Analysis

  • max time kernel
    118s
  • max time network
    115s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    12/10/2026, 23:32

General

  • Target
    change.html
  • Size 1KB
  • Sample261012-3jkrlayy3n
  • SHA256 b5aa365433a2618ca1ba47a456e5b51e1e323b9eb2da68ee54400eacf2f4c57d
  • MD5 SHA1 SHA512 TLSH
Score
1/10

Malware Config

Signatures

  • Checks processor information in registry 2 TTPs 19 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 6 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 36 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "C:\Users\Admin\AppData\Local\Temp\change.html"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1196
    • C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url C:\Users\Admin\AppData\Local\Temp\change.html
      2⤵
      • Checks processor information in registry
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:4644
      • C:\Program Files\Mozilla Firefox\firefox.exe
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1960 -prefsLen 27097 -prefMapHandle 1964 -prefMapSize 270279 -ipcHandle 2040 -initialChannelId {de8175ac-778b-4774-a17c-24f92bdbfec8} -parentPid 4644 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4644" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
        3⤵
          PID:5648
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2424 -prefsLen 27133 -prefMapHandle 2428 -prefMapSize 270279 -ipcHandle 2304 -initialChannelId {92eec573-53aa-4464-b5fe-5402f5c4a517} -parentPid 4644 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4644" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
          3⤵
            PID:5796
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3984 -prefsLen 27274 -prefMapHandle 3988 -prefMapSize 270279 -jsInitHandle 3992 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4000 -initialChannelId {3158e88d-e596-4e96-ab16-b6c69754e8f3} -parentPid 4644 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4644" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
            3⤵
            • Checks processor information in registry
            PID:3356
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4140 -prefsLen 27274 -prefMapHandle 4144 -prefMapSize 270279 -ipcHandle 4212 -initialChannelId {45753ea9-3770-48a9-8ec3-f5ab60f40889} -parentPid 4644 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4644" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
            3⤵
              PID:3656
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4492 -prefsLen 34773 -prefMapHandle 4496 -prefMapSize 270279 -jsInitHandle 4500 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2892 -initialChannelId {5c28404e-d85f-4018-ab5f-e2441886617f} -parentPid 4644 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4644" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
              3⤵
              • Checks processor information in registry
              PID:3240
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 1644 -prefsLen 35010 -prefMapHandle 4432 -prefMapSize 270279 -ipcHandle 2872 -initialChannelId {2e492206-77bb-4d95-839f-6ef45751101c} -parentPid 4644 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4644" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
              3⤵
              • Checks processor information in registry
              PID:3688
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2728 -prefsLen 32952 -prefMapHandle 5300 -prefMapSize 270279 -jsInitHandle 5304 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2736 -initialChannelId {7d87cfaf-2495-4fa6-b7f3-dfa4218d087a} -parentPid 4644 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4644" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
              3⤵
              • Checks processor information in registry
              PID:3536
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5320 -prefsLen 32952 -prefMapHandle 5324 -prefMapSize 270279 -jsInitHandle 5328 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2732 -initialChannelId {4ffffb1d-b965-46a1-a0ab-40d82bafad55} -parentPid 4644 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4644" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
              3⤵
              • Checks processor information in registry
              PID:6132
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3112 -prefsLen 32952 -prefMapHandle 3116 -prefMapSize 270279 -jsInitHandle 3120 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5656 -initialChannelId {32dbdaef-564d-44c5-adb9-6bd69143de41} -parentPid 4644 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4644" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
              3⤵
              • Checks processor information in registry
              PID:3480

        Network

              MITRE ATT&CK Enterprise v16

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              activity-stream.contile.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\activity-stream.contile.json
              • Size 4KB
              • SHA256 0b1705171655c0cf61ec151af6732f9de36b6ba0695b97e2e681755b226c41a8
              • MD5 SHA1 SHA512 SSDEEP TLSH

              activity-stream.discovery_stream.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\activity-stream.discovery_stream.json
              • Size 74KB
              • SHA256 f871683ccbe0745fc618c486a3769fd8827cfbffa16848a660100a371fbffff7
              • MD5 SHA1 SHA512 SSDEEP TLSH

              activity-stream.discovery_stream.json

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\activity-stream.discovery_stream.json
              • Size 74KB
              • SHA256 6f3d3a19f5944c3e3d1b98f16d925ee890e210357c7b5bec9f15e3ecd18a56ee
              • MD5 SHA1 SHA512 SSDEEP TLSH

              E9338C5CCF1E2FCF149487351399F198A4F9FCD6

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\cache2\entries\E9338C5CCF1E2FCF149487351399F198A4F9FCD6
              • Size 16KB
              • SHA256 ff25bdeee3817009b14ea709422f28ae3012f26463c9ffcdbbe487a378249d6f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              webext.sc.lz4

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\startupCache\webext.sc.lz4
              • Size 104KB
              • SHA256 f3399a2b920d7465387a92b855df1f25e48b82bb0a5826f372de14118c7f3952
              • MD5 SHA1 SHA512 SSDEEP TLSH

              webext.sc.lz4

              • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\ej9v93ms.default-release\startupCache\webext.sc.lz4
              • Size 105KB
              • SHA256 c7f123a0dc5c9f82b2fdad7583c0087604b0344355b37b98852af22f58f7b8c3
              • MD5 SHA1 SHA512 SSDEEP TLSH

              tmpaddon

              • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
              • Size 11KB
              • SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
              • MD5 SHA1 SHA512 SSDEEP TLSH

              tmpaddon

              • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
              • Size 502KB
              • SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
              • MD5 SHA1 SHA512 SSDEEP TLSH

              tmpaddon

              • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
              • Size 21.6MB
              • SHA256 7b81444b063f81e77c527c5589e86836cc2f7328deb2772300ccc7dc9e2510c3
              • MD5 SHA1 SHA512 SSDEEP TLSH

              addonStartup.json.lz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\addonStartup.json.lz4
              • Size 4KB
              • SHA256 e1938be19ecebbfb910548aad049ea064289e1292232ffd9fac5a17b9de63abc
              • MD5 SHA1 SHA512 SSDEEP TLSH

              store.json.mozlz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\crashes\store.json.mozlz4
              • Size 66B
              • SHA256 078648c042b9b08483ce246b7f01371072541a2e90d1beb0c8009a6118cbd965
              • MD5 SHA1 SHA512 TLSH

              data.safe.tmp

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\db\data.safe.tmp
              • Size 29KB
              • SHA256 cf854cdd473c1ed60666741f6dce9f7edf5cab307d12516cbe5e1819ab7a1bb4
              • MD5 SHA1 SHA512 SSDEEP TLSH

              data.safe.tmp

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\db\data.safe.tmp
              • Size 28KB
              • SHA256 2b0874c85f3ff94fc4addbeb07775792d6372841470e1f3ed276f198499821c7
              • MD5 SHA1 SHA512 SSDEEP TLSH

              events

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\events\events
              • Size 1KB
              • SHA256 2f6cac4ee86f745aa62359301bea16df73c8789ec6772fc45cffa90027765736
              • MD5 SHA1 SHA512 TLSH

              events

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\events\events
              • Size 2KB
              • SHA256 c5ba17d98a7706bfce625eac5aa99043423d47089bd6da25ab719f68967dfbfc
              • MD5 SHA1 SHA512 TLSH

              0054abe2-1f13-424f-b1a1-37a0d1534700

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\pending_pings\0054abe2-1f13-424f-b1a1-37a0d1534700
              • Size 235B
              • SHA256 fbc7f09d3db3461b96f43f6899c40f018390303b608776f6fd6eb4238645a49b
              • MD5 SHA1 SHA512 TLSH

              025bb7d8-a950-42c6-a1a1-45539e5089c9

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\pending_pings\025bb7d8-a950-42c6-a1a1-45539e5089c9
              • Size 886B
              • SHA256 1644fcc12ff191d0cb67034a3e7a9cdb7f54fb8a95f3fb4e6ae7d89751de259c
              • MD5 SHA1 SHA512 TLSH

              3d5aacc7-d3ab-4ca0-b27c-dce9543a65e8

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\pending_pings\3d5aacc7-d3ab-4ca0-b27c-dce9543a65e8
              • Size 2KB
              • SHA256 2ba190777be8fb931217b2e7a3285030d31e06581d84a6624251a77471d5457d
              • MD5 SHA1 SHA512 TLSH

              41fdc04d-50c7-48c3-9c67-1ac8b6e39146

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\pending_pings\41fdc04d-50c7-48c3-9c67-1ac8b6e39146
              • Size 871B
              • SHA256 f96d780b29daf33f5c157bbd2fad0923652f80844426d433113070a295681405
              • MD5 SHA1 SHA512 TLSH

              8f82d86c-4921-4d36-bc9c-56bf23f6c90b

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\datareporting\glean\pending_pings\8f82d86c-4921-4d36-bc9c-56bf23f6c90b
              • Size 235B
              • SHA256 e584260495a7731d50d1b1dc22cca46c82a36de802a14e31997c46c183b7e3fa
              • MD5 SHA1 SHA512 TLSH

              extension-preferences.json

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\extension-preferences.json
              • Size 942B
              • SHA256 aecfc11c0db969b2c79da2144415a8859c77d66fbfc37ca4924ac58a0ff29834
              • MD5 SHA1 SHA512 TLSH

              extensions.json

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\extensions.json
              • Size 14KB
              • SHA256 87ec1ca454934723f1cf341eacdea73203f06130911d9bae7d7a1b923d06577f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              gmpopenh264.dll

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
              • Size 1.1MB
              • SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
              • MD5 SHA1 SHA512 SSDEEP TLSH

              gmpopenh264.info

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
              • Size 116B
              • SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
              • MD5 SHA1 SHA512 TLSH

              LICENSE

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\gmp-widevinecdm\4.10.3050.0\LICENSE
              • Size 473B
              • SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
              • MD5 SHA1 SHA512 TLSH

              manifest.json

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
              • Size 1002B
              • SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
              • MD5 SHA1 SHA512 TLSH

              widevinecdm.dll

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
              • Size 21.6MB
              • SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
              • MD5 SHA1 SHA512 SSDEEP TLSH

              widevinecdm.dll.sig

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll.sig
              • Size 1KB
              • SHA256 c5f50bed6afd38490baca2ce8e8fdd1a39849c9f0dc06478a8a2e9226526607b
              • MD5 SHA1 SHA512 TLSH

              prefs-1.js

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\prefs-1.js
              • Size 6KB
              • SHA256 dbd48a1429c1d1cf4d4ee07839948ec6271662bd08bd3a30a9c0d7ef86e4c1a7
              • MD5 SHA1 SHA512 SSDEEP TLSH

              prefs.js

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\prefs.js
              • Size 6KB
              • SHA256 5c71eecba14efbfb57dd2fee5663bca33506552a9d70980ffa6cab88825765fd
              • MD5 SHA1 SHA512 SSDEEP TLSH

              prefs.js

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\prefs.js
              • Size 6KB
              • SHA256 0828bd0c249a5d85a96c3da861767c46e52ea05eb2c6b6de0ecf63a72c8c438c
              • MD5 SHA1 SHA512 SSDEEP TLSH

              prefs.js

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\prefs.js
              • Size 8KB
              • SHA256 0457118cb8ecf4a7a08c41f9ab8d24a6384750ea504e9261eb9703503caaef12
              • MD5 SHA1 SHA512 SSDEEP TLSH

              prefs.js

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\prefs.js
              • Size 6KB
              • SHA256 3d00171f4d503f6d5331a0645b68dba5d2f54604ec645b7cf094838400ead417
              • MD5 SHA1 SHA512 SSDEEP TLSH

              sessionCheckpoints.json

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\sessionCheckpoints.json
              • Size 90B
              • SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
              • MD5 SHA1 SHA512 TLSH

              sessionCheckpoints.json

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\sessionCheckpoints.json
              • Size 53B
              • SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
              • MD5 SHA1 SHA512 TLSH

              recovery.jsonlz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\sessionstore-backups\recovery.jsonlz4
              • Size 1KB
              • SHA256 378bc407b504912a7326a886be1ff264ec2b801763abd65dc85fe644f4233b07
              • MD5 SHA1 SHA512 TLSH

              recovery.jsonlz4

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\sessionstore-backups\recovery.jsonlz4
              • Size 1KB
              • SHA256 025d8707f1b8eb2a8401365bee85b6056dfc2802c95f3396a06fdd21901fa807
              • MD5 SHA1 SHA512 TLSH

              3870112724rsegmnoittet-es.sqlite

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
              • Size 5.5MB
              • SHA256 65b4d24f58bb442333b1ffed92e0c842ffef773655fbf32f4afab3c1ac4b5c42
              • MD5 SHA1 SHA512 SSDEEP TLSH

              3870112724rsegmnoittet-es.sqlite

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
              • Size 7.6MB
              • SHA256 bc303175ea5e359f329c8884d19138ddb261f7720971a94071d2cf04b329cc96
              • MD5 SHA1 SHA512 SSDEEP TLSH

              3870112724rsegmnoittet-es.sqlite

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
              • Size 7.6MB
              • SHA256 3a28aed0d79a9044f0f71309f845daea5f0e5fbdf9d1286a1b3882e87ad1ed96
              • MD5 SHA1 SHA512 SSDEEP TLSH

              3870112724rsegmnoittet-es.sqlite

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
              • Size 7.6MB
              • SHA256 f3074501b3edb3b899f9819bd196ad83424608fe1926f0953ea0ac39a2ec4cee
              • MD5 SHA1 SHA512 SSDEEP TLSH

              3870112724rsegmnoittet-es.sqlite

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
              • Size 7.6MB
              • SHA256 23bdcf8ef06b280f2332d1039499a9ce59885b5733fc1fd90cfd1f229d6eff49
              • MD5 SHA1 SHA512 SSDEEP TLSH

              3870112724rsegmnoittet-es.sqlite

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
              • Size 7.6MB
              • SHA256 b26c8f6b30f167a688910f847ff703d30dcf22c357f21a17deb66756952a5dcc
              • MD5 SHA1 SHA512 SSDEEP TLSH

              targeting.snapshot.json

              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\ej9v93ms.default-release\targeting.snapshot.json
              • Size 3KB
              • SHA256 506037a8ca0cba967ce59a331510d9f8b06f4568c7065d0b41b137a4e1adb50c
              • MD5 SHA1 SHA512 TLSH