Resubmissions

08/08/2026, 06:24

260808-g593qavyas6

08/08/2026, 06:17

260808-g158zavwgt6

08/08/2026, 06:12

260808-gyblks1fmf6

Analysis

  • user interaction
    yes
  • max time kernel
    149s
  • max time network
    144s
  • platform
    ubuntu-24.04_amd64
  • resource
    ubuntu2404-amd64-20260127-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2404-amd64-20260127-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
  • submitted
    08/08/2026, 06:24

General

  • Target
    https://github.com/Alex23-Flow1
  • Sample260808-g593qavyas
Score
6/10

Malware Config

Signatures

  • Checks hardware identifiers (DMI) 1 TTPs 1 IoCs

    Checks DMI information which indicate if the system is a virtual machine.

  • Reads hardware information 1 TTPs 1 IoCs

    Accesses system info like serial numbers, manufacturer names etc.

  • Changes its process name 64 IoCs
  • Checks CPU configuration 1 TTPs 1 IoCs

    Checks CPU information which indicate if the system is a virtual machine.

  • Reads CPU attributes 1 TTPs 10 IoCs
  • Enumerates kernel/hardware configuration 1 TTPs 41 IoCs

    Reads contents of /sys virtual filesystem to enumerate system information.

  • Reads runtime system information 64 IoCs

    Reads data from /proc virtual filesystem.

  • Writes file to tmp directory 8 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /usr/bin/xdg-open
    xdg-open https://github.com/Alex23-Flow1
    1⤵
      PID:2036
      • /usr/bin/dbus-send
        dbus-send --print-reply "--dest=org.freedesktop.DBus" /org/freedesktop/DBus org.freedesktop.DBus.GetNameOwner string:org.gnome.SessionManager
        2⤵
          PID:2038
          • /usr/bin/dbus-launch
            dbus-launch --autolaunch 36e6eb39a6fa405996e79cad2731865d --binary-syntax --close-stderr
            3⤵
            • Reads runtime system information
            PID:2039
            • /usr/bin/dbus-daemon
              /usr/bin/dbus-daemon --syslog-only --fork --print-pid 5 --print-address 7 --session
              4⤵
              • Enumerates kernel/hardware configuration
              • Reads runtime system information
              PID:2041
              • /usr/libexec/xdg-desktop-portal
                /usr/libexec/xdg-desktop-portal
                5⤵
                • Reads runtime system information
                PID:2192
              • /usr/libexec/at-spi-bus-launcher
                /usr/libexec/at-spi-bus-launcher
                5⤵
                • Reads runtime system information
                PID:2195
              • /usr/libexec/xdg-document-portal
                /usr/libexec/xdg-document-portal
                5⤵
                • Reads runtime system information
                PID:2210
                • /usr/bin/fusermount3
                  fusermount3 -o "rw,nosuid,nodev,fsname=portal,auto_unmount,subtype=portal" -- /root/.cache/doc
                  6⤵
                    PID:2224
                • /usr/libexec/xdg-permission-store
                  /usr/libexec/xdg-permission-store
                  5⤵
                  • Reads runtime system information
                  PID:2217
                • /usr/libexec/xdg-desktop-portal-gtk
                  /usr/libexec/xdg-desktop-portal-gtk
                  5⤵
                  • Reads runtime system information
                  PID:2229
                • /usr/libexec/gvfsd
                  /usr/libexec/gvfsd
                  5⤵
                  • Reads runtime system information
                  PID:2234
          • /usr/bin/grep
            grep " = \\\"xfce4\\\"\$"
            2⤵
              PID:2045
            • /usr/bin/xprop
              xprop -root _DT_SAVE_MODE
              2⤵
                PID:2044
              • /usr/bin/grep
                grep -i "^xfce_desktop_window"
                2⤵
                • Reads runtime system information
                PID:2047
              • /usr/bin/xprop
                xprop -root
                2⤵
                  PID:2046
                • /usr/bin/grep
                  grep -q "^Enlightenment"
                  2⤵
                  • Reads runtime system information
                  PID:2049
                • /usr/bin/uname
                  uname
                  2⤵
                    PID:2050
                  • /usr/bin/grep
                    grep -q "^file://"
                    2⤵
                    • Reads runtime system information
                    PID:2052
                  • /usr/bin/egrep
                    egrep -q "^[[:alpha:]+\\.\\-]+:"
                    2⤵
                      PID:2054
                    • /usr/local/sbin/grep
                      grep -E -q "^[[:alpha:]+\\.\\-]+:"
                      2⤵
                        PID:2054
                      • /usr/local/bin/grep
                        grep -E -q "^[[:alpha:]+\\.\\-]+:"
                        2⤵
                          PID:2054
                        • /usr/sbin/grep
                          grep -E -q "^[[:alpha:]+\\.\\-]+:"
                          2⤵
                            PID:2054
                          • /usr/bin/grep
                            grep -E -q "^[[:alpha:]+\\.\\-]+:"
                            2⤵
                            • Reads runtime system information
                            PID:2054
                          • /usr/bin/sed
                            sed -n "s/\\(^[[:alnum:]+\\.-]*\\):.*\$/\\1/p"
                            2⤵
                              PID:2057
                            • /usr/bin/xdg-mime
                              xdg-mime query default x-scheme-handler/https
                              2⤵
                                PID:2058
                                • /usr/bin/dbus-send
                                  dbus-send --print-reply "--dest=org.freedesktop.DBus" /org/freedesktop/DBus org.freedesktop.DBus.GetNameOwner string:org.gnome.SessionManager
                                  3⤵
                                  • Reads runtime system information
                                  PID:2059
                                  • /usr/bin/dbus-launch
                                    dbus-launch --autolaunch 36e6eb39a6fa405996e79cad2731865d --binary-syntax --close-stderr
                                    4⤵
                                      PID:2060
                                  • /usr/bin/grep
                                    grep " = \\\"xfce4\\\"\$"
                                    3⤵
                                    • Reads runtime system information
                                    PID:2062
                                  • /usr/bin/xprop
                                    xprop -root _DT_SAVE_MODE
                                    3⤵
                                      PID:2061
                                    • /usr/bin/xprop
                                      xprop -root
                                      3⤵
                                        PID:2063
                                      • /usr/bin/grep
                                        grep -i "^xfce_desktop_window"
                                        3⤵
                                        • Reads runtime system information
                                        PID:2064
                                      • /usr/bin/grep
                                        grep -q "^Enlightenment"
                                        3⤵
                                        • Reads runtime system information
                                        PID:2066
                                      • /usr/bin/uname
                                        uname
                                        3⤵
                                          PID:2067
                                        • /usr/bin/sed
                                          sed "s/:/ /g"
                                          3⤵
                                          • Reads runtime system information
                                          PID:2070
                                        • /usr/bin/grep
                                          grep "x-scheme-handler/https=" /.local/share/applications/defaults.list /.local/share/applications/mimeinfo.cache
                                          3⤵
                                          • Reads runtime system information
                                          PID:2072
                                        • /usr/bin/head
                                          head -n 1
                                          3⤵
                                            PID:2073
                                          • /usr/bin/cut
                                            cut -d "=" -f 2
                                            3⤵
                                              PID:2074
                                            • /usr/bin/cut
                                              cut -d ";" -f 1
                                              3⤵
                                                PID:2075
                                              • /usr/bin/head
                                                head -n 1
                                                3⤵
                                                  PID:2078
                                                • /usr/bin/grep
                                                  grep "x-scheme-handler/https=" /.local/share/applications/defaults.list /.local/share/applications/mimeinfo.cache
                                                  3⤵
                                                  • Reads runtime system information
                                                  PID:2077
                                                • /usr/bin/cut
                                                  cut -d ";" -f 1
                                                  3⤵
                                                    PID:2080
                                                  • /usr/bin/cut
                                                    cut -d "=" -f 2
                                                    3⤵
                                                      PID:2079
                                                    • /usr/bin/grep
                                                      grep "x-scheme-handler/https=" /usr/local/share//applications/defaults.list /usr/local/share//applications/mimeinfo.cache
                                                      3⤵
                                                      • Reads runtime system information
                                                      PID:2082
                                                    • /usr/bin/head
                                                      head -n 1
                                                      3⤵
                                                        PID:2083
                                                      • /usr/bin/cut
                                                        cut -d "=" -f 2
                                                        3⤵
                                                          PID:2084
                                                        • /usr/bin/cut
                                                          cut -d ";" -f 1
                                                          3⤵
                                                            PID:2085
                                                          • /usr/bin/grep
                                                            grep "x-scheme-handler/https=" /usr/local/share//applications/defaults.list /usr/local/share//applications/mimeinfo.cache
                                                            3⤵
                                                              PID:2087
                                                            • /usr/bin/head
                                                              head -n 1
                                                              3⤵
                                                                PID:2088
                                                              • /usr/bin/cut
                                                                cut -d "=" -f 2
                                                                3⤵
                                                                  PID:2089
                                                                • /usr/bin/cut
                                                                  cut -d ";" -f 1
                                                                  3⤵
                                                                    PID:2090
                                                                  • /usr/bin/grep
                                                                    grep "x-scheme-handler/https=" /usr/share//applications/defaults.list /usr/share//applications/mimeinfo.cache
                                                                    3⤵
                                                                    • Reads runtime system information
                                                                    PID:2092
                                                                  • /usr/bin/head
                                                                    head -n 1
                                                                    3⤵
                                                                      PID:2093
                                                                    • /usr/bin/cut
                                                                      cut -d "=" -f 2
                                                                      3⤵
                                                                        PID:2094
                                                                      • /usr/bin/cut
                                                                        cut -d ";" -f 1
                                                                        3⤵
                                                                          PID:2095
                                                                      • /usr/bin/sed
                                                                        sed "s/:/ /g"
                                                                        2⤵
                                                                        • Reads runtime system information
                                                                        PID:2101
                                                                      • /usr/bin/sed
                                                                        sed -e "s|-|/|"
                                                                        2⤵
                                                                        • Reads runtime system information
                                                                        PID:2106
                                                                      • /usr/bin/sed
                                                                        sed -e "s|-|/|"
                                                                        2⤵
                                                                        • Reads runtime system information
                                                                        PID:2110
                                                                      • /usr/bin/cut
                                                                        cut "-d=" -f 2-
                                                                        2⤵
                                                                          PID:2116
                                                                        • /usr/bin/which
                                                                          which firefox
                                                                          2⤵
                                                                            PID:2119
                                                                          • /usr/bin/cut
                                                                            cut "-d=" -f 2-
                                                                            2⤵
                                                                              PID:2122
                                                                            • /usr/bin/cut
                                                                              cut "-d=" -f 2-
                                                                              2⤵
                                                                                PID:2125
                                                                              • /usr/bin/cut
                                                                                cut "-d=" -f 2-
                                                                                2⤵
                                                                                  PID:2130
                                                                                • /usr/bin/cut
                                                                                  cut "-d=" -f 2-
                                                                                  2⤵
                                                                                    PID:2133
                                                                                  • /usr/bin/firefox
                                                                                    /usr/bin/firefox https://github.com/Alex23-Flow1
                                                                                    2⤵
                                                                                      PID:2134
                                                                                    • /usr/lib/firefox/firefox-bin
                                                                                      /usr/bin/firefox https://github.com/Alex23-Flow1
                                                                                      2⤵
                                                                                      • Checks hardware identifiers (DMI)
                                                                                      • Reads hardware information
                                                                                      • Changes its process name
                                                                                      • Checks CPU configuration
                                                                                      • Reads CPU attributes
                                                                                      • Enumerates kernel/hardware configuration
                                                                                      • Reads runtime system information
                                                                                      • Writes file to tmp directory
                                                                                      PID:2134
                                                                                      • /usr/lib/firefox/crashhelper
                                                                                        /usr/lib/firefox/crashhelper 2134 9 /tmp/ 11
                                                                                        3⤵
                                                                                          PID:2138
                                                                                        • /usr/local/sbin/dbus-launch
                                                                                          dbus-launch "--autolaunch=36e6eb39a6fa405996e79cad2731865d" --binary-syntax --close-stderr
                                                                                          3⤵
                                                                                            PID:2143
                                                                                          • /usr/local/bin/dbus-launch
                                                                                            dbus-launch "--autolaunch=36e6eb39a6fa405996e79cad2731865d" --binary-syntax --close-stderr
                                                                                            3⤵
                                                                                              PID:2143
                                                                                            • /usr/sbin/dbus-launch
                                                                                              dbus-launch "--autolaunch=36e6eb39a6fa405996e79cad2731865d" --binary-syntax --close-stderr
                                                                                              3⤵
                                                                                                PID:2143
                                                                                              • /usr/bin/dbus-launch
                                                                                                dbus-launch "--autolaunch=36e6eb39a6fa405996e79cad2731865d" --binary-syntax --close-stderr
                                                                                                3⤵
                                                                                                  PID:2143
                                                                                                • /usr/lib/firefox/glxtest
                                                                                                  /usr/lib/firefox/glxtest -f 18
                                                                                                  3⤵
                                                                                                  • Changes its process name
                                                                                                  • Reads CPU attributes
                                                                                                  • Enumerates kernel/hardware configuration
                                                                                                  • Reads runtime system information
                                                                                                  PID:2147
                                                                                                • /usr/lib/firefox/firefox-bin
                                                                                                  /usr/lib/firefox/firefox-bin -contentproc -ipcHandle 0 -signalPipe 1 -initialChannelId "{fff67886-fdcd-44b4-84c1-382cccbed89c}" -parentPid 2134 -greomni /usr/lib/firefox/omni.ja -appomni /usr/lib/firefox/browser/omni.ja -appDir /usr/lib/firefox/browser 1 forkserver
                                                                                                  3⤵
                                                                                                  • Reads CPU attributes
                                                                                                  • Enumerates kernel/hardware configuration
                                                                                                  • Reads runtime system information
                                                                                                  PID:2184
                                                                                            • /usr/libexec/gvfsd-fuse
                                                                                              /usr/libexec/gvfsd-fuse /root/.gvfs -f
                                                                                              1⤵
                                                                                                PID:2240

                                                                                              Network

                                                                                                    MITRE ATT&CK Enterprise v16

                                                                                                    Replay Monitor

                                                                                                    Loading Replay Monitor...

                                                                                                    Downloads

                                                                                                    events

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/datareporting/glean/events/events
                                                                                                    • Size 4KB
                                                                                                    • SHA256 1e463a261bccca856da0761b22e120aa15a63a157bd4c3df1b16932d915afacf
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    73faf579-b599-4d3d-88ab-576bbd73bf03

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/datareporting/glean/tmp/73faf579-b599-4d3d-88ab-576bbd73bf03
                                                                                                    • Size 5KB
                                                                                                    • SHA256 ac9f6cddb6fd6eaa469a616236ed149cf1108118307f0f2dcabebfaf8215b4dc
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    af04ed41-b69d-4b8a-b99d-55553fa2535e

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/datareporting/glean/tmp/af04ed41-b69d-4b8a-b99d-55553fa2535e
                                                                                                    • Size 1KB
                                                                                                    • SHA256 93b7ef41dba2973ce28525075a48f2cdb85402994c898514d78181e4fadf6abe
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    aff888e1-57a0-4179-97db-3ef0ebd7ed1e

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/datareporting/glean/tmp/aff888e1-57a0-4179-97db-3ef0ebd7ed1e
                                                                                                    • Size 4KB
                                                                                                    • SHA256 fa32164eb52c8baa7a2ce7f379e8a34a3bbc932efacda9e7ba5766fc6d221ed6
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    c42179e0-b502-449a-8831-f8d717d18335

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/datareporting/glean/tmp/c42179e0-b502-449a-8831-f8d717d18335
                                                                                                    • Size 680B
                                                                                                    • SHA256 f81bf2ca550bb98e883bddf46a09fa366fb10f4bf10abbcfed3dd9bf90b39302
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    d1f9c96e-0210-4132-9130-59fed0c70653

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/datareporting/glean/tmp/d1f9c96e-0210-4132-9130-59fed0c70653
                                                                                                    • Size 1KB
                                                                                                    • SHA256 bc76d973ae9aad03cc616cf36eca96b3801e63c46cb914e235dd4bccd3e84eb6
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    d2ce9c94-bbd8-4104-806c-933eb6441b49

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/datareporting/glean/tmp/d2ce9c94-bbd8-4104-806c-933eb6441b49
                                                                                                    • Size 635B
                                                                                                    • SHA256 ff3c894eb47c7815f420a6618f22f652721ef1ae5ae922f9912bbadac33a28ae
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    dbb80e78-aa4c-446c-aa1d-04a6266772e1

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/datareporting/glean/tmp/dbb80e78-aa4c-446c-aa1d-04a6266772e1
                                                                                                    • Size 9KB
                                                                                                    • SHA256 94e364ab10f0087d275f45e081c42392a8d52349eb8f0dc176abc5bd08809a75
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    e68056d5-182e-427d-bb73-b91ca0a87d40

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/datareporting/glean/tmp/e68056d5-182e-427d-bb73-b91ca0a87d40
                                                                                                    • Size 4KB
                                                                                                    • SHA256 d93eac8a28521bbefdfc20de4e30499dcb7452d500d390780ba228ed98f6b350
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    fb14c18f-3df9-443d-89e0-8b40539abc74

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/datareporting/glean/tmp/fb14c18f-3df9-443d-89e0-8b40539abc74
                                                                                                    • Size 1KB
                                                                                                    • SHA256 a1e36898f7c82a9c9607ec786ac104b0f6e50b8cf98cfde4efcf4390479249fa
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    fbe2e54f-4dab-429c-a37b-9df32125c0fc

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/datareporting/glean/tmp/fbe2e54f-4dab-429c-a37b-9df32125c0fc
                                                                                                    • Size 4KB
                                                                                                    • SHA256 b14d36d84772ed2b78daeb2efdc8da5cc283e75633d0fe9b46e6c1fcd63ecec9
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    fffb5785-5d0e-4cf1-8b0c-c0bd962ef22e

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/datareporting/glean/tmp/fffb5785-5d0e-4cf1-8b0c-c0bd962ef22e
                                                                                                    • Size 368B
                                                                                                    • SHA256 6952c16baec757960cde97068dd7785aedf446a7ca68f06dc74edc29bbe2b187
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    data.safe.tmp

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/extension-store/data.safe.tmp
                                                                                                    • Size 11KB
                                                                                                    • SHA256 98dcb3a36fc1a4e4cce60ceee3a7ff6b3f8e355677acf04d10816f97e3fbbe5d
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    data.safe.tmp

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/extension-store/data.safe.tmp
                                                                                                    • Size 11KB
                                                                                                    • SHA256 acb8048385b9e0146ea80a32c44aa1d53964b2c68c67244f9c6448e155517927
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    data.safe.tmp

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/extension-store/data.safe.tmp
                                                                                                    • Size 10KB
                                                                                                    • SHA256 23a67dcdb35c5d06e5a3eb15f3915c87b1627ef38b495cf8742f54ff800b21e9
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    data.safe.tmp

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/extension-store/data.safe.tmp
                                                                                                    • Size 10KB
                                                                                                    • SHA256 a56bd59bbff9a4e1b39e078b1a26d84d10a851083879734befccffbf1006c585
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    data.safe.tmp

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/extension-store/data.safe.tmp
                                                                                                    • Size 9KB
                                                                                                    • SHA256 14243b1aa3e7ea31768e1a69dabf7d640d3c8e0427f369b722c5eca492101429
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    data.safe.tmp

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/extension-store/data.safe.tmp
                                                                                                    • Size 93KB
                                                                                                    • SHA256 101485f3dbd11cf5b3abe9c601516a29c00fa64d3aad316273e16a6b428adcdf
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    prefs-1.js

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/prefs-1.js
                                                                                                    • Size 6KB
                                                                                                    • SHA256 4deca6d780de5fbfba50784c336db1688773365e3207f74676cf479bf052d744
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    prefs-1.js

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/prefs-1.js
                                                                                                    • Size 20KB
                                                                                                    • SHA256 2f179ee281b8e6d0a285922f4366ec5077381bfa5d26d02ce633b5b024456d52
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    prefs-1.js

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/prefs-1.js
                                                                                                    • Size 6KB
                                                                                                    • SHA256 6bff4aa661817e8417fe110f8e718bb92cc29ca2d9f9f600f2450d7aa5c03f74
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    prefs-1.js

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/prefs-1.js
                                                                                                    • Size 6KB
                                                                                                    • SHA256 770ddaab48ea37d175281f2d961db946408987448249e958b26fdad040a775a7
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    prefs-1.js

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/prefs-1.js
                                                                                                    • Size 6KB
                                                                                                    • SHA256 17e1b6e8b4a8315783b9aeb32e6a3c4987425fac23b01987ffa428c625291516
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    protections.sqlite

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/protections.sqlite
                                                                                                    • Size 64KB
                                                                                                    • SHA256 4409b4414acac238bafe1239a4e4b5eacc5da33f38abb9b1b8453d8c8e712fcf
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    20260719-0-default.filter.delta

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/security_state/20260719-0-default.filter.delta
                                                                                                    • Size 184KB
                                                                                                    • SHA256 16f65e61bb73c2a574b4ff5be68b553e22a6c97362d1ecef6299b3234e85fa18
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    20260719-1-default.filter.delta

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/security_state/20260719-1-default.filter.delta
                                                                                                    • Size 185KB
                                                                                                    • SHA256 7d984d671d381a67149e6a6f7e58ffef873062e8f8ff023e962bd91a4540a5c1
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    20260720-0-default.filter.delta

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/security_state/20260720-0-default.filter.delta
                                                                                                    • Size 169KB
                                                                                                    • SHA256 41723566d7d1ccb4375e28ab6bd1a56932d2612642134f9baeec2e60e4eb5dc8
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    20260720-1-default.filter.delta

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/security_state/20260720-1-default.filter.delta
                                                                                                    • Size 220KB
                                                                                                    • SHA256 5698bd36b7b7850fe487fbc69841be37fe5f05a0bc1dfd5702f0cd4a05683103
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    20260721-0-default.filter.delta

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/security_state/20260721-0-default.filter.delta
                                                                                                    • Size 176KB
                                                                                                    • SHA256 f9db645be19198805046c060d7e1de22357eae8a8c1747900acaf36dc4a61c31
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    20260721-1-default.filter.delta

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/security_state/20260721-1-default.filter.delta
                                                                                                    • Size 182KB
                                                                                                    • SHA256 833ae1e29d1ebed427f3d78ddbba1430b3f50dd19434adfe7541078e88641846
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    20260722-0-default.filter.delta

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/security_state/20260722-0-default.filter.delta
                                                                                                    • Size 193KB
                                                                                                    • SHA256 7ca1260abe7d2dc8f8a4f0d4113c009e4fe45e84d1b8775c65b99fa300489734
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    20260722-1-default.filter.delta

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/security_state/20260722-1-default.filter.delta
                                                                                                    • Size 185KB
                                                                                                    • SHA256 ac125c9e3816e53c4e2f1e6d427c7707689ee192d940dea9d53494b106dc3679
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    20260723-0-default.filter.delta

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/security_state/20260723-0-default.filter.delta
                                                                                                    • Size 175KB
                                                                                                    • SHA256 e54ccfec2cfb155471a0989b6892a5561061e2f7ab5ef4c4b519a2b2acc9165b
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    20260723-1-default.filter.delta

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/security_state/20260723-1-default.filter.delta
                                                                                                    • Size 192KB
                                                                                                    • SHA256 707af59c46b42988dd29d1e0dc2d4251aa131d411d41b3f7d138df7e156ffb2b
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    20260724-0-default.filter.delta

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/security_state/20260724-0-default.filter.delta
                                                                                                    • Size 187KB
                                                                                                    • SHA256 ace01eafcfacd521384cae646bf6a26f0c51aabda48dd56a4bd6ca83ea2338ea
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    20260724-1-default.filter.delta

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/security_state/20260724-1-default.filter.delta
                                                                                                    • Size 184KB
                                                                                                    • SHA256 4dc00df17f73c62dff933f6818a8a7ec18a1368ec7f06139f2db24a90d20cb56
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    20260725-0-default.filter.delta

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/security_state/20260725-0-default.filter.delta
                                                                                                    • Size 185KB
                                                                                                    • SHA256 17adeeeccf13b71141f581900419e31fc2e113fc8feb3c8583875e8c24afb14f
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    20260725-1-default.filter.delta

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/security_state/20260725-1-default.filter.delta
                                                                                                    • Size 282KB
                                                                                                    • SHA256 ab3f3cbb2b168d1fd3e1a1f0534048237e18b01f9ec725e5183b455a5a13263a
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    20260726-0-default.filter.delta

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/security_state/20260726-0-default.filter.delta
                                                                                                    • Size 179KB
                                                                                                    • SHA256 81d5da919691d7aa4ef73965c7286f6fcf9cd0e29be60707c6ab7b8ab511f645
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    20260726-1-default.filter.delta

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/security_state/20260726-1-default.filter.delta
                                                                                                    • Size 180KB
                                                                                                    • SHA256 c527b0aae725afb509fddc06b41f651c28c8814b153bff9a2ebfe05d4ce47be0
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    20260727-0-default.filter.delta

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/security_state/20260727-0-default.filter.delta
                                                                                                    • Size 184KB
                                                                                                    • SHA256 47e468b5da3b3a5b126a31d9ac9f38fbd91ada732c4fcc780e05137777cd8fab
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    20260727-1-default.filter.delta

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/security_state/20260727-1-default.filter.delta
                                                                                                    • Size 177KB
                                                                                                    • SHA256 9b5dd48b2518d83ff1e686724c4bf0da30d64e103c155aef5ed09a46e8516ea2
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    20260728-0-default.filter.delta

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/security_state/20260728-0-default.filter.delta
                                                                                                    • Size 181KB
                                                                                                    • SHA256 8a83c4cd49afd29e4ce666dbfe59bb914a479a24a2f06a5909b69aa0947e59b7
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    20260728-1-default.filter.delta

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/security_state/20260728-1-default.filter.delta
                                                                                                    • Size 228KB
                                                                                                    • SHA256 83fa094af2d9938776032e386a694d854727b251f83f066ea31143b80b96a961
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    20260729-0-default.filter.delta

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/security_state/20260729-0-default.filter.delta
                                                                                                    • Size 192KB
                                                                                                    • SHA256 c1c8cad4249b9cbba1f7be1233278365c44a259a2183b798a21dcc9d4f88ec49
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    20260729-1-default.filter.delta

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/security_state/20260729-1-default.filter.delta
                                                                                                    • Size 178KB
                                                                                                    • SHA256 b9c927c20824f8ec3cef8666dd731cfb44e809af195fbae3a0569f97bd3c78d2
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    20260730-0-default.filter.delta

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/security_state/20260730-0-default.filter.delta
                                                                                                    • Size 194KB
                                                                                                    • SHA256 0b9ab1f486fc75fdb01bc36329926a00ff0eb55f4472c8058c6dcdec39eea8ab
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    20260730-1-default.filter.delta

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/security_state/20260730-1-default.filter.delta
                                                                                                    • Size 190KB
                                                                                                    • SHA256 af01f71977c9f2905e3b2ed6d1992922132a0b178363d248d6cc39646f38211a
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    20260804-1-default.filter.delta

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/security_state/20260804-1-default.filter.delta
                                                                                                    • Size 186KB
                                                                                                    • SHA256 baf055ad1d79437afc56aa1f6ec1950dc3559bf616adb3504956fe77a4863f59
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    20260805-0-default.filter.delta

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/security_state/20260805-0-default.filter.delta
                                                                                                    • Size 255KB
                                                                                                    • SHA256 d40ceffaf857b0531b8d1665ce2601bdacb808c7fdce7763f1901ceccc571524
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    20260805-1-default.filter.delta

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/security_state/20260805-1-default.filter.delta
                                                                                                    • Size 253KB
                                                                                                    • SHA256 ca7fa7fa9a1a089e7bfa1272a9a0018123575ad2bfb11a9cf52bf9c3fa836516
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    20260806-0-default.filter.delta

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/security_state/20260806-0-default.filter.delta
                                                                                                    • Size 230KB
                                                                                                    • SHA256 832860fd1dc9da8bab799e3983426effaa12833d66737b4ff4e174f2ca8915b6
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    20260806-1-default.filter.delta

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/security_state/20260806-1-default.filter.delta
                                                                                                    • Size 201KB
                                                                                                    • SHA256 68707104af3c974863f3f12177041a86ed4239637b1bc6e9927455e8cd31c922
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    20260807-0-default.filter.delta

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/security_state/20260807-0-default.filter.delta
                                                                                                    • Size 217KB
                                                                                                    • SHA256 f18af3f3aca7e36d7d8af4982aa8b40656ca368f9997cb353931e8c2b0cee63c
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    20260807-1-default.filter.delta

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/security_state/20260807-1-default.filter.delta
                                                                                                    • Size 187KB
                                                                                                    • SHA256 8965c91d56dab293a85e88e9142a2fd28437ee47c49fd3e83e17dfe9fa52e051
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    20260808-0-default.filter.delta

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/security_state/20260808-0-default.filter.delta
                                                                                                    • Size 175KB
                                                                                                    • SHA256 a03f251bda0414ddd3e3c38ccd0d27ad2abe49a5eeb5d004daf7126e704ab630
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    crlite.filter

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/security_state/crlite.filter
                                                                                                    • Size 6.8MB
                                                                                                    • SHA256 afab6887825694a322b3e20b260da1c08b2a700719b097bbb16326239b085840
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    data.safe.tmp

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/security_state/data.safe.tmp
                                                                                                    • Size 268KB
                                                                                                    • SHA256 b766759193612acda67affd2b1ffa653983587f674e715bd8f0ad503ea3f0b43
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    data.safe.tmp

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/security_state/data.safe.tmp
                                                                                                    • Size 3.2MB
                                                                                                    • SHA256 5ce3b362070ad13caac711ac113063f1b37f7602f1f35aa82584fee32e405534
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    data.safe.tmp

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/security_state/data.safe.tmp
                                                                                                    • Size 41B
                                                                                                    • SHA256 94b4b128f8e30bdb92c86e80557f387f06d6eb733b3cd951ec288e5111a641e9
                                                                                                    • MD5 SHA1 SHA512

                                                                                                    data.safe.tmp

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/security_state/data.safe.tmp
                                                                                                    • Size 267KB
                                                                                                    • SHA256 68205454831300e2b4850c8c88b21ae80bc59c95c5deadfa160c16c004a7a2c6
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    recovery.jsonlz4.tmp

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/sessionstore-backups/recovery.jsonlz4.tmp
                                                                                                    • Size 2KB
                                                                                                    • SHA256 b20aacc979943810f8b8a0818446dd988e719681f54a4ad86bf438d262b1ce77
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    webappsstore.sqlite

                                                                                                    • Path /root/.config/mozilla/firefox/fq58mci9.default-release/webappsstore.sqlite
                                                                                                    • Size 96KB
                                                                                                    • SHA256 d884477ede4c58bb90cccb1552ba8a0eb784ec7e89614d7d37fbf274db078e16
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    tmpaddon

                                                                                                    • Path /tmp/tmpaddon
                                                                                                    • Size 329KB
                                                                                                    • SHA256 e8d8a11edf5521a7257079e2f92a730cfad421576c6810e3c7b7e23b083358d8
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    tmpaddon-1

                                                                                                    • Path /tmp/tmpaddon-1
                                                                                                    • Size 575KB
                                                                                                    • SHA256 997b6e1c0e07307de3adf5d0d7a3ddc5d81cd522afe675dfdb43154f73f5b0d0
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH