hxxps://1337x[.]to/torrent/4134690/Dino-Girl-Gauko-S01-2019-1080p-NF-WEB-DL-HIN-Multi-DD-2-0-x264-Telly/

Resubmissions

02/11/2026, 21:41

261102-1j3laszv8l1

02/11/2026, 21:27

261102-1a1eksfv7p1

02/11/2026, 01:10

261102-bjscwszshx8

02/11/2026, 01:02

261102-bd8gxsdh258

Analysis

user interaction
yes
max time kernel
68s
max time network
70s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 21:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://1337x.to/torrent/4134690/Dino-Girl-Gauko-S01-2019-1080p-NF-WEB-DL-HIN-Multi-DD-2-0-x264-Telly/
Sample261102-1j3laszv8l

Score

1^/10

persistence

Malware Config

Signatures

Checks processor information in registry 2 TTPs 28 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096	firefox.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096\DisplayName = "Chrome Sandbox"	firefox.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096\Moniker = "fx.sb.cdmaead3483b5e3a557227b77554c4d4739fd53e90f"	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096\Children	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\fx.sb.cdmaead3483b5e3a557227b77554c4d4739fd53e90f	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\fx.sb.cdmaead3483b5e3a557227b77554c4d4739fd53e90f\Children	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\Local Settings	firefox.exe
Key created	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	firefox.exe

NTFS ADS 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\Downloads\92D84C5A1A45FBFA7FA4CB597A072883318624DB.torrent:Zone.Identifier	firefox.exe

Suspicious use of AdjustPrivilegeToken 3 IoCs

description	pid	Process
Token: SeDebugPrivilege	820	firefox.exe
Token: SeDebugPrivilege	820	firefox.exe
Token: SeDebugPrivilege	820	firefox.exe

Suspicious use of FindShellTrayWindow 7 IoCs

pid	Process
820	firefox.exe
820	firefox.exe
820	firefox.exe
820	firefox.exe
820	firefox.exe
820	firefox.exe
820	firefox.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
820	firefox.exe
820	firefox.exe
820	firefox.exe
820	firefox.exe

Suspicious use of WriteProcessMemory 55 IoCs

description	pid	Process	procid_target
PID 3372 wrote to memory of 820	3372	firefox.exe	86
PID 3372 wrote to memory of 820	3372	firefox.exe	86
PID 820 wrote to memory of 460	820	firefox.exe	87
PID 820 wrote to memory of 460	820	firefox.exe	87
PID 820 wrote to memory of 460	820	firefox.exe	87
PID 820 wrote to memory of 624	820	firefox.exe	88
PID 820 wrote to memory of 624	820	firefox.exe	88
PID 820 wrote to memory of 624	820	firefox.exe	88
PID 820 wrote to memory of 624	820	firefox.exe	88
PID 820 wrote to memory of 3152	820	firefox.exe	89
PID 820 wrote to memory of 3152	820	firefox.exe	89
PID 820 wrote to memory of 3152	820	firefox.exe	89
PID 820 wrote to memory of 3152	820	firefox.exe	89
PID 820 wrote to memory of 4344	820	firefox.exe	90
PID 820 wrote to memory of 4344	820	firefox.exe	90
PID 820 wrote to memory of 4344	820	firefox.exe	90
PID 820 wrote to memory of 464	820	firefox.exe	91
PID 820 wrote to memory of 464	820	firefox.exe	91
PID 820 wrote to memory of 464	820	firefox.exe	91
PID 820 wrote to memory of 464	820	firefox.exe	91
PID 820 wrote to memory of 4904	820	firefox.exe	92
PID 820 wrote to memory of 4904	820	firefox.exe	92
PID 820 wrote to memory of 4904	820	firefox.exe	92
PID 820 wrote to memory of 4904	820	firefox.exe	92
PID 820 wrote to memory of 5204	820	firefox.exe	93
PID 820 wrote to memory of 5204	820	firefox.exe	93
PID 820 wrote to memory of 5204	820	firefox.exe	93
PID 820 wrote to memory of 5204	820	firefox.exe	93
PID 820 wrote to memory of 5400	820	firefox.exe	94
PID 820 wrote to memory of 5400	820	firefox.exe	94
PID 820 wrote to memory of 5400	820	firefox.exe	94
PID 820 wrote to memory of 5400	820	firefox.exe	94
PID 820 wrote to memory of 5408	820	firefox.exe	95
PID 820 wrote to memory of 5408	820	firefox.exe	95
PID 820 wrote to memory of 5408	820	firefox.exe	95
PID 820 wrote to memory of 5408	820	firefox.exe	95
PID 820 wrote to memory of 5416	820	firefox.exe	96
PID 820 wrote to memory of 5416	820	firefox.exe	96
PID 820 wrote to memory of 5416	820	firefox.exe	96
PID 820 wrote to memory of 5416	820	firefox.exe	96
PID 820 wrote to memory of 4132	820	firefox.exe	99
PID 820 wrote to memory of 4132	820	firefox.exe	99
PID 820 wrote to memory of 4132	820	firefox.exe	99
PID 820 wrote to memory of 4132	820	firefox.exe	99
PID 820 wrote to memory of 4948	820	firefox.exe	102
PID 820 wrote to memory of 4948	820	firefox.exe	102
PID 820 wrote to memory of 4948	820	firefox.exe	102
PID 820 wrote to memory of 4948	820	firefox.exe	102
PID 820 wrote to memory of 1680	820	firefox.exe	103
PID 820 wrote to memory of 1680	820	firefox.exe	103
PID 820 wrote to memory of 1680	820	firefox.exe	103
PID 820 wrote to memory of 1580	820	firefox.exe	105
PID 820 wrote to memory of 1580	820	firefox.exe	105
PID 820 wrote to memory of 1580	820	firefox.exe	105
PID 820 wrote to memory of 1580	820	firefox.exe	105

