hxxps://www[.]everythingrf[.]com/community/what-is-half-power-beam-width

Analysis

max time kernel
21s
max time network
83s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240226-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240226-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
28-03-2024 14:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://www.everythingrf.com/community/what-is-half-power-beam-width

Score

7^/10

antivm spyware stealer

Malware Config

Signatures

Changes its process name 64 IoCs

Processes:

firefox

description	ioc	pid
Changes the process name, possibly in an attempt to hide itself	glean.dispatche	1628
Changes the process name, possibly in an attempt to hide itself	IPC I/O Parent	1629
Changes the process name, possibly in an attempt to hide itself	IPC I/O Parent	1629
Changes the process name, possibly in an attempt to hide itself	IPC I/O Parent	1629
Changes the process name, possibly in an attempt to hide itself	Timer	1630
Changes the process name, possibly in an attempt to hide itself	Timer	1630
Changes the process name, possibly in an attempt to hide itself	Socket Thread	1632
Changes the process name, possibly in an attempt to hide itself	Netlink Monitor	1631
Changes the process name, possibly in an attempt to hide itself	Socket Thread	1632
Changes the process name, possibly in an attempt to hide itself	Netlink Monitor	1631
Changes the process name, possibly in an attempt to hide itself	IPDL Background	1633
Changes the process name, possibly in an attempt to hide itself	Backgro~Pool #1	1634
Changes the process name, possibly in an attempt to hide itself	IPDL Background	1633
Changes the process name, possibly in an attempt to hide itself	Backgro~Pool #1	1634
Changes the process name, possibly in an attempt to hide itself	HTML5 Parser	1635
Changes the process name, possibly in an attempt to hide itself	HTML5 Parser	1635
Changes the process name, possibly in an attempt to hide itself	JS Watchdog	1637
Changes the process name, possibly in an attempt to hide itself	JS Watchdog	1637
Changes the process name, possibly in an attempt to hide itself	BGReadURLs	1639
Changes the process name, possibly in an attempt to hide itself	BGReadURLs	1639
Changes the process name, possibly in an attempt to hide itself	Cache2 I/O	1640
Changes the process name, possibly in an attempt to hide itself	Cookie	1641
Changes the process name, possibly in an attempt to hide itself	Cookie	1641
Changes the process name, possibly in an attempt to hide itself	StreamTrans #1	1642
Changes the process name, possibly in an attempt to hide itself	StreamTrans #1	1642
Changes the process name, possibly in an attempt to hide itself	TaskCon~ller #1	1644
Changes the process name, possibly in an attempt to hide itself	TaskCon~ller #0	1643
Changes the process name, possibly in an attempt to hide itself	BgIOThr~Pool #1	1645
Changes the process name, possibly in an attempt to hide itself	BgIOThr~Pool #1	1645
Changes the process name, possibly in an attempt to hide itself	StreamTrans #2	1646
Changes the process name, possibly in an attempt to hide itself	StreamTrans #2	1646
Changes the process name, possibly in an attempt to hide itself	QuotaManager IO	1647
Changes the process name, possibly in an attempt to hide itself	QuotaManager IO	1647
Changes the process name, possibly in an attempt to hide itself	IndexedDB #1	1648
Changes the process name, possibly in an attempt to hide itself	IndexedDB #1	1648
Changes the process name, possibly in an attempt to hide itself	IPC Launch	1651
Changes the process name, possibly in an attempt to hide itself	IPC Launch	1651
Changes the process name, possibly in an attempt to hide itself	SandboxReporter	1650
Changes the process name, possibly in an attempt to hide itself	SandboxReporter	1650
Changes the process name, possibly in an attempt to hide itself	Breakpad Server	1649
Changes the process name, possibly in an attempt to hide itself	DOM Worker	1653
Changes the process name, possibly in an attempt to hide itself	DOM Worker	1653
Changes the process name, possibly in an attempt to hide itself	Sandbox Forked	1652
Changes the process name, possibly in an attempt to hide itself	Chroot Helper	1654
Changes the process name, possibly in an attempt to hide itself	StreamTrans #5	1657
Changes the process name, possibly in an attempt to hide itself	StreamTrans #5	1657
Changes the process name, possibly in an attempt to hide itself	StreamTrans #4	1656
Changes the process name, possibly in an attempt to hide itself	StreamTrans #4	1656
Changes the process name, possibly in an attempt to hide itself	StreamTrans #3	1655
Changes the process name, possibly in an attempt to hide itself	StreamTrans #3	1655
Changes the process name, possibly in an attempt to hide itself	MainThread	1652	firefox
Changes the process name, possibly in an attempt to hide itself	IPC I/O Child	1659
Changes the process name, possibly in an attempt to hide itself	IPC I/O Child	1659
Changes the process name, possibly in an attempt to hide itself	IPC I/O Child	1659
Changes the process name, possibly in an attempt to hide itself	FSBroker1652	1660
Changes the process name, possibly in an attempt to hide itself	FSBroker1652	1660
Changes the process name, possibly in an attempt to hide itself	Socket Process	1652	firefox
Changes the process name, possibly in an attempt to hide itself	Socket Thread	1662
Changes the process name, possibly in an attempt to hide itself	Socket Thread	1662
Changes the process name, possibly in an attempt to hide itself	Backgro~Pool #1	1661
Changes the process name, possibly in an attempt to hide itself	Backgro~Pool #1	1661
Changes the process name, possibly in an attempt to hide itself	Timer	1664
Changes the process name, possibly in an attempt to hide itself	Timer	1664
Changes the process name, possibly in an attempt to hide itself	ProfilerChild	1663

Reads user data of web browsers 64 IoCs

Reads stored browser data which can include saved credentials.

spyware stealer

Processes:

firefox

description	ioc	process
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/handlers.json	firefox
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/cert9.db-journal	firefox
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/places.sqlite	firefox
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/places.sqlite-wal
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/favicons.sqlite
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/datareporting/glean/deletion_request
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/sessionstore.jsonlz4
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/cert9.db	firefox
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/datareporting/glean/pending_pings
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/storage/permanent/chrome
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/ExperimentStoreData.json
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/favicons.sqlite-journal	firefox
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/storage/permanent/chrome/idb/2918063365piupsah.sqlite-journal
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/sessionstore-backups/recovery.baklz4
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/shield-preference-experiments.json
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/storage/temporary
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/places.sqlite-journal	firefox
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/sessionstore-backups/recovery.js
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/key4.db
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/storage/permanent/chrome/idb/2918063365piupsah.sqlite-wal
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/extensions	firefox
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/sessionstore-backups/previous.jsonlz4
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/cert9.db
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/storage/permanent/chrome/idb/1657114595AmcateirvtiSty.sqlite
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/favicons.sqlite	firefox
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/broadcast-listeners.json
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/storage.sqlite-journal
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/extension-settings.json
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/favicons.sqlite-wal	firefox
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/user.js	firefox
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/key4.db	firefox
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/sessionstore-backups/previous.js
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/cert9.db-journal
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/datareporting/glean/db
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/datareporting/glean/pending_pings/7f548b79-f6ac-48dc-af58-aa20f5935b82
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/cookies.sqlite	firefox
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/logins-backup.json
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/storage/ls-archive.sqlite
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/permissions.sqlite
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/content-prefs.sqlite
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/compatibility.ini	firefox
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/permissions.sqlite-journal
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/sessionstore.js
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/bookmarkbackups
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/datareporting/glean/pending_pings/8b568fb9-7953-46a7-ac68-80b2530751b0
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/signedInUser.json
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/search.json.mozlz4
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/storage/default
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/cookies.sqlite-journal
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite-journal
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite-wal
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/xulstore.json	firefox
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/storage/permanent/chrome/idb/2918063365piupsah.sqlite
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/storage/ls-archive.sqlite-journal
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/sessionCheckpoints.json
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/AlternateServices.txt
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/content-prefs.sqlite-journal
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/system-extensions	firefox
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/cookies.sqlite-journal	firefox
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/key4.db-journal	firefox
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/ClientAuthRememberList.txt
File opened for reading	/root/.mozilla/firefox/b02aajx0.default-release/addonStartup.json.lz4	firefox

Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
antivm

Virtualization/Sandbox Evasion
T1497

Processes:

description ioc

File opened for reading /proc/cpuinfo

description	ioc
File opened for reading	/proc/cpuinfo

Reads CPU attributes 1 TTPs 14 IoCs

System Information Discovery

T1082

Processes:

firefoxfirefoxfirefoxfirefoxfirefoxfirefoxfirefoxfirefoxfirefox

description	ioc	process
File opened for reading	/sys/devices/system/cpu/present	firefox
File opened for reading	/sys/devices/system/cpu/present	firefox
File opened for reading	/sys/devices/system/cpu/present	firefox
File opened for reading	/sys/devices/system/cpu/present	firefox
File opened for reading	/sys/devices/system/cpu/present	firefox
File opened for reading	/sys/devices/system/cpu/present	firefox
File opened for reading	/sys/devices/system/cpu/present
File opened for reading	/sys/devices/system/cpu/present	firefox
File opened for reading	/sys/devices/system/cpu/online
File opened for reading	/sys/devices/system/cpu/present	firefox
File opened for reading	/sys/devices/system/cpu/cpu0/cache/index3/size
File opened for reading	/sys/devices/system/cpu/present	firefox
File opened for reading	/sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
File opened for reading	/sys/devices/system/cpu/cpu0/cache/index2/size

Enumerates kernel/hardware configuration 1 TTPs 63 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

