hxxps://search[.]saveturtletab[.]com/search?p=hello!

Resubmissions

19-04-2024 15:25

240419-strmsagf6v 1

19-04-2024 15:22

19-04-2024 15:20

18-04-2024 20:47

18-04-2024 20:36

Analysis

max time kernel
59s
max time network
65s
platform
ubuntu-20.04_amd64
resource
ubuntu2004-amd64-20240221-en
resource tags

arch:amd64arch:i386image:ubuntu2004-amd64-20240221-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system
submitted
18-04-2024 20:36

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://search.saveturtletab.com/search?p=hello!

Score

7^/10

antivm spyware stealer

Malware Config

Signatures

Changes its process name 64 IoCs

Processes:

firefox

description	ioc	pid
Changes the process name, possibly in an attempt to hide itself	gmain	1855
Changes the process name, possibly in an attempt to hide itself	gdbus	1860
Changes the process name, possibly in an attempt to hide itself	glean.dispatche	1867
Changes the process name, possibly in an attempt to hide itself	IPC I/O Parent	1869
Changes the process name, possibly in an attempt to hide itself	IPC I/O Parent	1869
Changes the process name, possibly in an attempt to hide itself	IPC I/O Parent	1869
Changes the process name, possibly in an attempt to hide itself	Timer	2008
Changes the process name, possibly in an attempt to hide itself	Timer	2008
Changes the process name, possibly in an attempt to hide itself	Netlink Monitor	2009
Changes the process name, possibly in an attempt to hide itself	Socket Thread	2012
Changes the process name, possibly in an attempt to hide itself	Netlink Monitor	2009
Changes the process name, possibly in an attempt to hide itself	Socket Thread	2012
Changes the process name, possibly in an attempt to hide itself	IPDL Background	2013
Changes the process name, possibly in an attempt to hide itself	Backgro~Pool #1	2014
Changes the process name, possibly in an attempt to hide itself	IPDL Background	2013
Changes the process name, possibly in an attempt to hide itself	Backgro~Pool #1	2014
Changes the process name, possibly in an attempt to hide itself	HTML5 Parser	2017
Changes the process name, possibly in an attempt to hide itself	HTML5 Parser	2017
Changes the process name, possibly in an attempt to hide itself	pool-firefox	2020
Changes the process name, possibly in an attempt to hide itself	pool-firefox	2019
Changes the process name, possibly in an attempt to hide itself	JS Watchdog	2022
Changes the process name, possibly in an attempt to hide itself	JS Watchdog	2022
Changes the process name, possibly in an attempt to hide itself	BGReadURLs	2024
Changes the process name, possibly in an attempt to hide itself	BGReadURLs	2024
Changes the process name, possibly in an attempt to hide itself	glxtest:disk$0	2025
Changes the process name, possibly in an attempt to hide itself	Cache2 I/O	2026
Changes the process name, possibly in an attempt to hide itself	Cookie	2027
Changes the process name, possibly in an attempt to hide itself	Cookie	2027
Changes the process name, possibly in an attempt to hide itself	StreamTrans #1	2028
Changes the process name, possibly in an attempt to hide itself	StreamTrans #1	2028
Changes the process name, possibly in an attempt to hide itself	TaskCon~ller #1	2030
Changes the process name, possibly in an attempt to hide itself	TaskCon~ller #0	2029
Changes the process name, possibly in an attempt to hide itself	BgIOThr~Pool #1	2031
Changes the process name, possibly in an attempt to hide itself	BgIOThr~Pool #1	2031
Changes the process name, possibly in an attempt to hide itself	StreamTrans #2	2032
Changes the process name, possibly in an attempt to hide itself	StreamTrans #2	2032
Changes the process name, possibly in an attempt to hide itself	QuotaManager IO	2033
Changes the process name, possibly in an attempt to hide itself	QuotaManager IO	2033
Changes the process name, possibly in an attempt to hide itself	IndexedDB #1	2034
Changes the process name, possibly in an attempt to hide itself	IndexedDB #1	2034
Changes the process name, possibly in an attempt to hide itself	IPC Launch	2037
Changes the process name, possibly in an attempt to hide itself	IPC Launch	2037
Changes the process name, possibly in an attempt to hide itself	SandboxReporter	2036
Changes the process name, possibly in an attempt to hide itself	SandboxReporter	2036
Changes the process name, possibly in an attempt to hide itself	Breakpad Server	2035
Changes the process name, possibly in an attempt to hide itself	Sandbox Forked	2038
Changes the process name, possibly in an attempt to hide itself	DOM Worker	2039
Changes the process name, possibly in an attempt to hide itself	DOM Worker	2039
Changes the process name, possibly in an attempt to hide itself	Chroot Helper	2040
Changes the process name, possibly in an attempt to hide itself	MainThread	2038	firefox
Changes the process name, possibly in an attempt to hide itself	IPC I/O Child	2042
Changes the process name, possibly in an attempt to hide itself	IPC I/O Child	2042
Changes the process name, possibly in an attempt to hide itself	IPC I/O Child	2042
Changes the process name, possibly in an attempt to hide itself	FSBroker2038	2043
Changes the process name, possibly in an attempt to hide itself	FSBroker2038	2043
Changes the process name, possibly in an attempt to hide itself	Socket Process	2038	firefox
Changes the process name, possibly in an attempt to hide itself	Backgro~Pool #1	2044
Changes the process name, possibly in an attempt to hide itself	Backgro~Pool #1	2044
Changes the process name, possibly in an attempt to hide itself	Socket Thread	2045
Changes the process name, possibly in an attempt to hide itself	Socket Thread	2045
Changes the process name, possibly in an attempt to hide itself	ProfilerChild	2046
Changes the process name, possibly in an attempt to hide itself	ProfilerChild	2046
Changes the process name, possibly in an attempt to hide itself	Timer	2047
Changes the process name, possibly in an attempt to hide itself	Timer	2047

Reads user data of web browsers 64 IoCs

Reads stored browser data which can include saved credentials.

spyware stealer

Processes:

firefox

description	ioc
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/logins-backup.json
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/datareporting/state.json
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/containers.json
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/storage/permanent/chrome/idb/1451318868ntouromlalnodry--epcr.sqlite-journal
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/favicons.sqlite-wal	firefox
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/content-prefs.sqlite
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/storage/permanent/chrome/idb/1657114595AmcateirvtiSty.sqlite
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/addonStartup.json.lz4	firefox
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/sessionstore-backups/previous.js
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/content-prefs.sqlite-journal
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/favicons.sqlite	firefox
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/ExperimentStoreData.json
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/user.js	firefox
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/cert9.db	firefox
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/key4.db
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/sessionstore-backups/recovery.bak
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/extensions	firefox
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/sessionstore-backups/recovery.jsonlz4
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/key4.db	firefox
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite-journal
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/cookies.sqlite-journal	firefox
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/storage/permanent/chrome
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/shield-preference-experiments.json
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/storage/permanent/chrome/idb/1451318868ntouromlalnodry--epcr.sqlite-wal
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/storage/permanent/chrome/idb/1657114595AmcateirvtiSty.sqlite-wal
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/sessionstore.jsonlz4
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/cert9.db-journal
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/permissions.sqlite-journal
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/cert9.db
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/places.sqlite-journal	firefox
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/places.sqlite-wal	firefox
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/downloads.json
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/protections.sqlite
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/system-extensions	firefox
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/storage.sqlite
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/storage/default
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/protections.sqlite-journal
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite-wal
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/times.json
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/extension-preferences.json
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/storage/ls-archive.sqlite
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/storage
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/extensions.json
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/key4.db-journal	firefox
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/sessionstore-backups/recovery.baklz4
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/sessionstore-backups/recovery.js
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/storage/permanent/chrome/idb/1657114595AmcateirvtiSty.sqlite-journal
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/favicons.sqlite-journal	firefox
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/cookies.sqlite
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/sessionCheckpoints.json
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/sessionstore.js
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/xulstore.json	firefox
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/storage/temporary
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release	firefox
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite-wal
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/cookies.sqlite	firefox
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/permissions.sqlite
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/addons.json
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/cert_override.txt	firefox
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/storage/permanent/chrome/idb/1451318868ntouromlalnodry--epcr.sqlite
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/logins.json
File opened for reading	/root/.mozilla/firefox/ux6lzsje.default-release/compatibility.ini	firefox

Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
antivm

Virtualization/Sandbox Evasion
T1497

Processes:

description ioc

File opened for reading /proc/cpuinfo
Enumerates running processes
Discovers information about currently running processes on the system

description	ioc
File opened for reading	/proc/cpuinfo

Reads CPU attributes 1 TTPs 12 IoCs

System Information Discovery

T1082

Processes:

firefoxfirefoxfirefoxfirefoxfirefoxfirefoxfirefox

description	ioc	process
File opened for reading	/sys/devices/system/cpu/present	firefox
File opened for reading	/sys/devices/system/cpu/present	firefox
File opened for reading	/sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
File opened for reading	/sys/devices/system/cpu/cpu0/cache/index3/size
File opened for reading	/sys/devices/system/cpu/cpu0/cache/index2/size
File opened for reading	/sys/devices/system/cpu/present
File opened for reading	/sys/devices/system/cpu/present	firefox
File opened for reading	/sys/devices/system/cpu/present	firefox
File opened for reading	/sys/devices/system/cpu/present	firefox
File opened for reading	/sys/devices/system/cpu/present	firefox
File opened for reading	/sys/devices/system/cpu/online
File opened for reading	/sys/devices/system/cpu/present	firefox

Enumerates kernel/hardware configuration 1 TTPs 64 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