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "https://1337x.to/torrent/4134690/Dino-Girl-Gauko-S01-2019-1080p-NF-WEB-DL-HIN-Multi-DD-2-0-x264-Telly/"
1⤵
- Suspicious use of WriteProcessMemory
PID:3372
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url https://1337x.to/torrent/4134690/Dino-Girl-Gauko-S01-2019-1080p-NF-WEB-DL-HIN-Multi-DD-2-0-x264-Telly/
  2⤵
  - Checks processor information in registry
  - Modifies registry class
  - NTFS ADS
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:820
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1988 -prefsLen 27100 -prefMapHandle 1992 -prefMapSize 270279 -ipcHandle 2080 -initialChannelId {c4b35f2f-63d1-47b0-8885-72421df3d4c5} -parentPid 820 -crashReporter "\\.\pipe\gecko-crash-server-pipe.820" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:460
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2484 -prefsLen 27136 -prefMapHandle 2488 -prefMapSize 270279 -ipcHandle 2496 -initialChannelId {f6681c61-a1f2-4db7-9bcd-6432ee56bc9b} -parentPid 820 -crashReporter "\\.\pipe\gecko-crash-server-pipe.820" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:624
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3808 -prefsLen 25164 -prefMapHandle 3812 -prefMapSize 270279 -jsInitHandle 3816 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3824 -initialChannelId {2705e340-850a-4e18-bafe-3bf4d4fcda47} -parentPid 820 -crashReporter "\\.\pipe\gecko-crash-server-pipe.820" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:3152
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3996 -prefsLen 27276 -prefMapHandle 4000 -prefMapSize 270279 -ipcHandle 3812 -initialChannelId {7700b091-6799-4e85-bce0-f0b9954c85b5} -parentPid 820 -crashReporter "\\.\pipe\gecko-crash-server-pipe.820" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:4344
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 1652 -prefsLen 32663 -prefMapHandle 1656 -prefMapSize 270279 -jsInitHandle 2768 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2788 -initialChannelId {c2b959f8-2a89-44a8-bfa4-fddadbec4252} -parentPid 820 -crashReporter "\\.\pipe\gecko-crash-server-pipe.820" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:464
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4420 -prefsLen 34775 -prefMapHandle 4424 -prefMapSize 270279 -jsInitHandle 4428 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3136 -initialChannelId {13845c62-1f62-42bc-a8a5-43f1116198e4} -parentPid 820 -crashReporter "\\.\pipe\gecko-crash-server-pipe.820" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 tab
    3⤵
    - Checks processor information in registry
    PID:4904
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 2848 -prefsLen 35012 -prefMapHandle 2852 -prefMapSize 270279 -ipcHandle 5112 -initialChannelId {99cdcd4a-ab16-4006-bbc4-976eafa2c47f} -parentPid 820 -crashReporter "\\.\pipe\gecko-crash-server-pipe.820" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 utility
    3⤵
    - Checks processor information in registry
    PID:5204
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5396 -prefsLen 32952 -prefMapHandle 5400 -prefMapSize 270279 -jsInitHandle 5404 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5416 -initialChannelId {58b1cca9-21d8-422c-8497-8df135b430b0} -parentPid 820 -crashReporter "\\.\pipe\gecko-crash-server-pipe.820" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:5400
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5428 -prefsLen 32952 -prefMapHandle 5432 -prefMapSize 270279 -jsInitHandle 5436 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5444 -initialChannelId {5ac14818-81fc-415d-9caa-dace4f7825a3} -parentPid 820 -crashReporter "\\.\pipe\gecko-crash-server-pipe.820" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:5408
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5348 -prefsLen 32952 -prefMapHandle 5340 -prefMapSize 270279 -jsInitHandle 5328 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5308 -initialChannelId {4efe6fb5-08ac-4919-a034-9f6428e23f67} -parentPid 820 -crashReporter "\\.\pipe\gecko-crash-server-pipe.820" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:5416
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5720 -prefsLen 32952 -prefMapHandle 5988 -prefMapSize 270279 -jsInitHandle 3096 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3732 -initialChannelId {d46b3a4a-0ac3-4c57-a196-a6f97df785cd} -parentPid 820 -crashReporter "\\.\pipe\gecko-crash-server-pipe.820" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
    3⤵
    - Checks processor information in registry
    PID:4132
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 1 -prefsHandle 6132 -prefsLen 35064 -prefMapHandle 6120 -prefMapSize 270279 -ipcHandle 4416 -initialChannelId {3da7631d-1d05-4f5e-b0c0-fa86355e8601} -parentPid 820 -crashReporter "\\.\pipe\gecko-crash-server-pipe.820" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 utility
    3⤵
    - Checks processor information in registry
    PID:4948
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 2 -prefsHandle 6204 -prefsLen 35064 -prefMapHandle 6208 -prefMapSize 270279 -ipcHandle 6216 -initialChannelId {8c2a0838-8ca0-4ebe-aa6e-1370d3a7836f} -parentPid 820 -crashReporter "\\.\pipe\gecko-crash-server-pipe.820" -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 utility
    3⤵
    - Checks processor information in registry
    PID:1680
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6656 -prefsLen 32952 -prefMapHandle 6660 -prefMapSize 270279 -jsInitHandle 6664 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6640 -initialChannelId {acb7ad0c-3fa0-4f23-9cea-c0ab8fb743a9} -parentPid 820 -crashReporter "\\.\pipe\gecko-crash-server-pipe.820" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 14 tab
    3⤵
    - Checks processor information in registry
    PID:1580

