hxxps://www[.]ebay[.]ca/itm/256185308085

Resubmissions

28-03-2024 14:24

240328-rq1wlsgd3x 7

Analysis

max time kernel
15s
max time network
61s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240226-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240226-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
28-03-2024 14:24

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://www.ebay.ca/itm/256185308085

Score

7^/10

antivm spyware stealer

Malware Config

Signatures

Changes its process name 64 IoCs

Processes:

firefox

description	ioc	pid
Changes the process name, possibly in an attempt to hide itself	glean.dispatche	1673
Changes the process name, possibly in an attempt to hide itself	IPC I/O Parent	1674
Changes the process name, possibly in an attempt to hide itself	IPC I/O Parent	1674
Changes the process name, possibly in an attempt to hide itself	IPC I/O Parent	1674
Changes the process name, possibly in an attempt to hide itself	Backgro~Pool #1	1679
Changes the process name, possibly in an attempt to hide itself	Socket Thread	1677
Changes the process name, possibly in an attempt to hide itself	IPDL Background	1678
Changes the process name, possibly in an attempt to hide itself	Backgro~Pool #1	1679
Changes the process name, possibly in an attempt to hide itself	Socket Thread	1677
Changes the process name, possibly in an attempt to hide itself	IPDL Background	1678
Changes the process name, possibly in an attempt to hide itself	Netlink Monitor	1676
Changes the process name, possibly in an attempt to hide itself	Netlink Monitor	1676
Changes the process name, possibly in an attempt to hide itself	Timer	1675
Changes the process name, possibly in an attempt to hide itself	Timer	1675
Changes the process name, possibly in an attempt to hide itself	HTML5 Parser	1680
Changes the process name, possibly in an attempt to hide itself	HTML5 Parser	1680
Changes the process name, possibly in an attempt to hide itself	JS Watchdog	1682
Changes the process name, possibly in an attempt to hide itself	JS Watchdog	1682
Changes the process name, possibly in an attempt to hide itself	BGReadURLs	1684
Changes the process name, possibly in an attempt to hide itself	BGReadURLs	1684
Changes the process name, possibly in an attempt to hide itself	Cache2 I/O	1685
Changes the process name, possibly in an attempt to hide itself	Cookie	1686
Changes the process name, possibly in an attempt to hide itself	Cookie	1686
Changes the process name, possibly in an attempt to hide itself	StreamTrans #1	1687
Changes the process name, possibly in an attempt to hide itself	StreamTrans #1	1687
Changes the process name, possibly in an attempt to hide itself	TaskCon~ller #1	1689
Changes the process name, possibly in an attempt to hide itself	TaskCon~ller #0	1688
Changes the process name, possibly in an attempt to hide itself	BgIOThr~Pool #1	1690
Changes the process name, possibly in an attempt to hide itself	BgIOThr~Pool #1	1690
Changes the process name, possibly in an attempt to hide itself	QuotaManager IO	1699
Changes the process name, possibly in an attempt to hide itself	QuotaManager IO	1699
Changes the process name, possibly in an attempt to hide itself	IndexedDB #1	1700
Changes the process name, possibly in an attempt to hide itself	IndexedDB #1	1700
Changes the process name, possibly in an attempt to hide itself	IPC Launch	1703
Changes the process name, possibly in an attempt to hide itself	IPC Launch	1703
Changes the process name, possibly in an attempt to hide itself	SandboxReporter	1702
Changes the process name, possibly in an attempt to hide itself	SandboxReporter	1702
Changes the process name, possibly in an attempt to hide itself	Breakpad Server	1701
Changes the process name, possibly in an attempt to hide itself	Sandbox Forked	1704
Changes the process name, possibly in an attempt to hide itself	DOM Worker	1705
Changes the process name, possibly in an attempt to hide itself	DOM Worker	1705
Changes the process name, possibly in an attempt to hide itself	Chroot Helper	1706
Changes the process name, possibly in an attempt to hide itself	StreamTrans #5	1711
Changes the process name, possibly in an attempt to hide itself	StreamTrans #4	1710
Changes the process name, possibly in an attempt to hide itself	StreamTrans #5	1711
Changes the process name, possibly in an attempt to hide itself	StreamTrans #4	1710
Changes the process name, possibly in an attempt to hide itself	StreamTrans #3	1709
Changes the process name, possibly in an attempt to hide itself	StreamTrans #3	1709
Changes the process name, possibly in an attempt to hide itself	StreamTrans #2	1708
Changes the process name, possibly in an attempt to hide itself	StreamTrans #2	1708
Changes the process name, possibly in an attempt to hide itself	MainThread	1704	firefox
Changes the process name, possibly in an attempt to hide itself	IPC I/O Child	1712
Changes the process name, possibly in an attempt to hide itself	IPC I/O Child	1712
Changes the process name, possibly in an attempt to hide itself	IPC I/O Child	1712
Changes the process name, possibly in an attempt to hide itself	Socket Process	1704	firefox
Changes the process name, possibly in an attempt to hide itself	FSBroker1704	1713
Changes the process name, possibly in an attempt to hide itself	FSBroker1704	1713
Changes the process name, possibly in an attempt to hide itself	Backgro~Pool #1	1714
Changes the process name, possibly in an attempt to hide itself	Backgro~Pool #1	1714
Changes the process name, possibly in an attempt to hide itself	Socket Thread	1715
Changes the process name, possibly in an attempt to hide itself	Socket Thread	1715
Changes the process name, possibly in an attempt to hide itself	ProfilerChild	1716
Changes the process name, possibly in an attempt to hide itself	ProfilerChild	1716
Changes the process name, possibly in an attempt to hide itself	Timer	1717

Reads user data of web browsers 64 IoCs

Reads stored browser data which can include saved credentials.

spyware stealer

Processes:

firefox

description	ioc	process
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/favicons.sqlite	firefox
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/logins-backup.json
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/extensions	firefox
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/shield-preference-experiments.json
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/pkcs11.txt	firefox
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite-wal
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/places.sqlite	firefox
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/containers.json
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/storage/ls-archive.sqlite
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/storage
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/sessionCheckpoints.json
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/cert9.db	firefox
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/cert9.db-journal	firefox
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/sessionstore-backups/recovery.js
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/places.sqlite-journal	firefox
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/storage/permanent/chrome
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite-journal
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/AlternateServices.txt
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/sessionstore.js
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/sessionstore-backups/previous.js
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/storage/permanent/chrome/idb/1451318868ntouromlalnodry--epcr.sqlite-wal
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/content-prefs.sqlite-journal
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/logins.json
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/addonStartup.json.lz4	firefox
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/cookies.sqlite-journal	firefox
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/datareporting/glean/pending_pings
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/bookmarkbackups
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/storage/default
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/SiteSecurityServiceState.txt
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/search.json.mozlz4
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/protections.sqlite-journal
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/cookies.sqlite	firefox
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/permissions.sqlite-journal
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite-journal
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/datareporting/glean/deletion_request
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/ClientAuthRememberList.txt
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/ExperimentStoreData.json
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/favicons.sqlite
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/datareporting/glean/events
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/storage/ls-archive.sqlite-journal
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/storage/permanent/chrome/idb/1451318868ntouromlalnodry--epcr.sqlite
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/storage/permanent/chrome/idb
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/times.json
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release	firefox
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/xulstore.json	firefox
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/cookies.sqlite-wal
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/storage/temporary
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/user.js	firefox
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/storage/permanent/chrome/idb/2918063365piupsah.sqlite-wal
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/datareporting/glean/pending_pings/c6e402b2-5126-40ba-97aa-cb961d9bf0f2
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/thumbnails
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/favicons.sqlite-wal	firefox
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/datareporting/glean/db
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/prefs.js	firefox
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/storage/permanent/chrome/idb/1657114595AmcateirvtiSty.sqlite
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/permissions.sqlite
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/storage/permanent/chrome/idb/1451318868ntouromlalnodry--epcr.sqlite-journal
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/storage.sqlite-journal
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/handlers.json	firefox
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/extension-settings.json
File opened for reading	/root/.mozilla/firefox/pncjy744.default-release/places.sqlite-wal	firefox

Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
antivm

Virtualization/Sandbox Evasion
T1497

Processes:

description ioc

File opened for reading /proc/cpuinfo

description	ioc
File opened for reading	/proc/cpuinfo

Reads CPU attributes 1 TTPs 12 IoCs

System Information Discovery

T1082

Processes:

firefoxfirefoxfirefoxfirefoxfirefoxfirefoxfirefox

description	ioc	process
File opened for reading	/sys/devices/system/cpu/present	firefox
File opened for reading	/sys/devices/system/cpu/present	firefox
File opened for reading	/sys/devices/system/cpu/present	firefox
File opened for reading	/sys/devices/system/cpu/present
File opened for reading	/sys/devices/system/cpu/present	firefox
File opened for reading	/sys/devices/system/cpu/present	firefox
File opened for reading	/sys/devices/system/cpu/online
File opened for reading	/sys/devices/system/cpu/present	firefox
File opened for reading	/sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
File opened for reading	/sys/devices/system/cpu/cpu0/cache/index2/size
File opened for reading	/sys/devices/system/cpu/cpu0/cache/index3/size
File opened for reading	/sys/devices/system/cpu/present	firefox

Enumerates kernel/hardware configuration 1 TTPs 61 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

System Information Discovery

T1082

Processes:

dbus-daemonfirefoxfirefoxfirefoxfirefoxfirefoxfirefoxfirefox

description	ioc
File opened for reading	/sys/bus/pci/devices/0000:00:02.0/device
File opened for reading	/sys/bus/pci/devices/0000:00:01.0/vendor
File opened for reading	/sys/bus/pci/devices/0000:00:03.0/device
File opened for reading	/sys/bus/pci/devices/0000:00:05.0/vendor
File opened for reading	/sys/bus/pci/devices/0000:00:02.0/vendor
File opened for reading	/sys/devices/pci0000:00/0000:00:02.0/uevent
File opened for reading	/sys/devices/pci0000:00/0000:00:02.0/subsystem_device
File opened for reading	/sys/bus/pci/devices/0000:00:01.0/resource
File opened for reading	/sys/bus/pci/devices/0000:00:00.0/vendor
File opened for reading	/sys/bus/pci/devices/0000:00:05.0/resource
File opened for reading	/sys/bus/pci/devices/0000:00:05.0/class
File opened for reading	/sys/bus/pci/devices/0000:00:04.0/irq
File opened for reading	/sys/kernel/security/apparmor/features/dbus/mask	dbus-daemon
File opened for reading	/sys/bus/pci/devices/0000:00:01.3/class
File opened for reading	/sys/bus/pci/devices/0000:00:03.0/resource
File opened for reading	/sys/bus/pci/devices/0000:00:02.0/resource
File opened for reading	/sys/devices/pci0000:00/0000:00:02.0/device
File opened for reading	/sys/devices/system/cpu	firefox
File opened for reading	/sys/bus/pci/devices/0000:00:04.0/device
File opened for reading	/sys/bus/pci/devices/0000:00:00.0/class
File opened for reading	/sys/bus/pci/devices/0000:00:01.3/resource
File opened for reading	/sys/devices/pci0000:00/0000:00:02.0/vendor
File opened for reading	/sys/bus/pci/devices/0000:00:01.1/resource
File opened for reading	/sys/devices/system/cpu
File opened for reading	/sys/bus/pci/devices/0000:00:00.0/resource
File opened for reading	/sys/bus/pci/devices/0000:00:01.1/device
File opened for reading	/sys/bus/pci/devices/0000:00:02.0/irq
File opened for reading	/sys/bus/pci/devices/0000:00:05.0/irq
File opened for reading	/sys/bus/pci/devices/0000:00:03.0/class
File opened for reading	/sys/bus/pci/devices/0000:00:06.0/resource
File opened for reading	/sys/bus/pci/devices/0000:00:06.0/irq
File opened for reading	/sys/bus/pci/devices/0000:00:02.0/class
File opened for reading	/sys/bus/pci/devices/0000:00:01.0/irq
File opened for reading	/sys/bus/pci/devices/0000:00:04.0/resource
File opened for reading	/sys/bus/pci/devices/0000:00:04.0/vendor
File opened for reading	/sys/bus/pci/devices/0000:00:01.3/device
File opened for reading	/sys/bus/pci/devices/0000:00:05.0/device
File opened for reading	/sys/bus/pci/devices/0000:00:06.0/vendor
File opened for reading	/sys/devices/system/cpu	firefox
File opened for reading	/sys/bus/pci/devices/0000:00:00.0/device
File opened for reading	/sys/bus/pci/devices/0000:00:03.0/irq
File opened for reading	/sys/bus/pci/devices/0000:00:01.1/irq
File opened for reading	/sys/bus/pci/devices/0000:00:01.1/class
File opened for reading	/sys/devices/system/cpu	firefox
File opened for reading	/sys/devices/system/cpu	firefox
File opened for reading	/sys/bus/pci/devices/0000:00:01.0/device
File opened for reading	/sys/bus/pci/devices/0000:00:01.3/irq
File opened for reading	/sys/bus/pci/devices/0000:00:03.0/vendor
File opened for reading	/sys/devices/system/cpu	firefox
File opened for reading	/sys/bus/pci/devices/0000:00:01.3/vendor
File opened for reading	/sys/bus/pci/devices/0000:00:06.0/device
File opened for reading	/sys/bus/pci/devices/0000:00:06.0/class
File opened for reading	/sys/devices/system/cpu	firefox
File opened for reading	/sys/devices/system/cpu	firefox
File opened for reading	/sys/bus/pci/devices/0000:00:04.0/class
File opened for reading	/sys/bus/pci/devices/0000:00:00.0/irq
File opened for reading	/sys/devices/pci0000:00/0000:00:02.0/subsystem_vendor
File opened for reading	/sys/fs/cgroup/cpu,cpuacct/cpu.cfs_quota_us	firefox
File opened for reading	/sys/bus/pci/devices
File opened for reading	/sys/bus/pci/devices/0000:00:01.0/class
File opened for reading	/sys/bus/pci/devices/0000:00:01.1/vendor

Reads runtime system information 64 IoCs

Reads data from /proc virtual filesystem.

Processes:

sedsedxdg-desktop-portal-gtkfirefoxxdg-permission-storedbus-daemongvfsdfirefoxfirefoxsedfirefoxfirefoxxdg-desktop-portalfirefoxsedsedxdg-document-portal

description	ioc	process
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/1585/attr/current
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/filesystems	xdg-desktop-portal-gtk
File opened for reading	/proc/1747/cmdline
File opened for reading	/proc/self/task/1909/stat
File opened for reading	/proc/self/fd/44	firefox
File opened for reading	/proc/self/fd/51	firefox
File opened for reading	/proc/1728/cmdline
File opened for reading	/proc/filesystems	xdg-permission-store
File opened for reading	/proc/self/fd/76	firefox
File opened for reading	/proc/filesystems	dbus-daemon
File opened for reading	/proc/self/fd/31	firefox
File opened for reading	/proc/self/fd/43	firefox
File opened for reading	/proc/self/fd/6	firefox
File opened for reading	/proc/1601/cmdline
File opened for reading	/proc/1667/cmdline
File opened for reading	/proc/self/fd/40	firefox
File opened for reading	/proc/self/task/1804/stat
File opened for reading	/proc/1723/cmdline
File opened for reading	/proc/filesystems	gvfsd
File opened for reading	/proc/self/maps	firefox
File opened for reading	/proc/self/fd/77	firefox
File opened for reading	/proc/self/fd/39	firefox
File opened for reading	/proc/self/fd/50	firefox
File opened for reading	/proc/self/task/1707/stat
File opened for reading	/proc/self/maps	firefox
File opened for reading	/proc/1825/smaps
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/self/fd/49	firefox
File opened for reading	/proc/self/fd/104	firefox
File opened for reading	/proc/filesystems	firefox
File opened for reading	/proc/self/fd/93	firefox
File opened for reading	/proc/filesystems	firefox
File opened for reading	/proc/1825/statm
File opened for reading	/proc/1843/smaps
File opened for reading	/proc/1585/status
File opened for reading	/proc/filesystems	xdg-desktop-portal
File opened for reading	/proc/self/fd/33	firefox
File opened for reading	/proc/filesystems	firefox
File opened for reading	/proc/self/fd/102	firefox
File opened for reading	/proc/self/task/1885/stat
File opened for reading	/proc/self/fd/38	firefox
File opened for reading	/proc/self/cgroup	firefox
File opened for reading	/proc/self/maps	firefox
File opened for reading	/proc/self/fd/131	firefox
File opened for reading	/proc/self/fd/47	firefox
File opened for reading	/proc/1797/smaps
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/filesystems	firefox
File opened for reading	/proc/self/fd/46	firefox
File opened for reading	/proc/filesystems	firefox
File opened for reading	/proc/self/maps	firefox
File opened for reading	/proc/mounts	dbus-daemon
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/self/fd/41	firefox
File opened for reading	/proc/filesystems	xdg-document-portal
File opened for reading	/proc/filesystems	firefox
File opened for reading	/proc/1775/smaps
File opened for reading	/proc/sys/kernel/cap_last_cap
File opened for reading	/proc/self/task/1669/stat
File opened for reading	/proc/self/stat
File opened for reading	/proc/self/fd/48	firefox
File opened for reading	/proc/1743/cmdline

Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.

