25a46afb4c3acbbb0df98e6cc978df513f7399cb949e94ea78c6e286f461dee0

Resubmissions

25/08/2026, 15:25

260825-st2sravbng

25/08/2026, 15:23

260825-ssy1ga1wdz8

25/08/2026, 15:22

260825-sr8hhsvbke3

25/08/2026, 15:20

260825-sq1raahf853

Analysis

user interaction
yes
max time kernel
15s
max time network
20s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
25/08/2026, 15:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Syntex Hwid Spoofer.zip
Size 9.3MB
Sample260825-sr8hhsvbke
SHA256 25a46afb4c3acbbb0df98e6cc978df513f7399cb949e94ea78c6e286f461dee0
MD5 7cedbcaf0373ee30f74a80882ede5598
SHA1 0415543a31e9e8230ac9004e5ec4cce85ba92621
SHA512 902d61a5253675eccded55fa2166815654090d960d0fbd906ba92273dfc08bce0b5604b10e817c2714e75d0880f123fbe6109de5e966eb76edea6435a1aabab9
SSDEEP 196608:8KOe1HP/ZEZz1JrEbGzs50a3sskbY3T++zYMH12:8KBPxYz1BE6u0ac3AzFH12
TLSH
T1D9A633FD134DC9C7FBA24A1F6F19C9E6FB2149409925A529C7DCE2C4B7029DC7CA2188
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

persistence

Malware Config

Signatures

Checks processor information in registry 2 TTPs 16 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2058276091-3280583803-376660292-1000_Classes\Local Settings	firefox.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	3040	firefox.exe
Token: SeDebugPrivilege	3040	firefox.exe

Suspicious use of FindShellTrayWindow 5 IoCs

pid	Process
3040	firefox.exe
3040	firefox.exe
3040	firefox.exe
3040	firefox.exe
3040	firefox.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3040	firefox.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 2948 wrote to memory of 3040	2948	firefox.exe	93
PID 2948 wrote to memory of 3040	2948	firefox.exe	93
PID 3040 wrote to memory of 1160	3040	firefox.exe	94
PID 3040 wrote to memory of 1160	3040	firefox.exe	94
PID 3040 wrote to memory of 1160	3040	firefox.exe	94
PID 3040 wrote to memory of 2132	3040	firefox.exe	95
PID 3040 wrote to memory of 2132	3040	firefox.exe	95
PID 3040 wrote to memory of 2132	3040	firefox.exe	95
PID 3040 wrote to memory of 2132	3040	firefox.exe	95
PID 3040 wrote to memory of 4712	3040	firefox.exe	97
PID 3040 wrote to memory of 4712	3040	firefox.exe	97
PID 3040 wrote to memory of 4712	3040	firefox.exe	97
PID 3040 wrote to memory of 4712	3040	firefox.exe	97
PID 3040 wrote to memory of 2528	3040	firefox.exe	98
PID 3040 wrote to memory of 2528	3040	firefox.exe	98
PID 3040 wrote to memory of 2528	3040	firefox.exe	98
PID 3040 wrote to memory of 1068	3040	firefox.exe	99
PID 3040 wrote to memory of 1068	3040	firefox.exe	99
PID 3040 wrote to memory of 1068	3040	firefox.exe	99
PID 3040 wrote to memory of 1068	3040	firefox.exe	99
PID 3040 wrote to memory of 5540	3040	firefox.exe	100
PID 3040 wrote to memory of 5540	3040	firefox.exe	100
PID 3040 wrote to memory of 5540	3040	firefox.exe	100
PID 3040 wrote to memory of 5540	3040	firefox.exe	100
PID 3040 wrote to memory of 5592	3040	firefox.exe	101
PID 3040 wrote to memory of 5592	3040	firefox.exe	101
PID 3040 wrote to memory of 5592	3040	firefox.exe	101
PID 3040 wrote to memory of 5592	3040	firefox.exe	101
PID 3040 wrote to memory of 5600	3040	firefox.exe	102
PID 3040 wrote to memory of 5600	3040	firefox.exe	102
PID 3040 wrote to memory of 5600	3040	firefox.exe	102
PID 3040 wrote to memory of 5600	3040	firefox.exe	102
PID 3040 wrote to memory of 5624	3040	firefox.exe	103
PID 3040 wrote to memory of 5624	3040	firefox.exe	103
PID 3040 wrote to memory of 5624	3040	firefox.exe	103
PID 3040 wrote to memory of 5624	3040	firefox.exe	103