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2420

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\activity-stream.contile.json
Size 4KB
SHA256 5696c71c74442f63dea15354d81f2c62fafab7af7c977c8396977bc7509d36f8
MD5 a8f366eea686ff0db626077147b65e56
SHA1 330bc3b9cb0d1492320fd84c37fc569804267572
SHA512 f1252142c03ff0f7d3d1aa543d6b012a7327d08bc4f02d54b6e0020b9fd2da2a06eaa0f83e9b4725db42a84b97a65c421eb5080cb99d5fda54024dc91831ef06
SSDEEP 96:TwLhP1MIyDm2LhPi8CwT+mRrcn4KY+LhP6N+06D+hlz:mtMdDZ68CBmRrcTyQ0w+hF
TLSH
T1A691C95F857848231735BAE12C463AE8F107B805DAE09EAC70795CA185A8BF981DB9CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\activity-stream.discovery_stream.json
Size 75KB
SHA256 2497dd140c2e365e678cd29e40602d8ac163201124560b5bbad34243749ffd66
MD5 7ad6a5e5da90af6dfd2b0346f460dc21
SHA1 3ebb9d7854c8ae237ee57696cdf602ef1664116a
SHA512 9e339544f1fabc18a23308c5a1894fb1ce8d0ca4a5a59a69999dff19bc3f87e258132c11e825a1976063e2252271fa1884ad5d90d22aa9d75df08e203633653a
SSDEEP 768:iya+/dQsDt63rmi8i+nsL3/7cSxFlziL51azIE3fTOOrd+G0741Yt6DMs:Zd/fCZ17FxnzyQzIIfkGcdgD
TLSH
T13A73F9A3D7A8B1BF0B9177C72C0BB95B53E201C9E38502CDECA9C91C81DD754123A6AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

23495

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\cache2\doomed\23495
Size 113B
SHA256 f6ff2d7ed8a80b687f901e98889fb3dd7543d528a5ed3a1791da810ff7683469
MD5 a7b57fbf8cf93b7e28c0dd97c21443b1
SHA1 8b23bc84ba9c5e5dfcc109c34f1d177972e9f5e7
SHA512 134a2b8bc2de5057652f36343a544af0c5601a0f6a4285b5f6690248ee92e6f70124b7dd949d43053bb570555872decef95338cb70e52a54c303de010cfda618
TLSH
T135B022C30283F000F2338F30022CB02CEA0BBA080CA00383EC00238800B03220033F00
MD5 SHA1 SHA512 TLSH

Submit Download

26177

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\cache2\doomed\26177
Size 12KB
SHA256 a156ebaaa2b17f2d92ba7182b2bf848c8146b2a6400dbf340c2d7ae29e6c2852
MD5 b9aebe33ed2c99c6360066feb5d0e98c
SHA1 4f6967ad65484b3b1b7f6925a9e334fac2c52a6c
SHA512 0ba083c9c0be92225caf3def089552c5e341cf82aae31192aaa63f2f9cb7abfcbc7de7190128827f3cbe2c3a86ccfeabf0e82423debed6bf41d54d3a4a0c2a28
SSDEEP 192:tik/R3QM7uloB4vDs2p7sNo8PMEhNjJzgpbquDRSoPAmqxvKSH8BNAFh25BNAFAn:7L2p7sNo8PMEDlXuFPAcoAiii+AiiiH
TLSH
T18C426DB2E9154E7E076166C41DE412C4BE78614F7CA7A9FC64B222470788FFC76C12AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7285

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\cache2\doomed\7285
Size 12KB
SHA256 cd7ce87c8dc7bcd23bd2493966b7711b69d2dda027aafd0bd1317c77d9d99ca1
MD5 0645963487d978f7f489b43f9c4f753b
SHA1 e6f0c2bd5b3f033c30f909ba27b6792ba8c0b291
SHA512 d65b4e5072e5ee6bc29ea0420380007badaf75e978937039f40f7cc051392eebf71df2e0b14aef754fe46c64f579dac846ddf956a87c821ed120860e935305a3
SSDEEP 384:37lkJydP5uCVcEDlXuFPAcfAijiZAijit:37WAt8TEDJuFPAcfGU
TLSH
T168426E769614097E0F61A2C81DE41394BE74A24F3C95E9F8957132624788FFC67C22EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

