Resubmissions

24-04-2024 23:59

240424-31zbbabh7v 4

24-04-2024 23:56

240424-3y5qbabh38 7

Analysis

  • max time kernel
    8s
  • max time network
    22s
  • platform
    ubuntu-20.04_amd64
  • resource
    ubuntu2004-amd64-20240221-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2004-amd64-20240221-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system
  • submitted
    24-04-2024 23:59

General

  • Target

    https://encyclopediadramatica.online/Main_Page

Score
4/10

Malware Config

Signatures

  • Changes its process name 64 IoCs
  • Checks CPU configuration 1 TTPs 1 IoCs

    Checks CPU information which indicate if the system is a virtual machine.

  • Reads CPU attributes 1 TTPs 10 IoCs
  • Enumerates kernel/hardware configuration 1 TTPs 64 IoCs

    Reads contents of /sys virtual filesystem to enumerate system information.

  • Reads runtime system information 64 IoCs

    Reads data from /proc virtual filesystem.

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /usr/bin/firefox
    firefox -new-tab https://encyclopediadramatica.online/Main_Page
    1⤵
      PID:1488
      • /usr/bin/which
        which /usr/bin/firefox
        2⤵
          PID:1489
      • /usr/lib/firefox/firefox
        /usr/lib/firefox/firefox -new-tab https://encyclopediadramatica.online/Main_Page
        1⤵
        • Checks CPU configuration
        • Reads CPU attributes
        • Enumerates kernel/hardware configuration
        • Reads runtime system information
        • Writes file to tmp directory
        PID:1488
        • /usr/local/sbin/dbus-launch
          dbus-launch "--autolaunch=4816dd152e8c48ff97e9117d197c13d8" --binary-syntax --close-stderr
          2⤵
            PID:1505
          • /usr/local/bin/dbus-launch
            dbus-launch "--autolaunch=4816dd152e8c48ff97e9117d197c13d8" --binary-syntax --close-stderr
            2⤵
              PID:1505
            • /usr/sbin/dbus-launch
              dbus-launch "--autolaunch=4816dd152e8c48ff97e9117d197c13d8" --binary-syntax --close-stderr
              2⤵
                PID:1505
              • /usr/bin/dbus-launch
                dbus-launch "--autolaunch=4816dd152e8c48ff97e9117d197c13d8" --binary-syntax --close-stderr
                2⤵
                  PID:1505
                  • /usr/bin/dbus-daemon
                    /usr/bin/dbus-daemon --syslog-only --fork --print-pid 5 --print-address 7 --session
                    3⤵
                    • Enumerates kernel/hardware configuration
                    • Reads runtime system information
                    PID:1507
                    • /usr/libexec/xdg-desktop-portal
                      /usr/libexec/xdg-desktop-portal
                      4⤵
                        PID:1980
                      • /usr/libexec/xdg-document-portal
                        /usr/libexec/xdg-document-portal
                        4⤵
                        • Reads runtime system information
                        PID:1985
                      • /usr/libexec/xdg-permission-store
                        /usr/libexec/xdg-permission-store
                        4⤵
                          PID:1991
                        • /usr/libexec/xdg-desktop-portal-gtk
                          /usr/libexec/xdg-desktop-portal-gtk
                          4⤵
                            PID:2000
                          • /usr/libexec/gvfsd
                            /usr/libexec/gvfsd
                            4⤵
                            • Reads runtime system information
                            PID:2008
                            • /usr/libexec/gvfsd-trash
                              /usr/libexec/gvfsd-trash --spawner :1.6 /org/gtk/gvfs/exec_spaw/0
                              5⤵
                              • Reads runtime system information
                              PID:2033
                          • /usr/libexec/dconf-service
                            /usr/libexec/dconf-service
                            4⤵
                            • Reads runtime system information
                            PID:2025
                          • /usr/bin/nautilus
                            /usr/bin/nautilus --gapplication-service
                            4⤵
                            • Reads CPU attributes
                            • Reads runtime system information
                            PID:2030
                      • /usr/lib/firefox/glxtest
                        /usr/lib/firefox/glxtest -f 14
                        2⤵
                        • Enumerates kernel/hardware configuration
                        • Reads runtime system information
                        PID:1512
                      • /usr/bin/lsb_release
                        /usr/bin/lsb_release -idrc
                        2⤵
                          PID:1578
                        • /usr/lib/firefox/firefox
                          /usr/lib/firefox/firefox -contentproc -parentBuildID 20240108143603 -prefsLen 20252 -prefMapSize 231436 -appDir /usr/lib/firefox/browser "{581ca647-c0bd-4608-b906-db1962c71a01}" 1488 true socket
                          2⤵
                          • Changes its process name
                          • Reads CPU attributes
                          • Enumerates kernel/hardware configuration
                          • Reads runtime system information
                          PID:1958
                        • /usr/local/sbin/dbus-launch
                          dbus-launch "--autolaunch=4816dd152e8c48ff97e9117d197c13d8" --binary-syntax --close-stderr
                          2⤵
                            PID:1969
                          • /usr/local/bin/dbus-launch
                            dbus-launch "--autolaunch=4816dd152e8c48ff97e9117d197c13d8" --binary-syntax --close-stderr
                            2⤵
                              PID:1969
                            • /usr/sbin/dbus-launch
                              dbus-launch "--autolaunch=4816dd152e8c48ff97e9117d197c13d8" --binary-syntax --close-stderr
                              2⤵
                                PID:1969
                              • /usr/bin/dbus-launch
                                dbus-launch "--autolaunch=4816dd152e8c48ff97e9117d197c13d8" --binary-syntax --close-stderr
                                2⤵
                                  PID:1969
                                • /usr/lib/firefox/firefox
                                  /usr/lib/firefox/firefox -contentproc -childID 1 -isForBrowser -prefsLen 22702 -prefMapSize 231436 -jsInitLen 229864 -parentBuildID 20240108143603 -greomni /usr/lib/firefox/omni.ja -appomni /usr/lib/firefox/browser/omni.ja -appDir /usr/lib/firefox/browser "{972620fe-c3fc-46d5-a13c-c8448814074a}" 1488 true tab
                                  2⤵
                                  • Reads CPU attributes
                                  • Enumerates kernel/hardware configuration
                                  • Reads runtime system information
                                  PID:2043
                                • /usr/lib/firefox/firefox
                                  /usr/lib/firefox/firefox -contentproc -childID 2 -isForBrowser -prefsLen 22370 -prefMapSize 231436 -jsInitLen 229864 -parentBuildID 20240108143603 -greomni /usr/lib/firefox/omni.ja -appomni /usr/lib/firefox/browser/omni.ja -appDir /usr/lib/firefox/browser "{f7482e84-5fd8-47e6-84ea-53b893dcba4d}" 1488 true tab
                                  2⤵
                                  • Reads CPU attributes
                                  • Enumerates kernel/hardware configuration
                                  • Reads runtime system information
                                  PID:2069
                                • /usr/lib/firefox/firefox
                                  /usr/lib/firefox/firefox -contentproc -childID 3 -isForBrowser -prefsLen 22836 -prefMapSize 231436 -jsInitLen 229864 -parentBuildID 20240108143603 -greomni /usr/lib/firefox/omni.ja -appomni /usr/lib/firefox/browser/omni.ja -appDir /usr/lib/firefox/browser "{6d09d6c3-c8c3-4223-842f-1bb07ba59d5b}" 1488 true tab
                                  2⤵
                                  • Reads CPU attributes
                                  • Enumerates kernel/hardware configuration
                                  • Reads runtime system information
                                  PID:2093
                                • /usr/lib/firefox/firefox
                                  /usr/lib/firefox/firefox -contentproc -childID 4 -isForBrowser -prefsLen 28854 -prefMapSize 231436 -jsInitLen 229864 -parentBuildID 20240108143603 -greomni /usr/lib/firefox/omni.ja -appomni /usr/lib/firefox/browser/omni.ja -appDir /usr/lib/firefox/browser "{72174f96-e687-41a0-95a4-5f6430a9ca4b}" 1488 true tab
                                  2⤵
                                  • Reads CPU attributes
                                  • Enumerates kernel/hardware configuration
                                  • Reads runtime system information
                                  PID:2110
                              • /usr/libexec/gvfsd-fuse
                                /usr/libexec/gvfsd-fuse /root/.cache/gvfs -f -o big_writes
                                1⤵
                                  PID:2013

                                Network

                                MITRE ATT&CK Enterprise v15

                                Replay Monitor

                                Loading Replay Monitor...

                                Downloads

                                • /root/.cache/dconf/user

                                  Filesize

                                  2B

                                  MD5

                                  4381fcf19c7214def45db3ececcfe54c

                                  SHA1

                                  6bc896c1c613812cb90989f1ee99b46ccc697e8f

                                  SHA256

                                  9f1afa4dc124cba73134e82ff50f17c8f7164257c79fed9a13f5943a6acb8e3d

                                  SHA512

                                  b078e46e8056e15676cbe187dfbd10d129c3962e103c8c8acd3d719664de8396f20644162db08b3c5c938124b8342d60c17ada1f5a7deb932fa61be82d336d9c

                                • /root/.cache/mozilla/firefox/7y9jktqi.default-release/cache2/entries/037778A55E1B7E9BED3390289866D09402D6C913

                                  Filesize

                                  9KB

                                  MD5

                                  45519b2423bc5231b3eeeb117933aadf

                                  SHA1

                                  72bd9eeb4b16b57ddfa479dd622624c1b8474954

                                  SHA256

                                  dcd51ac54b3e3d1dd43e710541fb06e9f213cd86aec1fb4dfaae4f78cad434df

                                  SHA512

                                  009f17afd993ea21979b06b8fe94cda2eb99976b72fb65184664a747f55fcc4581d0022c2f1a6b901e0ff78973d5ceb5418042f9bec05727a892cf4023fbf3ab

                                • /root/.cache/mozilla/firefox/7y9jktqi.default-release/cache2/entries/1611007487CDFCDB9FE43793C68D8984CF7DD7AA

                                  Filesize

                                  9KB

                                  MD5

                                  9e17f0d40d3bb1fd667610bae841188b

                                  SHA1

                                  165a8da353a35c6c4478d1f5d9d9f19f637d90e0

                                  SHA256

                                  41c12c1afd4cd0a0ca5df293ca7dc6414ad484db46e353fd1be5649f1cd8ecaa

                                  SHA512

                                  adb057e8d5b50b86d2cbf0dff9b9fb646688713693fac9813eeec6ed2d41af7e562c0f133da2536908ec29d59fa3ca4bf976af6c33df02533d4c1bfc4af79928

                                • /root/.cache/mozilla/firefox/7y9jktqi.default-release/cache2/entries/298D53A692BA41D0C5CA5AE0806650D73FF83365

                                  Filesize

                                  9KB

                                  MD5

                                  d03e3e53d15bccb289d92f0da520e5b9

                                  SHA1

                                  046849d5a33a1d910f1c958e4fbcc4674ccb80d7

                                  SHA256

                                  deeeccb734463586582edd1ec50cbe1d05a3fb4255bb7275f1af0dbd215cf6b1

                                  SHA512

                                  ad1f6932873c1bd39d81b7a3139cfe2e2946c029d62582c44a777a9ea145059aa7a5c626585c0556c1c1cc9e24f9a69f298bf1836119f4dc4a720396e3d7b290

                                • /root/.cache/mozilla/firefox/7y9jktqi.default-release/cache2/entries/3D1E19D09F398691ABF62061591970855193B42F

                                  Filesize

                                  13KB

                                  MD5

                                  c43f7258faba05232b23c78d76858394

                                  SHA1

                                  f1c1a9a6f5fd3fc2df0d0f71d985071ef28c2e13

                                  SHA256

                                  403852445c4c8c08711cbcea7b6053108cfb99881960153467bfbf07d8c7ef0c

                                  SHA512

                                  31a48a3f287e1c6988a1d816561f6f9aa22d7cae7434a1da75475d0658fbbd30a022586baf08b66ed3e201eaea568d96a71d7d7bd1ff47d21df892395f950237

                                • /root/.cache/mozilla/firefox/7y9jktqi.default-release/cache2/entries/90E321EE94230DCDBDCD2EC0B77C695A4FC21F78

                                  Filesize

                                  9KB

                                  MD5

                                  8b1140ca479d5830b3786a3fef316344

                                  SHA1

                                  551153567237f2a6f5b40e559c1c619b44647e83

                                  SHA256

                                  24efb9db76461a7cb12e84930b37c18fd1fc628cf2610cf75bd5e7306fe54242

                                  SHA512

                                  e34783c504dafb8f7358f2fecf021b720a1db7ced99d4bf543322931860bfc421dbaeedfb53b3d8adcf2883efc30f9c26becac17c520da43beab9fbed5571784

                                • /root/.dbus/session-bus/4816dd152e8c48ff97e9117d197c13d8-0

                                  Filesize

                                  466B

                                  MD5

                                  7832025dac29b14e2bb10283bd37c541

                                  SHA1

                                  bccfdf8d63f321975b450e34922d43c2e1bd2554

                                  SHA256

                                  c84b133059d0f9e90b24496481f34655185757db0c2efe26b5f5d4df869b1b68

                                  SHA512

                                  4302f674a071eb9f708e7c31b44470bcc299a392a98d181ca5dd4067fdc9d780acf7a4b0cb37ed54d19e32fad2c539ee0c056e1b5fc8676a86cee1828cf4ad5d

                                • /root/.mozilla/firefox/7y9jktqi.default-release/cert9.db

                                  Filesize

                                  224KB

                                  MD5

                                  39633cb33069f6c47c51ff128f73859d

                                  SHA1

                                  3de87ebabc5a7365d93769fb7dcd53849d27585d

                                  SHA256

                                  90aa463894324c4e8c802530940398dbc97c6fc37e410d80a8b47b1ba0411632

                                  SHA512

                                  6a1dfc491719feb2467cb972e7d8f0a2c45319ab4b1fecac53a95865aad0e5cd0954b1f71efec6e5476cbdfab294852f22ef3ec7913cc5b90227530cf12e11c2

                                • /root/.mozilla/firefox/7y9jktqi.default-release/cert9.db

                                  Filesize

                                  224KB

                                  MD5

                                  d001983a207d45827c07abde98beac1b

                                  SHA1

                                  ff729ca27892addba6ba8ea9bb3b7e4e945576cc

                                  SHA256

                                  6490fca4e6da50f051c11eb46bf36e918318bf64fc0365d573929e966d7f3b8b

                                  SHA512

                                  aa1b108e47d966b56a65992bcc2abeca6224240ef262a36cfa0f6bcee577015c98ec5d0db28c3eebf25bbf242c8ebbee16e3efb469af7eb2e0c6a0458134f38a

                                • /root/.mozilla/firefox/7y9jktqi.default-release/cert9.db

                                  Filesize

                                  224KB

                                  MD5

                                  7305468254ca616abbc931aefc141b6e

                                  SHA1

                                  a5f04723b083808f5c8775f9d4a7844006d6138a

                                  SHA256

                                  c32139d5dc7269ddd329c74abb546ce816207f01a665af2ad91d82cc51a9b13d

                                  SHA512

                                  85492ee898cc0325fc3c34625141deed93f68c0f4a1d11bc30c8a5cbd39d41c8869cd34aaf89b7606cf936e6117a7b86e040af33cc6fbd9c75fd4932f0a6bad1

                                • /root/.mozilla/firefox/7y9jktqi.default-release/cert9.db

                                  Filesize

                                  224KB

                                  MD5

                                  94937d2aa2edbe361f9921fb653f9a06

                                  SHA1

                                  934469c98062576cff22253b39e01b3e6f9fbea7

                                  SHA256

                                  dd4695b00e25b6428c78b44d06f302a12e589e07c9e03e1aad259f2f51c39906

                                  SHA512

                                  f1f23f82016c79354e56afd5fd69d219d0590a8e48abf27cd7d8950be6419cdf871e8c04451f2a1a5c5bff4c4eda537fb678b55600772d15e8ab2597d5959e74

                                • /root/.mozilla/firefox/7y9jktqi.default-release/compatibility.ini

                                  Filesize

                                  163B

                                  MD5

                                  2d41a6f5736821b90ef44850dd3873fe

                                  SHA1

                                  a47c4bc1431234a5b58e460ede5b571acd38e562

                                  SHA256

                                  b4bf5c8334f6db20ae94105141ae7a721342ddccd94ec65289dc291e76a31814

                                  SHA512

                                  047a1455211e7aa29ef5f32f07c89d8a0c8d86d871bc664e4d8958a2a014dbe32f0613cd9eb66e7307c0e2439f74ca0b829652a52fa48e8c60d64b41f69914eb

                                • /root/.mozilla/firefox/7y9jktqi.default-release/content-prefs.sqlite

                                  Filesize

                                  32KB

                                  MD5

                                  1c7386dfc5a5d7f2aa06cdf1e2b280a9

                                  SHA1

                                  71fd6c476cca7d5aaaa79f1c535346b6de20a448

                                  SHA256

                                  f2793a25bb1c364f2589a7b541a5873f8e5e192ff39c1fcefd786e1c23f1c5c8

                                  SHA512

                                  378d36bf3054ffb7b664bcb4d0e38b546b684ce4436c247674ccf621ec2f9951cca73f55e4c1f496a37061ade6065fd315878aa65d2d38c09f8f6a0cb768d978

                                • /root/.mozilla/firefox/7y9jktqi.default-release/cookies.sqlite

                                  Filesize

                                  96KB

                                  MD5

                                  26ff39b359947b71a5fadd950fac34f0

                                  SHA1

                                  66e5830e4dca79225f41adc13a077d8e5dd8084b

                                  SHA256

                                  aecbaf3e1df1332d4f14a11480db712eb4aa91581eb4e942c580bf675f592a45

                                  SHA512

                                  7fae7b9ff4362e12f00acdc898f6f679718bdd28dc959684333086de7bacd162338dc266810f9f3f6dfa3dc228291efd6bb325e2e8573ca0e6a699059a145f11

                                • /root/.mozilla/firefox/7y9jktqi.default-release/cookies.sqlite

                                  Filesize

                                  96KB

                                  MD5

                                  102a8b6e82208a1b69224bdca8a5b10f

                                  SHA1

                                  8413dc3772127c4159e6d6b51372990a06b805ee

                                  SHA256

                                  5ebf89b32937916a76a8432832040cf0f6b99c2f006cc42f856712d403ec182c

                                  SHA512

                                  49c5c27c6749a7a73b4b944eea64ceb053a272619e6319bfd433ffbe126c8fbccc110961018165a4c7de781a86cf38d2bd9e52ec71b10bc73c9fd05fe841a46c

                                • /root/.mozilla/firefox/7y9jktqi.default-release/key4.db

                                  Filesize

                                  288KB

                                  MD5

                                  b2d64c085ecc12a4d0f36fc64ac87425

                                  SHA1

                                  9ded8e6e7ceda7b7bdd8347c0948d545a448c2f0

                                  SHA256

                                  e68ee7f51ff9df95e2708b394e4bcdb6e3ab668148b2326e0b2eb54b8ac9e25e

                                  SHA512

                                  30a7421a52aa274bbc6c2658acd313ddfd7acc58ade500eb0610d523804e8975bfd3910d2c6b0df6f5d243c8d488a810e4b7eb203b670c3a9350cf3f520b7cee

                                • /root/.mozilla/firefox/7y9jktqi.default-release/permissions.sqlite

                                  Filesize

                                  96KB

                                  MD5

                                  cca350b9f667d3276d42171f342f3b93

                                  SHA1

                                  3f1bc8b8c492c0df2c11c00c22fc5aab235a0647

                                  SHA256

                                  0ccb9c5e0dc4571c0bd5c2096c55180c0dce4070dc7053b75bcc544ce2d29a02

                                  SHA512

                                  f13ec9681fd312492f956d9e7f39a2229366a6b8cc62daa8bb91b1a6bc10589ed579a85213e097f2e64f09401f982326f023a04f080331c5024fef02f3fa22a1

                                • /root/.mozilla/firefox/7y9jktqi.default-release/prefs-1.js

                                  Filesize

                                  1KB

                                  MD5

                                  d529c13be69201c8027ad8192a21bedf

                                  SHA1

                                  da01e122f66eabd6d56e6ec114f8d8a7a12921c3

                                  SHA256

                                  a6bbddb567ae9b977f4fbd01c45d7e0947436010d03112d2d1d0197a821a8574

                                  SHA512

                                  28c4207767acf97b5f2fb0c1c254e7349108efd8470205d0a66951c099db67c79873202b9ddc80390c6e7906f381b900e65c37a86b6af0ccb733ae28919b73a4

                                • /root/.mozilla/firefox/7y9jktqi.default-release/prefs-1.js

                                  Filesize

                                  2KB

                                  MD5

                                  fb910f738bf30da0602067722dcdbcc6

                                  SHA1

                                  eab61f5735685d690ddf2a9c83f78401c175ea02

                                  SHA256

                                  e75c6c43effbf673c9918a13d6829955903e0cb379a7fa69af3920e0d19a7085

                                  SHA512

                                  c828e3bb81e6348e8e4bc8a234ea603cb209b84346abfa7d28b1c8bc3600a96fb428f104576dae517b6f196d4dba3f8cb733c21ebd74005fd6c61198cff38fe8

                                • /root/.mozilla/firefox/7y9jktqi.default-release/prefs-1.js

                                  Filesize

                                  2KB

                                  MD5

                                  ab91c157730ca968348134226b53aa44

                                  SHA1

                                  b9349c38194aa708afaa9bcc96f784b87c0840e3

                                  SHA256

                                  f1602b8ff0f917f59f54ea986b41eae1ebc8a1a6d3231f0fc1770f69a8e17125

                                  SHA512

                                  c6118940147306b86f3934d6103c02f26db9d182751c8b87112bf183cde988b497183474264909d0ba03fd6b70bca41203660f3b88b9be81894babea305b856a

                                • /root/.mozilla/firefox/7y9jktqi.default-release/prefs-1.js

                                  Filesize

                                  2KB

                                  MD5

                                  fba5548ab8a9eb528f8a6ead0f5e0cc2

                                  SHA1

                                  0fdcd9d615cef23e952d6bdfa8a57e4d3ad96496

                                  SHA256

                                  5816ced99ad3a9f4f204cd4bf93f972988dd322ae750de78f45d0c12cf40b122

                                  SHA512

                                  738b531b19b9e879524b8b5c86182ce773463d6086c341ae6730ddfb34edf7b9db5fb5fe878092e15b77bae2e23276ff18f39a1964c1b2bbd9bdcf3ee4c17bcf

                                • /root/.mozilla/firefox/7y9jktqi.default-release/prefs-1.js

                                  Filesize

                                  2KB

                                  MD5

                                  522fce1857526f2d3b1daae0a0ba585e

                                  SHA1

                                  ab7eb4e74f965f366ddb2622c4aa95909c774d31

                                  SHA256

                                  3eb41d914916ab3837164de5d2c52147530cb172daac5f83fc8dcfe3ecdac4e8

                                  SHA512

                                  28c07bac13d13d0b1a8f5c4823b44a84b2661110eacbf1961b90c795daf8b350875020b7853651927d95bbc4effb9da2b409aa9e8f63722460d856bde5c5195b

                                • /root/.mozilla/firefox/7y9jktqi.default-release/prefs-1.js

                                  Filesize

                                  3KB

                                  MD5

                                  844b6e4cd31fa4fc1639b775e36c45be

                                  SHA1

                                  c4a8eb96e4e81cead92cc597da071eaeb3e3a4fc

                                  SHA256

                                  933cca746e5feaef7e03a64a5413361cae3f64d80e3e2e598e3d0f054597abd5

                                  SHA512

                                  f40cc7632ace0ef86149d0bacdfe3e42343815cf3fd981e69128c7ffc9c878b028e3f5edf1338a17763b335b45642d600bdea30306d00230b0f39d7d21275c6b

                                • /root/.mozilla/firefox/7y9jktqi.default-release/prefs-1.js

                                  Filesize

                                  4KB

                                  MD5

                                  b8245246b4d0733f4592ab2fe6dd0cf9

                                  SHA1

                                  f128227e94829291aaba1f74c0b0b72045e8b062

                                  SHA256

                                  f97f7d7516fe7aeb95a08a06dc2745ae59566336a3ac7c0b33b7b98fd202f41b

                                  SHA512

                                  fb0ea3a61c0cd8ec25e6c5393d8c78b0f8ada85630297a4bd25bf2af1cb52d5719365dfb0931987055cdffce0bae648053d7faff10721b60ac173db2f64a8e08

                                • /root/.mozilla/firefox/7y9jktqi.default-release/prefs.js

                                  Filesize

                                  776B

                                  MD5

                                  59ab0e00d9f0d9e264c266fd215e055a

                                  SHA1

                                  34b204c404dd5109dc64a0449bdafca211290cf5

                                  SHA256

                                  4a69e4d9acd57de9da395c67ce30df3f0e3067d3af2e861ca9fbfff639923d2f

                                  SHA512

                                  34de9f63cb8a28893f5dc58b0dd84fb959539650fac75d776a653a405e08949c7ee69d2cc69c027c18b881f70d1b44bb71b323c21dd092a5bcc274645fdd0b13

                                • /root/.mozilla/firefox/7y9jktqi.default-release/storage/ls-archive.sqlite

                                  Filesize

                                  96KB

                                  MD5

                                  e1121e3dd3c8a9c384f879bdddcff219

                                  SHA1

                                  625f25a1a5ff8527ab3105636fa7aecb9affd234

                                  SHA256

                                  766b9f50254b4e5526b0cde2911512956262596d8937f8630805d3c70802a066

                                  SHA512

                                  03e1cee2e75b2b609b8344a40995de09de837e940d2012f2fea65d9c70eecbcd3345b66b852f32211b38b06a4370f06f02ca7521e29e7113e2e12a6a7752be31

                                • /root/.mozilla/firefox/7y9jktqi.default-release/storage/ls-archive.sqlite

                                  Filesize

                                  128KB

                                  MD5

                                  0d2b18bbf091633c4fe1ebdd197dfa15

                                  SHA1

                                  c150dc37042d92d30efed6cbc1b536eb66ec1a3e

                                  SHA256

                                  fe63ee867e0f229a0bcc48b771afeec394c362ac6d0c2bd6907c7202097bd228

                                  SHA512

                                  59d202bfaf236bdcfc05a3e148a773d15a3bdff23be26fb2cbfd059fee6c4a516c7a59de0a3bc97df1419c34464e1346354979ddda1062101121522f22d8156d

                                • /root/.mozilla/firefox/7y9jktqi.default-release/storage/permanent/chrome/.metadata-v2-tmp

                                  Filesize

                                  36B

                                  MD5

                                  f358c0a07a9bc9be95bb4547e84dbc3c

                                  SHA1

                                  abe20b581adaf882724d5d81311b9612b22b9979

                                  SHA256

                                  2189299a470cc5a59c9bc2f1b207c5015077b69062e467fce07450a43330e7e2

                                  SHA512

                                  256bcc582e2ea87c8c200813db0a7f8766a007edca8d90ae4323de791febaa7010896ff0c9fae551ece4ed8cc0080af7d0cda039401110be8c00327d7582ba14

                                • /root/.mozilla/firefox/7y9jktqi.default-release/storage/permanent/chrome/idb/1451318868ntouromlalnodry--epcr.sqlite

                                  Filesize

                                  44KB

                                  MD5

                                  488403dd59d861961dbf2e5317cc6e55

                                  SHA1

                                  bcb13cf819bdc370762237a075f14a9be0728a50

                                  SHA256

                                  8645149962df6c816291521b6cb45e9acf79da6bdc3a727ba00c71eb720de4ef

                                  SHA512

                                  4e60bc58fdc1ffe3662b83fc9af3e0ec5af90eeb25da8e60a70717e3588676e135f6cc5a8d57a37c2cd2ce3a3661e665e2688d00799dd834945d5f0964750805

                                • /root/.mozilla/firefox/7y9jktqi.default-release/storage/permanent/chrome/idb/1451318868ntouromlalnodry--epcr.sqlite

                                  Filesize

                                  12KB

                                  MD5

                                  075b5f6543fdfb60ae1e9cc9773e1945

                                  SHA1

                                  d6bbe23d3af54d7fa0e0eb906b1c410cdb6bb83c

                                  SHA256

                                  36713cdea87b67ac512eabb3e956212b28e7325b14c7e6009f1ee9f7bec89acb

                                  SHA512

                                  e14fde36af064ed676c1515d7badfe406be33be8a246d07dbd7844b41c3af1f4742ebc41e84d5f91a202c30db46da2f92418eaf10211e6b4335bd63c45f54d4e

                                • /root/.mozilla/firefox/7y9jktqi.default-release/storage/permanent/chrome/idb/1657114595AmcateirvtiSty.sqlite

                                  Filesize

                                  44KB

                                  MD5

                                  f1cd629017b1fe58fc80953ebd4754b6

                                  SHA1

                                  01e02178484458797c2b682325b26b2633fe8466

                                  SHA256

                                  81bf3da297b9ee8270bea383d9479cd7951e35f552361230358e3a35e1f44567

                                  SHA512

                                  afb775074af046014236a312865a1811de3bfb97f8df057541401867140fcc236259ab237712a7d3bc012ff84cf90330e4e122374cd09c194c4c145f575fb95a

                                • /root/.mozilla/firefox/7y9jktqi.default-release/storage/permanent/chrome/idb/1657114595AmcateirvtiSty.sqlite

                                  Filesize

                                  12KB

                                  MD5

                                  51449814ebd23f424456bbc0038ab0e8

                                  SHA1

                                  8bf5b0cbf1274070663d485717ae13b1a13035b6

                                  SHA256

                                  14f0714c7946de4bd1c7e24514673e5f24730775d97ef7c3777deef4cf000131

                                  SHA512

                                  22c07b347e307976efd0ebdfbcb10a898c822288ccc0ab5931932bdf07fe528621728e29fe64f8c5f9e0aac88c50c98fe9071b8c4c7084f34cfb1f12c308574e

                                • /root/.mozilla/firefox/7y9jktqi.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite

                                  Filesize

                                  44KB

                                  MD5

                                  1ea539584c41fd171d307fb9e740d499

                                  SHA1

                                  de3d1a3d6a0173bcd30c89f148cd732d0ae614eb

                                  SHA256

                                  aaa3461e12a1343eb5803894e1ef6894014b75b26ef264f29ece30b1cea3aa83

                                  SHA512

                                  22b145864127c0f223522016c6ba0a67e06a36aeba135e546f4d77000f436d5060064eb988b7aafdb451e39f70d0afd20313d15507dd531234ac25d60e9d935c

                                • /root/.mozilla/firefox/7y9jktqi.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite

                                  Filesize

                                  12KB

                                  MD5

                                  141ae528de69417e508e36f3c94a3b49

                                  SHA1

                                  628ded7e97a334173b5acabacaf6d0c689432ea8

                                  SHA256

                                  dfdcba3ce4cea4d87c9b1dfdd746b212b824c0be7629bd03a0298994bd43e3c7

                                  SHA512

                                  59a091fe27d9bf9da6cd57c2ae911a9e7153e52f293949f66cfa3dfbb645fdc2bb5839f76232c07d60f9e20f0ccb4db6fe2cc2df73f1d8d704ec3a2614b42255

                                • /root/.mozilla/firefox/7y9jktqi.default-release/storage/permanent/chrome/idb/3561288849sdhlie.sqlite

                                  Filesize

                                  16KB

                                  MD5

                                  258836b94cfb86732ad26c3e1f4b9d07

                                  SHA1

                                  666b1fb04687e3c6d83b911b4f2f83071774ac51

                                  SHA256

                                  32399c6483d8d2afb17547e20ce91bb01699e99f2c0193957ed3521ca1aa61c9

                                  SHA512

                                  b77f253c82e2ab8c380ead6f6530163aff65175586931dd08be941cbcd30e98b17bbc8ebf485633ec22771a0f89bb99f81d11cf9805ef81a8b5ad314c4ec18b5

                                • /root/.mozilla/firefox/7y9jktqi.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite

                                  Filesize

                                  44KB

                                  MD5

                                  225fe36c4bb990de9670b27368d655a2

                                  SHA1

                                  1dc382bec9af9b4bd0308dea1908ab6933834828

                                  SHA256

                                  2185235a458ef8924a1370bb956dd1d65d1f7bbffda08289275e072b65d5d1db

                                  SHA512

                                  11eb31a930a336c13869b0d385df555d7fba32ecea26bf513398dca2a35439643b0896a94c4696ffb439eef18b7f85982155dd12beddef784fe4ed1e86d2d1c2

                                • /root/.mozilla/firefox/7y9jktqi.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite

                                  Filesize

                                  12KB

                                  MD5

                                  08d81ed72acf4ea347a93822a60e6100

                                  SHA1

                                  22671a1606ba549a4fa8550bfc906389e50aa158

                                  SHA256

                                  168ca4f046682682104fc4f29b6fd9523cf126a4e526e22602de6513d6b466e1

                                  SHA512

                                  fa3d10e63cb71ad6557fc8a12c465a5fc58e3c3a6e0e38eb248099296e2ac9cb3902b3662068c2b2a77c4fad49be6fd922bae3b1d0630a1822e383f9d270c113

                                • /root/.mozilla/firefox/7y9jktqi.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite

                                  Filesize

                                  156KB

                                  MD5

                                  acc0e35cd32cf2c1f9550901f2090e90

                                  SHA1

                                  b33a932399238e97453d694712c845185d84b8b9

                                  SHA256

                                  bc7728903c841c3b9c18f3531b926a1835f2b20b4d597c4272b8f498579e37cf

                                  SHA512

                                  f79ce6cff326a745733ac79eb33d1e31b7a4e3d38b1ded1f9a288a0fa86f3815873572963eb129a2c39944d8849124af0d48bb54aab95c10508d388157c0927d

                                • /root/.mozilla/firefox/7y9jktqi.default-release/storage/permanent/chrome/idb/3870112724rsegmnoittet-es.sqlite

                                  Filesize

                                  116KB

                                  MD5

                                  bbe9e4471c97fb1b270eb793922a00e8

                                  SHA1

                                  a1da47669a2b512be64ba97e8bbd587887d2c24f

                                  SHA256

                                  dedbbbca17668696789b6525ec93fadbb5731e96df326c7d84ce355fe0ca1bac

                                  SHA512

                                  1df28b24c05bd0931c3fab72bf6283d4a4df4253bd28060bf9abaf8fa0b9fd91e7790c28d7972287ac82a1bf04eecd3fab8acdaa26dfd394b3493280c7474f1d

                                • /root/.mozilla/firefox/7y9jktqi.default-release/times.json

                                  Filesize

                                  50B

                                  MD5

                                  d79869a4bd8a39e2e84ec97d7a444332

                                  SHA1

                                  e6b88b4ea5d02e513f067a9afc07fb5f94485cb4

                                  SHA256

                                  73b4ee392f0859fe8690728a9538fda26eae36e097df5f9d8060443dfaa04404

                                  SHA512

                                  5818fbbacc8154aac904b8e2b1c639c11eab32b0781e947312bb6bab4cc0e8446afd12991c4c8b63ad85a9d840bac845a9f6247f928206b84045dfc333d2063c

                                • /root/.mozilla/firefox/7y9jktqi.default-release/times.json

                                  Filesize

                                  47B

                                  MD5

                                  b477b8080d01653c257216830bb2850f

                                  SHA1

                                  ae7e5b43fa8d9b45d6c0a72b77d8a9a3d5110144

                                  SHA256

                                  a7505886e4b511c92ef8d88c309076d47bde205bccd3ab279f2b6e0b33f482b5

                                  SHA512

                                  0d91d6955642320c9ea6d82df9d66a001fe90535d13919dc5e598ceb6f5b6f5d9bb2a734ea8fb08471eb17961f028ea5ba6454c37585ad33792c1ac9716fe082

                                • /root/.mozilla/firefox/8ah7r7si.default/times.json

                                  Filesize

                                  47B

                                  MD5

                                  81114ad3cf6a10f4cb033abeca922aea

                                  SHA1

                                  107089cd137b1561757902c35a82cc60df899af9

                                  SHA256

                                  ed33231cd0851aaba1bc7b24f6efee000580d66609ba6547f36982fcc086798d

                                  SHA512

                                  27e5920b410a85ab9fb75f05ce6d384690bd6152c9af9dc5bc91faaedb2ff78e5e5c3cf3b828fe4e7a1049ed17b983b36f7d14c48d8dff9580799624ceade130

                                • /root/.mozilla/firefox/Crash Reports/InstallTime20240108143603

                                  Filesize

                                  10B

                                  MD5

                                  52059967d81d69265bd0e784f773364e

                                  SHA1

                                  806ad6432a999af11a54bae7c3a244c3b24b1ff2

                                  SHA256

                                  f0bc0a94f97c163aa4a29a28bc198512e8cf19deccbb11f1e7881af68d2270cf

                                  SHA512

                                  39802f8dd73d8fb2129f1b470e09901ca346e9292c0435bb78fb9e386b73954b7213a31e1ac6b424d8a0cdd381fcb28054843544fcba2a66318c4ec051d1461e

                                • /root/.mozilla/firefox/installs.ini

                                  Filesize

                                  62B

                                  MD5

                                  e8c9143029b76ad9b5d34ae70315f463

                                  SHA1

                                  512fcf3fc18fc973cdeb8077ea38e62c32c862c5

                                  SHA256

                                  e851f86bc8bb320de1771b6bd07ba073c22aceffa43a399e6295a4e0d5052a13

                                  SHA512

                                  5ee8e2dd1c7ba995074ea6458d138b78bc95ac471f95db476d15c4b6f571e6c6bb55e78a6bacbde919c60d89f74214a9af6353bfb26f3ddc751f5d5766152546

                                • /root/.mozilla/firefox/profiles.ini

                                  Filesize

                                  259B

                                  MD5

                                  679d04c3ee327afde92630177eb75988

                                  SHA1

                                  bdca9b8513b7058797c7eee14e7f8dd82476d2f1

                                  SHA256

                                  f1a3679c585a993a65cd74abddb2bd270ed73016d2a42f517cf206fac3611ec7

                                  SHA512

                                  2eaccc0c7fce56d61a1a85c1a91dddc2524a16987a94f7851bfbd43ffef32c205748f33ce5740575efbc7c16693f03a54583d731ddf7b21eb5d6a9a0e6066f86