Friday, December 30, 2022

Browser Hijacker HLoginAssistant.co LoginAssistantTab

 

https://app.any.run/tasks/ab008b3d-fe3b-44f2-bb5d-d6758f46d571

Browser Hijacker HLoginAssistant

establishes persistence in startup 

hku\***\software\microsoft\windows\currentversion\run\IEXPLORE

url: search.hloginassistant.co

https://urlscan.io/result/8164cfc1-df93-4cd0-b7b9-a605d9e241f8/