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,"C:\Users\Admin\AppData\Local\Temp\Syntex Hwid Spoofer.zip"
1⤵
PID:2164

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2948
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  - Modifies registry class
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:3040
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1992 -prefsLen 27100 -prefMapHandle 1996 -prefMapSize 270279 -ipcHandle 2084 -initialChannelId {f98e3332-c972-41ee-a038-f83a85a1597d} -parentPid 3040 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3040" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:1160
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2444 -prefsLen 27136 -prefMapHandle 2448 -prefMapSize 270279 -ipcHandle 2468 -initialChannelId {a92d2e02-a864-4086-8e8d-933e6cd93e4d} -parentPid 3040 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3040" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:2132
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3856 -prefsLen 27277 -prefMapHandle 3860 -prefMapSize 270279 -jsInitHandle 3864 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3872 -initialChannelId {df9e1962-1020-407f-968a-8ff7578a74a6} -parentPid 3040 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3040" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:4712
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4024 -prefsLen 27277 -prefMapHandle 4028 -prefMapSize 270279 -ipcHandle 4044 -initialChannelId {19ff5dd1-7982-4f69-ae1a-5320aa883489} -parentPid 3040 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3040" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:2528
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4408 -prefsLen 34776 -prefMapHandle 4412 -prefMapSize 270279 -jsInitHandle 4416 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2608 -initialChannelId {21a7ce6f-8b58-4f23-9fa5-4e24ad97691f} -parentPid 3040 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3040" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:1068
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 2652 -prefsLen 35013 -prefMapHandle 4840 -prefMapSize 270279 -ipcHandle 3192 -initialChannelId {9d2b0cf4-712f-4ee3-beb6-adc60548f137} -parentPid 3040 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3040" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:5540
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5116 -prefsLen 32900 -prefMapHandle 1656 -prefMapSize 270279 -jsInitHandle 5096 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5128 -initialChannelId {e8c814b1-f44b-4ccb-aecf-8774f873b425} -parentPid 3040 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3040" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:5592
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5156 -prefsLen 32900 -prefMapHandle 5160 -prefMapSize 270279 -jsInitHandle 5164 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5172 -initialChannelId {cd6ec57c-61de-4f1c-91b6-ef33d73c33bc} -parentPid 3040 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3040" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    PID:5600
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5504 -prefsLen 32952 -prefMapHandle 5508 -prefMapSize 270279 -jsInitHandle 5512 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5520 -initialChannelId {fccd372e-fbb3-460d-913c-3349a82860c5} -parentPid 3040 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3040" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:5624

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kfuxsl7p.default-release\datareporting\glean\db\data.safe.tmp
Size 5KB
SHA256 ec8b5857efeceb4f8d4d247b764746a220b3ce98e16974e722d419c00d2a9f2d
MD5 4c81d44c186a85f0b8c7366d7258bea9
SHA1 6b11be0e80bb5256ed152f2402adb4858eeaf111
SHA512 c2500b3a4737cd335368f8c35118ec732085afc01f3aaa0b9b26d6f0bf1a4df3e6378aa9e55c7ccb4b6367c87ade64acb8f1827bed9624d8fbcc8ec921af0365
SSDEEP 96:dZuFZ2FsFmFPF+/dd66Joz1zgClKtmc0d/UUpSdF95/7bkW6BrcEJmyUR6fWI:/w1d66Joz1zgCl6mc0d3Ov5zboBbJmy9
TLSH
T1DAC1FF58F639863BC444023BCCB51F501F76385BA88E7F2931AC641D2D962CE7A8D17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kfuxsl7p.default-release\datareporting\glean\db\data.safe.tmp
Size 3KB
SHA256 98cf1586e0570a4f36eea3836b753bddda0c1fccea53f24d8e5fe47ecb8e40ed
MD5 93509e1ef72979ac05eed60157a3f0be
SHA1 80ddf886149757699e61c124e3cc7428533b2cf6
SHA512 154ff969bb9dcfaecf7f37da5ff18cfb77e09f140b10af08a7d3780093bcc2097555e1dfa861eb97bfffd4c3ff68c1b3b5d2e0acd0f142f64453cc13cb6feb53
TLSH
T16761B899F2288A3FE484413ADC965F412F307462A8AF7F2A34AC604D1E572CD778D07D
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kfuxsl7p.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 a242d809a4401b2ade2984a5667dea2c8357826e8e3cb15704612022ef379b45
MD5 5fd11ba516977a13d605c979921d5cdf
SHA1 8f7f480cd8e3bb745877e08450eecb81e2bf73e4
SHA512 12e37f0f6f0e8428eef92bb9d2ac19f439b0a92c7b33e43368242205da46a44517a18f96b822e19c9fa7fc4bd780e1852e18c149124704406ed6a95d4c21f486
SSDEEP 192:/w1d66Joz1zgCl6mc0dyOv5zboAZZJmyjslMo:Cd66Joz1zgC1jnbogZJmyj8
TLSH
T1B0E1FFA8E628863FC444027BCCA51F410F3A399BD84E7F2935ADA41C2D572DD768E17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kfuxsl7p.default-release\datareporting\glean\events\events
Size 1KB
SHA256 1f8e7965f3a2d496549782ef399e581d34d8ff9482fda8a720438b6c183109c9
MD5 23a6be86b195c95f8c17ac1c96563cc5
SHA1 567ae97300253b7e3114979b13a057f81bebb88d
SHA512 794d004489134ed0c4858c6d331dff6a81edd6f9da30b0c383eed712efe37eb98e7b64196365220aa9fe5295904f193b454090fe5c7ab36afa94d642a4438cae
TLSH
T116213A5C39B84D2AA88AE39C7441168F53558E4788871D571D12FECDCEE2AD931AE43C
MD5 SHA1 SHA512 TLSH

Submit Download

3d070bac-b424-474e-8187-0a52ecbe14aa

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kfuxsl7p.default-release\datareporting\glean\pending_pings\3d070bac-b424-474e-8187-0a52ecbe14aa
Size 2KB
SHA256 a48bbc03fe1b3ca97d32e3d80662acd04519f9650908de99cd4ee1a1e09a62aa
MD5 fcb53fd2fbc641c4db0cfecb1c820947
SHA1 beace1eb8ab30a013e48d2fbdcd1ab4beaaab135
SHA512 9c2bbb60bf444049e68ac52ef42306bfe496dae3f4cddc57854361e583d717f95f5a6deaaab2d76716ead8d3a2bd2918c492aea0c8e92504e866a39f7b5641c0
TLSH
T19041535C74784CB79CD6E28DE883338E67708A1300C228C32D56DF0C8CA669D236E57B
MD5 SHA1 SHA512 TLSH

Submit Download

629c21a8-3828-4dc5-8288-fd0a1c912655

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kfuxsl7p.default-release\datareporting\glean\pending_pings\629c21a8-3828-4dc5-8288-fd0a1c912655
Size 15KB
SHA256 95f018e4b6c8b4f3991dd86e3a0f6d4d6998b28b902dcce0187ab85d6ff117da
MD5 38ed1911260497a9d35690d96dbafd0f
SHA1 45926a2fe544bff9cfc1b2c151344d2288528b43
SHA512 d8eb2e25ab18ea01e9673a07284c0ea56dfde0d0ae8aec9f4d05484a6e8eb90d28f9b62a3942bc2ee9d066333f243f3950c55b20969473d40232f9cdcc0eb160
SSDEEP 384:WiKpUQ3rPDpF4N64XDxlVffUK7ZQyF89T:WAULDj4N9UcOT
TLSH
T1DD72EA16286045BE8651E368D8F8BFC3E1F538CB4C419FCE9BE47D0829EE09D112794B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6f5c7520-5922-461a-bf52-e1cab1598566

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kfuxsl7p.default-release\datareporting\glean\pending_pings\6f5c7520-5922-461a-bf52-e1cab1598566
Size 883B
SHA256 c7b039e31d9c19c5e71e69306ad430843ba9afae8943dfd6432144a3546fc360
MD5 dfb592750495c98b332bb78854944934
SHA1 499115f0dd1ea41bd126c7a4ae42ebaeefab9ac6
SHA512 bc00cc1f8094ad360e74c4a0c93c8cd5ee56ded5d8ac02289a73302ad33b70146f50ec8b54e47303d5950c397a804184efcc8f1c330e083dbc311262fdb3b2ed
TLSH
T1AA112341D534BDF2CC68820BCCA53B425FE46123C0CA942C3DB69B180D7A65DA35A25B
MD5 SHA1 SHA512 TLSH

Submit Download

77dbf67c-5990-4963-acbd-48c14c743bb3

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kfuxsl7p.default-release\datareporting\glean\pending_pings\77dbf67c-5990-4963-acbd-48c14c743bb3
Size 235B
SHA256 5ecb348c0bac1595ef82220f5d003f505b27f4cc025e6c59a4aa0f27412a4e24
MD5 d24c7aa2f13e3a9a454d40f4ac44d1c0
SHA1 73c03454b5340b01db1410e4949a4c053a71ec7e
SHA512 e1f4e88907aa9dcfea47e04aaceaf3013744e9c85674d6b497bff9c898caa8ae5437b0e4ff1f564ec545930482b161b6c8025003da378c8e7d6b3f1e5bb12ae5
TLSH
T174D097802898672E08202F0BF0B028C232988C3718E0E890D96141B889FDAC84571927
MD5 SHA1 SHA512 TLSH

Submit Download

e202be4f-2b85-4396-b0cd-5e6ec2bc7119

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kfuxsl7p.default-release\datareporting\glean\pending_pings\e202be4f-2b85-4396-b0cd-5e6ec2bc7119
Size 235B
SHA256 3c9d56ac940dd39edb31499d94a22c8162a07f86da108464188fe1e661a75460
MD5 c93e706580e42d8f1bc0b12bbe930fd2
SHA1 f68b425c3e2ecc3f0837fe89ee40150c5e4bd190
SHA512 07e8818d23e3e910da12e5d13cb9444550affd36a59ae4ca74db80295a00a36e7c1897408f53582a5aa09115807e1a929b3c52e08326b3cf2c017d0c30d951a6
TLSH
T137D097801898A3AE08140F02B0A03AC670988C336474A8109A914BB4AEFDDC441A2C16
MD5 SHA1 SHA512 TLSH

Submit Download

edcb6b30-ff10-4222-bd51-111683bd2bcb

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kfuxsl7p.default-release\datareporting\glean\pending_pings\edcb6b30-ff10-4222-bd51-111683bd2bcb
Size 886B
SHA256 b61893108bdaaf4ee42af9d2945f9aab92a38c980f4d0251349a4221940f9327
MD5 4ab70f011b059fbf125cefed8e7a8404
SHA1 dcfa69c92de719e47644b889a7b575998f12179c
SHA512 54b759d34c6df8c0bd6d455ba910ac0f8cd05761eca257caa7a7082604c868519016f0f807b5481efb506ace349b8c05542b73c2d3feaf4dc979a66f556e00ab
TLSH
T14B1123818AB5B9F2CC64824B9CE07B8257D0B433C0CA5C2C7D618B2C0EFA55EA357317
MD5 SHA1 SHA512 TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kfuxsl7p.default-release\prefs.js
Size 6KB
SHA256 28ca16edced3d9edefc4cdf48d74e93c23742b359cc095d76fe19372fc0ba22b
MD5 b0346e97228f130d53c3329ececa50d1
SHA1 48ccaac7fdd5e5dcef65bf40d4ab5a9083988cb7
SHA512 dbe15ffc0bacff0587ac8ff6a51709f110d1728e5298837e8ed590a4a571442745598b34222b31529980166f83cabc6baf644ea37d4bc1bda405726d56b10e6d
SSDEEP 96:xHltPUTUkqGqFQPfaHm1zSnvSSlndv9jKnfyHVd7Bw88P8L4cnsr1z6:3tPHR4faHmySSS8Vd7Bw88Bh2
TLSH
T12BE130389508CB7F64B677ACAC648C315AB2013BB7BF68D650B694C4015CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kfuxsl7p.default-release\prefs.js
Size 6KB
SHA256 59724a98df45ad0735f9c1d5333e29b703abf3132222fc402827b110319bc668
MD5 838b2b242aa18e8a804ba29fb3f86ca8
SHA1 3140f56614a077ceb0154519676bb2732c527ac6
SHA512 fbefb45b7f2e2f0282941313b2dffed2de8af1ff830416224693a3668f1685c59439c39c82ba3ccbc1088ded719e899ea707c1ba3ba8c20a287869263c1ec8ea
SSDEEP 96:xHltPUTUkqGqFQPfakB7N1zS1SSlndv9jKnfyHVd7Bw88P8L4cnsr1z6:3tPHR4fakB7N0SSS8Vd7Bw88Bh2
TLSH
T174E130789508CB7F64B677ACAC648C315AB2013BB7BF68D650B694C4015CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads