Resubmissions

14/10/2026, 03:58

261014-ej1aaaft3y3

14/10/2026, 03:46

261014-eb3qfafs3t8

Analysis

  • user interaction
    yes
  • max time kernel
    899s
  • max time network
    895s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    14/10/2026, 03:58

General

  • Target
    Blox-Fruit-Hack-Auto-Farm-main.zip
  • Size 2KB
  • Sample261014-ej1aaaft3y
  • SHA256 da581ed3e88684433c75cd6f65347ba8a5efcd7d27097e547402a1114321de5e
  • MD5 SHA1 SHA512 TLSH
Score
1/10

Malware Config

Signatures

  • Checks processor information in registry 2 TTPs 26 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies registry class 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 9 IoCs
  • Suspicious use of FindShellTrayWindow 20 IoCs
  • Suspicious use of SendNotifyMessage 12 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 52 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Windows\Explorer.exe
    C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\Blox-Fruit-Hack-Auto-Farm-main.zip
    1⤵
      PID:3560
    • C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe"
      1⤵
      • Suspicious use of WriteProcessMemory
      PID:3964
      • C:\Program Files\Mozilla Firefox\firefox.exe
        "C:\Program Files\Mozilla Firefox\firefox.exe"
        2⤵
        • Checks processor information in registry
        • Modifies registry class
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:4828
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2020 -prefsLen 27099 -prefMapHandle 2024 -prefMapSize 270279 -ipcHandle 2100 -initialChannelId {c64f48a1-4937-4984-86d5-b40e678d4b95} -parentPid 4828 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4828" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
          3⤵
            PID:2224
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2480 -prefsLen 27135 -prefMapHandle 2484 -prefMapSize 270279 -ipcHandle 2492 -initialChannelId {4c8c28b9-c7e4-4de1-aa46-d11def5da544} -parentPid 4828 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4828" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
            3⤵
              PID:1064
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3724 -prefsLen 27276 -prefMapHandle 3728 -prefMapSize 270279 -jsInitHandle 3732 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3740 -initialChannelId {ae551e89-eb85-44eb-ac2c-89b3e2e4b418} -parentPid 4828 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4828" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
              3⤵
              • Checks processor information in registry
              PID:916
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3888 -prefsLen 27276 -prefMapHandle 3892 -prefMapSize 270279 -ipcHandle 3984 -initialChannelId {d6a809ce-51cd-4c3c-8528-ddb75fd83f39} -parentPid 4828 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4828" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
              3⤵
                PID:1944
              • C:\Program Files\Mozilla Firefox\firefox.exe
                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4296 -prefsLen 34775 -prefMapHandle 4300 -prefMapSize 270279 -jsInitHandle 4304 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4312 -initialChannelId {85380740-3c0c-4279-82d0-1848c20992b7} -parentPid 4828 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4828" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
                3⤵
                • Checks processor information in registry
                PID:676
              • C:\Program Files\Mozilla Firefox\firefox.exe
                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4800 -prefsLen 35012 -prefMapHandle 4804 -prefMapSize 270279 -ipcHandle 4812 -initialChannelId {3a489d32-160d-4c12-946b-cf5c167f096a} -parentPid 4828 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4828" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
                3⤵
                • Checks processor information in registry
                PID:5436
              • C:\Program Files\Mozilla Firefox\firefox.exe
                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5032 -prefsLen 32952 -prefMapHandle 5036 -prefMapSize 270279 -jsInitHandle 5040 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5048 -initialChannelId {e78ed2f4-9255-498e-a2c1-5d022e7b2c5a} -parentPid 4828 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4828" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
                3⤵
                • Checks processor information in registry
                PID:5656
              • C:\Program Files\Mozilla Firefox\firefox.exe
                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5276 -prefsLen 32952 -prefMapHandle 5280 -prefMapSize 270279 -jsInitHandle 5284 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5292 -initialChannelId {33edb8fb-4c7d-425c-a024-a08bb3080fc3} -parentPid 4828 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4828" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
                3⤵
                • Checks processor information in registry
                PID:5684
              • C:\Program Files\Mozilla Firefox\firefox.exe
                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5024 -prefsLen 32952 -prefMapHandle 5496 -prefMapSize 270279 -jsInitHandle 5508 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5040 -initialChannelId {ebcf488c-155a-44e0-9d61-45acc48e18f8} -parentPid 4828 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4828" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
                3⤵
                • Checks processor information in registry
                PID:5708
              • C:\Program Files\Mozilla Firefox\firefox.exe
                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4552 -prefsLen 37081 -prefMapHandle 6436 -prefMapSize 270279 -jsInitHandle 4712 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6136 -initialChannelId {d0f4fee8-0a32-422f-ba97-80c9012ad38c} -parentPid 4828 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4828" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
                3⤵
                • Checks processor information in registry
                PID:6116
              • C:\Program Files\Mozilla Firefox\firefox.exe
                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2984 -prefsLen 37081 -prefMapHandle 3220 -prefMapSize 270279 -jsInitHandle 3224 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3700 -initialChannelId {a288937e-6187-4a9a-b5d3-1add06d7e8e2} -parentPid 4828 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4828" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
                3⤵
                • Checks processor information in registry
                PID:5100
              • C:\Program Files\Mozilla Firefox\firefox.exe
                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5132 -prefsLen 37081 -prefMapHandle 5136 -prefMapSize 270279 -jsInitHandle 5212 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5116 -initialChannelId {c7cb9e6b-72c2-49d4-ae0c-d83c288248b0} -parentPid 4828 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4828" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
                3⤵
                • Checks processor information in registry
                PID:5232
              • C:\Program Files\Mozilla Firefox\firefox.exe
                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5132 -prefsLen 37081 -prefMapHandle 5136 -prefMapSize 270279 -jsInitHandle 5212 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6932 -initialChannelId {768d435c-3cb6-4418-ae45-4bcc43dc8108} -parentPid 4828 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4828" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 tab
                3⤵
                • Checks processor information in registry
                PID:5060

          Network

                MITRE ATT&CK Enterprise v16

                Replay Monitor

                Loading Replay Monitor...

                Downloads

                activity-stream.contile.json

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\activity-stream.contile.json
                • Size 4KB
                • SHA256 63c0ff3339604bca23de50aa4b30b8b75e26288e23ce3dc9ae76d88b1450a53e
                • MD5 SHA1 SHA512 SSDEEP TLSH

                activity-stream.discovery_stream.json

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\activity-stream.discovery_stream.json
                • Size 75KB
                • SHA256 5bda2d51453919155220ca524cd9b875a4067341bd6869b05cf2a0e57974a349
                • MD5 SHA1 SHA512 SSDEEP TLSH

                activity-stream.discovery_stream.json

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\activity-stream.discovery_stream.json
                • Size 75KB
                • SHA256 e7cff0055fbbb90ae46f99fcea82f9e9b5a9d76eadb467910f417e2592390264
                • MD5 SHA1 SHA512 SSDEEP TLSH

                activity-stream.personalization.json

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\activity-stream.personalization.json
                • Size 1KB
                • SHA256 a4e0a639b2cfc804db649a3f54b3f08ed1a68ad38b35b97f6b1681846ca0a21b
                • MD5 SHA1 SHA512 TLSH

                1383

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\cache2\doomed\1383
                • Size 258KB
                • SHA256 0348ba81d240ca94c4510f7aedebb2ce9925781562c4b1b7157cfe4a27e18821
                • MD5 SHA1 SHA512 SSDEEP TLSH

                15371

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\cache2\doomed\15371
                • Size 258KB
                • SHA256 b0e95e5a7a50cdb4b11d25a90d045b295cf99f05640efc149683867fc8c713cf
                • MD5 SHA1 SHA512 SSDEEP TLSH

                15701

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\cache2\doomed\15701
                • Size 258KB
                • SHA256 8746ea52b2da2363b84844d0f43aa8aaaa7ed52fddb3b14048179be778f2f688
                • MD5 SHA1 SHA512 SSDEEP TLSH

                2364

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\cache2\doomed\2364
                • Size 33KB
                • SHA256 ebaaed975ae9ffc71491313cd185d94a9e61697bb71a35e30be25157789dcca5
                • MD5 SHA1 SHA512 SSDEEP TLSH

                31067

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\cache2\doomed\31067
                • Size 258KB
                • SHA256 b63e44ff536cfdb5840ad5abe167f533b620555d656da9bd77a321f051ee666a
                • MD5 SHA1 SHA512 SSDEEP TLSH

                313

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\cache2\doomed\313
                • Size 258KB
                • SHA256 9a29668fdb8cb5efce41a32f051fe370553a885a0d885ae77f66fab5f8560988
                • MD5 SHA1 SHA512 SSDEEP TLSH

                31714

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\cache2\doomed\31714
                • Size 258KB
                • SHA256 76291287d5c15b768644cea1b9eaa0c39cf0ead88bb6dbb955f8fe82b4cc2fcc
                • MD5 SHA1 SHA512 SSDEEP TLSH

                8841

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\cache2\doomed\8841
                • Size 52B
                • SHA256 03644c897ea34834967db4528d6a4c3a8cb4f526b8d7a864eec2ae74a0f78b80
                • MD5 SHA1 SHA512 TLSH

                322AA67E71A38D51CC82AD902000D4459123B95C

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\cache2\entries\322AA67E71A38D51CC82AD902000D4459123B95C
                • Size 13KB
                • SHA256 ab421d9a6b281f10d93d2126b5170bddf20af9da7895c3834a126bdb13f63def
                • MD5 SHA1 SHA512 SSDEEP TLSH

