hxxps://github[.]com/MatrixTM/MHDDoS

Analysis

max time kernel
9s
max time network
61s
platform
ubuntu-20.04_amd64
resource
ubuntu2004-amd64-20240221-en
resource tags

arch:amd64arch:i386image:ubuntu2004-amd64-20240221-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system
submitted
28/03/2024, 21:35

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://github.com/MatrixTM/MHDDoS

Score

7^/10

antivm spyware stealer

Malware Config

Signatures

Changes its process name 64 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	gmain	1535	Process not Found
Changes the process name, possibly in an attempt to hide itself	gdbus	1541	Process not Found
Changes the process name, possibly in an attempt to hide itself	glean.dispatche	1542	Process not Found
Changes the process name, possibly in an attempt to hide itself	IPC I/O Parent	1544	Process not Found
Changes the process name, possibly in an attempt to hide itself	IPC I/O Parent	1544	Process not Found
Changes the process name, possibly in an attempt to hide itself	IPC I/O Parent	1544	Process not Found
Changes the process name, possibly in an attempt to hide itself	HTML5 Parser	1708	Process not Found
Changes the process name, possibly in an attempt to hide itself	HTML5 Parser	1708	Process not Found
Changes the process name, possibly in an attempt to hide itself	Backgro~Pool #1	1707	Process not Found
Changes the process name, possibly in an attempt to hide itself	Backgro~Pool #1	1707	Process not Found
Changes the process name, possibly in an attempt to hide itself	IPDL Background	1706	Process not Found
Changes the process name, possibly in an attempt to hide itself	IPDL Background	1706	Process not Found
Changes the process name, possibly in an attempt to hide itself	Socket Thread	1705	Process not Found
Changes the process name, possibly in an attempt to hide itself	Socket Thread	1705	Process not Found
Changes the process name, possibly in an attempt to hide itself	Netlink Monitor	1704	Process not Found
Changes the process name, possibly in an attempt to hide itself	Netlink Monitor	1704	Process not Found
Changes the process name, possibly in an attempt to hide itself	pool-firefox	1713	Process not Found
Changes the process name, possibly in an attempt to hide itself	pool-firefox	1714	Process not Found
Changes the process name, possibly in an attempt to hide itself	Timer	1703	Process not Found
Changes the process name, possibly in an attempt to hide itself	Timer	1703	Process not Found
Changes the process name, possibly in an attempt to hide itself	JS Watchdog	1716	Process not Found
Changes the process name, possibly in an attempt to hide itself	JS Watchdog	1716	Process not Found
Changes the process name, possibly in an attempt to hide itself	BGReadURLs	1770	Process not Found
Changes the process name, possibly in an attempt to hide itself	BGReadURLs	1770	Process not Found
Changes the process name, possibly in an attempt to hide itself	glxtest:disk$0	1788	Process not Found
Changes the process name, possibly in an attempt to hide itself	Cache2 I/O	1834	Process not Found
Changes the process name, possibly in an attempt to hide itself	Cookie	1837	Process not Found
Changes the process name, possibly in an attempt to hide itself	Cookie	1837	Process not Found
Changes the process name, possibly in an attempt to hide itself	StreamTrans #1	1925	Process not Found
Changes the process name, possibly in an attempt to hide itself	StreamTrans #1	1925	Process not Found
Changes the process name, possibly in an attempt to hide itself	TaskCon~ller #1	1927	Process not Found
Changes the process name, possibly in an attempt to hide itself	TaskCon~ller #0	1926	Process not Found
Changes the process name, possibly in an attempt to hide itself	BgIOThr~Pool #1	1928	Process not Found
Changes the process name, possibly in an attempt to hide itself	BgIOThr~Pool #1	1928	Process not Found
Changes the process name, possibly in an attempt to hide itself	QuotaManager IO	1931	Process not Found
Changes the process name, possibly in an attempt to hide itself	QuotaManager IO	1931	Process not Found
Changes the process name, possibly in an attempt to hide itself	IndexedDB #1	1946	Process not Found
Changes the process name, possibly in an attempt to hide itself	IndexedDB #1	1946	Process not Found
Changes the process name, possibly in an attempt to hide itself	IPC Launch	1958	Process not Found
Changes the process name, possibly in an attempt to hide itself	IPC Launch	1958	Process not Found
Changes the process name, possibly in an attempt to hide itself	SandboxReporter	1957	Process not Found
Changes the process name, possibly in an attempt to hide itself	SandboxReporter	1957	Process not Found
Changes the process name, possibly in an attempt to hide itself	Breakpad Server	1956	Process not Found
Changes the process name, possibly in an attempt to hide itself	DOM Worker	1960	Process not Found
Changes the process name, possibly in an attempt to hide itself	DOM Worker	1960	Process not Found
Changes the process name, possibly in an attempt to hide itself	Sandbox Forked	1959	Process not Found
Changes the process name, possibly in an attempt to hide itself	Chroot Helper	1963	Process not Found
Changes the process name, possibly in an attempt to hide itself	StreamTrans #4	1970	Process not Found
Changes the process name, possibly in an attempt to hide itself	StreamTrans #4	1970	Process not Found
Changes the process name, possibly in an attempt to hide itself	StreamTrans #3	1969	Process not Found
Changes the process name, possibly in an attempt to hide itself	StreamTrans #3	1969	Process not Found
Changes the process name, possibly in an attempt to hide itself	StreamTrans #2	1968	Process not Found
Changes the process name, possibly in an attempt to hide itself	StreamTrans #2	1968	Process not Found
Changes the process name, possibly in an attempt to hide itself	MainThread	1959	firefox
Changes the process name, possibly in an attempt to hide itself	IPC I/O Child	1971	Process not Found
Changes the process name, possibly in an attempt to hide itself	IPC I/O Child	1971	Process not Found
Changes the process name, possibly in an attempt to hide itself	IPC I/O Child	1971	Process not Found
Changes the process name, possibly in an attempt to hide itself	Socket Process	1959	firefox
Changes the process name, possibly in an attempt to hide itself	Backgro~Pool #1	1972	Process not Found
Changes the process name, possibly in an attempt to hide itself	Backgro~Pool #1	1972	Process not Found
Changes the process name, possibly in an attempt to hide itself	Socket Thread	1973	Process not Found
Changes the process name, possibly in an attempt to hide itself	Socket Thread	1973	Process not Found
Changes the process name, possibly in an attempt to hide itself	Timer	1974	Process not Found
Changes the process name, possibly in an attempt to hide itself	Timer	1974	Process not Found

Reads user data of web browsers 64 IoCs

Reads stored browser data which can include saved credentials.

spyware stealer

description	ioc	Process
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/content-prefs.sqlite	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/favicons.sqlite	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/prefs.js	firefox
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/times.json	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/sessionstore-backups/recovery.jsonlz4	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite-wal	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/xulstore.json	firefox
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/storage/permanent/chrome/idb/1451318868ntouromlalnodry--epcr.sqlite	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite-journal	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/key4.db-journal	firefox
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/sessionstore-backups/previous.js	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/storage/permanent/chrome/idb/1657114595AmcateirvtiSty.sqlite	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/content-prefs.sqlite-journal	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/favicons.sqlite-journal	firefox
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/protections.sqlite-journal	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/storage.sqlite-journal	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/storage	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/storage/permanent/chrome/idb/1451318868ntouromlalnodry--epcr.sqlite-wal	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/extension-settings.json	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/cookies.sqlite	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/cert9.db	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/favicons.sqlite-wal	firefox
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/cookies.sqlite-wal	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/places.sqlite-wal	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/storage/permanent/chrome/idb	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/permissions.sqlite-journal	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/addons.json	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/storage/permanent/chrome/idb/1657114595AmcateirvtiSty.sqlite-wal	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/favicons.sqlite	firefox
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/bookmarkbackups	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/storage/default	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/storage.sqlite	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/extensions	firefox
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/user.js	firefox
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/cert9.db	firefox
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/cert9.db-journal	firefox
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/sessionstore.js	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/compatibility.ini	firefox
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/storage/permanent/chrome/idb/1451318868ntouromlalnodry--epcr.sqlite-journal	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/places.sqlite	firefox
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/storage/ls-archive.sqlite-journal	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/storage/permanent/chrome	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/handlers.json	firefox
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/pkcs11.txt	firefox
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/key4.db	firefox
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/sessionstore-backups/recovery.baklz4	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/sessionstore-backups/recovery.js	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/places.sqlite-journal	firefox
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release	firefox
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite-journal	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/cert9.db-journal	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/key4.db	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/thumbnails	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/places.sqlite	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/favicons.sqlite-wal	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/permissions.sqlite	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/sessionstore-backups/previous.jsonlz4	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite-wal	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/cookies.sqlite-journal	firefox
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/storage/ls-archive.sqlite	Process not Found
File opened for reading	/root/.mozilla/firefox/85oei15p.default-release/addonStartup.json.lz4	firefox

Checks CPU configuration 1 TTPs 1 IoCs

Checks CPU information which indicate if the system is a virtual machine.

antivm

Virtualization/Sandbox Evasion

T1497

description	ioc
File opened for reading	/proc/cpuinfo

Legitimate hosting services abused for malware hosting/C2 1 TTPs 11 IoCs

Web Service

T1102

flow	ioc
99	camo.githubusercontent.com
100	camo.githubusercontent.com
101	camo.githubusercontent.com
104	raw.githubusercontent.com
93	camo.githubusercontent.com
94	camo.githubusercontent.com
96	camo.githubusercontent.com
103	raw.githubusercontent.com
97	camo.githubusercontent.com
98	camo.githubusercontent.com
102	raw.githubusercontent.com

Reads CPU attributes 1 TTPs 11 IoCs

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/devices/system/cpu/present	firefox
File opened for reading	/sys/devices/system/cpu/online	Process not Found
File opened for reading	/sys/devices/system/cpu/present	firefox
File opened for reading	/sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq	Process not Found
File opened for reading	/sys/devices/system/cpu/cpu0/cache/index2/size	Process not Found
File opened for reading	/sys/devices/system/cpu/present	Process not Found
File opened for reading	/sys/devices/system/cpu/present	firefox
File opened for reading	/sys/devices/system/cpu/present	firefox
File opened for reading	/sys/devices/system/cpu/present	firefox
File opened for reading	/sys/devices/system/cpu/cpu0/cache/index3/size	Process not Found
File opened for reading	/sys/devices/system/cpu/present	firefox

Enumerates kernel/hardware configuration 1 TTPs 64 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/bus/pci/devices/0000:00:06.0/irq	glxtest
File opened for reading	/sys/devices/pci0000:00/0000:00:02.0/subsystem_vendor	glxtest
File opened for reading	/sys/fs/cgroup/cpu,cpuacct/cpu.cfs_quota_us	firefox
File opened for reading	/sys/devices/system/cpu	firefox
File opened for reading	/sys/bus/pci/devices/0000:00:04.0/class	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:00.0/irq	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:01.3/resource	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:03.0/resource	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:03.0/irq	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:06.0/vendor	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:01.0/irq	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:01.3/device	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:02.0/device	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:05.0/resource	glxtest
File opened for reading	/sys/fs/cgroup/cpu,cpuacct/cpu.cfs_quota_us	firefox
File opened for reading	/sys/bus/pci/devices/0000:00:00.0/resource	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:05.0/vendor	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:05.0/device	glxtest
File opened for reading	/sys/devices/pci0000:00/0000:00:02.0/subsystem_device	glxtest
File opened for reading	/sys/devices/system/cpu	Process not Found
File opened for reading	/sys/kernel/security/apparmor/features/dbus/mask	dbus-daemon
File opened for reading	/sys/bus/pci/devices/0000:00:01.3/vendor	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:03.0/class	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:01.1/device	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:02.0/vendor	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:05.0/irq	glxtest
File opened for reading	/sys/fs/cgroup/cpu,cpuacct/cpu.cfs_quota_us	firefox
File opened for reading	/sys/bus/pci/devices/0000:00:04.0/irq	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:01.3/irq	glxtest
File opened for reading	/sys/bus/pci/devices	glxtest
File opened for reading	/sys/devices/system/cpu	firefox
File opened for reading	/sys/fs/cgroup/cpu,cpuacct/cpu.cfs_quota_us	firefox
File opened for reading	/sys/bus/pci/devices/0000:00:03.0/vendor	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:01.1/vendor	glxtest
File opened for reading	/sys/devices/system/cpu	firefox
File opened for reading	/sys/bus/pci/devices/0000:00:06.0/class	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:02.0/irq	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:01.0/vendor	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:02.0/resource	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:02.0/class	glxtest
File opened for reading	/sys/devices/pci0000:00/0000:00:02.0/uevent	glxtest
File opened for reading	/sys/devices/system/cpu	firefox
File opened for reading	/sys/devices/system/cpu	firefox
File opened for reading	/sys/bus/pci/devices/0000:00:01.0/device	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:04.0/vendor	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:01.1/resource	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:05.0/class	glxtest
File opened for reading	/sys/devices/pci0000:00/0000:00:02.0/device	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:03.0/device	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:06.0/resource	glxtest
File opened for reading	/sys/devices/pci0000:00/0000:00:02.0/vendor	glxtest
File opened for reading	/sys/devices/system/cpu	firefox
File opened for reading	/sys/bus/pci/devices/0000:00:01.0/resource	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:01.0/class	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:04.0/resource	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:04.0/device	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:00.0/class	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:01.3/class	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:00.0/device	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:01.1/irq	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:06.0/device	glxtest
File opened for reading	/sys/fs/cgroup/cpu,cpuacct/cpu.cfs_quota_us	firefox
File opened for reading	/sys/bus/pci/devices/0000:00:00.0/vendor	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:01.1/class	glxtest

Reads runtime system information 64 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/1540/attr/current	Process not Found
File opened for reading	/proc/self/fd/48	firefox
File opened for reading	/proc/self/mountinfo	firefox
File opened for reading	/proc/filesystems	firefox
File opened for reading	/proc/self/maps	firefox
File opened for reading	/proc/self/fd/42	firefox
File opened for reading	/proc/self/fd/10	firefox
File opened for reading	/proc/filesystems	xdg-document-portal
File opened for reading	/proc/1994/cmdline	Process not Found
File opened for reading	/proc/2034/cmdline	Process not Found
File opened for reading	/proc/self/cgroup	firefox
File opened for reading	/proc/self/mountinfo	firefox
File opened for reading	/proc/filesystems	gvfsd
File opened for reading	/proc/self/cgroup	firefox
File opened for reading	/proc/1490/cmdline	Process not Found
File opened for reading	/proc/self/fd/37	firefox
File opened for reading	/proc/self/fd/44	firefox
File opened for reading	/proc/self/task/1492/stat	Process not Found
File opened for reading	/proc/self/task/1967/stat	Process not Found
File opened for reading	/proc/filesystems	xdg-desktop-portal
File opened for reading	/proc/self/task/2058/stat	Process not Found
File opened for reading	/proc/filesystems	firefox
File opened for reading	/proc/2079/smaps	Process not Found
File opened for reading	/proc/self/task/2106/stat	Process not Found
File opened for reading	/proc/self/fd/45	firefox
File opened for reading	/proc/2009/cmdline	Process not Found
File opened for reading	/proc/self/task/2086/stat	Process not Found
File opened for reading	/proc/self/mountinfo	firefox
File opened for reading	/proc/filesystems	firefox
File opened for reading	/proc/2103/smaps	Process not Found
File opened for reading	/proc/filesystems	dbus-daemon
File opened for reading	/proc/filesystems	nautilus
File opened for reading	/proc/filesystems	gvfsd-trash
File opened for reading	/proc/self/maps	firefox
File opened for reading	/proc/self/maps	firefox
File opened for reading	/proc/self/fd/94	firefox
File opened for reading	/proc/2120/smaps	Process not Found
File opened for reading	/proc/self/fd/30	firefox
File opened for reading	/proc/self/fd/47	firefox
File opened for reading	/proc/self/cgroup	firefox
File opened for reading	/proc/self/cgroup	firefox
File opened for reading	/proc/mounts	dbus-daemon
File opened for reading	/proc/self/mountinfo	firefox
File opened for reading	/proc/self/fd/40	firefox
File opened for reading	/proc/self/fd/46	firefox
File opened for reading	/proc/self/fd/50	firefox
File opened for reading	/proc/self/fd/51	firefox
File opened for reading	/proc/self/fd/34	firefox
File opened for reading	/proc/filesystems	firefox
File opened for reading	/proc/2120/statm	Process not Found
File opened for reading	/proc/self/fd/32	firefox
File opened for reading	/proc/self/mountinfo	Process not Found
File opened for reading	/proc/self/fd/38	firefox
File opened for reading	/proc/2017/cmdline	Process not Found
File opened for reading	/proc/self/cgroup	firefox
File opened for reading	/proc/self/fd/86	firefox
File opened for reading	/proc/self/task/2124/stat	Process not Found
File opened for reading	/proc/self/fd/108	firefox
File opened for reading	/proc/1989/cmdline	Process not Found
File opened for reading	/proc/self/fd/76	firefox
File opened for reading	/proc/cmdline	dconf-service
File opened for reading	/proc/self/maps	firefox
File opened for reading	/proc/2103/statm	Process not Found
File opened for reading	/proc/filesystems	xdg-permission-store