Processes:

firefox

description ioc process

File opened for modification /tmp/firefox/.parentlock firefox

description	ioc	process
File opened for modification	/tmp/firefox/.parentlock	firefox

/usr/bin/xdg-open
xdg-open https://www.ebay.ca/itm/256185308085
1⤵
PID:1579

/usr/bin/dbus-send
dbus-send --print-reply "--dest=org.freedesktop.DBus" /org/freedesktop/DBus org.freedesktop.DBus.GetNameOwner string:org.gnome.SessionManager
2⤵
PID:1580

/usr/bin/dbus-launch
dbus-launch --autolaunch 11c67417355f45d397f6be11f62e85a6 --binary-syntax --close-stderr
3⤵
PID:1581

/bin/grep
grep " = \\\"xfce4\\\"\$"
2⤵
PID:1587

/usr/bin/xprop
xprop -root _DT_SAVE_MODE
2⤵
PID:1586

/bin/grep
grep -i "^xfce_desktop_window"
2⤵
PID:1589

/usr/bin/xprop
xprop -root
2⤵
PID:1588

/bin/grep
grep -q "^Enlightenment"
2⤵
PID:1591

/bin/uname
uname
2⤵
PID:1592

/bin/grep
grep -q "^file://"
2⤵
PID:1594

/bin/egrep
egrep -q "^[[:alpha:]+\\.\\-]+:"
2⤵
PID:1596

/usr/local/sbin/grep
grep -E -q "^[[:alpha:]+\\.\\-]+:"
2⤵
PID:1596

/usr/local/bin/grep
grep -E -q "^[[:alpha:]+\\.\\-]+:"
2⤵
PID:1596

/usr/sbin/grep
grep -E -q "^[[:alpha:]+\\.\\-]+:"
2⤵
PID:1596

/usr/bin/grep
grep -E -q "^[[:alpha:]+\\.\\-]+:"
2⤵
PID:1596

/sbin/grep
grep -E -q "^[[:alpha:]+\\.\\-]+:"
2⤵
PID:1596

/bin/grep
grep -E -q "^[[:alpha:]+\\.\\-]+:"
2⤵
PID:1596

/usr/bin/xdg-mime
xdg-mime query default x-scheme-handler/https
2⤵
PID:1600

/usr/bin/dbus-send
dbus-send --print-reply "--dest=org.freedesktop.DBus" /org/freedesktop/DBus org.freedesktop.DBus.GetNameOwner string:org.gnome.SessionManager
3⤵
PID:1601

/usr/bin/dbus-launch
dbus-launch --autolaunch 11c67417355f45d397f6be11f62e85a6 --binary-syntax --close-stderr
4⤵
PID:1602

/bin/grep
grep " = \\\"xfce4\\\"\$"
3⤵
PID:1604

/usr/bin/xprop
xprop -root _DT_SAVE_MODE
3⤵
PID:1603

/usr/bin/xprop
xprop -root
3⤵
PID:1608

/bin/grep
grep -i "^xfce_desktop_window"
3⤵
PID:1609

/bin/grep
grep -q "^Enlightenment"
3⤵
PID:1611

/bin/uname
uname
3⤵
PID:1612

/usr/bin/which
which firefox
2⤵
PID:1655

/usr/bin/firefox
/usr/bin/firefox https://www.ebay.ca/itm/256185308085
2⤵
PID:1667

/usr/bin/which
which /usr/bin/firefox
3⤵
PID:1668

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox https://www.ebay.ca/itm/256185308085
2⤵
- Reads user data of web browsers
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
- Writes file to tmp directory
PID:1667

/usr/bin/dbus-launch
dbus-launch --autolaunch 11c67417355f45d397f6be11f62e85a6 --binary-syntax --close-stderr
3⤵
PID:1672

/usr/local/sbin/dbus-launch
dbus-launch "--autolaunch=11c67417355f45d397f6be11f62e85a6" --binary-syntax --close-stderr
3⤵
PID:1720

/usr/local/bin/dbus-launch
dbus-launch "--autolaunch=11c67417355f45d397f6be11f62e85a6" --binary-syntax --close-stderr
3⤵
PID:1720

/usr/sbin/dbus-launch
dbus-launch "--autolaunch=11c67417355f45d397f6be11f62e85a6" --binary-syntax --close-stderr
3⤵
PID:1720

/usr/bin/dbus-launch
dbus-launch "--autolaunch=11c67417355f45d397f6be11f62e85a6" --binary-syntax --close-stderr
3⤵
PID:1720

/usr/bin/dbus-daemon
/usr/bin/dbus-daemon --syslog-only --fork --print-pid 5 --print-address 7 --session
1⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:1583

/bin/sed
sed -n "s/\$^[[:alnum:]+\\.-]*\$:.*\$/\\1/p"
1⤵
- Reads runtime system information
PID:1599

/bin/sed
sed "s/:/ /g"
1⤵
- Reads runtime system information
PID:1615

/usr/bin/cut
cut -d ";" -f 1
1⤵
PID:1620

/usr/bin/cut
cut -d "=" -f 2
1⤵
PID:1619

/usr/bin/head
head -n 1
1⤵
PID:1618

/bin/grep
grep "x-scheme-handler/https=" /.local/share/applications/defaults.list /.local/share/applications/mimeinfo.cache
1⤵
PID:1617

/usr/bin/cut
cut -d ";" -f 1
1⤵
PID:1625

/usr/bin/cut
cut -d "=" -f 2
1⤵
PID:1624

/usr/bin/head
head -n 1
1⤵
PID:1623

/bin/grep
grep "x-scheme-handler/https=" /.local/share/applications/defaults.list /.local/share/applications/mimeinfo.cache
1⤵
PID:1622

/usr/bin/cut
cut -d ";" -f 1
1⤵
PID:1630

/usr/bin/cut
cut -d "=" -f 2
1⤵
PID:1629

/usr/bin/head
head -n 1
1⤵
PID:1628

/bin/grep
grep "x-scheme-handler/https=" /usr/local/share//applications/defaults.list /usr/local/share//applications/mimeinfo.cache
1⤵
PID:1627

/usr/bin/cut
cut -d ";" -f 1
1⤵
PID:1635

/usr/bin/cut
cut -d "=" -f 2
1⤵
PID:1634

/usr/bin/head
head -n 1
1⤵
PID:1633

/bin/grep
grep "x-scheme-handler/https=" /usr/local/share//applications/defaults.list /usr/local/share//applications/mimeinfo.cache
1⤵
PID:1632

/usr/bin/cut
cut -d ";" -f 1
1⤵
PID:1640

/usr/bin/cut
cut -d "=" -f 2
1⤵
PID:1639

/usr/bin/head
head -n 1
1⤵
PID:1638

/bin/grep
grep "x-scheme-handler/https=" /usr/share//applications/defaults.list /usr/share//applications/mimeinfo.cache
1⤵
PID:1637

/bin/sed
sed "s/:/ /g"
1⤵
- Reads runtime system information
PID:1643

/bin/sed
sed -e "s|-|/|"
1⤵
- Reads runtime system information
PID:1646

/bin/sed
sed -e "s|-|/|"
1⤵
- Reads runtime system information
PID:1649

/usr/bin/cut
cut "-d=" -f 2-
1⤵
PID:1654

/usr/bin/cut
cut "-d=" -f 2-
1⤵
PID:1658

/usr/bin/cut
cut "-d=" -f 2-
1⤵
PID:1661

/usr/bin/cut
cut "-d=" -f 2-
1⤵
PID:1666

/usr/bin/lsb_release
/usr/bin/lsb_release -idrc
1⤵
PID:1683

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox -contentproc -parentBuildID 20230522134052 -prefsLen 19257 -prefMapSize 230809 -appDir /usr/lib/firefox/browser "{e1b87d9b-da40-4d17-bc25-bec659279198}" 1667 true socket
1⤵
- Changes its process name
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:1704

/usr/libexec/xdg-desktop-portal
/usr/libexec/xdg-desktop-portal
1⤵
- Reads runtime system information
PID:1723

/usr/libexec/xdg-document-portal
/usr/libexec/xdg-document-portal
1⤵
- Reads runtime system information
PID:1728

/usr/libexec/xdg-permission-store
/usr/libexec/xdg-permission-store
1⤵
- Reads runtime system information
PID:1732

/usr/libexec/xdg-desktop-portal-gtk
/usr/libexec/xdg-desktop-portal-gtk
1⤵
- Reads runtime system information
PID:1743

/usr/lib/gvfs/gvfsd
/usr/lib/gvfs/gvfsd
1⤵
- Reads runtime system information
PID:1747

/usr/lib/gvfs/gvfsd-fuse
/usr/lib/gvfs/gvfsd-fuse /root/.gvfs -f -o big_writes
1⤵
PID:1752

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox -contentproc -childID 1 -isForBrowser -prefsLen 21750 -prefMapSize 230809 -jsInitLen 238780 -parentBuildID 20230522134052 -appDir /usr/lib/firefox/browser "{0137f600-3481-4d7d-b076-dc5879b7ce43}" 1667 true tab
1⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:1775

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox -contentproc -childID 2 -isForBrowser -prefsLen 21418 -prefMapSize 230809 -jsInitLen 238780 -parentBuildID 20230522134052 -appDir /usr/lib/firefox/browser "{9305e1d6-b922-4f6d-a8e2-74045d89c6d3}" 1667 true tab
1⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:1797

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox -contentproc -childID 3 -isForBrowser -prefsLen 21767 -prefMapSize 230809 -jsInitLen 238780 -parentBuildID 20230522134052 -appDir /usr/lib/firefox/browser "{3d017394-305f-4f27-acb4-964d26a799cf}" 1667 true tab
1⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:1825

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox -contentproc -childID 4 -isForBrowser -prefsLen 27824 -prefMapSize 230809 -jsInitLen 238780 -parentBuildID 20230522134052 -appDir /usr/lib/firefox/browser "{190928a2-0040-433b-bb64-bb7a7853137d}" 1667 true tab
1⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
PID:1843

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox -contentproc -childID 5 -isForBrowser -prefsLen 27177 -prefMapSize 230809 -jsInitLen 238780 -parentBuildID 20230522134052 -appDir /usr/lib/firefox/browser "{4918aea0-9f81-4125-9c3f-520f95e58669}" 1667 true tab
1⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
PID:1882

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox -contentproc -childID 6 -isForBrowser -prefsLen 27223 -prefMapSize 230809 -jsInitLen 238780 -parentBuildID 20230522134052 -appDir /usr/lib/firefox/browser "{71500c24-4196-4ae5-9b5f-14f8a852748a}" 1667 true tab
1⤵
- Reads runtime system information
PID:1906

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox -contentproc -childID 7 -isForBrowser -prefsLen 27223 -prefMapSize 230809 -jsInitLen 238780 -parentBuildID 20230522134052 -appDir /usr/lib/firefox/browser "{719e624e-0a9a-44b9-be9b-4f06b81e8988}" 1667 true tab
1⤵
PID:1910

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1497

Credential Access

Discovery

Virtualization/Sandbox Evasion

T1497

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...

Downloads

/root/.cache/dconf/user
Filesize
2B

MD5
441077cc9e57554dd476bdfb8b8b8102

SHA1
3f29546453678b855931c174a97d6c0894b8f546

SHA256
b413f47d13ee2fe6c845b2ee141af81de858df4ec549a58b7970bb96645bc8d2

SHA512
80536c6170dd8626dc081af148d39ec2fd5d090cc578a76647e7903fd34bd02e4333ece57b0e24ff116f43429b6ff541834bd40ef0c8d3563acef5ed0fd254b8

Download Submit
/root/.cache/mozilla/firefox/pncjy744.default-release/cache2/entries/039090029E64BC91E87E77199A6A6BE11FC39B6F
Filesize
142B

MD5
b1daee66393bf2c622ea1464c70c58f0

SHA1
1fe8144e30eeaa3f12b0e1a951e9243094e358e3

SHA256
6767d063349992fb0c1ed7de3fb0a0fa3317d21120a783343d4b7612e34a9d34

SHA512
61a14fe1c52b383b85343eda890493b875d8a1fd1eed7e9df5c8df74d543783a2da7c3e10711715971f0b5fa8fe0f08d35ac99e0cd6694d84da9d6e71c60c491

Download Submit
/root/.cache/mozilla/firefox/pncjy744.default-release/cache2/entries/0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F
Filesize
102B

MD5
e4cd91cdd0ab412105399a887c2d7557

SHA1
a44bba9a6e9cb51a617278697afa74f0540aef8d

SHA256
b3646e1293f8040a89f2ca5ac5140898a1543ad5a3935ad56db922c5e5163246

SHA512
9d0a381a46148955215045e1c234d34d99b81f499f8eee3f4d901756a9711a3efb390629ee19708b18692e6e2f7b467e094658e24b78276d56c4907471b5f9f2

Download Submit
/root/.cache/mozilla/firefox/pncjy744.default-release/cache2/entries/137A614EBC9B2D4B100A79480DC2B35D23D0F0D1
Filesize
98B

MD5
f34bfef7115020414bc4137157fe8ee0

SHA1
90c2194200386e907e66c179a25194ea4bef9038

SHA256
02a95ec851122a03a2b8318034534174c6d26693ae645e7d09b0c526331323ad

SHA512
965fa8dd871d590ca993bb61e8b540bce69398482b3a6dffa1bb5f38e90ea5ba71090f4a887cf0d0326dfd66a7addfba5b0bbba2d7dd60422bb135cb39bc885f

Download Submit
/root/.cache/mozilla/firefox/pncjy744.default-release/cache2/entries/3D1E19D09F398691ABF62061591970855193B42F
Filesize
193B

MD5
95499b37eb7159579aecac77b54362fe

SHA1
e9ae8f21c60992b608ed5cedd0677941ecd0114f

SHA256
84f99487d3dc1f2ccd63c30542ff2a78b15e30df08f225b04e9bab350d3164ff

SHA512
9bbd1680d92d0f3f6052f6a9fcf3e17084160bb7d2e96043aefa0e2a6acc696719be7df5ca17e5e66d65cff4df1ff0ef3a1dfefcaade52629cb68635eed30771

Download Submit
/root/.cache/mozilla/firefox/pncjy744.default-release/cache2/entries/3D1E19D09F398691ABF62061591970855193B42F
Filesize
13KB

MD5
fddf0472e9d6fff75593fe8e401ff5e1

SHA1
72d4e1cd82fd326652b85120cd02e18667e379a4

SHA256
9eef6f2c4a830fcee95ca322c0aa835d8f8117d5dbf264282b47c14debac8e89

SHA512
5d6380cbffc5609cd1b3bfc82831c3189e63c02b8a0d3b40758dcf9846713805370867f3917fe133b1b608511e37ce468a12eea0dc9f1793431a738d6f1f61d8

Download Submit
/root/.cache/mozilla/firefox/pncjy744.default-release/cache2/entries/44230749A38B6989F56217B435A03E84CCADE62D
Filesize
26KB

MD5
96371e8683637cd23fcd89b34f322ca7

SHA1
8ee3479de3c2b2a90948d37ddfc30e81dcd5285d

SHA256
52c427b2df67156ec89187b773de9e82c8ff658f0561d3f45c404e45ecf20f35

SHA512
f942b75dceff44db731210d1241251ff20229b068a81bca8cbb9766b91bbb5d19f02b0c544880c7921120638ed9b840cf548d39c8bda7fe55cce2a37efad5c4c

Download Submit
/root/.cache/mozilla/firefox/pncjy744.default-release/cache2/entries/6D89348819C8881868053197CA0754F36784BF5F
Filesize
89B

MD5
ceae3325adaae36e5caabc3e321a9a78

SHA1
866be75830bae8077dcf67d9cb9290b01c697472

SHA256
b06791ce1a2fca38ba79d4828f31615c8dda700c31f336e0cecee45ec70fa697

SHA512
98aa37af1ba2212b18db92b5c549b417f387b37105b2e89d4015ab98879bfbc29c7af535b5e60f9a0bf17e052973e8cbd67122520b901d907b4db26850d83a12

Download Submit
/root/.cache/mozilla/firefox/pncjy744.default-release/cache2/entries/6D89348819C8881868053197CA0754F36784BF5F
Filesize
9KB

MD5
6992da1ee002e43be293c8037df68272

SHA1
9f850a2581e5a96f0844d150a55bbc6b3efaa7b1

SHA256
3fe880849133a78d586e49a0ac0f79ab7761617d3504a618442708d5f3d3011f

SHA512
e10b56859349f119094e66827512aacfbd5347f8a8a0c004244dbbc1e44968b7f14ddc273f85d8cabb4921e42dd3d5f98d2568b147bc886d50d1040a44830e09

Download Submit
/root/.cache/mozilla/firefox/pncjy744.default-release/cache2/entries/D1CBBFAD5FFD5AD08EEE7779DF58ADA0C96111B2
Filesize
134B

