432 wrote to memory of 5264	2432	firefox.exe	106
PID 2432 wrote to memory of 5264	2432	firefox.exe	106
PID 2432 wrote to memory of 5264	2432	firefox.exe	106
PID 2432 wrote to memory of 5264	2432	firefox.exe	106
PID 2432 wrote to memory of 5932	2432	firefox.exe	107
PID 2432 wrote to memory of 5932	2432	firefox.exe	107
PID 2432 wrote to memory of 5932	2432	firefox.exe	107
PID 2432 wrote to memory of 5932	2432	firefox.exe	107
PID 2432 wrote to memory of 5948	2432	firefox.exe	108
PID 2432 wrote to memory of 5948	2432	firefox.exe	108
PID 2432 wrote to memory of 5948	2432	firefox.exe	108
PID 2432 wrote to memory of 5948	2432	firefox.exe	108
PID 2432 wrote to memory of 5968	2432	firefox.exe	109
PID 2432 wrote to memory of 5968	2432	firefox.exe	109
PID 2432 wrote to memory of 5968	2432	firefox.exe	109
PID 2432 wrote to memory of 5968	2432	firefox.exe	109

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\LunaExecutor.zip
1⤵
PID:4452

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2576
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:2432
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1996 -prefsLen 27100 -prefMapHandle 2000 -prefMapSize 270279 -ipcHandle 2088 -initialChannelId {cf20db87-7e86-4877-9c35-dedc38e41e99} -parentPid 2432 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2432" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:5000
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2464 -prefsLen 27136 -prefMapHandle 2468 -prefMapSize 270279 -ipcHandle 2476 -initialChannelId {4e46bb1f-7fcb-4fff-80c9-1283e38d542e} -parentPid 2432 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2432" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    - Checks processor information in registry
    PID:3836
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3916 -prefsLen 27277 -prefMapHandle 3920 -prefMapSize 270279 -jsInitHandle 3924 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3932 -initialChannelId {caf64137-3645-4f86-8dce-c90817848781} -parentPid 2432 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2432" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:4476
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3968 -prefsLen 27277 -prefMapHandle 3956 -prefMapSize 270279 -ipcHandle 4104 -initialChannelId {b1ac1792-9a14-4485-be44-c2ee94e7adeb} -parentPid 2432 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2432" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:2316
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 1244 -prefsLen 34776 -prefMapHandle 1248 -prefMapSize 270279 -jsInitHandle 3828 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2512 -initialChannelId {f71bf861-a7e4-4e36-84f0-5afca6a14873} -parentPid 2432 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2432" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:1788
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4692 -prefsLen 34932 -prefMapHandle 4884 -prefMapSize 270279 -ipcHandle 4876 -initialChannelId {84455b17-c68d-4905-88f4-d3ab955f85d0} -parentPid 2432 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2432" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:5264
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5180 -prefsLen 32952 -prefMapHandle 5184 -prefMapSize 270279 -jsInitHandle 5188 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 1644 -initialChannelId {70336271-8c00-4116-8da9-be9669e0b728} -parentPid 2432 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2432" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:5932
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5376 -prefsLen 32952 -prefMapHandle 5380 -prefMapSize 270279 -jsInitHandle 5384 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5392 -initialChannelId {06c8dff6-418d-4267-9eb7-b6bbc1af9e17} -parentPid 2432 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2432" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:5948
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5568 -prefsLen 32952 -prefMapHandle 5572 -prefMapSize 270279 -jsInitHandle 5576 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5584 -initialChannelId {88ab29f5-dabd-449a-a6c8-d8f0a2c84635} -parentPid 2432 -crashReporter "\\.\pipe\gecko-crash-server-pipe.2432" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:5968

