Malware Analysis Report

2025-01-23 15:27

Sample ID 240417-cka1nscc8x
Target https://www.google.com
Tags
antivm spyware stealer
score
7/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
7/10

Threat Level: Shows suspicious behavior

The file https://www.google.com was found to be: Shows suspicious behavior.

Malicious Activity Summary

antivm spyware stealer

Changes its process name

Reads user data of web browsers

Checks CPU configuration

Reads CPU attributes

Enumerates kernel/hardware configuration

Reads runtime system information

Writes file to tmp directory

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-04-17 02:07

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-04-17 02:07

Reported

2024-04-17 02:08

Platform

ubuntu1804-amd64-20240226-en

Max time kernel

4s

Max time network

18s

Command Line

[firefox -new-tab https://www.google.com]

Signatures

Changes its process name

Description Indicator Process Target
Changes the process name, possibly in an attempt to hide itself IPC I/O Parent N/A N/A
Changes the process name, possibly in an attempt to hide itself IPC I/O Parent N/A N/A
Changes the process name, possibly in an attempt to hide itself IPC I/O Parent N/A N/A
Changes the process name, possibly in an attempt to hide itself glean.dispatche N/A N/A
Changes the process name, possibly in an attempt to hide itself Backgro~Pool #1 N/A N/A
Changes the process name, possibly in an attempt to hide itself Backgro~Pool #1 N/A N/A
Changes the process name, possibly in an attempt to hide itself IPDL Background N/A N/A
Changes the process name, possibly in an attempt to hide itself IPDL Background N/A N/A
Changes the process name, possibly in an attempt to hide itself HTML5 Parser N/A N/A
Changes the process name, possibly in an attempt to hide itself HTML5 Parser N/A N/A
Changes the process name, possibly in an attempt to hide itself Socket Thread N/A N/A
Changes the process name, possibly in an attempt to hide itself Socket Thread N/A N/A
Changes the process name, possibly in an attempt to hide itself Netlink Monitor N/A N/A
Changes the process name, possibly in an attempt to hide itself Netlink Monitor N/A N/A
Changes the process name, possibly in an attempt to hide itself Timer N/A N/A
Changes the process name, possibly in an attempt to hide itself Timer N/A N/A
Changes the process name, possibly in an attempt to hide itself JS Watchdog N/A N/A
Changes the process name, possibly in an attempt to hide itself JS Watchdog N/A N/A
Changes the process name, possibly in an attempt to hide itself BGReadURLs N/A N/A
Changes the process name, possibly in an attempt to hide itself BGReadURLs N/A N/A
Changes the process name, possibly in an attempt to hide itself Cache2 I/O N/A N/A
Changes the process name, possibly in an attempt to hide itself Cookie N/A N/A
Changes the process name, possibly in an attempt to hide itself Cookie N/A N/A
Changes the process name, possibly in an attempt to hide itself StreamTrans #1 N/A N/A
Changes the process name, possibly in an attempt to hide itself StreamTrans #1 N/A N/A
Changes the process name, possibly in an attempt to hide itself TaskCon~ller #1 N/A N/A
Changes the process name, possibly in an attempt to hide itself TaskCon~ller #0 N/A N/A
Changes the process name, possibly in an attempt to hide itself BgIOThr~Pool #1 N/A N/A
Changes the process name, possibly in an attempt to hide itself BgIOThr~Pool #1 N/A N/A
Changes the process name, possibly in an attempt to hide itself QuotaManager IO N/A N/A
Changes the process name, possibly in an attempt to hide itself QuotaManager IO N/A N/A
Changes the process name, possibly in an attempt to hide itself IndexedDB #1 N/A N/A
Changes the process name, possibly in an attempt to hide itself IndexedDB #1 N/A N/A
Changes the process name, possibly in an attempt to hide itself IPC Launch N/A N/A
Changes the process name, possibly in an attempt to hide itself IPC Launch N/A N/A
Changes the process name, possibly in an attempt to hide itself SandboxReporter N/A N/A
Changes the process name, possibly in an attempt to hide itself SandboxReporter N/A N/A
Changes the process name, possibly in an attempt to hide itself Breakpad Server N/A N/A
Changes the process name, possibly in an attempt to hide itself DOM Worker N/A N/A
Changes the process name, possibly in an attempt to hide itself DOM Worker N/A N/A
Changes the process name, possibly in an attempt to hide itself Sandbox Forked N/A N/A
Changes the process name, possibly in an attempt to hide itself Chroot Helper N/A N/A
Changes the process name, possibly in an attempt to hide itself StreamTrans #5 N/A N/A
Changes the process name, possibly in an attempt to hide itself StreamTrans #5 N/A N/A
Changes the process name, possibly in an attempt to hide itself StreamTrans #4 N/A N/A
Changes the process name, possibly in an attempt to hide itself StreamTrans #4 N/A N/A
Changes the process name, possibly in an attempt to hide itself StreamTrans #3 N/A N/A
Changes the process name, possibly in an attempt to hide itself StreamTrans #3 N/A N/A
Changes the process name, possibly in an attempt to hide itself StreamTrans #2 N/A N/A
Changes the process name, possibly in an attempt to hide itself StreamTrans #2 N/A N/A
Changes the process name, possibly in an attempt to hide itself MainThread /usr/lib/firefox/firefox N/A
Changes the process name, possibly in an attempt to hide itself IPC I/O Child N/A N/A
Changes the process name, possibly in an attempt to hide itself IPC I/O Child N/A N/A
Changes the process name, possibly in an attempt to hide itself IPC I/O Child N/A N/A
Changes the process name, possibly in an attempt to hide itself Socket Process /usr/lib/firefox/firefox N/A
Changes the process name, possibly in an attempt to hide itself Socket Thread N/A N/A
Changes the process name, possibly in an attempt to hide itself Socket Thread N/A N/A
Changes the process name, possibly in an attempt to hide itself Backgro~Pool #1 N/A N/A
Changes the process name, possibly in an attempt to hide itself Backgro~Pool #1 N/A N/A
Changes the process name, possibly in an attempt to hide itself Timer N/A N/A
Changes the process name, possibly in an attempt to hide itself Timer N/A N/A
Changes the process name, possibly in an attempt to hide itself Worker Launcher N/A N/A
Changes the process name, possibly in an attempt to hide itself Worker Launcher N/A N/A
Changes the process name, possibly in an attempt to hide itself gmain N/A N/A

Reads user data of web browsers

spyware stealer
Description Indicator Process Target
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/cookies.sqlite-journal N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite-journal N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/permissions.sqlite-journal N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/sessionstore-backups/recovery.jsonlz4 N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/cert_override.txt /usr/lib/firefox/firefox N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/ExperimentStoreData.json N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/favicons.sqlite N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/containers.json N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/datareporting/glean/deletion_request N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/storage/permanent/chrome/idb/2823318777ntouromlalnodry--naod.sqlite-wal N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/extension-preferences.json N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/pkcs11.txt /usr/lib/firefox/firefox N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/autofill-profiles.json N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/user.js /usr/lib/firefox/firefox N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/storage.sqlite-journal N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/storage/permanent/chrome N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/permissions.sqlite N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/cert9.db-journal /usr/lib/firefox/firefox N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite-journal N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/sessionstore-backups/recovery.bak N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/favicons.sqlite-journal /usr/lib/firefox/firefox N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/places.sqlite N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/extensions.json N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/storage/ls-archive.sqlite-journal N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/storage N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/handlers.json /usr/lib/firefox/firefox N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release /usr/lib/firefox/firefox N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite-wal N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/key4.db N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/storage/permanent/chrome/idb/1451318868ntouromlalnodry--epcr.sqlite N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/storage/permanent/chrome/idb/2918063365piupsah.sqlite-journal N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/autofill-profiles.json /usr/lib/firefox/firefox N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite-wal N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/places.sqlite /usr/lib/firefox/firefox N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/favicons.sqlite /usr/lib/firefox/firefox N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/protections.sqlite N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/cert9.db /usr/lib/firefox/firefox N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/sessionstore-backups/recovery.baklz4 N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/xulstore.json /usr/lib/firefox/firefox N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/addonStartup.json.lz4 /usr/lib/firefox/firefox N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/cookies.sqlite-journal /usr/lib/firefox/firefox N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/storage.sqlite N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/sessionCheckpoints.json N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/shield-preference-experiments.json N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/extension-settings.json N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/storage/ls-archive.sqlite N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/key4.db /usr/lib/firefox/firefox N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/cert9.db N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/storage/permanent/chrome/idb/2823318777ntouromlalnodry--naod.sqlite N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/compatibility.ini /usr/lib/firefox/firefox N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/ClientAuthRememberList.txt N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/AlternateServices.txt N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/places.sqlite-wal N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/sessionstore.jsonlz4 N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/sessionstore.js N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/content-prefs.sqlite N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/protections.sqlite-journal N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/storage/permanent/chrome/idb/2918063365piupsah.sqlite N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/storage/permanent/chrome/idb/2918063365piupsah.sqlite-wal N/A N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/extensions /usr/lib/firefox/firefox N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/cookies.sqlite /usr/lib/firefox/firefox N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/key4.db-journal /usr/lib/firefox/firefox N/A
File opened for reading /root/.mozilla/firefox/xtt6of0m.default-release/storage/permanent/chrome/idb/1657114595AmcateirvtiSty.sqlite-wal N/A N/A

Checks CPU configuration

antivm
Description Indicator Process Target
File opened for reading /proc/cpuinfo N/A N/A

Reads CPU attributes

Description Indicator Process Target
File opened for reading /sys/devices/system/cpu/online N/A N/A
File opened for reading /sys/devices/system/cpu/present /usr/lib/firefox/firefox N/A
File opened for reading /sys/devices/system/cpu/present /usr/lib/firefox/firefox N/A
File opened for reading /sys/devices/system/cpu/cpu0/cache/index3/size N/A N/A
File opened for reading /sys/devices/system/cpu/present /usr/lib/firefox/firefox N/A
File opened for reading /sys/devices/system/cpu/present /usr/lib/firefox/firefox N/A
File opened for reading /sys/devices/system/cpu/present /usr/lib/firefox/firefox N/A
File opened for reading /sys/devices/system/cpu/present /usr/lib/firefox/firefox N/A
File opened for reading /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq N/A N/A
File opened for reading /sys/devices/system/cpu/cpu0/cache/index2/size N/A N/A
File opened for reading /sys/devices/system/cpu/present N/A N/A
File opened for reading /sys/devices/system/cpu/present /usr/lib/firefox/firefox N/A

Enumerates kernel/hardware configuration

Description Indicator Process Target
File opened for reading /sys/bus/pci/devices/0000:00:04.0/class N/A N/A
File opened for reading /sys/devices/pci0000:00/0000:00:02.0/vendor N/A N/A
File opened for reading /sys/devices/pci0000:00/0000:00:02.0/device N/A N/A
File opened for reading /sys/bus/pci/devices/0000:00:04.0/device N/A N/A
File opened for reading /sys/bus/pci/devices/0000:00:01.1/device N/A N/A
File opened for reading /sys/kernel/security/apparmor/features/dbus/mask /usr/bin/dbus-daemon N/A
File opened for reading /sys/devices/system/cpu /usr/lib/firefox/firefox N/A
File opened for reading /sys/bus/pci/devices/0000:00:04.0/irq N/A N/A
File opened for reading /sys/bus/pci/devices/0000:00:02.0/vendor N/A N/A
File opened for reading /sys/bus/pci/devices/0000:00:06.0/resource N/A N/A
File opened for reading /sys/bus/pci/devices/0000:00:05.0/resource N/A N/A
File opened for reading /sys/devices/system/cpu /usr/lib/firefox/firefox N/A
File opened for reading /sys/bus/pci/devices N/A N/A
File opened for reading /sys/bus/pci/devices/0000:00:01.0/resource N/A N/A
File opened for reading /sys/bus/pci/devices/0000:00:04.0/resource N/A N/A
File opened for reading /sys/bus/pci/devices/0000:00:01.1/resource N/A N/A
File opened for reading /sys/devices/system/cpu /usr/lib/firefox/firefox N/A
File opened for reading /sys/bus/pci/devices/0000:00:01.0/class N/A N/A
File opened for reading /sys/bus/pci/devices/0000:00:01.3/resource N/A N/A
File opened for reading /sys/bus/pci/devices/0000:00:06.0/irq N/A N/A
File opened for reading /sys/devices/pci0000:00/0000:00:02.0/uevent N/A N/A
File opened for reading /sys/bus/pci/devices/0000:00:02.0/class N/A N/A
File opened for reading /sys/devices/pci0000:00/0000:00:02.0/subsystem_device N/A N/A
File opened for reading /sys/devices/system/cpu /usr/lib/firefox/firefox N/A
File opened for reading /sys/bus/pci/devices/0000:00:01.1/class N/A N/A
File opened for reading /sys/devices/system/cpu /usr/lib/firefox/firefox N/A
File opened for reading /sys/bus/pci/devices/0000:00:00.0/irq N/A N/A
File opened for reading /sys/bus/pci/devices/0000:00:03.0/irq N/A N/A
File opened for reading /sys/bus/pci/devices/0000:00:03.0/vendor N/A N/A
File opened for reading /sys/bus/pci/devices/0000:00:06.0/device N/A N/A
File opened for reading /sys/bus/pci/devices/0000:00:01.3/vendor N/A N/A
File opened for reading /sys/bus/pci/devices/0000:00:05.0/irq N/A N/A
File opened for reading /sys/bus/pci/devices/0000:00:05.0/class N/A N/A
File opened for reading /sys/devices/system/cpu N/A N/A
File opened for reading /sys/bus/pci/devices/0000:00:01.0/device N/A N/A
File opened for reading /sys/bus/pci/devices/0000:00:00.0/device N/A N/A
File opened for reading /sys/bus/pci/devices/0000:00:02.0/resource N/A N/A
File opened for reading /sys/bus/pci/devices/0000:00:05.0/device N/A N/A
File opened for reading /sys/bus/pci/devices/0000:00:03.0/resource N/A N/A
File opened for reading /sys/bus/pci/devices/0000:00:03.0/device N/A N/A
File opened for reading /sys/bus/pci/devices/0000:00:01.1/irq N/A N/A
File opened for reading /sys/bus/pci/devices/0000:00:01.0/vendor N/A N/A
File opened for reading /sys/bus/pci/devices/0000:00:00.0/resource N/A N/A
File opened for reading /sys/bus/pci/devices/0000:00:00.0/vendor N/A N/A
File opened for reading /sys/bus/pci/devices/0000:00:01.3/class N/A N/A
File opened for reading /sys/bus/pci/devices/0000:00:00.0/class N/A N/A
File opened for reading /sys/bus/pci/devices/0000:00:05.0/vendor N/A N/A
File opened for reading /sys/fs/cgroup/cpu,cpuacct/cpu.cfs_quota_us /usr/lib/firefox/firefox N/A
File opened for reading /sys/devices/system/cpu /usr/lib/firefox/firefox N/A
File opened for reading /sys/bus/pci/devices/0000:00:04.0/vendor N/A N/A
File opened for reading /sys/devices/system/cpu /usr/lib/firefox/firefox N/A
File opened for reading /sys/bus/pci/devices/0000:00:01.3/irq N/A N/A
File opened for reading /sys/bus/pci/devices/0000:00:06.0/class N/A N/A
File opened for reading /sys/bus/pci/devices/0000:00:02.0/irq N/A N/A
File opened for reading /sys/bus/pci/devices/0000:00:01.0/irq N/A N/A
File opened for reading /sys/bus/pci/devices/0000:00:01.3/device N/A N/A
File opened for reading /sys/bus/pci/devices/0000:00:01.1/vendor N/A N/A
File opened for reading /sys/bus/pci/devices/0000:00:03.0/class N/A N/A
File opened for reading /sys/bus/pci/devices/0000:00:06.0/vendor N/A N/A
File opened for reading /sys/bus/pci/devices/0000:00:02.0/device N/A N/A
File opened for reading /sys/devices/pci0000:00/0000:00:02.0/subsystem_vendor N/A N/A

Reads runtime system information

Description Indicator Process Target
File opened for reading /proc/self/maps /usr/lib/firefox/firefox N/A
File opened for reading /proc/self/fd/37 /usr/lib/firefox/firefox N/A
File opened for reading /proc/1650/cmdline N/A N/A
File opened for reading /proc/filesystems /usr/lib/firefox/firefox N/A
File opened for reading /proc/1749/smaps N/A N/A
File opened for reading /proc/self/task/1589/stat N/A N/A
File opened for reading /proc/filesystems /usr/libexec/xdg-document-portal N/A
File opened for reading /proc/1698/statm N/A N/A
File opened for reading /proc/filesystems /usr/libexec/xdg-permission-store N/A
File opened for reading /proc/self/maps /usr/lib/firefox/firefox N/A
File opened for reading /proc/self/task/1772/stat N/A N/A
File opened for reading /proc/1722/smaps N/A N/A
File opened for reading /proc/self/fd/121 /usr/lib/firefox/firefox N/A
File opened for reading /proc/self/mountinfo N/A N/A
File opened for reading /proc/self/fd/51 /usr/lib/firefox/firefox N/A
File opened for reading /proc/1646/cmdline N/A N/A
File opened for reading /proc/self/fd/114 /usr/lib/firefox/firefox N/A
File opened for reading /proc/filesystems /usr/libexec/xdg-desktop-portal N/A
File opened for reading /proc/self/task/1729/stat N/A N/A
File opened for reading /proc/1698/smaps N/A N/A
File opened for reading /proc/mounts /usr/bin/dbus-daemon N/A
File opened for reading /proc/self/fd/36 /usr/lib/firefox/firefox N/A
File opened for reading /proc/self/fd/38 /usr/lib/firefox/firefox N/A
File opened for reading /proc/self/fd/45 /usr/lib/firefox/firefox N/A
File opened for reading /proc/self/maps /usr/lib/firefox/firefox N/A
File opened for reading /proc/filesystems /usr/libexec/xdg-desktop-portal-gtk N/A
File opened for reading /proc/self/fd/96 /usr/lib/firefox/firefox N/A
File opened for reading /proc/1768/smaps N/A N/A
File opened for reading /proc/sys/kernel/cap_last_cap N/A N/A
File opened for reading /proc/self/fd/41 /usr/lib/firefox/firefox N/A
File opened for reading /proc/self/fd/43 /usr/lib/firefox/firefox N/A
File opened for reading /proc/self/fd/145 /usr/lib/firefox/firefox N/A
File opened for reading /proc/self/fd/122 /usr/lib/firefox/firefox N/A
File opened for reading /proc/self/fd/39 /usr/lib/firefox/firefox N/A
File opened for reading /proc/filesystems /usr/lib/firefox/firefox N/A
File opened for reading /proc/filesystems /usr/lib/gvfs/gvfsd-fuse N/A
File opened for reading /proc/1722/statm N/A N/A
File opened for reading /proc/self/fd/31 /usr/lib/firefox/firefox N/A
File opened for reading /proc/self/task/1631/stat N/A N/A
File opened for reading /proc/self/task/1706/stat N/A N/A
File opened for reading /proc/1641/cmdline N/A N/A
File opened for reading /proc/1661/cmdline N/A N/A
File opened for reading /proc/filesystems /usr/lib/gvfs/gvfsd N/A
File opened for reading /proc/self/maps /usr/lib/firefox/firefox N/A
File opened for reading /proc/filesystems /usr/lib/firefox/firefox N/A
File opened for reading /proc/filesystems /usr/bin/dbus-daemon N/A
File opened for reading /proc/1600/attr/current N/A N/A
File opened for reading /proc/self/fd/48 /usr/lib/firefox/firefox N/A
File opened for reading /proc/1749/statm N/A N/A
File opened for reading /proc/self/fd/6 /usr/lib/firefox/firefox N/A
File opened for reading /proc/filesystems /usr/lib/firefox/firefox N/A
File opened for reading /proc/self/maps /usr/lib/firefox/firefox N/A
File opened for reading /proc/filesystems /usr/lib/firefox/firefox N/A
File opened for reading /proc/self/fd N/A N/A
File opened for reading /proc/self/cgroup /usr/lib/firefox/firefox N/A
File opened for reading /proc/filesystems /usr/lib/firefox/firefox N/A
File opened for reading /proc/self/fd/35 /usr/lib/firefox/firefox N/A
File opened for reading /proc/self/fd/75 /usr/lib/firefox/firefox N/A
File opened for reading /proc/self/fd/49 /usr/lib/firefox/firefox N/A
File opened for reading /proc/self/fd/119 /usr/lib/firefox/firefox N/A
File opened for reading /proc/1665/cmdline N/A N/A
File opened for reading /proc/1670/cmdline N/A N/A
File opened for reading /proc/filesystems /usr/lib/firefox/firefox N/A
File opened for reading /proc/1587/cmdline N/A N/A