MD5
d36161a5e95a3bbfda86a8870824d1ba

SHA1
24805f1fd2e55e890d5b2fb2afd579cc1d0d6179

SHA256
b33c904526442be38742a81a353394d59e1ec51815e2e2b570908f0eeb385cb6

SHA512
e237b10e6ac3d94e7dd9f0ac4abd787af0233a44c018b82d0a9906281cbf98e0bfa9662fead6794f7a62547ccb608209503571ef33d9a279a9d8f29178913630

Download Submit
/root/.cache/mozilla/firefox/pncjy744.default-release/cache2/entries/D1CBBFAD5FFD5AD08EEE7779DF58ADA0C96111B2
Filesize
81KB

MD5
51cc68d1226cb4aade2ff93996403093

SHA1
f3c832a8b459a43d1d9830c8704c89dd90eb3b7b

SHA256
491defde78b2858c18233e6f38f3236369d9aded392385d0c1dec94f4dfb9b59

SHA512
7cca7ba30ee88bb3d579855431b643987b3f232cec356bb0ff9dfce2d649f4e67302b0b614f2593ab1801ed5c0a5635450f49f6617766b1444e05d7333d5efee

Download Submit
/root/.cache/mozilla/firefox/pncjy744.default-release/cache2/entries/D23F7952044A1A6016B80DED46FC563716A295DF
Filesize
9KB

MD5
ae651f825ce34ff029c31eea0b7e2a2a

SHA1
d8f5d87a6ee5e3db94d77867cece703b7824a4e4

SHA256
ff986f4c012d6a10f432bf35581ae27c50b1149faa1fe6239beff07183f0ff66

SHA512
2455f3cb8221d2069556d9ce40706edc5afd356e2d7c901ad550be2a891b2bb1af2f47496d9375c10fb51f64e768cea9dae7717ff516fff38b7958db2731741d

Download Submit
/root/.cache/mozilla/firefox/pncjy744.default-release/cache2/entries/EE1AAB872F378C4FA66FBCD193AF217BF20A4E27
Filesize
115B

MD5
c65e9fc69638f53a4fbe27f3e1a46329

SHA1
fe7237150db3654c21900200098a1bcc7a9bf2a5

SHA256
f17616ff9e3a69e477585e4543ee44b16b2ba69742890084667967e8cb5c439e

SHA512
0842d5f4d5c9eb7d67bb4b9e1123b697ca379ce546fcf7b2214d31fd9fd1e1c743c625eabc91d4b162f6e5f528f438e8e9c1a23b4219bbcfde82100528da078b

Download Submit
/root/.dbus/session-bus/11c67417355f45d397f6be11f62e85a6-0
Filesize
466B

MD5
6f31ef3b40dd80a1d22e4e48ef26c3d4

SHA1
ee5dfc94c504607a0275d1cc429db0162b56c79a

SHA256
7cf4bd8b4a84afd551039eb29cf593c53cc6baf8cb126533d5f1d2fc4a83c547

SHA512
2f51082f2404c686c9e60127bc23c5baed00daa6cd648ad33883e6020f3339b7af3203e4c09fad36612d365a7c33c1a0e251ca7aba4f70c2ffb59a045bf5d1a5

Download Submit
/root/.mozilla/firefox/Crash Reports/InstallTime20230522134052
Filesize
10B

MD5
85562a6044993aa356fd2f04a92eb559

SHA1
3c747bb87a9c305b0b67db28bb548a5b0d006d63

SHA256
2c69ca33fbcb5986d8d43236e847a609b26bac1406cf68ae1cfe7d81a3f443e0

SHA512
a7bdc935eb90737d09d26db86273413b7b63ecbec6654a60abfe7a316a9d27180d02c653c6fbfa86520477abeec81b780344c97b5d3317ee302c8ad1a5ab7b1f

Download Submit
/root/.mozilla/firefox/installs.ini
Filesize
62B

MD5
1dbc0f4d82f81ee63921bd9aa047c9f0

SHA1
5108d6904046a8a60cc7b8eee06bda1aa3acb4a3

SHA256
4399472ae27514debfff21869963406de99ab87960c5b3a992c8c14d711028f3

SHA512
e47b16cce17cf35c933196691b9272ee7f12d84ecc4edac338b6dde4d4419f1b78c8bbc4768c7c4f145ea1f0df88c41fef6fb5a07fbaaded59bd2e15690ecd64

Download Submit
/root/.mozilla/firefox/pjjnlz6c.default/times.json
Filesize
47B

MD5
14f10b1ba0d48f81f12b4b1a4b4f4ba3

SHA1
b2d2bee2c4a42aab769edb7c51d091b292767a8e

SHA256
06e2b999954fd22dc52818e898163206d25c8e9f66fbd0f87e6659b6edf326e1

SHA512
ce5d1380b759ffa012af7deb9b1b25594156d16bbd91fb3a6e6ba1a91d49026c9257ef807d984bbe7f5d83952d1b8ed93af341a372cf5316a8429a985b4be679

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/cert9.db
Filesize
224KB

MD5
38df36420bfa857f6748c08d2568563f

SHA1
67a23e03c37cc885e9076159943084172297ad5d

SHA256
f0aec18f11319b96e611271396161606ce21d32d7811f7d8802ab1177ac18dac

SHA512
92796c1a798077ac5aa85c0f39679fbba91b7800890115b896d96f537af0980ba479bbaee2d1903011964151790a1eda8bacf478858c22e01e999b744fb88877

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/cert9.db
Filesize
224KB

MD5
9ab9cb39fcb337d4509d5680561a3390

SHA1
8219b791b9200fa4704eb03b00db5c220601bcd2

SHA256
1b263900bdc448c6ed90a79f2ea8d2a0cf354dd990c10744ca4275f91d0dc1a0

SHA512
8ed7891f26f92c8e0a92c9d01526b12c227c2e0cadf014447aa27d353296e6c356babc40c966aa8a09b75d710911a4bd3ba522bfdc91350189401cf4213b7fe1

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/cert9.db
Filesize
224KB

MD5
e52566df02cd2d6b021182d135a40129

SHA1
9cfb68f4c42dc109fec1d121d998ed232bfa0d2a

SHA256
ad8a40277f6f5154ca3dc8d937a4e746278cc9dcd18c9494bce398ef1fd4f0ac

SHA512
40f733830dfd67ffca0da4c37d41995692ddc4958a90007d68bff5a58e34554ff6ce06fc93a19e8d739a197ea33ea1c2954713c732ca0ac7acc62e07e6d3257b

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/cert9.db
Filesize
224KB

MD5
aa2b73a393f17c752029fd5301b65cf1

SHA1
3d0c98d76348a4effe5f008758e10d00f81ffaff

SHA256
a358c7cc5c439ea23789a7b99ba91189940f6226cf4e425a5c012868c3460d9a

SHA512
23987a53599f1d464a81d7e7db84dc287671f4084940199d24319a1ef9acb7f7e9b3b26056b561478b76649b9b4e82745de7f138d15e05481d93b3b5c576b142

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/compatibility.ini
Filesize
163B

MD5
fe452b7294d5928a9a5863b89ee0a6bd

SHA1
a5d4c245071fa96476ba48b4725bdae7f1b7940f

SHA256
d5bfb07561606a19aa96557ea109b175050dc0eb805cbef9c813503587d77900

SHA512
dc37d8507f08849e3382d2dbafd4a64555dbd57a288c95131e9aefb366630f1585811a9e1456b861bb9d2b816ed88b18ffb7580cd92b41bb9b0227ce1363843e

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/content-prefs.sqlite
Filesize
224KB

MD5
1fc2e7b7fe2c5be305dfa9a2bbb60771

SHA1
4967389dea050001cb1af3ec799edb7805c3abb8

SHA256
1953edcac737d1ad3de6fbf69671163882fdc0be5bd21d00378d8d8c753c757a

SHA512
fba536378ab9b5f04d92f1029b92d255c7da445a29e2527647bc16e57d02c179de1e78a2de11db1b00cc54c24d3715980c84c0cde103f47c6150f2e7bb8f93d5

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/cookies.sqlite
Filesize
96KB

MD5
9535f5fe817accc769c2c1d3354db39f

SHA1
6af62cf08717cf3bfa84eb1a7b311acf522ce560

SHA256
c53c15fcfac2bb57fdc88d23f932fc244dbaf4020f0f6eaecf0f77a37c21f8c5

SHA512
dc9c2c32eb42dda0a7a711e143aea58c603c1e9d885c3677e9fe86f525e1b0b32a46e240756263e56510b07e764ba69f2de13b90ec18210678242e10cfe17837

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/cookies.sqlite
Filesize
96KB

