Analysis Overview
Threat Level: Shows suspicious behavior
The file https://www.google.com was found to be: Shows suspicious behavior.
Malicious Activity Summary
Changes its process name
Reads user data of web browsers
Checks CPU configuration
Reads CPU attributes
Enumerates kernel/hardware configuration
Reads runtime system information
Writes file to tmp directory
MITRE ATT&CK
Enterprise Matrix V15
Analysis: static1
Detonation Overview
Reported
2024-04-16 10:39
Signatures
Analysis: behavioral1
Detonation Overview
Submitted
2024-04-16 10:39
Reported
2024-04-16 11:24
Platform
ubuntu1804-amd64-20240226-en
Max time kernel
1873s
Max time network
2702s
Command Line
Signatures
Changes its process name
| Description | Indicator | Process | Target |
| Changes the process name, possibly in an attempt to hide itself | IPC I/O Parent | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | IPC I/O Parent | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | IPC I/O Parent | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | glean.dispatche | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | Backgro~Pool #1 | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | Backgro~Pool #1 | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | IPDL Background | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | IPDL Background | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | Socket Thread | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | Socket Thread | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | Netlink Monitor | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | Netlink Monitor | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | Timer | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | Timer | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | HTML5 Parser | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | HTML5 Parser | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | JS Watchdog | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | JS Watchdog | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | BGReadURLs | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | BGReadURLs | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | Cache2 I/O | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | Cookie | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | Cookie | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | StreamTrans #1 | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | StreamTrans #1 | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | TaskCon~ller #1 | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | TaskCon~ller #0 | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | BgIOThr~Pool #1 | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | BgIOThr~Pool #1 | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | QuotaManager IO | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | QuotaManager IO | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | IndexedDB #1 | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | IndexedDB #1 | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | IPC Launch | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | IPC Launch | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | SandboxReporter | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | SandboxReporter | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | Breakpad Server | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | Sandbox Forked | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | DOM Worker | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | DOM Worker | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | Chroot Helper | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | StreamTrans #5 | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | StreamTrans #5 | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | StreamTrans #4 | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | StreamTrans #4 | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | StreamTrans #3 | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | StreamTrans #3 | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | StreamTrans #2 | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | StreamTrans #2 | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | MainThread | /usr/lib/firefox/firefox | N/A |
| Changes the process name, possibly in an attempt to hide itself | IPC I/O Child | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | IPC I/O Child | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | IPC I/O Child | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | FSBroker1561 | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | FSBroker1561 | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | Socket Process | /usr/lib/firefox/firefox | N/A |
| Changes the process name, possibly in an attempt to hide itself | Socket Thread | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | Socket Thread | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | Backgro~Pool #1 | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | Backgro~Pool #1 | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | Timer | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | Timer | N/A | N/A |
| Changes the process name, possibly in an attempt to hide itself | ProfilerChild | N/A | N/A |
Reads user data of web browsers
| Description | Indicator | Process | Target |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/search.json.mozlz4 | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/protections.sqlite | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/webappsstore.sqlite-journal | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/storage/permanent/chrome/idb/1657114595AmcateirvtiSty.sqlite-wal | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/storage/temporary | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/protections.sqlite-journal | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/storage/permanent/chrome/idb | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/permissions.sqlite | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/cert9.db-journal | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/xulstore.json | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/places.sqlite-wal | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/containers.json | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/webappsstore.sqlite-wal | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/system-extensions | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/favicons.sqlite | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/places.sqlite | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/favicons.sqlite | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/storage/permanent | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/bookmarkbackups | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/user.js | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/cookies.sqlite-journal | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite-wal | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/sessionstore.jsonlz4 | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/sessionstore-backups/recovery.jsonlz4 | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/storage/ls-archive.sqlite-journal | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/favicons.sqlite-wal | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/storage/permanent/chrome/idb/1451318868ntouromlalnodry--epcr.sqlite | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/content-prefs.sqlite-journal | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/logins.json | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/datareporting/state.json | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/cookies.sqlite | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite-journal | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/sessionstore-backups/recovery.bak | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/places.sqlite-journal | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/extension-settings.json | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/cookies.sqlite-journal | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/storage.sqlite-journal | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/permissions.sqlite-journal | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/pkcs11.txt | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/thumbnails | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/webappsstore.sqlite | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/addonStartup.json.lz4 | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/storage/ls-archive.sqlite | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/cert9.db-journal | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/sessionstore-backups/recovery.js | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/shield-preference-experiments.json | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/SiteSecurityServiceState.txt | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/favicons.sqlite-journal | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/places.sqlite-wal | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/cookies.sqlite | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/storage/permanent/chrome | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite-journal | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/key4.db-journal | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/storage/permanent/chrome/idb/1451318868ntouromlalnodry--epcr.sqlite-journal | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/cert9.db | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/places.sqlite | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/prefs.js | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/sessionCheckpoints.json | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/cert9.db | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/key4.db | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/sessionstore.js | N/A | N/A |
| File opened for reading | /root/.mozilla/firefox/dclovtyi.default-release/sessionstore-backups/previous.jsonlz4 | N/A | N/A |
Checks CPU configuration
| Description | Indicator | Process | Target |
| File opened for reading | /proc/cpuinfo | N/A | N/A |
Reads CPU attributes
| Description | Indicator | Process | Target |
| File opened for reading | /sys/devices/system/cpu/online | N/A | N/A |
| File opened for reading | /sys/devices/system/cpu/present | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /sys/devices/system/cpu/present | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /sys/devices/system/cpu/cpu0/cache/index2/size | N/A | N/A |
| File opened for reading | /sys/devices/system/cpu/present | N/A | N/A |
| File opened for reading | /sys/devices/system/cpu/present | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /sys/devices/system/cpu/present | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /sys/devices/system/cpu/present | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq | N/A | N/A |
| File opened for reading | /sys/devices/system/cpu/cpu0/cache/index3/size | N/A | N/A |
| File opened for reading | /sys/devices/system/cpu/present | /usr/lib/firefox/firefox | N/A |
Enumerates kernel/hardware configuration
| Description | Indicator | Process | Target |
| File opened for reading | /sys/bus/pci/devices/0000:00:01.0/class | N/A | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:04.0/irq | N/A | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:01.1/irq | N/A | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:06.0/class | N/A | N/A |
| File opened for reading | /sys/devices/system/cpu | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:02.0/vendor | N/A | N/A |
| File opened for reading | /sys/devices/system/cpu | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:03.0/vendor | N/A | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:06.0/resource | N/A | N/A |
| File opened for reading | /sys/bus/pci/devices | N/A | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:01.1/class | N/A | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:05.0/vendor | N/A | N/A |
| File opened for reading | /sys/devices/pci0000:00/0000:00:02.0/device | N/A | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:05.0/irq | N/A | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:05.0/class | N/A | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:01.0/resource | N/A | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:01.1/resource | N/A | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:06.0/device | N/A | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:00.0/resource | N/A | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:01.1/vendor | N/A | N/A |
| File opened for reading | /sys/devices/pci0000:00/0000:00:02.0/uevent | N/A | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:00.0/class | N/A | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:01.3/device | N/A | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:06.0/vendor | N/A | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:02.0/class | N/A | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:01.0/device | N/A | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:04.0/resource | N/A | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:01.3/resource | N/A | N/A |
| File opened for reading | /sys/devices/system/cpu | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:02.0/resource | N/A | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:05.0/resource | N/A | N/A |
| File opened for reading | /sys/devices/pci0000:00/0000:00:02.0/vendor | N/A | N/A |
| File opened for reading | /sys/devices/system/cpu | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /sys/devices/system/cpu | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /sys/fs/cgroup/cpu,cpuacct/cpu.cfs_quota_us | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /sys/devices/system/cpu | N/A | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:03.0/device | N/A | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:03.0/class | N/A | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:06.0/irq | N/A | N/A |
| File opened for reading | /sys/devices/pci0000:00/0000:00:02.0/subsystem_vendor | N/A | N/A |
| File opened for reading | /sys/devices/pci0000:00/0000:00:02.0/subsystem_device | N/A | N/A |
| File opened for reading | /sys/kernel/security/apparmor/features/dbus/mask | /usr/bin/dbus-daemon | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:01.0/vendor | N/A | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:04.0/vendor | N/A | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:04.0/class | N/A | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:00.0/device | N/A | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:02.0/irq | N/A | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:01.0/irq | N/A | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:00.0/irq | N/A | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:00.0/vendor | N/A | N/A |
| File opened for reading | /sys/devices/system/cpu | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:01.3/class | N/A | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:03.0/irq | N/A | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:01.1/device | N/A | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:04.0/device | N/A | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:01.3/irq | N/A | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:01.3/vendor | N/A | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:03.0/resource | N/A | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:02.0/device | N/A | N/A |
| File opened for reading | /sys/bus/pci/devices/0000:00:05.0/device | N/A | N/A |
Reads runtime system information
| Description | Indicator | Process | Target |
| File opened for reading | /proc/self/fd/40 | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /proc/filesystems | /usr/libexec/xdg-desktop-portal-gtk | N/A |
| File opened for reading | /proc/1600/cmdline | N/A | N/A |
| File opened for reading | /proc/filesystems | /usr/lib/gvfs/gvfsd-fuse | N/A |
| File opened for reading | /proc/1656/smaps | N/A | N/A |
| File opened for reading | /proc/self/fd/31 | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /proc/self/fd/29 | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /proc/self/fd/38 | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /proc/self/fd/41 | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /proc/self/fd/45 | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /proc/self/fd/48 | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /proc/1609/cmdline | N/A | N/A |
| File opened for reading | /proc/self/task/1722/stat | N/A | N/A |
| File opened for reading | /proc/self/task/1564/stat | N/A | N/A |
| File opened for reading | /proc/1585/cmdline | N/A | N/A |
| File opened for reading | /proc/filesystems | /usr/libexec/xdg-permission-store | N/A |
| File opened for reading | /proc/filesystems | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /proc/1719/smaps | N/A | N/A |
| File opened for reading | /proc/self/fd/116 | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /proc/1537/attr/current | N/A | N/A |
| File opened for reading | /proc/self/fd/42 | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /proc/filesystems | /usr/libexec/xdg-document-portal | N/A |
| File opened for reading | /proc/1604/cmdline | N/A | N/A |
| File opened for reading | /proc/self/fd/37 | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /proc/self/fd/103 | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /proc/1736/smaps | N/A | N/A |
| File opened for reading | /proc/filesystems | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /proc/self/fd/39 | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /proc/filesystems | /usr/lib/gvfs/gvfsd | N/A |
| File opened for reading | /proc/self/fd | N/A | N/A |
| File opened for reading | /proc/filesystems | /usr/libexec/xdg-desktop-portal | N/A |
| File opened for reading | /proc/1580/cmdline | N/A | N/A |
| File opened for reading | /proc/self/task/1662/stat | N/A | N/A |
| File opened for reading | /proc/self/maps | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /proc/self/maps | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /proc/filesystems | /usr/bin/dbus-daemon | N/A |
| File opened for reading | /proc/sys/kernel/cap_last_cap | N/A | N/A |
| File opened for reading | /proc/self/fd/6 | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /proc/self/fd/43 | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /proc/self/fd/47 | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /proc/self/maps | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /proc/self/fd/46 | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /proc/self/fd/50 | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /proc/filesystems | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /proc/1736/statm | N/A | N/A |
| File opened for reading | /proc/self/fd/33 | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /proc/1656/statm | N/A | N/A |
| File opened for reading | /proc/1678/statm | N/A | N/A |
| File opened for reading | /proc/1537/status | N/A | N/A |
| File opened for reading | /proc/self/mountinfo | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /proc/self/fd/44 | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /proc/self/fd/51 | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /proc/self/fd/78 | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /proc/self/fd/49 | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /proc/self/task/1740/stat | N/A | N/A |
| File opened for reading | /proc/1719/statm | N/A | N/A |
| File opened for reading | /proc/self/stat | N/A | N/A |
| File opened for reading | /proc/self/maps | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /proc/1589/cmdline | N/A | N/A |
| File opened for reading | /proc/self/maps | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /proc/self/task/1687/stat | N/A | N/A |
| File opened for reading | /proc/self/maps | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /proc/self/fd/126 | /usr/lib/firefox/firefox | N/A |
| File opened for reading | /proc/mounts | /usr/bin/dbus-daemon | N/A |
Writes file to tmp directory
| Description | Indicator | Process | Target |
| File opened for modification | /tmp/firefox/.parentlock | /usr/lib/firefox/firefox | N/A |
Processes
/usr/bin/firefox
[firefox -new-tab https://www.google.com]
/usr/bin/which
[which /usr/bin/firefox]
/usr/lib/firefox/firefox
[/usr/lib/firefox/firefox -new-tab https://www.google.com]
/usr/bin/dbus-launch
[dbus-launch --autolaunch 11c67417355f45d397f6be11f62e85a6 --binary-syntax --close-stderr]
/usr/bin/dbus-daemon
[/usr/bin/dbus-daemon --syslog-only --fork --print-pid 5 --print-address 7 --session]
/usr/bin/lsb_release
[/usr/bin/lsb_release -idrc]
/usr/lib/firefox/firefox
[/usr/lib/firefox/firefox -contentproc -parentBuildID 20230522134052 -prefsLen 19257 -prefMapSize 230809 -appDir /usr/lib/firefox/browser {34366762-0a5b-4e9c-822f-a3261fee3994} 1516 true socket]
/usr/local/sbin/dbus-launch
[dbus-launch --autolaunch=11c67417355f45d397f6be11f62e85a6 --binary-syntax --close-stderr]
/usr/local/bin/dbus-launch
[dbus-launch --autolaunch=11c67417355f45d397f6be11f62e85a6 --binary-syntax --close-stderr]
/usr/sbin/dbus-launch
[dbus-launch --autolaunch=11c67417355f45d397f6be11f62e85a6 --binary-syntax --close-stderr]
/usr/bin/dbus-launch
[dbus-launch --autolaunch=11c67417355f45d397f6be11f62e85a6 --binary-syntax --close-stderr]
/usr/libexec/xdg-desktop-portal
[/usr/libexec/xdg-desktop-portal]
/usr/libexec/xdg-document-portal
[/usr/libexec/xdg-document-portal]
/usr/libexec/xdg-permission-store
[/usr/libexec/xdg-permission-store]
/usr/libexec/xdg-desktop-portal-gtk
[/usr/libexec/xdg-desktop-portal-gtk]
/usr/lib/gvfs/gvfsd
[/usr/lib/gvfs/gvfsd]
/usr/lib/gvfs/gvfsd-fuse
[/usr/lib/gvfs/gvfsd-fuse /root/.gvfs -f -o big_writes]
/usr/lib/firefox/firefox
[/usr/lib/firefox/firefox -contentproc -childID 1 -isForBrowser -prefsLen 21807 -prefMapSize 230809 -jsInitLen 238780 -parentBuildID 20230522134052 -appDir /usr/lib/firefox/browser {c1f1cbc1-508e-43b8-b997-e74ffb399b6e} 1516 true tab]
/usr/lib/firefox/firefox
[/usr/lib/firefox/firefox -contentproc -childID 2 -isForBrowser -prefsLen 21475 -prefMapSize 230809 -jsInitLen 238780 -parentBuildID 20230522134052 -appDir /usr/lib/firefox/browser {db0e68f4-b214-4e2e-b79d-4a23c5f8c061} 1516 true tab]
/usr/lib/firefox/firefox
[/usr/lib/firefox/firefox -contentproc -childID 3 -isForBrowser -prefsLen 21824 -prefMapSize 230809 -jsInitLen 238780 -parentBuildID 20230522134052 -appDir /usr/lib/firefox/browser {cacc5b27-269f-488c-b2f5-2513bf58cd01} 1516 true tab]
/usr/lib/firefox/firefox
[/usr/lib/firefox/firefox -contentproc -childID 4 -isForBrowser -prefsLen 23248 -prefMapSize 230809 -jsInitLen 238780 -parentBuildID 20230522134052 -appDir /usr/lib/firefox/browser {fa95ee0d-9412-4639-bb70-02144e8ae3af} 1516 true tab]
Network
| Country | Destination | Domain | Proto |
| N/A | 224.0.0.251:5353 | udp | |
| US | 151.101.130.49:443 | tcp | |
| US | 1.1.1.1:53 | services.addons.mozilla.org | udp |
| US | 1.1.1.1:53 | services.addons.mozilla.org | udp |
| DE | 52.222.236.23:443 | services.addons.mozilla.org | tcp |
| DE | 52.222.236.23:443 | services.addons.mozilla.org | tcp |
| US | 1.1.1.1:53 | location.services.mozilla.com | udp |
| US | 1.1.1.1:53 | location.services.mozilla.com | udp |
| US | 1.1.1.1:53 | locprod2-elb-us-west-2.prod.mozaws.net | udp |
| US | 52.25.6.244:443 | location.services.mozilla.com | tcp |
| US | 1.1.1.1:53 | cdn.fwupd.org | udp |
| US | 1.1.1.1:53 | cdn.fwupd.org | udp |
| US | 151.101.129.91:443 | tcp | |
| US | 151.101.194.49:443 | cdn.fwupd.org | tcp |
| GB | 195.181.164.20:443 | tcp | |
| GB | 185.125.188.61:443 | tcp | |
| GB | 185.125.188.61:443 | tcp | |
| US | 1.1.1.1:53 | ocp-ingress.fastly.gnome.org | udp |
| US | 151.101.1.91:443 | ocp-ingress.fastly.gnome.org | tcp |
| US | 1.1.1.1:53 | detectportal.firefox.com | udp |
| US | 1.1.1.1:53 | detectportal.firefox.com | udp |
| US | 34.107.221.82:80 | detectportal.firefox.com | tcp |
| US | 1.1.1.1:53 | www.google.com | udp |
| US | 1.1.1.1:53 | www.google.com | udp |
| GB | 142.250.200.36:443 | www.google.com | tcp |
| US | 1.1.1.1:53 | 1527653184.rsc.cdn77.org | udp |
| US | 1.1.1.1:53 | 1527653184.rsc.cdn77.org | udp |
| GB | 195.181.164.16:443 | 1527653184.rsc.cdn77.org | tcp |
| US | 1.1.1.1:53 | www.mozilla.org | udp |
| US | 1.1.1.1:53 | www.mozilla.org | udp |
| US | 1.1.1.1:53 | example.org | udp |
| US | 1.1.1.1:53 | example.org | udp |
| US | 1.1.1.1:53 | ipv4only.arpa | udp |
| US | 1.1.1.1:53 | ipv4only.arpa | udp |
| US | 34.107.221.82:80 | detectportal.firefox.com | tcp |
| US | 1.1.1.1:53 | www.mozorg.moz.works | udp |
| DE | 13.32.119.185:443 | www.mozilla.org | tcp |
| US | 1.1.1.1:53 | contile.services.mozilla.com | udp |
| US | 1.1.1.1:53 | contile.services.mozilla.com | udp |
| US | 34.117.237.239:443 | contile.services.mozilla.com | tcp |
| US | 1.1.1.1:53 | spocs.getpocket.com | udp |
| US | 1.1.1.1:53 | spocs.getpocket.com | udp |
| US | 1.1.1.1:53 | getpocket.cdn.mozilla.net | udp |
| US | 1.1.1.1:53 | getpocket.cdn.mozilla.net | udp |
| US | 1.1.1.1:53 | prod.ads.prod.webservices.mozgcp.net | udp |
| US | 34.120.5.221:443 | getpocket.cdn.mozilla.net | tcp |
| US | 34.117.188.166:443 | spocs.getpocket.com | tcp |
| US | 1.1.1.1:53 | a1887.dscq.akamai.net | udp |
| GB | 142.250.200.36:443 | www.google.com | udp |
| GB | 104.86.110.200:80 | a1887.dscq.akamai.net | tcp |
| US | 1.1.1.1:53 | firefox.settings.services.mozilla.com | udp |
| US | 1.1.1.1:53 | firefox.settings.services.mozilla.com | udp |
| US | 1.1.1.1:53 | prod.remote-settings.prod.webservices.mozgcp.net | udp |
| US | 34.149.100.209:443 | firefox.settings.services.mozilla.com | tcp |
| US | 34.117.188.166:443 | spocs.getpocket.com | udp |
| US | 1.1.1.1:53 | normandy.cdn.mozilla.net | udp |
| US | 1.1.1.1:53 | normandy.cdn.mozilla.net | udp |
| US | 1.1.1.1:53 | normandy-cdn.services.mozilla.com | udp |
| US | 35.201.103.21:443 | normandy.cdn.mozilla.net | tcp |
| US | 34.107.221.82:80 | detectportal.firefox.com | tcp |
| US | 34.117.237.239:443 | contile.services.mozilla.com | tcp |
| US | 34.107.221.82:80 | detectportal.firefox.com | tcp |
| GB | 104.86.110.200:80 | a1887.dscq.akamai.net | tcp |
| US | 34.149.100.209:443 | firefox.settings.services.mozilla.com | tcp |
| US | 1.1.1.1:53 | img-getpocket.cdn.mozilla.net | udp |
| US | 1.1.1.1:53 | img-getpocket.cdn.mozilla.net | udp |
| US | 1.1.1.1:53 | getpocket.com | udp |
| US | 1.1.1.1:53 | getpocket.com | udp |
| US | 1.1.1.1:53 | www.inc.com | udp |
| US | 1.1.1.1:53 | www.inc.com | udp |
| US | 1.1.1.1:53 | www.wired.com | udp |
| US | 34.120.237.76:443 | img-getpocket.cdn.mozilla.net | tcp |
| US | 1.1.1.1:53 | www.wired.com | udp |
| US | 34.120.237.76:443 | img-getpocket.cdn.mozilla.net | tcp |
| US | 34.120.237.76:443 | img-getpocket.cdn.mozilla.net | tcp |
| US | 1.1.1.1:53 | mansueto.map.fastly.net | udp |
| US | 1.1.1.1:53 | h2.condenast.map.fastly.net | udp |
| US | 34.120.237.76:443 | img-getpocket.cdn.mozilla.net | tcp |
| GB | 104.86.110.200:80 | a1887.dscq.akamai.net | tcp |
| GB | 104.86.110.200:80 | a1887.dscq.akamai.net | tcp |
| GB | 104.86.110.200:80 | a1887.dscq.akamai.net | tcp |
| US | 1.1.1.1:53 | shavar.services.mozilla.com | udp |
| US | 1.1.1.1:53 | shavar.services.mozilla.com | udp |
| US | 1.1.1.1:53 | content-signature-2.cdn.mozilla.net | udp |
| US | 1.1.1.1:53 | content-signature-2.cdn.mozilla.net | udp |
| US | 1.1.1.1:53 | shavar.prod.mozaws.net | udp |
| US | 34.160.144.191:443 | content-signature-2.cdn.mozilla.net | tcp |
| US | 35.83.153.5:443 | shavar.services.mozilla.com | tcp |
| GB | 104.86.110.200:80 | a1887.dscq.akamai.net | tcp |
| US | 1.1.1.1:53 | tracking-protection.cdn.mozilla.net | udp |
| US | 1.1.1.1:53 | tracking-protection.cdn.mozilla.net | udp |
| US | 1.1.1.1:53 | tracking-protection.prod.mozaws.net | udp |
| US | 34.120.158.37:443 | tracking-protection.cdn.mozilla.net | tcp |
| US | 34.120.158.37:443 | tracking-protection.cdn.mozilla.net | tcp |
| US | 34.149.100.209:443 | firefox.settings.services.mozilla.com | tcp |
| US | 34.120.158.37:443 | tracking-protection.cdn.mozilla.net | tcp |
| US | 1.1.1.1:53 | firefox-settings-attachments.cdn.mozilla.net | udp |
| US | 1.1.1.1:53 | firefox-settings-attachments.cdn.mozilla.net | udp |
| US | 1.1.1.1:53 | push.services.mozilla.com | udp |
| US | 1.1.1.1:53 | push.services.mozilla.com | udp |
| US | 1.1.1.1:53 | attachments.prod.remote-settings.prod.webservices.mozgcp.net | udp |
| US | 1.1.1.1:53 | autopush.prod.mozaws.net | udp |
| US | 34.117.121.53:443 | firefox-settings-attachments.cdn.mozilla.net | tcp |
| US | 34.107.243.93:443 | push.services.mozilla.com | tcp |
| US | 34.120.158.37:443 | tracking-protection.cdn.mozilla.net | tcp |
| US | 1.1.1.1:53 | incoming.telemetry.mozilla.org | udp |
| US | 1.1.1.1:53 | incoming.telemetry.mozilla.org | udp |
| US | 34.117.121.53:443 | firefox-settings-attachments.cdn.mozilla.net | tcp |
| US | 1.1.1.1:53 | telemetry-incoming.r53-2.services.mozilla.com | udp |
| US | 1.1.1.1:53 | www.menshealth.com | udp |
| US | 1.1.1.1:53 | www.menshealth.com | udp |
| US | 1.1.1.1:53 | www.cnn.com | udp |
| US | 1.1.1.1:53 | www.cnn.com | udp |
| US | 1.1.1.1:53 | www.theguardian.com | udp |
| US | 1.1.1.1:53 | www.theguardian.com | udp |
| US | 34.120.208.123:443 | incoming.telemetry.mozilla.org | tcp |
| US | 34.120.158.37:443 | tracking-protection.cdn.mozilla.net | tcp |
| US | 1.1.1.1:53 | hearst-hdm.map.fastly.net | udp |
| US | 1.1.1.1:53 | www.huffingtonpost.co.uk | udp |
| US | 1.1.1.1:53 | www.huffingtonpost.co.uk | udp |
| US | 1.1.1.1:53 | www.independent.co.uk | udp |
| US | 1.1.1.1:53 | www.independent.co.uk | udp |
| US | 1.1.1.1:53 | buzzfeed2.map.fastly.net | udp |
| US | 1.1.1.1:53 | www.vanityfair.com | udp |
| US | 1.1.1.1:53 | www.vanityfair.com | udp |
| US | 1.1.1.1:53 | www.standard.co.uk | udp |
| US | 1.1.1.1:53 | www.standard.co.uk | udp |
| US | 1.1.1.1:53 | inews.co.uk | udp |
| US | 1.1.1.1:53 | inews.co.uk | udp |
| US | 1.1.1.1:53 | condenast.map.fastly.net | udp |
| US | 1.1.1.1:53 | www.idealhome.co.uk | udp |
| US | 1.1.1.1:53 | www.idealhome.co.uk | udp |
| US | 1.1.1.1:53 | www.healthdigest.com | udp |
| US | 1.1.1.1:53 | www.healthdigest.com | udp |
| US | 1.1.1.1:53 | www.harpersbazaar.com | udp |
| US | 1.1.1.1:53 | www.harpersbazaar.com | udp |
| US | 1.1.1.1:53 | fp2e7a.wpc.phicdn.net | udp |
| US | 1.1.1.1:53 | g.sni.global.fastly.net | udp |
| US | 34.107.243.93:443 | push.services.mozilla.com | tcp |
| US | 1.1.1.1:53 | www.forbes.com | udp |
| US | 1.1.1.1:53 | www.forbes.com | udp |
| US | 1.1.1.1:53 | news.sky.com | udp |
| US | 1.1.1.1:53 | news.sky.com | udp |
| US | 34.120.158.37:443 | tracking-protection.cdn.mozilla.net | tcp |
| US | 1.1.1.1:53 | www.vox.com | udp |
| US | 1.1.1.1:53 | www.vox.com | udp |
| US | 1.1.1.1:53 | m.sni.global.fastly.net | udp |
| US | 1.1.1.1:53 | e10653.e12.akamaiedge.net | udp |
| US | 1.1.1.1:53 | vox-chorus.map.fastly.net | udp |
| US | 1.1.1.1:53 | www.nytimes.com | udp |
| US | 1.1.1.1:53 | nytimes.map.fastly.net | udp |
| US | 34.120.208.123:443 | incoming.telemetry.mozilla.org | tcp |
| US | 34.107.243.93:443 | push.services.mozilla.com | tcp |
| US | 34.120.158.37:443 | tracking-protection.cdn.mozilla.net | tcp |
| DE | 52.222.236.80:443 | services.addons.mozilla.org | tcp |
| DE | 52.222.236.80:443 | services.addons.mozilla.org | tcp |
| US | 34.107.243.93:443 | push.services.mozilla.com | udp |
| US | 34.120.158.37:443 | tracking-protection.cdn.mozilla.net | tcp |
| US | 34.120.158.37:443 | tracking-protection.cdn.mozilla.net | tcp |
| US | 1.1.1.1:53 | contile-images.services.mozilla.com | udp |
| US | 1.1.1.1:53 | contile-images.services.mozilla.com | udp |
| US | 34.120.158.37:443 | tracking-protection.cdn.mozilla.net | tcp |
| US | 34.120.115.102:443 | contile-images.services.mozilla.com | tcp |
| US | 34.120.115.102:443 | contile-images.services.mozilla.com | tcp |
| US | 34.120.158.37:443 | tracking-protection.cdn.mozilla.net | tcp |
| US | 1.1.1.1:53 | www.amazon.co.uk | udp |
| US | 1.1.1.1:53 | www.amazon.co.uk | udp |
| US | 1.1.1.1:53 | www.sephora.co.uk | udp |
| US | 1.1.1.1:53 | www.sephora.co.uk | udp |
| US | 1.1.1.1:53 | www.youtube.com | udp |
| US | 1.1.1.1:53 | www.youtube.com | udp |
| US | 1.1.1.1:53 | e101294.x.akamaiedge.net | udp |
| US | 1.1.1.1:53 | www.facebook.com | udp |
| US | 1.1.1.1:53 | www.reddit.com | udp |
| US | 1.1.1.1:53 | www.reddit.com | udp |
| US | 1.1.1.1:53 | www.facebook.com | udp |
| US | 1.1.1.1:53 | www.bbc.co.uk | udp |
| US | 1.1.1.1:53 | reddit.map.fastly.net | udp |
| US | 1.1.1.1:53 | www.ebay.co.uk | udp |
| US | 1.1.1.1:53 | www.bbc.co.uk | udp |
| US | 1.1.1.1:53 | www.ebay.co.uk | udp |
| US | 34.120.158.37:443 | tracking-protection.cdn.mozilla.net | tcp |
| US | 1.1.1.1:53 | gtm-uk.www.bbc.co.uk.pri.bbc.co.uk | udp |
| US | 1.1.1.1:53 | e11847.a.akamaiedge.net | udp |
| US | 34.120.158.37:443 | tracking-protection.cdn.mozilla.net | tcp |
| US | 34.120.158.37:443 | tracking-protection.cdn.mozilla.net | tcp |
| US | 1.1.1.1:53 | support.mozilla.org | udp |
| US | 1.1.1.1:53 | support.mozilla.org | udp |
| US | 1.1.1.1:53 | us-west1.prod.sumo.prod.webservices.mozgcp.net | udp |
| US | 1.1.1.1:53 | safebrowsing.googleapis.com | udp |
| US | 1.1.1.1:53 | safebrowsing.googleapis.com | udp |
| GB | 142.250.187.234:443 | safebrowsing.googleapis.com | tcp |
| GB | 142.250.187.234:443 | safebrowsing.googleapis.com | udp |
| US | 1.1.1.1:53 | turbobit.nettttt | udp |
| US | 1.1.1.1:53 | turbobit.nettttt | udp |
| US | 1.1.1.1:53 | www.turbobit.nettttt | udp |
| US | 1.1.1.1:53 | www.turbobit.nettttt | udp |
| US | 1.1.1.1:53 | aus5.mozilla.org | udp |
| US | 1.1.1.1:53 | aus5.mozilla.org | udp |
| US | 1.1.1.1:53 | prod.balrog.prod.cloudops.mozgcp.net | udp |
| US | 35.244.181.201:443 | aus5.mozilla.org | tcp |
| US | 35.244.181.201:443 | aus5.mozilla.org | tcp |
| US | 34.160.144.191:443 | content-signature-2.cdn.mozilla.net | tcp |
| US | 1.1.1.1:53 | archive.mozilla.org | udp |
| US | 1.1.1.1:53 | archive.mozilla.org | udp |
| US | 34.117.35.28:443 | archive.mozilla.org | tcp |
| US | 1.1.1.1:53 | ciscobinary.openh264.org | udp |
| US | 1.1.1.1:53 | ciscobinary.openh264.org | udp |
| NL | 2.18.121.72:80 | ciscobinary.openh264.org | tcp |
| US | 34.117.35.28:443 | archive.mozilla.org | udp |
| US | 1.1.1.1:53 | turbobit.net | udp |
| US | 1.1.1.1:53 | turbobit.net | udp |
| NL | 212.192.240.178:443 | turbobit.net | tcp |
| US | 1.1.1.1:53 | a1887.dscq.akamai.net | udp |
| US | 1.1.1.1:53 | a1887.dscq.akamai.net | udp |
| GB | 104.86.110.202:80 | a1887.dscq.akamai.net | tcp |
| NL | 212.192.240.178:443 | turbobit.net | tcp |
| NL | 212.192.240.178:443 | turbobit.net | tcp |
| NL | 212.192.240.178:443 | turbobit.net | tcp |
| NL | 212.192.240.178:443 | turbobit.net | tcp |
| NL | 212.192.240.178:443 | turbobit.net | tcp |
| US | 1.1.1.1:53 | turbo.to | udp |
| US | 1.1.1.1:53 | turbo.to | udp |
| US | 1.1.1.1:53 | hif.to | udp |
| US | 1.1.1.1:53 | hif.to | udp |
| US | 1.1.1.1:53 | app.turbobit.net | udp |
| US | 1.1.1.1:53 | app.turbobit.net | udp |
| NL | 5.61.56.172:443 | turbo.to | tcp |
| NL | 212.192.240.178:443 | app.turbobit.net | tcp |
| NL | 212.192.240.178:443 | app.turbobit.net | tcp |
| NL | 5.45.70.250:443 | hif.to | tcp |
| US | 1.1.1.1:53 | vo.turbocap.net | udp |
| US | 1.1.1.1:53 | vo.turbocap.net | udp |
| DE | 94.130.130.77:443 | vo.turbocap.net | tcp |
| US | 1.1.1.1:53 | cdn.jsdelivr.net | udp |
| US | 1.1.1.1:53 | cdn.jsdelivr.net | udp |
| US | 151.101.129.229:443 | cdn.jsdelivr.net | tcp |
| US | 151.101.129.229:443 | cdn.jsdelivr.net | udp |
| US | 1.1.1.1:53 | turbobita.net | udp |
| US | 1.1.1.1:53 | turbobita.net | udp |
| NL | 5.45.70.250:80 | hif.to | tcp |
| NL | 5.61.48.58:443 | turbobita.net | tcp |
| NL | 5.45.70.250:80 | hif.to | tcp |
| US | 1.1.1.1:53 | s.o333o.com | udp |
| US | 1.1.1.1:53 | s.o333o.com | udp |
| DE | 85.10.205.45:443 | s.o333o.com | tcp |
| DE | 94.130.130.77:443 | vo.turbocap.net | tcp |
| US | 1.1.1.1:53 | mc.webvisor.org | udp |
| US | 1.1.1.1:53 | mc.webvisor.org | udp |
| RU | 87.250.251.119:443 | mc.webvisor.org | tcp |
| DE | 94.130.130.77:443 | vo.turbocap.net | tcp |
| US | 1.1.1.1:53 | engine.spotscenered.info | udp |
| US | 1.1.1.1:53 | engine.spotscenered.info | udp |
| US | 104.17.159.201:443 | engine.spotscenered.info | tcp |
| US | 1.1.1.1:53 | i.gyazo.com | udp |
| US | 1.1.1.1:53 | i.gyazo.com | udp |
| US | 1.1.1.1:53 | grincircus.com | udp |
| US | 1.1.1.1:53 | grincircus.com | udp |
| GB | 142.250.200.36:443 | www.google.com | tcp |
| US | 104.18.25.163:443 | i.gyazo.com | tcp |
| US | 104.18.25.163:443 | i.gyazo.com | tcp |
| US | 104.17.159.201:443 | engine.spotscenered.info | udp |
| GB | 142.250.200.36:443 | www.google.com | udp |
| US | 192.243.59.12:443 | grincircus.com | tcp |
| US | 192.243.59.12:443 | grincircus.com | tcp |
| GB | 104.86.110.232:80 | a1887.dscq.akamai.net | tcp |
| US | 1.1.1.1:53 | pocketoption.com | udp |
| US | 1.1.1.1:53 | pocketoption.com | udp |
| CZ | 185.104.210.34:443 | pocketoption.com | tcp |
| US | 1.1.1.1:53 | system-notify.app | udp |
| US | 1.1.1.1:53 | system-notify.app | udp |
| DE | 157.90.33.72:443 | system-notify.app | tcp |
| US | 1.1.1.1:53 | recaptcha.net | udp |
| US | 1.1.1.1:53 | recaptcha.net | udp |
| GB | 142.250.200.35:80 | recaptcha.net | tcp |
| US | 1.1.1.1:53 | analytics.google.com | udp |
| US | 1.1.1.1:53 | analytics.google.com | udp |
| GB | 142.250.200.14:443 | analytics.google.com | tcp |
| GB | 142.250.200.36:443 | www.google.com | tcp |
| GB | 142.250.200.36:443 | www.google.com | tcp |
| GB | 142.250.200.14:443 | analytics.google.com | udp |
| GB | 142.250.200.36:443 | www.google.com | udp |
| US | 1.1.1.1:53 | detectportal.firefox.com | udp |
| US | 1.1.1.1:53 | detectportal.firefox.com | udp |
| US | 1.1.1.1:53 | www.google.com | udp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| GB | 185.125.190.97:80 | connectivity-check.ubuntu.com | tcp |
| NL | 212.192.240.178:443 | app.turbobit.net | tcp |
| US | 192.243.59.12:443 | grincircus.com | tcp |
| US | 192.243.59.12:443 | grincircus.com | tcp |
| NL | 212.192.240.178:443 | app.turbobit.net | tcp |
| NL | 212.192.240.178:443 | app.turbobit.net | tcp |
| NL | 212.192.240.178:443 | app.turbobit.net | tcp |
| NL | 212.192.240.178:443 | app.turbobit.net | tcp |
| US | 1.1.1.1:53 | system-notify.app | udp |
| DE | 178.63.248.57:443 | system-notify.app | tcp |
| US | 1.1.1.1:53 | jsdelivr.map.fastly.net | udp |
| US | 1.1.1.1:53 | jsdelivr.map.fastly.net | udp |
| US | 151.101.129.229:443 | jsdelivr.map.fastly.net | udp |
| US | 1.1.1.1:53 | incoming.telemetry.mozilla.org | udp |
| US | 1.1.1.1:53 | incoming.telemetry.mozilla.org | udp |
| US | 1.1.1.1:53 | aus5.mozilla.org | udp |
| US | 1.1.1.1:53 | aus5.mozilla.org | udp |
| US | 1.1.1.1:53 | prod.balrog.prod.cloudops.mozgcp.net | udp |
| US | 1.1.1.1:53 | content-signature-chains.prod.autograph.services.mozaws.net | udp |
| US | 1.1.1.1:53 | content-signature-chains.prod.autograph.services.mozaws.net | udp |
| DE | 94.130.130.77:443 | vo.turbocap.net | tcp |
| DE | 85.10.205.45:443 | s.o333o.com | tcp |
| DE | 94.130.130.77:443 | vo.turbocap.net | tcp |
| NL | 212.192.240.178:443 | app.turbobit.net | tcp |
| NL | 212.192.240.178:443 | app.turbobit.net | tcp |
| NL | 212.192.240.178:443 | app.turbobit.net | tcp |
| NL | 212.192.240.178:443 | app.turbobit.net | tcp |
| NL | 212.192.240.178:443 | app.turbobit.net | tcp |
| NL | 212.192.240.178:443 | app.turbobit.net | tcp |
| US | 1.1.1.1:53 | cdn.jsdelivr.net | udp |
| US | 1.1.1.1:53 | cdn.jsdelivr.net | udp |
| US | 151.101.129.229:443 | cdn.jsdelivr.net | udp |
| US | 1.1.1.1:53 | s314.turbobit.net | udp |
| US | 1.1.1.1:53 | s314.turbobit.net | udp |
| NL | 83.149.104.56:443 | s314.turbobit.net | tcp |
| US | 1.1.1.1:53 | contile.services.mozilla.com | udp |
| US | 34.117.237.239:443 | contile.services.mozilla.com | tcp |
| US | 1.1.1.1:53 | firefox.settings.services.mozilla.com | udp |
| US | 1.1.1.1:53 | firefox.settings.services.mozilla.com | udp |
| US | 1.1.1.1:53 | prod.remote-settings.prod.webservices.mozgcp.net | udp |
| US | 34.149.100.209:443 | firefox.settings.services.mozilla.com | tcp |
| US | 34.149.100.209:443 | firefox.settings.services.mozilla.com | tcp |
| US | 34.160.144.191:443 | content-signature-chains.prod.autograph.services.mozaws.net | tcp |
| US | 1.1.1.1:53 | attachments.prod.remote-settings.prod.webservices.mozgcp.net | udp |
| US | 34.117.121.53:443 | firefox-settings-attachments.cdn.mozilla.net | tcp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| US | 91.189.91.97:80 | connectivity-check.ubuntu.com | tcp |
| US | 1.1.1.1:53 | normandy.cdn.mozilla.net | udp |
| US | 1.1.1.1:53 | normandy.cdn.mozilla.net | udp |
| US | 1.1.1.1:53 | normandy-cdn.services.mozilla.com | udp |
| US | 35.201.103.21:443 | normandy.cdn.mozilla.net | tcp |
| US | 1.1.1.1:53 | classify-client.services.mozilla.com | udp |
| US | 1.1.1.1:53 | classify-client.services.mozilla.com | udp |
| US | 1.1.1.1:53 | prod-classifyclient.normandy.prod.cloudops.mozgcp.net | udp |
| US | 34.98.75.36:443 | classify-client.services.mozilla.com | tcp |
| US | 1.1.1.1:53 | content-signature-chains.prod.autograph.services.mozaws.net | udp |
| US | 1.1.1.1:53 | content-signature-chains.prod.autograph.services.mozaws.net | udp |
| US | 34.160.144.191:443 | content-signature-chains.prod.autograph.services.mozaws.net | tcp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| GB | 185.125.190.17:80 | connectivity-check.ubuntu.com | tcp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| GB | 185.125.190.18:80 | connectivity-check.ubuntu.com | tcp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| US | 91.189.91.48:80 | connectivity-check.ubuntu.com | tcp |
| US | 1.1.1.1:53 | contile.services.mozilla.com | udp |
| US | 1.1.1.1:53 | contile.services.mozilla.com | udp |
| US | 34.117.237.239:443 | contile.services.mozilla.com | tcp |
| US | 1.1.1.1:53 | wormhole.app | udp |
| US | 1.1.1.1:53 | wormhole.app | udp |
| US | 104.26.6.129:443 | wormhole.app | tcp |
| US | 104.26.6.129:443 | wormhole.app | udp |
| US | 172.67.73.142:443 | wormhole.app | tcp |
| US | 104.26.6.129:443 | wormhole.app | tcp |
| US | 172.67.73.142:443 | wormhole.app | tcp |
| US | 1.1.1.1:53 | pod-000-1085-08.backblaze.com | udp |
| US | 1.1.1.1:53 | pod-000-1085-08.backblaze.com | udp |
| US | 1.1.1.1:53 | relay.wormhole.app | udp |
| US | 50.116.12.82:443 | relay.wormhole.app | tcp |
| US | 50.116.12.82:443 | relay.wormhole.app | tcp |
| US | 50.116.12.82:443 | relay.wormhole.app | tcp |
| US | 50.116.12.82:443 | relay.wormhole.app | tcp |
| US | 50.116.12.82:443 | relay.wormhole.app | tcp |
| US | 50.116.12.82:443 | relay.wormhole.app | tcp |
| US | 50.116.12.82:443 | relay.wormhole.app | tcp |
| US | 50.116.12.82:443 | relay.wormhole.app | tcp |
| US | 50.116.12.82:443 | relay.wormhole.app | tcp |
| US | 50.116.12.82:443 | relay.wormhole.app | tcp |
| US | 50.116.12.82:443 | relay.wormhole.app | tcp |
| US | 50.116.12.82:443 | relay.wormhole.app | tcp |
| US | 50.116.12.82:443 | relay.wormhole.app | tcp |
| US | 50.116.12.82:443 | relay.wormhole.app | tcp |
| US | 149.137.128.149:443 | pod-000-1085-08.backblaze.com | tcp |
| US | 149.137.128.149:443 | pod-000-1085-08.backblaze.com | tcp |
| US | 50.116.12.82:443 | relay.wormhole.app | tcp |
| US | 50.116.12.82:443 | relay.wormhole.app | tcp |
| US | 50.116.12.82:443 | relay.wormhole.app | tcp |
| US | 50.116.12.82:443 | relay.wormhole.app | tcp |
| US | 50.116.12.82:443 | relay.wormhole.app | tcp |
| US | 50.116.12.82:443 | relay.wormhole.app | tcp |
| US | 50.116.12.82:443 | relay.wormhole.app | udp |
| US | 50.116.12.82:443 | relay.wormhole.app | udp |
| US | 50.116.12.82:443 | relay.wormhole.app | udp |
| US | 50.116.12.82:443 | relay.wormhole.app | udp |
| US | 50.116.12.82:443 | relay.wormhole.app | udp |
| US | 50.116.12.82:443 | relay.wormhole.app | udp |
| US | 50.116.12.82:443 | relay.wormhole.app | udp |
| US | 50.116.12.82:443 | relay.wormhole.app | udp |
| US | 50.116.12.82:443 | relay.wormhole.app | udp |
| US | 50.116.12.82:443 | relay.wormhole.app | udp |
| US | 1.1.1.1:53 | support.mozilla.org | udp |
| US | 1.1.1.1:53 | support.mozilla.org | udp |
| US | 1.1.1.1:53 | us-west1.prod.sumo.prod.webservices.mozgcp.net | udp |
| US | 1.1.1.1:53 | ufile.io | udp |
| US | 1.1.1.1:53 | ufile.io | udp |
| US | 104.27.206.87:443 | ufile.io | tcp |
| US | 104.27.206.87:443 | ufile.io | udp |
| US | 1.1.1.1:53 | static.cloudflareinsights.com | udp |
| US | 1.1.1.1:53 | static.cloudflareinsights.com | udp |
| US | 104.16.79.73:443 | static.cloudflareinsights.com | tcp |
| US | 104.16.79.73:443 | static.cloudflareinsights.com | tcp |
| US | 1.1.1.1:53 | client.crisp.chat | udp |
| US | 1.1.1.1:53 | client.crisp.chat | udp |
| US | 104.18.29.104:443 | client.crisp.chat | tcp |
| US | 104.18.29.104:443 | client.crisp.chat | udp |
| US | 1.1.1.1:53 | cloudflareinsights.com | udp |
| US | 1.1.1.1:53 | cloudflareinsights.com | udp |
| US | 104.16.79.73:443 | cloudflareinsights.com | tcp |
| US | 104.16.79.73:443 | cloudflareinsights.com | tcp |
| US | 1.1.1.1:53 | client.relay.crisp.chat | udp |
| US | 1.1.1.1:53 | client.relay.crisp.chat | udp |
| GB | 46.101.18.133:443 | client.relay.crisp.chat | tcp |
| GB | 46.101.18.133:443 | client.relay.crisp.chat | tcp |
| US | 1.1.1.1:53 | store-eu-hz-2.ufile.io | udp |
| US | 1.1.1.1:53 | store-eu-hz-2.ufile.io | udp |
| DE | 5.9.106.143:443 | store-eu-hz-2.ufile.io | tcp |
| US | 1.1.1.1:53 | a1887.dscq.akamai.net | udp |
| US | 1.1.1.1:53 | a1887.dscq.akamai.net | udp |
| DE | 5.9.106.143:443 | store-eu-hz-2.ufile.io | tcp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| US | 91.189.91.49:80 | connectivity-check.ubuntu.com | tcp |
| US | 1.1.1.1:53 | ufile.io | udp |
| US | 1.1.1.1:53 | ufile.io | udp |
| US | 104.27.206.87:443 | ufile.io | udp |
| US | 1.1.1.1:53 | static.cloudflareinsights.com | udp |
| US | 1.1.1.1:53 | static.cloudflareinsights.com | udp |
| US | 104.16.79.73:443 | static.cloudflareinsights.com | tcp |
| US | 104.16.79.73:443 | static.cloudflareinsights.com | tcp |
| US | 1.1.1.1:53 | client.crisp.chat | udp |
| US | 1.1.1.1:53 | client.crisp.chat | udp |
| US | 104.18.29.104:443 | client.crisp.chat | udp |
| US | 1.1.1.1:53 | cloudflareinsights.com | udp |
| US | 1.1.1.1:53 | cloudflareinsights.com | udp |
| US | 1.1.1.1:53 | store-eu-hz-2.ufile.io | udp |
| DE | 5.9.106.143:443 | store-eu-hz-2.ufile.io | tcp |
| US | 1.1.1.1:53 | safebrowsing.googleapis.com | udp |
| US | 1.1.1.1:53 | safebrowsing.googleapis.com | udp |
| GB | 172.217.16.234:443 | safebrowsing.googleapis.com | tcp |
| US | 1.1.1.1:53 | incoming.telemetry.mozilla.org | udp |
| US | 1.1.1.1:53 | incoming.telemetry.mozilla.org | udp |
| US | 1.1.1.1:53 | telemetry-incoming.r53-2.services.mozilla.com | udp |
| US | 34.120.208.123:443 | incoming.telemetry.mozilla.org | tcp |
| US | 104.27.206.87:443 | ufile.io | udp |
| US | 1.1.1.1:53 | static.cloudflareinsights.com | udp |
| US | 104.18.29.104:443 | client.crisp.chat | udp |
| US | 1.1.1.1:53 | cloudflareinsights.com | udp |
| DE | 5.9.106.143:443 | store-eu-hz-2.ufile.io | tcp |
| DE | 5.9.106.143:443 | store-eu-hz-2.ufile.io | tcp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| US | 91.189.91.48:80 | connectivity-check.ubuntu.com | tcp |
| US | 1.1.1.1:53 | spocs.getpocket.com | udp |
| US | 1.1.1.1:53 | spocs.getpocket.com | udp |
| US | 1.1.1.1:53 | getpocket.cdn.mozilla.net | udp |
| US | 1.1.1.1:53 | getpocket.cdn.mozilla.net | udp |
| US | 1.1.1.1:53 | prod.ads.prod.webservices.mozgcp.net | udp |
| US | 34.120.5.221:443 | getpocket.cdn.mozilla.net | tcp |
| US | 34.117.188.166:443 | spocs.getpocket.com | udp |
| US | 34.117.188.166:443 | spocs.getpocket.com | tcp |
| US | 34.117.188.166:443 | spocs.getpocket.com | tcp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| GB | 185.125.190.17:80 | connectivity-check.ubuntu.com | tcp |
| US | 1.1.1.1:53 | contile.services.mozilla.com | udp |
| US | 1.1.1.1:53 | contile.services.mozilla.com | udp |
| US | 34.117.237.239:443 | contile.services.mozilla.com | tcp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| GB | 185.125.190.48:80 | connectivity-check.ubuntu.com | tcp |
Files
/root/.mozilla/firefox/Crash Reports/InstallTime20230522134052
| MD5 | 115d9360262a8c011184cab5d99a9a9e |
| SHA1 | 39d30296680dae66f483266a2cace2b1d3cb29d0 |
| SHA256 | e42bb03758d260bad9688b0934b30c2cd11abb9fd767db546715db9e24912b8a |
| SHA512 | 989f19b8934d9b6fcaeb513c581d7dd18ef5d23632f41b9ce92fe27aa66cb7cb820dc37df97b4fbb4f4fa35276e0a46edb6d9ba00ff8bf372a6293eeb3212b1f |
/root/.mozilla/firefox/dclovtyi.default-release/times.json
| MD5 | 9951861f1ee3e90d075c9da8a2db4278 |
| SHA1 | b24b289f3898d049e8a060c2f5c2ff19114efc58 |
| SHA256 | 0af43a13d1d0f5aa910f37abe5bd4055bddb5e32bae8448989ac6b5bca514008 |
| SHA512 | f07c50693e27c37cc920cabe45a51fa0aba925511eec1af7011ce79f61d2ff280a6ac40d698e8b2928ed91c217f5480ede02ca724e6462e04855a3973ec3c66b |
/root/.mozilla/firefox/r9iba83d.default/times.json
| MD5 | e1f4e1d501159f5c003c57d535130bc3 |
| SHA1 | 36a9b4d8f4ed5dd6e8c0ee1ecec8dd889af01e7b |
| SHA256 | 357b3aeabc1960c8cdefe6c7372ca676689f0562bedd377bf81e38de64d5c6fd |
| SHA512 | a95cb7f2a70668b55b0ef5b2e65e65e04e09390e103d019d3050c18cd6d4e2038cf9fe8e9c48d3faaab9342a9f8338b2966fa093d92424c1659bc1600f814c25 |
/root/.mozilla/firefox/installs.ini
| MD5 | 997a15dbe1566ed7bfd04a2eef3f7344 |
| SHA1 | 8ad5fe49a97cecba46e714552cd7b0c281b40e75 |
| SHA256 | e5cb5b2d7ce35ea003ee6a4163dc09c9456a36d4fb11f51d0448e1218c9c2dbf |
| SHA512 | 4b6288db6d06f0693dc75665e837a003cd8778e27c1e7f180ec4d4bf602d1c74f2dd9a9ee602b69aba41cd8cb1c42db96a13f05d216068c2adfa5300c27e06e4 |
/root/.mozilla/firefox/profiles.ini
| MD5 | 6767683d182565a62a673783269d100e |
| SHA1 | 4dd05ac24d0ade0f75826ccdd339353682decc75 |
| SHA256 | 115c0e543d307a166d32c6edaf61a4de4ea3acd66ac7cad3a727a3f1790cbfdb |
| SHA512 | 343c4d796f110c2594021ccf3425719c70101b2831d558ab563e2be409b91b1b71141f84cfd81a2e89f57b1e35a2c7344cc6d20828e715fe8107e8227994abd4 |
/root/.dbus/session-bus/11c67417355f45d397f6be11f62e85a6-0
| MD5 | b0f345501b568851ae039ab65385b1d9 |
| SHA1 | ee8e9be4afd7d36a0757541c600764cb1e70985e |
| SHA256 | 72e9d82402baff9878e59c5302015edcd0029ebb22271f3cac6c3c401441c4ae |
| SHA512 | 3463140710aef5657afe92aacb4e0cca80ee096b9098cb76d91e1459f9a3f38b4174897ebb456a0e479eae2402e07e2b81c24334933e4d487d4bdcca97ce5ae6 |
/root/.mozilla/firefox/dclovtyi.default-release/compatibility.ini
| MD5 | fe452b7294d5928a9a5863b89ee0a6bd |
| SHA1 | a5d4c245071fa96476ba48b4725bdae7f1b7940f |
| SHA256 | d5bfb07561606a19aa96557ea109b175050dc0eb805cbef9c813503587d77900 |
| SHA512 | dc37d8507f08849e3382d2dbafd4a64555dbd57a288c95131e9aefb366630f1585811a9e1456b861bb9d2b816ed88b18ffb7580cd92b41bb9b0227ce1363843e |
/root/.mozilla/firefox/dclovtyi.default-release/cookies.sqlite
| MD5 | 9535f5fe817accc769c2c1d3354db39f |
| SHA1 | 6af62cf08717cf3bfa84eb1a7b311acf522ce560 |
| SHA256 | c53c15fcfac2bb57fdc88d23f932fc244dbaf4020f0f6eaecf0f77a37c21f8c5 |
| SHA512 | dc9c2c32eb42dda0a7a711e143aea58c603c1e9d885c3677e9fe86f525e1b0b32a46e240756263e56510b07e764ba69f2de13b90ec18210678242e10cfe17837 |
/root/.mozilla/firefox/dclovtyi.default-release/cookies.sqlite
| MD5 | 6ae0b24bb456e114aba513c5dd4bbae0 |
| SHA1 | 28e767613eec317ed770b9057cfae86f0469fcb2 |
| SHA256 | ef2a6bf02d688694d299c66516697167176be4d53c4fcaaf360d706edfd3684b |
| SHA512 | 7c6755249b34d78e32f1bc2cbd67cb04e9d1d69583f6b2d1a67eee6f4594a93989909f757e8d0a0074ff77733175347697482db799655b4cd28b1c1afe870fe6 |
/root/.mozilla/firefox/dclovtyi.default-release/storage/ls-archive.sqlite
| MD5 | e0c613bfd69956a19ce2dc5e925aa223 |
| SHA1 | 14accb230edcd6cb76967cdc6d4e5686db96b5df |
| SHA256 | 0d4cb11f6364c46a75f9eaddfca5c660b90dfd515df3afcd5e0baeca28a0f1ab |
| SHA512 | 01643c0131a392be92b3f281d7f633c1f502bff19090b0d716f1ac66aefecc3fcf92f393bef66b03089c9b9c6d8aaeb711b6a4f29d5a6729dd188c838f2272d1 |
/root/.mozilla/firefox/dclovtyi.default-release/storage/ls-archive.sqlite
| MD5 | 178d71e5529d637ac62f7e75fdd75896 |
| SHA1 | 339f2b949cc4c207b66aea11137448ba28d36dcb |
| SHA256 | 7b0050f1bfaab85c8f9067ae7d7369056ff752c0c852ef1462a96c22169004d4 |
| SHA512 | ec0e0105fcfbbae356dd55efbcf92975f35bbe5cb93fcabf4c08443e871957635d14830b27c4e1ddefbbaff8f9b7ec3590bf417a9442e1d7ee3607d14d56f664 |
/root/.mozilla/firefox/dclovtyi.default-release/storage/permanent/chrome/.metadata-v2-tmp
| MD5 | b12d41f09f9690aa228398abb427eb15 |
| SHA1 | cf25cdb20e19d1a972e1a0e1231616d66c2ec250 |
| SHA256 | 627d9c0d8c96e75f3c83c4f12dacb9002c53fa07413df5307c3a95c12da8265c |
| SHA512 | 06d3d69050cd4d599e0dcfb18c0fd7195e345976a8d8044dafea8f70a2ecb2071b954809cc2a04b81b5077af479cc663f84f559a376c85b09cae87c9639df4d1 |
/root/.mozilla/firefox/dclovtyi.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
| MD5 | 07a412e08825220262ad2890757ff779 |
| SHA1 | f46c127dbc070ded87a6078b3c1c761955f96de8 |
| SHA256 | da640f8b665841b520d2262a21cc3f82aeaa881cf81a1ddae27ef501d66544e4 |
| SHA512 | 0134c783bf3293848e479b478ac57a1e0f4202cddfb8b57bc6275aada7345f398cf8a627e9b1c34fd618192c2f0c9737b1da487daf33f9c557ebc1377105582b |
/root/.mozilla/firefox/dclovtyi.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
| MD5 | 2b2c81e172c9cb84664131941f0bc2e0 |
| SHA1 | c4c5f16ddae3c090b5fb8c1be024c9d17d5c7a0c |
| SHA256 | 20fd6b0d2d157b0936b2038647fda43b207f276dbdb8e0c0c209623d1dc43d9a |
| SHA512 | 3748d44090b846315df26ac8987afb6d0ac5db0b217ad971cd1c71e11dceebba3deac51a5e8d5bbf2412e02e7101243314eac77b641019a7f21742a5979b6add |
/root/.mozilla/firefox/dclovtyi.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
| MD5 | 4328f0a849ec6adb8a1c6bd70fc6fe3c |
| SHA1 | a9800db6db90fa45ab7e0db2a669c589c506c60c |
| SHA256 | f8937d535dc4043de36fae0bc712a8ed1462d1e70d8aad2308c9e475e75ffab3 |
| SHA512 | 1f82bdea090f77ec71cb1ab4d2604be67be2031918917978ee4be9f7ddcf6cd12eec828bed2d15a438f3ffe53aeff22dc90edb220c69f1bb735256ed837d041a |
/root/.mozilla/firefox/dclovtyi.default-release/prefs.js
| MD5 | 4a1e908373b2c418e25056d0d28453dc |
| SHA1 | b20891559cb58568c18fe214de52c7e2eab1bf87 |
| SHA256 | 2889d34765bf93cc4155d7f77a24c7746b602a9b7eb1b051a91f6f8ad2b9afb1 |
| SHA512 | 50a163cc7fc45e34d288459966bf34ddf7b46b403b0c540ebb3876463b1271532407181e52d8ab14d2c0f415346a39208f3ceff915cc321a3b81cee7e3446f81 |
/root/.mozilla/firefox/dclovtyi.default-release/prefs-1.js
| MD5 | 7cb5c597d8aa317da6d4fc49c3018f30 |
| SHA1 | a23b6fbb9528118cb3262f580098087f25ff58bc |
| SHA256 | 3a1708f49e282f9d28f2472a4fd9f9841e0865ce1561624d306a7afcbaedac54 |
| SHA512 | bc376b1670cd13f969b818d7fc29c798139316820633a5085fffd7f4b75e07c6b6f84192ce7e1bfd26eb690d10c9f5bc4a09d9aab44c5a9dc5f1869628a4393a |
/root/.cache/dconf/user
| MD5 | 441077cc9e57554dd476bdfb8b8b8102 |
| SHA1 | 3f29546453678b855931c174a97d6c0894b8f546 |
| SHA256 | b413f47d13ee2fe6c845b2ee141af81de858df4ec549a58b7970bb96645bc8d2 |
| SHA512 | 80536c6170dd8626dc081af148d39ec2fd5d090cc578a76647e7903fd34bd02e4333ece57b0e24ff116f43429b6ff541834bd40ef0c8d3563acef5ed0fd254b8 |
/root/.mozilla/firefox/dclovtyi.default-release/permissions.sqlite
| MD5 | e8e127d2a53b48cb593928fed3d9a615 |
| SHA1 | 18ea3a6fd1b5b99bd34e548cfe8244f4764311ff |
| SHA256 | 6f12baefc13703e656d3e71a5e1dc3f874b41992cb23ea7e9ebaeac39a0d4d54 |
| SHA512 | d326ab1b18bab2076a3a1b5b3a977559d6debfef84cab210e56860f699a671fc92744b5518a8738eb88a80f9820284473d6d25cd9754bca9d539d1d1abbe7003 |
/root/.mozilla/firefox/dclovtyi.default-release/prefs-1.js
| MD5 | 9e0e4466d29dce10119d0ce4e7e3836a |
| SHA1 | 53816bd3fab0638c50d944ae47d3b500913417fc |
| SHA256 | ec874e953f56cbe30380d8a054f6e5012a93a01642266bc3faa11e3df698ee7e |
| SHA512 | bb5964ac2bcfb8654c72c929c162918f25c6fcb502552fc2536dc4e09701c59b6d2e1178f9f86c09b0bef1b3bd466d2b34cb40013c36ccdb4c9430c3ae1891be |
/root/.mozilla/firefox/dclovtyi.default-release/times.json
| MD5 | 96b09bd368429f8c6e5908af96fdaa1e |
| SHA1 | 1f68a8a95a046baea9cd7e24484defeef6380cf4 |
| SHA256 | a6ba10e16303a8406898a4da1925e6c3b0fd1e1a14a5ed1d00310d90b355ca3c |
| SHA512 | b637eeec0cb54445f92350eef7df4709ca12ac1b2ccf3827e2e1ca3fecafbd201d5e2d7e22eb8ae9a38aa47d8f142e7b0a0acbf2b815bea1f5f88da42ad59144 |
/root/.mozilla/firefox/dclovtyi.default-release/cert9.db
| MD5 | b7a0f89237e353e5752817a55719bf29 |
| SHA1 | e11c0843d73580668e4292fa243e086c285aa157 |
| SHA256 | 0ac705e1dd8f9dc445365be5c0f2fe39138702632c01f1b6246dcf1dcdb6c988 |
| SHA512 | f5e7a73be3b475222b9ed5da1dae0a20f3d091b83dd921a8927adb436a3100c6ebc4f412a5247f935895fbc7837101322b1d0191375814467bf66d91dd32869f |
/root/.mozilla/firefox/dclovtyi.default-release/key4.db
| MD5 | 6813174ac038b2698270864a3edbcc47 |
| SHA1 | 46754908acab06d0c64fe4eab24d8e28e03ef601 |
| SHA256 | d5c15d902b183853827db3ec4b2ed0d26ea002d639345f8b8be2f464dabb718d |
| SHA512 | bfc28a86bc89c9009a8db7a290e74f15058883ddd50605fbaa4fd0b3e6238c32d3abe9e8b96b0ffd5a988fd2ee5411e58c37b2cf4502a34aa7d4fa4b325d87f1 |
/root/.mozilla/firefox/dclovtyi.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite
| MD5 | 759544297aaa61f5fef8ee42d0ae4393 |
| SHA1 | fc2d66f6e60409e3e8d38623ce5f817fc7f571e0 |
| SHA256 | 1bd2000cd972e80cefaec6e982ba261d224a818f367de0fdf8c51fa5a05d7ab5 |
| SHA512 | 8aaa2ce66f10d46f7c9200af841ac7bd9f5b55c30308a14f0deda44ac62581c45daae45154487c0073a0d5847d5926cbb4072ca64a702ac6b834ad0bb482804f |
/root/.mozilla/firefox/dclovtyi.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite
| MD5 | 0bb04a183d8c87e55cfb5c599cd7a1ac |
| SHA1 | e27f58b63a40595a1bc15cf75649ede45fd2e6e9 |
| SHA256 | 48b8f2b2015350ccf6b4004e7cab916788a46374a7595c6e9bf3fa86b32f283b |
| SHA512 | 4007a42c0ac0cd1a07a24b0aeffc1ff7e428d927efe45ba52086ebd25049d5ce467715ed7372e5a97b9afa9048c857782dac8c605ce99c27ffffa7589749fdad |
/root/.cache/mozilla/firefox/dclovtyi.default-release/cache2/entries/3D1E19D09F398691ABF62061591970855193B42F
| MD5 | 7a7f75d8a795343bc834bcd1fc5d3ae9 |
| SHA1 | e0b88316e6662b6eff052e4babfc57842384d5d1 |
| SHA256 | eafae8b7ce4bc7c5246d7d5fa13ace0f5180db1b42e0c0ec3995eee8990d1c68 |
| SHA512 | 5f0afe67c865dbd373e7dc419243428c975142074cac22af618ded86d2c08e680669f3773228496843fb23d587a01426471d2150ff63b0c1d07618424de9e615 |
/root/.mozilla/firefox/dclovtyi.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
| MD5 | dd3f6ba37c670af5953593535e435d04 |
| SHA1 | ecfe4e650a050bce77e8ff7468de04c1b8acc9a4 |
| SHA256 | 5cc6fa137a1f3a7d0b615b178877f12c460b22f95702eb7534d5732ee6599561 |
| SHA512 | 86e0482543faae6fb279ca71e1e6d6461d32317e74baebb3973e0fde9800107faeb9c2347be6cf8a47556ae43c8e6c224a595e952f621e40ad2c5eba920df2b3 |
/root/.mozilla/firefox/dclovtyi.default-release/prefs-1.js
| MD5 | f2f580954f53c054bf740153a737828c |
| SHA1 | 2d2927f192ceb431627cc70709d9eb10d96be86a |
| SHA256 | 1ef6677726dc95a8a0df55a1eadcbcc23f03539227d2038513bf38b54c2ba164 |
| SHA512 | 31976fb8186aefa43a2d4fd3c25426e6683a583a45f6f20f5deff87aac06003b5bce0515509cf0f023bb252cc5fe492a9a788cb421abbdb76b2f583dc746d7d6 |
/root/.mozilla/firefox/dclovtyi.default-release/prefs-1.js
| MD5 | b4f42e0050d153f42ee8b3e22988e774 |
| SHA1 | 68109a7aaaf0fba72b5468b17c69f58b20d8a443 |
| SHA256 | 05293751135f41d02868ca1248985e71f1d5395315a73a21f9e64f5487d7afec |
| SHA512 | 67b3cbfc9da8f21c9a4c3d214d319eef116ab3063220a0ee17cffc1851c7207b7b0bd382e4b93db7a5143ad32e6c85659da9deac4ba2cd9b06854e76ad040924 |
/root/.mozilla/firefox/dclovtyi.default-release/cert9.db
| MD5 | 5b8daa5eb89c4cf75283e3496e8eadc2 |
| SHA1 | a690ef32401eaa7d156b99e8e269adfdabb623b3 |
| SHA256 | 517d3cada7d8d94c40792a5e4bdfdf1f51f8782d7df2251e21d1c5e6894bb891 |
| SHA512 | c69bc83ac2698c26c7cbe88dac22c10cd8b2d5175732ffac1ffbd5b2621464c89bf9a318bff84ee014196b9f4671d05555fd0c6e16cd3ae64c06f7cee9a3c5d5 |
/root/.mozilla/firefox/dclovtyi.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite
| MD5 | a9ea64d246436271499bca5919fba590 |
| SHA1 | 16d492787e55404c4b34a7e8d051639700287dfa |
| SHA256 | 97e2675690a1966ba54e33f9da95c2d2ae13d7397017dafaf175408ef0cc2cb3 |
| SHA512 | 4e60858a4951326cfdf6ad540b9fe0a4c3a1454fcee0248ab5c9e5b615780c1f7208a27d5a649d75bb020aebfc8c321041e9969bb8c6fbf1278ace8edeaed3b4 |
/root/.mozilla/firefox/dclovtyi.default-release/places.sqlite
| MD5 | e14ff18fbcfd1da4c7f6d565c1da3491 |
| SHA1 | 09dd735017f00109243ef61e2bb7b6e95321b8f4 |
| SHA256 | b25bf5269649e4061a0d0d1c12a3c56deba5895a7c409cd0bfa2df0de7a39018 |
| SHA512 | 3749f6064d9ddee9649e4ad6dfa0521fb67658baf04f40b37cec8bf1fc4c0fbd01948f6a14f2189e725a1b58682452519409858dadbcc1380d44b7b54856a271 |
/root/.mozilla/firefox/dclovtyi.default-release/favicons.sqlite
| MD5 | 3c0a1ec298284608bfa51081ea539be3 |
| SHA1 | e51b58f6fe89d45fd8a1d935b51da172d5f6f32e |
| SHA256 | 34c4fe7ab2d3e44f193b489ebe84c17d67b336546af9ef231897ec09d7ff16f2 |
| SHA512 | 8550f530377f7a98c46a6989bec2c43ed644274509a5b987e8e0d034bf867b3315dcc75a2c851a5ac43a45b40bf51c789d828a9a69c02157b3e900467341a28f |
/root/.mozilla/firefox/dclovtyi.default-release/prefs-1.js
| MD5 | e3bd74df249fd7c1238e2d9052a382a8 |
| SHA1 | 2e5603404dc1cfb4b31055dca02c0a38cf5b0a0e |
| SHA256 | a5bae4dbc62e21d0c7e9f836299ba4a738f1c4c2af5c50ed0bf5362741742036 |
| SHA512 | bf28c2cf0f304864298b8658fb384fd7b99ebb72f67d1f1b195022b16a7b8d203e158f4efbf563d3ce8d6a087f876c33eaeb51383bbb13497edaa17886e7d7aa |
/root/.mozilla/firefox/dclovtyi.default-release/storage/permanent/chrome/idb/1451318868ntouromlalnodry--epcr.sqlite
| MD5 | a8dd7ebaad5528b23f82ccb1534cea18 |
| SHA1 | 600daceacfb5cf9df0b66ba7dce4516b2ac4df70 |
| SHA256 | e5b0d02c18ae36c4a220f41fd97c66060c17aaafcbb324a57ccdc2707c44c4ec |
| SHA512 | 67f867a8e2b37fb6bececd5ebc570ca594ea329142badd63d1281d5e735f515a5e329abc6eb9a9d3465aab0a08541b4888018d859964f160a52345ab93532bff |
/root/.mozilla/firefox/dclovtyi.default-release/cert9.db
| MD5 | 486d776a4b8ab767c6c9bf867e09797a |
| SHA1 | d7ab66ecf55c19e01e25f9a5ea1be4035e54a255 |
| SHA256 | 3b50dbb750ca9a064e5a59de64f66d1a91415647786cb4a354c3bc43c0f74577 |
| SHA512 | c56fdf04851f428f34184cac62e306523af1a4f59658333a7d1415949b915a0d25ebbf30e5462eef6ed2b095f7fe9b30b789fe47ade0b08b6be81d14cc10c697 |
/root/.mozilla/firefox/dclovtyi.default-release/storage/permanent/chrome/idb/1451318868ntouromlalnodry--epcr.sqlite
| MD5 | 2c66b42bc6c76fdbfa5ba09378ab6123 |
| SHA1 | 1528fb8c1581acb615c57c3ee57881210da0e20f |
| SHA256 | 5b04ee25692f2f6c50e1468b7ef8d3a095d15f8c296b6bc18f5e506ae96b7ff8 |
| SHA512 | a61c4abda54ae8f181967d40584af781bc2cd9d5305fdf419f1af1c7a5d1b2e4617249d2ef92bb39669b900069f7e2a0cd7241aabd3559c0f145a4d50dc0d882 |
/root/.mozilla/firefox/dclovtyi.default-release/storage/permanent/chrome/idb/1657114595AmcateirvtiSty.sqlite
| MD5 | 7352c8848e88edc39b7fb5e663888187 |
| SHA1 | 8c3dffe25cc56c7aec1b782292d6fceed81e6304 |
| SHA256 | 7a462086a26978809c719e57a7ea6a25568767fb7532014e8531fda94b660e0a |
| SHA512 | f2a0dbbab5c2c1702b03bce15a47739481f523e127d1372b40534db9a20b2bc99fb53710ee0e5d44176188817cac704cf4f98cdf087e7e89d244281fcfc3b280 |
/root/.mozilla/firefox/dclovtyi.default-release/storage/permanent/chrome/idb/1657114595AmcateirvtiSty.sqlite
| MD5 | 155813ed1c005ed9ef571f19bf503bcf |
| SHA1 | 5be60b1a6c36f3297d970710f525c3a16f2b4bc4 |
| SHA256 | a9feff773abe47388698b31d1b1412663498e87bdfff30db641d920e15527a00 |
| SHA512 | 6772d016afe74c02de036f4521161ac6a84beb3fba7c2635d51a970cc64e2c5dd56401cb105b8d0270711b389a4111183eb13543606b9921390e7342198bb07b |
/root/.mozilla/firefox/dclovtyi.default-release/prefs-1.js
| MD5 | dccd7656c558a8336e967dc05f64adbd |
| SHA1 | fdf858824108fcae37f439ffe5a4b7af6830cc24 |
| SHA256 | 2fbf7ad923f25a509bbd6d212b8e2e3af9ca05840ac652bcd056be06c2f377b1 |
| SHA512 | 8e9082fa0a35e2310cd451636c69a8c7e290805e0f4b75b7a9d4c625f10736cc7cce7c5a62de5dab2409e2c182900cd57939f5807ea72cad11e5662ca9f149bf |
/root/.mozilla/firefox/dclovtyi.default-release/cert9.db
| MD5 | e3f513ef15d47e8f7564ef8257144978 |
| SHA1 | f6fca503307e0a50a96dd4396a44597ef0b0870f |
| SHA256 | 294f93ae39fa5f9a2ac8e127ded836ea7a303dd0a9858feb1181e21b3b19b48b |
| SHA512 | 0998825b2a637edab85718a67fad06fbd25e3d6d0a7300c63763e8d5cfc9817846719c429e0175a8dc0f439b261713641694e52d5e612bd92c078a2b9dc3dd3e |
/root/.mozilla/firefox/dclovtyi.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
| MD5 | 4c959dce377501ac37e293550d9dc21e |
| SHA1 | 2e9651c6ac47c9b844b007e6ce6562c6d671648d |
| SHA256 | c822ca774d12d935f4e92a0023d4318a323bfc6aa34910de66a8e9e1504bfdc9 |
| SHA512 | 149427c234bcf5f663f5876d64ee2ea47a77ad6259cdfe682b30475065c892aef4a18df68e149158b06b73e83287818c3c396439a6380610cffb4838687d8b8b |
/root/.mozilla/firefox/dclovtyi.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
| MD5 | e87498f20e6ffb24c100b389c9186fd6 |
| SHA1 | 919ac3ffd22845e2ed3bf53ff974ab495d0a7c73 |
| SHA256 | 98fb2b81377690e84819f72cb58f02505856485830b2bb98c5f1e3b4804013d0 |
| SHA512 | 706619b456d5beba0308ca27ff3e011c844aea05ad99ae3a572748c8dbb20e9992be624609ca1cb56ff82f29181c9b1e95b9ce7032601db4c24d2e13e5d454e7 |
/root/.mozilla/firefox/dclovtyi.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
| MD5 | b44769778b987c2e59501ab0d21e6f72 |
| SHA1 | b361905f43f0fe905d8e59052066566bf97168c0 |
| SHA256 | d7a786413be5057a7dd09a8fff56263e6d4d4b0a86503ee3cd29546b5053e532 |
| SHA512 | 303d8ed189a895c4cb5c836a7b6a617dd6922c958adc4af3cdd67ab13f6814ca3b8a573271f8914316cfe850ddb5d774c0b69925078a43e127031a13944d5d67 |
/root/.cache/mozilla/firefox/dclovtyi.default-release/cache2/entries/039090029E64BC91E87E77199A6A6BE11FC39B6F
| MD5 | 2415f0dd49ed322a511e78aa431b42a9 |
| SHA1 | a608a9526652df224c11935556d692af5e7f6e0b |
| SHA256 | a24d2d8af95bc4836aa8f144f856af938871723a5fa2fb446113a96e25109d1e |
| SHA512 | 0fd213c8fdbbfcff8c6c29bd399c6dcc699d17ac7f8cd460ffbbbc786f5c5976784d4dd86e2d63ed5367432d14c854ce509f01d85ba24a18bf6324bfda74d6e7 |
/root/.cache/mozilla/firefox/dclovtyi.default-release/cache2/entries/3D1E19D09F398691ABF62061591970855193B42F
| MD5 | 88e1345a2f8ce2efa93575738f10060d |
| SHA1 | deed8271e98d9017801331d9ba732757bbd34dd5 |
| SHA256 | 150e7859ec587b825ca6d0895e738b7746297b068870097522cb2c54c0da46be |
| SHA512 | 0421c87b5f27264c9d81f8869daf63ce740c609272d53e7fa7774cb232c81bb160065be5db4109ee61c178a8f109c8e4a0da72d026a46fc8931399024a2ca2e3 |
/root/.cache/mozilla/firefox/dclovtyi.default-release/cache2/entries/F18D85F52EBBBA2AB081EF739ED0D6E8A76D497C
| MD5 | f99dd7f0d88212c236f7e21e65794823 |
| SHA1 | 8d2baeaee5679529678733a33b20968b3a0e1d02 |
| SHA256 | d8026c9c3da4d5ccda01aa53a235a3631251073736d2881eb3ff13ac91f7d02e |
| SHA512 | d0b2fe3b1606fbc5923502fde60bdccff274b9ed85c91fbfe1829b9054643f7c2dcd2ab5533366b5726248849d43a602f3a999775cc25e7445226ac995435067 |
/root/.cache/mozilla/firefox/dclovtyi.default-release/cache2/entries/0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F
| MD5 | e40ff348ff85b98c4d7c87f5b7057291 |
| SHA1 | 4b16a68a402a3294f0af6a67f9dc851479b1faae |
| SHA256 | 6f34dc9afa1b346957f1a19181f08fb6af79cc1ed6814675569f8377cd2898cf |
| SHA512 | 2feb4990cf73f3e9451ecb5cf20d95b86ac6237226ca44ed626e68664b8a83190830b8d55e669688b206752c17c9908b8cde39d65442b67a17d6abbfedc21c42 |
/root/.cache/mozilla/firefox/dclovtyi.default-release/cache2/entries/6D89348819C8881868053197CA0754F36784BF5F
| MD5 | e45548c0cad6a1e5bf926e2cc64c58d3 |
| SHA1 | e05a0e6c53126e51abb127e8896dc2316a819877 |
| SHA256 | 7ad6f2d8ad01afef1f523e82cda682ead0eae346b21354f5dd9fda1787682cf4 |
| SHA512 | ac825596b6928c6e40a86802b9b4e3e127784633950fcd5544d805726e6e234c457d8e768ccfe80664c66f2a335c2d056e20176f6689cefe9cc64c4ebbfae23e |
/root/.cache/mozilla/firefox/dclovtyi.default-release/cache2/entries/62582D5A2635E9E6B9AD76C730998B691F54AED8
| MD5 | 5dbb5e42c6b0586c6aaf7520bd364995 |
| SHA1 | 121ab65bbb15473ca37e875602d04b9bf1ef78f5 |
| SHA256 | ad1314b0e3fb24fefff8f578ad2686d03017085c29a81981a4bb021ab5ed3580 |
| SHA512 | 4c0cf87a86c65ebf9624393ad90e36fd54c200ae357106ac03183e409e8ab0c8323dcf27477eb85ac0f6e678c6da8e59969394741749d2bd0ab2a6ae89065885 |
/root/.cache/mozilla/firefox/dclovtyi.default-release/cache2/entries/099EB2BF8827A4F91EAB3E38B14650D0205226F2
| MD5 | a9b2161b703a60a456191a0e7dc155ff |
| SHA1 | c1a75d8d27b249e48bd5b54f066f30bb338c35b1 |
| SHA256 | 05e545e16f756517b9fec33906e93830c54962737700a2eea18d129b3633e9f8 |
| SHA512 | 5a457cc7e1f16d0a11b6bc69cbfda435cc9f854d1822cebd41176e41ce0167b00b4510bfb59eeb9dbb23bb43aa6fe92210187c2a199376a193b202e996457081 |
/root/.mozilla/firefox/dclovtyi.default-release/prefs-1.js
| MD5 | b9efbbcb70edf28590609f92c649d0af |
| SHA1 | c4071d363166f0a6d084db4efca8b07f65a19e9c |
| SHA256 | 6ff844f91adc5a19c29254d223496893400d25e770966c0a0b11fc22b562c648 |
| SHA512 | 9734d2c7cab620753a633a72d6faf88b680c9f93b4e46218963e4c9d9c9fbacb82efc522e86ffa2f8c1045224b51d34639c5c73c5fc9a0335abb3222332c87ea |
/root/.cache/mozilla/firefox/dclovtyi.default-release/cache2/entries/82F4CDEDC8A08E6BCE520A4114F15825F2E886F6
| MD5 | eb59e45817ac1f1582d84c5f5b597be2 |
| SHA1 | 07c8d46e34f81c827123b9edf39d6032cb28e3de |
| SHA256 | 604340bf06948a2124763f3094fd55f05a07b7b617022896200477f644b9ba38 |
| SHA512 | f8e98b5c6fd17927c2e5828e1bb2f591b0fe0d7ff0ab92c2fd5863214723462c22da6d24b2a672ac50323e479246a4b85a8d420ce1a267d226a048de2754211b |
/root/.mozilla/firefox/dclovtyi.default-release/protections.sqlite
| MD5 | c7cc11494c34e02565df83d17beb33b3 |
| SHA1 | f379ad7c0fa73476d3828d8a89ef843046332c12 |
| SHA256 | 7ca17bb171e22b4ec498c1d20587b30d62d773b114d0e66bb00ec874506eb85f |
| SHA512 | 0cfcb15a985a35e917c9652721b516e2d1c358c6db3dca4452e866d250b6269c4cc69773277f5ddd5a0c5a338f95d9f6134224f0097df194985161cd3d47cfd6 |
/root/.mozilla/firefox/dclovtyi.default-release/content-prefs.sqlite
| MD5 | 1fc2e7b7fe2c5be305dfa9a2bbb60771 |
| SHA1 | 4967389dea050001cb1af3ec799edb7805c3abb8 |
| SHA256 | 1953edcac737d1ad3de6fbf69671163882fdc0be5bd21d00378d8d8c753c757a |
| SHA512 | fba536378ab9b5f04d92f1029b92d255c7da445a29e2527647bc16e57d02c179de1e78a2de11db1b00cc54c24d3715980c84c0cde103f47c6150f2e7bb8f93d5 |
/root/.mozilla/firefox/dclovtyi.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
| MD5 | 79e805ba7ae8b8c943945720c43701fb |
| SHA1 | 9ef184efc81fd55c0a7dd0fe592a7c11cf59421a |
| SHA256 | e0b626fa2690283b6ee531551f46167c8ae301dac58effab3d5f4540dcb99180 |
| SHA512 | 07397ba4d1c29245b86747425a8dee1fcbde47e2efc545e315b3b8cec910976f72e3c663c6a0881de0fcd9814361a9697fabfcebed2981b45c0108bb4cd2fa75 |
/root/.cache/mozilla/firefox/dclovtyi.default-release/cache2/entries/099EB2BF8827A4F91EAB3E38B14650D0205226F2
| MD5 | f64d25c010842d077b50bc51286cd035 |
| SHA1 | e58fd7f9b6464ed29c131951b6b6ce2730c4fa34 |
| SHA256 | 1749de7af89381972479e7722bd543a35b7b609ba611b10d4a089d0fd6ed3ec2 |
| SHA512 | ea93b627cf46da0a0abbb033736ce0bb14c6649a7fa5a1c84aeb15a286c6024957acbacbceb6566506109ba314d5ef733a71549d4b504f7d55a79caf9c436338 |
/root/.cache/mozilla/firefox/dclovtyi.default-release/cache2/entries/6D89348819C8881868053197CA0754F36784BF5F
| MD5 | afc7c3a52c6cb91600e58ce86e9b7238 |
| SHA1 | 919ecd8767502f3c666cc5600155ac4293f7fc6d |
| SHA256 | 8325d8622457e9cd49bfc0f41463e42af3309b0195735c59dd09e31cc5f4f5dc |
| SHA512 | 069392bc1d56bd1b8ceaf4c94ba99c4b2974f4ebf657b1ff632a23627adb39b589d06dedc5df5e551c9bcf195f75c0bbdb1c04b5e48ae97a6c003156b968e3de |
/root/.cache/mozilla/firefox/dclovtyi.default-release/cache2/entries/44230749A38B6989F56217B435A03E84CCADE62D
| MD5 | b7c8cda8f40542dac642a48d63865533 |
| SHA1 | 6f7341cfb8d9df270b34ee08940b4c3a52cce270 |
| SHA256 | a757ebe6f5936950b0dd88af0bc3ad68643781f976e5ad8c275c61ae858a4d37 |
| SHA512 | a09cb6251e499046652a888ffaecc8f4db907d5fb7b6804361e26bc00985ebcfb4a121f93e6de7779708d35765fb9aad7f205c7bd0d944b05359541115673b1c |
/root/.mozilla/firefox/dclovtyi.default-release/prefs-1.js
| MD5 | c2f48b8b8f4e5c34bd184858c8a54e4b |
| SHA1 | 2f8380803636fba0775c612c2e4d58cb629f72f0 |
| SHA256 | 5d5a17874ba2f8e9f2a7d34e3e8bac14a6a371c470d75c72c6de15fbf21fe178 |
| SHA512 | 54fa345c9c9c0036804e7eac15a6d282d99c4045fda6c80ba744041b6efdeceb05738e6f7d36d951d579f7744f966b4ee48bae4395ab0dbe699e604338f1ad68 |
/root/.cache/mozilla/firefox/dclovtyi.default-release/cache2/entries/62582D5A2635E9E6B9AD76C730998B691F54AED8
| MD5 | 75378cf2cd1c31e328cfc2107ce4e9d5 |
| SHA1 | a542492b216c7c6a5a81b6665012a0ec06ccce06 |
| SHA256 | 28cd3c6e106746292d26c1271acc7804e1c62e4a50b97954b8f08b14f93bb309 |
| SHA512 | bcce951d6570befae4a4141d195123df52d2caa78ca3fe5d96485ced95f994765ba801f4ef557e03fe644b866b4c6e1f00f33dd5310d3e6b30499e121c8add23 |
/root/.cache/mozilla/firefox/dclovtyi.default-release/startupCache/startupCache.8.little
| MD5 | 7c9e07418bffdef18177e589480a15c0 |
| SHA1 | e08b08796ead66fbe5b6a647342ada2bb594b82c |
| SHA256 | 93e508c2a3b30ed5aa68d82c417131826069fbd76e67900791099a56f099b9b1 |
| SHA512 | 5dd20ace7d64471b101be75e7a609cb119d0d9c929680d4fe96368e0e61269e954a5b3863390276df43d18df6bb3141ada743662c0b6dd39eead9490555d5e7f |
/root/.cache/mozilla/firefox/dclovtyi.default-release/cache2/entries/D23F7952044A1A6016B80DED46FC563716A295DF
| MD5 | cbe3057244d55fe150852429f5c5e63f |
| SHA1 | 50ee679c7398ed44d687ae3958fbb194500cbabd |
| SHA256 | 8171b515db30e924e483c0ce4785e5bc09791b95293ba160d7fea260c5e17efe |
| SHA512 | 174e034fc2c05548e23d6e5bfd031237bbad23fe2019e9ac39549fe1d1cfd2002221ed843b6e63c89556d460d1cfaf42da01ebb33d5567600045ba3688731607 |
/root/.cache/mozilla/firefox/dclovtyi.default-release/cache2/entries/3B753D69FC0E7D7E991C9275F3AF628B7E755477
| MD5 | c3295ecadb94fe14d3439252266b3964 |
| SHA1 | 31057d32f1ddf4eda1c4a10d5180cb8c310beb21 |
| SHA256 | b52258bcd92293f7753e46d9fe040448f90cdc45154e0d38bb461ca27bd18c3f |
| SHA512 | c6fd95b310d090d3e093b9f03267bca88b179eae3abda74d79fd294ff8d6b78706ad4c1e3c55ab2b9475f55466990de5dd47b75b11d0f3b7c83bcf0659793aee |
/root/.mozilla/firefox/dclovtyi.default-release/prefs-1.js
| MD5 | aa10fa10e3d55de023966f6da94b5472 |
| SHA1 | 0ad1312d5869494cd46a7f232b61fc731583f98e |
| SHA256 | 3785072027f816a37fb42fa7e743faefd2d59be431557012039bb92da11fbda1 |
| SHA512 | 3c51ca3f4210484635602a403da55845739e821ce0c8e577262b91dbb7f7e76d5666668fc9ffde37b7329e1f0cb7eeb454e8b2cad1fa0a74da3b256a3acadb4d |
/root/.mozilla/firefox/dclovtyi.default-release/prefs-1.js
| MD5 | 821db27b8af8526d44e233cb687cb03a |
| SHA1 | b56349ebc8d6b3909b83a67938fea59c62a3c13f |
| SHA256 | c2e4779189261dee79898d1cd3e6fad5146848b81e4638d39a7054df59fef45c |
| SHA512 | adaab5db2d1d4cbe1f2b15fe0806ffa4e5e9e17fb9881e6b0085656a637d86f3f89bf6fbda81f2a99d3a6475ee7a16c29f79e6a601fa3a75d0f781a9dbde91bc |
/root/.mozilla/firefox/dclovtyi.default-release/webappsstore.sqlite
| MD5 | 41c22c9f81a84b1b0e5ee7ec2ff7c545 |
| SHA1 | d12424cba9e4e9124bf3f15e556c562b95c9b6a3 |
| SHA256 | 4ffdc78433817da79ad2e84b26a2ffaf62d8c1baf80421751d752c3d8723328f |
| SHA512 | 8b690c55ae0b25aeede62a09dea1ef6b7daa9880ca63c6d4ce192160daded05fe0dc44b115216ce10523e2ec45991873c249f159fe8608712818f5ead327897b |