                858AFE08082CB985AC670863C33E830A41684281

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\cache2\entries\858AFE08082CB985AC670863C33E830A41684281
                • Size 19KB
                • SHA256 ed923b9b5468e1aa9198570357056c7a37b6f2bd2df76b723203cf2f50bd3a05
                • MD5 SHA1 SHA512 SSDEEP TLSH

                E9338C5CCF1E2FCF149487351399F198A4F9FCD6

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\cache2\entries\E9338C5CCF1E2FCF149487351399F198A4F9FCD6
                • Size 16KB
                • SHA256 9003fc5e6ffc47ae16424b4bb5a0fb25c5895a24b2bb40e9f84684da3da38cf3
                • MD5 SHA1 SHA512 SSDEEP TLSH

                nb_model_build_attachment_arts_and_entertainment.json

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\personality-provider\nb_model_build_attachment_arts_and_entertainment.json
                • Size 67KB
                • SHA256 960065cc44a09bef89206d28048d3c23719d2f5e9b38cfc718ca864c9e0e91e9
                • MD5 SHA1 SHA512 SSDEEP TLSH

                nb_model_build_attachment_autos_and_vehicles.json

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\personality-provider\nb_model_build_attachment_autos_and_vehicles.json
                • Size 44KB
                • SHA256 022f9495f8867fea275ece900cfa7664c68c25073db4748343452dbc0b9eda17
                • MD5 SHA1 SHA512 SSDEEP TLSH

                nb_model_build_attachment_beauty_and_fitness.json

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\personality-provider\nb_model_build_attachment_beauty_and_fitness.json
                • Size 33KB
                • SHA256 eed46e8fe6ff20f89884b4fc68a81e8d521231440301a01bb89beec8ebad296b
                • MD5 SHA1 SHA512 SSDEEP TLSH

                nb_model_build_attachment_blogging_resources_and_services.json

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\personality-provider\nb_model_build_attachment_blogging_resources_and_services.json
                • Size 33KB
                • SHA256 c9f2a779dba0bc886cc1255816bd776bdc2e8a6a8e0f9380495a92bb66862780
                • MD5 SHA1 SHA512 SSDEEP TLSH

                nb_model_build_attachment_books_and_literature.json

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\personality-provider\nb_model_build_attachment_books_and_literature.json
                • Size 67KB
                • SHA256 df23a5b6f583ec3b4dce2aca8ff53cbdfadfd58c4b7aeb2e397eade5ff75c996
                • MD5 SHA1 SHA512 SSDEEP TLSH

                nb_model_build_attachment_business_and_industrial.json

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\personality-provider\nb_model_build_attachment_business_and_industrial.json
                • Size 45KB
                • SHA256 8410809ebac544389cf27a10e2cbd687b7a68753aa50a42f235ac3fc7b60ce2c
                • MD5 SHA1 SHA512 SSDEEP TLSH

                nb_model_build_attachment_computers_and_electronics.json

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\personality-provider\nb_model_build_attachment_computers_and_electronics.json
                • Size 45KB
                • SHA256 ab20b97406b0d9bf4f695e5ec7db4ebad5efb682311e74ca757d45b87ffc106b
                • MD5 SHA1 SHA512 SSDEEP TLSH

                nb_model_build_attachment_finance.json

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\personality-provider\nb_model_build_attachment_finance.json
                • Size 33KB
                • SHA256 384bf5fcc6928200c7ebb1f03f99bf74f6063e78d3cd044374448f879799318e
                • MD5 SHA1 SHA512 SSDEEP TLSH

                nb_model_build_attachment_food_and_drink.json

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\personality-provider\nb_model_build_attachment_food_and_drink.json
                • Size 67KB
                • SHA256 905357002f2eced8bba1be2285a9b83198f60d2f9bb1144b5c119994f2ec6e34
                • MD5 SHA1 SHA512 SSDEEP TLSH

                nb_model_build_attachment_games.json

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\personality-provider\nb_model_build_attachment_games.json
                • Size 44KB
                • SHA256 35e67835a5cf82144765dfb1095ebc84ac27d08812507ad0a2d562bf68e13e85
                • MD5 SHA1 SHA512 SSDEEP TLSH

                nb_model_build_attachment_health.json

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\personality-provider\nb_model_build_attachment_health.json
                • Size 33KB
                • SHA256 150f21c4f60856ab5e22891939d68d062542537b42a7ce1f8a8cec9300e7c565
                • MD5 SHA1 SHA512 SSDEEP TLSH

                nb_model_build_attachment_hobbies_and_leisure.json

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\personality-provider\nb_model_build_attachment_hobbies_and_leisure.json
                • Size 67KB
                • SHA256 47db7797297a2a81d28c551117e27144b58627dbac1b1d52672b630d220f025d
                • MD5 SHA1 SHA512 SSDEEP TLSH

                nb_model_build_attachment_home_and_garden.json

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\personality-provider\nb_model_build_attachment_home_and_garden.json
                • Size 33KB
                • SHA256 19edd15ebce419b83469d2ab783c0c1377d72a186d1ff08857a82bca842eea54
                • MD5 SHA1 SHA512 SSDEEP TLSH

                nb_model_build_attachment_internet_and_telecom.json

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\personality-provider\nb_model_build_attachment_internet_and_telecom.json
                • Size 67KB
                • SHA256 e646d43505c9c4e53dbaa474ef85d650a3f309ccf153d106f328d9b6aeb66d52
                • MD5 SHA1 SHA512 SSDEEP TLSH

                nb_model_build_attachment_jobs_and_education.json

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\personality-provider\nb_model_build_attachment_jobs_and_education.json
                • Size 33KB
                • SHA256 29080288b2130a67414ecb296a53ddd9f0a4771035e3c1b2112e0ce656a7481a
                • MD5 SHA1 SHA512 SSDEEP TLSH

                nb_model_build_attachment_law_and_government.json

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\personality-provider\nb_model_build_attachment_law_and_government.json
                • Size 68KB
                • SHA256 257ee9a218a1b7f9c1a6c890f38920eb7e731808e3d9b9fc956f8346c29a3e63
                • MD5 SHA1 SHA512 SSDEEP TLSH

                nb_model_build_attachment_online_communities.json

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\personality-provider\nb_model_build_attachment_online_communities.json
                • Size 67KB
                • SHA256 11b6084552e2979b5bc0fd6ffdc61e445d49692c0ae8dffedc07792f8062d13f
                • MD5 SHA1 SHA512 SSDEEP TLSH

                nb_model_build_attachment_people_and_society.json

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\personality-provider\nb_model_build_attachment_people_and_society.json
                • Size 45KB
                • SHA256 4990a5d17bea15617624c48a0c7c23d16e95f15e2ec9dd1d82ee949567bbaec0
                • MD5 SHA1 SHA512 SSDEEP TLSH

                nb_model_build_attachment_pets_and_animals.json

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\personality-provider\nb_model_build_attachment_pets_and_animals.json
                • Size 44KB
                • SHA256 dd537bfb1497eb9457c0c8ecbd2846f325e13ddef3988fd293a29e68ab0b2671
                • MD5 SHA1 SHA512 SSDEEP TLSH

                nb_model_build_attachment_real_estate.json

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\personality-provider\nb_model_build_attachment_real_estate.json
                • Size 67KB
                • SHA256 efcf6b2d09e89b8c449ffbcdb5354beaa7178673862ebcdd6593561f2aa7d99a
                • MD5 SHA1 SHA512 SSDEEP TLSH

                nb_model_build_attachment_reference.json

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\personality-provider\nb_model_build_attachment_reference.json
                • Size 56KB
                • SHA256 3619daa64036d1f0197cdadf7660e390d4b6e8c1b328ed3b59f828a205a6ea49
                • MD5 SHA1 SHA512 SSDEEP TLSH

                nb_model_build_attachment_science.json

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\personality-provider\nb_model_build_attachment_science.json
                • Size 56KB
                • SHA256 9606ce3988b2d2a4921b58ac454f54e53a9ea8f358326522a8b1dcc751b50b32
                • MD5 SHA1 SHA512 SSDEEP TLSH

                nb_model_build_attachment_shopping.json

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\personality-provider\nb_model_build_attachment_shopping.json
                • Size 67KB
                • SHA256 bfd7e68ddca6696c798412402965a0384df0c8c209931bbadabf88ccb45e3bb6
                • MD5 SHA1 SHA512 SSDEEP TLSH

                nb_model_build_attachment_sports.json

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\personality-provider\nb_model_build_attachment_sports.json
                • Size 56KB
                • SHA256 44da98b03350e91e852fe59f0fc05d752fc867a5049ab0363da8bb7b7078ad14
                • MD5 SHA1 SHA512 SSDEEP TLSH

                nb_model_build_attachment_travel.json

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\personality-provider\nb_model_build_attachment_travel.json
                • Size 67KB
                • SHA256 4336ac211a822b0a5c3ce5de0d4730665acc351ee1965ea8da1c72477e216dfa
                • MD5 SHA1 SHA512 SSDEEP TLSH

                recipe_attachment.json

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\personality-provider\recipe_attachment.json
                • Size 1KB
                • SHA256 fc07d42847eeaf69dcbf1b9a16eb48b141c11feb67aa40724be2aee83cb621b7
                • MD5 SHA1 SHA512 TLSH

                webext.sc.lz4

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\startupCache\webext.sc.lz4
                • Size 104KB
                • SHA256 d8fc426a3175f3dd53dbc7bd2ccf36c4afecacdaa55bd2d27b28c06397aa3fb4
                • MD5 SHA1 SHA512 SSDEEP TLSH

                webext.sc.lz4

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\acaoqdel.default-release\startupCache\webext.sc.lz4
                • Size 105KB
                • SHA256 3e4ce8b99521dfabf1804ee9b32c3eca222af6f66df64afa8ba72598b90ee2c5
                • MD5 SHA1 SHA512 SSDEEP TLSH

                baa974d6-0f36-4449-a909-822b64ff11c9.zip

                • Path C:\Users\Admin\AppData\Local\Temp\baa974d6-0f36-4449-a909-822b64ff11c9.zip
                • Size 3.9MB
                • SHA256 d1f99233d709d6bbd8e5008821cef8bf2b6c998fa8787863fa8786b854725c61
                • MD5 SHA1 SHA512 SSDEEP TLSH

                remote-settings-startup-bundle-

                • Path C:\Users\Admin\AppData\Local\Temp\remote-settings-startup-bundle-
                • Size 577KB
                • SHA256 463253ab60fd7003588ae593133a10f723e3f5bd01e8e19fa2f681bb3d02fda0
                • MD5 SHA1 SHA512 SSDEEP TLSH

                tmpaddon

                • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                • Size 11KB
                • SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
                • MD5 SHA1 SHA512 SSDEEP TLSH

                tmpaddon

                • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                • Size 502KB
                • SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
                • MD5 SHA1 SHA512 SSDEEP TLSH

                tmpaddon

                • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                • Size 21.6MB
                • SHA256 7b81444b063f81e77c527c5589e86836cc2f7328deb2772300ccc7dc9e2510c3
                • MD5 SHA1 SHA512 SSDEEP TLSH

                6824f4a902c78fbd.customDestinations-ms

                • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
                • Size 11KB
                • SHA256 50720c5bdcd9ecab538db4dcd1911c3c67919fbd4f42310c3361f191316ec645
                • MD5 SHA1 SHA512 SSDEEP TLSH

                AlternateServices.bin

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\AlternateServices.bin
                • Size 18KB
                • SHA256 be595ef10b0fe82f30f1f3d08e6b49a43f3e1ba54c423568bae650afe870b174
                • MD5 SHA1 SHA512 SSDEEP TLSH

                AlternateServices.bin

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\AlternateServices.bin
                • Size 8KB
                • SHA256 f21ed5512a63ba7522898631a7a8d12e7d74077b4886502f26c2220d172e199e
                • MD5 SHA1 SHA512 SSDEEP TLSH

                addonStartup.json.lz4

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\addonStartup.json.lz4
                • Size 4KB
                • SHA256 637f9a8c67f59676a5af06345cf3a7a1df99370b1cd7451a1139cf217589522d
                • MD5 SHA1 SHA512 SSDEEP TLSH

                bookmarks-2026-10-14.jsonlz4

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\bookmarkbackups\bookmarks-2026-10-14.jsonlz4
                • Size 859B
                • SHA256 e02f78694233ece85b8b34f040bcd9e8e9c14ae2b44edce73f57a105305b908e
                • MD5 SHA1 SHA512 TLSH

                broadcast-listeners.json

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\broadcast-listeners.json
                • Size 221B
                • SHA256 d2dc2e0a297666a92f9a0f2b1d5164a147a27bcad0f284337187343138302325
                • MD5 SHA1 SHA512 TLSH

                broadcast-listeners.json

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\broadcast-listeners.json
                • Size 221B
                • SHA256 4605760d62ccc89fc380e11a95192e125dce9f55e54b44714226cd63c71f1e27
                • MD5 SHA1 SHA512 TLSH

                store.json.mozlz4

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\crashes\store.json.mozlz4
                • Size 66B
                • SHA256 078648c042b9b08483ce246b7f01371072541a2e90d1beb0c8009a6118cbd965
                • MD5 SHA1 SHA512 TLSH

                data.safe.bin

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\datareporting\glean\db\data.safe.bin
                • Size 111KB
                • SHA256 2e1f3f2642312ed738e5f80ec0a16b7a6bb13613c87282cc0248d8daa325ffd1
                • MD5 SHA1 SHA512 SSDEEP TLSH

                data.safe.tmp

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\datareporting\glean\db\data.safe.tmp
                • Size 7KB
                • SHA256 185343d7916b912e22f67b415dc447868e7decaee1c20b123de0b39523b5c85b
                • MD5 SHA1 SHA512 SSDEEP TLSH

                data.safe.tmp

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\datareporting\glean\db\data.safe.tmp
                • Size 106KB
                • SHA256 45d9665f1e1aaebe43980cb6f3d0c10e09a2170867efc68b2ac96d33170b1bce
                • MD5 SHA1 SHA512 SSDEEP TLSH

