Questions tagged [malware-analysis]

The tag has no usage guidance.

3 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
0
votes
0answers
62 views

OCSP hosts. How to tell Malicious OCSP hosts apart

Learning abit about allowed OCSP hosts on Windows 10: I've picked up OCSP requests carried out by CryptSvc pointing towards an OCSP server in Japan. Referring to Microsoft's Win10 Non-enterprise ...
0
votes
0answers
56 views

What does it mean to find a Imphash match?

I have Import Hash (Imphash) matches for some executables and dlls in my environment like teams update.exe, outlook.exe and other microsoft provided dlls apart from non-microsoft dlls too. When I take ...
0
votes
0answers
125 views

Security of Third Party Plugins in Thunderbird

In Thunderbird (a popular open source email client), there is an extension store similar to Mozilla Firefox which adds further functionality to the client. Mozilla has an article detailing the ...