Writes file to tmp directory 1 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/firefox/.parentlock	firefox

/usr/bin/firefox
firefox -new-tab https://github.com/MatrixTM/MHDDoS
1⤵
PID:1490
- /usr/bin/which
  which /usr/bin/firefox
  2⤵
  PID:1491

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox -new-tab https://github.com/MatrixTM/MHDDoS
1⤵
- Reads user data of web browsers
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
- Writes file to tmp directory
PID:1490
- /usr/local/sbin/dbus-launch
  dbus-launch "--autolaunch=4816dd152e8c48ff97e9117d197c13d8" --binary-syntax --close-stderr
  2⤵
  PID:1536
- /usr/local/bin/dbus-launch
  dbus-launch "--autolaunch=4816dd152e8c48ff97e9117d197c13d8" --binary-syntax --close-stderr
  2⤵
  PID:1536
- /usr/sbin/dbus-launch
  dbus-launch "--autolaunch=4816dd152e8c48ff97e9117d197c13d8" --binary-syntax --close-stderr
  2⤵
  PID:1536
- /usr/bin/dbus-launch
  dbus-launch "--autolaunch=4816dd152e8c48ff97e9117d197c13d8" --binary-syntax --close-stderr
  2⤵
  PID:1536
- /usr/lib/firefox/glxtest
  /usr/lib/firefox/glxtest -f 13
  2⤵
  - Enumerates kernel/hardware configuration
  PID:1543
- /usr/local/sbin/dbus-launch
  dbus-launch "--autolaunch=4816dd152e8c48ff97e9117d197c13d8" --binary-syntax --close-stderr
  2⤵
  PID:1976
- /usr/local/bin/dbus-launch
  dbus-launch "--autolaunch=4816dd152e8c48ff97e9117d197c13d8" --binary-syntax --close-stderr
  2⤵
  PID:1976
- /usr/sbin/dbus-launch
  dbus-launch "--autolaunch=4816dd152e8c48ff97e9117d197c13d8" --binary-syntax --close-stderr
  2⤵
  PID:1976
- /usr/bin/dbus-launch
  dbus-launch "--autolaunch=4816dd152e8c48ff97e9117d197c13d8" --binary-syntax --close-stderr
  2⤵
  PID:1976

/usr/bin/dbus-daemon
/usr/bin/dbus-daemon --syslog-only --fork --print-pid 5 --print-address 7 --session
1⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:1538

/usr/bin/lsb_release
/usr/bin/lsb_release -idrc
1⤵
PID:1719

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox -contentproc -parentBuildID 20240108143603 -prefsLen 20252 -prefMapSize 231436 -appDir /usr/lib/firefox/browser "{2eb9e333-00ca-4e78-b57a-83d9c1e80b29}" 1490 true socket
1⤵
- Changes its process name
- Reads CPU attributes
- Enumerates kernel/hardware configuration
PID:1959

/usr/libexec/xdg-desktop-portal
/usr/libexec/xdg-desktop-portal
1⤵
- Reads runtime system information
PID:1989

/usr/libexec/xdg-document-portal
/usr/libexec/xdg-document-portal
1⤵
- Reads runtime system information
PID:1994

/usr/libexec/xdg-permission-store
/usr/libexec/xdg-permission-store
1⤵
- Reads runtime system information
PID:2000

/usr/libexec/xdg-desktop-portal-gtk
/usr/libexec/xdg-desktop-portal-gtk
1⤵
PID:2009

/usr/libexec/gvfsd
/usr/libexec/gvfsd
1⤵
- Reads runtime system information
PID:2017
- /usr/libexec/gvfsd-trash
  /usr/libexec/gvfsd-trash --spawner :1.6 /org/gtk/gvfs/exec_spaw/0
  2⤵
  - Reads runtime system information
  PID:2042

/usr/libexec/gvfsd-fuse
/usr/libexec/gvfsd-fuse /root/.cache/gvfs -f -o big_writes
1⤵
PID:2022

/usr/libexec/dconf-service
/usr/libexec/dconf-service
1⤵
- Reads runtime system information
PID:2034

/usr/bin/nautilus
/usr/bin/nautilus --gapplication-service
1⤵
- Reads runtime system information
PID:2039

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox -contentproc -childID 1 -isForBrowser -prefsLen 22702 -prefMapSize 231436 -jsInitLen 229864 -parentBuildID 20240108143603 -greomni /usr/lib/firefox/omni.ja -appomni /usr/lib/firefox/browser/omni.ja -appDir /usr/lib/firefox/browser "{354b365f-d244-42cc-8613-e9bbf9b334c4}" 1490 true tab
1⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:2052

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox -contentproc -childID 2 -isForBrowser -prefsLen 22370 -prefMapSize 231436 -jsInitLen 229864 -parentBuildID 20240108143603 -greomni /usr/lib/firefox/omni.ja -appomni /usr/lib/firefox/browser/omni.ja -appDir /usr/lib/firefox/browser "{4afa0c93-9fba-41ca-b45a-f65af8883bdb}" 1490 true tab
1⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:2079

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox -contentproc -childID 3 -isForBrowser -prefsLen 22719 -prefMapSize 231436 -jsInitLen 229864 -parentBuildID 20240108143603 -greomni /usr/lib/firefox/omni.ja -appomni /usr/lib/firefox/browser/omni.ja -appDir /usr/lib/firefox/browser "{6e82efd4-9dd4-4005-b5f1-e3fb10c5b970}" 1490 true tab
1⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:2103

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox -contentproc -childID 4 -isForBrowser -prefsLen 28846 -prefMapSize 231436 -jsInitLen 229864 -parentBuildID 20240108143603 -greomni /usr/lib/firefox/omni.ja -appomni /usr/lib/firefox/browser/omni.ja -appDir /usr/lib/firefox/browser "{96614b57-4bd4-49f0-8e3f-fd4515c92753}" 1490 true tab
1⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:2120

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1497

Credential Access

Discovery

System Information Discovery

T1082

Virtualization/Sandbox Evasion

T1497

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/root/.cache/dconf/user

Filesize
2B

MD5
c4103f122d27677c9db144cae1394a66

SHA1
1489f923c4dca729178b3e3233458550d8dddf29

SHA256
96a296d224f285c67bee93c30f8a309157f0daa35dc5b87e410b78630a09cfc7

SHA512
5ea71dc6d0b4f57bf39aadd07c208c35f06cd2bac5fde210397f70de11d439c62ec1cdf3183758865fd387fcea0bada2f6c37a4a17851dd1d78fefe6f204ee54

Download Submit
/root/.cache/dconf/user

Filesize
2B

MD5
34e9006f9cc80b3a8888370703fd744d

SHA1
05836b6251817473ae5354f0a43698385c2855e2

SHA256
0f2c7f7e50abf7ce2200ae61f3ae429ca9f31d1c7cd57e94248f0b9b5d4fac03

SHA512
e58282f5ef495989a8f66991b26162b8fa9b9d393ec64e232daab454d69c65079cf85d88164c51c0ddc2bf7d196ed3676d7e785c8bd949e51c293b539b609fc0

Download Submit
/root/.cache/mozilla/firefox/85oei15p.default-release/cache2/entries/037778A55E1B7E9BED3390289866D09402D6C913

Filesize
9KB

MD5
92343f098b6194fb14973f4d1fae96c4

SHA1
b0f88cba04dfd802dab04595da51a68e397a03ac

SHA256
30867d1b39ae1e698d7bc7e6da1e7547cfeedae0971131ccc1f6c31f241e8c97

SHA512
69fda9ebebfa9ae30e1e6b14b37862f60ba84c425f8ee9404cc0589adc6167d1f440405db85e6637fb64e5656ee7f17b8716ce1578c8cb33aa3e88e5fbe01ebc

Download Submit
/root/.cache/mozilla/firefox/85oei15p.default-release/cache2/entries/037778A55E1B7E9BED3390289866D09402D6C913

Filesize
9KB

MD5
ea8c13c93123529bcb17b695162cdce7

SHA1
f8f5c7c03cf73dfa576b76254e8e27efc570c50f

SHA256
e2fa2e947c3f47664c39c8eff699296c02e5eb0d2e8fc57a8f5fc8c46819ed33

SHA512
745501d46f5a2b7e097b430ee91f3e7b26f50d100ea877dedb14845df95324e5ce1aeb09a3b851ef73d4ffb46f32ce5525e7f93bc4d59f2f12a3c2309b516d28

Download Submit
/root/.cache/mozilla/firefox/85oei15p.default-release/cache2/entries/039090029E64BC91E87E77199A6A6BE11FC39B6F

Filesize
11KB

MD5
e55b5a3cc1a708b6d300b48cad4d40a5

SHA1
0f96264433ec88d9baacb53138eb4151ac3a93d2

SHA256
1189ecae4278a89b6a737ceeb396c362fb7558e5087cfdbedb1aa796d61895d5

SHA512
bd80cf83befb80c3d1a691efcf113aa91b2a7406b08c2960d37de235f168d598abba9d0868444761fa6cba15374184d5ab28e1dbcf2d1905e04a2bdb60d0aaac

Download Submit
/root/.cache/mozilla/firefox/85oei15p.default-release/cache2/entries/0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F

Filesize
102B

MD5
4e31f171296ebeb535c0ab3f230c5a88

SHA1
4ec392e1b7da4557579e4810b885679c771bebc6

SHA256
be14a037faa68977512d48a7f34ee1bc8291037ee808c304769f7771b3582ebe

SHA512
5bd7c1e3f886afa34f9c13baccbdb2256c1794e857d0ea503621752237467282f40aa0b865ca84a387e9f5e5974a6ea5ad110c1787934df3c3663574872abd80

Download Submit
/root/.cache/mozilla/firefox/85oei15p.default-release/cache2/entries/15891D0A1FE92524A070331423730ACDEE1B356D

Filesize
89B

MD5
a23da28ecdf97ec56e0511c18deab92e

SHA1
f8cef335db10d96430bfda026064a073b047de07

SHA256
4639e9f63b30704ce200965533625e55b33cd42f3e7442d19919b0bfb0fa6f55

SHA512
df9b3efd2be7f9e5526b6f8ae04c527d2e97b5214c90a12b797fd32ceb4d9b59b8c3ddd7b4455c7c2b6e14a248117747042b166ad9d0a36e1fd059e3ee50e3f0

Download Submit
/root/.cache/mozilla/firefox/85oei15p.default-release/cache2/entries/15891D0A1FE92524A070331423730ACDEE1B356D

Filesize
9KB

MD5
346d1032ea56bad5563041f5e89b7b4d

SHA1
0f1e682c39bbd5207112004e30a6399ee8c78e0a

SHA256
3d1aac28f10c6e7074a9a75ed92cfc6858cd8d463447b863e8bc8b9bd7712add

SHA512
cee1a8b72fd9ee0757ffa912ade51cf7fb0e44cc6dec3c73fe9a8034213aec3866e97b8c9cf1ffe33a67623bb21d300c680444089ac8cfe62d2f2a66f6ea1d03

Download Submit
/root/.cache/mozilla/firefox/85oei15p.default-release/cache2/entries/1611007487CDFCDB9FE43793C68D8984CF7DD7AA

Filesize
9KB

MD5
db4d1f64056615fc8ff9c5f90b03bca8

SHA1
ec0e37b8448ce437517f0b7157e8c6cf4db84e28

SHA256
39126fd0e632b42343eb5c12446166b3eb9c41524c3c785270609125004866f3

SHA512
b34f7b6fed7242e231f744d9aa78edcffe8b2d18159cc563250b2bd71103dc456afb2a9345e38d1c21a26f1f80bdac226ad27317a60cca4efa825e78f5bdf1a3

Download Submit
/root/.cache/mozilla/firefox/85oei15p.default-release/cache2/entries/1611007487CDFCDB9FE43793C68D8984CF7DD7AA

Filesize
9KB

MD5
ad2b53cde3a43aa7e09fafd1164a2e85

SHA1
33e2551c9c734d7d2e7391379a00d5a0cdf9a702

SHA256
6214aadfea888fc8bc7be66713fd18de0fdda63fb65a2a5b9377431297c1b2f6

SHA512
5605f9018ab8eec18bddd5bdbc40f9fe47087cd986f5a16eb5bfa36115b5faeb5cf84da7d682e4a85d5e16712b45a2b3e3757eec53d83588431392aeb9c23f38

Download Submit
/root/.cache/mozilla/firefox/85oei15p.default-release/cache2/entries/298D53A692BA41D0C5CA5AE0806650D73FF83365

Filesize
9KB

MD5
2b45548ae7b172f0c100c09c2a92d352

SHA1
865e16c865ee6063b13205e872b71202035e086e

SHA256
4d2df1d21fa01291cb99f05d0a8cadd28b0ac8e204c7b78dc5f8da75a67d0d18

SHA512
a68e8fa48cb0c4b682e3a1dceebae28a53aab786a89c52ad886ba2f6e7a4a9ba9880936988208bc699907c02f25f6646045ef162d96a163fc786a5335220fd41

Download Submit
/root/.cache/mozilla/firefox/85oei15p.default-release/cache2/entries/298D53A692BA41D0C5CA5AE0806650D73FF83365

Filesize
9KB

MD5
3c337ccd873bb18a084ad7fc5ff30635

SHA1
954a4729cfe63d70a11fa4894b5fbce23f686231

SHA256
316545cee8603e1c3d7fcd16fdd284e8ddb4132f25e0be8a0728cecbaca7df0e

SHA512
b32b3f8214409ddcd5b3e8fe77a8699edab8a82a8a6c354e2c2c485d3d444361a04d5dc58ac098f106d4add8a269a6ca60c035a5e73c2132a6f5bab973f2d772

Download Submit
/root/.cache/mozilla/firefox/85oei15p.default-release/cache2/entries/3D1E19D09F398691ABF62061591970855193B42F

Filesize
13KB

MD5
0d050d71287a5aac750d3f82d1d9fcef

SHA1
016794d0b6095625f1a9ba52277d0cd1cd94b58a

SHA256
96b80f82d9ba49ab72febfe2b72aad0a1ff9c055e0d5311627c8193e8c32183f

SHA512
d520ecfda0e1e5e012618258bac9e92ca972f98d603cfeab4eff4e537b15f0be82b65dfaa4dc4ab8e0d945087d7bbfef4d72c975cb02b322455f97368cb93342

Download Submit
/root/.cache/mozilla/firefox/85oei15p.default-release/cache2/entries/3D1E19D09F398691ABF62061591970855193B42F

Filesize
13KB

MD5
e4512188556a8650533795823f94cf91

SHA1
c2d5ad80302984ae35be489cb9235a5999e5cd96

SHA256
6388099d35a45c32e8fb51071f637f72a430daa16e298989b33480b1e92f8536

SHA512
d6742fe6eeacacf9059fb5c6196bde15cc445100c069e74002a382b8377745d36184a783ba6a92f806c43688af890eb14652e25d00f6cd2f68b2aed03ba5ad74

Download Submit
/root/.cache/mozilla/firefox/85oei15p.default-release/cache2/entries/44230749A38B6989F56217B435A03E84CCADE62D

Filesize
26KB

MD5
0c1681976dfbac980da5ef1d07e14e20

SHA1
edaca6f785005428bd437fe19be87751f104f70d

SHA256
1ec7cf09c125bb570e78119ad5ae334a020f2c23f4908c82829156818760091a

SHA512
af804a07dcb0873293cd6bd5c396cec34730cf88e93fc025743cb603e9dcce73e9797e078cdfbe03dc504ae51bdec77bb73621844ddebc111f59b25d4d128afb

Download Submit
/root/.cache/mozilla/firefox/85oei15p.default-release/cache2/entries/61463D3D14AED4AB99B9327958A58152544E0F7E

Filesize
83KB

MD5
1678ea05b025c15b5dfca2203bba28f6

SHA1
e113b972d3dd06afb643afbc878498101c8b81ea

SHA256
1b9760fe0d797c51bb573f17b0297ad2c2002524afee4386954c522cf1b6dbba

SHA512
c2c03d72dc90a6bfa911bed6dbf006f114cc51bd633fb7bcb12fd2dc65b0b046f526d9a604184eb486f29c58e0a174cfe5dbebf50208d9e5d01490369cb6d240

Download Submit
/root/.cache/mozilla/firefox/85oei15p.default-release/cache2/entries/6AC9BD0802E051FCD579CC69A96979DE29682F3D

Filesize
97B

MD5
3f8d1f38a251bc34a20c7d905aa5a33c

SHA1
629fbb48490cb70eece231a741922fdcfa26346b

SHA256
afaca337d89fbcb92c09a257ab2d45a7ee934d4e6458fa473ee6c152fe63535b

SHA512
edfd99210d182c679fbb5aa0e71e70b6025ca5fbc58e8c70c8f7c1bb342a93e6ffc306085f0a5e45d68d677816dea02e26a11b2dfa9f956a71e83c082b28d2f6

Download Submit
/root/.cache/mozilla/firefox/85oei15p.default-release/cache2/entries/6D89348819C8881868053197CA0754F36784BF5F

Filesize
9KB

MD5
eb2266b0eb35ce716b014ffa52db7062

SHA1
d5cc283e511fac3e2621044b0af8537ff8ba31e8

SHA256
c0ed5b44654aab59cf8f4b9d36dcb19cf9295d83a7b7fd54382ee45b8d3b484f

SHA512
62b8a061516ed4317031b0cf58fac5712bc4274fccdc4a7611a822d66bad688339ce89c3187f184e6eff14d72c5dd4ee5dd2836cefb1f351df060da0234f2aff

Download Submit
/root/.cache/mozilla/firefox/85oei15p.default-release/cache2/entries/8AF5D98EA49BFC5F75DBBB8CBE9CADF11B63E0F4

Filesize
10KB

MD5
4d50abb23463aa5453ad037064aee64a

SHA1
48395ebaf300513de855b3c4867f90461b0199ad

SHA256
51029608aea7c468819c7f8004d98180dd943492aadc82e00f1640f865cf55bf

SHA512
b86175f3a49bc69a13861c2108fa9cd25e584ae5683c1ea919d7d41ef2f2c4c6be7c5c75311c171cf4d59b7e75fc19708a42ffa8d34adb0002c110c390b13db0

Download Submit
/root/.cache/mozilla/firefox/85oei15p.default-release/cache2/entries/8AF5D98EA49BFC5F75DBBB8CBE9CADF11B63E0F4

Filesize
10KB

MD5
d1661eb1611f49a9784c32ec712d821d

SHA1
08c14ad219266ef9fb3512d41d22b573d79f0c5c

SHA256
35401bf892e4349ac6663927ab19e8b0449be72923ad24e398e2e37ec22d52a4

SHA512
fd55b3b216db708afea876e7e94daa9653d4af162f10b768c3af2049d699a5ca11354ed854859847e8702ea8479a57ce568f9f66064cd0122b6e1cef7208a9c7

Download Submit
/root/.cache/mozilla/firefox/85oei15p.default-release/cache2/entries/90E321EE94230DCDBDCD2EC0B77C695A4FC21F78

Filesize
9KB

MD5
813063b9bafd8cfe99cf205fa448de49

SHA1
a00980a9754094a199daf3d9e6f87d92ff18fb2c

SHA256
494261fb65c1db478305ec1e25ee39b7d6e93a7b10428e0a55c373bf40bc6c86

SHA512
0aaccaa2813cd1fadcfa7f492b31f2ae98e5b1c3620e4e56ee7d27bb01aa201bea5a46c4943e3c846028a6333b3f1e736922d85deff50695a6bafa979d930a2b

Download Submit
/root/.cache/mozilla/firefox/85oei15p.default-release/cache2/entries/90E321EE94230DCDBDCD2EC0B77C695A4FC21F78

Filesize
9KB

MD5
9fc6ff1153d964dd906ebeec73e95d48

SHA1
ab9b3577a4efb767ec2b830f287d9826d5e02880

SHA256
4765597c95f81ee2be367043dd0ace0f672c649fb228f9830d90393f87c96ab3

SHA512
346c157573b6619188f5bc6827fb6c47092da79415bca50175435b86a6dfabbb89e13b93e21cb3e3893aacdaa08754deca4cc718922b5f1e6c0c6cd6d4d751b4

Download Submit
/root/.cache/mozilla/firefox/85oei15p.default-release/cache2/entries/A72798DEF4F924983D5A0DB82D383C613B515FF2

Filesize
13KB

MD5
088e28f232f79151088ddf4658cd72c0

SHA1
f6e26bef8d407829599d565468bcd94c1cdd12f0

SHA256
658a363ccd123b37d5b98f2394cdb8a3e2f18eefc041d3925175bd9bc6ab834f

SHA512
af7b8ca196723bc43c5ae5eec63bd7127e28cb0cef2e882e4778604f91b3d756c0d41c53b1224e2c334f9370e92666082deb45a1ae32194ecee205ddc77273a3

Download Submit
/root/.cache/mozilla/firefox/85oei15p.default-release/cache2/entries/A72798DEF4F924983D5A0DB82D383C613B515FF2

Filesize
13KB

MD5
e1b49fd425f1e98959697511e60f8c94

SHA1
4a72211a6a8288bf2a7ff81d80225c31161ad6e8

SHA256
47916b1d47ee6c6542de3c2303c3b2caef22f8e7e2cdf26b1294d1c4e30c08ca

SHA512
6a39e621f72182e9327626927b8c9783749560217e416d2c7bcadfd216b1f280c4f4051cdcfdf60683fa3417dcf7d7b2d8deb0a65de5fefab2b50b7b902dbeae

Download Submit
/root/.cache/mozilla/firefox/85oei15p.default-release/cache2/entries/D0F48A0632B6C451791F4257697E861961F06A6F

Filesize
52B

MD5
de563126d3fb763fe5a539f282a66a05

SHA1
52e302e7db51bb5c75e06e337f34f91d2db8a0fb

SHA256
2a52c9c5313ab376e29d401e34283dc7d70e4cb0bc72a350843ee02cac427c62

SHA512
3ffb8757de8e9964066c2cb5b4f47d3b07f262b4e6552b443c95940990e7b8d4d9e50eef415e077ca28efb05f50ff427a7058c2d97a84422554fee1b71d4ccc8

Download Submit
/root/.cache/mozilla/firefox/85oei15p.default-release/cache2/entries/D23F7952044A1A6016B80DED46FC563716A295DF

Filesize
9KB

MD5
57ca12b15fbe8069a23e213b76b5c542

SHA1
c0e8ff027cde04d53b86e048306763118ecb96f5

SHA256
26e7c9632534966b763f993a3546713aca22bd118441580bd6f7d73b1a90376f

SHA512
97465581542b059b62dae5a54c968006cdbe3dc5ddc5b7413e280031ff08942f451943a98eb03de2e73c00319b11d3ca735eaec195a5c5380d98ff446bbe6cab

Download Submit
/root/.cache/mozilla/firefox/85oei15p.default-release/cache2/entries/F210D48319A1879FD1C5213FA010C613B99BA085

Filesize
174B

MD5
8c4cbea02a0d52ec46d33c2345217972

SHA1
40221bb10b68ad5f2ae55978dd04d6c2ff554405

SHA256
7b37d108c2cd0ee5a2b2168cfcc2412ed37e9a96ae977d60eac2f1db0229808d

SHA512
7541087d3f714ad9a71604feceb81c4b86500ae144af37c5cef19e624b78fc6feeafa371dbec0260a7387696482df48ce3e59ed15d4a0bcb692fc9f00fc112bb

Download Submit
/root/.cache/mozilla/firefox/85oei15p.default-release/cache2/entries/F210D48319A1879FD1C5213FA010C613B99BA085

Filesize
11KB

MD5
4b46da49a221d32a0d4f20a7e27ef121

SHA1
9f6375982b10f8d913a36b39274a55e73ecfb2cd

SHA256
76b8693bb24a92885d7338635052f011e88b64c2f4746bc28b133b806afdb6b9

SHA512
9a2f3238b6d257e2a7cfb245f4f3e143d65a70a56aea4a03403cb81c8385b295f24c0f569f4426daafca7572013984ac2a6aae1077b14d34623810c52a5fd215

Download Submit
/root/.dbus/session-bus/4816dd152e8c48ff97e9117d197c13d8-0

Filesize
466B

MD5
b2b92fbefbb8196b88d19a435f558424

SHA1
18c64ba529f768466240a28f2dea58c607c2f447

SHA256
f623802aee4ed53d8b0c469292619aff7b6f1d7ddcbad379d3cb537fbc5b1f36

SHA512
0afe6a0c38d5eed1a6b0cd9b928ff216b8db8cf7524e89b3d2dc58a9b45f78485b13eb522a2601e6d0f7264e60a4cd348509745b2a75824db179279fcea3a7c9