MD5
5caa766855d5613a999f71b7812d6451

SHA1
ad0d9a52a0d5cc7f11858301dbe47377ed99ee37

SHA256
3a8ce2b07e3e8678a13aa58ef5b942c4dccd8f9c84511bdeb8847ef270797e27

SHA512
17bb0f4c87ec178910795b25ce85e74cf599190c769592472c3e872f42930c93f28faf0ff3e448816a9abcc8af0459852bed52bee08cfe25d068879c6dfd8eba

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/datareporting/glean/tmp/8f632578-ea51-4380-8cd2-44f3bd780108
Filesize
629B

MD5
98e4f3a6cae117a857e47a1a29d03a5a

SHA1
706bed860b7753c0283c77255f682a4a57a3aea3

SHA256
b9c1dc7f1ca0faff908501309c80c76c0d8bc6c074c0ac8be6476a16618ea625

SHA512
cfc24c83f5ac5da74f1d144112321ed405c2e2dd29dc7a4691a2bfd2f31d032f7439d87296f314f773b35d40a00e42801810c8f8ac583f6b734eecbae2b905d9

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/datareporting/glean/tmp/c6e402b2-5126-40ba-97aa-cb961d9bf0f2
Filesize
894B

MD5
1c022842f9fea2f282872091751308b7

SHA1
6035cadd1da7179d6286095323e83638a62a4303

SHA256
b38582f439bbc2308da394e582f4ed8f3c7c26c11a6b33478fff30feca857d22

SHA512
ef083f0497d212fca7e7446ba7caebc1e636f044aec789dd57f119d3428a2da7c10c701d2ab0b381b22a39881da44e33a7ed582c2ebfb6cc87aa2c36e9d5df70

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/favicons.sqlite
Filesize
224KB

MD5
3c0a1ec298284608bfa51081ea539be3

SHA1
e51b58f6fe89d45fd8a1d935b51da172d5f6f32e

SHA256
34c4fe7ab2d3e44f193b489ebe84c17d67b336546af9ef231897ec09d7ff16f2

SHA512
8550f530377f7a98c46a6989bec2c43ed644274509a5b987e8e0d034bf867b3315dcc75a2c851a5ac43a45b40bf51c789d828a9a69c02157b3e900467341a28f

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/key4.db
Filesize
288KB

MD5
a1f71458f7e9ea55abbdc531b176a32d

SHA1
4a3cb7582cfd8f89a0e961854c64231c7b5d9064

SHA256
2c59808c6790bbda7a357821e4e5539ce8966bcb4b8e8b21242c58f53cc13db1

SHA512
9c06f1724326cdd389c1d4d23a75d15498a8f3dae6deecb5ae5d2964a3c793335e68da2daaf18fed9fa663a0159ef5427e3a05a101e574af718f6caa3759a6d5

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/permissions.sqlite
Filesize
96KB

MD5
232fbc22dd03a8ec41edde02bdbea61c

SHA1
6ab4b39bca95418c52f7f861fd39e5fddb9cc7b6

SHA256
d88bf367aaf79efbb2e8fbdb1dc5bde1c1c3a53e0f4d8188027a63ec55d5f5f0

SHA512
055f1595f4a327347671db53cec8d89a310109d3f871c567e3d5b654b956fc0369d12437f7dc6d9327b973008f1327ee0dfdb5504f1b3cbe00da29941b1e5892

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/places.sqlite
Filesize
1.3MB

MD5
30b1629e44a07660a0041789b653ff72

SHA1
99678007e5679fa64f2264fdd02e1294ecbbe9fb

SHA256
95d17532db570c2253ddef17503362e505b51e40fc409317421bee9f8e695c6e

SHA512
978b10a0f1df2c824cd8d9add737e5d8e2e1fce1a4e971ad3afde01b3f66d4c59e21b11b05deec8f442ea28a4434504a68d8cbecfcfc6edb6211689f8ab31020

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/places.sqlite
Filesize
1.1MB

MD5
2ab7366a8b37160a2300747fa60a4823

SHA1
49ed5fd8db8c236032946af6f477b2800e9de8de

SHA256
dd7de1539596045d59a6714b2d695fb800cf8933124e73d244602c92475d8da5

SHA512
05780886d040241bb29ab49be4c386978c337e91ed9f31d9eead05a9c702737815a451e6af355231bd58009e16fe0056d8d098617be8d82d16d40a6e25913a1c

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/prefs-1.js
Filesize
1KB

MD5
04c2073b8213feed41c1eeac70b5a6c7

SHA1
6219072d1b7d95c91b8d4cb538faa0e7f4edb0df

SHA256
c48d40a0dd1054b04a1f8421c3988ea39b0f5943c291d79e386fc3c474766bb3

SHA512
02a0b1c91d9d6c43b72522cf20ae34c5f1a2721f807b74b0dc9154be59fcf112628adfb14b5fd5eb2a48ae0de2092672e1b0a13270ee98247651fa0505f436c1

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/prefs-1.js
Filesize
1KB

MD5
bc0b5095cefca7f0ed260ffeadfb315b

SHA1
98b75f2500b864509516c501154a1f51f93ad937

SHA256
6aabc5f5f68ac6e9ca637a5f561ba40c24eed4305b788b4cf315f907b9e3ec82

SHA512
9ed823b6c8adc3d95034cbaea7bf7ab6c3572391b99170b1b6ef208c378c638eac8d1f8ed63d3ac2058ae87232e295166c13b527b1def1c093a5159f0d3c70e2

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/prefs-1.js
Filesize
2KB

MD5
59f6db97d70c3d822caef3c23adb1466

SHA1
5524d3549ac11c2b1b02ea9a16fd55c971e0ec7b

SHA256
77d9df3021a409c0766e2d836a84666f0a054e091980ecab63083657050eb610

SHA512
fea047f0c6cc5fd298e86160e8c3d99ca9c654bdb9f1bedc8409c3d2790a1e50f98313abe1277eba29e23492419df1c71705501626b9999786858fd726ff6fbb

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/prefs-1.js
Filesize
2KB

MD5
74ff35510490839e283eb6607e69a706

SHA1
2d7780788a142aee0e8fe4dc582a49ae7bd77675

SHA256
9802798741b8cf9a195db06be03f73ad3b440f5eb7ee3ffddb5f5220e8f56507

SHA512
bc77c9e5af842bcf6e06b0cf094c7006faadd7a317c53be7a4fcb02e5b06b7c0727ef98c3d889940e7b39666fcaf8171a3bdd45bce49aa861af2960897b86433

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/prefs-1.js
Filesize
3KB

MD5
6b2983106a6e403e79a1202b5777611a

SHA1
3cb16c3bdb4b5617a31e6d03f0eb74f8fc4f0346

SHA256
7a09c4c239c6af54975597fa428aef72492ba0b295aa5d48ea3920ed2d0dad40

SHA512
5dec0214cb734c6bbc2db7fed3b0f2b5a19d2987b9a1c8d9234c305abc98fe3651b94a3bdf3c7ce2eaa20243388b8f5ab68d19d92c4c1eb3e41056f48f6e2c73

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/prefs-1.js
Filesize
3KB

MD5
aafe94d54e9b41ca18400b43932a2ccf

SHA1
8c7a698bb680fd2d0112c32fda54fcaed515fc07

SHA256
0336b7f8cce4532494b2d646dbd434a1c4b85d65f3300b6d3b95c866c08bd420

SHA512
441fdd914e5e96c0fc11d28f174062114c9308bf06a5427d012cb833c3555c99837812ba7d8bfa6db26c0b17f6986711d052b3918fdcdb98b5574d04cbcbb53b

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/prefs-1.js
Filesize
4KB

MD5
789a7f5db5b88a27ca51b45dcf871b0e

SHA1
b0c158e34217746b9b65f49a06af4eda9bc0b404

SHA256
7c8e77ef4448cf949f4fc583d9f5c2a7e158c4550f7e84974d12588e8684c2fc

SHA512
4f47b9762108c6ecd9f53db2d0dba52dbd0a483a6a34198eac759418680eb8dae07543a8db3c0f27ad6577de6ffb33d8b3144bf125b024ea1e6b05411cd77cce

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/prefs-1.js
Filesize
4KB

MD5
083f51269b9319ae0206e18973130dff

SHA1
2872a6a3a0b8e89b5b95d1bdfeb878b9829898e9

SHA256
7f51dcf15fc872523e75c3d37befd7584323d2bd495af2d8047a715931e4c12b

SHA512
9ddd63be3cac1a59ff011816f5d657950614f079b2fcc1522636332e7c69123a4c2b8be9b6bd115661b900b7901558c35ee4c932cdddc1895188417a42d7b6f3