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kfuxsl7p.default-release\datareporting\glean\db\data.safe.tmp
Size 3KB
SHA256 975275dc144d60e503033e803b071248f10104a0d9ad720df2638ad3fd1e10d0
MD5 a1638a891d81f65dc11944a6c3b078bf
SHA1 a6e1e560f34bf3c665015d2f54df97fc998fd6e3
SHA512 16da68bceac79322211d59a1666c9ccb8ce44658e194037afa4309c35830a24369faf7ccbd1a718012658f30c559dde66e15b16fe5b5ccdc95e39e8ba7e1a88a
TLSH
T16261DC59F229863FE445413ADC821B411F347466A8AF7F1A39AC604D1E4B3CE768D03E
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kfuxsl7p.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 acac219f963d494ef9ae51477707e4ff3146b87ee8602821196fd7eac10bf28d
MD5 0d35d7ba69f64b9f4e5aeccf92f05fc7
SHA1 19054e7bd0bdbc3bfdb501dfb21ce9f3b03dc61f
SHA512 acade423e8bcfc3442e6fdfdca0df772e0bb23beea2b443c019fbf049d8c5551347d2bffe7051b5b9f613ecefd8643bf9cad81c26d0deac90480a31fcc8697e9
SSDEEP 192:/01d66Joz1zgCl6mc0dgOv5zboBZJmyjsO+:Wd66Joz1zgC1jtboBZJmyju
TLSH
T13CE11168EA28867FC404027BCCA51B410F36389B9C4E7F2935ADB5182D972DE768E17D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kfuxsl7p.default-release\datareporting\glean\events\events
Size 1KB
SHA256 79e0fda5b9597c3f96b3a27b6c441bdd35298c66fafb88ef99191700b1f8464e
MD5 021b11c8bd73f2f5ce7466a86cb8ded9
SHA1 262e7bb942326f8da85d7abfc2f7f7e17070fab7
SHA512 517cd2f89100ed8aa78e16cfb2523fe1681a9a50fce51e3f9a62546016ebb228d1935779b7f21edd6556362be10d249d67ca3ee4bc72a4a0f295e4bbaa7c95ec
TLSH
T16821495C79FD8DAAADC7E29CB940028E53154E0708871D474E22EF8DCEC1ADE326A438
MD5 SHA1 SHA512 TLSH

Submit Download

320e5cdc-33f5-49b7-95a3-3608e45ea413

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kfuxsl7p.default-release\datareporting\glean\pending_pings\320e5cdc-33f5-49b7-95a3-3608e45ea413
Size 15KB
SHA256 c6d21e1bc282b8d176709d8b11d4b0b15965d918ca4a44856206e05f46955d34
MD5 708cc9c097acd81ff7e37017108e6f60
SHA1 b604638cfa9cea5b0a4b74c54bc8b80b2e44d9f4
SHA512 ef5fa017189974be6dd4c84d051cfe2da293fd2be860cc1772144011eba4710be4e1549ee12128a3cb099deb7cc261a853019de8c08fbd8ec4dc13903cc890b3
SSDEEP 192:kGzb1xhBRdPTCgdts8nfyrnd2FZeKztt8zrmVjgNcExfIBMl21YHA+0hn87l4ziD:LhxhBLPO+edwilvW87l4QRuKSvs1
TLSH
T12D72D956286055BA8251E369D8F8BFC3E2F538CF4C419FCE9BE4BD0829DE09D112794B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6eb9461f-762c-4413-b8c0-99e00d54f1c2

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kfuxsl7p.default-release\datareporting\glean\pending_pings\6eb9461f-762c-4413-b8c0-99e00d54f1c2
Size 235B
SHA256 cc97abfedb4e58655c6cda08842283e289ab83699a02fe79784bad44b24d3cb3
MD5 21f57a10254656c8d186e2dbcb0584a7
SHA1 05377f104a695acbc9831bf709864dcfc9d94bb5
SHA512 f78c56860d96552be4ba5235223fbcda89d4d91c546ab0189a46be04dfa416e90821a2041d6531c2c65aa38f1b37839a045b1e392e4ea6e52dbb0fb27c2f417f
TLSH
T16AD097C12498279C0C000F1BF0E02DD3B1448C3324615830D6524138AABCACC4211826
MD5 SHA1 SHA512 TLSH

Submit Download

9be770e5-a873-4528-ba0f-09cfe818bfec

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kfuxsl7p.default-release\datareporting\glean\pending_pings\9be770e5-a873-4528-ba0f-09cfe818bfec
Size 886B
SHA256 1a5fda1083c1ba14ce1b96a624a07cbaa60d370c9513d4a4e13c779ac3425bb7
MD5 e78017b6d86c8951e117d595a7354c57
SHA1 2d6f6b6e9d3a493798899118156f0f1579d6ea8a
SHA512 b3d5fe6d28fadcdec03db1e6fe406146e9c27f3d1a6504cc9bff24cbb7d3b4e367b018d3e4feb8240f3b95b6edc02cffafea4455ea7314329dcf79c8354d8109
TLSH
T156110441D774F9B2CC69D24BD8A0378347D07023C0CA95183E619B180EB765E672631F
MD5 SHA1 SHA512 TLSH

Submit Download

aa211c31-effc-498b-ae01-d2ab6ccd3528

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kfuxsl7p.default-release\datareporting\glean\pending_pings\aa211c31-effc-498b-ae01-d2ab6ccd3528
Size 2KB
SHA256 40191782b5f3f6bf5e992043e6897131fd57ec1f139f83bd5b7db30990691dae
MD5 4a2835ef389ddc1fa676d6b4df11845f
SHA1 e0317af17bc93fee164a6d71943d50daa032a1d3
SHA512 7b4b416de769b71b96cdd63766d84a1f5c62a424d58defa55de332512c8305c4784eedfb5126ffc0fe42f09f0c0f743351a567366e47482d5cca7ec256bd3339
TLSH
T11141155C75784DB68DD6F29DD882238E57604A1340C628872F61EF0C8C967DE332A57B
MD5 SHA1 SHA512 TLSH

Submit Download

d6fe7fad-adb3-44a3-ad6d-beaacf6d2a9e

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kfuxsl7p.default-release\datareporting\glean\pending_pings\d6fe7fad-adb3-44a3-ad6d-beaacf6d2a9e
Size 883B
SHA256 9ce75ffb969bf824690c36cf34755cb904b2fd41337703373b5de2c25073c9ad
MD5 35dc8bb832fbf6d9cf193090cc2f9aa1
SHA1 0514fc580b8dc18ddda9d0f05ef589de70e34e32
SHA512 da83bf71f5bce0b3bc7df9873459335b6f346772c78707f82a38fb35a685204923218bd499845456fcd7833ea004e78ebaff28ebe0aa0aeb76fb9cff50ba15d5
TLSH
T18D1127419530B5F2CC78C30BCD553B424FE47123C0CA94183FB55B140DBBA5E532624B
MD5 SHA1 SHA512 TLSH

Submit Download

f1637e58-5bce-4a81-ba20-a86110f0d0c0

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kfuxsl7p.default-release\datareporting\glean\pending_pings\f1637e58-5bce-4a81-ba20-a86110f0d0c0
Size 235B
SHA256 ea10a1aa9773cf9c25ed409ef72e2eb7f08233e4aaa2083826b7a01d768ee36f
MD5 215dfb36c0c601b8d9571198b6a53dc1
SHA1 10ffc850beeedeaa4ee6bc38ca49e25afc73d97d
SHA512 0318180a7eb76fc0bd2e99de7c3d3a5713bc7048cd6934ebe2c1d48d501cf938e3edc7a6d6f8ac3cc2f21c63452179939ee29f4f7b399331796c2e3560d5564d
TLSH
T137D0978068A8677E08240F07B0A069C630855C3326B09820C9514078AEBDDC4421284A
MD5 SHA1 SHA512 TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kfuxsl7p.default-release\prefs.js
Size 6KB
SHA256 92569874b21d45722d3da7c97fd7eaa70dfc6cb82b61536155d4566ed1b7fd9d
MD5 81daea4c2d916fd47e9a34b35f653b75
SHA1 42d53b6b816101a367194124689a100d6ad4adb0
SHA512 016df9118dee0f4b2b044776a7668aba285764e2ce9e45ffee035495a8580a72daccea1ccea5bd10f14f89e7055303d075d7cf602fc1a254b654e050bae61023
SSDEEP 96:xHltPUTUkqGqFQPfaHm1zSD1SSlndv9jQnfyHVd7Bw88P8L4cnsr1z6:3tPHR4faHmC1SSM8Vd7Bw88Bh2
TLSH
T1CBE120789508CFBF64B677ACAC6488716AB2013BB7BF68D650B654C4014CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kfuxsl7p.default-release\prefs.js
Size 6KB
SHA256 d339434692785f18ca03d0cd634b0e9d6719a4a539d934e7681e5540e8cef1fb
MD5 2763c44360ccd02d06e7633417ae1f32
SHA1 69440f5e337bb6c0607052a7f837b9b2bbe5db10
SHA512 965c2cae37b9dc921e8561c8a382d8813ba6e9fb2230a49057b47f20ec0c4c6b5a70a807265c779bbd0ccf6d834c79d54d0548a16ede6a89fe4b48264d670ab5
SSDEEP 96:xHltPUTUkqGqFQPfaiN1zSKuSSlndv9jr2nfyHVd7Bw88P8L4cnsr1z6:3tPHR4faiNjuSS+8Vd7Bw88Bh2
TLSH
T1C5E120789508CB7F64B677ACAC6888315AB2013B77BF68D750B684C4055CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads