hxxps://pastebin[.]com/jAC9GwfL

Analysis

max time kernel
15s
max time network
33s
platform
ubuntu-18.04_amd64
resource
ubuntu1804-amd64-20240226-en
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-20240226-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
28-03-2024 16:55

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://pastebin.com/jAC9GwfL

Score

7^/10

antivm spyware stealer

Malware Config

Signatures

Changes its process name 64 IoCs

Processes:

firefox

description	ioc	pid
Changes the process name, possibly in an attempt to hide itself	IPC I/O Parent	1629
Changes the process name, possibly in an attempt to hide itself	glean.dispatche	1628
Changes the process name, possibly in an attempt to hide itself	IPC I/O Parent	1629
Changes the process name, possibly in an attempt to hide itself	IPC I/O Parent	1629
Changes the process name, possibly in an attempt to hide itself	Timer	1630
Changes the process name, possibly in an attempt to hide itself	Socket Thread	1632
Changes the process name, possibly in an attempt to hide itself	Netlink Monitor	1631
Changes the process name, possibly in an attempt to hide itself	Backgro~Pool #1	1634
Changes the process name, possibly in an attempt to hide itself	IPDL Background	1633
Changes the process name, possibly in an attempt to hide itself	Socket Thread	1632
Changes the process name, possibly in an attempt to hide itself	Backgro~Pool #1	1634
Changes the process name, possibly in an attempt to hide itself	Timer	1630
Changes the process name, possibly in an attempt to hide itself	Netlink Monitor	1631
Changes the process name, possibly in an attempt to hide itself	IPDL Background	1633
Changes the process name, possibly in an attempt to hide itself	HTML5 Parser	1635
Changes the process name, possibly in an attempt to hide itself	HTML5 Parser	1635
Changes the process name, possibly in an attempt to hide itself	JS Watchdog	1637
Changes the process name, possibly in an attempt to hide itself	JS Watchdog	1637
Changes the process name, possibly in an attempt to hide itself	BGReadURLs	1639
Changes the process name, possibly in an attempt to hide itself	BGReadURLs	1639
Changes the process name, possibly in an attempt to hide itself	Cache2 I/O	1640
Changes the process name, possibly in an attempt to hide itself	Cookie	1641
Changes the process name, possibly in an attempt to hide itself	Cookie	1641
Changes the process name, possibly in an attempt to hide itself	StreamTrans #1	1642
Changes the process name, possibly in an attempt to hide itself	StreamTrans #1	1642
Changes the process name, possibly in an attempt to hide itself	TaskCon~ller #1	1644
Changes the process name, possibly in an attempt to hide itself	TaskCon~ller #0	1643
Changes the process name, possibly in an attempt to hide itself	BgIOThr~Pool #1	1645
Changes the process name, possibly in an attempt to hide itself	BgIOThr~Pool #1	1645
Changes the process name, possibly in an attempt to hide itself	QuotaManager IO	1646
Changes the process name, possibly in an attempt to hide itself	QuotaManager IO	1646
Changes the process name, possibly in an attempt to hide itself	IndexedDB #1	1647
Changes the process name, possibly in an attempt to hide itself	IndexedDB #1	1647
Changes the process name, possibly in an attempt to hide itself	IPC Launch	1650
Changes the process name, possibly in an attempt to hide itself	IPC Launch	1650
Changes the process name, possibly in an attempt to hide itself	SandboxReporter	1649
Changes the process name, possibly in an attempt to hide itself	SandboxReporter	1649
Changes the process name, possibly in an attempt to hide itself	Breakpad Server	1648
Changes the process name, possibly in an attempt to hide itself	Sandbox Forked	1651
Changes the process name, possibly in an attempt to hide itself	DOM Worker	1652
Changes the process name, possibly in an attempt to hide itself	DOM Worker	1652
Changes the process name, possibly in an attempt to hide itself	Chroot Helper	1653
Changes the process name, possibly in an attempt to hide itself	StreamTrans #5	1657
Changes the process name, possibly in an attempt to hide itself	StreamTrans #5	1657
Changes the process name, possibly in an attempt to hide itself	StreamTrans #4	1656
Changes the process name, possibly in an attempt to hide itself	StreamTrans #4	1656
Changes the process name, possibly in an attempt to hide itself	StreamTrans #3	1655
Changes the process name, possibly in an attempt to hide itself	StreamTrans #3	1655
Changes the process name, possibly in an attempt to hide itself	StreamTrans #2	1654
Changes the process name, possibly in an attempt to hide itself	StreamTrans #2	1654
Changes the process name, possibly in an attempt to hide itself	MainThread	1651	firefox
Changes the process name, possibly in an attempt to hide itself	IPC I/O Child	1669
Changes the process name, possibly in an attempt to hide itself	IPC I/O Child	1669
Changes the process name, possibly in an attempt to hide itself	IPC I/O Child	1669
Changes the process name, possibly in an attempt to hide itself	FSBroker1651	1670
Changes the process name, possibly in an attempt to hide itself	FSBroker1651	1670
Changes the process name, possibly in an attempt to hide itself	Socket Process	1651	firefox
Changes the process name, possibly in an attempt to hide itself	Backgro~Pool #1	1671
Changes the process name, possibly in an attempt to hide itself	Backgro~Pool #1	1671
Changes the process name, possibly in an attempt to hide itself	Socket Thread	1672
Changes the process name, possibly in an attempt to hide itself	Socket Thread	1672
Changes the process name, possibly in an attempt to hide itself	ProfilerChild	1673
Changes the process name, possibly in an attempt to hide itself	ProfilerChild	1673
Changes the process name, possibly in an attempt to hide itself	Timer	1674

Reads user data of web browsers 64 IoCs

Reads stored browser data which can include saved credentials.

spyware stealer

Processes:

firefox

description	ioc
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/logins-backup.json
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/addonStartup.json.lz4	firefox
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/storage
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/storage/permanent/chrome/idb/1657114595AmcateirvtiSty.sqlite
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/favicons.sqlite	firefox
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/storage/default
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/places.sqlite
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/favicons.sqlite-wal
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/ClientAuthRememberList.txt
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/AlternateServices.txt
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/cert9.db-journal
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/content-prefs.sqlite-journal
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/extensions.json
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/handlers.json	firefox
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/storage/temporary
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/compatibility.ini	firefox
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/system-extensions	firefox
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/sessionstore-backups/previous.js
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/content-prefs.sqlite
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/ExperimentStoreData.json
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/favicons.sqlite-journal	firefox
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/bookmarkbackups
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/protections.sqlite-journal
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/cookies.sqlite-journal	firefox
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/xulstore.json	firefox
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/places.sqlite-wal
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/favicons.sqlite
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/pkcs11.txt	firefox
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/cert_override.txt	firefox
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/SiteSecurityServiceState.txt
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/sessionstore-backups/recovery.baklz4
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/cert9.db
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/logins.json
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/storage/ls-archive.sqlite
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/storage/ls-archive.sqlite-journal
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/key4.db
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/sessionstore-backups/recovery.bak
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/shield-preference-experiments.json
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/protections.sqlite
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/thumbnails
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/prefs.js	firefox
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite-journal
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/cert9.db	firefox
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/cookies.sqlite
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/extension-preferences.json
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/storage.sqlite
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/sessionCheckpoints.json
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release	firefox
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/sessionstore-backups/previous.jsonlz4
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/addons.json
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/cookies.sqlite	firefox
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/storage.sqlite-journal
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/permissions.sqlite-journal
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite-wal
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/search.json.mozlz4
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/places.sqlite-wal	firefox
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite-journal
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/extension-settings.json
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/places.sqlite-journal	firefox
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/sessionstore-backups/recovery.js
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/user.js	firefox
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release/cookies.sqlite-journal
File opened for reading	/root/.mozilla/firefox/1owhtuat.default-release

Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
antivm

Virtualization/Sandbox Evasion
T1497

Processes:

description ioc

File opened for reading /proc/cpuinfo
Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs

Web Service
T1102

Processes:

flow ioc

28 pastebin.com
29 pastebin.com
31 pastebin.com

description	ioc
File opened for reading	/proc/cpuinfo

flow	ioc
28	pastebin.com
29	pastebin.com
31	pastebin.com

Reads CPU attributes 1 TTPs 11 IoCs

System Information Discovery

T1082

Processes:

firefoxfirefoxfirefoxfirefoxfirefoxfirefox

description	ioc
File opened for reading	/sys/devices/system/cpu/cpu0/cache/index2/size
File opened for reading	/sys/devices/system/cpu/cpu0/cache/index3/size
File opened for reading	/sys/devices/system/cpu/present
File opened for reading	/sys/devices/system/cpu/present	firefox
File opened for reading	/sys/devices/system/cpu/present	firefox
File opened for reading	/sys/devices/system/cpu/online
File opened for reading	/sys/devices/system/cpu/present	firefox
File opened for reading	/sys/devices/system/cpu/present	firefox
File opened for reading	/sys/devices/system/cpu/present	firefox
File opened for reading	/sys/devices/system/cpu/present	firefox
File opened for reading	/sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq

Enumerates kernel/hardware configuration 1 TTPs 60 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

