Yara Rule Analyzer and Statistics Generator

DumpBrowserSecrets is a publicly documented post-exploitation tool that harvests credentials and session data from major browsers (Chrome/Edge/Brave via App-Bound Encryption bypass, Opera/Vivaldi via DPAPI, and Firefox via NSS). It uses Early Bird APC DLL injection into a headless Chromium process to access the IElevator COM interface and decrypt app_bound_encrypted_key, implements multiple operational evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication), and outputs structured JSON suitable for red-team or malicious reuse; detection opportunities and mitigations are discussed.