                data.safe.tmp

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\datareporting\glean\db\data.safe.tmp
                • Size 106KB
                • SHA256 8baf91d9eecc516e5b337d557e307a19657d1332392062317bc80ba6ed624142
                • MD5 SHA1 SHA512 SSDEEP TLSH

                data.safe.tmp

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\datareporting\glean\db\data.safe.tmp
                • Size 6KB
                • SHA256 f1517fe6999c4ce7af3369ac81dae1718cfbebcb8d7e5e7a046780149bcc2533
                • MD5 SHA1 SHA512 SSDEEP TLSH

                data.safe.tmp

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\datareporting\glean\db\data.safe.tmp
                • Size 106KB
                • SHA256 1f8448bbd7c8efb1808d4d0abccef3df2b49dc12370f152bf20f9b072ab60525
                • MD5 SHA1 SHA512 SSDEEP TLSH

                data.safe.tmp

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\datareporting\glean\db\data.safe.tmp
                • Size 111KB
                • SHA256 721b42b5b449472d6b2cab333f66c2aa7eba65881a462c9fbb64e7e7cf38ba5f
                • MD5 SHA1 SHA512 SSDEEP TLSH

                data.safe.tmp

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\datareporting\glean\db\data.safe.tmp
                • Size 112KB
                • SHA256 c3540d090b03820bd65dbb0bf420c5815796ba38d0e941c5bfae5bcc1ffff1ba
                • MD5 SHA1 SHA512 SSDEEP TLSH

                data.safe.tmp

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\datareporting\glean\db\data.safe.tmp
                • Size 3KB
                • SHA256 a9fcc44bdf3ff00efd7ec32ec40aa695e36e99713ee0d558f265d6c4ca7c9f7e
                • MD5 SHA1 SHA512 TLSH

                data.safe.tmp

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\datareporting\glean\db\data.safe.tmp
                • Size 7KB
                • SHA256 7261570ed720ff3f99988081eec6eacf7a8e65de1892f6ac14c5a1c6bf396e02
                • MD5 SHA1 SHA512 SSDEEP TLSH

                events

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\datareporting\glean\events\events
                • Size 1KB
                • SHA256 572e7648a711343f2d4ea6267cafe4fb08c3fcd1ca9f9d69979f74a848fabe1c
                • MD5 SHA1 SHA512 TLSH

                events

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\datareporting\glean\events\events
                • Size 4KB
                • SHA256 a14ceb453421f69babc4f0b8a3fbfa5e83d45c1cb7ee96d96d726b028d99b976
                • MD5 SHA1 SHA512 SSDEEP TLSH

                0bef38b0-d52f-4f22-a1d4-5105b2cab471

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\datareporting\glean\pending_pings\0bef38b0-d52f-4f22-a1d4-5105b2cab471
                • Size 235B
                • SHA256 6b055861bf6477b98f50c4268cca1b6761593263a34e5215b3c192193f5f16b3
                • MD5 SHA1 SHA512 TLSH

                3055edf7-f8b0-4427-9f45-c1173916b9e4

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\datareporting\glean\pending_pings\3055edf7-f8b0-4427-9f45-c1173916b9e4
                • Size 280B
                • SHA256 93a40add0af1a1172fccc2bfbf4cd182c09ab9a19267809cf3820e2e16ff57dc
                • MD5 SHA1 SHA512 TLSH

                55e21436-c45f-4152-aff9-62283023ff06

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\datareporting\glean\pending_pings\55e21436-c45f-4152-aff9-62283023ff06
                • Size 886B
                • SHA256 192b5e4bbe7fb4fdd05e1d66e62314b43184e46aa52431c7421a785407de36ea
                • MD5 SHA1 SHA512 TLSH

                5fc94401-5168-4038-8b75-12362859e37a

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\datareporting\glean\pending_pings\5fc94401-5168-4038-8b75-12362859e37a
                • Size 15KB
                • SHA256 64966d7de28fb0f274cdde328f79eefd4eca94c6504bb473dba45c9f4da76537
                • MD5 SHA1 SHA512 SSDEEP TLSH

                6c112610-f0be-4380-a65c-2eb7d37a4a7c

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\datareporting\glean\pending_pings\6c112610-f0be-4380-a65c-2eb7d37a4a7c
                • Size 235B
                • SHA256 e3e613201bda1812096eae5fbdbae89c1ea64aa15c381c773b39de8bd41026b2
                • MD5 SHA1 SHA512 TLSH

                6ef85438-af6b-4b55-bb0e-997d7869d0af

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\datareporting\glean\pending_pings\6ef85438-af6b-4b55-bb0e-997d7869d0af
                • Size 6KB
                • SHA256 b8fc782e7d6466622bbc5d5ae20e8cda65a7eac82e1937134cc79c02d5e1da7a
                • MD5 SHA1 SHA512 SSDEEP TLSH

                7dbca16f-e21e-431a-ab78-c007a1d7df12

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\datareporting\glean\pending_pings\7dbca16f-e21e-431a-ab78-c007a1d7df12
                • Size 1007B
                • SHA256 4041230cbb907b1b51fd6c4593f4f9cdd076065c6109c761f0362ca802048908
                • MD5 SHA1 SHA512 TLSH

                89277eb3-92b8-4437-aa19-00a4e0f0cae5

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\datareporting\glean\pending_pings\89277eb3-92b8-4437-aa19-00a4e0f0cae5
                • Size 2KB
                • SHA256 faf18d09a1efcaf0a2e5fd076c041ffcdc443ae3937ae3a22e815647d49d3e32
                • MD5 SHA1 SHA512 TLSH

                a9eaa5f6-77e2-4d14-8720-3a0bf4ce8fb8

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\datareporting\glean\pending_pings\a9eaa5f6-77e2-4d14-8720-3a0bf4ce8fb8
                • Size 883B
                • SHA256 bc6c8dc099d914256f9ec2f2a5417f9aea92c706fd8506cf477cff0674a1a4c0
                • MD5 SHA1 SHA512 TLSH

                extension-preferences.json

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\extension-preferences.json
                • Size 942B
                • SHA256 75556cb7ef37fd52a4979f0868544a1336d4ded4de77bb9303aa2fed17930d1a
                • MD5 SHA1 SHA512 TLSH

                extensions.json

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\extensions.json
                • Size 14KB
                • SHA256 3fb22b219ad48f24cec7248c2bd749a09d15b05116a6bd27737a35ec394caf4e
                • MD5 SHA1 SHA512 SSDEEP TLSH

                gmpopenh264.dll

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
                • Size 1.1MB
                • SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
                • MD5 SHA1 SHA512 SSDEEP TLSH

                gmpopenh264.info

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
                • Size 116B
                • SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
                • MD5 SHA1 SHA512 TLSH

                LICENSE

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\gmp-widevinecdm\4.10.3050.0\LICENSE
                • Size 473B
                • SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
                • MD5 SHA1 SHA512 TLSH

                manifest.json

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
                • Size 1002B
                • SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
                • MD5 SHA1 SHA512 TLSH

                widevinecdm.dll

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
                • Size 21.6MB
                • SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
                • MD5 SHA1 SHA512 SSDEEP TLSH

                widevinecdm.dll.sig

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll.sig
                • Size 1KB
                • SHA256 c5f50bed6afd38490baca2ce8e8fdd1a39849c9f0dc06478a8a2e9226526607b
                • MD5 SHA1 SHA512 TLSH

                prefs-1.js

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\prefs-1.js
                • Size 12KB
                • SHA256 d67c2a5deaa74ee9da4a301e15d2fc0c8a4544576b18c819cfff2fdbc06eb845
                • MD5 SHA1 SHA512 SSDEEP TLSH

                prefs-1.js

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\prefs-1.js
                • Size 8KB
                • SHA256 b0db9f7ff626671573d4bba875f6549323ba0c2d410c8b7da93a63ebe80cb1b8
                • MD5 SHA1 SHA512 SSDEEP TLSH

                prefs-1.js

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\prefs-1.js
                • Size 13KB
                • SHA256 92d78b5f408d5308b7408d0ef4ce6f5846e4b33e23a9f86c90f366d8ce4aa5d7
                • MD5 SHA1 SHA512 SSDEEP TLSH

                prefs-1.js

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\prefs-1.js
                • Size 6KB
                • SHA256 eb5689e88ed0068e1a7f3a20e3548cb234e1f6578fcd565cb604a09f1daf5dfc
                • MD5 SHA1 SHA512 SSDEEP TLSH

                prefs.js

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\prefs.js
                • Size 6KB
                • SHA256 0b5acaf26c139e7b227eed10cf06a952d5c02862142333871fd3bb388ba7e3fb
                • MD5 SHA1 SHA512 SSDEEP TLSH

                prefs.js

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\prefs.js
                • Size 6KB
                • SHA256 2162dd75c8dca27101cbe3ca309173d06bbe8a4b6dde5bbede7e40f36649f170
                • MD5 SHA1 SHA512 SSDEEP TLSH

                prefs.js

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\prefs.js
                • Size 7KB
                • SHA256 bb62f1de2c57c4e67e6c87d572c87a8d479f5a6c8a3f5998c6c7279cdeedf03c
                • MD5 SHA1 SHA512 SSDEEP TLSH

                prefs.js

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\prefs.js
                • Size 12KB
                • SHA256 96f0bfd14e0bba10ad7c6348994a1264f7793959ce7b8d44b03c9101084cdca8
                • MD5 SHA1 SHA512 SSDEEP TLSH

                search.json.mozlz4

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\search.json.mozlz4
                • Size 350B
                • SHA256 2a317a8ff64d03538667913a28d8769f7483b207d7949590e83bce951ff9fe4a
                • MD5 SHA1 SHA512 TLSH

                sessionCheckpoints.json

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\sessionCheckpoints.json
                • Size 90B
                • SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
                • MD5 SHA1 SHA512 TLSH

                sessionCheckpoints.json

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\sessionCheckpoints.json
                • Size 53B
                • SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
                • MD5 SHA1 SHA512 TLSH

                recovery.jsonlz4

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\sessionstore-backups\recovery.jsonlz4
                • Size 885B
                • SHA256 800c1aa0e88402700d2a3eee54ec5e696328aa36a625d47f28dad49afb585f69
                • MD5 SHA1 SHA512 TLSH

                recovery.jsonlz4

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\sessionstore-backups\recovery.jsonlz4
                • Size 9KB
                • SHA256 5a8e6ec4f712dc223c0ea67838874a8ada0c9337232cbf08571b1fe6ff69b853
                • MD5 SHA1 SHA512 SSDEEP TLSH

                recovery.jsonlz4

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\sessionstore-backups\recovery.jsonlz4
                • Size 9KB
                • SHA256 47d3bdb32eb524d5a067337ae68baf1fdddc2cc8b370b553e48265502cd25a63
                • MD5 SHA1 SHA512 SSDEEP TLSH

                recovery.jsonlz4

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\sessionstore-backups\recovery.jsonlz4
                • Size 1KB
                • SHA256 63169361a37b5df62309134b9ec9645eb194cb558d43d21fffe6a0032f3683fe
                • MD5 SHA1 SHA512 TLSH

                recovery.jsonlz4

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\sessionstore-backups\recovery.jsonlz4
                • Size 9KB
                • SHA256 22fc7e00e99cd02685c97ca28bd935e3b51056f5015a5fb5a68ce84ca0e88a13
                • MD5 SHA1 SHA512 SSDEEP TLSH

                data.safe.tmp

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\settings\data.safe.tmp
                • Size 152B
                • SHA256 64836099ba93d2f9a0cd1c2f71106529f9ac4da7071b7be67eb0543e151af802
                • MD5 SHA1 SHA512 TLSH

                {d7085171-8eb4-457b-ba62-a17080cf96fd}.final

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\storage\default\https+++whatexpsare.online\cache\morgue\253\{d7085171-8eb4-457b-ba62-a17080cf96fd}.final
                • Size 1KB
                • SHA256 1381f806163681285c620c6019db54dff21fcca99a37a1799657f1ec34c7939a
                • MD5 SHA1 SHA512 TLSH

                usage

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\storage\default\https+++whatexpsare.online\ls\usage
                • Size 12B
                • SHA256 c48667a1c4849c56e8d39a6f98eae522e8c7fea3ebffa05a5930e081fb0b6cbd
                • MD5 SHA1 SHA512

                3870112724rsegmnoittet-es.sqlite

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                • Size 13.6MB
                • SHA256 7942f0a38b4bbba88537b54007eecef720ba9d5d789bbfdb14f51ac0cf886d3e
                • MD5 SHA1 SHA512 SSDEEP TLSH

                3870112724rsegmnoittet-es.sqlite

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                • Size 7.5MB
                • SHA256 40c14a2daf1dd038e50bab4a94cf87c9edbe34e4a6e2fecf4fffb63bb28f13fb
                • MD5 SHA1 SHA512 SSDEEP TLSH

                3870112724rsegmnoittet-es.sqlite

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                • Size 7.6MB
                • SHA256 8aa22f3c012d40d64d05e5d6ea5d06c0a5081cd69011825d1c1fe569b46552ed
                • MD5 SHA1 SHA512 SSDEEP TLSH

                3870112724rsegmnoittet-es.sqlite

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                • Size 7.6MB
                • SHA256 5ab1f04abcdfd171edb9c88cc4d513c329222bc115b8e821f3c8c2f96f810452
                • MD5 SHA1 SHA512 SSDEEP TLSH

                3870112724rsegmnoittet-es.sqlite

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                • Size 7.6MB
                • SHA256 06d3c01ab3b81199e405c890373ebf7a4ab9861d780dfb537c64f054f5f8bce1
                • MD5 SHA1 SHA512 SSDEEP TLSH

                targeting.snapshot.json

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\targeting.snapshot.json
                • Size 3KB
                • SHA256 ff639390be76bf1a49b538455cfb79e4ee958fda461be111222899a97d3e4cd3
                • MD5 SHA1 SHA512 TLSH

                xulstore.json

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\xulstore.json
                • Size 170B
                • SHA256 824b37fb029b3460c8dee14ac1afbbb0f2a5b90101a109ad3d824bc82966f647
                • MD5 SHA1 SHA512 TLSH