System Information Discovery

T1082

Processes:

firefoxgvfs-gphoto2-volume-monitorglxtestfirefoxgvfs-mtp-volume-monitorfirefoxfirefoxfirefoxfirefoxfirefox

description	ioc	process
File opened for reading	/sys/fs/cgroup/cpu,cpuacct/cpu.cfs_quota_us	firefox
File opened for reading	/sys/class	gvfs-gphoto2-volume-monitor
File opened for reading	/sys/bus/pci/devices/0000:00:01.3/irq	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:03.0/vendor	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:03.0/device	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:02.0/class	glxtest
File opened for reading	/sys/devices/pci0000:00/0000:00:02.0/uevent	glxtest
File opened for reading	/sys/bus/usb/devices	gvfs-gphoto2-volume-monitor
File opened for reading	/sys/bus/pci/devices/0000:00:05.0/vendor	glxtest
File opened for reading	/sys/devices/pci0000:00/0000:00:02.0/device	glxtest
File opened for reading	/sys/devices/pci0000:00/0000:00:02.0/subsystem_device	glxtest
File opened for reading	/sys/devices/system/cpu	firefox
File opened for reading	/sys/devices/pci0000:00/0000:00:05.0/usb1/1-0:1.0/uevent	gvfs-mtp-volume-monitor
File opened for reading	/sys/bus/pci/devices/0000:00:01.0/vendor	glxtest
File opened for reading	/sys/devices/system/cpu	firefox
File opened for reading	/sys/bus/pci/devices/0000:00:04.0/resource	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:05.0/class	glxtest
File opened for reading	/sys/fs/cgroup/cpu,cpuacct/cpu.cfs_quota_us	firefox
File opened for reading	/sys/devices/pci0000:00/0000:00:05.0/usb1/1-1/1-1:1.0/uevent	gvfs-mtp-volume-monitor
File opened for reading	/sys/devices/pci0000:00/0000:00:05.0/usb1/1-1/1-1:1.0/uevent	gvfs-gphoto2-volume-monitor
File opened for reading	/sys/bus/pci/devices/0000:00:00.0/device	glxtest
File opened for reading	/sys/devices/system/cpu	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:04.0/class	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:01.3/resource	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:03.0/irq	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:01.1/vendor	glxtest
File opened for reading	/sys/bus/usb/devices	gvfs-mtp-volume-monitor
File opened for reading	/sys/bus/pci/devices/0000:00:01.0/device	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:00.0/resource	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:03.0/class	glxtest
File opened for reading	/sys/devices/system/cpu	firefox
File opened for reading	/sys/bus/pci/devices/0000:00:00.0/class	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:06.0/resource	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:06.0/class	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:02.0/vendor	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:04.0/vendor	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:01.3/class	glxtest
File opened for reading	/sys/devices/pci0000:00/0000:00:02.0/vendor	glxtest
File opened for reading	/sys/devices/pci0000:00/0000:00:02.0/subsystem_vendor	glxtest
File opened for reading	/sys/class	gvfs-mtp-volume-monitor
File opened for reading	/sys/devices/pci0000:00/0000:00:05.0/usb1/1-1/uevent	gvfs-mtp-volume-monitor
File opened for reading	/sys/bus/pci/devices/0000:00:04.0/irq	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:01.1/class	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:06.0/vendor	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:02.0/resource	glxtest
File opened for reading	/sys/fs/cgroup/cpu,cpuacct/cpu.cfs_quota_us	firefox
File opened for reading	/sys/bus/pci/devices/0000:00:01.3/device	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:03.0/resource	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:01.1/irq	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:06.0/device	glxtest
File opened for reading	/sys/devices/system/cpu	firefox
File opened for reading	/sys/devices/system/cpu
File opened for reading	/sys/devices/pci0000:00/0000:00:05.0/usb1/uevent	gvfs-mtp-volume-monitor
File opened for reading	/sys/devices/pci0000:00/0000:00:05.0/usb1/1-1/uevent	gvfs-gphoto2-volume-monitor
File opened for reading	/sys/bus/pci/devices	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:01.0/irq	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:01.0/class	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:01.1/resource	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:06.0/irq	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:01.1/device	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:02.0/device	glxtest
File opened for reading	/sys/bus/pci/devices/0000:00:05.0/resource	glxtest
File opened for reading	/sys/fs/cgroup/cpu,cpuacct/cpu.cfs_quota_us	firefox
File opened for reading	/sys/devices/system/cpu	firefox

Reads runtime system information 64 IoCs

Reads data from /proc virtual filesystem.

Processes:

gvfs-udisks2-volume-monitorfirefoxfirefoxfirefoxxdg-document-portalgnome-keyring-daemongvfsd-trashfirefoxgvfsd-fusesedglxtestfirefoxxdg-desktop-portal-gtkdconf-servicesedgvfs-mtp-volume-monitornautilusfirefoxdbus-daemongoa-identity-servicesedgoa-daemon

description	ioc	process
File opened for reading	/proc/1/cgroup	gvfs-udisks2-volume-monitor
File opened for reading	/proc/self/fd/45	firefox
File opened for reading	/proc/2082/cmdline
File opened for reading	/proc/filesystems	firefox
File opened for reading	/proc/self/fd/47	firefox
File opened for reading	/proc/2146/statm
File opened for reading	/proc/self/mountinfo	gvfs-udisks2-volume-monitor
File opened for reading	/proc/self/maps	firefox
File opened for reading	/proc/self/mountinfo
File opened for reading	/proc/self/cgroup	firefox
File opened for reading	/proc/2120/statm
File opened for reading	/proc/self/task/2126/stat
File opened for reading	/proc/1480/cmdline
File opened for reading	/proc/self/fd/42	firefox
File opened for reading	/proc/filesystems	xdg-document-portal
File opened for reading	/proc/2060/cmdline
File opened for reading	/proc/self/stat
File opened for reading	/proc/self/fd/43	firefox
File opened for reading	/proc/self/fd/49	firefox
File opened for reading	/proc/2298/status	gnome-keyring-daemon
File opened for reading	/proc/filesystems	gvfsd-trash
File opened for reading	/proc/2120/smaps
File opened for reading	/proc/filesystems	firefox
File opened for reading	/proc/self/task/2211/stat
File opened for reading	/proc/self/fd/30	firefox
File opened for reading	/proc/self/fd/41	firefox
File opened for reading	/proc/filesystems	gvfsd-fuse
File opened for reading	/proc/self/fd/44	firefox
File opened for reading	/proc/self/fd/94	firefox
File opened for reading	/proc/self/cgroup	firefox
File opened for reading	/proc/filesystems	gnome-keyring-daemon
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/self/fd/74	firefox
File opened for reading	/proc/self/fd/87	firefox
File opened for reading	/proc/self/task/2233/stat
File opened for reading	/proc/filesystems	glxtest
File opened for reading	/proc/self/mountinfo	firefox
File opened for reading	/proc/self/maps	firefox
File opened for reading	/proc/filesystems	xdg-desktop-portal-gtk
File opened for reading	/proc/filesystems	dconf-service
File opened for reading	/proc/2322/cgroup	gvfs-udisks2-volume-monitor
File opened for reading	/proc/2356/cmdline
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/self/fd/40	firefox
File opened for reading	/proc/self/fd/48	firefox
File opened for reading	/proc/2298/cmdline
File opened for reading	/proc/filesystems	gvfs-mtp-volume-monitor
File opened for reading	/proc/1577/cmdline
File opened for reading	/proc/filesystems	nautilus
File opened for reading	/proc/self/cgroup	firefox
File opened for reading	/proc/self/maps	firefox
File opened for reading	/proc/filesystems	dbus-daemon
File opened for reading	/proc/self/cgroup	firefox
File opened for reading	/proc/self/mountinfo	firefox
File opened for reading	/proc/filesystems	goa-identity-service
File opened for reading	/proc/self/fd/128	firefox
File opened for reading	/proc/filesystems	sed
File opened for reading	/proc/self/fd/50	firefox
File opened for reading	/proc/filesystems	goa-daemon
File opened for reading	/proc/1505/cmdline
File opened for reading	/proc/filesystems	firefox
File opened for reading	/proc/2065/cmdline
File opened for reading	/proc/2334/cmdline
File opened for reading	/proc/sys/kernel/cap_last_cap

Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.

Processes:

firefox

description ioc process

File opened for modification /tmp/firefox/.parentlock firefox

description	ioc	process
File opened for modification	/tmp/firefox/.parentlock	firefox

/usr/bin/xdg-open
xdg-open "https://search.saveturtletab.com/search?p=hello!"
1⤵
PID:1479

/usr/bin/dbus-send
dbus-send --print-reply "--dest=org.freedesktop.DBus" /org/freedesktop/DBus org.freedesktop.DBus.GetNameOwner string:org.gnome.SessionManager
2⤵
PID:1480

/usr/bin/dbus-launch
dbus-launch --autolaunch 4816dd152e8c48ff97e9117d197c13d8 --binary-syntax --close-stderr
3⤵
PID:1481

/usr/bin/grep
grep " = \\\"xfce4\\\"\$"
2⤵
PID:1491

/usr/bin/xprop
xprop -root _DT_SAVE_MODE
2⤵
PID:1490

/usr/bin/grep
grep -i "^xfce_desktop_window"
2⤵
PID:1493

/usr/bin/xprop
xprop -root
2⤵
PID:1492

/usr/bin/grep
grep -q "^Enlightenment"
2⤵
PID:1495

/usr/bin/uname
uname
2⤵
PID:1496

/usr/bin/grep
grep -q "^file://"
2⤵
PID:1498

/usr/bin/egrep
egrep -q "^[[:alpha:]+\\.\\-]+:"
2⤵
PID:1500

/usr/local/sbin/grep
grep -E -q "^[[:alpha:]+\\.\\-]+:"
2⤵
PID:1500

/usr/local/bin/grep
grep -E -q "^[[:alpha:]+\\.\\-]+:"
2⤵
PID:1500

/usr/sbin/grep
grep -E -q "^[[:alpha:]+\\.\\-]+:"
2⤵
PID:1500

/usr/bin/grep
grep -E -q "^[[:alpha:]+\\.\\-]+:"
2⤵
PID:1500

/usr/bin/xdg-mime
xdg-mime query default x-scheme-handler/https
2⤵
PID:1504

/usr/bin/dbus-send
dbus-send --print-reply "--dest=org.freedesktop.DBus" /org/freedesktop/DBus org.freedesktop.DBus.GetNameOwner string:org.gnome.SessionManager
3⤵
PID:1505

/usr/bin/dbus-launch
dbus-launch --autolaunch 4816dd152e8c48ff97e9117d197c13d8 --binary-syntax --close-stderr
4⤵
PID:1506

/usr/bin/grep
grep " = \\\"xfce4\\\"\$"
3⤵
PID:1508

/usr/bin/xprop
xprop -root _DT_SAVE_MODE
3⤵
PID:1507

/usr/bin/grep
grep -i "^xfce_desktop_window"
3⤵
PID:1516

/usr/bin/xprop
xprop -root
3⤵
PID:1515

/usr/bin/grep
grep -q "^Enlightenment"
3⤵
PID:1518

/usr/bin/uname
uname
3⤵
PID:1519

/usr/bin/which
which firefox
2⤵
PID:1562

/usr/bin/firefox
/usr/bin/firefox "https://search.saveturtletab.com/search?p=hello!"
2⤵
PID:1577

/usr/bin/which
which /usr/bin/firefox
3⤵
PID:1578

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox "https://search.saveturtletab.com/search?p=hello!"
2⤵
- Reads user data of web browsers
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
- Writes file to tmp directory
PID:1577

/usr/local/sbin/dbus-launch
dbus-launch "--autolaunch=4816dd152e8c48ff97e9117d197c13d8" --binary-syntax --close-stderr
3⤵
PID:1856

/usr/local/bin/dbus-launch
dbus-launch "--autolaunch=4816dd152e8c48ff97e9117d197c13d8" --binary-syntax --close-stderr
3⤵
PID:1856

/usr/sbin/dbus-launch
dbus-launch "--autolaunch=4816dd152e8c48ff97e9117d197c13d8" --binary-syntax --close-stderr
3⤵
PID:1856

/usr/bin/dbus-launch
dbus-launch "--autolaunch=4816dd152e8c48ff97e9117d197c13d8" --binary-syntax --close-stderr
3⤵
PID:1856

/usr/lib/firefox/glxtest
/usr/lib/firefox/glxtest -f 13
3⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:1868

/usr/local/sbin/dbus-launch
dbus-launch "--autolaunch=4816dd152e8c48ff97e9117d197c13d8" --binary-syntax --close-stderr
3⤵
PID:2049

/usr/local/bin/dbus-launch
dbus-launch "--autolaunch=4816dd152e8c48ff97e9117d197c13d8" --binary-syntax --close-stderr
3⤵
PID:2049

/usr/sbin/dbus-launch
dbus-launch "--autolaunch=4816dd152e8c48ff97e9117d197c13d8" --binary-syntax --close-stderr
3⤵
PID:2049

/usr/bin/dbus-launch
dbus-launch "--autolaunch=4816dd152e8c48ff97e9117d197c13d8" --binary-syntax --close-stderr
3⤵
PID:2049

/usr/bin/dbus-daemon
/usr/bin/dbus-daemon --syslog-only --fork --print-pid 5 --print-address 7 --session
1⤵
- Reads runtime system information
PID:1483

/usr/bin/sed
sed -n "s/\$^[[:alnum:]+\\.-]*\$:.*\$/\\1/p"
1⤵
PID:1503

/usr/bin/sed
sed "s/:/ /g"
1⤵
- Reads runtime system information
PID:1522

/usr/bin/cut
cut -d ";" -f 1
1⤵
PID:1527

/usr/bin/head
head -n 1
1⤵
PID:1525

/usr/bin/cut
cut -d "=" -f 2
1⤵
PID:1526

/usr/bin/grep
grep "x-scheme-handler/https=" /.local/share/applications/defaults.list /.local/share/applications/mimeinfo.cache
1⤵
PID:1524

/usr/bin/cut
cut -d ";" -f 1
1⤵
PID:1532

/usr/bin/cut
cut -d "=" -f 2
1⤵
PID:1531

/usr/bin/head
head -n 1
1⤵
PID:1530

/usr/bin/grep
grep "x-scheme-handler/https=" /.local/share/applications/defaults.list /.local/share/applications/mimeinfo.cache
1⤵
PID:1529

/usr/bin/cut
cut -d ";" -f 1
1⤵
PID:1537

/usr/bin/cut
cut -d "=" -f 2
1⤵
PID:1536

/usr/bin/head
head -n 1
1⤵
PID:1535

/usr/bin/grep
grep "x-scheme-handler/https=" /usr/local/share//applications/defaults.list /usr/local/share//applications/mimeinfo.cache
1⤵
PID:1534

/usr/bin/cut
cut -d ";" -f 1
1⤵
PID:1542

/usr/bin/cut
cut -d "=" -f 2
1⤵
PID:1541

/usr/bin/head
head -n 1
1⤵
PID:1540

/usr/bin/grep
grep "x-scheme-handler/https=" /usr/local/share//applications/defaults.list /usr/local/share//applications/mimeinfo.cache
1⤵
PID:1539

/usr/bin/cut
cut -d ";" -f 1
1⤵
PID:1547

/usr/bin/cut
cut -d "=" -f 2
1⤵
PID:1546

/usr/bin/head
head -n 1
1⤵
PID:1545

/usr/bin/grep
grep "x-scheme-handler/https=" /usr/share//applications/defaults.list /usr/share//applications/mimeinfo.cache
1⤵
PID:1544

/usr/bin/sed
sed "s/:/ /g"
1⤵
- Reads runtime system information
PID:1550

/usr/bin/sed
sed -e "s|-|/|"
1⤵
PID:1553

/usr/bin/sed
sed -e "s|-|/|"
1⤵
- Reads runtime system information
PID:1556

/usr/bin/cut
cut "-d=" -f 2-
1⤵
PID:1561

/usr/bin/cut
cut "-d=" -f 2-
1⤵
PID:1565

/usr/bin/cut
cut "-d=" -f 2-
1⤵
PID:1568

/usr/bin/cut
cut "-d=" -f 2-
1⤵
PID:1576

/usr/bin/lsb_release
/usr/bin/lsb_release -idrc
1⤵
PID:2023

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox -contentproc -parentBuildID 20240108143603 -prefsLen 20252 -prefMapSize 231436 -appDir /usr/lib/firefox/browser "{ff044d74-f27f-4f17-b51c-7b3508c7c2c2}" 1577 true socket
1⤵
- Changes its process name
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:2038

/usr/libexec/xdg-desktop-portal
/usr/libexec/xdg-desktop-portal
1⤵
PID:2060

/usr/libexec/xdg-document-portal
/usr/libexec/xdg-document-portal
1⤵
- Reads runtime system information
PID:2065

/usr/libexec/xdg-permission-store
/usr/libexec/xdg-permission-store
1⤵
PID:2069

/usr/libexec/xdg-desktop-portal-gtk
/usr/libexec/xdg-desktop-portal-gtk
1⤵
- Reads runtime system information
PID:2078

/usr/libexec/gvfsd
/usr/libexec/gvfsd
1⤵
PID:2082

/usr/libexec/gvfsd-trash
/usr/libexec/gvfsd-trash --spawner :1.8 /org/gtk/gvfs/exec_spaw/0
2⤵
- Reads runtime system information
PID:2111

/usr/libexec/gvfsd-fuse
/usr/libexec/gvfsd-fuse /root/.cache/gvfs -f -o big_writes
1⤵
- Reads runtime system information
PID:2090

/usr/libexec/dconf-service
/usr/libexec/dconf-service
1⤵
- Reads runtime system information
PID:2103

/usr/bin/nautilus
/usr/bin/nautilus --gapplication-service
1⤵
- Reads runtime system information
PID:2108

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox -contentproc -childID 1 -isForBrowser -prefsLen 22702 -prefMapSize 231436 -jsInitLen 229864 -parentBuildID 20240108143603 -greomni /usr/lib/firefox/omni.ja -appomni /usr/lib/firefox/browser/omni.ja -appDir /usr/lib/firefox/browser "{1d617c8a-c6df-43cd-b45d-d75f9dd0e588}" 1577 true tab
1⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:2120

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox -contentproc -childID 2 -isForBrowser -prefsLen 22454 -prefMapSize 231436 -jsInitLen 229864 -parentBuildID 20240108143603 -greomni /usr/lib/firefox/omni.ja -appomni /usr/lib/firefox/browser/omni.ja -appDir /usr/lib/firefox/browser "{32b76d19-31f4-4fa9-8ade-f01dc8cc5e02}" 1577 true tab
1⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
PID:2146

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox -contentproc -childID 3 -isForBrowser -prefsLen 22836 -prefMapSize 231436 -jsInitLen 229864 -parentBuildID 20240108143603 -greomni /usr/lib/firefox/omni.ja -appomni /usr/lib/firefox/browser/omni.ja -appDir /usr/lib/firefox/browser "{779eb589-3544-458e-bd30-554643dc8c53}" 1577 true tab
1⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:2208

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox -contentproc -childID 4 -isForBrowser -prefsLen 28854 -prefMapSize 231436 -jsInitLen 229864 -parentBuildID 20240108143603 -greomni /usr/lib/firefox/omni.ja -appomni /usr/lib/firefox/browser/omni.ja -appDir /usr/lib/firefox/browser "{1693ebf0-9c46-41c0-b778-aad442d8133e}" 1577 true tab
1⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:2230

/usr/bin/gnome-keyring-daemon
/usr/bin/gnome-keyring-daemon --start --foreground "--components=secrets"
1⤵
- Reads runtime system information
PID:2298

/usr/libexec/gvfs-udisks2-volume-monitor
/usr/libexec/gvfs-udisks2-volume-monitor
1⤵
- Reads runtime system information
PID:2322

/usr/libexec/gvfs-afc-volume-monitor
/usr/libexec/gvfs-afc-volume-monitor
1⤵
PID:2328

/usr/libexec/gvfs-mtp-volume-monitor
/usr/libexec/gvfs-mtp-volume-monitor
1⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:2334

/usr/libexec/gvfs-gphoto2-volume-monitor
/usr/libexec/gvfs-gphoto2-volume-monitor
1⤵
- Enumerates kernel/hardware configuration
PID:2339

/usr/libexec/gvfs-goa-volume-monitor
/usr/libexec/gvfs-goa-volume-monitor
1⤵
PID:2344

/usr/libexec/goa-daemon
/usr/libexec/goa-daemon
1⤵
- Reads runtime system information
PID:2348

/usr/libexec/goa-identity-service
/usr/libexec/goa-identity-service
1⤵
- Reads runtime system information
PID:2356

/usr/lib/firefox/firefox
/usr/lib/firefox/firefox -contentproc -childID 5 -isForBrowser -prefsLen 28326 -prefMapSize 231436 -jsInitLen 229864 -parentBuildID 20240108143603 -greomni /usr/lib/firefox/omni.ja -appomni /usr/lib/firefox/browser/omni.ja -appDir /usr/lib/firefox/browser "{74767a46-0cab-4613-921d-8f7c5eb5e590}" 1577 true tab
1⤵
- Reads CPU attributes
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:2456

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1497

Credential Access

Discovery

Virtualization/Sandbox Evasion

T1497

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...

Downloads

/root/.cache/dconf/user
Filesize
2B

MD5
4381fcf19c7214def45db3ececcfe54c

SHA1
6bc896c1c613812cb90989f1ee99b46ccc697e8f

SHA256
9f1afa4dc124cba73134e82ff50f17c8f7164257c79fed9a13f5943a6acb8e3d

SHA512
b078e46e8056e15676cbe187dfbd10d129c3962e103c8c8acd3d719664de8396f20644162db08b3c5c938124b8342d60c17ada1f5a7deb932fa61be82d336d9c

Download Submit
/root/.cache/dconf/user
Filesize
2B

MD5
c4103f122d27677c9db144cae1394a66

SHA1
1489f923c4dca729178b3e3233458550d8dddf29

SHA256
96a296d224f285c67bee93c30f8a309157f0daa35dc5b87e410b78630a09cfc7

SHA512
5ea71dc6d0b4f57bf39aadd07c208c35f06cd2bac5fde210397f70de11d439c62ec1cdf3183758865fd387fcea0bada2f6c37a4a17851dd1d78fefe6f204ee54

Download Submit
/root/.cache/mozilla/firefox/ux6lzsje.default-release/cache2/entries/037778A55E1B7E9BED3390289866D09402D6C913
Filesize
9KB

MD5
662572766d51406905c7b8710b72590f

SHA1
4efe1bff9f0c6796eaa32f7dc670627b3ca93ea4

SHA256
52eef2ad01f6d855acb82d57be1052d8378a1da9fd329cec4ed415edc2c14af8

SHA512
a1b807f4df781a8fbe0be866d2cf684a89f5f29fe442350f5c8f3a1d64f4dd53977eca34cdfa357a30009a0896882995b080ea0befd35b992822e64f4209b191

Download Submit
/root/.cache/mozilla/firefox/ux6lzsje.default-release/cache2/entries/037778A55E1B7E9BED3390289866D09402D6C913
Filesize
9KB

MD5
e9ad0687b7151bcb8f84bd4b84d3a9da

SHA1
58da6b14770d9ea119e97d6a1920ba739d1bd12b

SHA256
fda4c8c9cc8a022497ea16232b1a98365384447651edf7e57b1f2676b330d942

SHA512
c258dec13dc38167a531031f95f133a4845f94c92913a1ff4782b286f2c4c077366e17d2168b1b59636c7db3ea8a24902357f4403000ef64ec39c8c879ab80a0

Download Submit
/root/.cache/mozilla/firefox/ux6lzsje.default-release/cache2/entries/039090029E64BC91E87E77199A6A6BE11FC39B6F
Filesize
142B

MD5
8c99a7e1b4fdf9e11c76bf0c13e098b8

SHA1
eae2fb7942309f18816afb282ffd60e340c86898

SHA256
01c6d6ebc491ca7f3d63b9b1caa410e603b66c9ac2fda1ce52285af260ca94f4

SHA512
c7f338d20e4b0de6da8bcc7aaf5756fc9aa3a36c22d4ce8aea787c0919da201be761652cf8f4174a5ea1b8eb6d288bf6c39307f0d4ab10ddec29098c182047e6

Download Submit
/root/.cache/mozilla/firefox/ux6lzsje.default-release/cache2/entries/039090029E64BC91E87E77199A6A6BE11FC39B6F
Filesize
11KB

MD5
84205e56e1329e4d0144db517e567e1e

SHA1
deed0cf51a5d224a2387ff5399b97e24268f32db

SHA256
3d53549237f3c5e96637001410240912b9375ce4c73c82a1df1edcfde14303e3

SHA512
3bc5b4345d72df5c23fd7b8fd9a3df753b3602322de247cd9a50da84cfb5fd50f745681946305e798724da7c0d2449cc9dd28f5e28a64d46c09e6e3c64e2a674

Download Submit
/root/.cache/mozilla/firefox/ux6lzsje.default-release/cache2/entries/09FFD44CB0C6B7784F6719E9E85D9A52FB39D6F5
Filesize
202B

MD5
a9196326ccf225661a3a16e3be0339a2

SHA1
ed8d23fde5600518aa20781939e7ef537d5cdb6b

SHA256
8866b9f4ea2d6288ed257614b24181ad2b194d53d02d7f720c21890f6e872c25

SHA512
4f48af5924325c266c64de2ada3951851a1610cd8779bfecc8f73dde4ae7e91313fccd374c04f2efc5d644e2868f0791fdaff89102094225c6817980379855d1

Download Submit
/root/.cache/mozilla/firefox/ux6lzsje.default-release/cache2/entries/0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F
Filesize
102B

MD5
675bae3402dda6ef4b78868cb191349f

SHA1
c8f138f40a22fa905e0daf42333eb1c1cbbf81e3

SHA256
920b3b611db072d2212b4200c98f4c523a5f64d78969557371c0abd6a0b3a549

SHA512
df44d2ccbbb49666f3d7081f5ba59856a4f91be298fab185bf80ee607ff5431ba2a148d2b6e0c3bb40b4e553f558b4f2622b16117d6155ba192752d25c689677

Download Submit
/root/.cache/mozilla/firefox/ux6lzsje.default-release/cache2/entries/0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F
Filesize
186B

MD5
78b2066661dca091da4bad2354487df4

SHA1
73fb2780b4b2258a6472367d6cab1f8f9a8af8da

SHA256
ec279bc3f4c10016053a81244758751902c2563f0111f554e7c9f5e7982208ab

SHA512
e78fd96838e9eac86d664a8fc88cbd654bd87327798343dcabdf9abece0a93f1f2d228d0a03720043d9c0cb806e39e56f2be5ad914da4103b35a70e1652c711f

Download Submit
/root/.cache/mozilla/firefox/ux6lzsje.default-release/cache2/entries/1611007487CDFCDB9FE43793C68D8984CF7DD7AA
Filesize
9KB

MD5
4b52cef5ca63eb538367e432c0597672

SHA1
7e140b8851ae51a0aae712467bde8e56c9959ddc

SHA256
09a4c7af36bc506058014599e341f9e1f74a340073da4374aada4d799ab39f15

SHA512
db677d50e275827919cdf33f6dba17e133bdd2bb817d3032b551356dc49f16994c8a0bda23378013b8b8be643574bc11a384ecc92dd268625308a418732670e4

Download Submit
/root/.cache/mozilla/firefox/ux6lzsje.default-release/cache2/entries/1611007487CDFCDB9FE43793C68D8984CF7DD7AA
Filesize
9KB

MD5
d0d720db216854dfdf9a13efcb6a273f

SHA1
7075aba421d13bbb20882f1ba5983f7960fda76e

SHA256
3386d9f225fc836c456f96198638fb18a53ee22d17fc10e8c8177a3eea339db2

SHA512
51be4e827160e13530ca41ab2f16d587fafd4d2420253d6db3adc34e5f094fe614ea0ad6850848785fd3b2fcd7186872d26c95e54f8dbdcf24779e3c176b8446

Download Submit
/root/.cache/mozilla/firefox/ux6lzsje.default-release/cache2/entries/200685A28C850BF17CCF8B7E9A27E063141E6E03
Filesize
156B

MD5
0e340b317b2c4715dcd37f86a350f04d

SHA1
b307ea0426cdef360ec2d22fe2ca5c0137d184ed

SHA256
13833c76bc667dc015c21134c6f6f4765e7cf922a1c6dab22918c0ee08f84abc

SHA512
0961603eb9c2a5c32352e6a7358cb4484961cd68f6823fa1e0305e45a6e737345107515b814a804ed3f55753dcf0012f5ef40ac90a37bb1c9ea006fa56429853

Download Submit
/root/.cache/mozilla/firefox/ux6lzsje.default-release/cache2/entries/200685A28C850BF17CCF8B7E9A27E063141E6E03
Filesize
6KB

MD5
bd34bc5fc7822119680ef1223af12ee3

SHA1
50f5a396bff5ab8522717ec2472d7d593685eaf9

SHA256
57dcf7705ace87d1dc6b66266d32810ba902ccae9a341cd259e1f965e636ee0a

SHA512
219c60c951f80d22c1ac243e7e5fe7073352c0e5b8e4aaaa2f4dbb8222683b87f8e6619fab166ebeb88db52998d79d1a403b55d9083a326b77a75b12af409275

Download Submit
/root/.cache/mozilla/firefox/ux6lzsje.default-release/cache2/entries/298D53A692BA41D0C5CA5AE0806650D73FF83365
Filesize
9KB

MD5
1125fd261bf48671b0ef9ca42f3c23fd

SHA1
ce4e3e1328903799d54781d9d1a69107d58d5542

SHA256
7c6c1f4d576e2db91da94db08f7004049a96a97cdcb0a7a883509dfe23892754

SHA512
8ed164502bd68d03db058d4788e1621769f63b0b39cbddda8ad6df5f1ca658972741b6aff62bab0a620b40453b062812f8c40de0eb2cc45956649a3355c98dee

Download Submit
/root/.cache/mozilla/firefox/ux6lzsje.default-release/cache2/entries/298D53A692BA41D0C5CA5AE0806650D73FF83365
Filesize
9KB

MD5
200f5d5eec3c55bdb3bc57d810f8b97e

SHA1
377807da7675adca7e9d9cc0c09a3721212a03f7

SHA256
dcd811b0fa4005928b80f0f9562807ffb0dfcbed813bb8ad3f2d8b7f37deea09

SHA512
dccba8ef4f81fa1c7e58ad8d8ccae9c1234da3490f9b65bfea2324c2b7ab53ac5dae3cba5d267bf495d002c2ed31cd935c4c24e82a3e4ce50f172b624b590fb2

Download Submit
/root/.cache/mozilla/firefox/ux6lzsje.default-release/cache2/entries/39370327481D321182BC5C19EB5801A55115BEC7
Filesize
89B

MD5
2aaa190f58454c6ed5f09e44989460af

SHA1
075d40da05695929da22aa754fa400a3b1e190bd

SHA256
85d46943a8cfdb206d7dd6632290f74f45c2fd64b117e66b004f1d983d6abb9b

SHA512
0d61d7cc33119996ed8eff300a55e78ca4f6a7279e08d8ee2fb4f78bd23694e34a61f26098300244d794fd95cc5e32e3d4aa56e693922eff80c07d46ff52afbe

Download Submit
/root/.cache/mozilla/firefox/ux6lzsje.default-release/cache2/entries/3D1E19D09F398691ABF62061591970855193B42F
Filesize
13KB

MD5
1e28ff0e8a821a6b9aa4a07af4a2f2f8

SHA1
986f0c41f8f1250608724e39126b9a6ea05c038c

SHA256
4d82c519945854ae15a50fef642bc518d18e44805a7419aa297290ee6a2bbca9

SHA512
d332edcf76fc92de9998da8b7a8ae2bb5bb2b67eeaf61a45051ac6f1297e55f52d9ef4a3ded0bd23522e18fca0a666fc1d341236b3aa8e7c2cb55d55eaf85180

Download Submit
/root/.cache/mozilla/firefox/ux6lzsje.default-release/cache2/entries/3D1E19D09F398691ABF62061591970855193B42F
Filesize
13KB

MD5
d8b5c6e01c56d5e01adbbb0332475052

SHA1
4bcf695afad3edd7b419f4ccf9ff74e7bd9327e2

SHA256
3389a093868fc8b9715c5f4be74dd8e7dd124ddbb940b4fe28527ef93341ba22

SHA512
fbd2fc40d4e02de98ef9ec1a0ec22d0c4c64980ba28c85303e59da322229e3cdcf7c635552ce36687885766e19749f0327d291c42050fd689f5e605a9414b2d8

Download Submit
/root/.cache/mozilla/firefox/ux6lzsje.default-release/cache2/entries/44230749A38B6989F56217B435A03E84CCADE62D
Filesize
26KB

MD5
a01160e644b890d190908528a252a649

SHA1
b4b5cb9be743967da7d73cc914ced3cd0e188334

SHA256
758085f016a6a9a8f0364acad023b699e2433c610c2f4c558001d9c7932a2bd1

SHA512
5f73b211c9081c98b8f72c64fb7d8a0fa0e3666f09032b97b7f8864f4f94674e0df45a67891cce5d90af2a393f260e4ca8d8ced714d62f3707b3692a04c8bbe9

Download Submit
/root/.cache/mozilla/firefox/ux6lzsje.default-release/cache2/entries/44230749A38B6989F56217B435A03E84CCADE62D
Filesize
26KB

MD5
1eb5843d6c737e2e2179a67a71cf3b8b

SHA1
c9dab145be5014e75b8f0a8159a27304d557f468

SHA256
3c55265e1b6ff46004424c362a94ba32ad73985d1cb31674b47b08ee90954d6d

SHA512
72cacdd8b449dfe1cc7201e8396578267482a05f410c75d4adde36d6e395ed398a12019381abadb6f6a0b41e8da5857e34775521759d1ef353ca3e432a5519b7

Download Submit
/root/.cache/mozilla/firefox/ux6lzsje.default-release/cache2/entries/681A09A331F063EEAA7CBBB637DFECF3693EB44E
Filesize
111B

MD5
926b7c8de6b7b9bf500a005bedcd324b

SHA1
114c071d7348047be05b1ad7c9277ece2987afd1

SHA256
d1a308c115ede36aac78cf672af2b3d6e5224c2c87ceb8af1b5299464038aed2

SHA512
20b15ca098fc10b44a1716e93b51e702870cecc90808e3e646ca8f0068e1f0f480ad35d8b78ca14a2b1b96ab1b1f1af85ad5e75e85ae14f1cb217665d6c2913e

Download Submit
/root/.cache/mozilla/firefox/ux6lzsje.default-release/cache2/entries/6D89348819C8881868053197CA0754F36784BF5F
Filesize
9KB

MD5
d06b4fa0f75f1cf893e2f7c0ccb7a3e6

SHA1
2273049e96d972fd3761eb1f220ee1f15df42fca

SHA256
9af19da133c71eb220b2ef1c55bbf3a9b6ff4d968bdf774cf1f0ca38f68c435b

SHA512
3ddd80816ef3294dddcad0f287efa477ee47cf914fa862abc1c1dbce153fd89ed06f369d6da9c1bf82620b0c3b18d101461b35c1a9279cd43db107c887d2fa54

Download Submit
/root/.cache/mozilla/firefox/ux6lzsje.default-release/cache2/entries/6D89348819C8881868053197CA0754F36784BF5F
Filesize
9KB

MD5
735b75eb089bf72b8cacd44de429782e

SHA1
b64b477fdbf0af703db2d41a4edd7d2588b0f6c6

SHA256
68b2a9bbd1b2597f6961418e57e242edd9662a35ac419b649ce2308790ffacec

SHA512
9589deab73fe9c6eacd8c75edf798e2f591a229419658a39d7c8aafa3941be22fd75d2aea5bf9150bd0d00d3ed4ba6feabe590c04e353a75fe7bb2838da80798

Download Submit
/root/.cache/mozilla/firefox/ux6lzsje.default-release/cache2/entries/7BFCF32544F467F973AF267DF4EB4842EDED0C1F
Filesize
16KB

MD5
17deacbb0f460071c89ca32a3b63afae

SHA1
a200b50cc046d3e6539ad0781881c0d0394f4334

SHA256
9bee95822745b10ab74b566ffc04258913ba421730049b48cd05ea02254edc74

SHA512
e9d83bc56c76001dd5d721fd2744e94b3a00a590340b556663cfcfb5e438fc7c3610f0d45c6466358773458469b04c5cb8496c058122eeabf33a56c75fa9bb7e

Download Submit
/root/.cache/mozilla/firefox/ux6lzsje.default-release/cache2/entries/7BFCF32544F467F973AF267DF4EB4842EDED0C1F
Filesize
16KB

MD5
2fcc059d02ead014d0425c1aaddf3fb8

SHA1
6ca412e464b7cc69e7ec22b63c3baec803a321dc

SHA256
71de39dfffb1b9ac882df33901ab5d15ecdc69fce5792707fea4f4ce428f5d40

SHA512
1f88a8d3a7adbc5262dbba2a55ebbe483ef79b407639b3bda2f799428e519b52fee8ae4f4a771d7878d636a8055d75633248d0e8c80a307b796acb0d33cf58f7

Download Submit
/root/.cache/mozilla/firefox/ux6lzsje.default-release/cache2/entries/8AF5D98EA49BFC5F75DBBB8CBE9CADF11B63E0F4
Filesize
10KB

MD5
e61aca5e1b6ae23d63d58b65c2600200

SHA1
505d8c70f0e8f269eb94288d089b3ee6c7f35084

SHA256
0e27e411cc07170242ff3149ef0dfdf38bcf6a559acfb2211e50e74df32b1e2f

SHA512
6cf75192ab1265df4f81f3e3749a7fe9ef97358825e09ca97ba96445c14d232c1e0a3aac70894d296ecb3d32ad482bbf9a9c2c25ea88ba0a890143a473d6aad2

Download Submit
/root/.cache/mozilla/firefox/ux6lzsje.default-release/cache2/entries/8AF5D98EA49BFC5F75DBBB8CBE9CADF11B63E0F4
Filesize
10KB

MD5
ebaea26b1ac6fda335ba2998f3e1f2d2

SHA1
614e0592ff6cb7897860531477991bd50a75e4be

SHA256
734910749c6923fdfc7135334787a7a2439558659f1116dc0ffe183308a048b5

SHA512
d7863934dd581650d2de8e4a8f143fe9e605664c817a85ccb0c5675679b0978a01c97091526fc983fd14f3729899ee55b5e1f64c3ced336685df787df4473b90

Download Submit
/root/.cache/mozilla/firefox/ux6lzsje.default-release/cache2/entries/90E321EE94230DCDBDCD2EC0B77C695A4FC21F78
Filesize
9KB

MD5
e828def1132937f26a5bed0a18e2b19e

SHA1
7ce61e4829ee2f12f2cd82e68fb024f01712aeb3

SHA256
42578fdb2f698cd193e110ec65775871ff779989da216c982342844a3ab5cb86

SHA512
cfc809049251717580af9f3b4ce2a867ddde8d5a2314bf230a89b75600043b8d1aaf4561c459da0ccbabeae356322ff194f79117d290e798c6a381ff1634b440

Download Submit
/root/.cache/mozilla/firefox/ux6lzsje.default-release/cache2/entries/90E321EE94230DCDBDCD2EC0B77C695A4FC21F78
Filesize
9KB

MD5
6842ce26601d7f7d8035a432f2b6ff3f

SHA1
a938c706d4d23e1ebbca28071ed1f2c100a5e042

SHA256
5a53e05276b63f15547fa5f9af7a4ab592b0799a41521ca0e415e106f7099589

SHA512
8699b50f1fd0e558ca4dbf282340e12fe479192e4ad8c5c3a1fe94b0269aa748b78ef8069bad75e3be51c6a2c9be17b876086016daa611910cebc0429dcd72d0

Download Submit
/root/.cache/mozilla/firefox/ux6lzsje.default-release/cache2/entries/C72D4296C2EBC6FD41A9F780CD0C8F30F0FF937C
Filesize
164B

MD5
ec49dbff26566413568bcc7b53fcb3be

SHA1
3447bc1edd8e3f742848090c73f2e6a9f03e327e

SHA256
2dcb9d2fe7987aa6c6bc6b4a16041075e5346b5a6c3c538e904e9b70f88ab321

SHA512
375b68ee9e66c7c8ac67eee987fe362ce4643c2701e9ad60b7238c62befe6673c722cdfae6e644c5ffd06a5ec19b4091827299de3d0444fa3c488e3c51a461e8

Download Submit
/root/.cache/mozilla/firefox/ux6lzsje.default-release/cache2/entries/C72D4296C2EBC6FD41A9F780CD0C8F30F0FF937C
Filesize
13KB

MD5
1de8ba5587f108cf4d9a49b2a48a8ac6

SHA1
7b6130faedef3a9653450c1a829558581811b8d0

SHA256
cfce7699d777b6891ca9bd37076bbd9f6710f022b94a5317d63dbcd643a5e388

SHA512
6c7ec81ca3be8a0261d3bc4300ad77183c4ca827791310fb59633a67277e78ecc6e7096885196127edf2dcc6771f3f50298f9f0f0218fcc0a9e13859651560a0

Download Submit
/root/.cache/mozilla/firefox/ux6lzsje.default-release/cache2/entries/C72D4296C2EBC6FD41A9F780CD0C8F30F0FF937C
Filesize
13KB

MD5
d380bb8fdbebdd2d8c4f4254a3daf940

SHA1
84c330bc025e32451bec0479d3dd9249b9e7bdba

SHA256
f89e19fa6557263ab594dc1d6bb43eaf88e7c18db2aaa685ba8011dcff4f0b36

SHA512
7e606bb467263de65b38f9a9a9a39fa21b3ebf92157c6967f5aa4de6609497a2b44d89d198b58aab1056c87ea728645761f3d4073d29448de9689e80f06ec588

Download Submit
/root/.cache/mozilla/firefox/ux6lzsje.default-release/cache2/entries/D0F48A0632B6C451791F4257697E861961F06A6F
Filesize
52B

MD5
9e807c4aac79106e2534e56e342b6aeb

SHA1
1cab23d1058a74d6da3e6067c01489f94912a420

SHA256
fc3c7a553a80bb6747cceff64b578b5dc5c951dd01bfe53397e88d9322b72027

SHA512
d17aac65e74a5f649f97c0c76aeb5e79b8a4edbb4237654f9f16f8114a7ea96486be6c5ce9b50b7dbe1b6d94f309095e52456788654f94a21f50fab4e8d80b3b

Download Submit
/root/.dbus/session-bus/4816dd152e8c48ff97e9117d197c13d8-0
Filesize
466B

MD5
5b310d524b116e9153d8f0acfa5974c9

SHA1
e63ebb76fa8fbbddc6fe5dd5c065c3519554b4f0

SHA256
8e7541c0b618913a8e99154cc965262b2f1f75f53c9107cae037cd984cf8091d

SHA512
61c7dbc55eb26fcc3fcd5897ad6e913d077f836822248ab46476b0ec06c09e119521cd1cd5054cec72199d64eaa5d75446ea577fdb8c26476fe068600f87a746

Download Submit
/root/.mozilla/firefox/Crash Reports/InstallTime20240108143603
Filesize
10B

MD5
3228c53f611e8f81486a979c89d00c49

SHA1
466b0beaa9feed620309b056dfd06d78fb918469

SHA256
4b30f55e67ab5fff6e623d4cb0768c54f2cde82c37a40e5be0a12f09bd7b02c8

SHA512
f8dc5431dc0bd8c68ee20e555301265c5cbf446c3b470cfafa3f421e77580f414bf2a1bc454e8b051bfec93fe7cab09af4ca9e4f486106f432aabbcb45bc2d2a

Download Submit
/root/.mozilla/firefox/installs.ini
Filesize
62B

MD5
cb2e087d39904f0ff6d6f878c443c165

SHA1
bc31c0ac9acaf8974c0119564d676bc2a577fa71

SHA256
d8e62ffb49ea3af82a8455decc69793713479d6dc54d1952ab0dab7501f6c513

SHA512
077d4535a2ea01c46133d165e4e070ad5b950b01ad1793b32772e25ca9ab1cac5ea3acc27e9e1cc2fb4df763c6b0af425ee4be5316eea840699190e3ab2d1dc9

Download Submit
/root/.mozilla/firefox/j6mkrdqz.default/times.json
Filesize
47B

MD5
4a2ead3e87be32ca5ca14485cd3e59ba

SHA1
0ec79ef476fe491025616206fb561b153e681872

SHA256
529ce909e915dc21fbd3f2dc017f968a59a68a1da41f3bc2b2ef90dcc39ed104

SHA512
c231959ddc403a6fb1f4be1572afe083d4658b66fed1cd1780fec0f42951482a4e966c7e7c470c1129652ea28a670c1f9ff834b70aa2e20df8387b8002819564

Download Submit
/root/.mozilla/firefox/profiles.ini
Filesize
259B

MD5
1ffb01e65a226c7d5ff0e5f7ce5937eb

SHA1
94eb2743ed5daeffeb93aaa70d80880faff60013

SHA256
c5af1939decb6911230caacc1a748344c741550dff354e18d0faaca665dfd95c

SHA512
2f91c369db78894d2aa0e8f84de14aa1df863d3889e13424a69d2b1e6fd02a92df31483504fac1bc94d6066fbee970db8c7c0f0f52b9fa6d681517325136aa88

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/AlternateServices.bin
Filesize
1KB

MD5
100f6aae5e6c05b97a045109064303d0

SHA1
b28291971e16988dc523bc52fe1fff7f9f947096

SHA256
0e79c9e4b92d0605583d3c26187333c052031d8363c621fa2953694b00ea12e9

SHA512
ebdadb2674e91f1c951004534ab6471976bc4fd76ff6965d51442deb64a7c9d2a20a490138caa34fece191987460afcb096f09028efa68d8af66e20f70fe6c44

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/cert9.db
Filesize
224KB

MD5
7174cc177dd7e75f554f6728259aa14b

SHA1
1b86d840d2981bb3c521a2abfbdd7168e2234ffc

SHA256
2da155b3f395e10acd9ec2ee1cfff9a8f1c4736d5038123f383b8348079a5e8e

SHA512
4083431c42b303d924f86fd1dcd91a32931d8eebd80206cfc3474058dd2525f79fb45fd89db78ddf1aa45914889cfa92d1ae85301c402c425553e1fff8aae1d5

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/cert9.db
Filesize
224KB

MD5
9e6b9e10696090147663e8057b2af70e

SHA1
59e4c19bae681146f4d95a34c7f24e8a6f7be810

SHA256
82f08f86b17c646090b8b9d5886bf9abbf6cf8529a49e5c58d9d75193aa1dd16

SHA512
ab24575abe839cb51bda8c61c8a913840b429e516aedecbf0179638abe90f47124e5c756e9c02c02b6c8975b32c4426b386322091a715aaa5c21b22ca935b39a

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/cert9.db
Filesize
224KB

MD5
a8613398aed6ccb058794b64256c95d0

SHA1
7391513c8929bbaae2ecb83749f606200fe78557

SHA256
66ab20abd20721e31870bea1a1a84c9ccbd213e0dd475b1a84e3ac766e22954d

SHA512
f6094223add52b90e2a0cc80b8ae82b217cff899d74372ad6a57896f0a4307796dacecd534bbc516d73074f61b02b8495bdaa6fcd698d34858fce0c73e79cded

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/cert9.db
Filesize
224KB

MD5
636156e890eb8191d2db017441f395ee

SHA1
9342feeda095e8a7f1e28312076e592689ec736f

SHA256
e8093c637e0e7db698f2299948dd9669b0f8f83b549e86e9d3e5ed5699f69c17

SHA512
bb9f861aee851baaea5f0ce1c12674d121aa67f9fab60a7baad6cce7b1ea21cc9f5259f7ac85a746b4bc49ac4a97dc6a9fe1a628061219aeb4a4746d3f0c02a1

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/cert9.db
Filesize
224KB

MD5
f41f217aaa71180ae5d97d4723f1eec7

SHA1
916f106bca4e1b07cf05f0906e11894288a3050b

SHA256
132454240e491fad00b84dde37116f470622516e6096a6f676e956e25b906750

SHA512
134e0e01a21c3926c7f958e267ec7f87010ef1465f9b39ba5c106fac9df1e3895418b4bef877f8a3aa326cf449347f7e799bdd5b37fdcdebb6fa0e8ed2f9b8fe

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/compatibility.ini
Filesize
163B

MD5
2d41a6f5736821b90ef44850dd3873fe

SHA1
a47c4bc1431234a5b58e460ede5b571acd38e562

SHA256
b4bf5c8334f6db20ae94105141ae7a721342ddccd94ec65289dc291e76a31814

SHA512
047a1455211e7aa29ef5f32f07c89d8a0c8d86d871bc664e4d8958a2a014dbe32f0613cd9eb66e7307c0e2439f74ca0b829652a52fa48e8c60d64b41f69914eb

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/content-prefs.sqlite
Filesize
256KB

MD5
9d00c3716db8b9c9d51508593d757e60

SHA1
c1cb5093db37d62d22f3083c8fe96631006f6e8f

SHA256
b3199c67fff1807fd8fad7f70345b9c28626ce49a2150f688a239fb010e75420

SHA512
12fee206948261c76f728dc0076f722a4d0574b5c7cb9e7441bb072aae29235c30d79d514bbb0ae3382bbdf06d8d4d88289576e238f94e4731244f8134f3adf0

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/cookies.sqlite
Filesize
96KB

MD5
26ff39b359947b71a5fadd950fac34f0

SHA1
66e5830e4dca79225f41adc13a077d8e5dd8084b

SHA256
aecbaf3e1df1332d4f14a11480db712eb4aa91581eb4e942c580bf675f592a45

SHA512
7fae7b9ff4362e12f00acdc898f6f679718bdd28dc959684333086de7bacd162338dc266810f9f3f6dfa3dc228291efd6bb325e2e8573ca0e6a699059a145f11

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/cookies.sqlite
Filesize
96KB

MD5
102a8b6e82208a1b69224bdca8a5b10f

SHA1
8413dc3772127c4159e6d6b51372990a06b805ee

SHA256
5ebf89b32937916a76a8432832040cf0f6b99c2f006cc42f856712d403ec182c

SHA512
49c5c27c6749a7a73b4b944eea64ceb053a272619e6319bfd433ffbe126c8fbccc110961018165a4c7de781a86cf38d2bd9e52ec71b10bc73c9fd05fe841a46c

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/favicons.sqlite
Filesize
224KB

MD5
aff3f84fda6516b87050f171d68531ea

SHA1
6b82d182412601c057bfc591cc6b9a8932c84c73

SHA256
5203714a71df85f81969a193cac50befa4b1e70841b9b2d3ea348d3b99657172

SHA512
aacbaa66d86f8b3f299cead818a0883bb900588da822148b4ac7543a0fa4ee399c14a69534ae55bfd0e7b18630b93f04e0e0174b7d586e0d536c20760b5d65d8

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/key4.db
Filesize
288KB

MD5
24ee29e527d81eedafa04f1ed693829a

SHA1
17268298d933c6dc052b89453b147ac4cdbc1d08

SHA256
d2e61949444e6da7db53b651a7fd30ed0299298305014172d0f4c063dfb04b8d

SHA512
1a55c02b752e2b0b1903802d928f78fae5a2647dcd7820f15c530e5e2cf690d6ef548c38df755d476c5322978b019f0e458994acca4a8b3ddba240977b0127d6

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/permissions.sqlite
Filesize
96KB

MD5
f3f435916cdfc0e6603a01b98fd2affa

SHA1
4fc5404630eeb88f54e2dc0bb25eee20a18723a4

SHA256
4997ba963387eda72684a0fd2aa985e53402703b1080041d620f6561c3f3123b

SHA512
9a99fbd1093bb0508f1b7a75a2ea875fe28371b07b826eb40edda291089899522091090319a998742a5e62476d1ecc1190654a919eb89e714b59147cfaceb474

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/places.sqlite
Filesize
1.4MB

MD5
08f71b0e5556c690d6cc9fa2f5859c72

SHA1
981a053706bf572b13b7f559572e5c9731bde53d

SHA256
ef3204683d8c11b6cc15b148a8474611992a7eb9d16cd6f0fea4479585eef3fb

SHA512
1f804bf669e318d59e9c1778f11356b33299dc97a20a2f6f2c9163e85a670df4acffcd17ab9c35ba212204d14c08d99bbf60bd9630b3d52726c32e98de122ad5

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/places.sqlite
Filesize
896KB

MD5
e0834dd32b901641845c0ea0e700d084

SHA1
e5c6fdd3fdfbb8cfff744b7c08cc8e21d5a1260b

SHA256
ddfca15633586285cc7a5e4a02368e63ec4f34a8479c30571f40f0951f9052bf

SHA512
bf57a1c50a06958ea3034c60f40918300be535d8433444209422ca2361a9595f34abe940ca3cd519729f95e4424061ca81e850b967fb8c480e14a65e890c55ce

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/prefs-1.js
Filesize
1KB

MD5
ad38694b0592a8de80b7a378f2efc9e5

SHA1
b5822a3527316cab7e46fa88e74e4b142e18a33f

SHA256
f1f027576adea3fb9e55678d42dc61058b3c05104af568cb4b53b84c8ff54809

SHA512
01d1461c5feee56e0b0620550dca77802598cd36069a1d62d90b2a696cd258c84d7c998b0621353c52296cea80f7e4b758034e24c6b7ef5c1c76e3ec14cf4544

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/prefs-1.js
Filesize
1KB

MD5
6fa8863ab0ed20d37567eb8559e834e3

SHA1
c4bb4e6ea8647d842239e2e0e00e95bf896a7f44

SHA256
425bdc898a1139eb945706f040eaf39c48e4003a67537635822ea105a495eaee

SHA512
bc0013cfa6ce4425766e264cdb815757541d5cd59049281e03db2ec6becb1d96069a6f7911cc1ef4a052fc673a8548b95cb484909b6952ac4584843450cc6df0

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/prefs-1.js
Filesize
2KB

MD5
be6ca2ef14d12d2bffa8a374eb587cf7

SHA1
b70862ec044d9638c02318da1406010ccdda1dde

SHA256
6c1a197aa9acb1286acebc6d176ef9cb23975733a9663619b7e2e1ef877ceba5

SHA512
0bb64e603cd0aa402e5f6bc2895910ac1b064121ab4213a0d520d8cdfc43080ece2e7f188553bf8663cd7bd3b2965c37b6a64c44eb60762266e372bfa277c20b

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/prefs-1.js
Filesize
2KB

MD5
0d71ce0973fd207943e89b86bb3a75a2

SHA1
98244ee2945d31d2134173ba1f438a18d8c51f23

SHA256
13a37c2507af7946905f0f7481ff4b91cfbc380fc038cdd79d82237773af2e87

SHA512
78afc8438e736c2eff24459ca413886e4df8e5ea75c06314c106cf2070a5918b958403dbcc72de55f0b657f0b3e210fdc78066d05fc70497fa7f3358d827f962

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/prefs-1.js
Filesize
2KB

MD5
8f1cae2e907eb55b8cb3632b8b793109

SHA1
2eaffe5e1d4e58d6ea8dd2ffb1eae6c5ff46a8e2

SHA256
5908b3312446b71e9b77eda04e7e7667d668b0673268c0d7a980edd13f8abe9d

SHA512
c337dac40cee8caba8ea836244da1114672d035aac7cb6972ed351888ad74db090e823087533b3ac9117e1c56ec576f91274b764d9333104b9548c5bddfa654d

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/prefs-1.js
Filesize
2KB

MD5
79025e5f287cc1a9ac0e8e9a18d93dc3

SHA1
0d14ef965466b2d08f0fcfd9b6546a95a81333e2

SHA256
0acf66f504a81ee7c24a1bd3cd65808c06708bfc29083ce30a80a58d2fe5de0d

SHA512
2dfce2fcb1573f39346b55a132baf43ab6f5da0191a3ab83c81374a806add6a6cacec13bfa18efc3a0ea4b00588191445778e3040cb736fed67d10d91733d92d

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/prefs-1.js
Filesize
3KB

MD5
eb66dfb5b2342d8858191d706a523b15

SHA1
89eb4cea69262daa8a856ed5c3c47bd48edc2609

SHA256
2ebfa02942fb1b5eccf1f4f48d384e650a9bd3d7b8afc800a0e6a56089b4bb55

SHA512
12034f5829182ea773ad2ceafffd5413252ac553d8cfde7427b2cfe0e4a961ec32303918e221b559f864902b823358559a5d9831030f1582774bc5af118d9918

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/prefs-1.js
Filesize
4KB

MD5
b3b9dc4829926998cd7aec973dc16d60

SHA1
48fe4af63d9c614d78cf5c53fede256b51162153

SHA256
6517b6f4271d6c316a12413cb8699790035741f46cb8936b55ecbf3fdc615833

SHA512
9494fc7ae2009de48446660f1efcd94ebbc5f0ceef83a903662efa21d196913eafa02f0bfb44eaf16471770ee6e6a4e2cf658dbde00c2c073568e5820a826b2b

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/prefs-1.js
Filesize
4KB

MD5
494e9b8250d4ffb762c09a568c1c9804

SHA1
f3d03697c90145e4ad72b1781e6a9dd4aeaa3eaf

SHA256
f976e7e2f96821c2474912e3778c95bb0b4f22f9c437f350e598152a8e2fb00b

SHA512
cc3986598833db3b6dda09fb6cff29bf0e19a478b67c2b8c9cb369c3e1fddb127d4ad5ddaac05b99a32f21426a1e381d445b1abb88419f027e44c8b47fea2b7a

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/prefs-1.js
Filesize
4KB

MD5
a7b49e943a677bad06a3a30ae76e44da

SHA1
11b155c9c1e93a50318841e4fa36703023593814

SHA256
fe5df74405245e735257be113784101b5a7437225ce79321a35c339f6500513f

SHA512
05fce50fd292a94afaeee41d0da53a9c3b28c1ec20792f40cd6a1701bb1adc8315f38a4be6f5d9f3d868fad6a17413ecf449d1cd852a148115823dd70b2e092d

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/prefs-1.js
Filesize
4KB

MD5
1809269dc486f6d94da13190fcfe74c5

SHA1
43ebbf8cc753b88abb330aca88ec2da5da3cdba3

SHA256
5adf09a51889c60fccfbb066d93642253ae566f0d6d6fde1a49026130a562ecf

SHA512
1d16aaca9928a09703609174eb3694f349407d2a357719a57a0d9e83e24a6ace96e87f0b0d577ea0b7f38e2cb5c2f55625b34cf4627f46dad38a30432c5cfd9d

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/prefs-1.js
Filesize
7KB

MD5
095e98fa24d5a204555b8c1fc7be1cb2

SHA1
c287ce7461cb41328fef1b58a238afdf91aa3a21

SHA256
1437cc18897cbcdf94e9211199a9b06b4ef6837a50aa46bb836cb4e4ec27870d

SHA512
2a553bfadf08b4a94621fb9f7dae842e7be05511b0c4e701029fb1cf5cad65b3858cc541e0d02727a5e880c38a6cb8754a6c638048880a65b57575b9e6929106

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/prefs-1.js
Filesize
7KB

MD5
600f9f5ca33cfc97f703f18e85d7c452

SHA1
1e9b85bac05943659b55e83de2e654aa2e729d9a

SHA256
6c2667bc0e8b06fa14dc9bd14e7f9d4feb84d6a0f8054873c90ea59a54ca425a

SHA512
ae77b3e1f08160a588f07b7e3d41c5d5ff6b55aa5006f9f8302ecea679ae4ee78cbc040579a9053e75197b31b84c59407c18fad046cb40143599a160cfce656c

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/prefs.js
Filesize
776B

MD5
83fb3076b545cb2eba920cd748a00f8b

SHA1
9a25c5a0d9a8f1e73f9cb7528faab622fe958d4f

SHA256
d2c4351fbd7ff22f18ecc7fb0a7b622756e80ac9a4f0932d87c6098b355c8d61

SHA512
a2aa8f757346d1baf89978bdc2bbef08e7a1cf373e7461dc41f469318d3a399ce69a136cd4bae7452a27aa18d3dce6c6a34e86769d20238c4b85cc5df5aaabfc

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/protections.sqlite
Filesize
64KB

MD5
1a11a5fd63e6cfffb1270d7e592c0c83

SHA1
a4e5d648d9a2166ff139b0ef5f234eaea33f4387

SHA256
4ddad4bf221e1c3d071054a9859deace3996cc445ddee61fba0b388e4b1b378a

SHA512
54ed0ef9e4d5810694aab71106451e5deae19c6eba79d42313398d691a1a5d8a1422423ad7589249c6e215466568350b84b68ef2f44105945962694745d91e07

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/storage/ls-archive.sqlite
Filesize
96KB

MD5
e1121e3dd3c8a9c384f879bdddcff219

SHA1
625f25a1a5ff8527ab3105636fa7aecb9affd234

SHA256
766b9f50254b4e5526b0cde2911512956262596d8937f8630805d3c70802a066

SHA512
03e1cee2e75b2b609b8344a40995de09de837e940d2012f2fea65d9c70eecbcd3345b66b852f32211b38b06a4370f06f02ca7521e29e7113e2e12a6a7752be31

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/storage/ls-archive.sqlite
Filesize
128KB

MD5
0d2b18bbf091633c4fe1ebdd197dfa15

SHA1
c150dc37042d92d30efed6cbc1b536eb66ec1a3e

SHA256
fe63ee867e0f229a0bcc48b771afeec394c362ac6d0c2bd6907c7202097bd228

SHA512
59d202bfaf236bdcfc05a3e148a773d15a3bdff23be26fb2cbfd059fee6c4a516c7a59de0a3bc97df1419c34464e1346354979ddda1062101121522f22d8156d

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/storage/permanent/chrome/.metadata-v2-tmp
Filesize
36B

MD5
2a6732caae2031faa52e9183ca930f8e

SHA1
4e7e2567d6cd4684db5dc3aeac51e28286112534

SHA256
bd236847094a2098a82c29fb12c7c0c5e2a1ab84cf47ead6b4a6af31eb9dcf29

SHA512
6eb35da637d5a6d0dfc166d9ceefaae53c2cc3887d4fefc4a41fa3b33b01c77813c25c14491ee1ac993d8fa53e5c0e1938873685232c5c08df23d4cbaebe92e7

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/storage/permanent/chrome/idb/1451318868ntouromlalnodry--epcr.sqlite
Filesize
44KB

MD5
488403dd59d861961dbf2e5317cc6e55

SHA1
bcb13cf819bdc370762237a075f14a9be0728a50

SHA256
8645149962df6c816291521b6cb45e9acf79da6bdc3a727ba00c71eb720de4ef

SHA512
4e60bc58fdc1ffe3662b83fc9af3e0ec5af90eeb25da8e60a70717e3588676e135f6cc5a8d57a37c2cd2ce3a3661e665e2688d00799dd834945d5f0964750805

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/storage/permanent/chrome/idb/1451318868ntouromlalnodry--epcr.sqlite
Filesize
12KB

MD5
85d17c92517c88da2b720616b5c5b8ee

SHA1
31bb9f4fbcc73445ab2772985080050203c683e2

SHA256
c6324035e8d65753203e12398dfe6be51fdaa31d25bfb73f8e38ac563b1495be

SHA512
6c4eda6020041e3d19e5b0e0ded0f2d7eb28b771388bdf6033b5dcfdb7b538c6681a0cf888f90a4b41d71eaeb3b86bed66a5ee602c974645579033dabf31c718

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/storage/permanent/chrome/idb/1451318868ntouromlalnodry--epcr.sqlite
Filesize
16KB

MD5
4e1e34f1f6ba16bf58ebc9def11acb83

SHA1
e15038691e887542d441eee00b8383aaf581d234

SHA256
f5469679514067fa5af62caa6501f204671e7501dba01be43afa08a8b8b8fd81

SHA512
c7d5072674fbeafe2ac8dd8c27453c05f7761537d0e02bbe35d62f85ccddd81126b01df53b7603b6b4eb3a126d1bb47d96b908f4886475e4447ce942ad0add96

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/storage/permanent/chrome/idb/1657114595AmcateirvtiSty.sqlite
Filesize
44KB

MD5
f1cd629017b1fe58fc80953ebd4754b6

SHA1
01e02178484458797c2b682325b26b2633fe8466

SHA256
81bf3da297b9ee8270bea383d9479cd7951e35f552361230358e3a35e1f44567

SHA512
afb775074af046014236a312865a1811de3bfb97f8df057541401867140fcc236259ab237712a7d3bc012ff84cf90330e4e122374cd09c194c4c145f575fb95a

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/storage/permanent/chrome/idb/1657114595AmcateirvtiSty.sqlite
Filesize
12KB

MD5
a34bdd21f2ea18966a9ab85baa3f4838

SHA1
7d5dd5d4d6e49386bdbf86287959b6933ac19621

SHA256
e96b63c2e45b8e2a933c101e66a7148a754f61d291c4018bd6096383bd297c5b

SHA512
d5009c1c37134ae9cbca2e7ef1a62494ec3d5560c4d4469a8eb1e3cd30069847f8742e03dc477ff258611d628485f1d9710b3028f88f4c1eb16f3cfc56d8a70b

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/storage/permanent/chrome/idb/1657114595AmcateirvtiSty.sqlite
Filesize
16KB

MD5
40e1e64b07410d1af02b750c45edaf53

SHA1
f9716c50ae6d1d483f064cd68af4fa90adcd93cf

SHA256
5ec1a11c680d34492d6c2b4cc12086e4a2a998cbb88057fa90a56ece0072819a

SHA512
5bfbc06c1017c5c682ac49d75bee188d29a8322b7846d1fef68a4c49579e7e5dbf574c7d6d8a7de829546571f5f070dcf438e738773a4e9e1f4293823acd7b64

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite
Filesize
44KB

MD5
1ea539584c41fd171d307fb9e740d499

SHA1
de3d1a3d6a0173bcd30c89f148cd732d0ae614eb

SHA256
aaa3461e12a1343eb5803894e1ef6894014b75b26ef264f29ece30b1cea3aa83

SHA512
22b145864127c0f223522016c6ba0a67e06a36aeba135e546f4d77000f436d5060064eb988b7aafdb451e39f70d0afd20313d15507dd531234ac25d60e9d935c

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite
Filesize
12KB

MD5
ec6979aa0f178e7d2ffb7b8b07f7f748

SHA1
8abe6b9c33e43a163c262e2043eb3b95fa19b7fc

SHA256
d9dcc1b318f25838adc44c9e8df80afa205416fb3af77723b3eeeaf2aa965d90

SHA512
bd010889bea0c26754973df236f705baefecb96c370dcb78f5cd97ed06a7122b3423407279da1f987375acbec426cedb866214c851863e073e64f55315d5869a

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite
Filesize
16KB

MD5
e32ed4c0f3d9213c463b6f12c919aa38

SHA1
52935befcce9f9ba95fea0dd6ba2eb8648763e63

SHA256
91c3a4f24e091f9a3bca5e87b2ee45204c538c36b54c23c08f24e1ac4a286f4f

SHA512
b748515f0642e272b2b84bf7614efabeffc16674e04584090b796f99d68f9c21d19c50c7c0b8ac13ccfb517ac933abebf10c39d35f072d0a84894b3967a1efb8

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
Filesize
44KB

MD5
225fe36c4bb990de9670b27368d655a2

SHA1
1dc382bec9af9b4bd0308dea1908ab6933834828

SHA256
2185235a458ef8924a1370bb956dd1d65d1f7bbffda08289275e072b65d5d1db

SHA512
11eb31a930a336c13869b0d385df555d7fba32ecea26bf513398dca2a35439643b0896a94c4696ffb439eef18b7f85982155dd12beddef784fe4ed1e86d2d1c2

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
Filesize
12KB

MD5
b9be5f48cffd105578bc9b5cb0f5443a

SHA1
f9fa06768a53e2aea09926af5ecd4d0c76674aba

SHA256
efea3f61b6fdab86547d26e24d14a2487d6afa511afcf55bddd937624e2da2cd

SHA512
a87fdfef029314beed4f543e8b9539c1037b709e2297580c2687402554a9ca8f471c50c0333ec876885e9916e03808d9dfd46f901f89a992874304ea8d255841

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
Filesize
156KB

MD5
b93f23039177faf43fed9c445f272585

SHA1
c3b8e6fb8d45318aded8e1cb8a91935c47288cb4

SHA256
e098c9459567424d33461cb129345e083a587385c656f551000f90de108cbf75

SHA512
ff9f36090dd67427ce856e57a954e9a0363f4e01016ad2235063fd3398b59bdeefd6e9617db7f9d785a79bff34933f7b0b88a7cc824a36bebe63dc9c0219645f

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
Filesize
116KB

MD5
bbe9e4471c97fb1b270eb793922a00e8

SHA1
a1da47669a2b512be64ba97e8bbd587887d2c24f

SHA256
dedbbbca17668696789b6525ec93fadbb5731e96df326c7d84ce355fe0ca1bac

SHA512
1df28b24c05bd0931c3fab72bf6283d4a4df4253bd28060bf9abaf8fa0b9fd91e7790c28d7972287ac82a1bf04eecd3fab8acdaa26dfd394b3493280c7474f1d

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite
Filesize
232KB

MD5
fd0c61440655ca3f9ca5c060e0aa1103

SHA1
88ab93b8278485ea3de3c14b0a506d2d30d4c13b

SHA256
8ab4c0b59f18bfb2ef62a7fa17e7de3dfc05723f163e848f746768a16383f5f1

SHA512
dd01301d2880a59a3847d86438da768cfb1e80d65b2f3b2873213b1cf0abd11945fb14e47168a2f7f3b0ead3597edb4d3c5c45eb196caf9c86f44a2117e946d3

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/times.json
Filesize
50B

MD5
c38afd094b77f2c4f11f2f247c961ad5

SHA1
31144c968f003c04844c271f3997722a141ae5bb

SHA256
84b52e6172e593314e4d9ec4236954984794d019e0b1509d198364f4bcf2eddf

SHA512
5cd43c7b99d00ad2eb1606e764e8873f5e7959d47e62651efd41e7ed764b48e4ac19054881f8b6ada769bcaee88c9d9cafe12da46c94fac540d611c7bf1ad6ab

Download Submit
/root/.mozilla/firefox/ux6lzsje.default-release/times.json
Filesize
47B

MD5
80014c6038ccbcaaf2adfd568f46782d

SHA1
eb3472bae447107fbda5a3940c68c1f9d44c53cd

SHA256
9f4f0fc136148b100988d7a4114db6b0e5fe5bebf6a5b167267feda1bb06efd4

SHA512
ca659dbd7123e2537316e8613e286f2925b06ea5d0625e258043a4aa99eb2b781c27b0edfd82984607e9c01f411bf523847a8e073c27e04b1c8173acef7d443c

Download Submit