System Information Discovery

T1082

Processes:

firefoxfirefoxfirefoxfirefoxfirefoxfirefoxdbus-daemonfirefoxfirefoxfirefox

description	ioc
File opened for reading	/sys/bus/pci/devices/0000:00:01.0/device
File opened for reading	/sys/bus/pci/devices/0000:00:04.0/irq
File opened for reading	/sys/bus/pci/devices/0000:00:04.0/class
File opened for reading	/sys/bus/pci/devices/0000:00:06.0/device
File opened for reading	/sys/bus/pci/devices/0000:00:00.0/device
File opened for reading	/sys/devices/system/cpu
File opened for reading	/sys/bus/pci/devices/0000:00:03.0/vendor
File opened for reading	/sys/bus/pci/devices/0000:00:03.0/device
File opened for reading	/sys/bus/pci/devices/0000:00:03.0/class
File opened for reading	/sys/devices/pci0000:00/0000:00:02.0/subsystem_vendor
File opened for reading	/sys/bus/pci/devices/0000:00:01.1/device
File opened for reading	/sys/devices/pci0000:00/0000:00:02.0/uevent
File opened for reading	/sys/devices/system/cpu	firefox
File opened for reading	/sys/devices/system/cpu	firefox
File opened for reading	/sys/bus/pci/devices/0000:00:03.0/resource
File opened for reading	/sys/bus/pci/devices/0000:00:01.1/class
File opened for reading	/sys/devices/pci0000:00/0000:00:02.0/vendor
File opened for reading	/sys/devices/system/cpu	firefox
File opened for reading	/sys/bus/pci/devices/0000:00:01.0/resource
File opened for reading	/sys/bus/pci/devices/0000:00:01.0/class
File opened for reading	/sys/bus/pci/devices/0000:00:01.3/resource
File opened for reading	/sys/bus/pci/devices/0000:00:05.0/class
File opened for reading	/sys/devices/system/cpu	firefox
File opened for reading	/sys/bus/pci/devices/0000:00:01.0/irq
File opened for reading	/sys/bus/pci/devices/0000:00:00.0/irq
File opened for reading	/sys/bus/pci/devices/0000:00:01.1/resource
File opened for reading	/sys/devices/pci0000:00/0000:00:02.0/subsystem_device
File opened for reading	/sys/fs/cgroup/cpu,cpuacct/cpu.cfs_quota_us	firefox
File opened for reading	/sys/bus/pci/devices/0000:00:05.0/device
File opened for reading	/sys/bus/pci/devices/0000:00:01.0/vendor
File opened for reading	/sys/bus/pci/devices/0000:00:04.0/vendor
File opened for reading	/sys/bus/pci/devices/0000:00:00.0/class
File opened for reading	/sys/bus/pci/devices/0000:00:01.3/class
File opened for reading	/sys/bus/pci/devices/0000:00:06.0/resource
File opened for reading	/sys/bus/pci/devices/0000:00:02.0/irq
File opened for reading	/sys/bus/pci/devices/0000:00:05.0/irq
File opened for reading	/sys/devices/system/cpu	firefox
File opened for reading	/sys/bus/pci/devices/0000:00:02.0/resource
File opened for reading	/sys/bus/pci/devices/0000:00:05.0/vendor
File opened for reading	/sys/kernel/security/apparmor/features/dbus/mask	dbus-daemon
File opened for reading	/sys/bus/pci/devices
File opened for reading	/sys/bus/pci/devices/0000:00:04.0/device
File opened for reading	/sys/bus/pci/devices/0000:00:06.0/irq
File opened for reading	/sys/bus/pci/devices/0000:00:02.0/device
File opened for reading	/sys/bus/pci/devices/0000:00:02.0/class
File opened for reading	/sys/bus/pci/devices/0000:00:05.0/resource
File opened for reading	/sys/devices/pci0000:00/0000:00:02.0/device
File opened for reading	/sys/devices/system/cpu	firefox
File opened for reading	/sys/bus/pci/devices/0000:00:00.0/vendor
File opened for reading	/sys/bus/pci/devices/0000:00:01.3/device
File opened for reading	/sys/bus/pci/devices/0000:00:06.0/class
File opened for reading	/sys/devices/system/cpu	firefox
File opened for reading	/sys/devices/system/cpu	firefox
File opened for reading	/sys/bus/pci/devices/0000:00:01.1/irq
File opened for reading	/sys/bus/pci/devices/0000:00:04.0/resource
File opened for reading	/sys/bus/pci/devices/0000:00:00.0/resource
File opened for reading	/sys/bus/pci/devices/0000:00:01.3/irq
File opened for reading	/sys/bus/pci/devices/0000:00:01.1/vendor
File opened for reading	/sys/bus/pci/devices/0000:00:06.0/vendor
File opened for reading	/sys/devices/system/cpu	firefox
File opened for reading	/sys/bus/pci/devices/0000:00:02.0/vendor
File opened for reading	/sys/bus/pci/devices/0000:00:01.3/vendor
File opened for reading	/sys/bus/pci/devices/0000:00:03.0/irq

Reads runtime system information 64 IoCs

Reads data from /proc virtual filesystem.

Processes:

firefoxxdg-desktop-portalxdg-permission-storefirefoxsedxdg-document-portalxdg-desktop-portal-gtkseddbus-daemonfirefoxfirefoxfirefoxsedfirefoxgvfsd-fusefirefox

description	ioc
File opened for reading	/proc/1524/cmdline
File opened for reading	/proc/self/fd/31	firefox
File opened for reading	/proc/self/fd/41	firefox
File opened for reading	/proc/filesystems	xdg-desktop-portal
File opened for reading	/proc/1773/smaps
File opened for reading	/proc/self/maps	firefox
File opened for reading	/proc/self/fd/43	firefox
File opened for reading	/proc/1679/cmdline
File opened for reading	/proc/self/task/1728/stat
File opened for reading	/proc/self/fd/50	firefox
File opened for reading	/proc/self/fd/29	firefox
File opened for reading	/proc/self/fd/38	firefox
File opened for reading	/proc/1694/cmdline
File opened for reading	/proc/1745/statm
File opened for reading	/proc/filesystems	xdg-permission-store
File opened for reading	/proc/1843/smaps
File opened for reading	/proc/self/fd
File opened for reading	/proc/self/fd/6	firefox
File opened for reading	/proc/self/task/1776/stat
File opened for reading	/proc/self/task/1824/stat
File opened for reading	/proc/self/maps	firefox
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/self/fd/51	firefox
File opened for reading	/proc/1821/statm
File opened for reading	/proc/meminfo
File opened for reading	/proc/self/task/1658/stat
File opened for reading	/proc/filesystems	xdg-document-portal
File opened for reading	/proc/filesystems	xdg-desktop-portal-gtk
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/self/mountinfo	firefox
File opened for reading	/proc/mounts	dbus-daemon
File opened for reading	/proc/1529/status
File opened for reading	/proc/1722/smaps
File opened for reading	/proc/filesystems	firefox
File opened for reading	/proc/self/fd/40	firefox
File opened for reading	/proc/self/maps	firefox
File opened for reading	/proc/1690/cmdline
File opened for reading	/proc/self/fd/108	firefox
File opened for reading	/proc/self/maps	firefox
File opened for reading	/proc/self/mountinfo
File opened for reading	/proc/1821/smaps
File opened for reading	/proc/1847/smaps
File opened for reading	/proc/self/fd/37	firefox
File opened for reading	/proc/1790/statm
File opened for reading	/proc/filesystems	firefox
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/self/fd/121	firefox
File opened for reading	/proc/filesystems	firefox
File opened for reading	/proc/self/fd/110	firefox
File opened for reading	/proc/filesystems	firefox
File opened for reading	/proc/self/fd/45	firefox
File opened for reading	/proc/filesystems	gvfsd-fuse
File opened for reading	/proc/self/maps	firefox
File opened for reading	/proc/self/maps	firefox
File opened for reading	/proc/self/maps	firefox
File opened for reading	/proc/filesystems	dbus-daemon
File opened for reading	/proc/1611/cmdline
File opened for reading	/proc/self/task/1752/stat
File opened for reading	/proc/self/task/1851/stat
File opened for reading	/proc/1529/attr/current
File opened for reading	/proc/filesystems	firefox
File opened for reading	/proc/self/fd/47	firefox
File opened for reading	/proc/1675/cmdline
File opened for reading	/proc/1699/cmdline

Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.

Processes:

firefox

description ioc process

File opened for modification /tmp/firefox/.parentlock firefox

description	ioc	process
File opened for modification	/tmp/firefox/.parentlock	firefox

/usr/bin/xdg-open
xdg-open https://www.everythingrf.com/community/what-is-half-power-beam-width
1⤵
PID:1523

/usr/bin/dbus-send
dbus-send --print-reply "--dest=org.freedesktop.DBus" /org/freedesktop/DBus org.freedesktop.DBus.GetNameOwner string:org.gnome.SessionManager
2⤵
PID:1524

/usr/bin/dbus-launch
dbus-launch --autolaunch 11c67417355f45d397f6be11f62e85a6 --binary-syntax --close-stderr
3⤵
PID:1525

/bin/grep
grep " = \\\"xfce4\\\"\$"
2⤵
PID:1531

/usr/bin/xprop
xprop -root _DT_SAVE_MODE
2⤵
PID:1530

/bin/grep
grep -i "^xfce_desktop_window"
2⤵
PID:1533

/usr/bin/xprop
xprop -root
2⤵
PID:1532

/bin/grep
grep -q "^Enlightenment"
2⤵
PID:1535

/bin/uname
uname
2⤵
PID:1536

/bin/grep
grep -q "^file://"
2⤵
PID:1538

/bin/egrep
egrep -q "^[[:alpha:]+\\.\\-]+:"
2⤵
PID:1540

/usr/local/sbin/grep
grep -E -q "^[[:alpha:]+\\.\\-]+:"
2⤵
PID:1540

/usr/local/bin/grep
grep -E -q "^[[:alpha:]+\\.\\-]+:"
2⤵
PID:1540

/usr/sbin/grep
grep -E -q "^[[:alpha:]+\\.\\-]+:"
2⤵
PID:1540

/usr/bin/grep
grep -E -q "^[[:alpha:]+\\.\\-]+:"
2⤵
PID:1540

/sbin/grep
grep -E -q "^[[:alpha:]+\\.\\-]+:"
2⤵
PID:1540

/bin/grep
grep -E -q "^[[:alpha:]+\\.\\-]+:"
2⤵
PID:1540

/usr/bin/xdg-mime
xdg-mime query default x-scheme-handler/https
2⤵
PID:1544

/usr/bin/dbus-send
dbus-send --print-reply "--dest=org.freedesktop.DBus" /org/freedesktop/DBus org.freedesktop.DBus.GetNameOwner string:org.gnome.SessionManager
3⤵
PID:1545

/usr/bin/dbus-launch
dbus-launch --autolaunch 11c67417355f45d397f6be11f62e85a6 --binary-syntax --close-stderr
4⤵
PID:1546

/bin/grep
grep " = \\\"xfce4\\\"\$"
3⤵
PID:1548

/usr/bin/xprop
xprop -root _DT_SAVE_MODE
3⤵
PID:1547

/bin/grep
grep -i "^xfce_desktop_window"
3⤵
PID:1550

/usr/bin/xprop
xprop -root
3⤵
PID:1549

/bin/grep
grep -q "^Enlightenment"
3⤵
PID:1555

/bin/uname
uname
3⤵
PID:1556

/usr/bin/which
which firefox
2⤵
PID:1599

/usr/bin/firefox
/usr/bin/firefox https://www.everythingrf.com/community/what-is-half-power-beam-width
2⤵
PID:1611

/usr/bin/which
which /usr/bin/firefox
3⤵
PID:1612

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox https://www.everythingrf.com/community/what-is-half-power-beam-width
2⤵
- Reads user data of web browsers
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
- Writes file to tmp directory
PID:1611

/usr/bin/dbus-launch
dbus-launch --autolaunch 11c67417355f45d397f6be11f62e85a6 --binary-syntax --close-stderr
3⤵
PID:1627

/usr/local/sbin/dbus-launch
dbus-launch "--autolaunch=11c67417355f45d397f6be11f62e85a6" --binary-syntax --close-stderr
3⤵
PID:1667

/usr/local/bin/dbus-launch
dbus-launch "--autolaunch=11c67417355f45d397f6be11f62e85a6" --binary-syntax --close-stderr
3⤵
PID:1667

/usr/sbin/dbus-launch
dbus-launch "--autolaunch=11c67417355f45d397f6be11f62e85a6" --binary-syntax --close-stderr
3⤵
PID:1667

/usr/bin/dbus-launch
dbus-launch "--autolaunch=11c67417355f45d397f6be11f62e85a6" --binary-syntax --close-stderr
3⤵
PID:1667

/usr/bin/dbus-daemon
/usr/bin/dbus-daemon --syslog-only --fork --print-pid 5 --print-address 7 --session
1⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:1527

/bin/sed
sed -n "s/\$^[[:alnum:]+\\.-]*\$:.*\$/\\1/p"
1⤵
- Reads runtime system information
PID:1543

/bin/sed
sed "s/:/ /g"
1⤵
- Reads runtime system information
PID:1559

/usr/bin/cut
cut -d ";" -f 1
1⤵
PID:1564

/usr/bin/cut
cut -d "=" -f 2
1⤵
PID:1563

/usr/bin/head
head -n 1
1⤵
PID:1562

/bin/grep
grep "x-scheme-handler/https=" /.local/share/applications/defaults.list /.local/share/applications/mimeinfo.cache
1⤵
PID:1561

/usr/bin/cut
cut -d ";" -f 1
1⤵
PID:1569

/usr/bin/cut
cut -d "=" -f 2
1⤵
PID:1568

/usr/bin/head
head -n 1
1⤵
PID:1567

/bin/grep
grep "x-scheme-handler/https=" /.local/share/applications/defaults.list /.local/share/applications/mimeinfo.cache
1⤵
PID:1566

/usr/bin/cut
cut -d ";" -f 1
1⤵
PID:1574

/usr/bin/cut
cut -d "=" -f 2
1⤵
PID:1573

/usr/bin/head
head -n 1
1⤵
PID:1572

/bin/grep
grep "x-scheme-handler/https=" /usr/local/share//applications/defaults.list /usr/local/share//applications/mimeinfo.cache
1⤵
PID:1571

/usr/bin/cut
cut -d ";" -f 1
1⤵
PID:1579

/usr/bin/cut
cut -d "=" -f 2
1⤵
PID:1578

/usr/bin/head
head -n 1
1⤵
PID:1577

/bin/grep
grep "x-scheme-handler/https=" /usr/local/share//applications/defaults.list /usr/local/share//applications/mimeinfo.cache
1⤵
PID:1576

/usr/bin/cut
cut -d ";" -f 1
1⤵
PID:1584

/usr/bin/cut
cut -d "=" -f 2
1⤵
PID:1583

/usr/bin/head
head -n 1
1⤵
PID:1582

/bin/grep
grep "x-scheme-handler/https=" /usr/share//applications/defaults.list /usr/share//applications/mimeinfo.cache
1⤵
PID:1581

/bin/sed
sed "s/:/ /g"
1⤵
PID:1587

/bin/sed
sed -e "s|-|/|"
1⤵
- Reads runtime system information
PID:1590

/bin/sed
sed -e "s|-|/|"
1⤵
PID:1593

/usr/bin/cut
cut "-d=" -f 2-
1⤵
PID:1598

/usr/bin/cut
cut "-d=" -f 2-
1⤵
PID:1602

/usr/bin/cut
cut "-d=" -f 2-
1⤵
PID:1605

/usr/bin/cut
cut "-d=" -f 2-
1⤵
PID:1610

/usr/bin/lsb_release
/usr/bin/lsb_release -idrc
1⤵
PID:1638

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox -contentproc -parentBuildID 20230522134052 -prefsLen 19257 -prefMapSize 230809 -appDir /usr/lib/firefox/browser "{5c035a27-5934-4f5c-ade5-bdb67637505d}" 1611 true socket
1⤵
- Changes its process name
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:1652

/usr/libexec/xdg-desktop-portal
/usr/libexec/xdg-desktop-portal
1⤵
- Reads runtime system information
PID:1670

/usr/libexec/xdg-document-portal
/usr/libexec/xdg-document-portal
1⤵
- Reads runtime system information
PID:1675

/usr/libexec/xdg-permission-store
/usr/libexec/xdg-permission-store
1⤵
- Reads runtime system information
PID:1679

/usr/libexec/xdg-desktop-portal-gtk
/usr/libexec/xdg-desktop-portal-gtk
1⤵
- Reads runtime system information
PID:1690

/usr/lib/gvfs/gvfsd
/usr/lib/gvfs/gvfsd
1⤵
PID:1694

/usr/lib/gvfs/gvfsd-fuse
/usr/lib/gvfs/gvfsd-fuse /root/.gvfs -f -o big_writes
1⤵
- Reads runtime system information
PID:1699

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox -contentproc -childID 1 -isForBrowser -prefsLen 21750 -prefMapSize 230809 -jsInitLen 238780 -parentBuildID 20230522134052 -appDir /usr/lib/firefox/browser "{ec136b8a-e6d4-4438-91a7-13a658ac0b6d}" 1611 true tab
1⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
PID:1722

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox -contentproc -childID 2 -isForBrowser -prefsLen 21418 -prefMapSize 230809 -jsInitLen 238780 -parentBuildID 20230522134052 -appDir /usr/lib/firefox/browser "{ef871f5e-c8bb-4361-a839-29664f42d144}" 1611 true tab
1⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
PID:1745

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox -contentproc -childID 3 -isForBrowser -prefsLen 21767 -prefMapSize 230809 -jsInitLen 238780 -parentBuildID 20230522134052 -appDir /usr/lib/firefox/browser "{62d5de9c-884b-4b14-923b-fb4ea7b69150}" 1611 true tab
1⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:1773

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox -contentproc -childID 4 -isForBrowser -prefsLen 27881 -prefMapSize 230809 -jsInitLen 238780 -parentBuildID 20230522134052 -appDir /usr/lib/firefox/browser "{33058026-9ee6-45c9-9ed4-b329ad9e329c}" 1611 true tab
1⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:1790

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox -contentproc -childID 5 -isForBrowser -prefsLen 27177 -prefMapSize 230809 -jsInitLen 238780 -parentBuildID 20230522134052 -appDir /usr/lib/firefox/browser "{298489a7-42b4-40ad-a85e-1af365bf418e}" 1611 true tab
1⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:1821

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox -contentproc -childID 6 -isForBrowser -prefsLen 27223 -prefMapSize 230809 -jsInitLen 238780 -parentBuildID 20230522134052 -appDir /usr/lib/firefox/browser "{78d5da31-d7fe-4b24-bf31-339f6aa74929}" 1611 true tab
1⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:1843

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox -contentproc -childID 7 -isForBrowser -prefsLen 27223 -prefMapSize 230809 -jsInitLen 238780 -parentBuildID 20230522134052 -appDir /usr/lib/firefox/browser "{e433cd30-1fc7-4244-8465-8a8690629997}" 1611 true tab
1⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:1847

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1497

Credential Access

Discovery

Virtualization/Sandbox Evasion

T1497

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...