Download Submit
/root/.mozilla/firefox/19q14yxy.default/times.json

Filesize
47B

MD5
0f3c7bd94af244756849e2d2e7807b42

SHA1
f3e6a6a08ff67d0526a699b88dee69c119cf522d

SHA256
4b6b44bb55d920947d5ff250aab8eec9a2ee2599a70fe158b4b8148156d6fb2e

SHA512
c102957a732a8c0be0689805a914b12412ebca525584174e316101ec18b2dacd86ad85abef19a60f9880d7ddfe7aaca42dde9320bb561a4f4166e50db66306f7

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/cert9.db

Filesize
224KB

MD5
1bce5b09c0875084e433f9111e137418

SHA1
86fbeff0379e1f9bce7449c03e4afd017c0de8e6

SHA256
0494aa192de351d5ab758d162ab7cd95fe36a4ab0b1229a77cbb45ce22414f69

SHA512
dc6ad5924994bc4feb8b533fba98efaad9918eb0e47bdebf7780686604dc77dafc89c4d6feeb4ac8458b3cf59c8f94c8e101a5a4b903bcff4fcf0bc1cc23e7b5

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/cert9.db

Filesize
224KB

MD5
f61be0c6fdaf93ec379a0d740f90dcac

SHA1
fbbb37957ae59a1e90b42d5f20aa11638782d734

SHA256
c2496a0e7a729467ada204d2b8e17e5ca331be9a289ba9c974263c495f52de63

SHA512
71e097237078846ea1d13f0b403f51833fe60db9755c76e7bc561e97af8bddf776fb53d5ca375230daf21210123313e635f1d0247907e6bcc7bacc165be6ac3e

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/cert9.db

Filesize
224KB

MD5
28a5731dd0a6f37186ccb528789e83f1

SHA1
89856293361dbb21b2b6a0e3d656f461150fe57e

SHA256
756214e6410122496c67d5cb162413b5dc3b6b507cf551c3d5b853600a9cff26

SHA512
84f53bdeea0e3a054b361f7f61babfe39b1958e47ab2b636f472812584ed48bf45416c5bad476d9e5aa7d7fe86a085a0323205d4dba9570f4c21c9d19b6e295f

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/cert9.db

Filesize
224KB

MD5
9e9ed4b2fe3c3aa81000438e0474e6a1

SHA1
0a6a961aa90c7c5eeb4a75992215968dc32bc431

SHA256
1d1758b72f226df31eb153c94d86cbf1a51277ac4a985cc22263c7839dcce0ba

SHA512
a193339428544122eb0100d9421d65f7637638367327388157fe95b8a034b9365b8a21979e3d5fea45a0a62a37bcc8b2d1866f9242f7a1dd081fbb956f6ca581

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/cert9.db

Filesize
224KB

MD5
df5562dc22588426400ebd7907a94459

SHA1
d322a8d1bbf36e9eb9fc23bbc12bee99918ecc39

SHA256
cc29a84fb8f96c78c0d84855215b5615a194ae2a1f478509d5df33444f9f2518

SHA512
5775b6c894b9fc6793caddc4a3621fc15aae7ef6093ee32f0dd99d97d1f346aaea775ac42b7c327caf40c8ec9ea1df6dfbb213e7fe95f053ef0ab1fc0731b558

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/compatibility.ini

Filesize
163B

MD5
2d41a6f5736821b90ef44850dd3873fe

SHA1
a47c4bc1431234a5b58e460ede5b571acd38e562

SHA256
b4bf5c8334f6db20ae94105141ae7a721342ddccd94ec65289dc291e76a31814

SHA512
047a1455211e7aa29ef5f32f07c89d8a0c8d86d871bc664e4d8958a2a014dbe32f0613cd9eb66e7307c0e2439f74ca0b829652a52fa48e8c60d64b41f69914eb

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/content-prefs.sqlite

Filesize
256KB

MD5
9d00c3716db8b9c9d51508593d757e60

SHA1
c1cb5093db37d62d22f3083c8fe96631006f6e8f

SHA256
b3199c67fff1807fd8fad7f70345b9c28626ce49a2150f688a239fb010e75420

SHA512
12fee206948261c76f728dc0076f722a4d0574b5c7cb9e7441bb072aae29235c30d79d514bbb0ae3382bbdf06d8d4d88289576e238f94e4731244f8134f3adf0

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/cookies.sqlite

Filesize
96KB

MD5
26ff39b359947b71a5fadd950fac34f0

SHA1
66e5830e4dca79225f41adc13a077d8e5dd8084b

SHA256
aecbaf3e1df1332d4f14a11480db712eb4aa91581eb4e942c580bf675f592a45

SHA512
7fae7b9ff4362e12f00acdc898f6f679718bdd28dc959684333086de7bacd162338dc266810f9f3f6dfa3dc228291efd6bb325e2e8573ca0e6a699059a145f11

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/cookies.sqlite

Filesize
96KB

MD5
102a8b6e82208a1b69224bdca8a5b10f

SHA1
8413dc3772127c4159e6d6b51372990a06b805ee

SHA256
5ebf89b32937916a76a8432832040cf0f6b99c2f006cc42f856712d403ec182c

SHA512
49c5c27c6749a7a73b4b944eea64ceb053a272619e6319bfd433ffbe126c8fbccc110961018165a4c7de781a86cf38d2bd9e52ec71b10bc73c9fd05fe841a46c

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/favicons.sqlite

Filesize
224KB

MD5
aff3f84fda6516b87050f171d68531ea

SHA1
6b82d182412601c057bfc591cc6b9a8932c84c73

SHA256
5203714a71df85f81969a193cac50befa4b1e70841b9b2d3ea348d3b99657172

SHA512
aacbaa66d86f8b3f299cead818a0883bb900588da822148b4ac7543a0fa4ee399c14a69534ae55bfd0e7b18630b93f04e0e0174b7d586e0d536c20760b5d65d8

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/key4.db

Filesize
288KB

MD5
92fc22cf40fc9dc6c676812647f03a8a

SHA1
7f73322f4d3e54bb67deeac9e2ea7dae8091ce90

SHA256
866142c6d80b826fa9ecc20950ab8d540d3eb6b46c13a8e7de9f088f8d7a1100

SHA512
7de5722b38e80c902cc3e118f5624c8ee9479a8914ed482295988a7727dddb4f6c268fd161dafb149c6cb956275523decab881c5452cb0283da0327cfa9bd8fa

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/permissions.sqlite

Filesize
96KB

MD5
652770017ccd3217c70066cdb7213d35

SHA1
61bcaddfc3b435b399490896b7d6055269ab6653

SHA256
660ccd2cc3805ef44ddd244134e82179df1708a253571afb5062d1b38939bd9a

SHA512
db4b111d760e1a67d63248a677e8487a2ecc31e89362641bcde5ef1d8bbf893b57ad70922fcebbc961d686520361f5bf0c6b7c217ac1b9164e3d275be2dc9db1

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/places.sqlite

Filesize
1.4MB

MD5
699bdc3ca663c5ab8abac0b3a46eae83

SHA1
e08229029c15551fffe09b6c5f0dfc0a64e1171b

SHA256
b9ba993c73574a36e49fa38dc1956c785fb23f7b2e76dcd617d78f6ac7196f84

SHA512
03bfde020cdf80d735c4f8b98a592c4309a47f631d5000b4da8c14f3fd8cb5d9506d89fdb3a2f4df6fafc4b7d2e961df95aa4cd69aef00ae13dd668a4f5e0b55

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/places.sqlite

Filesize
896KB

MD5
f5cc1b97535023c68f21958247c67487

SHA1
6c77c19e243276a08c9d7695823ab4b7a76381af

SHA256
83e8252c82ad528afc0ea18fc880c11fa26706415e61aaeb85c895b841fd080f

SHA512
1d7618b1afb79b268f2fd10504736c4b16dc269fedfc6be3429c559583d14ea6ff3c4696ddebff925bc048dedf69dca53befbf46c2b7e813530f12bbc27caf91

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/prefs-1.js

Filesize
1KB

MD5
dcf91b3d6c8eac4c5a828d5d6274d873

SHA1
7d849f9375e0179c27ca67dc990add5a13f8924b

SHA256
08a848717d99946243870574b41c78faad744547c1a8953d43e031c930d1fd33

SHA512
2e9061c4284ad176d8e391ae06d94f7604f758ce1ade485bedb2cc9fc3402842c32eca8d511b8e7aa8fb33af74320fe87138c46539fbda6f0974aac950d79bb8

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/prefs-1.js

Filesize
2KB

MD5
8b47427a45f00ec2f75af9d5546bcc02

SHA1
f4d72d25c5359a11763a77723fea1678ad7388e0

SHA256
f89a18208c372a6f36ec28ccd4009e529d9bf2b7479f08f74551d5daea813c74

SHA512
8dde4db2bf72a7bcfc111c86fa864441e61e1a5be3b64396ae6b96027db8a7aee03e5e213a13e209a355b7933b2b81acbb6d13155cdf041e523956dcb14de54d

