Overview

overview

7

Static

static

5

OW_Heroes_...ev.pdf

ubuntu-24.04-amd64

7

Analysis

  • user interaction
    yes
  • max time kernel
    1796s
  • max time network
    1774s
  • platform
    ubuntu-24.04_amd64
  • resource
    ubuntu2404-amd64-20260126-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2404-amd64-20260126-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
  • submitted
    30/09/2026, 16:32

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    OW_Heroes_Hammond_EN_FINAL_Rev.pdf
  • Size 68.9MB
  • Sample260930-t2cz2ax18n
  • SHA256 d8dae194c9cc37320784069ac8c3e326327e1f8fd2c1533998bc6a577896c399
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
antivmcredential_accessdiscovery

Malware Config

Signatures

  • OS Credential Dumping 1 TTPs 1 IoCs

    Adversaries may attempt to dump credentials to use it in password cracking.

    credential_access
  • Checks hardware identifiers (DMI) 1 TTPs 1 IoCs

    Checks DMI information which indicate if the system is a virtual machine.

    antivm
  • Reads hardware information 1 TTPs 1 IoCs

    Accesses system info like serial numbers, manufacturer names etc.

    discovery
  • Changes its process name 64 IoCs
  • Checks CPU configuration 1 TTPs 1 IoCs

    Checks CPU information which indicate if the system is a virtual machine.

    antivm
  • Reads CPU attributes 1 TTPs 10 IoCs
    discovery
  • Enumerates kernel/hardware configuration 1 TTPs 41 IoCs

    Reads contents of /sys virtual filesystem to enumerate system information.

    discovery
  • Reads runtime system information 64 IoCs

    Reads data from /proc virtual filesystem.

    discovery
  • Writes file to tmp directory 2 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /usr/bin/xdg-open
    xdg-open /tmp/OW_Heroes_Hammond_EN_FINAL_Rev.pdf
    1⤵
      PID:2035
      • /usr/bin/dbus-send
        dbus-send --print-reply "--dest=org.freedesktop.DBus" /org/freedesktop/DBus org.freedesktop.DBus.GetNameOwner string:org.gnome.SessionManager
        2⤵
        • Reads runtime system information
        PID:2036
        • /usr/bin/dbus-launch
          dbus-launch --autolaunch 36e6eb39a6fa405996e79cad2731865d --binary-syntax --close-stderr
          3⤵
          • Reads runtime system information
          PID:2038
          • /usr/bin/dbus-daemon
            /usr/bin/dbus-daemon --syslog-only --fork --print-pid 5 --print-address 7 --session
            4⤵
            • Enumerates kernel/hardware configuration
            • Reads runtime system information
            PID:2040
            • /usr/libexec/xdg-desktop-portal
              /usr/libexec/xdg-desktop-portal
              5⤵
              • Reads runtime system information
              PID:2242
            • /usr/libexec/at-spi-bus-launcher
              /usr/libexec/at-spi-bus-launcher
              5⤵
              • Reads runtime system information
              PID:2246
            • /usr/libexec/xdg-document-portal
              /usr/libexec/xdg-document-portal
              5⤵
              • Reads runtime system information
              PID:2262
              • /usr/bin/fusermount3
                fusermount3 -o "rw,nosuid,nodev,fsname=portal,auto_unmount,subtype=portal" -- /root/.cache/doc
                6⤵
                  PID:2302
              • /usr/libexec/xdg-permission-store
                /usr/libexec/xdg-permission-store
                5⤵
                • Reads runtime system information
                PID:2279
              • /usr/libexec/xdg-desktop-portal-gtk
                /usr/libexec/xdg-desktop-portal-gtk
                5⤵
                  PID:2317
                • /usr/libexec/gvfsd
                  /usr/libexec/gvfsd
                  5⤵
                  • Reads runtime system information
                  PID:2352
          • /usr/bin/grep
            grep " = \\\"xfce4\\\"\$"
            2⤵
            • Reads runtime system information
            PID:2044
          • /usr/bin/xprop
            xprop -root _DT_SAVE_MODE
            2⤵
              PID:2043
            • /usr/bin/xprop
              xprop -root
              2⤵
                PID:2045
              • /usr/bin/grep
                grep -i "^xfce_desktop_window"
                2⤵
                • Reads runtime system information
                PID:2046
              • /usr/bin/grep
                grep -q "^Enlightenment"
                2⤵
                • Reads runtime system information
                PID:2048
              • /usr/bin/uname
                uname
                2⤵
                  PID:2049
                • /usr/bin/grep
                  grep -q "^file://"
                  2⤵
                  • Reads runtime system information
                  PID:2051
                • /usr/bin/egrep
                  egrep -q "^[[:alpha:]+\\.\\-]+:"
                  2⤵
                    PID:2053
                  • /usr/local/sbin/grep
                    grep -E -q "^[[:alpha:]+\\.\\-]+:"
                    2⤵
                      PID:2053
                    • /usr/local/bin/grep
                      grep -E -q "^[[:alpha:]+\\.\\-]+:"
                      2⤵
                        PID:2053
                      • /usr/sbin/grep
                        grep -E -q "^[[:alpha:]+\\.\\-]+:"
                        2⤵
                          PID:2053
                        • /usr/bin/grep
                          grep -E -q "^[[:alpha:]+\\.\\-]+:"
                          2⤵
                            PID:2053
                          • /usr/bin/grep
                            grep -q "^file:///"
                            2⤵
                              PID:2056
                            • /usr/bin/sed
                              sed "s/;.*//"
                              2⤵
                              • Reads runtime system information
                              PID:2059
                            • /usr/bin/xdg-mime
                              xdg-mime query filetype /tmp/OW_Heroes_Hammond_EN_FINAL_Rev.pdf
                              2⤵
                                PID:2058
                                • /usr/bin/readlink
                                  readlink -f -- /tmp/OW_Heroes_Hammond_EN_FINAL_Rev.pdf
                                  3⤵
                                    PID:2060
                                  • /usr/bin/dbus-send
                                    dbus-send --print-reply "--dest=org.freedesktop.DBus" /org/freedesktop/DBus org.freedesktop.DBus.GetNameOwner string:org.gnome.SessionManager
                                    3⤵
                                      PID:2061
                                      • /usr/bin/dbus-launch
                                        dbus-launch --autolaunch 36e6eb39a6fa405996e79cad2731865d --binary-syntax --close-stderr
                                        4⤵
                                          PID:2062
                                      • /usr/bin/xprop
                                        xprop -root _DT_SAVE_MODE
                                        3⤵
                                          PID:2063
                                        • /usr/bin/grep
                                          grep " = \\\"xfce4\\\"\$"
                                          3⤵
                                            PID:2064
                                          • /usr/bin/xprop
                                            xprop -root
                                            3⤵
                                              PID:2066
                                            • /usr/bin/grep
                                              grep -i "^xfce_desktop_window"
                                              3⤵
                                                PID:2067
                                              • /usr/bin/grep
                                                grep -q "^Enlightenment"
                                                3⤵
                                                • Reads runtime system information
                                                PID:2071
                                              • /usr/bin/uname
                                                uname
                                                3⤵
                                                  PID:2072
                                                • /usr/bin/mimetype
                                                  mimetype --version
                                                  3⤵
                                                    PID:2073
                                                  • /usr/bin/mimetype
                                                    mimetype --brief --dereference /tmp/OW_Heroes_Hammond_EN_FINAL_Rev.pdf
                                                    3⤵
                                                    • OS Credential Dumping
                                                    PID:2074
                                                • /usr/bin/xdg-mime
                                                  xdg-mime query default application/pdf
                                                  2⤵
                                                    PID:2075
                                                    • /usr/bin/dbus-send
                                                      dbus-send --print-reply "--dest=org.freedesktop.DBus" /org/freedesktop/DBus org.freedesktop.DBus.GetNameOwner string:org.gnome.SessionManager
                                                      3⤵
                                                        PID:2076
                                                        • /usr/bin/dbus-launch
                                                          dbus-launch --autolaunch 36e6eb39a6fa405996e79cad2731865d --binary-syntax --close-stderr
                                                          4⤵
                                                            PID:2077
                                                        • /usr/bin/grep
                                                          grep " = \\\"xfce4\\\"\$"
                                                          3⤵
                                                          • Reads runtime system information
                                                          PID:2079
                                                        • /usr/bin/xprop
                                                          xprop -root _DT_SAVE_MODE
                                                          3⤵
                                                            PID:2078
                                                          • /usr/bin/grep
                                                            grep -i "^xfce_desktop_window"
                                                            3⤵
                                                            • Reads runtime system information
                                                            PID:2081
                                                          • /usr/bin/xprop
                                                            xprop -root
                                                            3⤵
                                                              PID:2080
                                                            • /usr/bin/grep
                                                              grep -q "^Enlightenment"
                                                              3⤵
                                                              • Reads runtime system information
                                                              PID:2083
                                                            • /usr/bin/uname
                                                              uname
                                                              3⤵