Downloads

/root/.cache/dconf/user
Filesize
2B

MD5
7209a1ce16f85bd1cbd287134ff5cbb6

SHA1
9ac521e32f8e19473bc914e1af8ae423a6d8c122

SHA256
fcf0a6c700dd13e274b6fba8deea8dd9b26e4eedde3495717cac8408c9c5177f

SHA512
7bb076707b65515022c69f7d1afbeac317b3eac104a1ae8e15e923fc7380b5a63e113f743945b99c9d4e9dfb4febac7971a97e88ed3a425670060498d26c19df

Download Submit
/root/.cache/mozilla/firefox/b02aajx0.default-release/cache2/entries/037778A55E1B7E9BED3390289866D09402D6C913
Filesize
9KB

MD5
553b4708dfa017c4314344741638aa76

SHA1
c01c99f087ad73991ed3332e0a8689a96c8901df

SHA256
f0c01a8c686c110d0938a35729312bacf4d4e3e23fd1aadbed4a085358ab5218

SHA512
19e403bc0e7beb3402bd26e7c7534e66f7ec758c37fe758cd16225f37e9c20ad81f0ab63cae253e1a7aadebe68f60cef4e53ad0690585e4248783328e2be9bd3

Download Submit
/root/.cache/mozilla/firefox/b02aajx0.default-release/cache2/entries/039090029E64BC91E87E77199A6A6BE11FC39B6F
Filesize
142B

MD5
4fa19b759df92a2e78604540d2e5fc4a

SHA1
994f45c4cd919073786dd8edbfe7ea8e78fcf304

SHA256
e25a2a17d4bbebd6d768a801852ccf780c9d910d31357bd3ac2e3366ce2d69be

SHA512
8628683d40ed96cf40d8219b0f5cf4c63462473b21803a85d4b8adfa115d07966f0ec2a0dd21c1a9e2307017385778165e7cf8e1ff0df2400fd6e380e846f8ac

Download Submit
/root/.cache/mozilla/firefox/b02aajx0.default-release/cache2/entries/0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F
Filesize
102B

MD5
e5977ae82817ffbdaccc1710dc112549

SHA1
5f3417c1a143ddbef7ac2b654f17a75f086bf81b

SHA256
db466e0dc1f447dd3b89800d97062ae07e5090ce03b1fb0004030131eff84b23

SHA512
c773912bc5e7b6c2a63a8c8a1f39ffae82ce365a93111e743e813a3b51b6bb3913bcce59b58473d6dbaa4813bbaae9638a9012914dbab7012f3449b64ff5b230

Download Submit
/root/.cache/mozilla/firefox/b02aajx0.default-release/cache2/entries/21E726081A019043CB4C4192A60AB3461999E7D5
Filesize
175B

MD5
56088cd2f28aba1a69565111517f6168

SHA1
1e9226c0b367ca6ae61612e7847c6e6084717836

SHA256
1ff870957207aa72586500ca66a8c0520c5a66b1403c6e4b6d0da50fd4f6fb76

SHA512
459961a897ce70e1bb22897bbc65d96517b2a42078349dcfb9b9b1ef9e234bc9bbd73c493ba8a0565385015b9ac12fe25b68451a746695b4746f012e01210f81

Download Submit
/root/.cache/mozilla/firefox/b02aajx0.default-release/cache2/entries/21E726081A019043CB4C4192A60AB3461999E7D5
Filesize
30KB

MD5
8edddae6c345d17b7bb7ff77364136c9

SHA1
8aa4e6b2a929e71377a10e36060aba38a5fd34f2

SHA256
89ca3dce50f2db84280cd8f70471f878b4e57fab7edcf56f82fda75a6400dc15

SHA512
4bfd1619ddc4ba64f62ede17cc6343241ff905605d212e988efc9b16e2b41e14823eb6b24119c88580b410a4000521eb2a90a6618d3da09d0bd9c2dca5685575

Download Submit
/root/.cache/mozilla/firefox/b02aajx0.default-release/cache2/entries/3D1E19D09F398691ABF62061591970855193B42F
Filesize
13KB

MD5
753531c50ee8148361bf572dbaa22fa1

SHA1
6e73e47e5d67d424d81116561c02fc4f83ba59a7

SHA256
8edfff0a445f728b544033a9a7dff9c2fd7c75391b6986306800ae93b254993f

SHA512
bbe3da655deed57df81869f12b4b32fcb3aed57ce4d68c8884e15f82eb7db97a4d3b37d80c396a7f49ffcc35f1febbadf7d9c24255ba55212533f9e9df0609c2

Download Submit
/root/.cache/mozilla/firefox/b02aajx0.default-release/cache2/entries/3D1E19D09F398691ABF62061591970855193B42F
Filesize
13KB

MD5
5f449f244d9506288f5665676d8fc30c

SHA1
7996addf49303fc2ded8f1ba1e90947eb851db2a

SHA256
9083246273cf3c31ce03aef052efccf1454cf557146d143bee4bbc968ba59be9

SHA512
d0570afa4f460ca575230d315fd0535cee14b685b18a57634a9c28d97ea25194c25d3b7a663edef36425a66b00af4f3f244dbebb1965a38256b3235eda3f30c1

Download Submit
/root/.cache/mozilla/firefox/b02aajx0.default-release/cache2/entries/44230749A38B6989F56217B435A03E84CCADE62D
Filesize
26KB

MD5
e961330c128dd96fcdfab048cbbe1a1a

SHA1
0735320735b0e7accc0805eb9c7c04b13bd6a86d

SHA256
1c5c159ea094f9273850290ea32b8ec98eae9b771fdfb277753a479336f053c3

SHA512
f79662bda3a78762a26f5006f86c9a2319b50809759508cc0766b95faa891f5c92da64a662eb66a9d1b181cec4ceadafb4883e11cbc4ae52b992d12c50a3b46b

Download Submit
/root/.cache/mozilla/firefox/b02aajx0.default-release/cache2/entries/47B7400F14908621B87C12F5593B5C7A28C537F2
Filesize
9KB

MD5
d7e406c28e1516205dc6321b6c9710db

SHA1
dba1d48a4547b6d50e8efa3d2e24970b2412494d

SHA256
7ede90af77ad11a05d3b9db1d6d1e7c5f6a9ad7b4150c908df14e481f6fecb16

SHA512
a05f8fe2b6c19773d8d015101b7f0fd151a02bfbf756ca3ef605c09d878e3d4a1da835ee84a7532158c5d3527298876aac47ca3500f6f477969c3df8bd70bd40

Download Submit
/root/.cache/mozilla/firefox/b02aajx0.default-release/cache2/entries/6D89348819C8881868053197CA0754F36784BF5F
Filesize
89B

MD5
fa6404aa36a02d0244a81d318f82eff5

SHA1
507d1b85744204775f3e8ae8520b11ce9f863f3a

SHA256
3c7c2976fa9dc87fa94cc99b7c3a5f1289dd658ad8e6c4093d2f5cb197bd8259

SHA512
c7a79665d2317714af8ec5bbc862e75757f2973d1c3e0e448208f96d826bbd6191d8f2bc63d884318092ad9aced0079999d072e5a595dfe6e103dac54b743086

Download Submit
/root/.cache/mozilla/firefox/b02aajx0.default-release/cache2/entries/6D89348819C8881868053197CA0754F36784BF5F
Filesize
10KB

MD5
340f0105e314e2aab9749ca11282bf6a

SHA1
e576b6120140b35c7da3b5f61214b5e21a925533

SHA256
5f5d368fe6d77a044f3cf6ab54734b939a709c07b49854b982feb9dce2663e04

SHA512
bdbccca1f0a77005964fe5bd0594210746ce81020b65b9bf71fcb59b243afc970c9147b69990cdbad7a828f0ab1bb8642da58d0f78a7e471c89731c98a5d58d2

Download Submit
/root/.cache/mozilla/firefox/b02aajx0.default-release/cache2/entries/75654D5D4E00F3A56BE360656FF37B254107FB97
Filesize
21KB

MD5
933619e8b15a5a488a0a044f4882bdb9

SHA1
219660c755e3181e29fb5770f75b122889f2220b

SHA256
e44fefff051c4e2aa234e9448e15ab76898db7eebacc1d04da7b60a64b899e03

SHA512
35454fe56e21a93e4670d2852a22159880cf0a940ff8a6d4551b9664c7ff6acad11b6eb6901c278428f24125450aaa892beef2fb751f22695dab4fac89b362a6

Download Submit
/root/.cache/mozilla/firefox/b02aajx0.default-release/cache2/entries/9335F93854BC89E654A4BD08E615D34F16D8D11E
Filesize
163B

MD5
2a8b3f2c322e38ce821fde38eba24db7

SHA1
20f69fcf29691713d32a7fc413b71afd908c48d6

SHA256
922f66dc8f5364d5f01941f5ea32339e1abb83555cb65ba7baeb14fa1917f22b

SHA512
d487fc120753daaccb51ea0e363f0ac6393a793b880517897749cd40ab378b3189088216213694061a4229308ad1551030a1a48e982d1ac5dda7d4ce1886f86d

Download Submit
/root/.cache/mozilla/firefox/b02aajx0.default-release/cache2/entries/9335F93854BC89E654A4BD08E615D34F16D8D11E
Filesize
9KB

MD5
df45e9a59daa679be7deb6a0db86b696

SHA1
4713633a43fdb445c7f21c22341087540d4d1d83

SHA256
0dc7df8083ae65a2cf6703500583c74c9ef6aca15e7f4321b76efe54b820353d

SHA512
13f6a7b55d00bca114ccc4c34bd87c2bb697d77e5a4183e010947241d08fbde5d7e42c895859e60127a646cf736bc4c803964f0fd2b144004fe95f91bf1ef05e

Download Submit
/root/.cache/mozilla/firefox/b02aajx0.default-release/cache2/entries/B6F59826B025251E088E4743F506708A83BD73B9
Filesize
10KB

MD5
5a82443dd6514c55bacfc1cc8755e99b

SHA1
b4765093b1681e9ea79da3cfde2c14470986dc39

SHA256
e75eeeae53638320710e336e24de9d1c0d3b3ce784fe3df7358b0ac2b742ca22

SHA512
736fe6e819f0cd237e614b282e3f45c0532ddd41e1c1ae9692fa046ea42f074a5042d8fd716e8eafbe65628bda97ace6ff251a56cbb3af7cc7d3c54a79baffbc

Download Submit
/root/.cache/mozilla/firefox/b02aajx0.default-release/cache2/entries/BE4820D40B48E7D6E96297A9048EAE2279EC43A2
Filesize
11KB

MD5
967e3d1ba60d587aa063daff4404d6f3

SHA1
71e8d44433e41057d3b97a4a4cc31ee62aa34cdf

SHA256
6c4da186a866c47b7d0a560d70d99cd3ef445ea91167d48c74ca642d30d7124b

SHA512
2f09c5eb70cdea6b86104cbd92e35933d5ef621873166d4f8763be36ead59bca8d1873f866b7b239d346d8098682036395312dbcbd3d7712a27614e1a9c57f2b

Download Submit
/root/.cache/mozilla/firefox/b02aajx0.default-release/cache2/entries/D23F7952044A1A6016B80DED46FC563716A295DF
Filesize
198B

MD5
bc0d5da4f6a6f0ce6092f2741aa2edee

SHA1
fe47b2b7013cd5d2620e3fdae12bba0f8fc461ba

SHA256
bf39ea1d21a7bc7392ef87d68a2b3db77b6f647cdf93cbdbb35346be34136ef0

SHA512
2639c3c86a4d9d6052edca6cc18d3c6bdd00d89ace0fe9df28d9f0812efaac70f48e4d4ae194e233d481c95143b8e9e5af393805cc976e30783eeae34a5e4c9c

Download Submit
/root/.cache/mozilla/firefox/b02aajx0.default-release/cache2/entries/D23F7952044A1A6016B80DED46FC563716A295DF
Filesize
9KB

MD5
4625777ce4c8dda53495db54f0f27287

SHA1
88a6ebcf1cccb84bdcb3f3a13300de73fa97dfd3

SHA256
987c8cbb369929b63749464d277b307d3e245401d832a4ff8fd160e2b6bdaf71

SHA512
810529ba7f054093f704cbbd9a3ee12aeaaf972544f7203bfc3111e8fd42a9dcc27f979be044bb651e612680526caaf29515b41eab80c67cdbf6a17cff0e4f79

Download Submit
/root/.cache/mozilla/firefox/b02aajx0.default-release/cache2/entries/D6B0ADD0DAEA00708CBB4290B85CCA0E0FA79061
Filesize
186B

MD5
466d1afe076fb1e059efbe3c72be4fcc

SHA1
cbffb3336e12c80e07b3fe54e696040039d467ad

SHA256
7f12cf2cb35b5e758dcc6f0b348af71ee4dd31a4ea8cefbc1db966689a8e314f

SHA512
e701ae654d924a03e14cc591354fc9664e03828cb04fa0b3eb3df5284e548d884d538680b02abe9fa994c540a4cca809346a8c2fc354611fb8cadb1d4b13fc88

Download Submit
/root/.cache/mozilla/firefox/b02aajx0.default-release/cache2/entries/D6B0ADD0DAEA00708CBB4290B85CCA0E0FA79061
Filesize
9KB

MD5
560790c76f21208b78e65e9af7cd2212

SHA1
6ed8f882765783b4a0d63196b0bbe4dca4b22988

SHA256
20d910e585767c35d9ef8b052b694a6ccbda6fc914ac3877658bfc35c2f0759f

SHA512
448cb311463e6d6ce91c7677502112c7fa1c6c3dd51d6bd34f44a06e4398dc121ad7b5bd928f8a0426ee809a4c40d6406eb961ad2419a8320188aab958fadf16

Download Submit
/root/.cache/mozilla/firefox/b02aajx0.default-release/cache2/entries/E4821927500C7DCF2B0F170FB4681D6E5EA6EFFD
Filesize
107B

MD5
8e750de53bae5e6afbf516d4022a1f88

SHA1
b31504897c8ab69d323560a5dc5bec04c94433f1

SHA256
5b253e3dfdbf8ec4bdea95fe18a441b10e1a4fe06db8b7b34ae6ef6537e81e89

SHA512
9e1ea8b406ea89eb4dc736ecf6c47a3aa764c393840196d5cb71a0cea1546f7b50c2ea0ed56e2cda2e3aa3ef421c63692b470b97ac1ed8806d60963fbb87d3b9

Download Submit
/root/.cache/mozilla/firefox/b02aajx0.default-release/cache2/entries/EE1AAB872F378C4FA66FBCD193AF217BF20A4E27
Filesize
115B

MD5
4618d67564fc6ebf661940715dae45ee

SHA1
706100a4c89e2121f7cc930d1177fa54ea1ca42f

SHA256
5917baf2c92600b7a23bc5c6e91012b0c123b137e60dc81c8a348760e71eb242

SHA512
ad02e51845ba9ead7a3a5199dcb8db7903a4e6d72bb3652b00e18618731ff66e7c1164a589cb6ece31e5ffb6a04b52e57d49356ae8d2168f044c76259e1dad86

Download Submit
/root/.dbus/session-bus/11c67417355f45d397f6be11f62e85a6-0
Filesize
466B

MD5
c8f81fab045542735f7fb6bbf9fc71f5

SHA1
d79933c16209eba08e1f0462cf93c0ae8c2658b3

SHA256
5d69b791f2171ba5253a60cb7c16afedd298dc9d578d8e1680f71ae49fb324a0

SHA512
bdb0f2802616fdcadc97e36428f5e257daa7a1224bc227651fc0a7b0eff8ef6df2d205fed4293189703ff9f993e3c51934543e8a22c126d944bbe0d22d830056

Download Submit
/root/.mozilla/firefox/Crash Reports/InstallTime20230522134052
Filesize
10B

MD5
a2374a6ab83acf37177564c2a0ff7f69

SHA1
249c587b1e7eb5c8598ebc6786c49cd39671c386

SHA256
c621a58cbfc1d11175e734fc4e366aada9fac0b75884100a156740f381b229c4

SHA512
37f42db521b7cfa9bd63006384c13448546c1e4e9d28e72976954d298cd0b985ff0f399d96c197e801a56d86b41e64eadefaf98dd50d67daf97a1c74b571a5ae

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/cert9.db
Filesize
224KB

MD5
bd1f38e0fde822ecf18db310bfc9d0a2

SHA1
23ed96a20f9ab0bdaed197fee0501ec80e43f46d

SHA256
aacc83027e69f1b8d1edaab8e5f705053bf162fe024d99ebfeb2513a05d61a88

SHA512
47bc941be50f739b58c344b0c0310a3ede89876bf31cf57f18ebbbee21a7f00a27c0f4aed0caed361e1fee6813a88ed8ed2bd32c371fb9b548b75dad128b19ba

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/cert9.db
Filesize
224KB

MD5
28787dd2eb1d6566b58e7b66b5c38f79

SHA1
08d9876ccc70fe4b51ed60ee64f41f09fe6f73a7

SHA256
f0caee9e556599552242e002fb7307b7b2edad538bf0e716ba9312955a04624c

SHA512
3b5c363d197f4f46192f81ab2659397d1d05c748c9101855123eeceac629e92387d1ba7a422a9fc30ae7288d60d4e8b543db091d5c1c009f6db65cb92e4b926f

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/cert9.db
Filesize
224KB

MD5
a9b292596d85eed74395b5c1bfd95d2b

SHA1
be4e15f2a926264def6bd8ff748930bf89a67eec

SHA256
97932b61ccf55dd81fad3c325bc131b57d283e69923f5529c00910abc4371423

SHA512
e046cf63f6bf50d5a6f0eaaccf0b09f5e4439630aa5cc8cbd02b3d475f3a9bbc8ef53ee3f2daa2e7b88710669fc99003d46cec5bcd8ef3fdd4781a5da23a539e

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/cert9.db
Filesize
224KB

MD5
e65849f6d29aa75648a98e6c7ed5e304

SHA1
4bcec664736d67d7940f019866a25e0e57c4c3ba

SHA256
61e0c8693d92b05731b05c32fcf007dbfa027aee5db5e75ace0d23b6eb9d7d90

SHA512
ae1cdb53a454130192181d7f038ba5341d4c2b6ad9b023193278a9175c5d5c51fba6cae05f8b1f68a1968ec476a22526353b9f8a9ca1832fec53a29d39c94dca

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/compatibility.ini
Filesize
163B

MD5
fe452b7294d5928a9a5863b89ee0a6bd

SHA1
a5d4c245071fa96476ba48b4725bdae7f1b7940f

SHA256
d5bfb07561606a19aa96557ea109b175050dc0eb805cbef9c813503587d77900

SHA512
dc37d8507f08849e3382d2dbafd4a64555dbd57a288c95131e9aefb366630f1585811a9e1456b861bb9d2b816ed88b18ffb7580cd92b41bb9b0227ce1363843e