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/prefs-1.js

Filesize
2KB

MD5
b7620b0d63b453159dadececa9ca58cc

SHA1
c184c64142418d2adb355224ff47493dd9816a4b

SHA256
2b8f2ead29a68da6e8e16a6cd6a9388c401083ed8666fbb1b73adbf66ab3e1ef

SHA512
e4866d98ed5cf77cc2aad256f9fdeac8fcd187c03b2bbbefb1afc4ff14eecd93afbc46a0e0c3547ea9d4aaae5ab08a83f331e7bb5693d210a45a75b3a8656b6d

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/prefs-1.js

Filesize
2KB

MD5
a1e6fed72ad428372cf6496522f97c58

SHA1
1ad3a9f75f658fe94705800b283f002c178b6abf

SHA256
673f6f06cfa78299e5044bbeaa4d692eb6f514d4822b8633b079d5d882499cd3

SHA512
5a75fca98a685318042e1617a5a412eb1b9270ba0b88ea9169f4e527bf5924afb5fd2c0f1256377da03617c762e704a81bef56d115037ff6a9d45037bd06d443

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/prefs-1.js

Filesize
2KB

MD5
8c6cbbc646af6f5cb73a16fcff0ac242

SHA1
39c44c65ef8e8ab1902d308625f34d760e713b99

SHA256
fd549ecda0cc87fa3ef0cee18627fd17e8aec3c291d21f46c0f496bdbafda517

SHA512
22f1e8b94f07f503233db150abb17c983ac87bd66f7e454626c0bf76ed2d12523cc03762fae9e5991f894c197ebf0704d303e1cb60c381423a4dfbc357d04d46

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/prefs-1.js

Filesize
3KB

MD5
8b0306f7cc79738f27feb358ca1319b9

SHA1
b0364a8ddf8a13426bac80d135c1fd0e251a317d

SHA256
d25c83a06ded86a6977a8315cf8f360f3cfd38b977e6ff97889df5eafbdac4e8

SHA512
9e120681f7985b79616dfc33242605efe2edd527d1acc05317c918593aa1d2cb3b559c0a687b9f5483159f3c32721459802c3e4276ebbe1bf7b43aae821f4e89

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/prefs-1.js

Filesize
4KB

MD5
a2c58746f58b2bea52837c60e0c0ba79

SHA1
246fc4b2b227b9b7fb47b4b566b687a86873dce6

SHA256
98159f603a003639c99642b83dc6d3b530881199a2f9fdc00dec59c7219a8e9a

SHA512
b6550fb28fcb09eda6fec154f9cba3d3a96ed4c9737d481b9ef3c1012254146ed1be3ab04039f1c96d8caefb51f22727adba8ec219ff2acce5134076fc36d7f7

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/prefs-1.js

Filesize
4KB

MD5
b59de68fe5136304c08e26b3f2c0b57a

SHA1
fb8d6f586d98a3f53f7e2dc90a0b755cf87ff214

SHA256
9295e27499aefbf32f44037583edeed065c08f40f850fd5cd4744f6cb485425c

SHA512
a273d233b50c22dc50b13eae3604e9633723a2d22dc1377d6db3e3e9b03e2f3a104c544318ccc1d0a31600a82823cfe2b7907e04eeeef94187313ea5abe7debd

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/prefs-1.js

Filesize
5KB

MD5
061582e959fbc82c09b769c1fca5fd55

SHA1
c6edc4eee6eb67a4f22915165093d577b6a256c4

SHA256
371540421d2cd3fed34722cf2e0ede86c97ebabcc977586ada0078036f787d65

SHA512
9fc9de7c965a2092393a117a73f43f5b097eb0e309b8c68cd87620e714d12ab71cf882906d476ba934fc5174450e67c85aa5e3e913a6f95b410b8ed254f945a8

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/prefs.js

Filesize
1KB

MD5
4fe00ea23ecd1c5da3a97f2c47a0ca19

SHA1
2a8e42c2214d5e9a1fe830e2c1d59500b8ef78b6

SHA256
609bf876b239d49832d8feae8ef037fecea926132da9cf078e4e56d9bf8389f2

SHA512
6a97e56e19e4caf6b3cb064aabc672a6e2a5bdddfe70d37893f5aad15657cac61de06b1500ffe21288eb28524216a6087cc21e604dd9659b79a06eb34420e681

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/protections.sqlite

Filesize
64KB

MD5
1a11a5fd63e6cfffb1270d7e592c0c83

SHA1
a4e5d648d9a2166ff139b0ef5f234eaea33f4387

SHA256
4ddad4bf221e1c3d071054a9859deace3996cc445ddee61fba0b388e4b1b378a

SHA512
54ed0ef9e4d5810694aab71106451e5deae19c6eba79d42313398d691a1a5d8a1422423ad7589249c6e215466568350b84b68ef2f44105945962694745d91e07

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/storage/ls-archive.sqlite

Filesize
96KB

MD5
e1121e3dd3c8a9c384f879bdddcff219

SHA1
625f25a1a5ff8527ab3105636fa7aecb9affd234

SHA256
766b9f50254b4e5526b0cde2911512956262596d8937f8630805d3c70802a066

SHA512
03e1cee2e75b2b609b8344a40995de09de837e940d2012f2fea65d9c70eecbcd3345b66b852f32211b38b06a4370f06f02ca7521e29e7113e2e12a6a7752be31

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/storage/ls-archive.sqlite

Filesize
128KB

MD5
0d2b18bbf091633c4fe1ebdd197dfa15

SHA1
c150dc37042d92d30efed6cbc1b536eb66ec1a3e

SHA256
fe63ee867e0f229a0bcc48b771afeec394c362ac6d0c2bd6907c7202097bd228

SHA512
59d202bfaf236bdcfc05a3e148a773d15a3bdff23be26fb2cbfd059fee6c4a516c7a59de0a3bc97df1419c34464e1346354979ddda1062101121522f22d8156d

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/storage/permanent/chrome/.metadata-v2-tmp

Filesize
36B

MD5
a97b27c59bc9cab2108102c4121bfa0e

SHA1
d4445cf88a31d880213856237b61ebe0015214cf

SHA256
d2c528856645877611c5c26c056329fe0283430d58575f310a1938d35f4b7e2a

SHA512
2fdee71ac16798b74cdd8f24e835bdec0aea359be79877df8f60c5d3e6b0b382baf942a15f860d20f4ab4f950b763eea4430c283b211770bde4be47dc5122230

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/storage/permanent/chrome/idb/1451318868ntouromlalnodry--epcr.sqlite

Filesize
44KB

MD5
488403dd59d861961dbf2e5317cc6e55

SHA1
bcb13cf819bdc370762237a075f14a9be0728a50

SHA256
8645149962df6c816291521b6cb45e9acf79da6bdc3a727ba00c71eb720de4ef

SHA512
4e60bc58fdc1ffe3662b83fc9af3e0ec5af90eeb25da8e60a70717e3588676e135f6cc5a8d57a37c2cd2ce3a3661e665e2688d00799dd834945d5f0964750805

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/storage/permanent/chrome/idb/1451318868ntouromlalnodry--epcr.sqlite

Filesize
12KB

MD5
c089919e09fcb85ecd539a5cb6939978

SHA1
26b5621b435bceac8eb2bed33a3cd6976755e6c3

SHA256
cc25ace609795b3cc95eb7207e55ea1f15d148a263035f38e8db977d4b4afd1a

SHA512
4f1bed27faafc8007f494650f7fecd4edfdb6c0a8837b38c83c43425586bf86ef43f545760647c51aa5e1e878d41baba29ec2a3a461be11502c6b6d2a82b76c0

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/storage/permanent/chrome/idb/1451318868ntouromlalnodry--epcr.sqlite

Filesize
16KB

MD5
d7324354c3bc28ee0e07e75f3e724635

SHA1
d882500e4f22294c716dbb1c8a3752336035a14f

SHA256
c3e0d6d9bc83137361620912d8ea6199bd7a13beb20ecf7f30b1d21842a34758

SHA512
2f452128e5afd73f9cfbfd25d85df61e453dfceeaddf309d6cd3c501bf63f58caeb74d49d3165468140f8cb76ef654ad3948e531bf6f1f4a0ad324b47044d4a7

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/storage/permanent/chrome/idb/1657114595AmcateirvtiSty.sqlite