06A6D86B39A0E3DCE68006525D21C3AAB6C8E0B4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\cache2\entries\06A6D86B39A0E3DCE68006525D21C3AAB6C8E0B4
Size 16KB
SHA256 c13a2bd9be499ce963d40c47146dda55ffa55ef4ae1102d0a2a359cd8a9f26ed
MD5 f547c1bd3a432fb52f889be9971de80d
SHA1 03db8d5a9fac95e0a08ec90b9ccc7ee39e51bd56
SHA512 ed0c7c5a3c7437650392cdf060a99d2498bb6ac84e1f9269f2466e17d967295f012c47291770869ec6b879b7a05d5100f7e2bbfadfa22ecd4e17d1d2f3d2bade
SSDEEP 384:HXwIiO024YyWTT78XJWTT78gB7SOEAd9KVRaAcP+AWRMAjt0:36ZYyWTToXJWTTogB7S/AmVAf+hRMyt0
TLSH
T156728D7D9F413CAC1767D0E8C8B983558D18B2A7DFB6C06D25983E09CA88A5670F584F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 f8725363ac42913d2526da71d2dfab897f3110d6c5d9bef57a781c42a1208628
MD5 1ff9b915a543e8f7a895bf3436d17be9
SHA1 719d6e6f3cb7060d8876dc8c8d0f84ebadce8f2b
SHA512 016e8e9648d7768771d872dd0352fa0e053644e33e39b8445b1c53ba8c7e84656c686771700080f87e98afedf44e18322f2b94f920814b480d318b19eaedb6d9
SSDEEP 1536:XTrlisc/jD/bjgMz82mAiRxkUc9RcOjPVZ4bH05IpPSzwbRdKL5POZxJ5jhQ73XB:X3l2jgMzWXS9ZoHhqzYvT23XKM7b1
TLSH
T18CB3AFF6DBA2CD3D65FFC428AAC2893EFD123410B3A7301AC953775061C6BB46A75648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 9efb6dc00d422c9596d8b7d830df730517267a8e76f5cabe482cc23e96fe9298
MD5 ed0a927824d617d3c65bac79cc2b3f94
SHA1 82460e3b2ba3feb8fb8f6c10937bec21d5677283
SHA512 f22de3a3ba2d1ee2f812c66c6773df93ef6f33f45a80323233a1ce0d66fd287149256522f921c2d5b9a73eb0050b8133712addff0b25c4fd039582a5e671e07b
SSDEEP 1536:jTrlisc/jD/bjgMz9rqvcHvEElReKrcGZ4bH05IpPSzwbRdKL5POZxJ5jhQ73XKs:j3l2jgMzomZfZoHhqzYvT23XKM7bD
TLSH
T1BAB3AFF6DBA28D3D65FFC428AAC2C53EFD223400B3A7301AC953775162C6BB46675648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

256168350e88d1965bc9fa001d94cee6.png

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\sln8pgmh.default-release\thumbnails\256168350e88d1965bc9fa001d94cee6.png
Size 25KB
SHA256 3fd94efdad58b4fac572292eff1fc1053d5c9d83b69897330253d4de8652b427
MD5 1d540259a28a31ef951c45c7a46492d2
SHA1 05e8242ecbcd2ee37963515b7fa8e1beca9625e4
SHA512 0583f548f4c75e84f8f0b0e4a15e23d9e6b1c738cf6833da3349acc8f58e4c04498a7a3521e7dd4069221c1b30587edf5ed1180986106e4e2a9df8c0356d2a31
SSDEEP 768:ZhSejY3Y1hsnx7MEDaroGLqE1dzvcoTF1:7Y3Ysnx7DaroGOEzDVTF1
TLSH
T131C2E198F9DFCA2DF2D52223A1D1A50A203F0EA4E019157CF176356EB71007821CFAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 21.9MB
SHA256 1090c5d6881985c042370d506e15f1db1d0a88bfb7e9602a9202fac421098eb3
MD5 322a050bc53af9aad7a659054354862d
SHA1 44dec61c400db851b57e4e2645fb253609db7d1d
SHA512 ae8624becb7619dd9602f416203c54096ae0e23c4c2574c8069e633f9682b0b9bf5bbb95e94fca6610b9581746d5ed648fd41c47d762b174bd5d632937df6689
SSDEEP 393216:vKuarWwW0LmrEr38dudevJCJU2kpq1gL2aVRHA:wWCmz0dwJIkpqCs
TLSH
T16337E14AE35310E9E81ECDF4866E9A62E4343C4E03319BEF17D47A355A727C42A39F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\addonStartup.json.lz4
Size 4KB
SHA256 fe057af49a89c70ef36d802ed063fe639d3b2e0ebf967b39ef9a16d4c91218c0
MD5 03edfbb36b20eba0c4a8d36a405ea290
SHA1 ec07ded7fdde71bc2d16df349c64046d83752a2f
SHA512 65a14db6887ec7e61fed069e10b212826eb99759cc1465334477fdbaf2311ac03d6b65bb80f5a068bdeef22b0845f8a3552cda27fe45e79d3d0bf6fd5306df54
SSDEEP 96:NtJ4sHNw6M2xWGhD41MgGvmHhF+rUpO1LnOYvhQhIRhN:Ni52xxhD8rGvm6ApwnHUuhN
TLSH
T1A1A17D7AD541EFA1FD32C04258D93FB2E69AAB3420B9C4D4F1AFB1254C74A731704340
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

store.json.mozlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\crashes\store.json.mozlz4
Size 66B
SHA256 078648c042b9b08483ce246b7f01371072541a2e90d1beb0c8009a6118cbd965
MD5 a6338865eb252d0ef8fcf11fa9af3f0d
SHA1 cecdd4c4dcae10c2ffc8eb938121b6231de48cd3
SHA512 d950227ac83f4e8246d73f9f35c19e88ce65d0ca5f1ef8ccbb02ed6efc66b1b7e683e2ba0200279d7ca4b49831fd8c3ceb0584265b10accff2611ec1ca8c0c6c
TLSH
T175A022C28E0C83BACF000833008AF00300E83B020B8B0F882AC2AEF8200200C8082082
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 e4064460c59d806d80045311b95b13f2e8c0698e218bcf826c8eb568b1ac870d
MD5 3056769fd9f24d01b7c650f92d6d3e7d
SHA1 185e8580535a54defabab870bc56f7522e77a137
SHA512 4960bc5742c4850856e58691e31ec76f9cf995956d4be4be37b1df400e2a571ee4fd5aa3e6a9443b87b423f8c935dfb5c3cefc2449c3f80d794ec02c412fef82
SSDEEP 192:XOv5zbowZHlyjs+g1d66JozGzgCl6mc0dx:obowZHlyj6d66JozGzgC1jr
TLSH
T126E12264E628467FC408027BDCA61F414F39389A9C8E3F1935ACA51C2C5B2DD768E17D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\db\data.safe.tmp
Size 66KB
SHA256 2147b7c997196a23227f2e79bf3a279964a061c23602f962d9b9275aa99dfdfd
MD5 8d4665bc26a8f9c722b948737c6d02cc
SHA1 fb50ac6c5fdba508bd2f83b54f5eb2e2e004a681
SHA512 3e1570e48977c127416d39a42400d69b35d15666af0ed5aaca688d4413f43589e41f5c3e88c75b3720e87e99aafa96c494ca9efb8a8775cd2035fabf7c1dce54
SSDEEP 768:yEMD9wZnhsED8GODGcmhucYjxLdNKUKR91ppxDUbfbJb6bqbIIRNKoU2tofSC:ewZnWED8Bjx6UWIOoU2tofj
TLSH
T10763BE80DB1B407BE81485FBB895272C1635B8614A595F5F3AAC04661CCB3FF2D0EA7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\db\data.safe.tmp
Size 3KB
SHA256 a6a3598bf1e91cf35c6d683e042b41f39850d9d34dc799f7f247e7defd350fe3
MD5 516fe2663ea2b245cbc066f03e3f8908
SHA1 da489a8cdfb5266ab6d74676774c423aa309227e
SHA512 168b91e3359ff7cf8aaf1898ec1efaf4de63d6403a9238b9e579659617e79c1df8fa5fd6c61b783a4c26684ec550138fb65828cb0bfcd483d0c5c451221f0213
TLSH
T1F061B858F228463FE448913ACC961F412F343456A8AE7F2A34ACA14D1E5B2CE77CD07D
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\events\events
Size 1KB
SHA256 7db2228bd43183c0aea2d48b364acabe938322a43e3a8d1b3cfcfd5fb4719991
MD5 988d207d5169aa0e0545523cddc419b8
SHA1 ad12c85941a54c16b437ff0975eb5c0d6264015a
SHA512 c76dbc611455f35cf152144f954d88b9af3d94b8e2164c0cd60ec4d7e28c9a09d9d8278546f3848e9484623c5c7fc43cd383339562f7bc8f3f7ead55650add29
TLSH
T1DF217C4C39B84D6A9C87E6AC7498018F97514E0B04871C436D13EF8DDD81AE932AE87D
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\events\events
Size 2KB
SHA256 a7da44d45ef7f100fa66e1da88cba0788b0ea9b1af4752f4dd7fbdc9128c3823
MD5 571e8c95c4bd7c6870c93c2f159282b0
SHA1 e479b69140f34072172439d7f509e3cf72ed1632
SHA512 a32af34dcc9b8f4cc0393359c0f0168ec12252806657ffb693b72e613b5923a46825b26a13dda007d0fbc05bab96faef92ebfce072741d30cbc86d8b3955b797
TLSH
T12241DC4D26BA4C7A6C87E7ECF809018E97455F0754832C876D93EE4CCC42AA9329F87D
MD5 SHA1 SHA512 TLSH

Submit Download

1361c2e8-301c-4126-947b-7adf8e384d17

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\pending_pings\1361c2e8-301c-4126-947b-7adf8e384d17
Size 235B
SHA256 9d19c1ab47821848515ca6fc8cb2ccf75d0bbff7df65699d75d55c30a1609985
MD5 3819facd6c934637d536204fcca24a44
SHA1 dfc1e93191ab5fffaa0991e786a73666313e8d82
SHA512 54cd0b77d19804040d345cc302d737d34e206ec728977ffdfb4c190e6691fac3a8f1c20e3b328e664eb6b923395d8317dc048d79139d4b32d965bf33b534861e
TLSH
T1E5D097803C9C2B5C48084F03B0A1E9E638994C3368B46820896008B8DABAED8419182B
MD5 SHA1 SHA512 TLSH

Submit Download

4631c900-a09c-43a0-b972-f7b1d79a0856

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\pending_pings\4631c900-a09c-43a0-b972-f7b1d79a0856
Size 886B
SHA256 1eb2ff6dd6121023bffddb5b33fa32bb70ae8dc3ca74f187f645a84e8310770c
MD5 046b85a4f7c8a99d08a43f06cf78ac58
SHA1 9b29faed623bea97529352a3ed5a1db2c04be282
SHA512 040380a1f1f9c89da275dcf85a447719a07487bae6ffa36600e873efc71803e2635035a07414601d517ff1fdbd78e415ce767108073fea9abe5ee6e0efe16830
TLSH
T137110041CA7579B3DD2CE28B94E17B438BE83423D0CA4A143E609F180DEA61EA352707
MD5 SHA1 SHA512 TLSH

Submit Download

69ba0a90-1a66-4ab7-8035-399a8a0537cc

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\pending_pings\69ba0a90-1a66-4ab7-8035-399a8a0537cc
Size 2KB
SHA256 57da7d1d9bf9ae49cc551555edd5befb8dd5873f84da89017401f7049a7d7601
MD5 f97ce62d6d8c0b1afa694d4c5ebcde91
SHA1 c3767bd0a6318f15375ba65fc36a9a3881e46639
SHA512 e847b678b3ecb0e4506a14708fc9a90aab6c98bff7c3bfb49eafeafb9de71b4600eee0d739c43165e70459333a6785eea341303195b46680bce8470fcb1fbd40
TLSH
T16541406C76B45C778C8AF55E9092234A53B08E4650C61C436EA1FF0C8DA375D336A92A
MD5 SHA1 SHA512 TLSH

Submit Download

7385280c-ef19-41c8-8d27-705624039ac0

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\pending_pings\7385280c-ef19-41c8-8d27-705624039ac0
Size 883B
SHA256 1eded349ff8932343375544ee638c4fd73ce076e05b06a31c8008bef9f4d79d0
MD5 205b863d2f2e4609f30852fd5f389db2
SHA1 6b8fc69eb6d13859999b76900500e0ea75e01951
SHA512 2b83984e330997ebf4060a9143205c56a9c227121c1f9e123dab77487e5549f61627b3bde4c03614d5f21893d513115d8f70a5b40676bb324df5bc0b8f6bf702
TLSH
T16D11DC41E67479B2CD6C928B84A53B028BE8382390C985143EB49A180C7EA1DA362607
MD5 SHA1 SHA512 TLSH

Submit Download

a80c2e8c-2dbd-4d42-8090-5d4d6480c4e8

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\pending_pings\a80c2e8c-2dbd-4d42-8090-5d4d6480c4e8
Size 15KB
SHA256 54427820e75fa59a28e589443ee12c850016cfa8d8d6bdf0f69e24405b8b492b
MD5 3d12050858720f0b4af63bd8d805e39a
SHA1 85cebb20e3d093fba739c2ebe9d4178623611f01
SHA512 2cd9dab3770c2d8b3dd1e8c1533ab0ee24322300d5d1d3d0553e7bb43283ad9ab96afbb62cb8dec0269196e00de13cea0a244666f9d60652b1c9b86571a0e05e
SSDEEP 192:lgX76cU6lzeC1gICaIKxiEQ34pMh1hmucryaQFvyr68RHxCEngTfUBw3l303Ib:l076cU6lV1g6ICH68tLqfU+3pb
TLSH
T12062D9566470597A8651E368D8FC7FC3E2F218CB4C019FCA9BE47E085DEE06E5127847
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f3fe88ca-24b9-4312-8d4f-20a79489c419

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\datareporting\glean\pending_pings\f3fe88ca-24b9-4312-8d4f-20a79489c419
Size 235B
SHA256 f76ac9d00dc53461b83728910165c5388ffbace899ec7b04c87a12e8bde5d0f8
MD5 58641bbd2aaec630e45ecf81dcdccd36
SHA1 f75bccfab814fc537eeb2b6e8b5ddd4f3aa09f42
SHA512 1c3afd05d98c4998d8aff44585de31c19d0a0fd8fc85d4e7ac51dee965746631651c63160ef46869d9a2a771a29cbb7f5681059b241e8d36fedf38b5509b31be
TLSH
T1B2D097A02488A35E4C140F0AF0B068C6B18D4C331071A820AAE10A3499FDEC94235C9A
MD5 SHA1 SHA512 TLSH

Submit Download

extension-preferences.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\extension-preferences.json
Size 942B
SHA256 cf91c5fcebee0d71d0d20ec46579b48dac36dac9f7282050c722a145290a6686
MD5 049e3f74f928fcd7fdc29233b7326c88
SHA1 a99947bcaf045b7bdea588d5c76c3407f1ebfcea
SHA512 362cce92211768838d31b556e22e7810357b52caebefacee6ba05228fcc4dccd813bc40a19bded3ac3a8bf886bb7310ea7fd46cce5f599de9891df53813558b6
TLSH
T14311F13A640B6EB01E8E5625FE384A92E791111B50B7F2E47E69934A13D3970C1ED39C
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\extensions.json
Size 14KB
SHA256 b03b35c68cdc22db5c819f8c505a972e8832d130bc0e034bb0bd71527cb697b3
MD5 a703452cf7b0d35730edf2668d284723
SHA1 fc4b2c23bee560c937481e88471c953b86c7a5c3
SHA512 aa9a306ac7b5033f1bffe9d6d9332a9d077a695985c46f20656530a603a367a9bba8c58c44a17797257bb80017dcf589dfdbd49876b1ef4fe845d67c30ea584c
SSDEEP 384:XkI4vMUmldvS8dhWA94zs96oxL4Hb9L4PdL4HXL4HoL4HC:0I4ERf3Xp486y454V474K4i
TLSH
T12262421545048EB8298FA79BAA367E01C37D473B60845C78F4DD8FC802FA5B902FB61B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\gmp-widevinecdm\4.10.3112.0\LICENSE
Size 473B
SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
MD5 7406820f5d56fda6baffa951c60679d2
SHA1 e7d4894993e506e235d55b3e47aed019d0584148
SHA512 e70868507c08436b51bb4fd7a582ec0bf81ae0fb5d3d3f20374f584574e54eca81f3cb0530fddcf2d1773c33774f5df58f55ed2a45149c86d33e1e50f64c1d36
TLSH
T13AF0DC7ABA23532245D603C7011450D53B270BF4F25422D0E3E881E5336B178C1FE084
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\gmp-widevinecdm\4.10.3112.0\manifest.json
Size 1005B
SHA256 1cc15465230ffb75fd028ee3b2189c8774f56bc7dee8dd17b952e6ca92144004
MD5 58954048e70c81669675d4f87ab50af1
SHA1 8ab675ea31801bbb91c33fd381f4c202bfd7882e
SHA512 f9b8c236c9404936b93ba92550c21a0344b657c42cd98e091cda32e33fed860d59ac0cb97451ca61b2d8e6a943a983ded569b1d7ecd541e832e3ca87b39ecbd0
TLSH
T161115E00DD384DD326D4B6A21CC6580957661DAF5CC27E54379E161D4F1C8AB927376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\gmp-widevinecdm\4.10.3112.0\widevinecdm.dll
Size 21.9MB
SHA256 7b44e84403fbb3faee15ca2d56eb8432fdf4eb68812c4460abdd20972528e825
MD5 5614c2225ece73a37e47894ff3c19aa3
SHA1 df3aadd22db3b5841fe488c985365269709b4b27
SHA512 8b8e55347a7a496cfe52222670781654ada20accf21f3e2dd88847e0a7a00cb083609a5f3907bcc1f927c1227de20373a744028466663c5389ad286a46fc3286
SSDEEP 393216:SKuarWwW0LmrEr38dudevJCJU2kpq1gL2aVRHy:dWCmz0dwJIkpqCW
TLSH
T1CC37E14AE35350E9E81ECDF4826E9A62E4343C4E03319BEF17D47A355A727C42A39F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

widevinecdm.dll.sig

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\gmp-widevinecdm\4.10.3112.0\widevinecdm.dll.sig
Size 1KB
SHA256 f9f160cb5ca37ef81a3aa80eeb7fef8b302e18c82d92c34f42503e0ab085ada5
MD5 a0dd5d559b24af4590e5cae3ac11a0fd
SHA1 04b83b414c36ab24fd27fe432a690de636bd2996
SHA512 2d69ea26916ed156f214c17d57c158cb680f1119849b8dd1f7315fd3fa6981c9d6ec2026b494d8e2e70e969205f063979287265a94e73704fe392884e8b4e4ac
TLSH
T1DE21E9DD697012242880793E5FEDF016FD3325C2AA3014FF456B65C2BCE376018C462E
MD5 SHA1 SHA512 TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\prefs-1.js
Size 8KB
SHA256 b0b11953c498a9673f9b89161575984ea5821d33238d948297062acb0d0c7938
MD5 0df6edc1b1accd8445f55dc134a24896
SHA1 711642fc091a4420c35fa4e382934b285833366b
SHA512 e6d407df70b08096ceececc4eaf4633eade22e9f14e798418ec2450596d8ebd11d4b0f32060661bed04e8b5f2bc2e047cdc3ec28ff6a7f0446fba9267f396286
SSDEEP 96:xH59TU5PqGqFfRVIObzSySSlSdv9jSn2RWRpwONLBw88Cp8L4cnEVoR:XACRFfRVIASSQ8Rp1ZBw88C7G
TLSH
T19D02EC389445DB7F64B6377CAC6889315AA2013BBBBF68D750B964C40508F3442FDAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\prefs-1.js
Size 6KB
SHA256 72e96a06811caed3e89852943c8b31832aa3731a3949b35b4ed80b9bc2ba2d18
MD5 6b6c45f358b66bbb8a97f3836547f84a
SHA1 bae7f858e09e6ccfa2a228f1d8e1bb5506b12e7a
SHA512 44c0974f2514b29d05eb49f573925af07916698eb08dcb65b292429c7eb3a01a0338fe4e752e4cd73d0d77e86859d571c057b95a4777103c9cb349e7d3ff930d
SSDEEP 96:xH5UTUGqGqFfUVIObzSySSlSdv9jSn2RHKpBw88n8L4cnEVoR:XBRFfUVIASSQ9KpBw88ZG
TLSH
T1EAE12F7895488B7F74B6776CAC6888319AB2013BBBBF68D750B554C4011CF3442F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\prefs-1.js
Size 6KB
SHA256 4ffe79aeffc59bb0dea121eff013131e5128f33073b4543ee46fc692817b03e2
MD5 c006f3287796359ef4d580d02892f466
SHA1 c3722b9f735a4994afb1297d5fe28b5468cca857
SHA512 cac53dd687b0896579c6e62c0778101d426c131e0d71be81e9c3a2d3bb714d225487e3e48c3c5bbf4ebaa91839dbe9ae6a2bcb2fb5c86c98f0092bfc31f57970
SSDEEP 96:xH5UTUGqGqFfUVI1zSySSlSdv9jOn2RHKpBw88n8L4cnEVoR:XBRFfUVI/SS49KpBw88ZG
TLSH
T16AE11E7894488B6F74B677ACAC688C315AB2013BBBBF68D750B55484011CF3442F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\prefs.js
Size 6KB
SHA256 40454e020bce72c449a6314785d20e7cee3ee454cfb5bfb2709529d3b753f92c
MD5 489fedb3ec6b6be52e446892e9d74120
SHA1 b4a80aa9d7243c5c61700dae3d2c2c816b25f8f7
SHA512 7d8cfd84bd34c96a1b504d52e60f635824703c37f0ebf41149bc528ce244cc07dcead0f786793a116113552e0fed3158c3160ce2ae144a653c0ea2d08b707279
SSDEEP 96:xH5UTUGqGqFfUYg1zSmnSSlSdv9jOn2RHKpBw88D8L4cnEVoR:XBRFfUYg3nSS49KpBw88FG
TLSH
T1C6E12F7890488B6F74B6776CAC688C315AB2017BB7BF68D750B554C5011CF3442F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\prefs.js
Size 6KB
SHA256 3aaa9ac07416c06b9cddd59e81debe64a8bec80261cbf01fddbd3dfac171ebb4
MD5 1141372877596f5bf2ecd3fc682f8b25
SHA1 772919d76a550d281e861cad1c60dcaea18ffda2
SHA512 3dd43bfba5cc7315052cd7ef85b8e837de3b4daedae9c7305aa5b3c578491127370bd9042161da927a95a27acd45d1f2d06131c4bebd4408ff8fca4844209b22
SSDEEP 96:xH5UTU5PqGqFfUVIObzSySSlSdv9jSn2RHKpBw88n8L4cnEVoR:XJCRFfUVIASSQ9KpBw88ZG
TLSH
T120E11E7895488B6F74B6776CAC688C319AB2013BBBBF68D750B554C4011CF3442F9AEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

search.json.mozlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\search.json.mozlz4
Size 327B
SHA256 a4c8d0344cbf6e230cecbc4d989de36ec075cd8eda7ae740242e1b05b5dd3fd4
MD5 240589068f063f8f706378168230e975
SHA1 9531374a22dea374d032f7484567fb1b201af87d
SHA512 6d04629da44769a64b8808d198f3b3ba6388a0cd5441269e35ca39e7595c4e9abd32618f76ff60b79df80732838ee2a67455e195a801a67334a592b6b6240da5
TLSH
T169E07D3E9C15A0B6C2AC0AC35F0F494A0F58583A9324AC8C90B49D91557FF9B5248E2B
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\sessionCheckpoints.json
Size 90B
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2
TLSH
T1D4B01205C8181030CD43140873743B429B2E00B231500100317CF88C203B0134556883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\sessionCheckpoints.json
Size 53B
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19
TLSH
T10190024AC8590431DE42251823647B90A61E04A254250101526CBC88046B0155486483
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\sessionstore-backups\recovery.jsonlz4
Size 1KB
SHA256 fbe3ccdac724727aaf92b1f73f4e66bdc9d62895bed69791068cf05b341b911c
MD5 bcffab674379e2c86044d67fa78c31ad
SHA1 3a4d4e00189f092b00c5a8d2bdfebfc5d5eb9ae2
SHA512 1c3bc8e199b0970dd6389f59cc43e9dc1d23ba8df9d886b6a8eb44ce782c9c175ddb94f924f7925748ef6e033129a286e0010517e0aa4bd49a7bf15632fb0be7
TLSH
T13421CAC7DD1A6AB17E329266C44A96F9CB4C3023856448E5968DAF021C9F04825C7A4A
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\sln8pgmh.default-release\sessionstore-backups\recovery.jsonlz4
Size 3KB
SHA256 972fe4f62985d4ce121337fed4cf05b3e0f68ef544386a68c7c978b42e792974
MD5 c26e9cf5cb64eb97885f9ed51fdf73b7
SHA1 acaefd0455b66eb2f11fc6418db2d3014a837d6b
SHA512 0484010cf38516450df75bd99e292b96ccd9926674175472225fa3ce86d56ea51c75d857def85e56fd4f90ee36e64ef725c89edda9435ccda2ec6f0eb5cd0ff3
TLSH
T1C3613A9EE93D7AD0166E4AD9C0896C2CEC1E181347E504C14B7F8D184AFB64647CFB9D
MD5 SHA1 SHA512 TLSH

Submit Download