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/content-prefs.sqlite
Filesize
224KB

MD5
1fc2e7b7fe2c5be305dfa9a2bbb60771

SHA1
4967389dea050001cb1af3ec799edb7805c3abb8

SHA256
1953edcac737d1ad3de6fbf69671163882fdc0be5bd21d00378d8d8c753c757a

SHA512
fba536378ab9b5f04d92f1029b92d255c7da445a29e2527647bc16e57d02c179de1e78a2de11db1b00cc54c24d3715980c84c0cde103f47c6150f2e7bb8f93d5

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/cookies.sqlite
Filesize
96KB

MD5
9535f5fe817accc769c2c1d3354db39f

SHA1
6af62cf08717cf3bfa84eb1a7b311acf522ce560

SHA256
c53c15fcfac2bb57fdc88d23f932fc244dbaf4020f0f6eaecf0f77a37c21f8c5

SHA512
dc9c2c32eb42dda0a7a711e143aea58c603c1e9d885c3677e9fe86f525e1b0b32a46e240756263e56510b07e764ba69f2de13b90ec18210678242e10cfe17837

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/cookies.sqlite
Filesize
96KB

MD5
5caa766855d5613a999f71b7812d6451

SHA1
ad0d9a52a0d5cc7f11858301dbe47377ed99ee37

SHA256
3a8ce2b07e3e8678a13aa58ef5b942c4dccd8f9c84511bdeb8847ef270797e27

SHA512
17bb0f4c87ec178910795b25ce85e74cf599190c769592472c3e872f42930c93f28faf0ff3e448816a9abcc8af0459852bed52bee08cfe25d068879c6dfd8eba

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/datareporting/glean/tmp/7f548b79-f6ac-48dc-af58-aa20f5935b82
Filesize
584B

MD5
d5b3a1b76f54feb5e34b7efa75b3e19f

SHA1
8c0653a39530d6f56983b36bb048534c4954d05f

SHA256
d0010768b28c81f444b081249917aa4ebaaffc1cf7cc5bba4e044800b6601a96

SHA512
d94d7e81d39176e54778e6b1036f37ef1cc1fb9bc7a27ed55c37910cb86aced4a83be5aef59b23bd2203cbb2bd0832d741e2cdb96fc7d060acad491ff9c9f063

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/datareporting/glean/tmp/8b568fb9-7953-46a7-ac68-80b2530751b0
Filesize
894B

MD5
ba10a26b9459baff4987b619a63850a1

SHA1
dc15cdbc1bd815e1d7ec404f9cbb19a71caa4b50

SHA256
817210156f8cab5a9689566ddb2fad9e2d85d709196758ae0e59680d85803676

SHA512
274bcc5c8a435fb404aa260fdc62b4acdd516cceef9084ec23ea0d469e6938a01ddf79a0ff662e7b46c21a2cfa611f992e9e0520abeae220680fae1297fcc059

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/favicons.sqlite
Filesize
224KB

MD5
3c0a1ec298284608bfa51081ea539be3

SHA1
e51b58f6fe89d45fd8a1d935b51da172d5f6f32e

SHA256
34c4fe7ab2d3e44f193b489ebe84c17d67b336546af9ef231897ec09d7ff16f2

SHA512
8550f530377f7a98c46a6989bec2c43ed644274509a5b987e8e0d034bf867b3315dcc75a2c851a5ac43a45b40bf51c789d828a9a69c02157b3e900467341a28f

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/key4.db
Filesize
288KB

MD5
cd2abe4aa517b3003809ca75207042d1

SHA1
344af03546c3ea379bc995e09c87e9e85a07faf8

SHA256
ba080a0c92ce3a7d65b651ce64727717177be66bed4b0986f77325324a90b034

SHA512
e85169f8fc6e1d3c27a033b1aaeabb7f9d0b8aa57b68d072d27dfaf201d275f6bb39bbb25134ce4bb9d20f1850e35c6ce89096144b6f82aef80df7ef3c748868

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/permissions.sqlite
Filesize
96KB

MD5
232fbc22dd03a8ec41edde02bdbea61c

SHA1
6ab4b39bca95418c52f7f861fd39e5fddb9cc7b6

SHA256
d88bf367aaf79efbb2e8fbdb1dc5bde1c1c3a53e0f4d8188027a63ec55d5f5f0

SHA512
055f1595f4a327347671db53cec8d89a310109d3f871c567e3d5b654b956fc0369d12437f7dc6d9327b973008f1327ee0dfdb5504f1b3cbe00da29941b1e5892

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/places.sqlite
Filesize
1.3MB

MD5
82a07c7e38d9c5ea523812ec98602f62

SHA1
25c09a6dc0a165a2a0166b155236ed31f9b04721

SHA256
d379f25dad52b2955abfe6bc6fc02f7ef4a0911bdbbb382f0763798c687d0f08

SHA512
4a40d3027cf91bc3b6965124428a37d914132fc385d381d5aa6b4a344ec57856e43190a2accd0ebb6de6c0cd7baa62e7eecc5674cd26489622e61eb8b233ace5

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/places.sqlite
Filesize
1.1MB

MD5
096b3d581e7afa5ed670db419d6758ea

SHA1
46e3def0f5792161018c0015949196a068eabb93

SHA256
b6cc6cd96dfc7fc568d3d1ab26fb5ac160ffefcb91fb1c8d389cfe5a2e5230e2

SHA512
48e6b923eb11dc26557767c2771b39e462dfc81f6c4cc39e69b114b98e2fda34a2608128f96b223df0f64572552fc46dc15b8ad2bb9b98d84d5462321695ebdd

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/prefs-1.js
Filesize
1KB

MD5
2eb083598dcdd58977b69b9b535ecb2a

SHA1
6f8774fb3424aef16e6cd2bea392a7c1c94300c2

SHA256
8566d70fd4f5b9075faa1b3d6e9d4e372ee3de4a23e7812d41604e1146c0968f

SHA512
60f3865c8150a920149346a6350d1b0e7b59d1402aa8f8474ba29818806dbac0923b36ebe181db7f061d333ace2e3262382cb4f31a5f4f728c4c3c74f3ed4392

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/prefs-1.js
Filesize
2KB

MD5
e6a0449a11e87e8e084c2bf0a34753a0

SHA1
b1ee78404170b2b0c1987c2e57762a87803e087a

SHA256
34bdc78df070c7d5afd88909545c6f25c4b1fe8c4b3f561918a5afedfa9a7227

SHA512
196b9d79e1ffd6ba00c8d1a4377a78f8a9b058ed81bef1dd2c1118310c260a8f84ae8b2b031a9cbc234edf0f294f6090c40387f65177996a1646dc67c7775303

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/prefs-1.js
Filesize
2KB

MD5
e45913a6c7a31a49f9407e5170fb3ffd

SHA1
9043ff300d6e464a98bce8a39f9ccdc01635769c

SHA256
c5c6b9e37ae328b84868c62c1ee68e7bde50099958f2fb9a3ed932550c3ce489

SHA512
4f2c25ab8bd8ad4482b7279bfaa3f952c54bbffeee716d2731409bdb79af48ac8f1b03c167e0dd4dc82d0edb21d2bc6a58437f8b37b72df3ed21a13da4ecd56a

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/prefs-1.js
Filesize
3KB

MD5
d4b3bacfc0f1a0b6d2ea21100b466438

SHA1
733e9a1eee6c1085367f309be0a66dacc202d2f1

SHA256
5fd9edbe7bc3932f53bc9b70a550cc48035efbc1a2ee9b347fef6807052c8855

SHA512
3e5073af4030acead1f53819c60b4fcf31ae6e7f95c2e7aac2122bbbc115e6957d9a10fd1ea9b2f50abf3999c5ab2889ff8ee90ab14a3e5fc635900786edb944

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/prefs-1.js
Filesize
4KB

MD5
4ece406f934f99909f519f2cb5cc558b

SHA1
ebe9939085b1d3acb3c9215ccfc216d46e99aaf2

SHA256
df3e84230fc26e2be22b6779b92b1468c02c62b898aed1fefc6bbed3711f7b5e

SHA512
6cf66db9bcd63362879276ec150ad04cbd82f3d2e1741dbb87a567d1f673626fb02302ffe03fe1ec72c8c4567da63bf18fdb85eddb0f681da949b8d17985d97b

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/prefs-1.js
Filesize
4KB

MD5
7e922bc51ca8a8fd50150334175e305b

SHA1
85027ed63743407349ebedb0ba044ca6612051e9

SHA256
2545ba432499af1650f13eb7f8d292e89429829371cb3a15f0b526a207438279

SHA512
2cedc6804ae97f8a35bd0b3ae92396e5cf4bffbb42c61e9a1fe8ddb743d5d84ffc3a3ffdf0a35132246d4930999ccffefa1e6cc14db5e8726db0b85168b7b1fb

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/prefs-1.js
Filesize
4KB

MD5
f229a380880957c0be76e83cb5b99a7d

SHA1
cc19d401410d9c0f9c69da6ff7e0f21a32f85d45

SHA256
9ebbb4fd93d387a1eefac9aef32b42f4b8e10d3dcb9307789e7bca26f33d8def

SHA512
ef292e5f2c20dfe6bf1ff5392bfc98c1fe17f96e636b4849941dc5b3da205409610376c338d538651eb4bccb31ce1eed3f2123ecffbc260eed304271becc6dde

