hxxp://xn--z19h[.]com[.]br

Resubmissions

02/06/2026, 11:07

260602-m77chabt7y6

02/06/2026, 11:06

260602-m7vnpscx2n4

Analysis

max time kernel
148s
max time network
79s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
02/06/2026, 11:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://xn--z19h.com.br
Sample260602-m77chabt7y

Score

1^/10

persistence

Malware Config

Signatures

Checks processor information in registry 2 TTPs 18 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1131776342-1023621610-2767477260-1000_Classes\Local Settings	firefox.exe

Suspicious use of AdjustPrivilegeToken 5 IoCs

description	pid	Process
Token: SeDebugPrivilege	4528	firefox.exe
Token: SeDebugPrivilege	4528	firefox.exe
Token: SeDebugPrivilege	4528	firefox.exe
Token: SeDebugPrivilege	4528	firefox.exe
Token: SeDebugPrivilege	4528	firefox.exe

Suspicious use of FindShellTrayWindow 6 IoCs

pid	Process
4528	firefox.exe
4528	firefox.exe
4528	firefox.exe
4528	firefox.exe
4528	firefox.exe
4528	firefox.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4528	firefox.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 4928 wrote to memory of 4528	4928	firefox.exe	83
PID 4928 wrote to memory of 4528	4928	firefox.exe	83
PID 4528 wrote to memory of 5812	4528	firefox.exe	84
PID 4528 wrote to memory of 5812	4528	firefox.exe	84
PID 4528 wrote to memory of 5812	4528	firefox.exe	84
PID 4528 wrote to memory of 2400	4528	firefox.exe	85
PID 4528 wrote to memory of 2400	4528	firefox.exe	85
PID 4528 wrote to memory of 2400	4528	firefox.exe	85
PID 4528 wrote to memory of 2400	4528	firefox.exe	85
PID 4528 wrote to memory of 2028	4528	firefox.exe	88
PID 4528 wrote to memory of 2028	4528	firefox.exe	88
PID 4528 wrote to memory of 2028	4528	firefox.exe	88
PID 4528 wrote to memory of 2028	4528	firefox.exe	88
PID 4528 wrote to memory of 2732	4528	firefox.exe	89
PID 4528 wrote to memory of 2732	4528	firefox.exe	89
PID 4528 wrote to memory of 2732	4528	firefox.exe	89
PID 4528 wrote to memory of 5048	4528	firefox.exe	90
PID 4528 wrote to memory of 5048	4528	firefox.exe	90
PID 4528 wrote to memory of 5048	4528	firefox.exe	90
PID 4528 wrote to memory of 5048	4528	firefox.exe	90
PID 4528 wrote to memory of 2492	4528	firefox.exe	91
PID 4528 wrote to memory of 2492	4528	firefox.exe	91
PID 4528 wrote to memory of 2492	4528	firefox.exe	91
PID 4528 wrote to memory of 2492	4528	firefox.exe	91
PID 4528 wrote to memory of 4352	4528	firefox.exe	92
PID 4528 wrote to memory of 4352	4528	firefox.exe	92
PID 4528 wrote to memory of 4352	4528	firefox.exe	92
PID 4528 wrote to memory of 4352	4528	firefox.exe	92
PID 4528 wrote to memory of 3048	4528	firefox.exe	93
PID 4528 wrote to memory of 3048	4528	firefox.exe	93
PID 4528 wrote to memory of 3048	4528	firefox.exe	93
PID 4528 wrote to memory of 3048	4528	firefox.exe	93
PID 4528 wrote to memory of 4536	4528	firefox.exe	94
PID 4528 wrote to memory of 4536	4528	firefox.exe	94
PID 4528 wrote to memory of 4536	4528	firefox.exe	94
PID 4528 wrote to memory of 4536	4528	firefox.exe	94

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "http://xn--z19h.com.br"
1⤵
- Suspicious use of WriteProcessMemory
PID:4928
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url http://xn--z19h.com.br
  2⤵
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:4528
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2016 -prefsLen 27100 -prefMapHandle 2020 -prefMapSize 270279 -ipcHandle 2104 -initialChannelId {ccd098da-f59f-4ce0-bf93-ad5380da5d51} -parentPid 4528 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4528" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:5812
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2516 -prefsLen 27136 -prefMapHandle 2520 -prefMapSize 270279 -ipcHandle 2528 -initialChannelId {0baafd66-2732-4cc0-a842-0debe4cb4e20} -parentPid 4528 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4528" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:2400
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3784 -prefsLen 25164 -prefMapHandle 3788 -prefMapSize 270279 -jsInitHandle 3792 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3800 -initialChannelId {b7c6acde-3317-492b-9119-8ea85acabc0b} -parentPid 4528 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4528" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:2028
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3952 -prefsLen 27277 -prefMapHandle 3956 -prefMapSize 270279 -ipcHandle 4024 -initialChannelId {498a5e2e-8989-443a-8c9d-1761bd2a5254} -parentPid 4528 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4528" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:2732
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4368 -prefsLen 34776 -prefMapHandle 4372 -prefMapSize 270279 -jsInitHandle 4376 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4384 -initialChannelId {b18bd1e2-9037-4686-be3d-8f8b239b277c} -parentPid 4528 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4528" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:5048
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4880 -prefsLen 34906 -prefMapHandle 4888 -prefMapSize 270279 -ipcHandle 4900 -initialChannelId {b3ad0368-b7fb-4665-8664-e03765f2b450} -parentPid 4528 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4528" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:2492
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5156 -prefsLen 32845 -prefMapHandle 5160 -prefMapSize 270279 -jsInitHandle 5164 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5172 -initialChannelId {ab4bb361-d1ea-4769-8038-00d96ff56031} -parentPid 4528 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4528" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:4352
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5372 -prefsLen 32845 -prefMapHandle 5376 -prefMapSize 270279 -jsInitHandle 5380 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5160 -initialChannelId {782b9259-6f64-423e-8d4c-feea3125bfb2} -parentPid 4528 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4528" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:3048
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5556 -prefsLen 32845 -prefMapHandle 5560 -prefMapSize 270279 -jsInitHandle 5564 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5568 -initialChannelId {9682da15-9d72-4fa9-ada0-123ec761b6f3} -parentPid 4528 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4528" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:4536

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\16loo4mf.default-release\activity-stream.discovery_stream.json
Size 75KB
SHA256 97ee0cfc9309394e0eca561157a68bd565c76e137d33cee7be42bf5507034138
MD5 fd3c1dc1e97570ce0411bed6fc68ba4f
SHA1 90cf80a854d8a4a18c044ec17319f6da253f10f6
SHA512 21acea92c15b10e1ec8528db1bc02ba4f4c2f134f159b47970efefcff8051ca1eb853475fe5eca9f7aae6807736d01f6395ae3efeec5cfd34926ce29fd35d633
SSDEEP 768:MynBlKVDfmzzJkI/W8PHXhXaONKzUlCYO0t0gmwTOjCsUMCKh4yZVB1xem0hoGGZ:XnzzzRjlC2TO2sUm4Q1xem0hHYerc
TLSH
T135731BA362B971BB1BA53BD72C0B759B52E30156E38606CDECEDC91CC1CC654023A5ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16loo4mf.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 c9ba6378a35f3fbc58ce57f274fe110740caedd68cdf4a0872791c19fae1b6d8
MD5 98233f4a143e1d1b2965148b3287d71c
SHA1 a537f24501ec3ccf8b914c43571c0815e65724f0
SHA512 9211a46a5edf90c471a613b678cb1d5b7ef7dab4fc873b4234c66621e9888ec4495b91629327b079b593dd34f7247cf50f183c2e4589b1d7a43551de5c1a421e
SSDEEP 192:l1d66Joz1zgCl6mc0dgOv5zbolZ8lyjSx:jd66Joz1zgC1jFbolZ8lyj
TLSH
T179D1FC68E629563BC818523BCCA61B500F35389AA88E7F1531DC745C2C873DE7ACE17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16loo4mf.default-release\datareporting\glean\events\events
Size 1KB
SHA256 d91f4af6489a850fb0a3d5f7aa27faed3e0bb85dfb7377a4b4d10b3395358591
MD5 466b301728d603060c8f439f89d39436
SHA1 499de39c741a9106a5d30a8a24218b3f7994db7e
SHA512 f909cf12ba78266f772ecc0ce3e5795d4299b1b56b86e8dd92b25880ee8143bf94bdf5a5692e1d6c556746cc02a94f4779c002a78091d0c7c7470ee4f0384436
TLSH
T10921794C3ABD4E2A9987E39D748042DE9355CE0704971D838D43EE8CCEC1AD9316E439
MD5 SHA1 SHA512 TLSH

Submit Download

43ed47f6-0541-4741-92d9-627639494440

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16loo4mf.default-release\datareporting\glean\pending_pings\43ed47f6-0541-4741-92d9-627639494440
Size 235B
SHA256 4fb98b27b1d8495bd0de6c2f8f5f01ea6522e8af69603d2b967a7260df6a044e
MD5 6b8e5141a0b8f44d525a4705ef77c586
SHA1 1d6fffa9362597555edaaa5c4fc54ffd9b6c3aca
SHA512 1149036a12cc79e5369a546c65b40c8125e5c94eba21308221c060be003d4896153ccbc0a2de72b15f8d7a9fce656e2b9d504a1e2ae1f73e18977f4dabf60e1a
TLSH
T15DD097853498332C08241F03F1E07EE234484C3318786810D9A10834AAFD9E4425281B
MD5 SHA1 SHA512 TLSH

Submit Download

81765c2f-af89-4eba-b0f1-8a3fad368932

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16loo4mf.default-release\datareporting\glean\pending_pings\81765c2f-af89-4eba-b0f1-8a3fad368932
Size 235B
SHA256 aeae7720b91a731bc1434c98dcf819499b3d000b47adc088589fe7c6929c5625
MD5 faba6e1d634ed89bd20984a0fed2e8a7
SHA1 e1ccc5cba014808b6e1f88a0228e81a02a04b275
SHA512 4fd5a83585f6c48d35943a5e96593579b4782b846289c5e8d08c2899af9e7939ed2139cfaf9739ab241aa52b6c59d313a0cbd3d79dc4fcfaf91a7c8bca2c3a89
TLSH
T123D0978024D8636E48240F02F0A0BCC630468C3364A06810CA6041B4CBB9AC84112867
MD5 SHA1 SHA512 TLSH

Submit Download

c1412818-9047-4cb0-a4e0-68764b44ec67

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16loo4mf.default-release\datareporting\glean\pending_pings\c1412818-9047-4cb0-a4e0-68764b44ec67
Size 2KB
SHA256 0e1c2e8dcf98de1a54a099a96f7e010fefd70b984cc1af78222408ef17caf17a
MD5 0d301640fdcdc6756a9a6f6ba20e473f
SHA1 c093f27bd81c49d6f6f1f6b5f174ee65c002e3df
SHA512 d5c8adcccaef08dfc0f3f0aad80800a44d03b939709946f3d796fd2fac1b9ca33a322ed9c26de4f757d2d54edc117d3c3f6d8b8fb8710b012b636871a4607825
TLSH
T1E841622835785C779DEBF15DD051339E43A48A1344C228836EA1DF0CCD9A69D33AE62B
MD5 SHA1 SHA512 TLSH

Submit Download

ce1efea3-f47d-46bc-a9cc-cfc8ee360b7d

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16loo4mf.default-release\datareporting\glean\pending_pings\ce1efea3-f47d-46bc-a9cc-cfc8ee360b7d
Size 883B
SHA256 9c3d095102c4112ed8035f303934e8f0dfee92c306a194157774bc0fa0945fd9
MD5 c4abebf797227af262b2d347f4d3a4cd
SHA1 68938d09a574d60a52fd4b266b42c45f20a95352
SHA512 fa5cd520a7d8945207b4ac0c21ce671a25ef2393416670c7b507e17cf00d2b8dfa090bef35edc3c47bdd77df19ff75dd0ab924b2bdfdda16e27a70c296dbaf24
TLSH
T1A0110060D63575B2DC78D39BC56537568BA8712380C654043EE45E184DAA31E63AB30B
MD5 SHA1 SHA512 TLSH

Submit Download

d5a116a7-8428-4db4-b66c-9d237351b3a8

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16loo4mf.default-release\datareporting\glean\pending_pings\d5a116a7-8428-4db4-b66c-9d237351b3a8
Size 16KB
SHA256 840613d4010b1875334a2b764909798f44cd136e12111b6a700d38e8652d64b9
MD5 695a1f8c0d2edb81e81faddf83ae5b86
SHA1 e48c62bbd128387051fadbdbae866fb71e88fdd1
SHA512 76bb7b25dfa53cf48a9400815b1ad4d1168828bcf8c550dec296199b76c0697f7d80426a8fd45c1f6874e45862cec78f635dd6e8f82f167f54c81383309ff1a9
SSDEEP 192:6h3+7buYT+e6KKzx7ZxK3/jw3yETDbNgwvoKJkUOBizxZl6pm2Lt1LS4gmh0muBR:NbuYT+e6KKl7bKslugjGacU4O61pwz
TLSH
T10672EA566460457A8251E7A9D4FCBFC3E2F528CF4C419FCA9BE47E086DDE0AE112384B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dd7953b6-10d8-4161-bb0b-81d83c2d21f7

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16loo4mf.default-release\datareporting\glean\pending_pings\dd7953b6-10d8-4161-bb0b-81d83c2d21f7
Size 886B
SHA256 2797c7c32ce1c14893025919542c2fb5a2a40d2b7aaff40ed5c7eaf1299d7642
MD5 307485fa8adcb9cf9109c486dc1c3e55
SHA1 d25fbdbda3607422545b6d9c85e5e039f68c018a
SHA512 e87e5a0f3f321d0ac9d8ad3bccb73f4321e4bb10163210600c2fa2af3cfae7009cf5eaef2c3e283514ef6e1cf51539ebf443c2492bc4733c57a6a1434131f593
TLSH
T17F112F50D675B9B2CC38F38BD4A5B7538BE8712380C629047EE85B084DFA21E63A7307
MD5 SHA1 SHA512 TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16loo4mf.default-release\prefs-1.js
Size 7KB
SHA256 d3bb4206251357d232788d8be2ee9f21a9ac820209d66567006d6969ed91e80a
MD5 1a2abe0336d0d07690947e716261b035
SHA1 8a4c9cebca48afc90f9c5c5f610df9cfc03fc6bf
SHA512 513c2d8d20ec3a8e0ab67d1bb015824a58bb2201479a0b71ef04e24f87484313ff780eeec324fe942404e8dbbbe6fe34c85638569afe13ed4e782b5746ae266a
SSDEEP 192:Swkn8S6GRMfRuPS5SSD9MSKHC4mXxBw88H2:jLfKLOwm
TLSH
T192F11E7C9404CB6FB5B637ACAC6489305AB2423BB6BF68D700B598C4450CF3841F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16loo4mf.default-release\prefs.js
Size 6KB
SHA256 6fea3b3a1e61cbfaef09e2cccafc9a36f7177a5b1f606c260aae6a073b474e4f
MD5 13ef1e5f4801f117cd3bd4572aade004
SHA1 90bdc86aa140e01e78ae73aa928dcbe7fe32d914
SHA512 4dc45e5beaf207221d35d7a1c18996e0a46764e88f67f5ed8cd8e36268e2ed52824d4c43e4d5f195133dafedbfd402f44f5351b26686b907dd98cb02f4b44388
SSDEEP 96:xHIUTUrqGqMfYEFY1zSdSSlNdv9jqnqTRH4BnSWBw88P8L4cnlKSx:SWRMfRFYUSSD9MSWBw888
TLSH
T1EFE1317890088B7F75B677ACAC688C715AB2013BB7BF68C650B544C4454CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\16loo4mf.default-release\prefs.js
Size 6KB
SHA256 c0fe6688149ee94371cf13e91f178b10a6fed215a6e09ad55c4a1dc76e677ddf
MD5 13ed01b6b2d15cabd36fd6da6b67f1e9
SHA1 6b62185618aa1a4d49ba0126dcb2595505bcc56d
SHA512 313e49b4aafaf3549d0e3e93d2e770d3b2852b90782bcacd25dc73ec9bdcb94b90d65f495cc2d38123c348041f0f2403412f994093fd933f836f297e9bb3c1cd
SSDEEP 96:xHIUTUrqGqMfYEuP1zSw5SSlNdv9jqnqTRH4BnSWBw88P8L4cnlKSx:SWRMfRuPd5SSD9MSWBw888
TLSH
T16FE1307894088B7F75B677BCAC6888715AB2413BB7BF68C650B944C4054CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads