: Upon execution, the malware attempts to extract saved passwords, browser cookies, and autofill data from web browsers.

: .7z archive (used to bypass basic email scanners).

: Most major antivirus engines (Microsoft Defender, Bitdefender, Kaspersky) flag these files under names like Trojan:Win32/Stealer , Spyware.PasswordStealer , or Generic.Malware/Suspicious . Recommended Actions

: It scans for local cryptocurrency wallet files and browser extensions to exfiltrate private keys.