                                                                PID:2084
                                                              • /usr/bin/sed
                                                                sed "s/:/ /g"
                                                                3⤵
                                                                • Reads runtime system information
                                                                PID:2087
                                                              • /usr/bin/grep
                                                                grep "application/pdf=" /.local/share/applications/defaults.list /.local/share/applications/mimeinfo.cache
                                                                3⤵
                                                                • Reads runtime system information
                                                                PID:2089
                                                              • /usr/bin/head
                                                                head -n 1
                                                                3⤵
                                                                  PID:2090
                                                                • /usr/bin/cut
                                                                  cut -d "=" -f 2
                                                                  3⤵
                                                                    PID:2091
                                                                  • /usr/bin/cut
                                                                    cut -d ";" -f 1
                                                                    3⤵
                                                                      PID:2092
                                                                    • /usr/bin/head
                                                                      head -n 1
                                                                      3⤵
                                                                        PID:2095
                                                                      • /usr/bin/cut
                                                                        cut -d "=" -f 2
                                                                        3⤵
                                                                          PID:2096
                                                                        • /usr/bin/cut
                                                                          cut -d ";" -f 1
                                                                          3⤵
                                                                            PID:2097
                                                                          • /usr/bin/grep
                                                                            grep "application/pdf=" /.local/share/applications/defaults.list /.local/share/applications/mimeinfo.cache
                                                                            3⤵
                                                                            • Reads runtime system information
                                                                            PID:2094
                                                                          • /usr/bin/grep
                                                                            grep "application/pdf=" /usr/local/share//applications/defaults.list /usr/local/share//applications/mimeinfo.cache
                                                                            3⤵
                                                                            • Reads runtime system information
                                                                            PID:2099
                                                                          • /usr/bin/head
                                                                            head -n 1
                                                                            3⤵
                                                                              PID:2100
                                                                            • /usr/bin/cut
                                                                              cut -d "=" -f 2
                                                                              3⤵
                                                                                PID:2101
                                                                              • /usr/bin/cut
                                                                                cut -d ";" -f 1
                                                                                3⤵
                                                                                  PID:2102
                                                                                • /usr/bin/head
                                                                                  head -n 1
                                                                                  3⤵
                                                                                    PID:2105
                                                                                  • /usr/bin/grep
                                                                                    grep "application/pdf=" /usr/local/share//applications/defaults.list /usr/local/share//applications/mimeinfo.cache
                                                                                    3⤵
                                                                                    • Reads runtime system information
                                                                                    PID:2104
                                                                                  • /usr/bin/cut
                                                                                    cut -d "=" -f 2
                                                                                    3⤵
                                                                                      PID:2106
                                                                                    • /usr/bin/cut
                                                                                      cut -d ";" -f 1
                                                                                      3⤵
                                                                                        PID:2107
                                                                                      • /usr/bin/grep
                                                                                        grep "application/pdf=" /usr/share//applications/defaults.list /usr/share//applications/mimeinfo.cache
                                                                                        3⤵
                                                                                        • Reads runtime system information
                                                                                        PID:2109
                                                                                      • /usr/bin/head
                                                                                        head -n 1
                                                                                        3⤵
                                                                                          PID:2110
                                                                                        • /usr/bin/cut
                                                                                          cut -d "=" -f 2
                                                                                          3⤵
                                                                                            PID:2111
                                                                                          • /usr/bin/cut
                                                                                            cut -d ";" -f 1
                                                                                            3⤵
                                                                                              PID:2112
                                                                                          • /usr/bin/sed
                                                                                            sed "s/:/ /g"
                                                                                            2⤵
                                                                                            • Reads runtime system information
                                                                                            PID:2115
                                                                                          • /usr/bin/sed
                                                                                            sed -e "s|-|/|"
                                                                                            2⤵
                                                                                            • Reads runtime system information
                                                                                            PID:2118
                                                                                          • /usr/bin/sed
                                                                                            sed -e "s|-|/|"
                                                                                            2⤵
                                                                                            • Reads runtime system information
                                                                                            PID:2121
                                                                                          • /usr/bin/cut
                                                                                            cut "-d=" -f 2-
                                                                                            2⤵
                                                                                              PID:2126
                                                                                            • /usr/bin/which
                                                                                              which firefox
                                                                                              2⤵
                                                                                                PID:2127
                                                                                              • /usr/bin/cut
                                                                                                cut "-d=" -f 2-
                                                                                                2⤵
                                                                                                  PID:2130
                                                                                                • /usr/bin/cut
                                                                                                  cut "-d=" -f 2-
                                                                                                  2⤵
                                                                                                    PID:2133
                                                                                                  • /usr/bin/cut
                                                                                                    cut "-d=" -f 2-
                                                                                                    2⤵
                                                                                                      PID:2138
                                                                                                    • /usr/bin/cut
                                                                                                      cut "-d=" -f 2-
                                                                                                      2⤵
                                                                                                        PID:2141
                                                                                                      • /usr/bin/firefox
                                                                                                        /usr/bin/firefox /tmp/OW_Heroes_Hammond_EN_FINAL_Rev.pdf
                                                                                                        2⤵
                                                                                                          PID:2144
                                                                                                        • /usr/lib/firefox/firefox-bin
                                                                                                          /usr/bin/firefox /tmp/OW_Heroes_Hammond_EN_FINAL_Rev.pdf
                                                                                                          2⤵
                                                                                                          • Checks hardware identifiers (DMI)
                                                                                                          • Reads hardware information
                                                                                                          • Changes its process name
                                                                                                          • Checks CPU configuration
                                                                                                          • Reads CPU attributes
                                                                                                          • Enumerates kernel/hardware configuration
                                                                                                          • Reads runtime system information
                                                                                                          • Writes file to tmp directory
                                                                                                          PID:2144
                                                                                                          • /usr/lib/firefox/crashhelper
                                                                                                            /usr/lib/firefox/crashhelper 2144 9 /tmp/ 11
                                                                                                            3⤵
                                                                                                              PID:2151
                                                                                                            • /usr/local/sbin/dbus-launch
                                                                                                              dbus-launch "--autolaunch=36e6eb39a6fa405996e79cad2731865d" --binary-syntax --close-stderr
                                                                                                              3⤵
                                                                                                                PID:2156
                                                                                                              • /usr/local/bin/dbus-launch
                                                                                                                dbus-launch "--autolaunch=36e6eb39a6fa405996e79cad2731865d" --binary-syntax --close-stderr
                                                                                                                3⤵
                                                                                                                  PID:2156
                                                                                                                • /usr/sbin/dbus-launch
                                                                                                                  dbus-launch "--autolaunch=36e6eb39a6fa405996e79cad2731865d" --binary-syntax --close-stderr
                                                                                                                  3⤵
                                                                                                                    PID:2156
                                                                                                                  • /usr/bin/dbus-launch
                                                                                                                    dbus-launch "--autolaunch=36e6eb39a6fa405996e79cad2731865d" --binary-syntax --close-stderr
                                                                                                                    3⤵
                                                                                                                      PID:2156
                                                                                                                    • /usr/lib/firefox/glxtest
                                                                                                                      /usr/lib/firefox/glxtest -f 18
                                                                                                                      3⤵
                                                                                                                      • Changes its process name
                                                                                                                      • Reads CPU attributes
                                                                                                                      • Enumerates kernel/hardware configuration
                                                                                                                      • Reads runtime system information
                                                                                                                      PID:2160
                                                                                                                    • /usr/lib/firefox/firefox-bin
                                                                                                                      /usr/lib/firefox/firefox-bin -contentproc -ipcHandle 0 -signalPipe 1 -initialChannelId "{ece6353d-058d-4066-a4f6-d79025fa8ff7}" -parentPid 2144 -greomni /usr/lib/firefox/omni.ja -appomni /usr/lib/firefox/browser/omni.ja -appDir /usr/lib/firefox/browser 1 forkserver
                                                                                                                      3⤵
                                                                                                                      • Reads CPU attributes
                                                                                                                      • Enumerates kernel/hardware configuration
                                                                                                                      • Reads runtime system information
                                                                                                                      PID:2226
                                                                                                                • /usr/libexec/gvfsd-fuse
                                                                                                                  /usr/libexec/gvfsd-fuse /root/.gvfs -f
                                                                                                                  1⤵
                                                                                                                  • Reads runtime system information
                                                                                                                  PID:2389

                                                                                                                Network

                                                                                                                      MITRE ATT&CK Enterprise v16

                                                                                                                      Replay Monitor

                                                                                                                      Loading Replay Monitor...

                                                                                                                      Downloads

                                                                                                                      0DF6B0E393A4C29E557541A25B63F8CC202EE813
                                                                                                                      • Path /root/.cache/mozilla/firefox/q9xs27wp.default-release/cache2/entries/0DF6B0E393A4C29E557541A25B63F8CC202EE813
                                                                                                                      • Size 17KB
                                                                                                                      • SHA256 1c78a589df2d7f84c4cd38bd68139fb4b16a274c584a926bd30e81840b38e877
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      4C18F066D8094CBFD38F52CF43E9D6B5A5A5F55C
                                                                                                                      • Path /root/.cache/mozilla/firefox/q9xs27wp.default-release/cache2/entries/4C18F066D8094CBFD38F52CF43E9D6B5A5A5F55C
                                                                                                                      • Size 17KB
                                                                                                                      • SHA256 7c310fa60d651f25f17e54174d42e76d1320f13f27591c3c1f7f36905ff9edcf
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      4C18F066D8094CBFD38F52CF43E9D6B5A5A5F55C
                                                                                                                      • Path /root/.cache/mozilla/firefox/q9xs27wp.default-release/cache2/entries/4C18F066D8094CBFD38F52CF43E9D6B5A5A5F55C
                                                                                                                      • Size 17KB
                                                                                                                      • SHA256 58078afde36352b4e03c87dcb8cbecd086d2bf85227466b25cee0e5b89573b4d
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      75B5AB405E2524132CB5F49D04222C9B898C9CCA
                                                                                                                      • Path /root/.cache/mozilla/firefox/q9xs27wp.default-release/cache2/entries/75B5AB405E2524132CB5F49D04222C9B898C9CCA
                                                                                                                      • Size 15KB
                                                                                                                      • SHA256 4d7e7cb8fcc26140a347b5e1ace34656ad23fad9abc67d858b1798bf640b60fe
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      75B5AB405E2524132CB5F49D04222C9B898C9CCA
                                                                                                                      • Path /root/.cache/mozilla/firefox/q9xs27wp.default-release/cache2/entries/75B5AB405E2524132CB5F49D04222C9B898C9CCA
                                                                                                                      • Size 15KB
                                                                                                                      • SHA256 d0ff400f2ab71cd93aa103d269e8d8e43243d32a9b4e05e3538b8c4df93582f9
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      AB2DACAD066EBB283A4EE30D96948ABBEC9B11AF
                                                                                                                      • Path /root/.cache/mozilla/firefox/q9xs27wp.default-release/cache2/entries/AB2DACAD066EBB283A4EE30D96948ABBEC9B11AF
                                                                                                                      • Size 26KB
                                                                                                                      • SHA256 b13712c5f04d6317f2c22f60a1c33c9822433ce9e7ec6466b8eeed5a8c7d7af1
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      BB95D0607349D05725D5FE01D4FB300E319072AD
                                                                                                                      • Path /root/.cache/mozilla/firefox/q9xs27wp.default-release/cache2/entries/BB95D0607349D05725D5FE01D4FB300E319072AD
                                                                                                                      • Size 17KB
                                                                                                                      • SHA256 c881c7f166099b4a03fc6b25d05bb2e06767c1e4331fb725622b34bc475e7de1
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      D0F48A0632B6C451791F4257697E861961F06A6F
                                                                                                                      • Path /root/.cache/mozilla/firefox/q9xs27wp.default-release/cache2/entries/D0F48A0632B6C451791F4257697E861961F06A6F
                                                                                                                      • Size 52B
                                                                                                                      • SHA256 86b966bb83dc817f1d71a484b53a774e619fa0737153e70cd5001e4075c07f3e
                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                      Submit Download

                                                                                                                      DAA93F849EB48DDDB40EB74DA45C59EAD2B3A9CF
                                                                                                                      • Path /root/.cache/mozilla/firefox/q9xs27wp.default-release/cache2/entries/DAA93F849EB48DDDB40EB74DA45C59EAD2B3A9CF
                                                                                                                      • Size 18KB
                                                                                                                      • SHA256 35cf673e4609854b0f12ec31861365ba1bfc1cf43c983f204c437084f0420141
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      DBE888A1A393559F45040516A30C9A735D648C9C
                                                                                                                      • Path /root/.cache/mozilla/firefox/q9xs27wp.default-release/cache2/entries/DBE888A1A393559F45040516A30C9A735D648C9C
                                                                                                                      • Size 26KB
                                                                                                                      • SHA256 c247102dcede28e9d6378a48363a71e2d181e9363022c28be330f35091089459
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      E4269C3000DABA33DBB383FA629A2822B12AC765
                                                                                                                      • Path /root/.cache/mozilla/firefox/q9xs27wp.default-release/cache2/entries/E4269C3000DABA33DBB383FA629A2822B12AC765
                                                                                                                      • Size 106KB
                                                                                                                      • SHA256 4f2b1d1b60971cd76692d6f3f67841a2ca2e2745c0a401a59107f5ae7adfe3a5
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      F6DB2CC802065A948266A380F89F5EB80BB1A349
                                                                                                                      • Path /root/.cache/mozilla/firefox/q9xs27wp.default-release/cache2/entries/F6DB2CC802065A948266A380F89F5EB80BB1A349
                                                                                                                      • Size 17KB
                                                                                                                      • SHA256 9c6bc9e0272bdbc2f4441396c9bc2e35cf8c2df7d53d529f859f45ff0425957b
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      startupCache.8.little
                                                                                                                      • Path /root/.cache/mozilla/firefox/q9xs27wp.default-release/startupCache/startupCache.8.little
                                                                                                                      • Size 7.7MB
                                                                                                                      • SHA256 6b0db3a0727df2938ec81ac1fc198be98687251c527d192c551112f7b4010c3f
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      events
                                                                                                                      • Path /root/.config/mozilla/firefox/q9xs27wp.default-release/datareporting/glean/events/events
                                                                                                                      • Size 2KB
                                                                                                                      • SHA256 0494171e6ee897f491ec13e2488747c4fed770d096708ff4ae4d74bbdccc2186
                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                      Submit Download

                                                                                                                      16a2fde3-2017-4e64-b93a-354ce52ab31b
                                                                                                                      • Path /root/.config/mozilla/firefox/q9xs27wp.default-release/datareporting/glean/tmp/16a2fde3-2017-4e64-b93a-354ce52ab31b
                                                                                                                      • Size 4KB
                                                                                                                      • SHA256 14f47586fbbf3b69f4fcad7f3e47457e97f966813913cfbcac428c4e9bb241d0
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      17c2cada-481b-48e5-a8a6-759b8ad2181b
                                                                                                                      • Path /root/.config/mozilla/firefox/q9xs27wp.default-release/datareporting/glean/tmp/17c2cada-481b-48e5-a8a6-759b8ad2181b
                                                                                                                      • Size 368B
                                                                                                                      • SHA256 8cf8fd8192dc0a21d81e97ebd80f3623e9d3e92a1fe92ed773e1e4cc85344634
                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                      Submit Download

                                                                                                                      2ca6ffa3-6057-46ae-984f-1566188a6ecc
                                                                                                                      • Path /root/.config/mozilla/firefox/q9xs27wp.default-release/datareporting/glean/tmp/2ca6ffa3-6057-46ae-984f-1566188a6ecc
                                                                                                                      • Size 5KB
                                                                                                                      • SHA256 fb85a99a4cce61ed4fff7ccf08828053a26cee6680c0697471b1e9b642283bc9
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      3e4f2592-735b-428f-8628-e5ff79d45366
                                                                                                                      • Path /root/.config/mozilla/firefox/q9xs27wp.default-release/datareporting/glean/tmp/3e4f2592-735b-428f-8628-e5ff79d45366
                                                                                                                      • Size 1KB
                                                                                                                      • SHA256 70c3063596c1a69e7004b886af16c71387837337a8671624206f3963da39a291
                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                      Submit Download

                                                                                                                      61a1077f-8ee9-4639-bffd-0bb0ba6a649c
                                                                                                                      • Path /root/.config/mozilla/firefox/q9xs27wp.default-release/datareporting/glean/tmp/61a1077f-8ee9-4639-bffd-0bb0ba6a649c
                                                                                                                      • Size 871B
                                                                                                                      • SHA256 599b7010f3309d5e38d3e98d1b7fc896c13671ccff544dde8f1240fe5dd15d33
                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                      Submit Download

                                                                                                                      6876b6bd-6445-438f-8292-03ad673d2deb
                                                                                                                      • Path /root/.config/mozilla/firefox/q9xs27wp.default-release/datareporting/glean/tmp/6876b6bd-6445-438f-8292-03ad673d2deb
                                                                                                                      • Size 9KB
                                                                                                                      • SHA256 78e440a4ba613c8f36bbc7cf0a3f6f68155b501d27b91689823203b3d8e60ef3
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      79ceea47-9c1f-4522-b277-f45fbd574f23
                                                                                                                      • Path /root/.config/mozilla/firefox/q9xs27wp.default-release/datareporting/glean/tmp/79ceea47-9c1f-4522-b277-f45fbd574f23
                                                                                                                      • Size 1KB
                                                                                                                      • SHA256 3991c2ccdf4c98b962b13f77cd5ba4810107d1dcf1151cf9fb54109d163ce120
                                                                                                                      • MD5 SHA1 SHA512 TLSH
                                                                                                                      Submit Download

                                                                                                                      prefs-1.js
                                                                                                                      • Path /root/.config/mozilla/firefox/q9xs27wp.default-release/prefs-1.js
                                                                                                                      • Size 6KB
                                                                                                                      • SHA256 b4322f92e79c57634743e7286a01db5e287f9ebd71ac8197e1c5182fad0392c7
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      prefs-1.js
                                                                                                                      • Path /root/.config/mozilla/firefox/q9xs27wp.default-release/prefs-1.js
                                                                                                                      • Size 6KB
                                                                                                                      • SHA256 fc6d6d9fb5bad106fbcdf6910e549e90203879d070fd4da21a355a20f8a55048
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      prefs-1.js
                                                                                                                      • Path /root/.config/mozilla/firefox/q9xs27wp.default-release/prefs-1.js
                                                                                                                      • Size 6KB
                                                                                                                      • SHA256 fd5ac003684813e10c4ad503c0bfdd64ba27402b6ad92db41e96e23522ffc8df
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      prefs-1.js
                                                                                                                      • Path /root/.config/mozilla/firefox/q9xs27wp.default-release/prefs-1.js
                                                                                                                      • Size 6KB
                                                                                                                      • SHA256 eaa6cf78c2cea816dba5800b15668fb1bb9190c19e612097c9c61fdcc2dcbded
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      prefs-1.js
                                                                                                                      • Path /root/.config/mozilla/firefox/q9xs27wp.default-release/prefs-1.js
                                                                                                                      • Size 6KB
                                                                                                                      • SHA256 0ea7c7438321f8d92abede853423727b7c726895237ede18b812e7d8634332be
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download

                                                                                                                      webappsstore.sqlite
                                                                                                                      • Path /root/.config/mozilla/firefox/q9xs27wp.default-release/webappsstore.sqlite
                                                                                                                      • Size 96KB
                                                                                                                      • SHA256 d884477ede4c58bb90cccb1552ba8a0eb784ec7e89614d7d37fbf274db078e16
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                      Submit Download