Writes file to tmp directory

Description Indicator Process Target
File opened for modification /tmp/firefox/.parentlock /usr/lib/firefox/firefox N/A

Processes

/usr/bin/firefox

[firefox -new-tab https://www.google.com]

/usr/bin/which

[which /usr/bin/firefox]

/usr/lib/firefox/firefox

[/usr/lib/firefox/firefox -new-tab https://www.google.com]

/usr/bin/dbus-launch

[dbus-launch --autolaunch 11c67417355f45d397f6be11f62e85a6 --binary-syntax --close-stderr]

/usr/bin/dbus-daemon

[/usr/bin/dbus-daemon --syslog-only --fork --print-pid 5 --print-address 7 --session]

/usr/bin/lsb_release

[/usr/bin/lsb_release -idrc]

/usr/lib/firefox/firefox

[/usr/lib/firefox/firefox -contentproc -parentBuildID 20230522134052 -prefsLen 19257 -prefMapSize 230809 -appDir /usr/lib/firefox/browser {80f6e6ce-43f4-475d-a123-d3b25d5cffbd} 1587 true socket]

/usr/local/sbin/dbus-launch

[dbus-launch --autolaunch=11c67417355f45d397f6be11f62e85a6 --binary-syntax --close-stderr]

/usr/local/bin/dbus-launch

[dbus-launch --autolaunch=11c67417355f45d397f6be11f62e85a6 --binary-syntax --close-stderr]

/usr/sbin/dbus-launch

[dbus-launch --autolaunch=11c67417355f45d397f6be11f62e85a6 --binary-syntax --close-stderr]

/usr/bin/dbus-launch

[dbus-launch --autolaunch=11c67417355f45d397f6be11f62e85a6 --binary-syntax --close-stderr]

/usr/libexec/xdg-desktop-portal

[/usr/libexec/xdg-desktop-portal]

/usr/libexec/xdg-document-portal

[/usr/libexec/xdg-document-portal]

/usr/libexec/xdg-permission-store

[/usr/libexec/xdg-permission-store]

/usr/libexec/xdg-desktop-portal-gtk

[/usr/libexec/xdg-desktop-portal-gtk]

/usr/lib/gvfs/gvfsd

[/usr/lib/gvfs/gvfsd]

/usr/lib/gvfs/gvfsd-fuse

[/usr/lib/gvfs/gvfsd-fuse /root/.gvfs -f -o big_writes]

/usr/lib/firefox/firefox

[/usr/lib/firefox/firefox -contentproc -childID 1 -isForBrowser -prefsLen 21750 -prefMapSize 230809 -jsInitLen 238780 -parentBuildID 20230522134052 -appDir /usr/lib/firefox/browser {7f7e7054-72bd-4b8c-bbf7-5005879bb880} 1587 true tab]

/usr/lib/firefox/firefox

[/usr/lib/firefox/firefox -contentproc -childID 2 -isForBrowser -prefsLen 21418 -prefMapSize 230809 -jsInitLen 238780 -parentBuildID 20230522134052 -appDir /usr/lib/firefox/browser {db48613c-280f-4e24-a297-5237d43a2893} 1587 true tab]

/usr/lib/firefox/firefox

[/usr/lib/firefox/firefox -contentproc -childID 3 -isForBrowser -prefsLen 21824 -prefMapSize 230809 -jsInitLen 238780 -parentBuildID 20230522134052 -appDir /usr/lib/firefox/browser {25a4c40c-2736-4dd4-beb8-0db0928a3117} 1587 true tab]

/usr/lib/firefox/firefox

[/usr/lib/firefox/firefox -contentproc -childID 4 -isForBrowser -prefsLen 27881 -prefMapSize 230809 -jsInitLen 238780 -parentBuildID 20230522134052 -appDir /usr/lib/firefox/browser {04a9cab5-b287-4260-82f5-5dc5fb22dcdf} 1587 true tab]

/usr/lib/firefox/firefox

[/usr/lib/firefox/firefox -contentproc -childID 5 -isForBrowser -prefsLen 27736 -prefMapSize 230809 -jsInitLen 238780 -parentBuildID 20230522134052 -appDir /usr/lib/firefox/browser {a58337c9-09cd-4aef-9006-4bc332b8125e} 1587 true tab]

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 services.addons.mozilla.org udp
US 1.1.1.1:53 services.addons.mozilla.org udp
NL 52.222.139.46:443 services.addons.mozilla.org tcp
NL 52.222.139.46:443 services.addons.mozilla.org tcp
US 1.1.1.1:53 location.services.mozilla.com udp
US 1.1.1.1:53 location.services.mozilla.com udp
US 1.1.1.1:53 locprod2-elb-us-west-2.prod.mozaws.net udp
US 52.25.6.244:443 location.services.mozilla.com tcp
US 1.1.1.1:53 detectportal.firefox.com udp
US 1.1.1.1:53 detectportal.firefox.com udp
US 1.1.1.1:53 www.google.com udp
US 1.1.1.1:53 www.google.com udp
US 34.107.221.82:80 detectportal.firefox.com tcp
NL 142.251.36.4:443 www.google.com tcp
US 1.1.1.1:53 www.mozilla.org udp
US 1.1.1.1:53 www.mozilla.org udp
US 1.1.1.1:53 example.org udp
US 1.1.1.1:53 example.org udp
US 1.1.1.1:53 ipv4only.arpa udp
US 1.1.1.1:53 ipv4only.arpa udp
US 34.107.221.82:80 detectportal.firefox.com tcp
US 1.1.1.1:53 www.mozorg.moz.works udp
DE 13.32.119.185:443 www.mozilla.org tcp
US 151.101.194.49:443 tcp
US 1.1.1.1:53 contile.services.mozilla.com udp
US 1.1.1.1:53 contile.services.mozilla.com udp
US 34.117.237.239:443 contile.services.mozilla.com tcp
US 1.1.1.1:53 getpocket.cdn.mozilla.net udp
US 1.1.1.1:53 getpocket.cdn.mozilla.net udp
US 1.1.1.1:53 firefox.settings.services.mozilla.com udp
US 1.1.1.1:53 firefox.settings.services.mozilla.com udp
US 1.1.1.1:53 spocs.getpocket.com udp
US 1.1.1.1:53 spocs.getpocket.com udp
US 1.1.1.1:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 1.1.1.1:53 prod.ads.prod.webservices.mozgcp.net udp
US 34.149.100.209:443 firefox.settings.services.mozilla.com tcp
US 34.117.188.166:443 spocs.getpocket.com tcp
US 34.120.5.221:443 getpocket.cdn.mozilla.net tcp
US 34.120.5.221:443 getpocket.cdn.mozilla.net tcp
NL 142.251.36.4:443 www.google.com udp
US 34.117.188.166:443 spocs.getpocket.com udp
US 1.1.1.1:53 shavar.services.mozilla.com udp
US 1.1.1.1:53 shavar.services.mozilla.com udp
US 1.1.1.1:53 shavar.prod.mozaws.net udp
US 151.101.129.91:443 tcp
US 52.10.78.57:443 shavar.services.mozilla.com tcp
US 1.1.1.1:53 content-signature-2.cdn.mozilla.net udp
US 1.1.1.1:53 content-signature-2.cdn.mozilla.net udp
US 1.1.1.1:53 push.services.mozilla.com udp
US 1.1.1.1:53 push.services.mozilla.com udp
US 34.160.144.191:443 content-signature-2.cdn.mozilla.net tcp
US 1.1.1.1:53 autopush.prod.mozaws.net udp
US 34.107.243.93:443 push.services.mozilla.com tcp
US 34.160.144.191:443 content-signature-2.cdn.mozilla.net tcp
US 34.107.243.93:443 push.services.mozilla.com tcp
US 1.1.1.1:53 incoming.telemetry.mozilla.org udp
US 1.1.1.1:53 incoming.telemetry.mozilla.org udp
US 1.1.1.1:53 apis.google.com udp
US 1.1.1.1:53 apis.google.com udp
US 1.1.1.1:53 telemetry-incoming.r53-2.services.mozilla.com udp
NL 216.58.214.14:443 apis.google.com tcp
US 34.120.208.123:443 incoming.telemetry.mozilla.org tcp
US 34.107.243.93:443 push.services.mozilla.com udp
GB 195.181.164.18:443 tcp
US 1.1.1.1:53 fp2e7a.wpc.phicdn.net udp
NL 216.58.214.14:443 apis.google.com udp
US 1.1.1.1:53 tracking-protection.cdn.mozilla.net udp
US 1.1.1.1:53 tracking-protection.cdn.mozilla.net udp
US 1.1.1.1:53 tracking-protection.prod.mozaws.net udp
US 1.1.1.1:53 normandy.cdn.mozilla.net udp
US 1.1.1.1:53 normandy.cdn.mozilla.net udp
US 34.120.158.37:443 tracking-protection.cdn.mozilla.net tcp
US 1.1.1.1:53 normandy-cdn.services.mozilla.com udp
US 35.201.103.21:443 normandy.cdn.mozilla.net tcp
US 34.120.158.37:443 tracking-protection.cdn.mozilla.net tcp

Files

/root/.mozilla/firefox/Crash Reports/InstallTime20230522134052

MD5 57f9ea57f0f75fa8d0cc812faaf9d266
SHA1 0f09085fa31dbe78f88c3963f675a4b6f84f3220
SHA256 8e2561feb91e97f4ec5b0518da58308854151f745a1ab810904f4dd23ad670aa
SHA512 81e15c470a8f95a331ee78c848eb20f908209517f29450ec595f576842d9159d79ed5d2fd128707c82d6ef665606e942f43cab2bb4eb6669a51e6b65d10b5812

/root/.mozilla/firefox/xtt6of0m.default-release/times.json

MD5 0933b83f87258307d647b3adbeab9048
SHA1 3005406695049b1bf5af7fe3f67ffc4d3b8204b7
SHA256 6118816b6b1fafaa18942cf629cda2602801865553b5670bca04b781a8738b9f
SHA512 4484df9c478f35465f50fef1ebf4040e68783477c9119a65f9b84fbd0a199db4ede97f4ccb07cdeefb86ce52a2fb28c08eb464f14f6f12b52c387b0dcdbb50b4

/root/.mozilla/firefox/installs.ini

MD5 e961d4c1879b218a47ad1f6f1ea39e18
SHA1 4d694e28ebc8157c6616c6065601dba1dbbb29c4
SHA256 70ac31c9282c068e55b6b62a9c879c21a19c7a10a0fd47c4165edaac6cb4d57f
SHA512 2a12e1af092922d5bd484a6b66b761a380c23d3e1f7b64a6b3e6575217f39f391985e79a13e7cb6d41ad1f9559facad28919d0d7d0d14c7b8c2bbb1f95a495d7

/root/.mozilla/firefox/profiles.ini

MD5 a949f60d183dec72adf3dad6c6d5f49f
SHA1 cef33ca122c65599e0e36604933c8809504d8770
SHA256 c99aa4d865d01f1fbc92ed6834caf0b5935b2f0fce21bd92cae57e9249037ed5
SHA512 aaa8d186b4a51c105c972134411edf10edfc4884145c8c3df1e449c0f1ae99e263104eea4cd176d2d95ff16788e2675e6b0c9ae45f941863d95d0083ebcf6596

/root/.dbus/session-bus/11c67417355f45d397f6be11f62e85a6-0

MD5 09090b9aed7870a4111be8b00d7d2ff5
SHA1 07810c6baeacc7bcb5c9a89ac06ea550c14d5d6f
SHA256 991d66ead50e84fba2cd481cdaac3c7a86f78d874861e94cbc044763f096f7ce
SHA512 1a3656f52fc540f576f06b6d0df4c29ed8e011d0c2918f4622ad3a020226a428d16f52f543e2ed8974d74b1aa6e3d69594a23794af122a5b73fcd17346a9be52

/root/.mozilla/firefox/xtt6of0m.default-release/compatibility.ini

MD5 fe452b7294d5928a9a5863b89ee0a6bd
SHA1 a5d4c245071fa96476ba48b4725bdae7f1b7940f
SHA256 d5bfb07561606a19aa96557ea109b175050dc0eb805cbef9c813503587d77900
SHA512 dc37d8507f08849e3382d2dbafd4a64555dbd57a288c95131e9aefb366630f1585811a9e1456b861bb9d2b816ed88b18ffb7580cd92b41bb9b0227ce1363843e

/root/.mozilla/firefox/xtt6of0m.default-release/cookies.sqlite

MD5 9535f5fe817accc769c2c1d3354db39f
SHA1 6af62cf08717cf3bfa84eb1a7b311acf522ce560
SHA256 c53c15fcfac2bb57fdc88d23f932fc244dbaf4020f0f6eaecf0f77a37c21f8c5
SHA512 dc9c2c32eb42dda0a7a711e143aea58c603c1e9d885c3677e9fe86f525e1b0b32a46e240756263e56510b07e764ba69f2de13b90ec18210678242e10cfe17837

/root/.mozilla/firefox/xtt6of0m.default-release/cookies.sqlite

MD5 59e12605fc0184f2cc5f648c5ee23a66
SHA1 b8a0758169440d359001e27d1cc3042e1be052bc
SHA256 892fb8dbc3f8c6bf812fa3069f9ad908f937eeeecec71af18accd823709de594
SHA512 9cc990c59c5b1002335324f847fde3de1a800a5afa617a19ccd6584822466f1d7f251f8688f7e22cd09100e92981e65fdcf56f50a1349d6c22c5c797c950a34a

/root/.mozilla/firefox/xtt6of0m.default-release/storage/ls-archive.sqlite

MD5 e0c613bfd69956a19ce2dc5e925aa223
SHA1 14accb230edcd6cb76967cdc6d4e5686db96b5df
SHA256 0d4cb11f6364c46a75f9eaddfca5c660b90dfd515df3afcd5e0baeca28a0f1ab
SHA512 01643c0131a392be92b3f281d7f633c1f502bff19090b0d716f1ac66aefecc3fcf92f393bef66b03089c9b9c6d8aaeb711b6a4f29d5a6729dd188c838f2272d1

/root/.mozilla/firefox/xtt6of0m.default-release/storage/ls-archive.sqlite

MD5 178d71e5529d637ac62f7e75fdd75896
SHA1 339f2b949cc4c207b66aea11137448ba28d36dcb
SHA256 7b0050f1bfaab85c8f9067ae7d7369056ff752c0c852ef1462a96c22169004d4
SHA512 ec0e0105fcfbbae356dd55efbcf92975f35bbe5cb93fcabf4c08443e871957635d14830b27c4e1ddefbbaff8f9b7ec3590bf417a9442e1d7ee3607d14d56f664

/root/.mozilla/firefox/xtt6of0m.default-release/storage/permanent/chrome/.metadata-v2-tmp

MD5 2d01bc6934debf37c0711ef7aadffeab
SHA1 1fa41c08e3ccc68991aea4f4753610a6ba08718b
SHA256 0ec0f3837d96f38ada10342fae6a6a7da43ed051bc6c77badd3c2fd7c09e57e2
SHA512 396180bbcca2ce1f44464aa6279fc4110e5d848e7a8fa7aecd72749702a857614406e6789e31438302119a754b0e68e21d28bc1ad5e92aac80df1ae2e7b78c98

/root/.mozilla/firefox/xtt6of0m.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite

MD5 07a412e08825220262ad2890757ff779
SHA1 f46c127dbc070ded87a6078b3c1c761955f96de8
SHA256 da640f8b665841b520d2262a21cc3f82aeaa881cf81a1ddae27ef501d66544e4
SHA512 0134c783bf3293848e479b478ac57a1e0f4202cddfb8b57bc6275aada7345f398cf8a627e9b1c34fd618192c2f0c9737b1da487daf33f9c557ebc1377105582b

/root/.mozilla/firefox/xtt6of0m.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite

MD5 a7adf8c5e3ebd14eecd873362c5f50f7
SHA1 feb81863778e08e9cfc52e272a84392a7768fc3c
SHA256 a52b84f09da33ffcbd276940c86552af3bef3fb9f4496d19ae61c9f1eddd6b7c
SHA512 f60c36f12d2eec41a36812fc0c933cedfe0e63b766d3520a0bafb58462242970eefc07c6b1f22d9debdfd03c2a25bede85a1c1c8307769c464b02c24d118b736

/root/.mozilla/firefox/xtt6of0m.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite

MD5 98c637d533f70450d77394d1508f5439
SHA1 656d3bd824808897202d7109d32dfc2aa9a8d678
SHA256 984c8bc267907171c6e0f2bc353fec3a8e30e932238e02a699912753d5f1f932
SHA512 c6f10f0c54fdd6c349cb54d8b9174bbb455997ddb4bb4cf6bca0940cceafeec4ec7d7d5c890216749e795c52fb1a78d7f46693438cdeed611f93f8c61a642d9a

/root/.cache/dconf/user

MD5 c4103f122d27677c9db144cae1394a66
SHA1 1489f923c4dca729178b3e3233458550d8dddf29
SHA256 96a296d224f285c67bee93c30f8a309157f0daa35dc5b87e410b78630a09cfc7
SHA512 5ea71dc6d0b4f57bf39aadd07c208c35f06cd2bac5fde210397f70de11d439c62ec1cdf3183758865fd387fcea0bada2f6c37a4a17851dd1d78fefe6f204ee54

/root/.mozilla/firefox/xtt6of0m.default-release/prefs.js

MD5 d3caa2068dc9bf8edc1af13839ee00a8
SHA1 6e26a5d8c1811887b590ba4a918871b557e1b126
SHA256 4073fa9202367d6f92460f4f30488c044a4be85b1071258d9eb4ed3819b72a3b
SHA512 2f5f37015b3b30e72b6ca87ceaf8a1e00e29d87f84758f703c0bf0c3ed2582172c3f38755413d190fef6f66c59b84de43691e027b88f98e11c40a05aac28fee0

/root/.mozilla/firefox/xtt6of0m.default-release/permissions.sqlite

MD5 046c141deddb6e4b1bd17a551154c023
SHA1 7814ff41b7fb9c5a1ac3d92f8eb46961643bee16
SHA256 e44b0fe10ab37a4ea0963252e3fb9fcdba0f0896b41aa7393b1f3dd3f418503c
SHA512 9b6265d21d238017369988fff200b0da56630891379873baecd460b8e587cc7b0fe04273bdcbc1b4ff19af205d48137dd6a1b2f9acf2bbc073b1c0abbd7b73f8

/root/.mozilla/firefox/xtt6of0m.default-release/times.json

MD5 3da6a4d83f17cc0b8160dfb82024b08a
SHA1 99a04db15ceb357b10545efadda47c488d9c694b
SHA256 764fb46779d037086835561b5f046eb9fc767501d1a2c13adaf2357c9514cb48
SHA512 1eaa78e2554480f4f9ac7b98ca41db410e55eaddabf3c87eb17d50e31e22196a9db926266f0d6742d8372d0de74c76de86d7587a9a4259a28eb90cd4a8799501

/root/.mozilla/firefox/xtt6of0m.default-release/prefs-1.js

MD5 6f7d74e3a793ccbc46acd3dfbb4b9255
SHA1 9deaf75e51797af2bcc520258eb449a8dfed8f41
SHA256 712d5b6eb2a0aba7f7a47d6630620e3e96f883af6ef1ee6b0a605356e08813b1
SHA512 c234d19e100ff5e1b950178f45a0d9fb9d6667365e93ca895c1c8b1c8aa039e6800e14c14fc90c6c9f255c95d834c248126dab68866b09a102d2f902d045eb93

/root/.mozilla/firefox/xtt6of0m.default-release/cert9.db

MD5 20f7fac15250a6539011679bb9cf8b27
SHA1 36b1185cfeb6a4b655d818ad14fb46319b6dc7f9
SHA256 c3ee62fb1b8b52415e4f2e6894d85b779cf1341b7fbab371ec4f6f80b08b1d72
SHA512 200bec202c2116c60caf32519455d0f8c2c243530e60ed652fb86898de220698ddf1467a846527b6c720f32e5144e3bffcbbb854913d9ecf296ef425af7bb24f

/root/.mozilla/firefox/xtt6of0m.default-release/key4.db

MD5 7006811cca1336ddb6bdf20228cfe5d6
SHA1 660fcf334c6c5ce4b94df5edf2acb6be43db6ae0
SHA256 11ba7e832239d882be43336d1383cd6fc4d64ade4dc0b3c27e387661e3c20c54
SHA512 7ec9cff7b4996678cd71235137aa35ad4a686b4a6d46dea6bea73d35775fed005ddbcb905f5037756b08e7c10624cfae0dbd1bb1c8ae062864f29e00b05014f4

/root/.mozilla/firefox/xtt6of0m.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite

MD5 759544297aaa61f5fef8ee42d0ae4393
SHA1 fc2d66f6e60409e3e8d38623ce5f817fc7f571e0
SHA256 1bd2000cd972e80cefaec6e982ba261d224a818f367de0fdf8c51fa5a05d7ab5
SHA512 8aaa2ce66f10d46f7c9200af841ac7bd9f5b55c30308a14f0deda44ac62581c45daae45154487c0073a0d5847d5926cbb4072ca64a702ac6b834ad0bb482804f

/root/.mozilla/firefox/xtt6of0m.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite

MD5 1dcae53aadc66a5f3081523c48fc2739
SHA1 d301756c51e07c987d044fd84bea042ee2845ca6
SHA256 c672bb61a74c299591cc698a3fa439fb9cae8ca0a2bfe31b7cd31bfd884f38e3
SHA512 75ffe81fdade837992b046a377efbaaa4493764322c1a11bf92c862dcd64fea825428fa8dbad921a644141fde0bbe55e29f0ebcffa33c6294ead1f25cb5e32e6

/root/.mozilla/firefox/xtt6of0m.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite

MD5 dd3f6ba37c670af5953593535e435d04
SHA1 ecfe4e650a050bce77e8ff7468de04c1b8acc9a4
SHA256 5cc6fa137a1f3a7d0b615b178877f12c460b22f95702eb7534d5732ee6599561
SHA512 86e0482543faae6fb279ca71e1e6d6461d32317e74baebb3973e0fde9800107faeb9c2347be6cf8a47556ae43c8e6c224a595e952f621e40ad2c5eba920df2b3

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/3D1E19D09F398691ABF62061591970855193B42F

MD5 e669d915b6a282760185ce820ba1ec0a
SHA1 d912df04c1d5b89dba9cbbe23cc5cb2393288d2f
SHA256 da492d8ac81a302bc4cec4fcdea3f733ede685ed5d38a9ce843334c4273ca0cb
SHA512 cc1b51be4daa31229437afa23a2a14b26924548339aa10e877ef115b8201f531402b1d979efdba48e74edde9fe49e9155b24e8c603953d91f056776959bac347

/root/.mozilla/firefox/xtt6of0m.default-release/prefs-1.js

MD5 503e3cc381561fcb1e0fc9e5117d70d7
SHA1 08b12cea3789fc307e18c379c6206422aa13130e
SHA256 78201c89794b79be6f15220e7e8895ae0a5eb84e593d77be218ec170b5615e3d
SHA512 48bafd6923497417e7eeacd6408f756a2991823515860da5f2eea5ad7e83677757e0664403377c444dcbf9c552b27f36d01c9890b3471e2ae47986d0f7720e22

/root/.mozilla/firefox/xtt6of0m.default-release/storage/permanent/chrome/idb/1451318868ntouromlalnodry--epcr.sqlite

MD5 a8dd7ebaad5528b23f82ccb1534cea18
SHA1 600daceacfb5cf9df0b66ba7dce4516b2ac4df70
SHA256 e5b0d02c18ae36c4a220f41fd97c66060c17aaafcbb324a57ccdc2707c44c4ec
SHA512 67f867a8e2b37fb6bececd5ebc570ca594ea329142badd63d1281d5e735f515a5e329abc6eb9a9d3465aab0a08541b4888018d859964f160a52345ab93532bff

/root/.mozilla/firefox/xtt6of0m.default-release/storage/permanent/chrome/idb/1451318868ntouromlalnodry--epcr.sqlite

MD5 60a601e779d2b0ba29ea6e1d3e680845
SHA1 07f3fbec0e1571d7de96d28a0ddb93eb503b4d26
SHA256 804bac030bacfb8ded5ff31346b0d7255b26588fc083b8abb6501a841aeb579b
SHA512 3eab6d4c7162b15cb88f249fd33d669696b7e12a9e2a3323ceff4f48dac646a998196d313bbd61e412ff72dd205c7232891ea377d67f7e88b1ace4a2bc698b61

/root/.mozilla/firefox/xtt6of0m.default-release/storage/permanent/chrome/idb/1657114595AmcateirvtiSty.sqlite

MD5 7352c8848e88edc39b7fb5e663888187
SHA1 8c3dffe25cc56c7aec1b782292d6fceed81e6304
SHA256 7a462086a26978809c719e57a7ea6a25568767fb7532014e8531fda94b660e0a
SHA512 f2a0dbbab5c2c1702b03bce15a47739481f523e127d1372b40534db9a20b2bc99fb53710ee0e5d44176188817cac704cf4f98cdf087e7e89d244281fcfc3b280

/root/.mozilla/firefox/xtt6of0m.default-release/storage/permanent/chrome/idb/1657114595AmcateirvtiSty.sqlite

MD5 0da98c878867453e351f1c5b5cb5fb17
SHA1 eb0d947174295e85e19c1ace6370ee71fdfa6936
SHA256 1a5bc443bab34b9542b6e94becfc56c830f306a7b72057f62712f7efa4e47174
SHA512 3cd6d37b0571f9223d01ea8954bfdc8f5e81296706d2d91be9818041d7987556d35f60324538f16365a476c8e446466d02e1d1343d3f9e363c30fa1d13ffe4cd

/root/.mozilla/firefox/xtt6of0m.default-release/cert9.db

MD5 b4dcc4c44d5cf2b94b0dbb7815612cd4
SHA1 c7aa8fe2bbae22e6e5885ae4e5f71fecff9584ca
SHA256 e388d34aedec51702d1e412621d3e313b30ee81eb790e0196ae86c502c0ee738
SHA512 3ff47547dcabb2cba54ca16b6ee12315587efc348bab22455b1cdbf4429c6c72a4430f2998c728b3c617572a3e2a3935c7f55a954df2785dfeea659a5049dba9

/root/.mozilla/firefox/xtt6of0m.default-release/cert9.db

MD5 1de6470039ffaf83a0118ae48058831e
SHA1 7dd65d8f40ad5f6a4031426666316f59d3676f0e
SHA256 467997ce96dc8703c965246083f913958b3d76c7b2bc9bd524dadf660266dfef
SHA512 c797c4bda2cb3be2c6523d67a11793332910e4bf7337ef2b1fdb33b08f55730c37c3d349453f97922c5bd60b9ec442bc6ff188d0bed395b6cace8183bfae86c8

/root/.mozilla/firefox/xtt6of0m.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite

MD5 4c959dce377501ac37e293550d9dc21e
SHA1 2e9651c6ac47c9b844b007e6ce6562c6d671648d
SHA256 c822ca774d12d935f4e92a0023d4318a323bfc6aa34910de66a8e9e1504bfdc9
SHA512 149427c234bcf5f663f5876d64ee2ea47a77ad6259cdfe682b30475065c892aef4a18df68e149158b06b73e83287818c3c396439a6380610cffb4838687d8b8b

/root/.mozilla/firefox/xtt6of0m.default-release/cert9.db

MD5 bd6db6a6e61a9ef75d85f4394607658a
SHA1 f3c79552921fa85f776f341da5c76bfa71c2b6fd
SHA256 5a9fef4ce2260846d32641def955c3e51bf7f0121d79d027bf8b0470653f1f81
SHA512 e052eca225d47ce339467403d16738715dec0ec5f596dc6fb5e36469344a317caccd27c34fcbcca7931115fd804a29b475ee0fc3121da6cc5b058a309d7babfa

/root/.mozilla/firefox/xtt6of0m.default-release/prefs-1.js

MD5 e15da81a57d3f3acb06abc95ac1a6768
SHA1 473b0ec50efe65e83fa75a5f2c31abd4ce633b5a
SHA256 48391b0753e327c04bd723b52f6b1f1c4072fa184230e9d061b9b5c0f63707f1
SHA512 698591dc7ba1375820853966ffd1a0a74714e4ecc0ed551db63a56c7bdb6dc64968d9fe136783b71b2ecfab2d3a35f6f0187a027d173baa9fb044e0e6e8d8300

/root/.mozilla/firefox/xtt6of0m.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite

MD5 e87498f20e6ffb24c100b389c9186fd6
SHA1 919ac3ffd22845e2ed3bf53ff974ab495d0a7c73
SHA256 98fb2b81377690e84819f72cb58f02505856485830b2bb98c5f1e3b4804013d0
SHA512 706619b456d5beba0308ca27ff3e011c844aea05ad99ae3a572748c8dbb20e9992be624609ca1cb56ff82f29181c9b1e95b9ce7032601db4c24d2e13e5d454e7

/root/.mozilla/firefox/xtt6of0m.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite

MD5 acf01119af3ee0d161b6e1049e26f195
SHA1 8bc33819ec10dae13e2ff134ad511eab20b6c1cd
SHA256 e1998c974705b8d904597e177b52c35f5d66b635fe71441941000bc7cfc675f2
SHA512 cb015e43fb40912970f77491b51c56099fb889e4eea4920e758081e207589a13c7c65ef556735ad7ca5fd90fef9ed3e86907f7f12570d07f8fc83f313fbef2dc

/root/.mozilla/firefox/xtt6of0m.default-release/places.sqlite

MD5 caa837254a74c46499181377c6824188
SHA1 b30de0122187c834b8a4b7acc5557c715383611e
SHA256 bf07e57cdc68a2733d376d632a9647d385a02d3186ec4cd7b77f348a828b54fc
SHA512 eec61ac083b5716622b7b673cf11a49c55c072aab0f3b9501d0969a9b7569b28b8411c017d01a201b65f8dafee6b7a09579abf1de578b60693d93f7dcfbdbf88

/root/.mozilla/firefox/xtt6of0m.default-release/favicons.sqlite

MD5 3c0a1ec298284608bfa51081ea539be3
SHA1 e51b58f6fe89d45fd8a1d935b51da172d5f6f32e
SHA256 34c4fe7ab2d3e44f193b489ebe84c17d67b336546af9ef231897ec09d7ff16f2
SHA512 8550f530377f7a98c46a6989bec2c43ed644274509a5b987e8e0d034bf867b3315dcc75a2c851a5ac43a45b40bf51c789d828a9a69c02157b3e900467341a28f

/root/.mozilla/firefox/xtt6of0m.default-release/places.sqlite

MD5 b6994cf8b5d059f55c410de209d0bfaa
SHA1 5efbf88bcd6e1ca5349db7059c04fe8484cb0c2a
SHA256 b7738f2e9774ae607a2bdf0897f1b64da255359c51960a135faba10335e6cf2f
SHA512 4d6b050db97ff40c92476eb4ee864c2bd1cd75f5b1bd0de736841cb32e9ffd5a267b3b6c99c65e1b2f1b56084b4fab5f1a7ccc5875cf0707bf1fc3ab5f948765

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/D23F7952044A1A6016B80DED46FC563716A295DF

MD5 dde59865ee2cd82a2518343bc8f86756
SHA1 7aa03a89aa342b50562dcbe60019c8421002abdd
SHA256 93ac977aff5af21d461f57df35b25919c9b64dcbc56a23ff0a693b8463310743
SHA512 b04c26c98245ac6560a24fb4c3d0845d89b8970ffb0d729fb768b5b1b95f3163bfb049c873926c314c550b97fcfec13be387696b692692c69dd5c23b155e80b9

/root/.mozilla/firefox/xtt6of0m.default-release/prefs-1.js

MD5 290847bb0c20f1d240084b78f4045ee1
SHA1 22870fd88009a52c73da863f87ec6a7d7a61c21a
SHA256 281aaea53df9bceddd51d8c8afba023f83c5a50a7b5f8586e2aba9eddd2bad51
SHA512 20c1ea48559a95c9649082df019b75a7ef12b95007e0eb65ca49234c8518cf7152c62874cde59c1192829cf763b3c8a3bc729281bf5f7071793bbd59c29df8af

/root/.mozilla/firefox/xtt6of0m.default-release/protections.sqlite

MD5 c7cc11494c34e02565df83d17beb33b3
SHA1 f379ad7c0fa73476d3828d8a89ef843046332c12
SHA256 7ca17bb171e22b4ec498c1d20587b30d62d773b114d0e66bb00ec874506eb85f
SHA512 0cfcb15a985a35e917c9652721b516e2d1c358c6db3dca4452e866d250b6269c4cc69773277f5ddd5a0c5a338f95d9f6134224f0097df194985161cd3d47cfd6

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/82F4CDEDC8A08E6BCE520A4114F15825F2E886F6

MD5 e99a66343d812588ac8e0488adc8be51
SHA1 bebdcbc350b6444ae462959a0c5b13963c74af47
SHA256 f874aca58d79deb8a80f8da58fb4a2c080af79cee7d089b4a9f0a86d69d9a324
SHA512 ecda712b11c36d5f190e05add2e2689eef18eeccf2ecaa97a879d731688545f96cae41751709b3dc2c6206150fa8d809c1259e741861e1dde56463aa51bdeaf7

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/44230749A38B6989F56217B435A03E84CCADE62D

MD5 43135a959980a54e323bd14a5694a3a4
SHA1 33b5c557be085ea7e1a9eb4e9ecbe80949b90d2c
SHA256 dade047dc53388a50079efce1efead8f1137eb7de695016832b8e5b18126c1d9
SHA512 fc9648bfd6a497c7262ff40a3f528833314211ef289041f23d0900ce8e8cdb77a7d15efe8cb4e6a2e02779f17579d67c3539f0b9bf801466caab6fa73d3addad

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/099EB2BF8827A4F91EAB3E38B14650D0205226F2

MD5 4fcec9f5a07d9dfc5ad9ce8fdda7658b
SHA1 7933be73c96bbe50ac399b3b760dac7dd4ed254a
SHA256 1aa6c657987ff56a8c88b5ce803a0080254e8412816f439e60ab6f1537021550
SHA512 71f4014ac27a6cac148665e259d14ce8a45518a3d5e4eb5ac7c14da3b407adc155faeb2f31681ca53b4aae1000402163a57a7af0c6e3df7d69079ebdd43a6cfb

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/4080A8381648C3BF05A0998D57E75FDAD69C946E

MD5 2c19cd0ae2dd65b3b431661b4b324137
SHA1 d81bbffe142936618cb82b043f391cfa9dbd27fd
SHA256 19b9a101562e61806104af222bdc235a919d3593643517adbd4b24bf79c63fc8
SHA512 987c4c1915e37e190ffee21b8d34a268ef428bbc2c4f421804ed6932b485cda991430ba3968fc817cf05bfe1422b0f3d48ac5c308fb7d1f1cc6d1933f8254816

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/5BFB16A85A6415C5E282039C927A86A8290D09EC

MD5 02ca2e822ec2539efbe5adb41bed6871
SHA1 3c127748f91266a7a05550ed73a25a343208773b
SHA256 f63ef69446811a6d0515abc1de1bad6e69d3f3ab7bce48cadd4c955f5aec02d3
SHA512 690bb83463367eb164f3916a1cb26596e5119280cae5fbc875c22cc84a6f72bea91802cf3317a0ff48da88d9b8b767b1a3cb9bf4c0e135d30b9dc7e8dcbde746

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/0EC4CDE0C33626CA7FA76264533E1686E66A2198

MD5 eaf3076be37e859af67a436191989333
SHA1 ef1b36a1e712f1997abfc3e00177dc790cc5ee3c
SHA256 011bc390a90028156fbeccaeb8b624aca25d0d9d6613e7515b5f9e879258b584
SHA512 88e5f06aadee5e67f299160b425f2881038045260d7eeec4e65cf26bcb272c8a44ea7183d2e55aa0e78c554d9bcd7fb68faf9015e083e435d8969fcbfcf705ca

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/740D98CF01550607B0C0C173BEDE235CDD244769

MD5 76631979c811c73f0d787ed3091d2882
SHA1 dca4627d918b4a1960e5a87f3ed3a9735d5aa317
SHA256 16a54b2fd96b7ec34024f6377570749061c818709e9a96b40b6523b06f5240d9
SHA512 747fd562ef1a748292cf5cee25e953c994e35b92259b360206871fef2206011a48871f2b294621a84c644ba168ec099205f942b1448dc39a68be5523f0a6db96

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/EA1E3132006CB34CB9058E6891C35B731B9C4D9B

MD5 5241d206b42092751618b28765bac6af
SHA1 e0f673c98c6942da1118cc1c857d816f07fb832a
SHA256 d155fffc8e5010e767c181d0b123b2972115d1b9dcbb7deda40e588204356455
SHA512 0a281659a6891373bf65aa4ec6d81c99992f905a10a29b4b96b66a5ffe8d1776863efd4d9a3d14f10e50e04163e2a9aee5447418f2b72cf7d2b5247c0501e7c1

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/DF0CDE23AA0F44779E78EFEDFBAED16DB1B4DF40

MD5 cc0dd74727fb2b753d84d8667dba7c10
SHA1 63c7d25e3cbe2f6728ac4cc24f89dd91c17d7fcd
SHA256 778f9380c7245804ce1837e9d90088449f27680245c105a5e745390bf8be9eeb
SHA512 f1190bdccbbe00456f08de8bbb6a55edd3071ed4a937e4ea8bf32d19fdfb47a4cc9616b83c1125be28444976549a331bc136c63f2722d036ea00fae9c7d25b42

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/AEA4652B2EE4F73C050AF03B16A1F4233A21190A

MD5 28d46711396305960a77c33d6af55c8c
SHA1 35f1c97980a8eb2d25a831aa270785513cecb3ef
SHA256 a7a9425ebd5cb8f82fc8b7e66e9cfd2cf68797f67cb5bfa8a4d4e09bb6a534e2
SHA512 fc3b75dd7e9fabf79c811eff4d48315eb428dc32d6a117f0873d5649db71ab4279ea203de095f5356803b6e1c7d891e28d01eeeb2c4885b34fc13fe11e7f9986

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/37199C7D5F6F6AD9F1070AEDA92F5BC12CA1697A

MD5 725870563b7ae54a008a984e3f9b303d
SHA1 238ca0bc3e956ea13b95fe6054c2addc1b8236aa
SHA256 29a76f5ca1416ca2bf4686985ae242ca6f749a6e5b0dca8bbfbe5c216189c0cd
SHA512 9720219dc3c7a9e0b54076d1658a6d9c53f25ea3cc9596618e8c5e79d4ce6b9108a9ae31fc60c43bf7655a0a736dfce4ff02f7b67b345ef4b48a5c6f2f74c8b5

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/30D0F186B04D0B3CDFB165E0EDE160D5B111394E

MD5 caf8a1e3be95c1dc9fc289ba12aeffe5
SHA1 ae3057a5eb568559bf1faa9b9aa5580489dfb0b4
SHA256 9a7ac5b8ac34c89a7328c32356da3555dd5fdab5d126b14a1058a71826aaa4a2
SHA512 1b4a1e9ad00e74f0787f225b3f7578694a69cf8131348fa7823aec4ad0dc09b4e8388f513460bdfcc5adb53224bbb6541d4b3e5cd3f6b78e84fd346a9f5dd4f1

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/8A9FFE40E2B059B59F3D4F607769C77976074DEB

MD5 740506e9266b0b1996897b87eeec7470
SHA1 28c2d67d6c1ebe2671c4a154318e40dd506b6cb3
SHA256 a49eeebd79d06a589c25bd66f8f8f906d039bd08db1b8b68d5e98839b26f94c9
SHA512 d45eae2073bda8c372f0d1911fd83ec8599dfc08e83c6cb4d2d22f7fa372ab4765414044edec0c69a60d5f0dd5ecc4fd220a079bb71360a9ad384d014e6363c4

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/3C3F70E4DC3E28A1214E285C6A7CF5A45FF65071

MD5 c77fcfd6efcce919aab0578e0e3a29f2
SHA1 afe11ffe134425dedbe341abec58013eb7351a48
SHA256 180b13a596393a150b3ae9610e7c19c8c9badf9aa61bb45fe0ddf28eaf72e7fb
SHA512 e5f386f0e73fbe36cad8a792fddef3d3a4b71968360d64155b3308fa2670bb1730bacfd04b1a22a1aebb143155606d25dae5237b4c6a73ac701ac30e8b9b1d9e

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/482CC65825F28DCB92D0DC46CE356A5D06DB0ABF

MD5 1b3551739ef1fb4b2e80f45f696ac8f1
SHA1 bafbdf1bf3465c81eeac1653fceedc8fbf520b91
SHA256 4060f143dce8c7f2afb0a1aeefa426862b0fd41a97890cf7bac0d635ad965af0
SHA512 ea2e9ffa74b2f9b0e2ab7ae5356bd9f6e156299e597a32fdf053462dcfa545953c4ca903e19d486ef394ea22c1829eea0068ebbc0e7316dc39084cb00c324203

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/6F1DCBB59367EDB26B52C078DFB5C5C6E2015812

MD5 cbd1141694e1b971c728bb748592a972
SHA1 080ba3d12f6c2c271fb9cca4c2597c752ac4161a
SHA256 a3405b4f0614ae9f2678d359a411b5df17468097d0196870a21fff2f825ce6c4
SHA512 2a9db9f31efede60af82431cf6ab4f93d483705ec59138af4d61c99b25c2fac4e2b571d67b452a2b5b40195525964a7c3a81848c046579bb32fe3130b6caef90

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/EDE675BC5BD66B9EEBD8A46A4C06CC47C388FD92

MD5 e92487e9ed5f944ca06ad03b2b7e087b
SHA1 9bfea4c067635c997c8ed629bb07925f9a339d15
SHA256 4cbe891f15ba88ff3fbc4f49dd480e8397023e51df01572196f29a4f1637bae1
SHA512 9990365a6e328e0b82b9ae2c885232a77896847deb17b3475d23c8d44ca7dba86ca08db64a5b72d69120b3764aa4f4bb509443af64051355ba2f49d721a55148

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/29D686BA8E55239372E91393739C66C4EDAD0488

MD5 0f79514d12340a2cb27b9cfd05c02098
SHA1 afedce4c8462e4339888621c9accc6eb2c870028
SHA256 8377cb16a6acb0f7391a3bd17fe37c748f528f39605a72844d6b05858a269472
SHA512 421ec9aac0e5e34a27658f1e0a3cebac1978a496b0691fce45255a3dfb6a71565d8a0066e4d8a03acbd493f1f115d3815e51dfd33303f2f935d1d53a87072bf2

/root/.mozilla/firefox/xtt6of0m.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite

MD5 b10cb31bd35edc890dd01665b6b95e66
SHA1 177f645b2869366e255d8ba04262efc3ffa7eb1f
SHA256 e40cf4717a7853c7dc8bf261c74239df35f95b89bb3214ca40c93ed76efb20fc
SHA512 c1dc779452dcbad66788271e148e1f3c4700d6fff127ac5214d200783880cdea36730be34baa096e3805cb30d26052cc93b492a5d3687619d43c80b56f1eff6d

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/5C684DEDF3136EA22014E6C4C884F2495BE62702

MD5 14123614df39bd374cbcee769c6f183f
SHA1 1f2ff3143db832fb413e422e01d7ba6315c0103f
SHA256 d9cb52c9ff8ca33a114abe3031f6b43a433e7c7f8848b9ebe8f6259fe7382430
SHA512 db2f9116de9d351d2aef3852510679fc4634a964462735424565f9a4c2a3f45e410a9c7bad04e2a7754766dd23121c5859c6271659e216866a84882d6450c38a

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/0BABF52A64DC7B1FCCDD563D131A086B80FE77E0

MD5 3b63ed51ea7586194f9596e1fe2addcb
SHA1 ae79f3d5463390e5437f55f0c1b37e4c3d8af4da
SHA256 2e1d624ecca69559d05478c80c525d76460b2852d93da8169b568c8d6c8f64cc
SHA512 324fcec99198f0e3f96ba08e65cc6abc7fd3681c81e13ab6f0ee0cb04c6025931ab2f329aaaa649a89c324b77a391cc792c76dd7db3b9177d5c2cb9b841979dc

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/9EB475FADAF94B8CFD40B24F23A0C30CC121923D

MD5 e089439dac2fe3670a71322e959f18a3
SHA1 66e5e2200b9fe2f10b0c077e2bea80cc03f0d0a2
SHA256 b2aa92526d1e322d21bef2a7674ef0d2bbb2d193e0c1f3d53577348b54fc7eef
SHA512 0ed4e3babe54b3d482a72f028f5d9623f590af7f5278bd6f57d0f413accaafa325f4e20992ae079d3032e1a33f481694d65a9dd3b98966110b504aae5894d474

/root/.mozilla/firefox/xtt6of0m.default-release/storage/permanent/chrome/idb/2918063365piupsah.sqlite

MD5 d7797ca7ca0770758ec1843310528201
SHA1 d020a9f6711f0ec3a75a4506ec5441bfe85f43a8
SHA256 ba1e9e93d2fec406890ce6d8f57e8ca65007990857e09911d49fc21956d77401
SHA512 5425339a68a436fea01bd910e9533a20ea7089010ba1174c9bc4d0b602fbadd685100522941fb61e52f3eb68e68a5734b367e8e154c96a4a27b6df81070bd016

/root/.mozilla/firefox/xtt6of0m.default-release/storage/permanent/chrome/idb/2918063365piupsah.sqlite

MD5 ebae73457042025ceea6e080143e6e21
SHA1 7a57943e93e0e4d8ddcc13bd21a5fd513a348b81
SHA256 7b4bfc69016e00d0c8ea6ee6255cd66aa2b3f2bc798a0c5ff6b38732ad7d97cd
SHA512 ca107a69952e68d4ea0dee61d2029957eea261a8bb3981128c965be62b461754d46af5b6af8a7898552df22e01b37ec12e28212057722d6f5a6702a6d2c593df

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/8540EC873F08CBAD5DF5121BD3BABF95624B4A14

MD5 a65eafea8d7ad73b76ef56787c2b58ec
SHA1 af45b6e4424f83a46fd22924e2c790a19b78e6d7
SHA256 39e7cfafffdea103ba1bdc0b1442800680b388071abcf184dff97c9991488423
SHA512 a90f0915c4105126ddbbb2d52dc3bdca53b429689714009299b8417837f883efe58bc539e337ec269c1f602d5be6fd26343d32445a26447e11d79c152ea9d1a5

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/3C9B2D192D535C347CDA9FB12BFC88FD40CF0382

MD5 358d54a69569eb655f70fc0b6d36863f
SHA1 2f4bb2653d0b1210c186cf8ee148e1f0298c4129
SHA256 ed6bdcff6ad19c58ab28f1aaaacb8923e68bf14fc3f1449ad8a0d89d3e653b20
SHA512 a461f22f1d07d58c9c863db0f4bde70d58d3e624016f9d378befea9f18a4f7cbba54bcf8c671cb0e230c8bbb7e0878327c6efc3e5676d3c04f643f6f290f8d7d

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/22F59957B7E08CD6CCFED6AF2A1DF26FE157DF40

MD5 bc6b213f350d5492e363538d19be30cb
SHA1 ea30b1419a317cd7988c321e516ef50f21e7d6c0
SHA256 cb2c6b766b3a2f4b6614d97cd4fe4821607e01e026d03fa67193285029500632
SHA512 6634628e99cb3cf9933918a65f72d1572807b84d8d58dec5584bc840fc6fffad9556cdf1a8165fed94c5c826740d0dd7457215e00a47b9c7230336531d09811e

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/252CE8AC445A184A1F4A1C6C6D4ADB8AE41B7776

MD5 6518797e18e1fe9cd7c7b71c8e4e0b84
SHA1 1482cbd9ecc7962d9cbdc0f6a1c1b7edd0dfabef
SHA256 c43df9e14c04ff8d0898df470b2ef33f942c99e0402d221b5a3c717d95b006cf
SHA512 c2870f231f6ee1e0096842bc430611fca5078c8c4bfafef471b20fdbb7ecd82dc0223b84a04a06d2909c4474ed56906a67b031f09be23a27ba6be6630c9a3820

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/63E5E5843BE966012A4448BA5448C59ABB992EEE

MD5 d8d6ad7b94cc011ea5f94fccbf73dd5f
SHA1 c18692fc017a8fe4729bfc05eb26c10d194bafe3
SHA256 ce4435b0969a433fde0d1547ecf8b155b11fde23bd2b1657435ebbd1de74f3ab
SHA512 12db0ebc89e9b4687a5eb5053b32ca98b4abad4dbe463b263f492414f564f2465b73bc545c27ec880de5e0ccac6a7bdbffda4f88ee48c945e856c78139ad6c9a

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/D6B0ADD0DAEA00708CBB4290B85CCA0E0FA79061

MD5 6c587c762469165d78496c4cb5066102
SHA1 a27c357858bdb70b853b90548a98d9f287392ed0
SHA256 20e4eed574f8fafdde0bf1053b5932e8a3eb28e106a56366a7aa288e1ebebd17
SHA512 9a824308b86c5a0857b95c2b8af89bccfd2bdc7b11c69ba74768925ae5ea461bc40200b246bbcdaea92b323c89ded71409e42d505b9f54c4e752b00b79abbee0

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/6ECCBDACFA779F519CFB453E1BF5545F178964D2

MD5 4772da5de5534b224b8c363b4c111475
SHA1 db34e78f6398a4115805875cb36722e367440eeb
SHA256 ce81eb7102c409e229ebb9fa96c2dd27b194b7b8a533edc8caa7a5d7d2d011b5
SHA512 9e6ee8da284f203a6b95ab96a9faa183ad03697bedbfa44f68abd310b52b77892219f0d783e6cb4963d7f2c8fbcedf898680890e383caf99bb86207bd94a2e19

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/C38828A589826967E45869A06026E590014D271E

MD5 e79cf41a0d7d95d23f29656f2f899685
SHA1 fad875ad582449d59e4cce41fe591da086d7eb69
SHA256 1cf61c51a2788618eaa84b8cc2e773a90817b87e8a1e960b127cc1f16e6e324d
SHA512 2e1ca9b5c27b9516f39ced0ff9565010ed633fa5e0d229d03d4dcc1f0c6f8821ec45d4af98fd9e1c75e2407e137849b9d8c6e41d90893ad2f9abb50d200a3f1b

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/B8D2079355C73E298CD908934C85D5B51B4D4302

MD5 47cd901fef09d2ef133f861cdd224188
SHA1 ef4d48d949989e74e1d8f8c622e78c5e752753f1
SHA256 136b10fedbd3b0487fc74546f7a011d2bf2eced4ed765b16f8f1979a76f932e8
SHA512 7573834f147c9613744019ef044e86cc6c4f54703763b4c0d377218a2525ad8666131840e6a3d6abe37b8760c8a5e6d0bedf345b81519fb7ab5233384f371d4d

/root/.mozilla/firefox/xtt6of0m.default-release/prefs-1.js

MD5 999384df387a3195b19bd1a6f7c635d4
SHA1 0daa473e25d56e5771c2548c89bf3ddab5deacaa
SHA256 8c07b14b6726374717bb81a67ef8bb30bd8d103db372b9a6004d184d22852f96
SHA512 1c17a8f2322eff7b241bb7517a31d72ca685870653b9750c46cf5c042846a79dc08cafbed67f4923e317cb64469294e0b60daaf513f5ef0c30d3bc9f2df54ce8

/root/.mozilla/firefox/xtt6of0m.default-release/datareporting/glean/events/background-update

MD5 44074c44a9d4e6a82fefe8ca7e6d7b7f
SHA1 9edf3ebbcc7d43203de5e2afad53adad0c497f57
SHA256 46790ebdc3c5c952c730328994a065ab3454e267ec0f936da9fd967ba28b3b2e
SHA512 f900c38c41361e6890e0343489d6755207a97c23fee7e9bf636cc1ece6b8453e21dd40679dfe47fa4f2a0fd6ef416a2d9c094cd317a2d4628a24b32fb8deec96

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/E3ACB721C73636F090B994D6B9DE2A572AAF310B

MD5 a1f0c68015044cf8666c1768b575b7c9
SHA1 cd8bb61ef08af0713763216a7544d1d88e87ff5c
SHA256 be47246d9c942e46b8b4721ec0f8489fef9fefcf7179b8bfe99fc18f0663d239
SHA512 ba0e78f91e0824a1d39938a17d727729f9948bcf5246916820012e4d0842deabed8245a7eff32b7d5bcef04d18c86991966f1f48db071be521a154849c1aab15

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/8F539F5B510E9FCA8F56096C20E14B6138505FB0

MD5 70520de76d4071ed7072852985289e68
SHA1 1689c79cadd336df7cfba0dd3c9bb2f69e0c94e9
SHA256 0a0ffa92689a1dd62045ed265af47bc6387c037c4c1cb75e02dc2b0b8fc014ef
SHA512 573e818bf33a3304dd94f6e822f49c097789c2c83563e93be7688fe6a981c85e2e3a9faa77d53f19cf477eb9104702984e6609161551751c255b40dd332db978

/root/.mozilla/firefox/xtt6of0m.default-release/cert9.db

MD5 d3b7547a8bce6f81c4eddafbe339cfda
SHA1 a8862f47c996a959a376f9c65e8fc7bd486048a5
SHA256 1e7379b5e40cd563cc40a513e684ebfd0c11a40f14611f668f5504781f1dd8f3
SHA512 2def39d8ef9a6ec57094e272a03fc5d9444d366704f8ce6268eef9030814433a5dd34f3e4a5611dae9543866b7357d2803b314f74376e8df3b4453d9e845c61a

/root/.mozilla/firefox/xtt6of0m.default-release/datareporting/glean/events/background-update

MD5 0d38295df3f0d18f8b09b1e7c28eb718
SHA1 8282209987587df753b1905fcba60b685ce11554
SHA256 4fc6d1bccb58a64c465cfb37d3bfc44c17d0d3ab7ab2ae63457a29f6e6dae9f4
SHA512 76a8359d87bd4aa3df2759182b0842dfdc363982e675c17777930e2582232cf6e7523be0639822283ff487b9a6d5d88dbb61b50466532fceaada1825a1123935

/root/.mozilla/firefox/xtt6of0m.default-release/storage/permanent/chrome/idb/1451318868ntouromlalnodry--epcr.sqlite

MD5 a07f38094a062df397a50e5f67aaef3e
SHA1 38a1a560062da4996e9998c7b8ff464c9795deb5
SHA256 46c275d2fb55d0e4d4e0b68a32406e37d627a1c574e744c07a689d711df93435
SHA512 305e4d82bb6ed4f84b41a040edfb1675287fdeb4ba54b96c1a393e02f3c3d360a81fab2af0f6d902524e2377c195f2513376f226b0e9decfcd2e5a783cc09187

/root/.mozilla/firefox/xtt6of0m.default-release/storage/permanent/chrome/idb/2823318777ntouromlalnodry--naod.sqlite

MD5 e45d4a312e51392199caddcc29e5c292
SHA1 b6f68dddd0e114ec0fb0ead55119b0d34d8c446f
SHA256 ba12812ae676759a1590460bf17710c9f39f3bc9711988cb938f80e6d5c2d4b9
SHA512 cc6c35dc57406afa2454e4c247418c4aab2ee1a7ae11d2aed0ba782f5ef43420dbc1911e1c7a28ee807bdede1ed29064723b1fcadfaba544bc007c71b0d3bb5b

/root/.mozilla/firefox/xtt6of0m.default-release/storage/permanent/chrome/idb/2823318777ntouromlalnodry--naod.sqlite

MD5 41be3621fbd78d03c5a6cb0180b903a4
SHA1 8c8e44681e029a39456bc26521ad2bc26efd6ca6
SHA256 4933c1ebaa0ca1cf988f2075bce83f5003464ee926928f0fa8d0cb7dd1a66e01
SHA512 234206d3ba47a7a05298e0b5df48efd31021dca429f1445a45133a8d4bd82372999923249cd3c9aaa91b9925d3df59d580815fca0d193d03e9d8cfab644b3a3e

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/460AB527782AFC934D6E477416D46BA0900EDAD3

MD5 2b7fe033c1a781f3097a18f3c7d0f027
SHA1 f7ef9f9d5c27b1e76813e7d5f130a938ff9bd11b
SHA256 340d057cd3c99d6fa338f7b3130f0d75f88c4f90e9ebc1967fad2d72ddba9f67
SHA512 c26fb0bb2a6511984879cccd25d9f2bc97dcd3cd643a84fd4bf7abb26c66cd9522dfb01902ada3f79d5458adbe7cfd639d15e1b4aebccdfc637dd0d542ee8c00

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/B6F59826B025251E088E4743F506708A83BD73B9

MD5 9a1da9ca5f7af0ea0cda394399eb7e00
SHA1 86e11f4b2b3416db51f75f795264076c9ec1b745
SHA256 422e54e3418cfda8e73f047513db3035b46e85a68aec4eb975eb0693a8da7433
SHA512 a7dedf713bdb06531670953fa486907780f12f1b8b88cca569eea1807c5e09878e37b8e87eec5757f68327ab57bd9cd03eb148e485596deb866ecb90f80bc79e

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/C72D4296C2EBC6FD41A9F780CD0C8F30F0FF937C

MD5 537711d38ac2bd3c1b41e127b144b3c4
SHA1 10b8f5655e4e919f85120ec6422c23ae3f03d6a4
SHA256 aaed2bd933efa96495a2eb0e9c123c8e1b6f49beaef91dd2899f85751f273693
SHA512 dabaccd9145aa56fbbd5fab7aef7601a55ecb07edc9cb15460514a3f0e63b3627fefae623b132c03d17d3afa190c1433d2a8306b12084ff93c94d31691fcb64f

/root/.mozilla/firefox/xtt6of0m.default-release/datareporting/glean/events/pageload

MD5 9bbd763770088e5ffc82d44a988d8dca
SHA1 ca185e9ed3bfb1c8f9d4dd45319989689b6b9ee5
SHA256 9c85b63d7024cb2a1af03398385847059227748addf63e65f59868873189253f
SHA512 d70b0da31d53a4a88eec8133ecb725320fa99f2534b9927dd7c81192df607609e47f206cca9d12c9e1e211bd21c011e8b6a71c354aeccc807d188b32e25e89fb

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/89C9B59023C6004C5FCA8E641B2BD533BAA7F06E

MD5 f4c5d6cc755b8ed7728d0dae594cac4d
SHA1 005e09a1ce23a85ff18038b5e433308f5250ba4d
SHA256 74c58a01006cf40d81bb1883ff12b3abd91dec6c2270d15f19e7e223dd2ef25a
SHA512 40f71e90c1bbcc380856326cfa91da1aa354b3ad342889e9a3a786a6a627e8d5073e73815c9747db233eb4c81e4d780c43e4dc3f05e488fc01304d2fe0b61233

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/9180BDBFC7A3954A6C3D63C91FB844E128F77E5B

MD5 ec3eb969855055612134b475c05c657e
SHA1 c35e8641db241e9e89cfbc8c98e2c30539ecacd9
SHA256 8f787cf0ae20a3cd6483e9ac40639672d8e0c5ff5d4680f955f21287410055e6
SHA512 dced6d2b726a1c732351c0f5c0196f832a35f385fa766cca51daa3b78a66f845ba213c540716779b80726cc37ae53b47f09e66c6d9f25e780d1f68de31a49125

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/0719C579D7ED39E9135703DC0291ED42B7ABC08D

MD5 fef52d4c422fa31d2aba7667f5da6a4d
SHA1 855f03bb35ac983dc8eb2514e15f47b360991d2d
SHA256 e9668e994df42dbf5747e60c659e489dbf56c73cc7869c46da662eadf76cbe4d
SHA512 3348c7164edaa2236efa11ee47f4eb257c9eb0434f863dbb95e3028e3e4ca2be687691f3cdaba5a4005690bd662d7f8019fe3d5b6cd1ff66ae6b809199b54d13

/root/.cache/mozilla/firefox/xtt6of0m.default-release/cache2/entries/DEC0AB6FC3976D904ABAAEB9F114BF924B0B126E

MD5 3265d0626d669772385bfa444c702425
SHA1 c7b8fd6d53ccd127b2e299554b815466e28a486a
SHA256 40535a05dafad461f6a673de92f487c4d9a0e2de0d167b23035d6d0e86765c09
SHA512 3668952c8c75871cd12caa506f6c040d6d7ec9c90292d3bb54d68d50589678abadf16f6016e4cd07c50eb855c4114f7ca81ad648ef8c547612c3326927bff149