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/prefs-1.js
Filesize
4KB

MD5
81f64b9bf7b512a4eabc95bf32906fd6

SHA1
bc948ebc70a5bee2bded9d1cc17f4c50e0a6a8b2

SHA256
7a6a24fd31965a79d5cfdc81eede27c8e47040fda9e963fe484ddc340b3b3f97

SHA512
e2815465c52f9eeea60f3b3c3e320384b7e9fb569c8a7480bf650afc8e10c36ff2ec5b9d33174e9cfbe2efaf40e843efe222b272ffb84a9282ab4ee8667a2554

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/prefs-1.js
Filesize
5KB

MD5
75ee4e63c83d374cdc40ca82889a67c0

SHA1
92757ae118956cb092cb9da91301f391ca11c0bb

SHA256
9d07b164f4c1c159768609898cea42dc24b516296cdedfe67720b11633411014

SHA512
ab1d3dc99e6a0b975e69a83b0b49e6501bd0d4276d64dc7ee729c65fb067ea8ebec3447583549d0a3847ae1b69c62f0b68d0e2cbf6ef6cc9187a34a67e6d1f78

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/prefs-1.js
Filesize
5KB

MD5
a0f57f64adf2384a8aa65d5d5f10197c

SHA1
128d8ce4438eb65bb8d2513fdbdb8611b7e478ef

SHA256
ec37c056f98d16a2a067ea4edd5ef2d7927f4671eaabf6fb77c2eeee4e63b777

SHA512
ba68d4b7ca25d301b53c984ca23f04bc11cc4fa70326a4a7c9a7e0774540ee436a6eb77e84bf7f4ac6f695173520ba2fd25595a398ba4b55a924801e61420680

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/prefs-1.js
Filesize
5KB

MD5
3a520cbea98e4ba99d8bd6b1e918af75

SHA1
31b7b219a1ee6271e66daa9486e2ea009fab61e7

SHA256
6c0b0275251e569c132801c76a3032db221d06b5566a0a0aba2ca077c2880ddb

SHA512
3f0e70a837c08a27ec9fbf89c098152a94f004bf29bb2b34294e78be0cf50f3aa792dd017a433e2b6c63afdd59d9feb4f3349c081ad8463ff40e5226ce7b65e8

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/prefs-1.js
Filesize
5KB

MD5
b3645c0d2418c86a2d1e9b55bab49b55

SHA1
f70ace1bc867334ec607b5b8ff9f3837a8debb29

SHA256
5f1efc6f46bf36c81d68a909c2a495a43dc3608c864f8451c98a0382b24adf19

SHA512
7e90f08c558c9f8b9d38705fed2ee2375d037d5b841a84403dbb5f588152eab53efb5ce58f4c1946128d96794ba3c1450201bb036a76078ad21e55d2cfd67bcc

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/prefs.js
Filesize
919B

MD5
cf16d7476f85e63e67540f80504e56c0

SHA1
5589619e23bbec32aa12550eeb10581b17f20680

SHA256
4aa6ccb1d00645f93bd1510c94ca2cae6f4ca02f2a010856c6bbe16d8ab9d235

SHA512
cce15bac65447b02a3ace9a3c57df2e848af213af22ac51d9685a1cc49613d03461178d2fbe58a88120685f9da5c4caa9e232b3b41908c3ee4c46aded5f2cabd

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/protections.sqlite
Filesize
64KB

MD5
c7cc11494c34e02565df83d17beb33b3

SHA1
f379ad7c0fa73476d3828d8a89ef843046332c12

SHA256
7ca17bb171e22b4ec498c1d20587b30d62d773b114d0e66bb00ec874506eb85f

SHA512
0cfcb15a985a35e917c9652721b516e2d1c358c6db3dca4452e866d250b6269c4cc69773277f5ddd5a0c5a338f95d9f6134224f0097df194985161cd3d47cfd6

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/storage/ls-archive.sqlite
Filesize
96KB

MD5
e0c613bfd69956a19ce2dc5e925aa223

SHA1
14accb230edcd6cb76967cdc6d4e5686db96b5df

SHA256
0d4cb11f6364c46a75f9eaddfca5c660b90dfd515df3afcd5e0baeca28a0f1ab

SHA512
01643c0131a392be92b3f281d7f633c1f502bff19090b0d716f1ac66aefecc3fcf92f393bef66b03089c9b9c6d8aaeb711b6a4f29d5a6729dd188c838f2272d1

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/storage/ls-archive.sqlite
Filesize
128KB

MD5
178d71e5529d637ac62f7e75fdd75896

SHA1
339f2b949cc4c207b66aea11137448ba28d36dcb

SHA256
7b0050f1bfaab85c8f9067ae7d7369056ff752c0c852ef1462a96c22169004d4

SHA512
ec0e0105fcfbbae356dd55efbcf92975f35bbe5cb93fcabf4c08443e871957635d14830b27c4e1ddefbbaff8f9b7ec3590bf417a9442e1d7ee3607d14d56f664

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/storage/permanent/chrome/.metadata-v2-tmp
Filesize
42B

MD5
bf6b8a4838c8acefa1fba0a36af5a00a

SHA1
87728513720dc56a486fd97e2f8c653a08cb55ed

SHA256
5a9c9c57878b64734e78d08ee208a14f848630d8fbe561c2834a97e5076427ed

SHA512
67bfcc671b2b6d466c8caf6c85e33e376fd5af4d06c095d969232e053e7129ce48b3273b45503b14ca48641c97c6f73fa0284047520fbe10000dea2530685bef

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/storage/permanent/chrome/idb/1451318868ntouromlalnodry--epcr.sqlite
Filesize
44KB

MD5
a8dd7ebaad5528b23f82ccb1534cea18

SHA1
600daceacfb5cf9df0b66ba7dce4516b2ac4df70

SHA256
e5b0d02c18ae36c4a220f41fd97c66060c17aaafcbb324a57ccdc2707c44c4ec

SHA512
67f867a8e2b37fb6bececd5ebc570ca594ea329142badd63d1281d5e735f515a5e329abc6eb9a9d3465aab0a08541b4888018d859964f160a52345ab93532bff

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/storage/permanent/chrome/idb/1451318868ntouromlalnodry--epcr.sqlite
Filesize
12KB

MD5
e479782e8f1ac99f6c5720e63b3b34dd

SHA1
ffe0ddeca5d261e5117c5631bedab401a073739e

SHA256
17c273a38b4cc18a59a95c0ffe451c899485c781abfc7af65ac4f2334b65b0ca

SHA512
30f924ce9b4bc6a3a560a061fc798124cca11cabf99d06829d104a6f1790340cf5b41c2ed947b190486974d82ef954010949187f6276b90a8a0558f8f3667f50

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/storage/permanent/chrome/idb/1451318868ntouromlalnodry--epcr.sqlite
Filesize
16KB

MD5
8880a2797db89fe5f562f11f83157a01

SHA1
88325e6ff6568e1349737673d471ff1223ff6bbd

SHA256
7c65de01dc9b214768119ee4df9cf05fb9842bae2cf09e80a4220dcfeceedd2a

SHA512
cf4e20898b2d843fdcd1e1b4766411fe6e1d3d5d4a668853e9259f3a1bb6a399a9a0a8c9392b6698a3dc6a459457452ce55c3faedc3812c93b71a644db714d75

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/storage/permanent/chrome/idb/1657114595AmcateirvtiSty.sqlite
Filesize
44KB

MD5
7352c8848e88edc39b7fb5e663888187

SHA1
8c3dffe25cc56c7aec1b782292d6fceed81e6304

SHA256
7a462086a26978809c719e57a7ea6a25568767fb7532014e8531fda94b660e0a

SHA512
f2a0dbbab5c2c1702b03bce15a47739481f523e127d1372b40534db9a20b2bc99fb53710ee0e5d44176188817cac704cf4f98cdf087e7e89d244281fcfc3b280

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/storage/permanent/chrome/idb/1657114595AmcateirvtiSty.sqlite
Filesize
12KB

MD5
be05aed48e7186843d5ea153a2bfab3e

SHA1
516da0e85901ca39d240cbe215fc00998aa7246b

SHA256
3a33073bcffc368188a7b0e7c427288ed300bc083a964b5b7a06ad2230371e0c

SHA512
36a4f479fbc5ca941649281b78e64dee57c9b668dfc39557248385606ef713448dd2fef715ba2e8255b6e06ff04a8a536f6cc9cf404ad1304ebd72b226977959

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/storage/permanent/chrome/idb/1657114595AmcateirvtiSty.sqlite
Filesize
16KB

MD5
8bf176ff68159040e9b0a8503183eaa0

SHA1
4467957ee8c5d9a96aab206a1d21c9a3f4e86007

SHA256
750e56664284dc0104b58af9883458765589c6eeee2ee6e4d70e827cfb15b132

SHA512
b97968eccf77517202dbcfab2b82447148507389622b87268171d884808748fcc2cf941fbe47bc43fa402c267c9e9453836b34ce610835753c658bc95a63a014

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/storage/permanent/chrome/idb/2918063365piupsah.sqlite
Filesize
44KB

MD5
d7797ca7ca0770758ec1843310528201

SHA1
d020a9f6711f0ec3a75a4506ec5441bfe85f43a8

SHA256
ba1e9e93d2fec406890ce6d8f57e8ca65007990857e09911d49fc21956d77401

SHA512
5425339a68a436fea01bd910e9533a20ea7089010ba1174c9bc4d0b602fbadd685100522941fb61e52f3eb68e68a5734b367e8e154c96a4a27b6df81070bd016

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/storage/permanent/chrome/idb/2918063365piupsah.sqlite
Filesize
12KB

MD5
9170c7b7316c9b0dc9678201a4b7f182

SHA1
6fb46866e6a15e87177e3d00496c76d1aac72dc8

SHA256
a5010d4ee8f8b059ace52553b6581e79564dd19cadd9722ad781699b62a8524b

SHA512
bc73187e8dc5bdd153649ada5d1a47755ee8e9fafe423b1ea2ea02a88268ba22a2ac4f54d2cd406e2c659cc2c2d2ae7c98f7737558b26a0c5017b470f63f7e79

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/storage/permanent/chrome/idb/2918063365piupsah.sqlite
Filesize
20KB

MD5
101d68a498fc8c094880f479591abc39

SHA1
565147cc074424a3c7cb15f5249043d9d63e0d99

SHA256
a48ef8d82a37f96ae1189297823a26cebc0a38b0184f1cedc41437ece6afd848

SHA512
4a1af34def69e6e45ccf914a43cd93190e2279de0548c4b9c8c4c4f40436a8e54515f536201ebc5e48b90ed6aef76211ae081c20ff2b2f3803126c8c3ad3b0b6

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite
Filesize
44KB

MD5
759544297aaa61f5fef8ee42d0ae4393

SHA1
fc2d66f6e60409e3e8d38623ce5f817fc7f571e0

SHA256
1bd2000cd972e80cefaec6e982ba261d224a818f367de0fdf8c51fa5a05d7ab5

SHA512
8aaa2ce66f10d46f7c9200af841ac7bd9f5b55c30308a14f0deda44ac62581c45daae45154487c0073a0d5847d5926cbb4072ca64a702ac6b834ad0bb482804f

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite
Filesize
12KB

MD5
37cf3fec9cabe48e8c237ac41a8ab5d6

SHA1
7d09f98a446e27e97f8054fdaae9f852fd8d3e9f

SHA256
5de944f2ac9c4104a0b18da14db32ccbee731b5d7db8241a5887b0a3a4042c1f

SHA512
e35173a1501c156cbab34b9637b6b476855b0d5d9c39d0f854da3dcc10e5ae6e917a6f411162cc1ef06947f60837512a9e5100552a8ce84c68f7a66cdf168779

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite
Filesize
16KB

MD5
776d300181de5f61000b996f1b614204

SHA1
6ca6e2c1ccf082e325ef26fbac0a89dd51420d78

SHA256
1bb147502b456154febe5f559acf1294695b7505038eae900fa01a8d99a9171a

SHA512
9188463017f5c92796350fba6015a65d78a1e110948dc23cc9c099a6f39b8ab1fe16201997e692b5c9412b06bb3cfed07af3582daedd109d8efe3240f2feeb3a

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
Filesize
44KB

MD5
07a412e08825220262ad2890757ff779

SHA1
f46c127dbc070ded87a6078b3c1c761955f96de8

SHA256
da640f8b665841b520d2262a21cc3f82aeaa881cf81a1ddae27ef501d66544e4

SHA512
0134c783bf3293848e479b478ac57a1e0f4202cddfb8b57bc6275aada7345f398cf8a627e9b1c34fd618192c2f0c9737b1da487daf33f9c557ebc1377105582b

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
Filesize
12KB

MD5
3870f105e3868b2d451f5a9c9e1dc579

SHA1
a7e1f7b91611ccf72865ddf7893956deb75a1285

SHA256
db7e415d467e60f9a43a37449310c95da62badb7706ec3a7aeb80a8a05b90fe8

SHA512
a5ef8d71057358b7578d388d4d73a6c768bf169f7a761aeac34424547929a35ef8df3d7e6a5df028effdaee6647c2c39aa8eac70e1f30a825050b71408996e11

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
Filesize
164KB

MD5
5052a8dbcf34dec6260d06b2e0bb188d

SHA1
336e25b501c67911d2a84bee57c3f8bcde71855c

SHA256
1504682de7ae6bb632d785784f1ef836cbcd9acccea308d8a18ce9745c090cea

SHA512
8f2a5c9d266de925bca3f610befb28991f3c2c44d295e8e1d947e83039b67763016c1af4831d3658e5c4d2912b9dca5e9ac108718268fccd03b6790bc5cc3b54

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
Filesize
148KB

MD5
dd3f6ba37c670af5953593535e435d04

SHA1
ecfe4e650a050bce77e8ff7468de04c1b8acc9a4

SHA256
5cc6fa137a1f3a7d0b615b178877f12c460b22f95702eb7534d5732ee6599561

SHA512
86e0482543faae6fb279ca71e1e6d6461d32317e74baebb3973e0fde9800107faeb9c2347be6cf8a47556ae43c8e6c224a595e952f621e40ad2c5eba920df2b3

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
Filesize
232KB

MD5
02dab7dd59ab6ccf75cd73d0d4ca7cc0

SHA1
28c0b9bd95f09a1674260e501e9ec9cdcb0eb6c4

SHA256
92c0cfde3837ce37353c3c54839c7f7a067622c886131a99b9b74eed837df00e

SHA512
9da3abe0c6fad322aaf28dca0ef5964006f435a7b1505c474762c98bd6ac71f07ee83df881aa97f3991c17b528f45e3a27f3a7060977e1f76ae9a5afaaa01a5e

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
Filesize
248KB

MD5
54ceab89632ebe4077bbbfa42ae36c49

SHA1
462aa637a3623662ca31b189aee140c9b8faf8e5

SHA256
efb093220d84a5e8546a800c2ccfe2ce8624fa5fa022cd73abf92dfde37560bd

SHA512
d2ebd6327df4df2d46b4cac68206dd1011f58341a4acbc26650c0e68827715cbdb0f1b8e3b7188bd1f3331678513176290eacf102606fc48b826cdf5ba407b10

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
Filesize
316KB

MD5
c3312474e7dc3827d9668d677ee7da56

SHA1
b3af75bb947a0bb468960591b986a652342ec72d

SHA256
74eb5892b247c892bbf897dcf9b4a9253099dfc7f91c46df8e84b4ae5711b281

SHA512
df0622f34366a7ca15341d55a868570f441b99a1b779b0341c360eca14c437c338fca96811fda803a74bd444d05a6257aa5fbf5e96b7517176216577d0163cb4

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
Filesize
256KB

MD5
cbd646d770b0fb0b23c49e19561918a2

SHA1
8a7de4b860b0fd6a566f1774127861ba940ffc60

SHA256
cd6fba40ff9a4d8cadf608693862bf9a72c2b3d78255308d05a503ab3c8f36c6

SHA512
176b0f8efef295d5ae6203ff7286fe88b922b6b03e705d2d53c734b4bba61ef586fb69560e8fdf574f05d85990d45d8e2e2b2515785400b0194c52344a2e9f07

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/times.json
Filesize
50B

MD5
6e3da443f4549a760da8b285c36166a9

SHA1
2e01341ce288fec02dedd1d356afb5f555bdeb0d

SHA256
585da3bcc35a5678d7a878fcca5e81201b64dfa8c7899bb1df707d2b3cae212d

SHA512
9c2f41e05a027552b257dc6b0aedcd82c34bfccaa1dfdf010bad58a9d1036374483db8a8f3769b5ca834c7939b2c5f202bab659eb9ebc4f2eddf0fecc7ece51a

Download Submit
/root/.mozilla/firefox/b02aajx0.default-release/times.json
Filesize
47B

MD5
dba98e8899ec75fa420bacf6fe6ff116

SHA1
53767daf038757bbaac7b159ac265f3740912792

SHA256
6558accda405e5a9bc977cc8274a7f4a0e515314f0c4f89f52fe90b937eb12ef

SHA512
867ecde668d7cdbccbd06b946c70df1039c34e7ee959ffc2b93e302c7ab9898eb62f5e76931b8fd0eb787f5af1f3ff34b95fd43f8da63121597cde8acc98876e

Download Submit
/root/.mozilla/firefox/i02ln0yg.default/times.json
Filesize
47B

MD5
733954be879b904d0af019f7a4001e9a

SHA1
c7c99ef263aba5cda3e82181d939d823002487e8

SHA256
13730ae181b43be6067500d7f447d3b721ea041e6e1309082d6d8c8ec6b73b0b

SHA512
ec01c34cd2fd9d4c79f94fcc76835a60a7787bd7bfec0b974a4d2cc2fc004d8e0ed66a9f260ee4ef18e2692c405a8f7cc1c71c2ebda63029fbece9f6f3a61daf

Download Submit
/root/.mozilla/firefox/installs.ini
Filesize
62B

MD5
5d098a89e978cdaa88672152168baf8a

SHA1
42d13575f79da7063e07172a7062adaa460132af

SHA256
7fe61acff2c3f8e2cd6555dc1bd9c7911c6e93743aa47495aebd617f22517ff8

SHA512
839079e5baa2c67a6a278ea334c2fdb1091ecb0423c73df5b7d95e1b646ed275f686127e7d47375a7e159ee67efdd47a5c715d864acaf8f5be87fa83bbb55c9d

Download Submit
/root/.mozilla/firefox/profiles.ini
Filesize
259B

MD5
a5fa5ba617c878d8fcc8bcd7ce926d66

SHA1
867fda14d399f64ec6fad0d4717d9e0904d10c6c

SHA256
6e86584e2dec0065746ac0b5e6c4ac7496cc2e18b77dcf0ca2febe9133614485

SHA512
858dc1e8af95eb2899e344b4d284e65fe4d04f61f95d45a7e61e98d13814625ace8f683c18f76f48407b44ca448565371898ab5ac90e2f19cac73c4cebc29571

Download Submit