Filesize
44KB

MD5
f1cd629017b1fe58fc80953ebd4754b6

SHA1
01e02178484458797c2b682325b26b2633fe8466

SHA256
81bf3da297b9ee8270bea383d9479cd7951e35f552361230358e3a35e1f44567

SHA512
afb775074af046014236a312865a1811de3bfb97f8df057541401867140fcc236259ab237712a7d3bc012ff84cf90330e4e122374cd09c194c4c145f575fb95a

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/storage/permanent/chrome/idb/1657114595AmcateirvtiSty.sqlite

Filesize
12KB

MD5
62a07ade74c11595fb8923b1d07047ec

SHA1
21d73d7a7e59ea258c1b3b5062d85e8072a20a9d

SHA256
338fa6dc848e0db6f80cf5bd34db962d31c990c46194d19224e3b0d6115a3755

SHA512
1ef59966facf7417f9012fd6c500edc8424584e2ee8a38b4beebea5043a22124c85667a0f0427242954f28006ed3ac218cdb20792ed6fcf78c94e5c798946a9d

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/storage/permanent/chrome/idb/1657114595AmcateirvtiSty.sqlite

Filesize
16KB

MD5
10ce7d99b9806b51243249a9e5c3f7b4

SHA1
660490d23d71b02d9b08c25a46743f490d0ca6ff

SHA256
7cb8814e69a7da1359cb30d1cfa29287901e50f3491afb0e529ea70dd58d5a57

SHA512
3a12f29394b8b915663cd634712f361e73ea751a0a37eca1744e4e49f5aaaaf78d1cc22640ea74939a15d59ef3da7f6a1280a32214ba378285d1c06d5d09fa82

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite

Filesize
44KB

MD5
1ea539584c41fd171d307fb9e740d499

SHA1
de3d1a3d6a0173bcd30c89f148cd732d0ae614eb

SHA256
aaa3461e12a1343eb5803894e1ef6894014b75b26ef264f29ece30b1cea3aa83

SHA512
22b145864127c0f223522016c6ba0a67e06a36aeba135e546f4d77000f436d5060064eb988b7aafdb451e39f70d0afd20313d15507dd531234ac25d60e9d935c

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite

Filesize
12KB

MD5
6529174f4f1c910e6fd0b1f933634f32

SHA1
6db89d4655503d17bf6256c7f3413a7cf1c95819

SHA256
884af37e1a28ed11541e54c9580028a4ecb20e661f9ff5b1103a91f358f92031

SHA512
d90f0f51664a360357e8635d18a67c45d4ad430dd2cd9d8f3701a5587023678fa2e171ddfdaf900fe6bfb9e892cb69b36a3037afaa2824a57080797ae17f6f8b

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite

Filesize
16KB

MD5
b0a165e071bd4bebbb42cc0eb4c35345

SHA1
d558b934a2668c4dd26668403592b548e2db6f2f

SHA256
d7318256e9fe1905fa60807d9154b350acb13a49d8a425f2a6d9669e47320196

SHA512
c1ffa58832b5a46f3fe7f5ee892271fb0a63f01eba5a79220cd542ef84dbca4edff0498cc0a152f8770dcfc8a211158b7e2ac1c8ec4d7e68d869414a6d219be0

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite

Filesize
44KB

MD5
225fe36c4bb990de9670b27368d655a2

SHA1
1dc382bec9af9b4bd0308dea1908ab6933834828

SHA256
2185235a458ef8924a1370bb956dd1d65d1f7bbffda08289275e072b65d5d1db

SHA512
11eb31a930a336c13869b0d385df555d7fba32ecea26bf513398dca2a35439643b0896a94c4696ffb439eef18b7f85982155dd12beddef784fe4ed1e86d2d1c2

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite

Filesize
12KB

MD5
e78e9f0e232a0775f5232bc63d19f7f2

SHA1
9209481fd8ad0a005ee399adc39c307e286909c7

SHA256
f39e4bd2d04aed1f4d97de67681ee87ba5f0202703af0836ea33abdc9da5e2f3

SHA512
56cc3c0ea1338f107a8bb7ac201620226fd0d10b71ed6e2db193bd556492dbc70d915c8c4a61c1004f89194bae425eebed5af40bfa830543b04679529b01ae58

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite

Filesize
156KB

MD5
3bb3b7097c07f5a63e21d2926d958345

SHA1
ac3310c3f0f7d110e0edbc3af43c068ff05a6211

SHA256
8d7e1a449c3a4a5a4c7bb5382768548e55725237cc235aabb5aabf07bc1c9073

SHA512
d868afed7b9cb6493c13923c3e7ef62cebea2c533dc81a1a4abeffdec77416dc9b468c36db56eb06fa551869e1a4b56396a08ffb3a1ff9894e3701688c8b18af

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite

Filesize
116KB

MD5
bbe9e4471c97fb1b270eb793922a00e8

SHA1
a1da47669a2b512be64ba97e8bbd587887d2c24f

SHA256
dedbbbca17668696789b6525ec93fadbb5731e96df326c7d84ce355fe0ca1bac

SHA512
1df28b24c05bd0931c3fab72bf6283d4a4df4253bd28060bf9abaf8fa0b9fd91e7790c28d7972287ac82a1bf04eecd3fab8acdaa26dfd394b3493280c7474f1d

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite

Filesize
252KB

MD5
b2cfd89bfdc12556e446c2d3013dda61

SHA1
0b160d5162e307147581bf86ac755e97e3aff6a0

SHA256
9b3fceac73d35eb84e95e3bc5f219ec6765f41ea1927f5ba7eb1cef816bb11c3

SHA512
857c8e5e3e89947a95c7f07e3923408b8ffabc0f64a9a1784ad7ae666c7eb267fd8941d3d0c39ba0ed3cd97fc2ca4baa42879647adbecb33ba776f5fdd9333d7

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/times.json

Filesize
50B

MD5
01565cd0315958a5e8c065d16c9bc1aa

SHA1
ec725e75bfcedb2d898fc97e44baa4aa37d73108

SHA256
8470c83a8e2d0bec1ff8ca3b1d9c1368c2e56a70c75fa1fab7bb205618b7283f

SHA512
7646dec5dda1cb3c5680f3387b6b28f117ab4d7b50bd9c42ba6b7e997b574d1ece1ef567fcaac5c27068cdf3444f7f1959ad66ce140765b1467818f3ab9de54d

Download Submit
/root/.mozilla/firefox/85oei15p.default-release/times.json

Filesize
47B

MD5
feabcb8134612ba2f2889cc1a35c208b

SHA1
95d17dfcd1ee3b278500b5ee284a6c2e2fd7e1c2

SHA256
9132f0c3fdb38be0cb9ed71750e9568416e200c4e454bca20eed191fbc63f4a1

SHA512
7df7981178a2d3ce7ddb9e12a7b25e27f70606dde39bb39af85a757504d8cb9d6706e31ccb918d83f6a99c454bc59493fbf354f591222ad7b4f4eb3279c14252

Download Submit
/root/.mozilla/firefox/Crash Reports/InstallTime20240108143603

Filesize
10B

MD5
8164a9cf9fff2f5dcce01dd0145eb296

SHA1
a050dd318285109d9b355b074d49b83bc4a5c4a0

SHA256
87b319ec059bb0a996bd7e4b1cf6919c6cfebc0f26737a73855919849121d888

SHA512
a3f553d76c35848cf32f65d32f4f83b205d9a9599ef9559789026bd6e817becb99281454f303a1178c4335cc0b1a43f538f1ac22e7ae0b2927120bb0e1b36c15

Download Submit
/root/.mozilla/firefox/installs.ini

Filesize
62B

MD5
a7014c41ee7790cec2a82266a17e5b47

SHA1
16cc28d24a0f259fe9b91335821f72fea6e63b21

SHA256
cd21b81b6857f4124b2211bfd9840014633db733726d63a05821060be74569c5

SHA512
9262076be1d33951abb25fafb137ef08a25460a94a76126d89e14cb72463d190679813876cfa5e89b201a3cec3d789e646f9256ce02b7fd4aaa9e7a1c806b6cc

Download Submit
/root/.mozilla/firefox/profiles.ini

Filesize
259B

MD5
6d04a280051df0d05ae6b0176e43954a

SHA1
68f708e6b3a854c9a8c5c01d53d658149d8db14e

SHA256
38dbf1a598244ae6e2d4ad227af204080873cd594879c9d2d24993b125f65420

SHA512
242bf8f01db05251041c4c44f40b79b0cd7556b1509be005ca82f3ada11bca49627e4694336e3ca8719fd719e4153d719717afc7e43d4a0d92017862ad5f9116

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads