hxxps://steamrip[.]com/meccha-chameleon-free-download/

Analysis

user interaction
yes
max time kernel
25s
max time network
152s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
04/11/2026, 23:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://steamrip.com/meccha-chameleon-free-download/
Sample261104-3t2svsv1ft

Score

1^/10

persistence

Malware Config

Signatures

Checks processor information in registry 2 TTPs 22 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	1108	firefox.exe
Token: SeDebugPrivilege	1108	firefox.exe

Suspicious use of FindShellTrayWindow 7 IoCs

pid	Process
1108	firefox.exe
1108	firefox.exe
1108	firefox.exe
1108	firefox.exe
1108	firefox.exe
1108	firefox.exe
1108	firefox.exe

Suspicious use of SetWindowsHookEx 10 IoCs

pid	Process
1108	firefox.exe
1108	firefox.exe
1108	firefox.exe
1108	firefox.exe
1108	firefox.exe
1108	firefox.exe
1108	firefox.exe
1108	firefox.exe
1108	firefox.exe
1108	firefox.exe

Suspicious use of WriteProcessMemory 48 IoCs

description	pid	Process	procid_target
PID 3840 wrote to memory of 1108	3840	firefox.exe	80
PID 3840 wrote to memory of 1108	3840	firefox.exe	80
PID 1108 wrote to memory of 4772	1108	firefox.exe	81
PID 1108 wrote to memory of 4772	1108	firefox.exe	81
PID 1108 wrote to memory of 4772	1108	firefox.exe	81
PID 1108 wrote to memory of 3912	1108	firefox.exe	82
PID 1108 wrote to memory of 3912	1108	firefox.exe	82
PID 1108 wrote to memory of 3912	1108	firefox.exe	82
PID 1108 wrote to memory of 3912	1108	firefox.exe	82
PID 1108 wrote to memory of 3356	1108	firefox.exe	83
PID 1108 wrote to memory of 3356	1108	firefox.exe	83
PID 1108 wrote to memory of 3356	1108	firefox.exe	83
PID 1108 wrote to memory of 3356	1108	firefox.exe	83
PID 1108 wrote to memory of 3200	1108	firefox.exe	84
PID 1108 wrote to memory of 3200	1108	firefox.exe	84
PID 1108 wrote to memory of 3200	1108	firefox.exe	84
PID 1108 wrote to memory of 5692	1108	firefox.exe	85
PID 1108 wrote to memory of 5692	1108	firefox.exe	85
PID 1108 wrote to memory of 5692	1108	firefox.exe	85
PID 1108 wrote to memory of 5692	1108	firefox.exe	85
PID 1108 wrote to memory of 2304	1108	firefox.exe	86
PID 1108 wrote to memory of 2304	1108	firefox.exe	86
PID 1108 wrote to memory of 2304	1108	firefox.exe	86
PID 1108 wrote to memory of 2304	1108	firefox.exe	86
PID 1108 wrote to memory of 5528	1108	firefox.exe	87
PID 1108 wrote to memory of 5528	1108	firefox.exe	87
PID 1108 wrote to memory of 5528	1108	firefox.exe	87
PID 1108 wrote to memory of 5528	1108	firefox.exe	87
PID 1108 wrote to memory of 2432	1108	firefox.exe	88
PID 1108 wrote to memory of 2432	1108	firefox.exe	88
PID 1108 wrote to memory of 2432	1108	firefox.exe	88
PID 1108 wrote to memory of 2432	1108	firefox.exe	88
PID 1108 wrote to memory of 3968	1108	firefox.exe	89
PID 1108 wrote to memory of 3968	1108	firefox.exe	89
PID 1108 wrote to memory of 3968	1108	firefox.exe	89
PID 1108 wrote to memory of 3968	1108	firefox.exe	89
PID 1108 wrote to memory of 5372	1108	firefox.exe	90
PID 1108 wrote to memory of 5372	1108	firefox.exe	90
PID 1108 wrote to memory of 5372	1108	firefox.exe	90
PID 1108 wrote to memory of 5372	1108	firefox.exe	90
PID 1108 wrote to memory of 4908	1108	firefox.exe	92
PID 1108 wrote to memory of 4908	1108	firefox.exe	92
PID 1108 wrote to memory of 4908	1108	firefox.exe	92
PID 1108 wrote to memory of 4908	1108	firefox.exe	92
PID 1108 wrote to memory of 796	1108	firefox.exe	93
PID 1108 wrote to memory of 796	1108	firefox.exe	93
PID 1108 wrote to memory of 796	1108	firefox.exe	93
PID 1108 wrote to memory of 796	1108	firefox.exe	93

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "https://steamrip.com/meccha-chameleon-free-download/"
1⤵
- Suspicious use of WriteProcessMemory
PID:3840
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url https://steamrip.com/meccha-chameleon-free-download/
  2⤵
  - Checks processor information in registry
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:1108
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2008 -prefsLen 27097 -prefMapHandle 2012 -prefMapSize 270279 -ipcHandle 2076 -initialChannelId {67e97688-4da3-405b-a763-4cea55f4f3ff} -parentPid 1108 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1108" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:4772
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2464 -prefsLen 27133 -prefMapHandle 2468 -prefMapSize 270279 -ipcHandle 2476 -initialChannelId {c9863190-1af7-4214-b3cc-21ad686c3429} -parentPid 1108 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1108" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    PID:3912
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3716 -prefsLen 25164 -prefMapHandle 3720 -prefMapSize 270279 -jsInitHandle 3724 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3732 -initialChannelId {c359a4cd-cba9-4e74-84af-345e628f4b6b} -parentPid 1108 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1108" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:3356
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3904 -prefsLen 27274 -prefMapHandle 3908 -prefMapSize 270279 -ipcHandle 3976 -initialChannelId {a437c5e5-3b1d-49ed-b08f-cd07f7052d8f} -parentPid 1108 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1108" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:3200
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4352 -prefsLen 34773 -prefMapHandle 4356 -prefMapSize 270279 -jsInitHandle 4360 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4368 -initialChannelId {0f35f221-8bf9-491d-946d-a7fbc709bb77} -parentPid 1108 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1108" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:5692
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4532 -prefsLen 35010 -prefMapHandle 4932 -prefMapSize 270279 -ipcHandle 4940 -initialChannelId {ca7f4001-d45d-4b1e-b4b8-2da5c01ae5c8} -parentPid 1108 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1108" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:2304
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5732 -prefsLen 32952 -prefMapHandle 5736 -prefMapSize 270279 -jsInitHandle 5740 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5752 -initialChannelId {31235da4-6f6d-4474-8d53-9bc01744016d} -parentPid 1108 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1108" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:5528
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5760 -prefsLen 32952 -prefMapHandle 5764 -prefMapSize 270279 -jsInitHandle 5768 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5776 -initialChannelId {508dbd20-fc7a-4291-a772-781c29cc5113} -parentPid 1108 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1108" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:2432
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6116 -prefsLen 32952 -prefMapHandle 6120 -prefMapSize 270279 -jsInitHandle 6124 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5892 -initialChannelId {1e3ba403-f408-408d-9fcf-35ff6337b8f2} -parentPid 1108 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1108" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:3968
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6432 -prefsLen 32952 -prefMapHandle 6436 -prefMapSize 270279 -jsInitHandle 6440 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6404 -initialChannelId {1a22f1de-7fd0-4aae-b46e-caea2909fe40} -parentPid 1108 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1108" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:5372
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7044 -prefsLen 32952 -prefMapHandle 6980 -prefMapSize 270279 -jsInitHandle 6996 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2972 -initialChannelId {54fcab53-17b7-4d78-a6bb-c948e0c27eb5} -parentPid 1108 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1108" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
    3⤵
    - Checks processor information in registry
    PID:4908
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 7296 -prefsLen 32952 -prefMapHandle 7300 -prefMapSize 270279 -jsInitHandle 7304 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4644 -initialChannelId {6a1b188a-adcd-4d13-88a5-d13a13a2dbc8} -parentPid 1108 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1108" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 tab
    3⤵
    PID:796
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 1 -prefsHandle 7176 -prefsLen 35079 -prefMapHandle 7184 -prefMapSize 270279 -ipcHandle 7428 -initialChannelId {b504852a-2ba4-4933-b0d0-39917e784547} -parentPid 1108 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1108" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 13 utility
    3⤵
    PID:400
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 2 -prefsHandle 6888 -prefsLen 35079 -prefMapHandle 7140 -prefMapSize 270279 -ipcHandle 6980 -initialChannelId {f4459849-0a88-4709-b711-57103ba62d97} -parentPid 1108 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1108" -appDir "C:\Program Files\Mozilla Firefox\browser" - 14 utility
    3⤵
    PID:5144
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4768 -prefsLen 34745 -prefMapHandle 6388 -prefMapSize 270279 -jsInitHandle 5992 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6012 -initialChannelId {e98f73e7-bdc1-4483-a15c-c0f48696a11c} -parentPid 1108 -crashReporter "\\.\pipe\gecko-crash-server-pipe.1108" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 15 tab
    3⤵
    PID:444

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4644

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\zt90ztxy.default-release\activity-stream.contile.json
Size 4KB
SHA256 8344d5254acd5bdcd573f80634a0e229c577bc4f0467cc339bcc3f229fe7aa65
MD5 d3f33163a3c314fea7cfb113785b35ff
SHA1 5686b3a6f19c61c8653804cc671791189b52976e
SHA512 71a3bd4e07ebf4c22ffa055a3e2b00657829e005cb03b24588cabc1bd265471a4ed30413b6f34cae6cd9484af0a29ec7368ef7a92cce2494c766433be3cd551d
SSDEEP 96:TRcMTmzrmNDL7hNT+mRNZEn4KYyaY+x6D80lz:+MTCroFcmRNCKxw80F
TLSH
T14191DA9B94648C521731BBE53C0737A8F10B7007EEE4AAAC722D5C70865C7FE40DB584
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

activity-stream.discovery_stream.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\zt90ztxy.default-release\activity-stream.discovery_stream.json
Size 75KB
SHA256 c8feb8a1821f5c96989f11238ba5ecd1de9207d898daa7b1bba97ad078dd8522
MD5 1f72324df426cb660185c2ac367a2795
SHA1 9843ff53190ca4e62956c26fc79ce45d99624bab
SHA512 dc3e8cdb85d13ce306140a68e0c071bf8a39576cd845673a66c91448f6c3e5f504b28ef5d52e7ac09535a39368045e5517dbca8dec1ede4d6d97bfe593390bfe
SSDEEP 768:PyvikD5OXuibHPmS51u8BCi3/5xeLs2POOrML7la:KvRd07Pm6DBC2Te5QLRa
TLSH
T19573F9A3E7ECB1BB1BD537CB2C0FB99B66D10146E34506C8FCE9C91C81CD654123A6A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

11227

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\zt90ztxy.default-release\cache2\doomed\11227
Size 13KB
SHA256 7cf30af08f3eee41e4455dbc1cc213b26935b4dcf27bf949278fd140c7e160c4
MD5 f11a9e46cb843946c3c89c754b0292c7
SHA1 99e2e4ecd31d5903770ba3d128b4c85aeeb4072e
SHA512 dd5db883507bf3059757068c6591693354bf40f02d21c2d300fc793bd7825436e1c5c5069f70b2aebdeaa021a0a4fc07c3b5fa3ebfb19a0f8bc11a3d20943253
SSDEEP 384:Z798ay3GjGh9HaBWP6xT2DdP6xT2iB4tf340AiPivAiPiq:ZhzA9HaEP6xTEdP6xTD4tQ0ML
TLSH
T128523BB1AA1846BE0B9197C55CE81A447F39620B3C9764FCA571330A568DFEDF1E20AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

12966

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\zt90ztxy.default-release\cache2\doomed\12966
Size 13KB
SHA256 3a7ece6c95d3c75af86a4987708a51a5039e20a0031905ee9e76c98e8a7664f0
MD5 eb2d25a2e1b8d61bc06c2ba55702745d
SHA1 7406c781874df1ff98410db97b7f05fe7913b8f0
SHA512 576610e9aff6dd9d40ee18d66409478a6677f23aae589ed2a3b19e11aaa9f4828e57c461ac1432b027ad643a512aaa82ab28603d64ba2bf3f88b3e0aa6d75d81
SSDEEP 384:bEb4qqOqIBP6xT2DdP6xT2iB4tf340AiUiQZcE8AiUiQZcEY:wb4qqOqIBP6xTEdP6xTD4tQ0vE8vEY
TLSH
T115524CB1A918077D0B9193D59CE51B88BE36620B3CA678FDD17632074689FDC76C20DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

12971

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\zt90ztxy.default-release\cache2\doomed\12971
Size 1022B
SHA256 f69560fe1572f466d50a48e2f4dd300d75bab2f0faabdc588f94da996eae7de3
MD5 891fc558971846fbd92846c2b6d7683c
SHA1 ec1a9ed4a56baf96006d38a18c095f216638969b
SHA512 54d9ee8b1e497e239b958ec4260a66c231a868f467e6cebe2f5ecb94eca41b24d6e10fe5a9fa8e9685272c8fc3b7be8585bff8ead83b4d18a2cee6b14ad1ddf7
TLSH
T115110EE63E407501E55DAFB920ECFE4B704337132A00D989C5AA2FD7417A0D1148AF3E
MD5 SHA1 SHA512 TLSH

Submit Download

06A6D86B39A0E3DCE68006525D21C3AAB6C8E0B4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\zt90ztxy.default-release\cache2\entries\06A6D86B39A0E3DCE68006525D21C3AAB6C8E0B4
Size 16KB
SHA256 6c7ccc5eb9fb6132e4260e320682d2c2acff663af158a7fbe1ae6f830253463b
MD5 09558701bf2afaff58184c4d7fa1147d
SHA1 491deb2ef363a4d926969a457758fba19cb509ca
SHA512 5cc5db8db5b6983564d5edc3c6322588a70848685829cd3e551d7657cf0126e7aea38ec52092dee4f379cb620a6e64d9307f64a8ca7acef4c84a60471600743f
SSDEEP 384:HXwIiO024YiWTT78XJWTT78gB7SOEAd9KVRaAcP+AWRMAYCv:36ZYiWTToXJWTTogB7S/AmVAf+hRMLCv
TLSH
T185728E7D9F413CAC176790E8C8B983558D1CB6ABDFB5C02D21983D09CA8865A70F985F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\zt90ztxy.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 efbe7d514ba8a7be40d4af4bcd97ddea4ece91a4661e7042c2d25a02da26eccb
MD5 388f486e65d232a27c8a22e2539c6a76
SHA1 f0c0d1941fed81ec7bc692435b4d2c02e48c9cfc
SHA512 62bea4e0f27b2e2f4f79fd6d51fdc9c3a734d12d3c999d332e9f0fb35716db2ecdec438945816d6e14f8b3b2417bf783461cc4d8a6d31c86b9819fe66410f99c
SSDEEP 1536:jTrliy+CiD2YPNx39EOjKcHvhaDJSTfbRt0EuQc54n/7QCyVeGaD2Xm3LRTvYT9l:j3l0PD39YnNIN13c6/7RAw6XOYT6OL
TLSH
T19EB3AFF6DBE28D3995FFD02D6BC2C43EFD162400B3A73009C9236755A2C6BB86675648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

webext.sc.lz4

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\zt90ztxy.default-release\startupCache\webext.sc.lz4
Size 105KB
SHA256 f6203468c56fca4548ee94df0518f7666ae915169875d44db6a7a59b76ee2700
MD5 67182f5a12213bb4508d434f59c5e84f
SHA1 12f3f232b1381a3fc658944c8b63fc592b6150fe
SHA512 cc5ec1ab06022e9d4c449478b14d82ba2c5924d0976643f877240940b5b2a9bd8d78b4a26a0b7d7ab3d74f376e1b388e11cd30b00304c637e900d8fc7585404d
SSDEEP 1536:XTrliy+CiD2YPNx39rD5i5AItMQBT6RLtbEuQc54n/7QCyVeGaD2Xm3LRTvYT9vo:X3l0PD39BH7I+a3c6/7RAw6XOYT6OO
TLSH
T143B3AFF6DBE28D3995FFD42C6B82C53EFD122400B3A7301DC9236714A2C6BB86675648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 21.6MB
SHA256 7b81444b063f81e77c527c5589e86836cc2f7328deb2772300ccc7dc9e2510c3
MD5 40bf410fa9ef0d5499907e34885af6f4
SHA1 4d7722337a0e26bf4a1c6478129356acb2f7b720
SHA512 b763712aa4bd9819b7972a40216c08fd32338b14fab7ce4b166e39ce441ad62678bf0e1f25da436ffdb56ff1b1a21e3dbbaf47c0f5918c252e70656f5d0307ac
SSDEEP 393216:KYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHY:3mghF5QDwWCm/2YU8Ivq9u5P
TLSH
T14F37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\AlternateServices.bin
Size 10KB
SHA256 b51d5223a7a895765152684e19c2f061d78b53b0629acb7bca1e8d7d0868c79a
MD5 74d1ee9c835f5a06582e0a247236e0be
SHA1 33b841a704e198201e754e5a2754f0107bd81e53
SHA512 f0e5a1b933a452eb69d9bb811f51c506a797acf27a68418b1a5938b054edbbd55af85c400e95eb363ef8e8423330244b5a62683c717efe9b114946487b31df1b
SSDEEP 24:JuhMZUs/IM12aZcTeMIqIMR47geMOIMVnMUbIMhRmmMbqIM1ezbgM8kYIMBDVqzr:oExOIIy7gz8yUl3ubIEzV8N6hR
TLSH
T1D72275F74776A572E1A28FB060B8758AAC231217695441D48B4D91E74792EE0D0FFF2C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\AlternateServices.bin
Size 16KB
SHA256 9c753f5093305b2905f6f82d2bce8d6a9322eb161007b078303581d96568037d
MD5 4d6c37ddfbf70e72848cf259d19c1b19
SHA1 b7fd84c26582fa1a6607f189c22adde3c4ff1026
SHA512 caa4f833849dd58acde21f92229a44c7930086eb0607db151fd69124c2eca7e6abd092c805f8462eb7758f6a28feb51ac30200eb4f9b3b8e3ea92ee606cb2952
SSDEEP 96:Mu0hCIy7QCEjPWIEz8zTkIrGIsGbG+znu5C4:2
TLSH
T11872D7F707B6A162F0A28FB450B8758AAC231256695491D48B4D92F74786BE0D0FFF3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addonStartup.json.lz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\addonStartup.json.lz4
Size 4KB
SHA256 a518d562a41c57d59a5cc3239d2a7e17f00e19376140d7c2f63dd76b3390e6aa
MD5 f4e57ec3f1c4e0e65f97f3fb9cbcb772
SHA1 9b0613cd974f5ec9d54df1c5e9825ba61845b90d
SHA512 54d8fa3a7cf19363ea19be792f82d8e718f74f5a22b215b08f73e05be5c5a9daf65d08e8f616c38e23873360d01ae618d4637046d52a629c7ce0924ce3d1579f
SSDEEP 96:N1M4s7Nw6M2xWGhD41MgGvmHhF+rUpO1LnOYvhEhIRhN:Nn52xxhD8rGvm6ApwnHwuhN
TLSH
T179A17DBAD581EFA1FE32C04658D93FB2EA99AB7410A9C8D4F16EB1294D74A735700340
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

broadcast-listeners.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\broadcast-listeners.json
Size 221B
SHA256 965baa3566c66c0459a2a49d2bbf170824bb501e04d6d6db5223d51624e86350
MD5 facfa2d5d3f9d06655aa7841ef637fdb
SHA1 e675f942e49f422ac5e3f730a54c52fa0050c2bb
SHA512 483716739521f713fc513ccadc6e12258eca12a56f3599b38ecca2652c76140e995cd7d2f60b79ebe153f3d5ba83e53879923621cfd73e097fb9074d7892b6b3
TLSH
T174D0220E14133CBF4B4C673DF408A7854BAA200A7270917DC3AE24A40E2ABEC410C1A8
MD5 SHA1 SHA512 TLSH

Submit Download

store.json.mozlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\crashes\store.json.mozlz4
Size 66B
SHA256 078648c042b9b08483ce246b7f01371072541a2e90d1beb0c8009a6118cbd965
MD5 a6338865eb252d0ef8fcf11fa9af3f0d
SHA1 cecdd4c4dcae10c2ffc8eb938121b6231de48cd3
SHA512 d950227ac83f4e8246d73f9f35c19e88ce65d0ca5f1ef8ccbb02ed6efc66b1b7e683e2ba0200279d7ca4b49831fd8c3ceb0584265b10accff2611ec1ca8c0c6c
TLSH
T175A022C28E0C83BACF000833008AF00300E83B020B8B0F882AC2AEF8200200C8082082
MD5 SHA1 SHA512 TLSH