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/prefs-1.js
Filesize
4KB

MD5
1e1c239ff6d793ae62a16748902f08c9

SHA1
0beb3527bd4061d25c647e809ea421b4653e6f69

SHA256
e2b38c60885a556db85a44ec62c4c122ff292a74b7980ae3e5704ece759791b5

SHA512
96010da3cea0b75c17b78b8e4b8f0dd13caeeb58566fb52a7eb0bc2f62de0cc2da278f5ea20cb1f240dee575c10b48f31b0d76cb7ddb710dd95a3c94cc002b42

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/prefs-1.js
Filesize
4KB

MD5
5db1ce88820f3e0668307d7e8c4d5523

SHA1
0bfc3aafe37dd2c5ad025f5c60b622676622b2b8

SHA256
7b6e4a139338097f5137942b97611bb2296c57b8105a05728c65d10b15076269

SHA512
7dea613bd4cbc86609233361127890452fae9e382b66e881af2d5823f2deffa39909c37e6c09986c7b3a4eda26c041efac1c387f58532f8fe34647268b733baa

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/prefs-1.js
Filesize
4KB

MD5
fc99c5f4fcecaa20489891e13d861eef

SHA1
a1494a6f2da4fa3da3c10a5c85a7493609b9f906

SHA256
6e2b02ef968c56b123452a2b9769316f3fbde1be3e44c5d407141d05bc5f0e15

SHA512
cbb1de97f6355532658c73b00bec8b6ee25a20ce96709dd2b227be6a6e6c699cb40deb3a22389b8b8a4530332cf04f2ac6d2a19825e2d823d35bf0fca14f5d03

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/prefs-1.js
Filesize
5KB

MD5
fba521b2dd63e242600dea3ffb743576

SHA1
a0a1ba59c764951310d871c660a4ff83cde2e5aa

SHA256
657c593170022b10331e92712453c361c6185b0cf3120515de9ea7d0381000c9

SHA512
b217a6c160bdd72df655613ce2d3942e3c5f3b0bf519cd439676b77f761bb700b3846650241fcff6cd172208e6a2033c8749fa5c4a1939a86ae09517d57b2ebc

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/prefs-1.js
Filesize
5KB

MD5
f16de63c1dfebbe6de827b92744bc24c

SHA1
5dc7f061332d5677973f5a63612ada78277ec4f7

SHA256
fbbd8d18456d463aa6c85ce0cf0c8f9fec10ae1f9217933dd02b32a3b74b754e

SHA512
cd3275eaf25c56c2fceaead39829ad19db2e15c5a7817beb17540ab174e0d3790d3593d7c99deb53cf2d94037aa0abc28315d7c22948ce6eddb95209176569a5

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/prefs-1.js
Filesize
5KB

MD5
f85801b7066eefae3a900009e81928be

SHA1
63f60acf85c8f5fd74b0fded83f93900904eb18f

SHA256
1933b5540755d41f298850c99e309b05f1f880a88e9b21ba95e627ca204b8870

SHA512
d8e5a99f126fcb142aadfad6e9922089373478bfe0e075ee648745b89f43b86b6a53d51276031da2c2f449544ea7e328dec8c28855ae2a308b49311176e7fa49

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/prefs.js
Filesize
776B

MD5
a2bde731586e5b0642a901fde157c7fc

SHA1
4c6646bdf850f198f7a7c330e2304093f6b8c23e

SHA256
41b3a1d1ca84ee86f3f431cc84d91383b5416255b4dbb893fea19c2347c7e7d7

SHA512
cf89c07247bd092b163fa18360bfbb586670cb35b9a9c6e4b60f7040927d79e81bb02d901b50dca91fd811e3f35de7f33fc0711f2c356e0b9a7279e86ef75c2b

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/protections.sqlite
Filesize
64KB

MD5
c7cc11494c34e02565df83d17beb33b3

SHA1
f379ad7c0fa73476d3828d8a89ef843046332c12

SHA256
7ca17bb171e22b4ec498c1d20587b30d62d773b114d0e66bb00ec874506eb85f

SHA512
0cfcb15a985a35e917c9652721b516e2d1c358c6db3dca4452e866d250b6269c4cc69773277f5ddd5a0c5a338f95d9f6134224f0097df194985161cd3d47cfd6

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/storage/ls-archive.sqlite
Filesize
96KB

MD5
e0c613bfd69956a19ce2dc5e925aa223

SHA1
14accb230edcd6cb76967cdc6d4e5686db96b5df

SHA256
0d4cb11f6364c46a75f9eaddfca5c660b90dfd515df3afcd5e0baeca28a0f1ab

SHA512
01643c0131a392be92b3f281d7f633c1f502bff19090b0d716f1ac66aefecc3fcf92f393bef66b03089c9b9c6d8aaeb711b6a4f29d5a6729dd188c838f2272d1

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/storage/ls-archive.sqlite
Filesize
128KB

MD5
178d71e5529d637ac62f7e75fdd75896

SHA1
339f2b949cc4c207b66aea11137448ba28d36dcb

SHA256
7b0050f1bfaab85c8f9067ae7d7369056ff752c0c852ef1462a96c22169004d4

SHA512
ec0e0105fcfbbae356dd55efbcf92975f35bbe5cb93fcabf4c08443e871957635d14830b27c4e1ddefbbaff8f9b7ec3590bf417a9442e1d7ee3607d14d56f664

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/storage/permanent/chrome/.metadata-v2-tmp
Filesize
42B

MD5
04e0c45f3bcf45b8fa2f36c1311d7087

SHA1
b924ac9b1de11f187ee9976e555d2acff82539e0

SHA256
7fd6febf9c96d90c43a764b9475851faee59da930babd7ace48030a56e4eb2e4

SHA512
5a6fc4bdd8c9e5ba553368c3da1e58d06b3514721685eda59764cd1488dbbbe81a579446c3b7317586b16d12a27b11ec8e6af45b336b2e25bdca9fe6c8de7ff5

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/storage/permanent/chrome/idb/1451318868ntouromlalnodry--epcr.sqlite
Filesize
44KB

MD5
a8dd7ebaad5528b23f82ccb1534cea18

SHA1
600daceacfb5cf9df0b66ba7dce4516b2ac4df70

SHA256
e5b0d02c18ae36c4a220f41fd97c66060c17aaafcbb324a57ccdc2707c44c4ec

SHA512
67f867a8e2b37fb6bececd5ebc570ca594ea329142badd63d1281d5e735f515a5e329abc6eb9a9d3465aab0a08541b4888018d859964f160a52345ab93532bff

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/storage/permanent/chrome/idb/1451318868ntouromlalnodry--epcr.sqlite
Filesize
12KB

MD5
123f9e17648a1c0ab6fe3287e0dad678

SHA1
6822d54270052e75f456f52de2e296097dac8727

SHA256
1c63ef77c1cb3c8d2a7803bc0127d7a5ae05704a4e99cecf516d7ee3387b8a45

SHA512
5cba821925423f9e48564568b7a923282f787d278ce1aa103730f3b107d92a29a4d7f479540f5c8926616d8c02333537d14e66f51fa21483675489ee48e8aac4

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/storage/permanent/chrome/idb/1451318868ntouromlalnodry--epcr.sqlite
Filesize
16KB

MD5
9595f6394a9b6d731949a38176b3d80c

SHA1
b3e8b1cca868c819cce2d61016c41c453b525e4c

SHA256
53ee4c8a6d4c532ff0312695012b917ca3c260ba1955d95a970d3fa906569f0a

SHA512
c16c85164c07a417920b6608eb662561ce3a92837d64a8cb6638ea243a0425b12e8698b8ac1c13f915b15136c5ef9ac0569bff31334921f47869ec33000fe44e

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/storage/permanent/chrome/idb/1657114595AmcateirvtiSty.sqlite
Filesize
44KB

MD5
7352c8848e88edc39b7fb5e663888187

SHA1
8c3dffe25cc56c7aec1b782292d6fceed81e6304

SHA256
7a462086a26978809c719e57a7ea6a25568767fb7532014e8531fda94b660e0a

SHA512
f2a0dbbab5c2c1702b03bce15a47739481f523e127d1372b40534db9a20b2bc99fb53710ee0e5d44176188817cac704cf4f98cdf087e7e89d244281fcfc3b280

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/storage/permanent/chrome/idb/1657114595AmcateirvtiSty.sqlite
Filesize
12KB

MD5
bde038444449bdd9f886ede2a7094d79

SHA1
cc3254c75daa39005d53e31a5ca4c49aa5f4b7d7

SHA256
dc8c1ea85790ad86099c4087050a31859bea8172e55df53bbae7282327573453

SHA512
1f4a560c0c6d4dc930289d5d25b199845fdc6c76905b970e78445a0380280cf28658cff6ea8f61507973baffd32dae7e505e2db394421614e9892569bccbbbac