System Information Discovery

T1082

Processes:

dbus-daemonfirefoxfirefoxfirefoxfirefoxfirefoxfirefox

description	ioc
File opened for reading	/sys/bus/pci/devices/0000:00:01.3/irq
File opened for reading	/sys/bus/pci/devices/0000:00:01.1/vendor
File opened for reading	/sys/bus/pci/devices/0000:00:06.0/vendor
File opened for reading	/sys/bus/pci/devices/0000:00:02.0/device
File opened for reading	/sys/bus/pci/devices/0000:00:01.3/resource
File opened for reading	/sys/bus/pci/devices/0000:00:01.1/resource
File opened for reading	/sys/bus/pci/devices/0000:00:05.0/resource
File opened for reading	/sys/bus/pci/devices/0000:00:05.0/vendor
File opened for reading	/sys/kernel/security/apparmor/features/dbus/mask	dbus-daemon
File opened for reading	/sys/bus/pci/devices/0000:00:06.0/class
File opened for reading	/sys/devices/pci0000:00/0000:00:02.0/uevent
File opened for reading	/sys/devices/pci0000:00/0000:00:02.0/subsystem_device
File opened for reading	/sys/devices/system/cpu	firefox
File opened for reading	/sys/bus/pci/devices/0000:00:01.0/vendor
File opened for reading	/sys/bus/pci/devices/0000:00:01.1/device
File opened for reading	/sys/bus/pci/devices/0000:00:02.0/vendor
File opened for reading	/sys/bus/pci/devices/0000:00:02.0/class
File opened for reading	/sys/devices/system/cpu	firefox
File opened for reading	/sys/bus/pci/devices/0000:00:01.0/device
File opened for reading	/sys/bus/pci/devices/0000:00:03.0/vendor
File opened for reading	/sys/bus/pci/devices/0000:00:06.0/device
File opened for reading	/sys/devices/system/cpu	firefox
File opened for reading	/sys/bus/pci/devices
File opened for reading	/sys/bus/pci/devices/0000:00:01.0/resource
File opened for reading	/sys/bus/pci/devices/0000:00:00.0/device
File opened for reading	/sys/bus/pci/devices/0000:00:00.0/class
File opened for reading	/sys/bus/pci/devices/0000:00:03.0/device
File opened for reading	/sys/bus/pci/devices/0000:00:06.0/resource
File opened for reading	/sys/bus/pci/devices/0000:00:04.0/class
File opened for reading	/sys/bus/pci/devices/0000:00:01.1/irq
File opened for reading	/sys/devices/pci0000:00/0000:00:02.0/subsystem_vendor
File opened for reading	/sys/devices/system/cpu	firefox
File opened for reading	/sys/bus/pci/devices/0000:00:04.0/resource
File opened for reading	/sys/bus/pci/devices/0000:00:01.3/class
File opened for reading	/sys/fs/cgroup/cpu,cpuacct/cpu.cfs_quota_us	firefox
File opened for reading	/sys/bus/pci/devices/0000:00:01.0/class
File opened for reading	/sys/bus/pci/devices/0000:00:04.0/device
File opened for reading	/sys/bus/pci/devices/0000:00:05.0/irq
File opened for reading	/sys/bus/pci/devices/0000:00:04.0/vendor
File opened for reading	/sys/bus/pci/devices/0000:00:00.0/resource
File opened for reading	/sys/bus/pci/devices/0000:00:03.0/resource
File opened for reading	/sys/bus/pci/devices/0000:00:01.1/class
File opened for reading	/sys/bus/pci/devices/0000:00:02.0/resource
File opened for reading	/sys/devices/system/cpu	firefox
File opened for reading	/sys/devices/system/cpu
File opened for reading	/sys/bus/pci/devices/0000:00:06.0/irq
File opened for reading	/sys/bus/pci/devices/0000:00:02.0/irq
File opened for reading	/sys/bus/pci/devices/0000:00:05.0/device
File opened for reading	/sys/bus/pci/devices/0000:00:05.0/class
File opened for reading	/sys/devices/pci0000:00/0000:00:02.0/vendor
File opened for reading	/sys/devices/pci0000:00/0000:00:02.0/device
File opened for reading	/sys/devices/system/cpu	firefox
File opened for reading	/sys/bus/pci/devices/0000:00:01.0/irq
File opened for reading	/sys/bus/pci/devices/0000:00:00.0/irq
File opened for reading	/sys/bus/pci/devices/0000:00:03.0/irq
File opened for reading	/sys/bus/pci/devices/0000:00:04.0/irq
File opened for reading	/sys/bus/pci/devices/0000:00:01.3/vendor
File opened for reading	/sys/bus/pci/devices/0000:00:01.3/device
File opened for reading	/sys/bus/pci/devices/0000:00:03.0/class
File opened for reading	/sys/bus/pci/devices/0000:00:00.0/vendor

Reads runtime system information 64 IoCs

Reads data from /proc virtual filesystem.

Processes:

firefoxfirefoxgvfsd-fusefirefoxsedxdg-permission-storegvfsdseddbus-daemonfirefoxxdg-document-portalxdg-desktop-portal-gtkfirefoxfirefoxxdg-desktop-portal

description	ioc	process
File opened for reading	/proc/self/maps	firefox
File opened for reading	/proc/1810/smaps
File opened for reading	/proc/self/mountinfo	firefox
File opened for reading	/proc/filesystems	gvfsd-fuse
File opened for reading	/proc/self/task/1764/stat
File opened for reading	/proc/self/task/1741/stat
File opened for reading	/proc/filesystems	firefox
File opened for reading	/proc/self/fd/50	firefox
File opened for reading	/proc/1548/cmdline
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/filesystems	firefox
File opened for reading	/proc/1787/smaps
File opened for reading	/proc/self/maps	firefox
File opened for reading	/proc/self/fd/108	firefox
File opened for reading	/proc/self/fd/109	firefox
File opened for reading	/proc/self/fd/46	firefox
File opened for reading	/proc/1680/cmdline
File opened for reading	/proc/1709/cmdline
File opened for reading	/proc/1757/statm
File opened for reading	/proc/self/fd/76	firefox
File opened for reading	/proc/filesystems	xdg-permission-store
File opened for reading	/proc/filesystems	gvfsd
File opened for reading	/proc/self/fd/95	firefox
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/self/stat
File opened for reading	/proc/self/fd/40	firefox
File opened for reading	/proc/self/fd/73	firefox
File opened for reading	/proc/filesystems	dbus-daemon
File opened for reading	/proc/self/task/1658/stat
File opened for reading	/proc/self/maps	firefox
File opened for reading	/proc/filesystems	firefox
File opened for reading	/proc/filesystems	xdg-document-portal
File opened for reading	/proc/1787/statm
File opened for reading	/proc/mounts	dbus-daemon
File opened for reading	/proc/self/fd/29	firefox
File opened for reading	/proc/self/fd/39	firefox
File opened for reading	/proc/self/fd/6	firefox
File opened for reading	/proc/filesystems	firefox
File opened for reading	/proc/self/maps	firefox
File opened for reading	/proc/self/fd/38	firefox
File opened for reading	/proc/1700/cmdline
File opened for reading	/proc/1685/cmdline
File opened for reading	/proc/1689/cmdline
File opened for reading	/proc/filesystems	xdg-desktop-portal-gtk
File opened for reading	/proc/self/fd/37	firefox
File opened for reading	/proc/self/maps	firefox
File opened for reading	/proc/self/fd/31	firefox
File opened for reading	/proc/self/fd/43	firefox
File opened for reading	/proc/self/fd/49	firefox
File opened for reading	/proc/self/task/1790/stat
File opened for reading	/proc/1810/statm
File opened for reading	/proc/1704/cmdline
File opened for reading	/proc/1757/smaps
File opened for reading	/proc/self/maps	firefox
File opened for reading	/proc/sys/kernel/cap_last_cap
File opened for reading	/proc/1532/attr/current
File opened for reading	/proc/self/fd/41	firefox
File opened for reading	/proc/1614/cmdline
File opened for reading	/proc/self/task/1814/stat
File opened for reading	/proc/self/fd/51	firefox
File opened for reading	/proc/filesystems	xdg-desktop-portal
File opened for reading	/proc/1735/statm
File opened for reading	/proc/1735/smaps
File opened for reading	/proc/self/fd/44	firefox

Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.

Processes:

firefox

description ioc process

File opened for modification /tmp/firefox/.parentlock firefox

description	ioc	process
File opened for modification	/tmp/firefox/.parentlock	firefox

/usr/bin/xdg-open
xdg-open https://pastebin.com/jAC9GwfL
1⤵
PID:1526

/usr/bin/dbus-send
dbus-send --print-reply "--dest=org.freedesktop.DBus" /org/freedesktop/DBus org.freedesktop.DBus.GetNameOwner string:org.gnome.SessionManager
2⤵
PID:1527

/usr/bin/dbus-launch
dbus-launch --autolaunch 11c67417355f45d397f6be11f62e85a6 --binary-syntax --close-stderr
3⤵
PID:1528

/bin/grep
grep " = \\\"xfce4\\\"\$"
2⤵
PID:1534

/usr/bin/xprop
xprop -root _DT_SAVE_MODE
2⤵
PID:1533

/bin/grep
grep -i "^xfce_desktop_window"
2⤵
PID:1536

/usr/bin/xprop
xprop -root
2⤵
PID:1535

/bin/grep
grep -q "^Enlightenment"
2⤵
PID:1538

/bin/uname
uname
2⤵
PID:1539

/bin/grep
grep -q "^file://"
2⤵
PID:1541

/bin/egrep
egrep -q "^[[:alpha:]+\\.\\-]+:"
2⤵
PID:1543

/usr/local/sbin/grep
grep -E -q "^[[:alpha:]+\\.\\-]+:"
2⤵
PID:1543

/usr/local/bin/grep
grep -E -q "^[[:alpha:]+\\.\\-]+:"
2⤵
PID:1543

/usr/sbin/grep
grep -E -q "^[[:alpha:]+\\.\\-]+:"
2⤵
PID:1543

/usr/bin/grep
grep -E -q "^[[:alpha:]+\\.\\-]+:"
2⤵
PID:1543

/sbin/grep
grep -E -q "^[[:alpha:]+\\.\\-]+:"
2⤵
PID:1543

/bin/grep
grep -E -q "^[[:alpha:]+\\.\\-]+:"
2⤵
PID:1543

/usr/bin/xdg-mime
xdg-mime query default x-scheme-handler/https
2⤵
PID:1547

/usr/bin/dbus-send
dbus-send --print-reply "--dest=org.freedesktop.DBus" /org/freedesktop/DBus org.freedesktop.DBus.GetNameOwner string:org.gnome.SessionManager
3⤵
PID:1548

/usr/bin/dbus-launch
dbus-launch --autolaunch 11c67417355f45d397f6be11f62e85a6 --binary-syntax --close-stderr
4⤵
PID:1549

/bin/grep
grep " = \\\"xfce4\\\"\$"
3⤵
PID:1551

/usr/bin/xprop
xprop -root _DT_SAVE_MODE
3⤵
PID:1550

/bin/grep
grep -i "^xfce_desktop_window"
3⤵
PID:1553

/usr/bin/xprop
xprop -root
3⤵
PID:1552

/bin/grep
grep -q "^Enlightenment"
3⤵
PID:1555

/bin/uname
uname
3⤵
PID:1556

/usr/bin/which
which firefox
2⤵
PID:1599

/usr/bin/firefox
/usr/bin/firefox https://pastebin.com/jAC9GwfL
2⤵
PID:1614

/usr/bin/which
which /usr/bin/firefox
3⤵
PID:1615

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox https://pastebin.com/jAC9GwfL
2⤵
- Reads user data of web browsers
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
- Writes file to tmp directory
PID:1614

/usr/bin/dbus-launch
dbus-launch --autolaunch 11c67417355f45d397f6be11f62e85a6 --binary-syntax --close-stderr
3⤵
PID:1627

/usr/local/sbin/dbus-launch
dbus-launch "--autolaunch=11c67417355f45d397f6be11f62e85a6" --binary-syntax --close-stderr
3⤵
PID:1677

/usr/local/bin/dbus-launch
dbus-launch "--autolaunch=11c67417355f45d397f6be11f62e85a6" --binary-syntax --close-stderr
3⤵
PID:1677

/usr/sbin/dbus-launch
dbus-launch "--autolaunch=11c67417355f45d397f6be11f62e85a6" --binary-syntax --close-stderr
3⤵
PID:1677

/usr/bin/dbus-launch
dbus-launch "--autolaunch=11c67417355f45d397f6be11f62e85a6" --binary-syntax --close-stderr
3⤵
PID:1677

/usr/bin/dbus-daemon
/usr/bin/dbus-daemon --syslog-only --fork --print-pid 5 --print-address 7 --session
1⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:1530

/bin/sed
sed -n "s/\$^[[:alnum:]+\\.-]*\$:.*\$/\\1/p"
1⤵
- Reads runtime system information
PID:1546

/bin/sed
sed "s/:/ /g"
1⤵
PID:1559

/usr/bin/cut
cut -d ";" -f 1
1⤵
PID:1564

/usr/bin/cut
cut -d "=" -f 2
1⤵
PID:1563

/usr/bin/head
head -n 1
1⤵
PID:1562

/bin/grep
grep "x-scheme-handler/https=" /.local/share/applications/defaults.list /.local/share/applications/mimeinfo.cache
1⤵
PID:1561

/usr/bin/cut
cut -d ";" -f 1
1⤵
PID:1569

/usr/bin/cut
cut -d "=" -f 2
1⤵
PID:1568

/usr/bin/head
head -n 1
1⤵
PID:1567

/bin/grep
grep "x-scheme-handler/https=" /.local/share/applications/defaults.list /.local/share/applications/mimeinfo.cache
1⤵
PID:1566

/usr/bin/cut
cut -d ";" -f 1
1⤵
PID:1574

/usr/bin/cut
cut -d "=" -f 2
1⤵
PID:1573

/usr/bin/head
head -n 1
1⤵
PID:1572

/bin/grep
grep "x-scheme-handler/https=" /usr/local/share//applications/defaults.list /usr/local/share//applications/mimeinfo.cache
1⤵
PID:1571

/usr/bin/cut
cut -d ";" -f 1
1⤵
PID:1579

/usr/bin/cut
cut -d "=" -f 2
1⤵
PID:1578

/usr/bin/head
head -n 1
1⤵
PID:1577

/bin/grep
grep "x-scheme-handler/https=" /usr/local/share//applications/defaults.list /usr/local/share//applications/mimeinfo.cache
1⤵
PID:1576

/usr/bin/cut
cut -d ";" -f 1
1⤵
PID:1584

/usr/bin/cut
cut -d "=" -f 2
1⤵
PID:1583

/usr/bin/head
head -n 1
1⤵
PID:1582

/bin/grep
grep "x-scheme-handler/https=" /usr/share//applications/defaults.list /usr/share//applications/mimeinfo.cache
1⤵
PID:1581

/bin/sed
sed "s/:/ /g"
1⤵
PID:1587

/bin/sed
sed -e "s|-|/|"
1⤵
- Reads runtime system information
PID:1590

/bin/sed
sed -e "s|-|/|"
1⤵
PID:1593

/usr/bin/cut
cut "-d=" -f 2-
1⤵
PID:1598

/usr/bin/cut
cut "-d=" -f 2-
1⤵
PID:1605

/usr/bin/cut
cut "-d=" -f 2-
1⤵
PID:1608

/usr/bin/cut
cut "-d=" -f 2-
1⤵
PID:1613

/usr/bin/lsb_release
/usr/bin/lsb_release -idrc
1⤵
PID:1638

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox -contentproc -parentBuildID 20230522134052 -prefsLen 19257 -prefMapSize 230809 -appDir /usr/lib/firefox/browser "{aac6f8f9-8a5e-4d76-ac17-101b4ae782aa}" 1614 true socket
1⤵
- Changes its process name
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:1651

/usr/libexec/xdg-desktop-portal
/usr/libexec/xdg-desktop-portal
1⤵
- Reads runtime system information
PID:1680

/usr/libexec/xdg-document-portal
/usr/libexec/xdg-document-portal
1⤵
- Reads runtime system information
PID:1685

/usr/libexec/xdg-permission-store
/usr/libexec/xdg-permission-store
1⤵
- Reads runtime system information
PID:1689

/usr/libexec/xdg-desktop-portal-gtk
/usr/libexec/xdg-desktop-portal-gtk
1⤵
- Reads runtime system information
PID:1700

/usr/lib/gvfs/gvfsd
/usr/lib/gvfs/gvfsd
1⤵
- Reads runtime system information
PID:1704

/usr/lib/gvfs/gvfsd-fuse
/usr/lib/gvfs/gvfsd-fuse /root/.gvfs -f -o big_writes
1⤵
- Reads runtime system information
PID:1709

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox -contentproc -childID 1 -isForBrowser -prefsLen 21807 -prefMapSize 230809 -jsInitLen 238780 -parentBuildID 20230522134052 -appDir /usr/lib/firefox/browser "{369e91fd-9e47-4cc6-abc2-04e5dc540de6}" 1614 true tab
1⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:1735

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox -contentproc -childID 2 -isForBrowser -prefsLen 21475 -prefMapSize 230809 -jsInitLen 238780 -parentBuildID 20230522134052 -appDir /usr/lib/firefox/browser "{26cb6d9e-fdf8-4528-a45d-75bb79a01eab}" 1614 true tab
1⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:1757

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox -contentproc -childID 3 -isForBrowser -prefsLen 21824 -prefMapSize 230809 -jsInitLen 238780 -parentBuildID 20230522134052 -appDir /usr/lib/firefox/browser "{a10ef3d6-62fd-4cdd-b273-4d8dbb77bcc2}" 1614 true tab
1⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:1787

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox -contentproc -childID 4 -isForBrowser -prefsLen 27881 -prefMapSize 230809 -jsInitLen 238780 -parentBuildID 20230522134052 -appDir /usr/lib/firefox/browser "{d4ca6553-4f79-430e-892e-17613d5d9593}" 1614 true tab
1⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:1810

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1497

Credential Access

Discovery

Virtualization/Sandbox Evasion

T1497

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

T1102

Impact

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...

Downloads

/root/.cache/dconf/user
Filesize
2B

MD5
c4103f122d27677c9db144cae1394a66

SHA1
1489f923c4dca729178b3e3233458550d8dddf29

SHA256
96a296d224f285c67bee93c30f8a309157f0daa35dc5b87e410b78630a09cfc7

SHA512
5ea71dc6d0b4f57bf39aadd07c208c35f06cd2bac5fde210397f70de11d439c62ec1cdf3183758865fd387fcea0bada2f6c37a4a17851dd1d78fefe6f204ee54

Download Submit
/root/.cache/mozilla/firefox/1owhtuat.default-release/cache2/entries/039090029E64BC91E87E77199A6A6BE11FC39B6F
Filesize
142B

MD5
c8101a2a294288ea075338a5855b7dcd

SHA1
ff1ec1611e544f1d1ab68a4573828a66c298b0ce

SHA256
3cb75f788f655f011fea67c80f7e4d7d08563be0472a575f9b31a099f1287fac

SHA512
9d22a97345aa67fb3e5b5bb1735f4e0aad223ef6a0687144a285fe533839405583e833ef7a8716a2c000af7dd71afd26d6bda42b384f8d7c3831b5e303626f16

Download Submit
/root/.cache/mozilla/firefox/1owhtuat.default-release/cache2/entries/0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F
Filesize
102B

MD5
83216a30a1e1efe42591b15be090dec3

SHA1
21ee20bb7f9f7b863344e1ae1fdc093ecf1b24ea

SHA256
0314f1ddccd73ed605886572a23387f7f89d71c05963ad48381f8a72aaeb2927

SHA512
fcfe9baff4bd50d498fdc8fc9602db4e9db01ada63dc33138d3bf198552fb9defe43f64ab686723db03215fa734ab18cb9f03d3d9f8fd6a1c9a96e4603093ca0

Download Submit
/root/.cache/mozilla/firefox/1owhtuat.default-release/cache2/entries/285D8CAD31B3BD2A60E62E1380423549DB3DAA27
Filesize
19KB

MD5
05c40722359a6ce13d3586ced3ed9fc5

SHA1
f8e0a55f58bd84037007a013d48980e4de6c0a7a

SHA256
6723cd6b598582e4256fd5622748e9bbd11e9b0a8e3d8b7d304ccb5a476404bd

SHA512
52bad1f4f97b31d2bb5b6f7d1603b1c4c5634a634a4b2f16297dd8fbeb6640d2d122d507429b238b221044879f0c0e7466691b6da6cc91854f46a5a6f00efbb8

Download Submit
/root/.cache/mozilla/firefox/1owhtuat.default-release/cache2/entries/28656471537313AEAB976D33DB33BF0CE0BE0EE1
Filesize
13KB

MD5
7d2483133cae96fc7d61e492fa484f5e

SHA1
a4900a7e35e33e33f4a2ebd52a80dab91d83cfa1

SHA256
82610fb173ba97624d8ad0748d9093de5d4c2ba82dea64180ae66f3265b74c49

SHA512
a715dd4f8c3ee0107e5fb465537b3b904100b151ad3beda485ddd0ec4970f2bdd5901eb8b31c1a17eea6e40bb58c2157f2718f8614a542ef9fd902c6a360cecb

Download Submit
/root/.cache/mozilla/firefox/1owhtuat.default-release/cache2/entries/2CC02F170199AEBF0D1169DB3FE57CFDAF680A84
Filesize
7KB

MD5
aa1caa30a87d9f5091e103fa0ef1a4b4

SHA1
291cba1df634f93d1f8e091419bf3d82918bf881

SHA256
b79d58a32422c997dc62b35b8504bd8b7b0136b73d64a7d8d2026e410147ada1

SHA512
a307ee7f6d150d5b1719f473c04429607923304c49d1aaefc89f04bedb225deedfa2e2febf9677d09caee88408dfbe49314133af9bfb428e860baff1198c94f1

Download Submit
/root/.cache/mozilla/firefox/1owhtuat.default-release/cache2/entries/31CEA0A266057828398F98ED6E7146BE378E5AE4
Filesize
7KB

MD5
9f4ae1e474205bc7456c11e1d5aca2c7

SHA1
515a9efecc3beb1c143379a39c1c25611fecb3a3

SHA256
255f2ebec6703525f972a9096a9313c112db3c3625f5a4c598b64bd0b4e78b65

SHA512
0db5fd97df190810685c807746dc9174a86fd840836a672ba6b34c4d10d88160c0052b394dd354ca9111c1e99d7b297facbfa20438579fd4699569bc438217e7

Download Submit
/root/.cache/mozilla/firefox/1owhtuat.default-release/cache2/entries/3D1E19D09F398691ABF62061591970855193B42F
Filesize
13KB

MD5
9584d9f292ebdede43cd37e6c8797c67

SHA1
4cadd37e5d2cf2371b104d738091dd78430b3231

SHA256
bac64fbdde9b74ef44fd0692afab4c550075f6d15c9bd78046362e37fce7aee6

SHA512
715fa183b04e9a499a5cd0b446151a8b2407c43f624d5815bd7a1b04a6ce0f46bd1251d78654ccf793966dbd58205b348d2a90a0e16d21631248f9a30eacc3c3

Download Submit
/root/.cache/mozilla/firefox/1owhtuat.default-release/cache2/entries/3D1E19D09F398691ABF62061591970855193B42F
Filesize
13KB

MD5
09a8069e490c46b4dd4edd9f4faaf2c6

SHA1
d0b96e7cc7ab57685af9de0f1bf64fe24d67ac37

SHA256
dd107ee2bb696ff997a3828947c9506027fac0467937b4a64667260227d544cf

SHA512
af670c417b351f4084e296a08f2959e446b61a03a6d4e1cec758b2e0b0f608bfffb833e8d781f93796ce67bbb5ee646e04c6ff72acee4c67dee86ad6466cd7f1

Download Submit
/root/.cache/mozilla/firefox/1owhtuat.default-release/cache2/entries/4028D2178258B96725AA4A22D1764370B31B80CA
Filesize
30KB

MD5
2927b80a8d67893ad4c1f678ec4866d9

SHA1
8e4c744748470260d474d0b6db6bf6c4da9d9dbf

SHA256
13e6096ed3a827fd5a869241c05cbf0fbd9bb72cc870c9a9c0304def59417703

SHA512
bab24633b48b3d67f8d7bc624c987a0ad6cd330c21c7534fa9f0d4340d6315394b265e57a202e3acb2fcfffa37d47ff534b73d8ec18cd9b70fe29e0d41ca555c

Download Submit
/root/.cache/mozilla/firefox/1owhtuat.default-release/cache2/entries/4028D2178258B96725AA4A22D1764370B31B80CA
Filesize
30KB

MD5
63aba15c014978e205a9828fb7e694b8

SHA1
8425fcbcc4d927ef37469d96d336d7ab82da4e15

SHA256
74116ec263737f6e4c63a7acbfe4840c9847e9397ff82abb6c49ef85f241d7c8

SHA512
a5aec764c5b925845ab3ca03799fdf658957055076d7efc0dfb1c1e7bfc4ad03315e645be29022083e65f4d4bd2fc634ce4e3d21e50dd490a7ed7d8940d9639f

Download Submit
/root/.cache/mozilla/firefox/1owhtuat.default-release/cache2/entries/44230749A38B6989F56217B435A03E84CCADE62D
Filesize
26KB

MD5
097bcd4c656a6b8df077e947fade12a5

SHA1
5d1fe3408f5677caea2bbd10d09371021e90ffbe

SHA256
79ff7ce99cbb025451c5c7b3136b336591e624d590c79a4a876942a9f5aa5a8c

SHA512
8682affc3a77922a2dac5e2c13513dbc3980c287f0ec6ad57aded841cd8a7472fa2fcc99185fb4a7126ff58e30a6a7c3ead5793aff24d62180ed02bcab692f00

Download Submit
/root/.cache/mozilla/firefox/1owhtuat.default-release/cache2/entries/52982E5CD87FEA4180BCC90DC6449F8ED8B6DCDA
Filesize
13KB

MD5
d805a623bd6f2ae15c4042de9faf5a2b

SHA1
c8581dcdc8b4ecef2873cea673d2f4445b0b0517

SHA256
68c724a37817948e0b9c91a393c3193a0409e25d2e9186b8a38aa8ebff982df3

SHA512
74223319bb14bfa0c68a54c063aff3ae47664b3d7abaa523dae11c554e76c1bb902e41c6ee2951d4076297790e118741d98ba7d8147cfcab4741f7e6b7af49f0

Download Submit
/root/.cache/mozilla/firefox/1owhtuat.default-release/cache2/entries/6D89348819C8881868053197CA0754F36784BF5F
Filesize
10KB

MD5
ee87677ec51447cbf6add7edfe34a071

SHA1
82e9c556af68d360384c8a7990af013761b78396

SHA256
67eae3e6ceaca1482c58fa347415543bdf0cb56e02fe29d5c4ecde31bf1fbe0b

SHA512
f0cb9917d931703c06a744f7a51a7dcabe7294b0545dab4929d0d280ef92969ec63a22b9af919ff7666e1585a21ce82930eaf87239bf0232a2afff811809d8d9

Download Submit
/root/.cache/mozilla/firefox/1owhtuat.default-release/cache2/entries/796831FC294472638B7C6C078DD6EA3A59F19CC0
Filesize
80KB

MD5
17271cc97f8abb73b37cf56b1eb0b687

SHA1
026b9f582b337e53f87f2fb648f7ce647d95c9a9

SHA256
66f191e793e0f2afd92ab76e070500233b338ab55fbb94050c771045630552db

SHA512
5af69f6aeb68cde41721c8d69a0d38eedfde052bc4321bf74db2c1c0f785a0112d573111a3fb3d623ab7d234a47a76c8016ace409609b5d62fbbb82e034a7579

Download Submit
/root/.cache/mozilla/firefox/1owhtuat.default-release/cache2/entries/8791A07EBBEF28E477E12177731CCD805807EB20
Filesize
40KB

MD5
0598e321482553b64fb63043dd46c1c0

SHA1
c12e38d29e7d01e9cf0e107ddd064bac696aa299

SHA256
52018f3ce15bf6bb2a1841d37df937d5c0a80616a73ccc7dfe1f5574771748a4

SHA512
1162b58546b23e3edfc84b3c1ce8ef95ef7a8434733641297b2bbe187cab24bdf8fb70686bb5c257000df3579479c2e552d7ece7ed22445db1ba803a2859c5a3

Download Submit
/root/.cache/mozilla/firefox/1owhtuat.default-release/cache2/entries/994A8588685E6A467B82BF31B3480BFFF5D70D6F
Filesize
103KB

MD5
9febd0b3520811fcca45ced53587b31a

SHA1
d4769fa5d0ab53dcada9a0f4066ce982d820e2c3

SHA256
650028a043637934d879153e6a0f79dc4581e1b536c3069a4825f8f95ad4b25c

SHA512
3a02977bfe0f41161449cae9d4983a3ab86496f0e3792526ecf62066735702775d1496913ae5ff3f48123532178a8912d762b2c383ce124e96a6d5d476cb19a0

Download Submit
/root/.cache/mozilla/firefox/1owhtuat.default-release/cache2/entries/A7F03D97BFAFDF3CFA1D9C5169828B4848E88233
Filesize
8KB

MD5
a3e2d4bd3ce3d14aec6619c9ec4db32c

SHA1
ea5e52607b3adad0fdb15347ce7dd003671fc7fe

SHA256
8ca6a5b5db0cf833fbe8ec5011ddd7591835f682267e4bd2f2603a5ceaab85b7

SHA512
b006d5ece5889d46659c777b1546b94616e891d7fd71155dccf9cb758bfd5b14edadfa2600b73dd6e875728ba775b2b62157107af7b9c4d62f33155f7cc7f846

Download Submit
/root/.cache/mozilla/firefox/1owhtuat.default-release/cache2/entries/D1C98106794D68BA02DB9BC79029D8CF7F7A8787
Filesize
30KB

MD5
77284e182188f9cf4b793e128ace82a8

SHA1
9edbf713ecc45f7508c06fe90901a734ed76a4de

SHA256
f5341d83c501925db0ca608dd4414ab0ca0dda12e294f6bad292776f53d0dfe8

SHA512
2065a6a240d287d8dce6bb88d68f576c9f69564548a337457d9341f661c63d75b20d9d798a4447f15655269f7d867da81d2cd2bc35091d4bc56903c95d87052a

Download Submit
/root/.cache/mozilla/firefox/1owhtuat.default-release/cache2/entries/D23F7952044A1A6016B80DED46FC563716A295DF
Filesize
9KB

MD5
bc91bd9c65d50015a78ce6e1174373a7

SHA1
2813bb0911421985158eee78a48b8280aee15548

SHA256
81e1c14097218baa49ebb20e8c9d3b44f393dc99233d2d7ebd7b9339cc0cb394

SHA512
5aa11cd83004f95bc237170485fca2f175533340e00d81a9ddb302420f51d9cdf8c1c96a65ffc9d20ff0835af7eb073ed4a3e3bf5d546a11ebd905db62f072c9

Download Submit
/root/.cache/mozilla/firefox/1owhtuat.default-release/cache2/entries/D37FD7021E24659A7A523B1495DE9C2101DF2D06
Filesize
149KB

MD5
bba5d638381ad168b47f979f10b08a6d

SHA1
2faf111aace4fa11e20431d326f31e81a17080cd

SHA256
2119e09ca72f9478d23b2d5680862de1569f6c13b31c3e5669d4d7e7bdfbd041

SHA512
3f1632ea3760f8e7afbe5979d66d723534d52c17416994e09e6453215b5035f4af7296a483053d56624662a743e878ab709bd898e8c822fcb486293d7d5ef9a2

Download Submit
/root/.cache/mozilla/firefox/1owhtuat.default-release/cache2/entries/D49A22B70537226BF17EE476ED9E2862806951F4
Filesize
13KB

MD5
bb92126b6e49f4157c71dbe7c6be14e1

SHA1
275dc9a836e706cbdbf5a22842edc5bbbf3a19b3

SHA256
47b3df1255226df81e765768fc6aea1dc71ac576b165df36475a803a4b654d67

SHA512
880e85935fe657f1a080b3c63e95504224a502176c55736f64d5ad5b46ba3137d1a515d91642a9e4d781b07d0db49554e1df8debf4640d82adba94819f28e755

Download Submit
/root/.cache/mozilla/firefox/1owhtuat.default-release/cache2/entries/E31AC3A5E0F12EE47B0B2BC000C8EE197D965312
Filesize
7KB

MD5
2a0b3fae39b9f8b733dd10cd50456294

SHA1
4dc13b986f472d5c61f765bbbdb3d78682d62088

SHA256
f97d473fcabc79d4fbb446cc29f3a86f5af1adf29416b2f52d269406e08c2f26

SHA512
9e6117e50f8bf0053b77816652845295de0cbc2b6b070d35dda1fa157d56ce40872f496bae968cba07a35a9316d549179ee75346fcfb05fa4635bc9f85c120b6

Download Submit
/root/.cache/mozilla/firefox/1owhtuat.default-release/cache2/entries/E4705CF55E646EF995EBEC8482741EB56B27DBED
Filesize
9KB

MD5
e70c5e1944be49ed53ab2b7a9d8b5aeb

SHA1
4c4ab9500f85046cac9e22215a66192221c962bb

SHA256
e7c81fcd6493e688e50326b526fceef7eeb638fa69840a45851f16b4b4571a3e

SHA512
ecb07f25aed3ee9f092046b343e29b656eb1528ed913d3ce28263d6b0aaaf16f4873cc9e29fa17c6fa2cb8fe2ae45030eec7565da5c0096c48dd43e130049ff0

Download Submit
/root/.cache/mozilla/firefox/1owhtuat.default-release/cache2/entries/FFF2AC76EE8D16D89C0E6E50F25434B5A9F5E8D2
Filesize
99B

MD5
a55b19c48f4e4d293f9084ac0c8982d9

SHA1
88cde7fe3e64df5893877fd1156a51064783f2ea

SHA256
38e2a2f8615989910c25a6b36987ed01347858721bd888b43eae235bebe23a7c

SHA512
f4a35acbf4389e2e4591b4f4fca157af9b93e8570fc0a18923d43c6aaaad9e0b0f1402b8620025f7a90e2c33d945c2d9911c4bbb8c97c919144a5a2c9205211e

Download Submit
/root/.dbus/session-bus/11c67417355f45d397f6be11f62e85a6-0
Filesize
466B

MD5
b4daad4269771c4d3bc09cf8d6bc7940

SHA1
3756a54795437e853a925f22d994b68d4cc67886

SHA256
630240ba871cc00694ed3daa6170315b70a1a2b16e134669ea9ffdbbcebdfc2c

SHA512
368dafff51a80d860768012adc3edc5f81c942058f202fa9d966dc77fd7ad4e9cbf8f1452b2fba2568ec86ad70fca234f59778953a7bebfa55bbc1bcbbbfbf6f

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/cert9.db
Filesize
224KB

MD5
305c578d1154f199fb4950c5d9d15376

SHA1
e66035b85af271dad47da603122f3bc4e9bc79ed

SHA256
97fcdab739e721e0f4bcaa486fbedb4c72727ef79047a7936a56beb579ee7aae

SHA512
5b3a7926cfa7b1605c9c90dee3e73cf432ddf4847fc9cc611e18af46310cd5aa03b753c8f0b565c17aad6e0342426bc3f7fca95048bb5362110ee6f10daefda9

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/cert9.db
Filesize
224KB

MD5
5170ff444b632fefc22bba39d70d5fc8

SHA1
d82c57b041134792f457ca57c76a7725f79e7a69

SHA256
fbc9fba24655851f5a9b1a13712ccbc959283def722fd576c8dff08c63166c02

SHA512
05691c13fba20fd96650ccb69341400dee7784f456ac94e745b8a78f528058438f5049b333e4e6f98f075660d02e9306025eae60393dc724b1a44c9888d090b4

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/cert9.db
Filesize
224KB

MD5
293f1add4576d85cd9a60930bbe58ccf

SHA1
3f5db551fee696616ecc0087c686b4d9aad25942

SHA256
0e0a01757ed519ce511b4f17ef75e37b1037feab11971dca62961f3b177c9a43

SHA512
157f97a988fdfdf2ceabefaa02ee8857f26eeb648c7d916ef2d981496f515bc4fe954ed1091e5a8fac889e2b7333159ba6aa944773a91180872c12ce5f57c56c

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/cert9.db
Filesize
224KB

MD5
02fe914c4a583593631e9eb4415c699e

SHA1
c691955bd49445c16924144a3ce1e9aeee3146ec

SHA256
dab402246170fa8c04206b8dc01a6644ac9c48530111327cedf87b8349cdb250

SHA512
d581a32609040fa899e6d8bb0c4ff15aeb277ffe1453616436f821c0b343050818721042796c46edbbe9162c8b9ea859e8cf59a704c0ca68b905a9c565280e05

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/cert9.db
Filesize
224KB

MD5
16d6846ef867e561fd05b324a0c34141

SHA1
d0ba01827a112a5af70fba05ca2e296f2ed258da

SHA256
201be73493c1e2595e69443e70a90051393015113a368b7a27572b06d3ac0f1f

SHA512
8e60a7bf366a380bc53c2499eecaf2568e1b584d7bac75eda0263e4517429b8ee3e48de8e01287f7ec2e05e3a2710fc90b44618982fa7402abb87b72238ebd0e

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/cert9.db
Filesize
224KB

MD5
6bbca261907e4989484406c637c130e0

SHA1
a2f235e7ccf6774025fd0d9c322ab1c487ec19c5

SHA256
d393745e7ecc38fea694803bdbaf79a45e1835c04e3d218d0beb6d66fe1b0d92

SHA512
fc4a8f777966520db29ee8fd1afd331f19b069f8e9035d8e3c99739730debb95ddaf427dc6c2668d7ef441a5f879706bcf41d5843c7c36486a09e7ebf999a95e

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/compatibility.ini
Filesize
163B

MD5
fe452b7294d5928a9a5863b89ee0a6bd

SHA1
a5d4c245071fa96476ba48b4725bdae7f1b7940f

SHA256
d5bfb07561606a19aa96557ea109b175050dc0eb805cbef9c813503587d77900

SHA512
dc37d8507f08849e3382d2dbafd4a64555dbd57a288c95131e9aefb366630f1585811a9e1456b861bb9d2b816ed88b18ffb7580cd92b41bb9b0227ce1363843e

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/content-prefs.sqlite
Filesize
224KB

MD5
1fc2e7b7fe2c5be305dfa9a2bbb60771

SHA1
4967389dea050001cb1af3ec799edb7805c3abb8

SHA256
1953edcac737d1ad3de6fbf69671163882fdc0be5bd21d00378d8d8c753c757a

SHA512
fba536378ab9b5f04d92f1029b92d255c7da445a29e2527647bc16e57d02c179de1e78a2de11db1b00cc54c24d3715980c84c0cde103f47c6150f2e7bb8f93d5

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/cookies.sqlite
Filesize
96KB

MD5
9535f5fe817accc769c2c1d3354db39f

SHA1
6af62cf08717cf3bfa84eb1a7b311acf522ce560

SHA256
c53c15fcfac2bb57fdc88d23f932fc244dbaf4020f0f6eaecf0f77a37c21f8c5

SHA512
dc9c2c32eb42dda0a7a711e143aea58c603c1e9d885c3677e9fe86f525e1b0b32a46e240756263e56510b07e764ba69f2de13b90ec18210678242e10cfe17837

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/cookies.sqlite
Filesize
96KB

MD5
5caa766855d5613a999f71b7812d6451

SHA1
ad0d9a52a0d5cc7f11858301dbe47377ed99ee37

SHA256
3a8ce2b07e3e8678a13aa58ef5b942c4dccd8f9c84511bdeb8847ef270797e27

SHA512
17bb0f4c87ec178910795b25ce85e74cf599190c769592472c3e872f42930c93f28faf0ff3e448816a9abcc8af0459852bed52bee08cfe25d068879c6dfd8eba

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/favicons.sqlite
Filesize
224KB

MD5
3c0a1ec298284608bfa51081ea539be3

SHA1
e51b58f6fe89d45fd8a1d935b51da172d5f6f32e

SHA256
34c4fe7ab2d3e44f193b489ebe84c17d67b336546af9ef231897ec09d7ff16f2

SHA512
8550f530377f7a98c46a6989bec2c43ed644274509a5b987e8e0d034bf867b3315dcc75a2c851a5ac43a45b40bf51c789d828a9a69c02157b3e900467341a28f

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/key4.db
Filesize
288KB

MD5
ddb609a348800e8ab54000781fd24554

SHA1
c58aab6d68483535eb425bb8fa280d5edf143cfc

SHA256
7d0223d9a655ccf4dc7afe60b29ae5feb1635f129de43a1420efdb7634c1cdd4

SHA512
7335c17b2445398c4ed97b47d4abc362ccb3771c1f10c186de4d7ce160bd00c8cf32af9fa06703dd191e2ccd44c818af02c6d034f34480a76264b4c8151e6973

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/permissions.sqlite
Filesize
96KB

MD5
232fbc22dd03a8ec41edde02bdbea61c

SHA1
6ab4b39bca95418c52f7f861fd39e5fddb9cc7b6

SHA256
d88bf367aaf79efbb2e8fbdb1dc5bde1c1c3a53e0f4d8188027a63ec55d5f5f0

SHA512
055f1595f4a327347671db53cec8d89a310109d3f871c567e3d5b654b956fc0369d12437f7dc6d9327b973008f1327ee0dfdb5504f1b3cbe00da29941b1e5892

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/places.sqlite
Filesize
1.3MB

MD5
fb3c4acf306acdb86ccbb26f260ce6b4

SHA1
361816627614d8690fada45ceee4c0c92cad23e8

SHA256
e16a9f8cc584a449369f7bf4a32dbe10cb910aada95ed2b710249fd3eb71f08a

SHA512
1bf3e351da77acc271c08e79e37413965db746ea2567ba3f23723d0eed62651514f568f3786d41b4ecfed36df470ecf40849303493d529f2dea8c4d8660abce2

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/prefs-1.js
Filesize
1KB

MD5
599c41096086adb0fcfa6138a4d7fabe

SHA1
14b7960c879a56b42b1c653def007b00fb320ea2

SHA256
bd3c40a6e2bcd19d8d0d124d4b036156c51b32dd59d8786599da967e449b2a4b

SHA512
cf359fdb64ee3e5bb9d27e5d0457748903d1a6f8236784df4223c05aca2ef511295cc64835405293bdb3a1cbc884a972167198bef3a38fccf8be002ee4c99ffa

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/prefs-1.js
Filesize
1KB

MD5
76e0a48738dbe107efa9b021ba433c06

SHA1
8bfe28cba210e8eb33bcfbf0a6b2950b73d45eed

SHA256
9d986fe0ab206d9186bdad6dd290c05782dd195ba18c83906d155cea9d1346ff

SHA512
4a903338b6a44c477dfc9237d3674eb976a2d3432a79fcd91174b57265e474e143a2a42b59e5591d729b4a9471b044b0d19168c7b2dc9fbaf67227ec87690d2a

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/prefs-1.js
Filesize
2KB

MD5
b2f0299ffb4441b59fa591889eebd8a8

SHA1
356284defc494989d0a37803144553618d0fed68

SHA256
e58321e9c753da6b86fcb10cec8e217c4907722226027ae6d4b09bd62099dc37

SHA512
6ebe9436bfe4336d7434ebb7bc60ca2722e5cb873527735e51ce0e6a44e41d42a472268086b5937b6d737a4aa3debaa6bde99447d7c6bbc68c1d6f4b3bc40cc3

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/prefs-1.js
Filesize
2KB

MD5
05cb79b36cc709aa41b4ca09f20b3555

SHA1
b78215f012df00ae49e95f30800151fadd978871

SHA256
d733dea719a1f72b0d5f455cf5e5ae4e17b89accf59f38e7089ba068f6a20016

SHA512
ccaa1237ded22cb4a156bc97e5c3821ba74a2b332eccfafa725c28af2aefc55dbb1e74618e7819e1bafce30e0b82c6946349d1fd168d4040267236f045cdf9c3

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/prefs-1.js
Filesize
2KB

MD5
49e30b6f2e3051bb32e2aa4862c1c98e

SHA1
0284d526c4c37b4c893ba5c238f57ec29e9b1401

SHA256
504a3adb863017e699ecbfff7eb1f00c05162d31bb548ff4c35efd02635d4f5d

SHA512
542a2c374a429b95723bcf1a7f7e658f21282b70f61dd8a6bc60a5e4618c3ad390213eb2a48e623391f7bc8821df90bcbff6416e58fd8cf279f198231842789d

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/prefs-1.js
Filesize
3KB

MD5
e488ffaa89b7884ed6fa0e3e1ecfbb65

SHA1
cafcd96f1f5a6712caa6c1c62db99092d9bf72d5

SHA256
522616e25962bf2c30622a7c8a3742661b638d07190b7b7b67fcf1061f0f90ec

SHA512
ce767ff10108a5aeddc646a8e5f944ec6175549a7624879ae7e0c92007e2c32c563dc11c0c88019671fa986f6c0fc72baeb5a3e280318030617a11541c5175aa

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/prefs-1.js
Filesize
4KB

MD5
1961bac4cdf72e6be1958b54b60a2628

SHA1
119a051de4434c070d4699e1f738b1c8f5c26a4e

SHA256
e24693cb2bd953d4ab5f7e2b89f4f7cd1d7a4c644ce4fcc3ad89e0e6818fe95a

SHA512
1763dff77d878ea9b682e454ef71a69439ffa81f49302b7a688798e00aae13f2ba8f51c50477cbe48d1360ef1b8abeffe948f7e7552575650b12adf5b9c127af

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/prefs-1.js
Filesize
4KB

MD5
15bc23dd90ac0a710195fe4241f3679b

SHA1
1f19935705d48ddd13300511c3b874a1fec95ae6

SHA256
c1932a3eb74abbc8d7ca9d855cd26752eaf65a04311d6bb5115c962fe26b48bd

SHA512
775dd269ea13cbc9fcec0e0690db5ddbf500c84129b3d99e5f029dc31fe045762891052b5bbd396ca5df2f01d41b87610b50255d74473ad89442766405880498

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/prefs-1.js
Filesize
4KB

MD5
8593097e28eaa687586a23bfbab02ce8

SHA1
e0fbd6e09f3cff519590c737d369e7fedc84d47d

SHA256
27d3f1ca4cd4f224fa7308552fdfd41c47aca9603fd24853075be125a61e1c0c

SHA512
edd36369ed7182774eca6b33e7300d00b55478074a015eda7abd3b739abf82ead6acbed8b092dfc33a942c83afed38c7cac9d2e5bb888e9f5bd1abbba5f0b7e7

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/prefs-1.js
Filesize
4KB

MD5
1d5828fac265364bfa50e64329c5643e

SHA1
4534df8bf2c0758db2b607faf4889c7c367e6e0c

SHA256
2ead50744325a5d0a0cf78d6a3c85577f23ac0f53afc1bd5f90e8a5c283b6872

SHA512
f08fdec19b8f1b79fb04eae86314b594c08aaf8404a81dc94e69a093375ffcc24c803e77e188c4fc3551a5235611dca9c5f88466c440c3e0729b26f3af6f038c

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/prefs-1.js
Filesize
4KB

MD5
e34813f994dd22c0eb18de20f2d15441

SHA1
7d4c932a514b30f38f3474f5f6ced942405fd48d

SHA256
c388ed397e47921f0da168bfca11ad33ef623438877a4d9d5f7a3e07d8f18e97

SHA512
ddba021e4110ff345f9c8e5fbff4c1a01b7164902a35b6662abf6a6ed45e3bb36b88023f74775c99060d15129205f25bce0870e72c2bd22f0abbc6e775d9b3d3

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/prefs.js
Filesize
776B

MD5
0c1ddbe93e206e49c2704bceec615fb5

SHA1
9438b22f009fdcb29f838d44fa48643759ad0220

SHA256
cb0774332f26a11e4883875c2d4156388415457790d4feecc1906c93f5367a99

SHA512
c4ee091edbd873ddb7b91bcc0e2f7de4394d5010d3057fbd5639c524529eae165d9ed3526f0319e3ec6fc909d3a580ce6fa3a1659eae45d9dacdbb15d3dd0dcc

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/protections.sqlite
Filesize
64KB

MD5
c7cc11494c34e02565df83d17beb33b3

SHA1
f379ad7c0fa73476d3828d8a89ef843046332c12

SHA256
7ca17bb171e22b4ec498c1d20587b30d62d773b114d0e66bb00ec874506eb85f

SHA512
0cfcb15a985a35e917c9652721b516e2d1c358c6db3dca4452e866d250b6269c4cc69773277f5ddd5a0c5a338f95d9f6134224f0097df194985161cd3d47cfd6

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/storage/ls-archive.sqlite
Filesize
96KB

MD5
e0c613bfd69956a19ce2dc5e925aa223

SHA1
14accb230edcd6cb76967cdc6d4e5686db96b5df

SHA256
0d4cb11f6364c46a75f9eaddfca5c660b90dfd515df3afcd5e0baeca28a0f1ab

SHA512
01643c0131a392be92b3f281d7f633c1f502bff19090b0d716f1ac66aefecc3fcf92f393bef66b03089c9b9c6d8aaeb711b6a4f29d5a6729dd188c838f2272d1

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/storage/ls-archive.sqlite
Filesize
128KB

MD5
178d71e5529d637ac62f7e75fdd75896

SHA1
339f2b949cc4c207b66aea11137448ba28d36dcb

SHA256
7b0050f1bfaab85c8f9067ae7d7369056ff752c0c852ef1462a96c22169004d4

SHA512
ec0e0105fcfbbae356dd55efbcf92975f35bbe5cb93fcabf4c08443e871957635d14830b27c4e1ddefbbaff8f9b7ec3590bf417a9442e1d7ee3607d14d56f664

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/storage/permanent/chrome/.metadata-v2-tmp
Filesize
42B

MD5
d3f99695ac616f9e7e81ab55bddc9556

SHA1
2c40d1e9e0ac36a571c3a5298090019c68994438

SHA256
443b122af202012be300a7f0a09467e96e6851459e852e3a9215ca6e23aa9686

SHA512
6190f91f97b21c37ef6be2d34b8e9e6b2373fdc29036e1d7b9f7c37dfb2549339cebf568673068093829d134d4ac4135298c049b9a5dc9a6fcb46141ce64c9c3

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/storage/permanent/chrome/idb/1451318868ntouromlalnodry--epcr.sqlite
Filesize
44KB

MD5
a8dd7ebaad5528b23f82ccb1534cea18

SHA1
600daceacfb5cf9df0b66ba7dce4516b2ac4df70

SHA256
e5b0d02c18ae36c4a220f41fd97c66060c17aaafcbb324a57ccdc2707c44c4ec

SHA512
67f867a8e2b37fb6bececd5ebc570ca594ea329142badd63d1281d5e735f515a5e329abc6eb9a9d3465aab0a08541b4888018d859964f160a52345ab93532bff

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/storage/permanent/chrome/idb/1451318868ntouromlalnodry--epcr.sqlite
Filesize
12KB

MD5
084242d351622448f77a385c253ecaed

SHA1
d999f7b26a75745ab42b384b8861b84cc9742382

SHA256
fc681fa416dae2714a041b50134bad01d68b429002920620c32e0a09e46cf50e

SHA512
cf3b520845292344119d4daaa8b84add48e4cf078b5db6e02f5c66c4fb9adcd658f1e5f7668ac6b19720b5355fd10949918991da1643ac030d24b3b3a7e86ee6

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/storage/permanent/chrome/idb/1451318868ntouromlalnodry--epcr.sqlite
Filesize
16KB

MD5
798a7cd24f1266a64eb43a93712e7546

SHA1
5531fcabe897de5fcb22144ea3fa730f227bf423

SHA256
c1f029baef8a5b4f76159b9cfd70559ca31841c8d0c5d7b725a8ffd657848155

SHA512
385bf9531803d107afa0ee2ec32fea8b55bfdf8749b42616d41048f9e2a1efd3b7d9c97074dcdc168c6e310246420aa45d813c37350a6c7bcfc6ffbdc9b720d1

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/storage/permanent/chrome/idb/1657114595AmcateirvtiSty.sqlite
Filesize
44KB

MD5
7352c8848e88edc39b7fb5e663888187

SHA1
8c3dffe25cc56c7aec1b782292d6fceed81e6304

SHA256
7a462086a26978809c719e57a7ea6a25568767fb7532014e8531fda94b660e0a

SHA512
f2a0dbbab5c2c1702b03bce15a47739481f523e127d1372b40534db9a20b2bc99fb53710ee0e5d44176188817cac704cf4f98cdf087e7e89d244281fcfc3b280

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/storage/permanent/chrome/idb/1657114595AmcateirvtiSty.sqlite
Filesize
12KB

MD5
5cbd1f78aa548f70a411d44fd61a465d

SHA1
77f92374a0d0a492d5ef8cdff17de3fe8277a72d

SHA256
1c62d0e327aeb002611d5dbc5db5fcdb09ebb5a704378769ec0cd2d14166a274

SHA512
add87eaa1c941181d02ef058559539a49ff6242733f944738f132aa9147e8fb0015c23d97d8ef15f21f5e732ebdffef3945b60b5d54967001f7d53d859eeac73

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/storage/permanent/chrome/idb/1657114595AmcateirvtiSty.sqlite
Filesize
16KB

MD5
93cfccf4202b50e1748b83ba519c9944

SHA1
c8fdaff7b4591c71061c37ff9e301a7494b15c3f

SHA256
0e8a5da2d67682d2f665289bf453405561cc1278da19412014085b4ad4281439

SHA512
d893cc0aa50d7994db2e14fa444b4c592dc6776e57b37ffba75944e2ad9f155cc6712fccd3b15dba6a312ec5badb932b514edbbe23b4c41534028ed64f6467d7

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite
Filesize
44KB

MD5
759544297aaa61f5fef8ee42d0ae4393

SHA1
fc2d66f6e60409e3e8d38623ce5f817fc7f571e0

SHA256
1bd2000cd972e80cefaec6e982ba261d224a818f367de0fdf8c51fa5a05d7ab5

SHA512
8aaa2ce66f10d46f7c9200af841ac7bd9f5b55c30308a14f0deda44ac62581c45daae45154487c0073a0d5847d5926cbb4072ca64a702ac6b834ad0bb482804f

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite
Filesize
12KB

MD5
30cd8105720965db503d060f48f3513a

SHA1
25b3fdaa5a9c93f86ad80f9b303f3b580b8eba3b

SHA256
e81b100b5a4970ce2b90095c4b65fd941d920c29d6443e17c5bbb09ad6840a36

SHA512
ec7a87603b72d8ebe0972aef9cbbd1f8d5ea08938cb1239f69709ef322f4a1ffb5c0e071fe69909f79a7f8c07bebe6b4fe58b0db4505e13c3593318212ac40ed

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite
Filesize
16KB

MD5
214277ea956670bb8b2d5748fb004e79

SHA1
aa8e558c6d69ce1b787faaf83b41e5e8b4532120

SHA256
4186e018b5acd57a778d6c0313efac43f6d85bf5d398cac45739a13d9588ceea

SHA512
59bf05745b57d69233da39aec8aec9caa65a3e2e0230405c6f4e2cbf5fc09730d8a492a67e8cd1e29d0bd5e4e170fbfeae9a8ca1cb3f16546994da45a2added8

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
Filesize
44KB

MD5
07a412e08825220262ad2890757ff779

SHA1
f46c127dbc070ded87a6078b3c1c761955f96de8

SHA256
da640f8b665841b520d2262a21cc3f82aeaa881cf81a1ddae27ef501d66544e4

SHA512
0134c783bf3293848e479b478ac57a1e0f4202cddfb8b57bc6275aada7345f398cf8a627e9b1c34fd618192c2f0c9737b1da487daf33f9c557ebc1377105582b

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
Filesize
12KB

MD5
4f214226d44d1dc57dcd2db449194ed6

SHA1
44e8a642ad9b9c2e2eb48b7f2765ea246617f94c

SHA256
8df8ab8539e58106bc9bd07eb7ae47dbf62fa60ec9ac78202d4b50899b53ff26

SHA512
5d299473e519f4a0a5832bfee645e0e65be4f80ce182e2c09c5b84b236d21f1befd1a4f2082e5c3c0b1e9418c4e87de8a9f679132551fecb939d2d4f7162f7c0

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
Filesize
164KB

MD5
7fd06be5f7acfe7b65255e443290fe6c

SHA1
b01351d2724dacade80752ee1873e22de7f64cac

SHA256
2dda949468b1b3a3ba3ea77c1080cd2aa81e252c9031e7bcdc1aa23854646d25

SHA512
435bf86a6cdb4bf21c56ee963accafe773f2617cb46d38a036f3fab782f3a2989b5023ff59b773a4ea33c8ecb1868d1da8c2eef93976e23b403cafa1e5253b0d

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
Filesize
148KB

MD5
dd3f6ba37c670af5953593535e435d04

SHA1
ecfe4e650a050bce77e8ff7468de04c1b8acc9a4

SHA256
5cc6fa137a1f3a7d0b615b178877f12c460b22f95702eb7534d5732ee6599561

SHA512
86e0482543faae6fb279ca71e1e6d6461d32317e74baebb3973e0fde9800107faeb9c2347be6cf8a47556ae43c8e6c224a595e952f621e40ad2c5eba920df2b3

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
Filesize
168KB

MD5
e87498f20e6ffb24c100b389c9186fd6

SHA1
919ac3ffd22845e2ed3bf53ff974ab495d0a7c73

SHA256
98fb2b81377690e84819f72cb58f02505856485830b2bb98c5f1e3b4804013d0

SHA512
706619b456d5beba0308ca27ff3e011c844aea05ad99ae3a572748c8dbb20e9992be624609ca1cb56ff82f29181c9b1e95b9ce7032601db4c24d2e13e5d454e7

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
Filesize
232KB

MD5
acf01119af3ee0d161b6e1049e26f195

SHA1
8bc33819ec10dae13e2ff134ad511eab20b6c1cd

SHA256
e1998c974705b8d904597e177b52c35f5d66b635fe71441941000bc7cfc675f2

SHA512
cb015e43fb40912970f77491b51c56099fb889e4eea4920e758081e207589a13c7c65ef556735ad7ca5fd90fef9ed3e86907f7f12570d07f8fc83f313fbef2dc

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
Filesize
260KB

MD5
79e805ba7ae8b8c943945720c43701fb

SHA1
9ef184efc81fd55c0a7dd0fe592a7c11cf59421a

SHA256
e0b626fa2690283b6ee531551f46167c8ae301dac58effab3d5f4540dcb99180

SHA512
07397ba4d1c29245b86747425a8dee1fcbde47e2efc545e315b3b8cec910976f72e3c663c6a0881de0fcd9814361a9697fabfcebed2981b45c0108bb4cd2fa75

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/times.json
Filesize
50B

MD5
9eddcc9ced0d24aef6b3374192f9601c

SHA1
2bfadf7df27764a175b3df63cd29c69dc282c155

SHA256
53238c27993388e2189176ed5a648ff2ab6989db4a82763558cd76048e9d5b95

SHA512
7947a2346902a896882a89b80c02e913bba9ea0a393a1df20a10aa58ecceac2acc18f8b7a52d22df6718bc19ded49644e6066d32c68b73432d13fb77704cf250

Download Submit
/root/.mozilla/firefox/1owhtuat.default-release/times.json
Filesize
47B

MD5
9453691781a6678ffd3eeaee4c7370fc

SHA1
8cfbb427a3b5ee6a600be0b9d70bd2a37bf426c9

SHA256
2f97dde5bf708ad7c9aee85ffa03b8073a7146ad040bd59c3ce6cb31c333c229

SHA512
2d400d8dc0f765adb02a7f805313bebe7c53bf1259dc6346e4407d584c33868a3ead5e4724cc592dc1682432794377765210b8caa2af008b48d766a113484246

Download Submit
/root/.mozilla/firefox/Crash Reports/InstallTime20230522134052
Filesize
10B

MD5
c7dc45d2679205dc4a343668e91bfcc6

SHA1
e8569d6c4eb2142c9c020005812f41603b561f26

SHA256
3d79581d7033cf743cbb40dc3456ac247ceea7a3b89ff9e9e43577d685205d48

SHA512
69a12430227125b0e1a663112d5a9f763569a8a297b1d6e8001ec672c89044c627b9792e2905e1733c229d674fff7260134483dcea3a03ff270f9177b8c771a5

Download Submit
/root/.mozilla/firefox/installs.ini
Filesize
62B

MD5
f126a467202a3dc8a901569de7beb11e

SHA1
80de16d7f04fabbc68037f3a1f4512028da384b9

SHA256
d3dc65a61ae8b2fe2e7b0f380680106cc2f5dddc73d61696edc9a031ff1d5a40

SHA512
7a62e6c0e0a6f905ce93c4ba70e012cf1e46f3b4fb6393d3495bfe0e66ee033484636fdafb09319d527687d46295c395f05df54daedfe878267b9e07ce80cc6d

Download Submit
/root/.mozilla/firefox/profiles.ini
Filesize
259B

MD5
c26848a9fd748281eec14a2dfc481649

SHA1
3373e79ac6300899e69559f784b5e183db82ed0b

SHA256
0b8db33b31c003de813699f68ab8f2195273cb2b1c46745bbcfd861e16deda9e

SHA512
470f73a9cff51e1801698e184c19662d85df4bf873cb0523a8bed0c178581063c8775c61acaacc0c085998282651cdd80cbe84d07c46e9ee1ce5b6048570288c

Download Submit
/root/.mozilla/firefox/zpv92umk.default/times.json
Filesize
47B

MD5
30cdc1411c7b23c0697058586cb74fc2

SHA1
3fdfb4de163e425f9305b0155b52d1fc641be3d7

SHA256
3b0fec6781cf3d5dc1dd280291bb5fdf1a6bc7477b16e52b140d72f795a95015

SHA512
9341a3d33f3a0ae198fca810981feaec4ae5e78ca0de01b2667f550692803a0fe3b79c58fe880e4565263655e7252dcff6bff55986e7810b16f4466e695fde15

Download Submit