Submit Download

data.safe.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\datareporting\glean\db\data.safe.bin
Size 109KB
SHA256 2bcbc495de2975a2a837933d83789ed72dafae1183880fcd5b968549f8c57675
MD5 97191ffa7bf547776378501ce3ed999c
SHA1 c7057490541207fa49b21ea277441c7ff5a83ef8
SHA512 102955b64d380e6490f62c3ee1b708a415b7415c77b649b8336980e36a1c92503806637d693896fa9519e9b0a2b4b718e5ce5ee07964380034dfd1c174f23954
SSDEEP 3072:+9iF1NMUOpDnXeYO6MXH5712kvUcsioLJv:+4F1NMUOpDnXeYHMXH5712kvUcsioLJv
TLSH
T135B3E080DB1A407BEC1446BFB89527283735F4654A596B0B3AAC04752CCB3FF2D0E66E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\datareporting\glean\db\data.safe.tmp
Size 104KB
SHA256 510f925dc18c0d6e10efec09e8076d083968e2d1f414ae7824136b0cc77d4d3f
MD5 66245af833adb5c3d3af420b58a8784c
SHA1 9cbb7f4f891702cb010c04571d2d138d32156633
SHA512 12debfe814248ad1e5ae04fdc6615225c742974a7c1c85ade8fd44a3f3f51c4bbdbbe8787d8412490fb31c99c9410108763c96f1580929181d0b3b2cb564bd0c
SSDEEP 3072:qh8ks1HG5FJ7BeVacq51gA8NvUcsioLJB:qaks1HG5FJ7BeEcq51gA8NvUcsioLJB
TLSH
T1D0A3E180DB1A407BEC1446BFB495272C2735F4654A596B0B3AAC04762DCB3FF2D0E66E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 c1e65df4ae192947721e019dc875e34e971e217b4a386f1089991e5bb14c23ef
MD5 c27f94a41b9d53b83f35f92e2a037b4c
SHA1 44dd3fac4de1b46ef51d752430f719e2852d71ef
SHA512 300bd09d14c2016f85bb6914854c836ee7651478ebab2d735fcde2a40f7c1b889750cf7b4c052ea420d1114a5970296fb7a11c837bf191ef477de8c3628ed1dc
SSDEEP 192:Kl1d66Joz0dzgCl6mc0dVOv5zboHcryFyjw+:ad66JozQzgC1jobosyFyj
TLSH
T142E123A4E638467FD408427BDDA61B400F35399A9C4E3F19359CB01C2C576EE768E1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\datareporting\glean\db\data.safe.tmp
Size 70KB
SHA256 d52a4ccda6f9585f67fddca8581a7818a98e82005abfebd25885156be324af8f
MD5 91169fbdf53f895df40def814c772695
SHA1 28adedae2cd1731c1996188b91f83d4b19a0d872
SHA512 63b19d4c926bf1bf3ae040fd6ae1b65f9238185096d311f8bef8e725a4fd076d5e523219a868d8a3c2b825d8a903f340040bb9cae322e84542cf2fe0d033df8e
SSDEEP 768:nbKdD6xScGCTKs4ui3vPKlGcmhuclBCA/3KcYCjpQ//b+bAbRb+bhhHRH1oUcioP:WdD6xScGmKsNi3ZBCmbhHvoUcioLm0
TLSH
T11D63AE80DB1B407BF81485FBB495673C2635B4614A595B4F3AAC04662CCB3FF2D0EA6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\datareporting\glean\db\data.safe.tmp
Size 5KB
SHA256 ffbc3b393018b9f144de183bf0482d9836c17848efe4673de7b8568b9d60d0c0
MD5 3d8b4aa56ab88d47b4bab96e23f244c8
SHA1 939f6409f509a982ec021172ed8c8f78ed5d2f9a
SHA512 afa13348fb1dc5f94464307a6f807da925804eafde88f4b2cc91df9a09b6c03504b48835407a6fcb06d66cf2f7ae1d00549bcfaf0b79def244a83e6c447a229e
SSDEEP 96:bSdF95/7bkW6QXjrcEyFyUR6qx2WZtHFLf270V/dd66Joz0dzgClKtmc0d/UK:bOv5zboobyFyjExzl1d66Joz0dzgCl6s
TLSH
T187C1EE64E738463FD408423BCDA61B400F363597989E3F1931ACA01D2D5B2EE7A8E17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 fbbae13c785f851078942735e7364bf65f1d295272baa3ef92cb4a8f91f19f79
MD5 dd4eb80a6a18bd0b97c0b70a59b0da31
SHA1 589227a1b5ca34e26db3be66c1418ed491e8d7bd
SHA512 5b94e03f83a562e25e6b2a75d8d21cbcb7f03bd77a78bbf48c4d958f2035b4fe0a8604cff2f5ca4f81be2af3cc53bcae02dcf18f634cbe86265b3db7b07f4f68
SSDEEP 192:tl1d66Joz0dzgCl6mc0d8Ov5zboVbyFyjw+o:Rd66JozQzgC1jRboVbyFyjU
TLSH
T1CFD120A4E638463FD408527BCDA61B400F35359B9C4E3F1935ACA51C2C5B2EE768E1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 c90cd71d04c3690c8a5bfc0bc25430a22c3eda941dce4a2b2c6026859a3f798d
MD5 6c3e27a36a1877eba0ac36b1d61c75dc
SHA1 9973e17d513e0c390cdf231026f1ccd74062d254
SHA512 b52b9389588df6787416213631a23a3a95102c8a583ea9e8ddeaf67081eab5bf5f506576f046c4fbd563b940fef1f4aa10c0c09c64b92ef56a58e253ea367450
SSDEEP 192:tl1d66Joz0dzgCl6mc0diOv5zboHkZyFyjw+o:Rd66JozQzgC1jvboEZyFyjU
TLSH
T1D2E132A4E638867FD408427BDDA61B400F35399A9C4E3F19359CB01C2C576EE768E1BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\datareporting\glean\events\events
Size 1KB
SHA256 2761ac071bf772c148ae2c8a913b2c3f1da7f3aa196b149d3edf4f33eb7a77a5
MD5 aee163718be2ebe721f13fcd4fce4534
SHA1 051f50474beac535d97e423d104c0056a0cc8c16
SHA512 1d3ac1e876c78448c22de5a648d0425e9457af68793f0dccf69e79929dc61a594e985fb9a74a44b538d31d4563cf621151069e3fa990cde97971d3351e75e645
TLSH
T195116A9C3DB94D2A698BF6AC788141CE93154A4B14871D434D06DFCDCD90AD932AE439
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\datareporting\glean\events\events
Size 2KB
SHA256 4442680940ca29e96db6333a891388182480666be826b11df0753785427c5cec
MD5 0d2949c4234e71701b175d76cc349837
SHA1 ad2f767c803f1d0cf0a3861c44494b9760c170c0
SHA512 e9132a152eb713a27dbb539696e92cdb4998d47b18b818ae795fb102e503acc152e38e9aa19fce3cd52dbe74c04ee929596cc5b9614f0ca708857b42d5793fd6
TLSH
T18141BD8C2AFA4D7A688BF6ECF841058D93455B0654C32C835DC7DE99CC52AD9329F43D
MD5 SHA1 SHA512 TLSH

Submit Download

022a168d-58e6-411f-b288-481d519f7670

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\datareporting\glean\pending_pings\022a168d-58e6-411f-b288-481d519f7670
Size 883B
SHA256 585f2d88f01f7b4420c3f24777bfe1b25db473f48d7497fd78743c5190dd3c41
MD5 3edb6dfd89a513691912d7e83e28011d
SHA1 f81febd47afe0f6ccf34f015e8c39b758fd1d183
SHA512 794421ba87954751531727b037e060af060c78ce81f83cf255d8cf4df0150c0c58cc9a66896d75778067f4e0c374630689a7244c9385179e2285aadbbd24319b
TLSH
T151110481D73479B1DC2CD24B8995770257F4712380CA89083D75A9140C7D92F53AB707
MD5 SHA1 SHA512 TLSH

Submit Download

19484e05-ff97-4f11-b8ae-661849386075

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\datareporting\glean\pending_pings\19484e05-ff97-4f11-b8ae-661849386075
Size 886B
SHA256 a2a53fc44a2f91d45fcabc4db19ff721ab7b9ed52b4662e9a685c021a249b658
MD5 24168042ea55942fe91869b14c75da68
SHA1 a1a6ac28415d29cdd4a0e3db8f02c7f1a324426c
SHA512 d2407588e5c2d006ad4a32c5623540b7d08781fd715aa6119b9dcfab3e2975294f3ae1fe94660e2d637fee44a3ac35cd24119467b0a555742b1052edc83a9230
TLSH
T191110081C73475B1EC28E29B9AE1774657F0757380CA1D483EA49A180CEE67FA2A7507
MD5 SHA1 SHA512 TLSH

Submit Download

24472552-0ccd-4bc8-ad7e-3365cc0a2c67

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\datareporting\glean\pending_pings\24472552-0ccd-4bc8-ad7e-3365cc0a2c67
Size 235B
SHA256 c6edf6c235b82a7cf6a76db8c96872869f5688b8e8e231a6948325e5b546a192
MD5 f854f515e8b4dc73bca14fa211f46ca6
SHA1 20f911267b404a9c54040fab263bcf99d4607d8c
SHA512 adc583cf83eba5847994ef5dd66bb2dbde8edf51ec29ae93b3dfc4856b12c7af2c8e0b9478c7751b75c6e4b510239fd992993a393dffc6cc88f75021ea06ad58
TLSH
T14AD097D01498371E28100F47B1E069C6305A4C3320649810E9A109B88AFCDC901A1927
MD5 SHA1 SHA512 TLSH

Submit Download

7595aa9e-7164-4878-bdb2-0d87900f7f6e

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\datareporting\glean\pending_pings\7595aa9e-7164-4878-bdb2-0d87900f7f6e
Size 2KB
SHA256 9f112ce4bf44a6b81dc0d168ace758f61cbe6a53fa1edf603faf5d207f459467
MD5 4d35c09f9372b01f5280afa5b44b2e1c
SHA1 c01e7e490d02e77d7aa01e689e51d20eca6fd613
SHA512 f99125309708f9a2d011e8f783e01452ae9bc8a71e059c76481d550202e219aeca6b8c447156718903a60cee833cd3d3bde8af4de97f5a9ad1e00e7e416cad54
TLSH
T15241535CB6BC4D769CDAE18DD192238E53704A1300C228876E55FE0CCD867AE336A527
MD5 SHA1 SHA512 TLSH

Submit Download

a418fd81-3811-4526-a9db-4b2642d96bb3

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\datareporting\glean\pending_pings\a418fd81-3811-4526-a9db-4b2642d96bb3
Size 16KB
SHA256 7a66792728100bb739e4a52794ccef7da681d4b13c3510e3f5249d4b7b4144b6
MD5 50036fb5ebe7edc0b6a79fcbdae12572
SHA1 5094d60ff9922fda84634a5225f708571129d2db
SHA512 b4e8af5d72bae748f1e55ac90ba08611010abedb248c0cbfa0cc0d1eb85bad7e7656323bec37ceaa03ec5d92b44fdf269dd4997b0917ddf797c3ff0e51214848
SSDEEP 192:f9Rneg+jE74FizxzsBk1SZmsxhonR5ZfhX6OW6TYB2giLJ3BK4w7vRVBSXr1WyDr:vb+g74FilzsByi5iWVcXUyDbisr
TLSH
T18972D856282055BA8691E36994F87FC3E6F52CCF4C018FCE9BE4BD046DEE06E512784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b48f45e7-93e5-4779-840a-386bed361567

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\datareporting\glean\pending_pings\b48f45e7-93e5-4779-840a-386bed361567
Size 235B
SHA256 9c81565d92349083ab8a17cbc381396baefba703f56860b47748bcab8ef22fe6
MD5 75934d3487f0739adbad1a95425792e7
SHA1 7a123c0cb787d15320468108831d58f5115bad41
SHA512 a30f2207ffb7206bfc93df2de3058501a5245d65aaa95e700426f494596806249c506218d9453a6a1cefd1b74e3e70ad1eec28d4aaa83cba606c990ddcd9022b
TLSH
T16AD097C058BCB36E58040F12B0B06ADA70458C33546558109A601034AAFAEC402A988B
MD5 SHA1 SHA512 TLSH

Submit Download

downloads.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\downloads.json
Size 973B
SHA256 9878efadaa9bad986f60c12fc31ec0faf9fb1167e4a984d01b7c0584ada31868
MD5 788600fc804b6cb91eccca93589b0f75
SHA1 8e8eeb27ad86d7bb4409afad79931e856b72295b
SHA512 beb7c97b7d37286b927ca9ae45593ec633e72bc713622d6c0e1c1f604a6fa4829f13ed55d6ee0390810f2ec3632c0309b3cc542a08d150b10c1aff5681e359e5
TLSH
T16811CEF29802ABECF2407F62593A67070E79A007D48049686BED958959B10647578463
MD5 SHA1 SHA512 TLSH

Submit Download

extension-preferences.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\extension-preferences.json
Size 942B
SHA256 00dc2290dbbdce30a85e06ded26d7ee786412fa45c1348a801bfe2c13b9c63d0
MD5 b9aeb15420f1636d61ab0f72e3852464
SHA1 34f4c6b664d0d5b663678c1552686723e8cd9cbd
SHA512 f5d138a42649ea001273d8f516dd0e5f91aae04ccedcaa1da9a27e3f5aed14859f02733629a52af8c98fee0b5dc70998b4c27821fb8a459349eef4b1dc15b14d
TLSH
T15411F13A640B6EB01E8E5625FE384A92E791111B50B7F2E47E69934A13D3970C1ED39C
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\extensions.json
Size 14KB
SHA256 d09ca0123f66c361cbe597b432ff7bbf7a1a5ff2d3f874d43103f676fbaeb523
MD5 b171d4f5593ac0a0de195f2a996541a2
SHA1 27190efeb3b71f2b0af5923ef412321279b005b5
SHA512 f2d490e87c5fe3be745c6e7fb074f55660c3c5d99ac11e3c55a61baa39a9eaf0508e06f51e4f96894c5d7bd5aa314d3e474d945d6411a02cb77a86e4683f14be
SSDEEP 384:gEkI4vAUmldvTC8dhW794zv96oAL4HwL4PbL4HrL4HuL4HC:gLI4oRfDXW4h6N4S4f4X404i
TLSH
T14962521545048EB8298FA79BAA367E01D37D473B70445C78F4DD8FC842FA5B902BB62B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\gmp-widevinecdm\4.10.3050.0\LICENSE
Size 473B
SHA256 20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386
MD5 7406820f5d56fda6baffa951c60679d2
SHA1 e7d4894993e506e235d55b3e47aed019d0584148
SHA512 e70868507c08436b51bb4fd7a582ec0bf81ae0fb5d3d3f20374f584574e54eca81f3cb0530fddcf2d1773c33774f5df58f55ed2a45149c86d33e1e50f64c1d36
TLSH
T13AF0DC7ABA23532245D603C7011450D53B270BF4F25422D0E3E881E5336B178C1FE084
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

widevinecdm.dll.sig

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll.sig
Size 1KB
SHA256 c5f50bed6afd38490baca2ce8e8fdd1a39849c9f0dc06478a8a2e9226526607b
MD5 61d51cf075ad6dcbaaebf956c6bc1dcd
SHA1 f176331dcdb84327afd47ecf8ede3b0664c7d05a
SHA512 de263ed43f1112786186afa7bb942f25482fe60b04e7138c3687ec09956e0247307e5a6303a4297f785a572ed9a0059747a9b870c2fb6e84483373cfe27ca6c5
TLSH
T1C421B6DDAD2426542DC0EB2D5EF8E826DD3112C2F96404BB426666C3FCA3BA038C466D
MD5 SHA1 SHA512 TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\prefs-1.js
Size 6KB
SHA256 b6e89c50b67d7eabbcdf5fed0db2932326481603e6104334d63e23e4ed62681d
MD5 0f1cc17747962c7ee3ce93f70efc92bb
SHA1 d02072e4a5cf2356c754586759168d3548e3acc9
SHA512 e33400b7214f2c4c7529b3cb6a235cdccf294edfa4212c35b047f0ca6d63415aceb63c5745df4639b49d52777bd1469955140be3b6c7ab130dc14e4edf62503a
SSDEEP 96:xHsUTUSqGqnfS/D1zS7SSlcdv9jsnuH6tZBw88H8L4cnGLEB:WFRnfS/DiSSeyZBw88bs
TLSH
T17BE10D7895088F6F74B677AC6C6888719AB2013BBBBF28C750B554C5054CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\prefs-1.js
Size 7KB
SHA256 647a1fcf012dbe975d2a2bb5f4d3a5af16e0e287940a55692a30ae8af71b7ef9
MD5 676cbcd0dd13c1ddd1721ce7b5484f66
SHA1 9ab599590d060b7da5fccdf9c662126c686e1ac4
SHA512 b6d99f8835d661bbcd2a34747953ab1742e4a7c62ea2935c9a833cfd442d5dd22eede79a4f90140579f41321c11d953b9906d6e186bbb91d0091f632511b9e01
SSDEEP 96:xHs1TUSqGqnf9/DObzS7SSlcdv9jsnuH6t8Bw88C8L4cnGLEB:WQRnf9/DxSSey8Bw88Us
TLSH
T16BF10C7894448F7F64B6767C6C6488305AB2013BBBBF68C650BA44D5054CF7442FA6EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\prefs.js
Size 6KB
SHA256 5b352d3cb66dc51b9e594a3daec04bbc64a98a69e839b00bcfe61c40cff482ca
MD5 7d2fa20008f7dccf6f7fc82ec9a4056b
SHA1 350e4a6312e228fcd08edd92c5beed16cc70466d
SHA512 e2544033ac864cd9260a26da0414f68baeb1926e9ecfaf482dd7b02e2a17545ee471cfc422d37f9f04dff552b91d95d5b5e320838f5d43cd50b72b2b538ccc81
SSDEEP 96:xHsUTUSqGqnfS+q1zS2SSlcdv9jG1fnuH6tZBw88H8L4cnGLEB:WFRnfS+q/SSH1YyZBw88bs
TLSH
T1FEE12F7895088F7F74B6776C6C6888715AB2013BB7BF28C750B55885054CF3882F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\prefs.js
Size 6KB
SHA256 134e69405d291e03e162bc03077eaffb47d7d76cbf46578bc1c2004987cc1896
MD5 249e797d66077d07f2032666a98087ee
SHA1 ee379487fa0fe102e6d3eed2f5ce616f3314dfd1
SHA512 0b4d99665e096eb0229420d50e537fd8b69c20436935d839aa699d9c2450d5b09c998b040cf9e2161399dfc6220d31ad3200098753259a41d2703e70a93eec13
SSDEEP 96:xHsUTUSqGqnfS/DObzS7SSlcdv9jsnuH6tZBw88H8L4cnGLEB:WFRnfS/DxSSeyZBw88bs
TLSH
T1C5E10D7895088F6F64B6776C6C6888719AB2013BBBBF28C750B554C5054CF3442FA6EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\prefs.js
Size 12KB
SHA256 3ac24ca0aed92e85ef7e9e4d4b8e9d66656798eb61b9b8ee1d1a68dc1833d014
MD5 c5e6ce26fbc67d9d0523cee620a4dd10
SHA1 79aa04412095b8b2f0364a5274db235d9145195b
SHA512 f44515357bd4f85bc7f53110ccb0e0cf93f5c214c946b5a665df0fd0ba7c1a5b1d572c2cb356fd95c53344ebe0ce2455a4dc2e91a1ce96f787b45de88e865cbb
SSDEEP 96:xHs1TUlPqGqnf9/DObzS7SSlcdv9jsnupwoDRYGtB+MOBw88sz/6mWzwD2y8L4cK:WYCRnf9/DxSSaLRxtOBw88sGmWzwD9l
TLSH
T1B342CD7854418F3F20B6327D6CA589B459A10137BB7FBCD645F984D2044CFA441E6AFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\sessionCheckpoints.json
Size 90B
SHA256 00ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
MD5 c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA1 5942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA512 71ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2
TLSH
T1D4B01205C8181030CD43140873743B429B2E00B231500100317CF88C203B0134556883
MD5 SHA1 SHA512 TLSH

Submit Download

sessionCheckpoints.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\sessionCheckpoints.json
Size 53B
SHA256 792955295ae9c382986222c6731c5870bd0e921e7f7e34cc4615f5cd67f225da
MD5 ea8b62857dfdbd3d0be7d7e4a954ec9a
SHA1 b43bc4b3ea206a02ef8f63d5bfad0c96bf2a3b2a
SHA512 076ee83534f42563046d25086166f82e1a3ec61840c113aec67abe2d8195daa247d827d0c54e7e8f8a1bbf2d082a3763577587e84342ec160ff97905243e6d19
TLSH
T10190024AC8590431DE42251823647B90A61E04A254250101526CBC88046B0155486483
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\sessionstore-backups\recovery.jsonlz4
Size 10KB
SHA256 334cb9d02b1e5812a3c669dc404f43d9c7d25683cda1db44ad5b1f1de0d8ba16
MD5 ca1fa810714791918f84a8a0fc0e850a
SHA1 169e894ded2ea5ce8e55f53cecd2629532ded352
SHA512 0f9cfff50dfccb3e7f6fec91754e445eea9b0749fbd21334d8c3e16ae854a4f50caa6717253cef7dcfb47c0ef14f01ca8b787acbe9ad3dca042abb83f3d7c751
SSDEEP 192:fs7IkMk0ofoP5bR5xuqD8KRnQ3Kw6q5NmY+BLMJu9rhnuRzujUcLDreNyq:fsF0ofoBbbYq4KRQaw6Y+5MIBhucZWX
TLSH
T12B22BF6B87037FE92A8865E490EA6C41B9E7499FC1A17944DB2C7B3943BDD74330E092
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\sessionstore-backups\recovery.jsonlz4
Size 7KB
SHA256 02fb431b8421c1b208923cb5d04f1d529e4a74261b057bd8e75b00f5517c1bf1
MD5 a98f59cb90bf1b526a9cc228b051e51a
SHA1 743c8ccc131b3d93b881ddda24ee04f3b5b0187a
SHA512 f372a813e41b9b9ca9aac649a2ca6e68f2eeba8472817d4125d63dd19275e34dc5c0de493a6b96b0fb81db7efaee2aeac4859e0c424c335ec75854cf06fa8abb
SSDEEP 192:Fs7IiMOf0ofoP5bR5xuqD8KRnQ3Kw6q5NmY+BLMRmBckI:FsJf0ofoBbbYq4KRQaw6Y+5MEBLI
TLSH
T1ECF1BF2772436EF9360AE1B9E4B2BC42F5C7056BC005B454CB6CB22E43F4C91B01D067
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\sessionstore-backups\recovery.jsonlz4
Size 7KB
SHA256 bffeace5310ad57abdbf5b2bad71bc9d2c32beb07826e739ba6bca29a3153f0a
MD5 1b7e88275314d83a7406e8a0811be921
SHA1 2fd9060fbcc2deae43e35c9b7f59803892c16627
SHA512 375939d3963185974547f019d90f8570157035f92f0c5e24b68a7ec9632d6b4e9e9655de4faeb939a04976c909f92178f176ed034971a8b5468d310457c181ad
SSDEEP 192:rs7IkM40ofoP5bR5xuqD8KRnQ3Kw6q5NmY+BLMq5UJidnV:rsl0ofoBbbYq4KRQaw6Y+5Mq2Ji5V
TLSH
T12DF1CE42B2536EF9314EF295A4B27C01F4CB51ABC0057980CBAC723E83F8CA1B52C0A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\sessionstore-backups\recovery.jsonlz4
Size 7KB
SHA256 0c29baaa532de81a5f15a09fa6b863b0fa0e4c7673163a32ea1584059cb4f7e3
MD5 0b81c52ab9a4d67a289128ffd2de03c4
SHA1 4ab0029fb41650acdc249ecb4f71c858dbed29c4
SHA512 978345bbbfdcf00034fba893ad83ea707cb50b303e8ec59d452111d0d0739ad9606373f3c11f3320de5815015e42e5e0411379f93c588fb2320d480c1e4f3516
SSDEEP 192:rs7IkMP0ofoP5bR5xuqD8KRnQ3Kw6q5NmY+BLMq5UJidnY:rsq0ofoBbbYq4KRQaw6Y+5Mq2Ji5Y
TLSH
T11EF1BF46B2536EF9354EB295B4B27C01F4CB51ABC0157994CBAC723E43F4CA1B52D0A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3619099707vealluiddoamt-es-cbir.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\zt90ztxy.default-release\storage\default\https+++web.tolstoycomments.com^partitionKey=%28https%2Csteamrip.com%29\idb\3619099707vealluiddoamt-es-cbir.sqlite
Size 48KB
SHA256 b4ff2c46aa327316262fc63e8c7f2721ad4feacac0f21cafe305d0afbe509e9d
MD5 8f238557b99752074607b699ccaa513b
SHA1 91c5647c8dcd27edb16e139541b426e369aa6f35
SHA512 5196c3fc5d2a0fb412fc5f407bc8966c383ccf67a8e95547c51d281e8e92da7c8d07035a0ac82bfda43806185954116257a7a2a45e0204f0193aa762744e66fd
SSDEEP 48:TiaOA65g7LV6CM5znpgBlizb5pxVgnO9zxV+LU7mY2wzY5QcEVdyE89Ck:Oa16S6CKnqlizbxV+2xVeU7X2B0Rk
TLSH
T1F323908E3F07F511C53AF0B178A08C51FC5E321D07222AD56990DAE4C8F215AEE5F9B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download