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/storage/permanent/chrome/idb/1657114595AmcateirvtiSty.sqlite
Filesize
16KB

MD5
10b551bb142a17da21bcdeaa4804e2ec

SHA1
a9f49ea36fc858bb4894be53b30fc317125e51fe

SHA256
1499d81a6d33782bb74582db2b7c69fe1c3a1c78d084ded9a2563ea6c50e07da

SHA512
7837efbd890cad5d4141d95e3fdcda5cb293ae86c0cc9ced3cb5ac2b56b00cfb0d231fb25c6475731507abd7f06fcd83ba81151f63509022dc9532ff028cae9d

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/storage/permanent/chrome/idb/2918063365piupsah.sqlite
Filesize
44KB

MD5
d7797ca7ca0770758ec1843310528201

SHA1
d020a9f6711f0ec3a75a4506ec5441bfe85f43a8

SHA256
ba1e9e93d2fec406890ce6d8f57e8ca65007990857e09911d49fc21956d77401

SHA512
5425339a68a436fea01bd910e9533a20ea7089010ba1174c9bc4d0b602fbadd685100522941fb61e52f3eb68e68a5734b367e8e154c96a4a27b6df81070bd016

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/storage/permanent/chrome/idb/2918063365piupsah.sqlite
Filesize
12KB

MD5
622f185ffe7e22fe7601de01285ade1a

SHA1
1233958c32aecd34709a7b13f0149ac784e6e636

SHA256
e014f2d395e45338e12fe004e129c99c743a717c7e193e0e2bc156953cbca312

SHA512
596a04a5ccb582066e47ac47867a2bff244753b8e328464c1e02f059c60a6ed79642fcf3efc0f188baedd9e9a4c7ef0e7f2dd5f875210c839f0d33a6ac92b998

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite
Filesize
44KB

MD5
759544297aaa61f5fef8ee42d0ae4393

SHA1
fc2d66f6e60409e3e8d38623ce5f817fc7f571e0

SHA256
1bd2000cd972e80cefaec6e982ba261d224a818f367de0fdf8c51fa5a05d7ab5

SHA512
8aaa2ce66f10d46f7c9200af841ac7bd9f5b55c30308a14f0deda44ac62581c45daae45154487c0073a0d5847d5926cbb4072ca64a702ac6b834ad0bb482804f

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite
Filesize
12KB

MD5
7eb14ab3aaea1deb23a21b4b0a65905f

SHA1
4260b7180bf4b2242a39a843ecde09040f28c4eb

SHA256
a66a74fca673c2403c3ce0cb8ebdc77f644584b8417a68debb6eabc442751b83

SHA512
af28080aa160d2d414955ce6e88af36c88c9b3fb84a4d72ed5f9cab666fe7a4eabd8be26034a563a13f927e84a65ff4b9e31322b9a3dad3781fea11cd2369d73

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite
Filesize
16KB

MD5
0e5ab8201a3d5afa5cd613d579a236eb

SHA1
0d8a22fa9c9b0ed7c056ba7aa180b7901d481c61

SHA256
edf12929f24293c07053a3bd8faac278e9d08a7603f8d0017f6aa5b84aff8bc2

SHA512
bc879c5ddc924353b8b2cd392076055347ad79b5d333c02e1bcdd43957f6cd22b24001c8206ec68fa2e98af401c387af14b39b74f02e7fdad70126e11993d424

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
Filesize
44KB

MD5
07a412e08825220262ad2890757ff779

SHA1
f46c127dbc070ded87a6078b3c1c761955f96de8

SHA256
da640f8b665841b520d2262a21cc3f82aeaa881cf81a1ddae27ef501d66544e4

SHA512
0134c783bf3293848e479b478ac57a1e0f4202cddfb8b57bc6275aada7345f398cf8a627e9b1c34fd618192c2f0c9737b1da487daf33f9c557ebc1377105582b

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
Filesize
12KB

MD5
c7c0523366e4dae922b76613ed5456ce

SHA1
9144bda0394fdbd11f0ea3a8e73ccb37795852c3

SHA256
ce55fa2449fee4307335804a77e4e848111056a9f21a730afebf252d8aef4a4d

SHA512
63f601f534ebaebf7a3550e21747cda34b8196c1f392b206251822da3c4a910e1594bad903683d4434a0e2b27c634a338125544c77da340189cb5d76927416db

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
Filesize
164KB

MD5
4e12bb54f4f2c5b9da156a8361de8864

SHA1
34d931702df3b8a378e83fd086a9249b7c161d8b

SHA256
6ad4c2e2f179461275e661b4802238786abde1a131790f0d435dab290ed027f5

SHA512
62a8c629bba4d097797e835f557f4c75f8cab65cfc13e76da3cc0e1db85c031f1cf1c27261abc2a444a038770a03742c6d62f4d6dc7235a7c81f5d04de40d95e

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
Filesize
148KB

MD5
dd3f6ba37c670af5953593535e435d04

SHA1
ecfe4e650a050bce77e8ff7468de04c1b8acc9a4

SHA256
5cc6fa137a1f3a7d0b615b178877f12c460b22f95702eb7534d5732ee6599561

SHA512
86e0482543faae6fb279ca71e1e6d6461d32317e74baebb3973e0fde9800107faeb9c2347be6cf8a47556ae43c8e6c224a595e952f621e40ad2c5eba920df2b3

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
Filesize
168KB

MD5
e87498f20e6ffb24c100b389c9186fd6

SHA1
919ac3ffd22845e2ed3bf53ff974ab495d0a7c73

SHA256
98fb2b81377690e84819f72cb58f02505856485830b2bb98c5f1e3b4804013d0

SHA512
706619b456d5beba0308ca27ff3e011c844aea05ad99ae3a572748c8dbb20e9992be624609ca1cb56ff82f29181c9b1e95b9ce7032601db4c24d2e13e5d454e7

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
Filesize
248KB

MD5
c966f43cae42ec8d4344eb4630a887a9

SHA1
912dd5cccf8054393dec1285ca70ea07d358788e

SHA256
5829d4bc45f5204c879e1110017000c591a8b838f6478b411246cc98a48e5129

SHA512
da1ea2df960cb9ae17ba902529665240b6db25d02120ffe32608040edaf818afc1d2d92834c8a6f3b5af6bb96b6880f9b0f3e3416e200fcdbb4c0b556215ef88

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
Filesize
316KB

MD5
c3312474e7dc3827d9668d677ee7da56

SHA1
b3af75bb947a0bb468960591b986a652342ec72d

SHA256
74eb5892b247c892bbf897dcf9b4a9253099dfc7f91c46df8e84b4ae5711b281

SHA512
df0622f34366a7ca15341d55a868570f441b99a1b779b0341c360eca14c437c338fca96811fda803a74bd444d05a6257aa5fbf5e96b7517176216577d0163cb4

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/times.json
Filesize
50B

MD5
9418a54cb47155e830b3d9775c7455a3

SHA1
b00a6b83effc344b45934707cc2f954c93fe8f33

SHA256
4270cc20e059c3ccbd1be06dc82447e25c91c8201719ca3e9c2a4c66b5cef561

SHA512
d0c3f201fc04e67cb775843c94b225bc4255e3ce816e9f703859f1a6c9ee22f27f6e433e9538efd08b083dde444aebd1b90b1da843a513ae8fd2dc2d2c12d31b

Download Submit
/root/.mozilla/firefox/pncjy744.default-release/times.json
Filesize
47B

MD5
0c971888fd354c8d54df90cd477ef518

SHA1
2cb31f226f28e57ee684fff32ee948b2f1e44930

SHA256
af83223cf364c4bda78d72cdf8914c875dd88be83cd76d2e95619e877df24cba

SHA512
612539136cd37231dfafe63ebe4933847baf53b091fabb3176012a60ea2e7f55db6b82c31754d34fdc2905c6268c4fbfd49a0fe0f14d582a5662958f17e5fbe3

Download Submit
/root/.mozilla/firefox/profiles.ini
Filesize
259B

MD5
2619dfb692cbd16dd01ffec9d9b4d455

SHA1
9a0f73d3aa6e39e27d5c85570d9d9b0208fc053f

SHA256
1d6bd96b774a0a4211bd01042ad739f36fe53fee812f50fb96456e92856da1ad

SHA512
0dbc915fc9354e257b4bc14dbb2924dbaa92219976b181fb9487bcc439274cd86c7befb2d1c40113dda1091da1542e294c33dbf28049c40e193e309a7dc39c8c

Download Submit