Overview
overview
4Static
static
1URLScan
urlscan
1https://tii.la/Mega_...
windows7-x64
1https://tii.la/Mega_...
windows10-1703-x64
4https://tii.la/Mega_...
windows10-2004-x64
1https://tii.la/Mega_...
windows11-21h2-x64
1https://tii.la/Mega_...
android-10-x64
1https://tii.la/Mega_...
android-11-x64
1https://tii.la/Mega_...
android-13-x64
1https://tii.la/Mega_...
android-9-x86
1https://tii.la/Mega_...
macos-10.15-amd64
https://tii.la/Mega_...
debian-12-armhf
https://tii.la/Mega_...
debian-12-mipsel
https://tii.la/Mega_...
debian-9-armhf
https://tii.la/Mega_...
debian-9-mips
https://tii.la/Mega_...
debian-9-mipsel
https://tii.la/Mega_...
ubuntu-18.04-amd64
3https://tii.la/Mega_...
ubuntu-20.04-amd64
4https://tii.la/Mega_...
ubuntu-22.04-amd64
3https://tii.la/Mega_...
ubuntu-24.04-amd64
4Analysis
-
max time kernel
1s -
max time network
150s -
platform
ubuntu-24.04_amd64 -
resource
ubuntu2404-amd64-20240523-en -
resource tags
arch:amd64arch:i386image:ubuntu2404-amd64-20240523-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system -
submitted
29-06-2024 12:46
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://tii.la/Mega_Drop_1
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
https://tii.la/Mega_Drop_1
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
https://tii.la/Mega_Drop_1
Resource
win10v2004-20240508-en
Behavioral task
behavioral4
Sample
https://tii.la/Mega_Drop_1
Resource
win11-20240611-en
Behavioral task
behavioral5
Sample
https://tii.la/Mega_Drop_1
Resource
android-x64-20240624-en
Behavioral task
behavioral6
Sample
https://tii.la/Mega_Drop_1
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral7
Sample
https://tii.la/Mega_Drop_1
Resource
android-33-x64-arm64-20240624-en
Behavioral task
behavioral8
Sample
https://tii.la/Mega_Drop_1
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral9
Sample
https://tii.la/Mega_Drop_1
Resource
macos-20240611-en
Behavioral task
behavioral10
Sample
https://tii.la/Mega_Drop_1
Resource
debian12-armhf-20240418-en
Behavioral task
behavioral11
Sample
https://tii.la/Mega_Drop_1
Resource
debian12-mipsel-20240221-en
Behavioral task
behavioral12
Sample
https://tii.la/Mega_Drop_1
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral13
Sample
https://tii.la/Mega_Drop_1
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral14
Sample
https://tii.la/Mega_Drop_1
Resource
debian9-mipsel-20240418-en
Behavioral task
behavioral15
Sample
https://tii.la/Mega_Drop_1
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral16
Sample
https://tii.la/Mega_Drop_1
Resource
ubuntu2004-amd64-20240611-en
Behavioral task
behavioral17
Sample
https://tii.la/Mega_Drop_1
Resource
ubuntu2204-amd64-20240611-en
Behavioral task
behavioral18
Sample
https://tii.la/Mega_Drop_1
Resource
ubuntu2404-amd64-20240523-en
General
-
Target
https://tii.la/Mega_Drop_1
Malware Config
Signatures
-
Changes its process name 6 IoCs
Processes:
description ioc pid Changes the process name, possibly in an attempt to hide itself pool-spawner 2917 Changes the process name, possibly in an attempt to hide itself gmain 2918 Changes the process name, possibly in an attempt to hide itself dconf worker 2919 Changes the process name, possibly in an attempt to hide itself pool-spawner 3014 Changes the process name, possibly in an attempt to hide itself gmain 3015 Changes the process name, possibly in an attempt to hide itself dconf worker 3016 -
Enumerates kernel/hardware configuration 1 TTPs 44 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
Processes:
firefoxfirefoxsnap-seccompsnap-confinesnap-seccompdescription ioc process File opened for reading /sys/kernel/security/apparmor/features/policy firefox File opened for reading /sys/kernel/security/apparmor/features firefox File opened for reading /sys/kernel/security/apparmor/features/file firefox File opened for reading /sys/kernel/security/apparmor/features/namespaces firefox File opened for reading /sys/kernel/security/apparmor/features/file firefox File opened for reading /sys/kernel/security/apparmor/features/ipc firefox File opened for reading /sys/kernel/security/apparmor/features/network firefox File opened for reading /sys/kernel/security/apparmor/features/ptrace firefox File opened for reading /sys/kernel/security/apparmor/features/signal firefox File opened for reading /sys/kernel/security/apparmor/features/ipc firefox File opened for reading /sys/kernel/security/apparmor/features/caps firefox File opened for reading /sys/kernel/security/apparmor/features/io_uring firefox File opened for reading /sys/kernel/security/apparmor/features/policy firefox File opened for reading /sys/kernel/security/apparmor/features/query firefox File opened for reading /sys/kernel/security/apparmor/features/mount firefox File opened for reading /sys/kernel/security/apparmor/features/network firefox File opened for reading /sys/kernel/mm/transparent_hugepage/hpage_pmd_size snap-seccomp File opened for reading /sys/devices/pci0000:00/0000:00:02.0/drm/card1/uevent snap-confine File opened for reading /sys/fs/cgroup/user.slice/user-0.slice/[email protected]/app.slice/snap.firefox.firefox-26ed26a8-37dd-4d69-9312-0cd7f0093a74.scope snap-confine File opened for reading /sys/kernel/mm/transparent_hugepage/hpage_pmd_size firefox File opened for reading /sys/kernel/security/apparmor/features/dbus firefox File opened for reading /sys/kernel/security/apparmor/features/domain firefox File opened for reading /sys/kernel/security/apparmor/features/rlimit firefox File opened for reading /sys/kernel/mm/transparent_hugepage/hpage_pmd_size firefox File opened for reading /sys/kernel/security/apparmor/features/dbus firefox File opened for reading /sys/kernel/security/apparmor/features/namespaces firefox File opened for reading /sys/kernel/security/apparmor/features/network_v8 firefox File opened for reading /sys/kernel/mm/transparent_hugepage/hpage_pmd_size snap-seccomp File opened for reading /sys/kernel/security/apparmor/features/query firefox File opened for reading /sys/kernel/security/apparmor/features/rlimit firefox File opened for reading /sys/devices/pci0000:00/0000:00:02.0/drm/renderD128/uevent snap-confine File opened for reading /sys/devices/pci0000:00/0000:00:02.0/drm/card1/card1-Virtual-1/uevent snap-confine File opened for reading /sys/kernel/security/apparmor/features/network_v8 firefox File opened for reading /sys/kernel/security/apparmor/features/signal firefox File opened for reading /sys/kernel/security/apparmor/features/caps firefox File opened for reading /sys/kernel/security/apparmor/features firefox File opened for reading /sys/kernel/security/apparmor/features/domain firefox File opened for reading /sys/kernel/security/apparmor/features/mount firefox File opened for reading /sys/module/apparmor/parameters/enabled snap-confine File opened for reading /sys/devices/virtual/dma_heap/system/uevent snap-confine File opened for reading /sys/fs/bpf snap-confine File opened for reading /sys/kernel/security/apparmor/features/io_uring firefox File opened for reading /sys/devices/virtual/mem/full/uevent snap-confine File opened for reading /sys/kernel/security/apparmor/features/ptrace firefox -
Reads runtime system information 64 IoCs
Reads data from /proc virtual filesystem.
Processes:
firefoxsnap-confinegsettingsgrepgrepgsettingssedgrepsedsedgrepgsettingsfirefoxgrepgrepgrepgrepsedgrepgrepgrepgrepgrepgrepgrepgrepgrepsedgrepgrepgrepgrepgrepgrepgrepgrepgrepgrepgrepgrepgrepgrepgrepgrepgrepgsettingsgrepgrepgrepgrepgrepdescription ioc process File opened for reading /proc/sys/kernel/seccomp/actions_avail firefox File opened for reading /proc/2847/cgroup firefox File opened for reading /proc/self/fd/13 snap-confine File opened for reading /proc/filesystems gsettings File opened for reading /proc/self/maps grep File opened for reading /proc/self/maps grep File opened for reading /proc/filesystems gsettings File opened for reading /proc/filesystems sed File opened for reading /proc/self/maps grep File opened for reading /proc/filesystems sed File opened for reading /proc/filesystems sed File opened for reading /proc/self/maps grep File opened for reading /proc/filesystems gsettings File opened for reading /proc/sys/kernel/seccomp/actions_avail firefox File opened for reading /proc/self/maps grep File opened for reading /proc/self/maps grep File opened for reading /proc/self/maps grep File opened for reading /proc/sys/kernel/random/uuid firefox File opened for reading /proc/mounts snap-confine File opened for reading /proc/self/maps grep File opened for reading /proc/filesystems sed File opened for reading /proc/self/maps grep File opened for reading /proc/1/ns/mnt snap-confine File opened for reading /proc/self/mountinfo snap-confine File opened for reading /proc/self/fd/12 snap-confine File opened for reading /proc/self/maps grep File opened for reading /proc/self/maps grep File opened for reading /proc/self/maps grep File opened for reading /proc/self/maps grep File opened for reading /proc/self/fd/10 snap-confine File opened for reading /proc/self/maps grep File opened for reading /proc/self/maps grep File opened for reading /proc/self/maps grep File opened for reading /proc/self/fd/11 snap-confine File opened for reading /proc/self/maps grep File opened for reading /proc/self/mountinfo firefox File opened for reading /proc/filesystems sed File opened for reading /proc/self/maps grep File opened for reading /proc/self/maps grep File opened for reading /proc/sys/kernel/random/uuid firefox File opened for reading /proc/self/maps grep File opened for reading /proc/self/maps grep File opened for reading /proc/2847/attr/apparmor/current snap-confine File opened for reading /proc/self/maps grep File opened for reading /proc/cmdline firefox File opened for reading /proc/self/maps grep File opened for reading /proc/self/maps grep File opened for reading /proc/self/maps grep File opened for reading /proc/self/maps grep File opened for reading /proc/self/maps grep File opened for reading /proc/self/maps grep File opened for reading /proc/self/maps grep File opened for reading /proc/self/maps grep File opened for reading /proc/self/maps grep File opened for reading /proc/cgroups firefox File opened for reading /proc/self/maps grep File opened for reading /proc/self/maps grep File opened for reading /proc/self/maps grep File opened for reading /proc/filesystems gsettings File opened for reading /proc/self/maps grep File opened for reading /proc/self/maps grep File opened for reading /proc/self/maps grep File opened for reading /proc/self/maps grep File opened for reading /proc/self/maps grep
Processes
-
/usr/bin/xdg-openxdg-open https://tii.la/Mega_Drop_11⤵PID:2766
-
/usr/bin/dbus-senddbus-send --print-reply "--dest=org.freedesktop.DBus" /org/freedesktop/DBus org.freedesktop.DBus.GetNameOwner string:org.gnome.SessionManager2⤵PID:2767
-
-
/usr/bin/xpropxprop -root _DT_SAVE_MODE2⤵PID:2773
-
-
/usr/bin/grepgrep " = \\\"xfce4\\\"\$"2⤵
- Reads runtime system information
PID:2774
-
-
/usr/bin/xpropxprop -root2⤵PID:2775
-
-
/usr/bin/grepgrep -i "^xfce_desktop_window"2⤵PID:2776
-
-
/usr/bin/grepgrep -q "^Enlightenment"2⤵
- Reads runtime system information
PID:2778
-
-
/usr/bin/unameuname2⤵PID:2779
-
-
/usr/bin/grepgrep -q "^file://"2⤵PID:2781
-
-
/usr/bin/egrepegrep -q "^[[:alpha:]+\\.\\-]+:"2⤵PID:2783
-
-
/usr/local/sbin/grepgrep -E -q "^[[:alpha:]+\\.\\-]+:"2⤵PID:2783
-
-
/usr/local/bin/grepgrep -E -q "^[[:alpha:]+\\.\\-]+:"2⤵PID:2783
-
-
/usr/sbin/grepgrep -E -q "^[[:alpha:]+\\.\\-]+:"2⤵PID:2783
-
-
/usr/bin/grepgrep -E -q "^[[:alpha:]+\\.\\-]+:"2⤵
- Reads runtime system information
PID:2783
-
-
/usr/bin/sedsed -n "s/\\(^[[:alnum:]+\\.-]*\\):.*\$/\\1/p"2⤵
- Reads runtime system information
PID:2786
-
-
/usr/bin/xdg-mimexdg-mime query default x-scheme-handler/https2⤵PID:2787
-
/usr/bin/dbus-senddbus-send --print-reply "--dest=org.freedesktop.DBus" /org/freedesktop/DBus org.freedesktop.DBus.GetNameOwner string:org.gnome.SessionManager3⤵PID:2788
-
-
/usr/bin/xpropxprop -root _DT_SAVE_MODE3⤵PID:2793
-
-
/usr/bin/grepgrep " = \\\"xfce4\\\"\$"3⤵
- Reads runtime system information
PID:2794
-
-
/usr/bin/grepgrep -i "^xfce_desktop_window"3⤵
- Reads runtime system information
PID:2796
-
-
/usr/bin/xpropxprop -root3⤵PID:2795
-
-
/usr/bin/grepgrep -q "^Enlightenment"3⤵
- Reads runtime system information
PID:2798
-
-
/usr/bin/unameuname3⤵PID:2799
-
-
/usr/bin/sedsed "s/:/ /g"3⤵
- Reads runtime system information
PID:2802
-
-
/usr/bin/grepgrep "x-scheme-handler/https=" /.local/share/applications/defaults.list /.local/share/applications/mimeinfo.cache3⤵
- Reads runtime system information
PID:2804
-
-
/usr/bin/headhead -n 13⤵PID:2805
-
-
/usr/bin/cutcut -d "=" -f 23⤵PID:2806
-
-
/usr/bin/cutcut -d ";" -f 13⤵PID:2807
-
-
/usr/bin/grepgrep "x-scheme-handler/https=" /.local/share/applications/defaults.list /.local/share/applications/mimeinfo.cache3⤵
- Reads runtime system information
PID:2809
-
-
/usr/bin/headhead -n 13⤵PID:2810
-
-
/usr/bin/cutcut -d "=" -f 23⤵PID:2811
-
-
/usr/bin/cutcut -d ";" -f 13⤵PID:2812
-
-
/usr/bin/grepgrep "x-scheme-handler/https=" /usr/local/share//applications/defaults.list /usr/local/share//applications/mimeinfo.cache3⤵
- Reads runtime system information
PID:2814
-
-
/usr/bin/headhead -n 13⤵PID:2815
-
-
/usr/bin/cutcut -d "=" -f 23⤵PID:2816
-
-
/usr/bin/cutcut -d ";" -f 13⤵PID:2817
-
-
/usr/bin/grepgrep "x-scheme-handler/https=" /usr/local/share//applications/defaults.list /usr/local/share//applications/mimeinfo.cache3⤵
- Reads runtime system information
PID:2819
-
-
/usr/bin/headhead -n 13⤵PID:2820
-
-
/usr/bin/cutcut -d "=" -f 23⤵PID:2821
-
-
/usr/bin/cutcut -d ";" -f 13⤵PID:2822
-
-
/usr/bin/grepgrep "x-scheme-handler/https=" /usr/share//applications/defaults.list /usr/share//applications/mimeinfo.cache3⤵
- Reads runtime system information
PID:2824
-
-
/usr/bin/headhead -n 13⤵PID:2825
-
-
/usr/bin/cutcut -d "=" -f 23⤵PID:2826
-
-
/usr/bin/cutcut -d ";" -f 13⤵PID:2827
-
-
/usr/bin/grepgrep "x-scheme-handler/https=" /usr/share//applications/defaults.list /usr/share//applications/mimeinfo.cache3⤵PID:2829
-
-
/usr/bin/headhead -n 13⤵PID:2830
-
-
/usr/bin/cutcut -d ";" -f 13⤵PID:2832
-
-
/usr/bin/cutcut -d "=" -f 23⤵PID:2831
-
-
/usr/bin/sedsed "s/:/ /g"3⤵PID:2836
-
-
/usr/bin/grepgrep -l "x-scheme-handler/https;" "/.local/share/applications/*.desktop"3⤵PID:2838
-
-
/usr/bin/grepgrep -l "x-scheme-handler/https;" "/usr/local/share//applications/*.desktop"3⤵
- Reads runtime system information
PID:2842
-
-
/usr/bin/grepgrep -l "x-scheme-handler/https;" /usr/share//applications/apport-gtk.desktop /usr/share//applications/bluetooth-sendto.desktop /usr/share//applications/display-im6.q16.desktop /usr/share//applications/gcr-prompter.desktop /usr/share//applications/gcr-viewer.desktop /usr/share//applications/geoclue-demo-agent.desktop /usr/share//applications/gkbd-keyboard-display.desktop /usr/share//applications/gnome-about-panel.desktop /usr/share//applications/gnome-applications-panel.desktop /usr/share//applications/gnome-background-panel.desktop /usr/share//applications/gnome-bluetooth-panel.desktop /usr/share//applications/gnome-color-panel.desktop /usr/share//applications/gnome-datetime-panel.desktop /usr/share//applications/gnome-disk-image-mounter.desktop /usr/share//applications/gnome-disk-image-writer.desktop /usr/share//applications/gnome-display-panel.desktop /usr/share//applications/gnome-initial-setup.desktop /usr/share//applications/gnome-keyboard-panel.desktop /usr/share//applications/gnome-language-selector.desktop /usr/share//applications/gnome-mouse-panel.desktop /usr/share//applications/gnome-multitasking-panel.desktop /usr/share//applications/gnome-network-panel.desktop /usr/share//applications/gnome-notifications-panel.desktop /usr/share//applications/gnome-online-accounts-panel.desktop /usr/share//applications/gnome-power-panel.desktop /usr/share//applications/gnome-printers-panel.desktop /usr/share//applications/gnome-privacy-panel.desktop /usr/share//applications/gnome-region-panel.desktop /usr/share//applications/gnome-search-panel.desktop /usr/share//applications/gnome-session-properties.desktop /usr/share//applications/gnome-sharing-panel.desktop /usr/share//applications/gnome-sound-panel.desktop /usr/share//applications/gnome-system-monitor-kde.desktop /usr/share//applications/gnome-system-panel.desktop /usr/share//applications/gnome-ubuntu-panel.desktop /usr/share//applications/gnome-universal-access-panel.desktop /usr/share//applications/gnome-users-panel.desktop /usr/share//applications/gnome-wacom-panel.desktop /usr/share//applications/gnome-wifi-panel.desktop /usr/share//applications/gnome-wwan-panel.desktop /usr/share//applications/hplj1020.desktop /usr/share//applications/ibus-setup-table.desktop /usr/share//applications/im-config.desktop /usr/share//applications/io.snapcraft.SessionAgent.desktop /usr/share//applications/libreoffice-calc.desktop /usr/share//applications/libreoffice-draw.desktop /usr/share//applications/libreoffice-impress.desktop /usr/share//applications/libreoffice-math.desktop /usr/share//applications/libreoffice-startcenter.desktop /usr/share//applications/libreoffice-writer.desktop /usr/share//applications/libreoffice-xsltfilter.desktop /usr/share//applications/nautilus-autorun-software.desktop /usr/share//applications/nm-applet.desktop /usr/share//applications/nm-connection-editor.desktop /usr/share//applications/org.freedesktop.IBus.Panel.Emojier.desktop /usr/share//applications/org.freedesktop.IBus.Panel.Extension.Gtk3.desktop /usr/share//applications/org.freedesktop.IBus.Panel.Wayland.Gtk3.desktop /usr/share//applications/org.freedesktop.IBus.Setup.desktop /usr/share//applications/org.freedesktop.Xwayland.desktop /usr/share//applications/org.gnome.Calculator.desktop /usr/share//applications/org.gnome.Calendar.desktop /usr/share//applications/org.gnome.Characters.desktop /usr/share//applications/org.gnome.DejaDup.desktop /usr/share//applications/org.gnome.DiskUtility.desktop /usr/share//applications/org.gnome.Evince-previewer.desktop /usr/share//applications/org.gnome.Evince.desktop /usr/share//applications/org.gnome.Evolution-alarm-notify.desktop /usr/share//applications/org.gnome.FileRoller.desktop /usr/share//applications/org.gnome.Logs.desktop /usr/share//applications/org.gnome.Nautilus.desktop /usr/share//applications/org.gnome.OnlineAccounts.OAuth2.desktop /usr/share//applications/org.gnome.PowerStats.desktop /usr/share//applications/org.gnome.RemoteDesktop.Handover.desktop /usr/share//applications/org.gnome.Rhythmbox3.desktop /usr/share//applications/org.gnome.Rhythmbox3.device.desktop /usr/share//applications/org.gnome.Settings.desktop /usr/share//applications/org.gnome.Shell.Extensions.desktop /usr/share//applications/org.gnome.Shell.PortalHelper.desktop /usr/share//applications/org.gnome.Shell.desktop /usr/share//applications/org.gnome.Shotwell-Viewer.desktop /usr/share//applications/org.gnome.Shotwell.Auth.desktop /usr/share//applications/org.gnome.Shotwell.desktop /usr/share//applications/org.gnome.Snapshot.desktop /usr/share//applications/org.gnome.SystemMonitor.desktop /usr/share//applications/org.gnome.Tecla.desktop /usr/share//applications/org.gnome.Terminal.Preferences.desktop /usr/share//applications/org.gnome.Terminal.desktop /usr/share//applications/org.gnome.TextEditor.desktop /usr/share//applications/org.gnome.Totem.desktop /usr/share//applications/org.gnome.Zenity.desktop /usr/share//applications/org.gnome.baobab.desktop /usr/share//applications/org.gnome.clocks.desktop /usr/share//applications/org.gnome.eog.desktop /usr/share//applications/org.gnome.evolution-data-server.OAuth2-handler.desktop /usr/share//applications/org.gnome.font-viewer.desktop /usr/share//applications/org.gnome.seahorse.Application.desktop /usr/share//applications/org.remmina.Remmina-file.desktop /usr/share//applications/org.remmina.Remmina.desktop /usr/share//applications/python3.12.desktop /usr/share//applications/remmina-gnome.desktop /usr/share//applications/rygel.desktop /usr/share//applications/simple-scan.desktop /usr/share//applications/snap-handle-link.desktop /usr/share//applications/software-properties-drivers.desktop /usr/share//applications/software-properties-gtk.desktop /usr/share//applications/software-properties-livepatch.desktop /usr/share//applications/thunderbird.desktop /usr/share//applications/transmission-gtk.desktop /usr/share//applications/update-manager.desktop /usr/share//applications/usb-creator-gtk.desktop /usr/share//applications/xdg-desktop-portal-gnome.desktop /usr/share//applications/xdg-desktop-portal-gtk.desktop /usr/share//applications/yelp.desktop3⤵
- Reads runtime system information
PID:2844
-
-
-
/usr/bin/grepgrep -q "%s"2⤵PID:2846
-
-
/usr/bin/x-www-browserx-www-browser https://tii.la/Mega_Drop_12⤵PID:2847
-
/usr/bin/xdg-settingsxdg-settings get default-web-browser3⤵PID:2848
-
/usr/bin/dbus-senddbus-send --print-reply "--dest=org.freedesktop.DBus" /org/freedesktop/DBus org.freedesktop.DBus.GetNameOwner string:org.gnome.SessionManager4⤵PID:2849
-
-
/usr/bin/xpropxprop -root _DT_SAVE_MODE4⤵PID:2854
-
-
/usr/bin/grepgrep " = \\\"xfce4\\\"\$"4⤵
- Reads runtime system information
PID:2855
-
-
/usr/bin/xpropxprop -root4⤵PID:2856
-
-
/usr/bin/grepgrep -i "^xfce_desktop_window"4⤵
- Reads runtime system information
PID:2857
-
-
/usr/bin/grepgrep -q "^Enlightenment"4⤵
- Reads runtime system information
PID:2859
-
-
/usr/bin/unameuname4⤵PID:2860
-
-
/usr/bin/xdg-mimexdg-mime query default x-scheme-handler/http4⤵PID:2861
-
/usr/bin/dbus-senddbus-send --print-reply "--dest=org.freedesktop.DBus" /org/freedesktop/DBus org.freedesktop.DBus.GetNameOwner string:org.gnome.SessionManager5⤵PID:2862
-
-
/usr/bin/xpropxprop -root _DT_SAVE_MODE5⤵PID:2867
-
-
/usr/bin/grepgrep " = \\\"xfce4\\\"\$"5⤵
- Reads runtime system information
PID:2868
-
-
/usr/bin/xpropxprop -root5⤵PID:2869
-
-
/usr/bin/grepgrep -i "^xfce_desktop_window"5⤵PID:2870
-
-
/usr/bin/grepgrep -q "^Enlightenment"5⤵PID:2872
-
-
/usr/bin/unameuname5⤵PID:2873
-
-
/usr/bin/sedsed "s/:/ /g"5⤵
- Reads runtime system information
PID:2876
-
-
/usr/bin/grepgrep "x-scheme-handler/http=" /.local/share/applications/defaults.list /.local/share/applications/mimeinfo.cache5⤵
- Reads runtime system information
PID:2878
-
-
/usr/bin/headhead -n 15⤵PID:2879
-
-
/usr/bin/cutcut -d "=" -f 25⤵PID:2880
-
-
/usr/bin/cutcut -d ";" -f 15⤵PID:2881
-
-
/usr/bin/grepgrep "x-scheme-handler/http=" /.local/share/applications/defaults.list /.local/share/applications/mimeinfo.cache5⤵PID:2883
-
-
/usr/bin/headhead -n 15⤵PID:2884
-
-
/usr/bin/cutcut -d "=" -f 25⤵PID:2885
-
-
/usr/bin/cutcut -d ";" -f 15⤵PID:2886
-
-
/usr/bin/grepgrep "x-scheme-handler/http=" /usr/local/share//applications/defaults.list /usr/local/share//applications/mimeinfo.cache5⤵
- Reads runtime system information
PID:2888
-
-
/usr/bin/headhead -n 15⤵PID:2889
-
-
/usr/bin/cutcut -d "=" -f 25⤵PID:2890
-
-
/usr/bin/cutcut -d ";" -f 15⤵PID:2891
-
-
/usr/bin/grepgrep "x-scheme-handler/http=" /usr/local/share//applications/defaults.list /usr/local/share//applications/mimeinfo.cache5⤵
- Reads runtime system information
PID:2893
-
-
/usr/bin/headhead -n 15⤵PID:2894
-
-
/usr/bin/cutcut -d "=" -f 25⤵PID:2895
-
-
/usr/bin/cutcut -d ";" -f 15⤵PID:2896
-
-
/usr/bin/grepgrep "x-scheme-handler/http=" /usr/share//applications/defaults.list /usr/share//applications/mimeinfo.cache5⤵
- Reads runtime system information
PID:2898
-
-
/usr/bin/headhead -n 15⤵PID:2899
-
-
/usr/bin/cutcut -d "=" -f 25⤵PID:2900
-
-
/usr/bin/cutcut -d ";" -f 15⤵PID:2901
-
-
/usr/bin/headhead -n 15⤵PID:2904
-
-
/usr/bin/grepgrep "x-scheme-handler/http=" /usr/share//applications/defaults.list /usr/share//applications/mimeinfo.cache5⤵
- Reads runtime system information
PID:2903
-
-
/usr/bin/cutcut -d "=" -f 25⤵PID:2905
-
-
/usr/bin/cutcut -d ";" -f 15⤵PID:2906
-
-
/usr/bin/sedsed "s/:/ /g"5⤵
- Reads runtime system information
PID:2909
-
-
/usr/bin/grepgrep -l "x-scheme-handler/http;" "/.local/share/applications/*.desktop"5⤵
- Reads runtime system information
PID:2911
-
-
/usr/bin/grepgrep -l "x-scheme-handler/http;" "/usr/local/share//applications/*.desktop"5⤵
- Reads runtime system information
PID:2913
-
-
/usr/bin/grepgrep -l "x-scheme-handler/http;" /usr/share//applications/apport-gtk.desktop /usr/share//applications/bluetooth-sendto.desktop /usr/share//applications/display-im6.q16.desktop /usr/share//applications/gcr-prompter.desktop /usr/share//applications/gcr-viewer.desktop /usr/share//applications/geoclue-demo-agent.desktop /usr/share//applications/gkbd-keyboard-display.desktop /usr/share//applications/gnome-about-panel.desktop /usr/share//applications/gnome-applications-panel.desktop /usr/share//applications/gnome-background-panel.desktop /usr/share//applications/gnome-bluetooth-panel.desktop /usr/share//applications/gnome-color-panel.desktop /usr/share//applications/gnome-datetime-panel.desktop /usr/share//applications/gnome-disk-image-mounter.desktop /usr/share//applications/gnome-disk-image-writer.desktop /usr/share//applications/gnome-display-panel.desktop /usr/share//applications/gnome-initial-setup.desktop /usr/share//applications/gnome-keyboard-panel.desktop /usr/share//applications/gnome-language-selector.desktop /usr/share//applications/gnome-mouse-panel.desktop /usr/share//applications/gnome-multitasking-panel.desktop /usr/share//applications/gnome-network-panel.desktop /usr/share//applications/gnome-notifications-panel.desktop /usr/share//applications/gnome-online-accounts-panel.desktop /usr/share//applications/gnome-power-panel.desktop /usr/share//applications/gnome-printers-panel.desktop /usr/share//applications/gnome-privacy-panel.desktop /usr/share//applications/gnome-region-panel.desktop /usr/share//applications/gnome-search-panel.desktop /usr/share//applications/gnome-session-properties.desktop /usr/share//applications/gnome-sharing-panel.desktop /usr/share//applications/gnome-sound-panel.desktop /usr/share//applications/gnome-system-monitor-kde.desktop /usr/share//applications/gnome-system-panel.desktop /usr/share//applications/gnome-ubuntu-panel.desktop /usr/share//applications/gnome-universal-access-panel.desktop /usr/share//applications/gnome-users-panel.desktop /usr/share//applications/gnome-wacom-panel.desktop /usr/share//applications/gnome-wifi-panel.desktop /usr/share//applications/gnome-wwan-panel.desktop /usr/share//applications/hplj1020.desktop /usr/share//applications/ibus-setup-table.desktop /usr/share//applications/im-config.desktop /usr/share//applications/io.snapcraft.SessionAgent.desktop /usr/share//applications/libreoffice-calc.desktop /usr/share//applications/libreoffice-draw.desktop /usr/share//applications/libreoffice-impress.desktop /usr/share//applications/libreoffice-math.desktop /usr/share//applications/libreoffice-startcenter.desktop /usr/share//applications/libreoffice-writer.desktop /usr/share//applications/libreoffice-xsltfilter.desktop /usr/share//applications/nautilus-autorun-software.desktop /usr/share//applications/nm-applet.desktop /usr/share//applications/nm-connection-editor.desktop /usr/share//applications/org.freedesktop.IBus.Panel.Emojier.desktop /usr/share//applications/org.freedesktop.IBus.Panel.Extension.Gtk3.desktop /usr/share//applications/org.freedesktop.IBus.Panel.Wayland.Gtk3.desktop /usr/share//applications/org.freedesktop.IBus.Setup.desktop /usr/share//applications/org.freedesktop.Xwayland.desktop /usr/share//applications/org.gnome.Calculator.desktop /usr/share//applications/org.gnome.Calendar.desktop /usr/share//applications/org.gnome.Characters.desktop /usr/share//applications/org.gnome.DejaDup.desktop /usr/share//applications/org.gnome.DiskUtility.desktop /usr/share//applications/org.gnome.Evince-previewer.desktop /usr/share//applications/org.gnome.Evince.desktop /usr/share//applications/org.gnome.Evolution-alarm-notify.desktop /usr/share//applications/org.gnome.FileRoller.desktop /usr/share//applications/org.gnome.Logs.desktop /usr/share//applications/org.gnome.Nautilus.desktop /usr/share//applications/org.gnome.OnlineAccounts.OAuth2.desktop /usr/share//applications/org.gnome.PowerStats.desktop /usr/share//applications/org.gnome.RemoteDesktop.Handover.desktop /usr/share//applications/org.gnome.Rhythmbox3.desktop /usr/share//applications/org.gnome.Rhythmbox3.device.desktop /usr/share//applications/org.gnome.Settings.desktop /usr/share//applications/org.gnome.Shell.Extensions.desktop /usr/share//applications/org.gnome.Shell.PortalHelper.desktop /usr/share//applications/org.gnome.Shell.desktop /usr/share//applications/org.gnome.Shotwell-Viewer.desktop /usr/share//applications/org.gnome.Shotwell.Auth.desktop /usr/share//applications/org.gnome.Shotwell.desktop /usr/share//applications/org.gnome.Snapshot.desktop /usr/share//applications/org.gnome.SystemMonitor.desktop /usr/share//applications/org.gnome.Tecla.desktop /usr/share//applications/org.gnome.Terminal.Preferences.desktop /usr/share//applications/org.gnome.Terminal.desktop /usr/share//applications/org.gnome.TextEditor.desktop /usr/share//applications/org.gnome.Totem.desktop /usr/share//applications/org.gnome.Zenity.desktop /usr/share//applications/org.gnome.baobab.desktop /usr/share//applications/org.gnome.clocks.desktop /usr/share//applications/org.gnome.eog.desktop /usr/share//applications/org.gnome.evolution-data-server.OAuth2-handler.desktop /usr/share//applications/org.gnome.font-viewer.desktop /usr/share//applications/org.gnome.seahorse.Application.desktop /usr/share//applications/org.remmina.Remmina-file.desktop /usr/share//applications/org.remmina.Remmina.desktop /usr/share//applications/python3.12.desktop /usr/share//applications/remmina-gnome.desktop /usr/share//applications/rygel.desktop /usr/share//applications/simple-scan.desktop /usr/share//applications/snap-handle-link.desktop /usr/share//applications/software-properties-drivers.desktop /usr/share//applications/software-properties-gtk.desktop /usr/share//applications/software-properties-livepatch.desktop /usr/share//applications/thunderbird.desktop /usr/share//applications/transmission-gtk.desktop /usr/share//applications/update-manager.desktop /usr/share//applications/usb-creator-gtk.desktop /usr/share//applications/xdg-desktop-portal-gnome.desktop /usr/share//applications/xdg-desktop-portal-gtk.desktop /usr/share//applications/yelp.desktop5⤵
- Reads runtime system information
PID:2915
-
-
-
-
/usr/bin/gsettingsgsettings get org.gnome.shell favorite-apps3⤵
- Reads runtime system information
PID:2916
-
-
/usr/bin/grepgrep -q "'firefox.desktop'"3⤵
- Reads runtime system information
PID:2921
-
-
/usr/bin/gsettingsgsettings get com.canonical.Unity.Launcher favorites3⤵
- Reads runtime system information
PID:2922
-
-
/usr/bin/grepgrep -q "'application://firefox.desktop'"3⤵
- Reads runtime system information
PID:2924
-
-
/usr/bin/gsettingsgsettings get org.mate.panel object-id-list3⤵PID:2925
-
-
/usr/bin/whichwhich qdbus3⤵PID:2926
-
-
-
/snap/bin/firefox/snap/bin/firefox https://tii.la/Mega_Drop_12⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:2847 -
/usr/lib/snapd/snap-seccomp/usr/lib/snapd/snap-seccomp version-info3⤵
- Enumerates kernel/hardware configuration
PID:2930
-
-
-
/usr/lib/snapd/snap-confine/usr/lib/snapd/snap-confine --base core22 snap.firefox.firefox /usr/lib/snapd/snap-exec firefox https://tii.la/Mega_Drop_12⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:2847
-
-
/usr/bin/grepgrep -q "%s"2⤵
- Reads runtime system information
PID:2943
-
-
/usr/bin/firefoxfirefox https://tii.la/Mega_Drop_12⤵PID:2944
-
/usr/bin/xdg-settingsxdg-settings get default-web-browser3⤵PID:2945
-
/usr/bin/dbus-senddbus-send --print-reply "--dest=org.freedesktop.DBus" /org/freedesktop/DBus org.freedesktop.DBus.GetNameOwner string:org.gnome.SessionManager4⤵PID:2946
-
-
/usr/bin/xpropxprop -root _DT_SAVE_MODE4⤵PID:2951
-
-
/usr/bin/grepgrep " = \\\"xfce4\\\"\$"4⤵
- Reads runtime system information
PID:2952
-
-
/usr/bin/xpropxprop -root4⤵PID:2953
-
-
/usr/bin/grepgrep -i "^xfce_desktop_window"4⤵
- Reads runtime system information
PID:2954
-
-
/usr/bin/grepgrep -q "^Enlightenment"4⤵
- Reads runtime system information
PID:2956
-
-
/usr/bin/unameuname4⤵PID:2957
-
-
/usr/bin/xdg-mimexdg-mime query default x-scheme-handler/http4⤵PID:2958
-
/usr/bin/dbus-senddbus-send --print-reply "--dest=org.freedesktop.DBus" /org/freedesktop/DBus org.freedesktop.DBus.GetNameOwner string:org.gnome.SessionManager5⤵PID:2959
-
-
/usr/bin/xpropxprop -root _DT_SAVE_MODE5⤵PID:2964
-
-
/usr/bin/grepgrep " = \\\"xfce4\\\"\$"5⤵
- Reads runtime system information
PID:2965
-
-
/usr/bin/xpropxprop -root5⤵PID:2966
-
-
/usr/bin/grepgrep -i "^xfce_desktop_window"5⤵
- Reads runtime system information
PID:2967
-
-
/usr/bin/grepgrep -q "^Enlightenment"5⤵
- Reads runtime system information
PID:2969
-
-
/usr/bin/unameuname5⤵PID:2970
-
-
/usr/bin/sedsed "s/:/ /g"5⤵
- Reads runtime system information
PID:2973
-
-
/usr/bin/grepgrep "x-scheme-handler/http=" /.local/share/applications/defaults.list /.local/share/applications/mimeinfo.cache5⤵PID:2975
-
-
/usr/bin/headhead -n 15⤵PID:2976
-
-
/usr/bin/cutcut -d "=" -f 25⤵PID:2977
-
-
/usr/bin/cutcut -d ";" -f 15⤵PID:2978
-
-
/usr/bin/grepgrep "x-scheme-handler/http=" /.local/share/applications/defaults.list /.local/share/applications/mimeinfo.cache5⤵PID:2980
-
-
/usr/bin/headhead -n 15⤵PID:2981
-
-
/usr/bin/cutcut -d "=" -f 25⤵PID:2982
-
-
/usr/bin/cutcut -d ";" -f 15⤵PID:2983
-
-
/usr/bin/grepgrep "x-scheme-handler/http=" /usr/local/share//applications/defaults.list /usr/local/share//applications/mimeinfo.cache5⤵
- Reads runtime system information
PID:2985
-
-
/usr/bin/headhead -n 15⤵PID:2986
-
-
/usr/bin/cutcut -d "=" -f 25⤵PID:2987
-
-
/usr/bin/cutcut -d ";" -f 15⤵PID:2988
-
-
/usr/bin/grepgrep "x-scheme-handler/http=" /usr/local/share//applications/defaults.list /usr/local/share//applications/mimeinfo.cache5⤵
- Reads runtime system information
PID:2990
-
-
/usr/bin/headhead -n 15⤵PID:2991
-
-
/usr/bin/cutcut -d "=" -f 25⤵PID:2992
-
-
/usr/bin/cutcut -d ";" -f 15⤵PID:2993
-
-
/usr/bin/grepgrep "x-scheme-handler/http=" /usr/share//applications/defaults.list /usr/share//applications/mimeinfo.cache5⤵
- Reads runtime system information
PID:2995
-
-
/usr/bin/headhead -n 15⤵PID:2996
-
-
/usr/bin/cutcut -d "=" -f 25⤵PID:2997
-
-
/usr/bin/cutcut -d ";" -f 15⤵PID:2998
-
-
/usr/bin/grepgrep "x-scheme-handler/http=" /usr/share//applications/defaults.list /usr/share//applications/mimeinfo.cache5⤵
- Reads runtime system information
PID:3000
-
-
/usr/bin/headhead -n 15⤵PID:3001
-
-
/usr/bin/cutcut -d "=" -f 25⤵PID:3002
-
-
/usr/bin/cutcut -d ";" -f 15⤵PID:3003
-
-
/usr/bin/sedsed "s/:/ /g"5⤵PID:3006
-
-
/usr/bin/grepgrep -l "x-scheme-handler/http;" "/.local/share/applications/*.desktop"5⤵PID:3008
-
-
/usr/bin/grepgrep -l "x-scheme-handler/http;" "/usr/local/share//applications/*.desktop"5⤵
- Reads runtime system information
PID:3010
-
-
/usr/bin/grepgrep -l "x-scheme-handler/http;" /usr/share//applications/apport-gtk.desktop /usr/share//applications/bluetooth-sendto.desktop /usr/share//applications/display-im6.q16.desktop /usr/share//applications/gcr-prompter.desktop /usr/share//applications/gcr-viewer.desktop /usr/share//applications/geoclue-demo-agent.desktop /usr/share//applications/gkbd-keyboard-display.desktop /usr/share//applications/gnome-about-panel.desktop /usr/share//applications/gnome-applications-panel.desktop /usr/share//applications/gnome-background-panel.desktop /usr/share//applications/gnome-bluetooth-panel.desktop /usr/share//applications/gnome-color-panel.desktop /usr/share//applications/gnome-datetime-panel.desktop /usr/share//applications/gnome-disk-image-mounter.desktop /usr/share//applications/gnome-disk-image-writer.desktop /usr/share//applications/gnome-display-panel.desktop /usr/share//applications/gnome-initial-setup.desktop /usr/share//applications/gnome-keyboard-panel.desktop /usr/share//applications/gnome-language-selector.desktop /usr/share//applications/gnome-mouse-panel.desktop /usr/share//applications/gnome-multitasking-panel.desktop /usr/share//applications/gnome-network-panel.desktop /usr/share//applications/gnome-notifications-panel.desktop /usr/share//applications/gnome-online-accounts-panel.desktop /usr/share//applications/gnome-power-panel.desktop /usr/share//applications/gnome-printers-panel.desktop /usr/share//applications/gnome-privacy-panel.desktop /usr/share//applications/gnome-region-panel.desktop /usr/share//applications/gnome-search-panel.desktop /usr/share//applications/gnome-session-properties.desktop /usr/share//applications/gnome-sharing-panel.desktop /usr/share//applications/gnome-sound-panel.desktop /usr/share//applications/gnome-system-monitor-kde.desktop /usr/share//applications/gnome-system-panel.desktop /usr/share//applications/gnome-ubuntu-panel.desktop /usr/share//applications/gnome-universal-access-panel.desktop /usr/share//applications/gnome-users-panel.desktop /usr/share//applications/gnome-wacom-panel.desktop /usr/share//applications/gnome-wifi-panel.desktop /usr/share//applications/gnome-wwan-panel.desktop /usr/share//applications/hplj1020.desktop /usr/share//applications/ibus-setup-table.desktop /usr/share//applications/im-config.desktop /usr/share//applications/io.snapcraft.SessionAgent.desktop /usr/share//applications/libreoffice-calc.desktop /usr/share//applications/libreoffice-draw.desktop /usr/share//applications/libreoffice-impress.desktop /usr/share//applications/libreoffice-math.desktop /usr/share//applications/libreoffice-startcenter.desktop /usr/share//applications/libreoffice-writer.desktop /usr/share//applications/libreoffice-xsltfilter.desktop /usr/share//applications/nautilus-autorun-software.desktop /usr/share//applications/nm-applet.desktop /usr/share//applications/nm-connection-editor.desktop /usr/share//applications/org.freedesktop.IBus.Panel.Emojier.desktop /usr/share//applications/org.freedesktop.IBus.Panel.Extension.Gtk3.desktop /usr/share//applications/org.freedesktop.IBus.Panel.Wayland.Gtk3.desktop /usr/share//applications/org.freedesktop.IBus.Setup.desktop /usr/share//applications/org.freedesktop.Xwayland.desktop /usr/share//applications/org.gnome.Calculator.desktop /usr/share//applications/org.gnome.Calendar.desktop /usr/share//applications/org.gnome.Characters.desktop /usr/share//applications/org.gnome.DejaDup.desktop /usr/share//applications/org.gnome.DiskUtility.desktop /usr/share//applications/org.gnome.Evince-previewer.desktop /usr/share//applications/org.gnome.Evince.desktop /usr/share//applications/org.gnome.Evolution-alarm-notify.desktop /usr/share//applications/org.gnome.FileRoller.desktop /usr/share//applications/org.gnome.Logs.desktop /usr/share//applications/org.gnome.Nautilus.desktop /usr/share//applications/org.gnome.OnlineAccounts.OAuth2.desktop /usr/share//applications/org.gnome.PowerStats.desktop /usr/share//applications/org.gnome.RemoteDesktop.Handover.desktop /usr/share//applications/org.gnome.Rhythmbox3.desktop /usr/share//applications/org.gnome.Rhythmbox3.device.desktop /usr/share//applications/org.gnome.Settings.desktop /usr/share//applications/org.gnome.Shell.Extensions.desktop /usr/share//applications/org.gnome.Shell.PortalHelper.desktop /usr/share//applications/org.gnome.Shell.desktop /usr/share//applications/org.gnome.Shotwell-Viewer.desktop /usr/share//applications/org.gnome.Shotwell.Auth.desktop /usr/share//applications/org.gnome.Shotwell.desktop /usr/share//applications/org.gnome.Snapshot.desktop /usr/share//applications/org.gnome.SystemMonitor.desktop /usr/share//applications/org.gnome.Tecla.desktop /usr/share//applications/org.gnome.Terminal.Preferences.desktop /usr/share//applications/org.gnome.Terminal.desktop /usr/share//applications/org.gnome.TextEditor.desktop /usr/share//applications/org.gnome.Totem.desktop /usr/share//applications/org.gnome.Zenity.desktop /usr/share//applications/org.gnome.baobab.desktop /usr/share//applications/org.gnome.clocks.desktop /usr/share//applications/org.gnome.eog.desktop /usr/share//applications/org.gnome.evolution-data-server.OAuth2-handler.desktop /usr/share//applications/org.gnome.font-viewer.desktop /usr/share//applications/org.gnome.seahorse.Application.desktop /usr/share//applications/org.remmina.Remmina-file.desktop /usr/share//applications/org.remmina.Remmina.desktop /usr/share//applications/python3.12.desktop /usr/share//applications/remmina-gnome.desktop /usr/share//applications/rygel.desktop /usr/share//applications/simple-scan.desktop /usr/share//applications/snap-handle-link.desktop /usr/share//applications/software-properties-drivers.desktop /usr/share//applications/software-properties-gtk.desktop /usr/share//applications/software-properties-livepatch.desktop /usr/share//applications/thunderbird.desktop /usr/share//applications/transmission-gtk.desktop /usr/share//applications/update-manager.desktop /usr/share//applications/usb-creator-gtk.desktop /usr/share//applications/xdg-desktop-portal-gnome.desktop /usr/share//applications/xdg-desktop-portal-gtk.desktop /usr/share//applications/yelp.desktop5⤵PID:3012
-
-
-
-
/usr/bin/gsettingsgsettings get org.gnome.shell favorite-apps3⤵PID:3013
-
-
/usr/bin/grepgrep -q "'firefox.desktop'"3⤵PID:3018
-
-
/usr/bin/gsettingsgsettings get com.canonical.Unity.Launcher favorites3⤵
- Reads runtime system information
PID:3019
-
-
/usr/bin/grepgrep -q "'application://firefox.desktop'"3⤵PID:3021
-
-
/usr/bin/gsettingsgsettings get org.mate.panel object-id-list3⤵
- Reads runtime system information
PID:3022
-
-
/usr/bin/whichwhich qdbus3⤵PID:3023
-
-
-
/snap/bin/firefox/snap/bin/firefox https://tii.la/Mega_Drop_12⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:2944 -
/usr/lib/snapd/snap-seccomp/usr/lib/snapd/snap-seccomp version-info3⤵
- Enumerates kernel/hardware configuration
PID:3027
-
-
-
/usr/lib/snapd/snap-confine/usr/lib/snapd/snap-confine --base core22 snap.firefox.firefox /usr/lib/snapd/snap-exec firefox https://tii.la/Mega_Drop_12⤵PID:3025
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
40B
MD565408163d77c5bbcc5b17dc2e313c93e
SHA1b8891c89ce55f6c1bbe476fd4912a7af296ce79a
SHA256d86e32b299b19c1c03a025d8d5ed026cdf923fc9a1015439cde134b3d13d1fff
SHA512394e2394e44e38210817f5f02779f7b8253c3ff1b4aa816bce7a0b95e40f47094d01cb43ec5e7ec593404f5ddf6fc49bb4175eece231a3cee7c5295e0d9349a7