Overview

overview

7

Static

static

5

OW_Heroes_...ev.pdf

ubuntu-24.04-amd64

7

Analysis

  • user interaction
    yes
  • max time kernel
    898s
  • max time network
    897s
  • platform
    ubuntu-24.04_amd64
  • resource
    ubuntu2404-amd64-20261019-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2404-amd64-20261019-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system
  • submitted
    26/10/2026, 16:13

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    OW_Heroes_Hammond_EN_FINAL_Rev.pdf
  • Size 68.9MB
  • Sample261026-tpaddae12y
  • SHA256 d8dae194c9cc37320784069ac8c3e326327e1f8fd2c1533998bc6a577896c399
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
antivmcredential_accessdiscovery

Malware Config

Signatures

  • OS Credential Dumping 1 TTPs 1 IoCs

    Adversaries may attempt to dump credentials to use it in password cracking.

    credential_access
  • Checks hardware identifiers (DMI) 1 TTPs 1 IoCs

    Checks DMI information which indicate if the system is a virtual machine.

    antivm
  • Reads hardware information 1 TTPs 1 IoCs

    Accesses system info like serial numbers, manufacturer names etc.

    discovery
  • Changes its process name 64 IoCs
  • Checks CPU configuration 1 TTPs 1 IoCs

    Checks CPU information which indicate if the system is a virtual machine.

    antivm
  • Reads CPU attributes 1 TTPs 10 IoCs
    discovery
  • Enumerates kernel/hardware configuration 1 TTPs 42 IoCs

    Reads contents of /sys virtual filesystem to enumerate system information.

    discovery
  • Reads runtime system information 64 IoCs

    Reads data from /proc virtual filesystem.

    discovery
  • Writes file to tmp directory 3 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /usr/bin/xdg-open
    xdg-open /tmp/OW_Heroes_Hammond_EN_FINAL_Rev.pdf
    1⤵
      PID:2076
      • /usr/bin/dbus-send
        dbus-send --print-reply "--dest=org.freedesktop.DBus" /org/freedesktop/DBus org.freedesktop.DBus.GetNameOwner string:org.gnome.SessionManager
        2⤵
        • Reads runtime system information
        PID:2077
        • /usr/bin/dbus-launch
          dbus-launch --autolaunch 36e6eb39a6fa405996e79cad2731865d --binary-syntax --close-stderr
          3⤵
            PID:2079
            • /usr/bin/dbus-daemon
              /usr/bin/dbus-daemon --syslog-only --fork --print-pid 5 --print-address 7 --session
              4⤵
              • Enumerates kernel/hardware configuration
              • Reads runtime system information
              PID:2081
              • /usr/libexec/xdg-desktop-portal
                /usr/libexec/xdg-desktop-portal
                5⤵
                • Changes its process name
                PID:2232
              • /usr/libexec/xdg-document-portal
                /usr/libexec/xdg-document-portal
                5⤵
                  PID:2251
                  • /usr/bin/fusermount3
                    fusermount3 -o "rw,nosuid,nodev,fsname=portal,auto_unmount,subtype=portal" -- /root/.cache/doc
                    6⤵
                      PID:2263
                  • /usr/libexec/xdg-permission-store
                    /usr/libexec/xdg-permission-store
                    5⤵
                    • Reads runtime system information
                    PID:2256
                  • /usr/libexec/xdg-desktop-portal-gtk
                    /usr/libexec/xdg-desktop-portal-gtk
                    5⤵
                      PID:2269
                    • /usr/libexec/gvfsd
                      /usr/libexec/gvfsd
                      5⤵
                      • Reads runtime system information
                      PID:2276
                    • /usr/libexec/at-spi-bus-launcher
                      /usr/libexec/at-spi-bus-launcher
                      5⤵
                      • Reads runtime system information
                      PID:2295
              • /usr/bin/grep
                grep " = \\\"xfce4\\\"\$"
                2⤵
                • Reads runtime system information
                PID:2085
              • /usr/bin/xprop
                xprop -root _DT_SAVE_MODE
                2⤵
                  PID:2084
                • /usr/bin/xprop
                  xprop -root
                  2⤵
                    PID:2086
                  • /usr/bin/grep
                    grep -i "^xfce_desktop_window"
                    2⤵
                    • Reads runtime system information
                    PID:2087
                  • /usr/bin/grep
                    grep -q "^Enlightenment"
                    2⤵
                    • Reads runtime system information
                    PID:2089
                  • /usr/bin/uname
                    uname
                    2⤵
                      PID:2090
                    • /usr/bin/grep
                      grep -q "^file://"
                      2⤵
                      • Reads runtime system information
                      PID:2092
                    • /usr/bin/egrep
                      egrep -q "^[[:alpha:]+\\.\\-]+:"
                      2⤵
                        PID:2094
                      • /usr/local/sbin/grep
                        grep -E -q "^[[:alpha:]+\\.\\-]+:"
                        2⤵
                          PID:2094
                        • /usr/local/bin/grep
                          grep -E -q "^[[:alpha:]+\\.\\-]+:"
                          2⤵
                            PID:2094
                          • /usr/sbin/grep
                            grep -E -q "^[[:alpha:]+\\.\\-]+:"
                            2⤵
                              PID:2094
                            • /usr/bin/grep
                              grep -E -q "^[[:alpha:]+\\.\\-]+:"
                              2⤵
                              • Reads runtime system information
                              PID:2094
                            • /usr/bin/grep
                              grep -q "^file:///"
                              2⤵
                              • Reads runtime system information
                              PID:2097
                            • /usr/bin/sed
                              sed "s/;.*//"
                              2⤵
                                PID:2100
                              • /usr/bin/xdg-mime
                                xdg-mime query filetype /tmp/OW_Heroes_Hammond_EN_FINAL_Rev.pdf
                                2⤵
                                  PID:2099
                                  • /usr/bin/readlink
                                    readlink -f -- /tmp/OW_Heroes_Hammond_EN_FINAL_Rev.pdf
                                    3⤵
                                      PID:2101
                                    • /usr/bin/dbus-send
                                      dbus-send --print-reply "--dest=org.freedesktop.DBus" /org/freedesktop/DBus org.freedesktop.DBus.GetNameOwner string:org.gnome.SessionManager
                                      3⤵
                                      • Reads runtime system information
                                      PID:2102
                                      • /usr/bin/dbus-launch
                                        dbus-launch --autolaunch 36e6eb39a6fa405996e79cad2731865d --binary-syntax --close-stderr
                                        4⤵
                                          PID:2103
                                      • /usr/bin/xprop
                                        xprop -root _DT_SAVE_MODE
                                        3⤵
                                          PID:2104
                                        • /usr/bin/grep
                                          grep " = \\\"xfce4\\\"\$"
                                          3⤵
                                          • Reads runtime system information
                                          PID:2105
                                        • /usr/bin/xprop
                                          xprop -root
                                          3⤵
                                            PID:2106
                                          • /usr/bin/grep
                                            grep -i "^xfce_desktop_window"
                                            3⤵
                                            • Reads runtime system information
                                            PID:2107
                                          • /usr/bin/grep
                                            grep -q "^Enlightenment"
                                            3⤵
                                            • Reads runtime system information
                                            PID:2112
                                          • /usr/bin/uname
                                            uname
                                            3⤵
                                              PID:2113
                                            • /usr/bin/mimetype
                                              mimetype --version
                                              3⤵
                                                PID:2114
                                              • /usr/bin/mimetype
                                                mimetype --brief --dereference /tmp/OW_Heroes_Hammond_EN_FINAL_Rev.pdf
                                                3⤵
                                                • OS Credential Dumping
                                                PID:2115
                                            • /usr/bin/xdg-mime
                                              xdg-mime query default application/pdf
                                              2⤵
                                                PID:2116
                                                • /usr/bin/dbus-send
                                                  dbus-send --print-reply "--dest=org.freedesktop.DBus" /org/freedesktop/DBus org.freedesktop.DBus.GetNameOwner string:org.gnome.SessionManager
                                                  3⤵
                                                  • Reads runtime system information
                                                  PID:2117
                                                  • /usr/bin/dbus-launch
                                                    dbus-launch --autolaunch 36e6eb39a6fa405996e79cad2731865d --binary-syntax --close-stderr
                                                    4⤵
                                                      PID:2118
                                                  • /usr/bin/xprop
                                                    xprop -root _DT_SAVE_MODE
                                                    3⤵
                                                      PID:2119
                                                    • /usr/bin/grep
                                                      grep " = \\\"xfce4\\\"\$"
                                                      3⤵
                                                      • Reads runtime system information
                                                      PID:2120
                                                    • /usr/bin/xprop
                                                      xprop -root
                                                      3⤵
                                                        PID:2121
                                                      • /usr/bin/grep
                                                        grep -i "^xfce_desktop_window"
                                                        3⤵
                                                        • Reads runtime system information
                                                        PID:2122
                                                      • /usr/bin/grep
                                                        grep -q "^Enlightenment"
                                                        3⤵
                                                        • Reads runtime system information
                                                        PID:2124
                                                      • /usr/bin/uname
                                                        uname
                                                        3⤵
                                                          PID:2125
                                                        • /usr/bin/sed
                                                          sed "s/:/ /g"
                                                          3⤵
                                                          • Reads runtime system information
                                                          PID:2128
                                                        • /usr/bin/grep
                                                          grep "application/pdf=" /.local/share/applications/defaults.list /.local/share/applications/mimeinfo.cache
                                                          3⤵
                                                            PID:2130
                                                          • /usr/bin/head
                                                            head -n 1
                                                            3⤵
                                                              PID:2131
                                                            • /usr/bin/cut
                                                              cut -d ";" -f 1
                                                              3⤵
                                                                PID:2133
                                                              • /usr/bin/cut
                                                                cut -d "=" -f 2
                                                                3⤵
                                                                  PID:2132
                                                                • /usr/bin/grep
                                                                  grep "application/pdf=" /.local/share/applications/defaults.list /.local/share/applications/mimeinfo.cache
                                                                  3⤵
                                                                  • Reads runtime system information
                                                                  PID:2135
                                                                • /usr/bin/cut
                                                                  cut -d "=" -f 2
                                                                  3⤵
                                                                    PID:2137
                                                                  • /usr/bin/cut
                                                                    cut -d ";" -f 1
                                                                    3⤵
                                                                      PID:2138
                                                                    • /usr/bin/head
                                                                      head -n 1
                                                                      3⤵
                                                                        PID:2136
                                                                      • /usr/bin/head
                                                                        head -n 1
                                                                        3⤵
                                                                          PID:2141
                                                                        • /usr/bin/cut
                                                                          cut -d "=" -f 2
                                                                          3⤵
                                                                            PID:2142
                                                                          • /usr/bin/grep
                                                                            grep "application/pdf=" /usr/local/share//applications/defaults.list /usr/local/share//applications/mimeinfo.cache
                                                                            3⤵
                                                                            • Reads runtime system information
                                                                            PID:2140
                                                                          • /usr/bin/cut
                                                                            cut -d ";" -f 1
                                                                            3⤵
                                                                              PID:2143
                                                                            • /usr/bin/grep
                                                                              grep "application/pdf=" /usr/local/share//applications/defaults.list /usr/local/share//applications/mimeinfo.cache
                                                                              3⤵
                                                                              • Reads runtime system information
                                                                              PID:2145
                                                                            • /usr/bin/head
                                                                              head -n 1
                                                                              3⤵
                                                                                PID:2146
                                                                              • /usr/bin/cut
                                                                                cut -d "=" -f 2
                                                                                3⤵
                                                                                  PID:2147
                                                                                • /usr/bin/cut
                                                                                  cut -d ";" -f 1
                                                                                  3⤵
                                                                                    PID:2148
                                                                                  • /usr/bin/grep
                                                                                    grep "application/pdf=" /usr/share//applications/defaults.list /usr/share//applications/mimeinfo.cache
                                                                                    3⤵
                                                                                    • Reads runtime system information
                                                                                    PID:2150
                                                                                  • /usr/bin/cut
                                                                                    cut -d "=" -f 2
                                                                                    3⤵
                                                                                      PID:2152
                                                                                    • /usr/bin/head
                                                                                      head -n 1
                                                                                      3⤵
                                                                                        PID:2151
                                                                                      • /usr/bin/cut
                                                                                        cut -d ";" -f 1
                                                                                        3⤵
                                                                                          PID:2153
                                                                                      • /usr/bin/sed
                                                                                        sed "s/:/ /g"
                                                                                        2⤵
                                                                                        • Reads runtime system information
                                                                                        PID:2156
                                                                                      • /usr/bin/sed
                                                                                        sed -e "s|-|/|"
                                                                                        2⤵
                                                                                        • Reads runtime system information
                                                                                        PID:2159
                                                                                      • /usr/bin/sed
                                                                                        sed -e "s|-|/|"
                                                                                        2⤵
                                                                                        • Reads runtime system information
                                                                                        PID:2162
                                                                                      • /usr/bin/cut
                                                                                        cut "-d=" -f 2-
                                                                                        2⤵
                                                                                          PID:2167
                                                                                        • /usr/bin/which
                                                                                          which firefox
                                                                                          2⤵
                                                                                            PID:2168
                                                                                          • /usr/bin/cut
                                                                                            cut "-d=" -f 2-
                                                                                            2⤵
                                                                                              PID:2171
                                                                                            • /usr/bin/cut
                                                                                              cut "-d=" -f 2-
                                                                                              2⤵
                                                                                                PID:2174
                                                                                              • /usr/bin/cut
                                                                                                cut "-d=" -f 2-
                                                                                                2⤵
                                                                                                  PID:2179
                                                                                                • /usr/bin/cut
                                                                                                  cut "-d=" -f 2-
                                                                                                  2⤵
                                                                                                    PID:2182
                                                                                                  • /usr/bin/firefox
                                                                                                    /usr/bin/firefox /tmp/OW_Heroes_Hammond_EN_FINAL_Rev.pdf
                                                                                                    2⤵
                                                                                                      PID:2183
                                                                                                    • /usr/lib/firefox/firefox-bin
                                                                                                      /usr/bin/firefox /tmp/OW_Heroes_Hammond_EN_FINAL_Rev.pdf
                                                                                                      2⤵
                                                                                                      • Checks hardware identifiers (DMI)
                                                                                                      • Reads hardware information
                                                                                                      • Changes its process name
                                                                                                      • Checks CPU configuration
                                                                                                      • Reads CPU attributes
                                                                                                      • Enumerates kernel/hardware configuration
                                                                                                      • Reads runtime system information
                                                                                                      • Writes file to tmp directory
                                                                                                      PID:2183
                                                                                                      • /usr/lib/firefox/crashhelper
                                                                                                        /usr/lib/firefox/crashhelper 2183 9 /tmp/ 11 20261007201254
                                                                                                        3⤵
                                                                                                          PID:2187
                                                                                                        • /usr/local/sbin/dbus-launch
                                                                                                          dbus-launch "--autolaunch=36e6eb39a6fa405996e79cad2731865d" --binary-syntax --close-stderr
                                                                                                          3⤵
                                                                                                            PID:2192
                                                                                                          • /usr/local/bin/dbus-launch
                                                                                                            dbus-launch "--autolaunch=36e6eb39a6fa405996e79cad2731865d" --binary-syntax --close-stderr
                                                                                                            3⤵
                                                                                                              PID:2192
                                                                                                            • /usr/sbin/dbus-launch
                                                                                                              dbus-launch "--autolaunch=36e6eb39a6fa405996e79cad2731865d" --binary-syntax --close-stderr
                                                                                                              3⤵
                                                                                                                PID:2192
                                                                                                              • /usr/bin/dbus-launch
                                                                                                                dbus-launch "--autolaunch=36e6eb39a6fa405996e79cad2731865d" --binary-syntax --close-stderr
                                                                                                                3⤵
                                                                                                                  PID:2192
                                                                                                                • /usr/lib/firefox/gfxtest
                                                                                                                  /usr/lib/firefox/gfxtest glx -f 18
                                                                                                                  3⤵
                                                                                                                  • Changes its process name
                                                                                                                  • Reads CPU attributes
                                                                                                                  • Enumerates kernel/hardware configuration
                                                                                                                  • Reads runtime system information
                                                                                                                  PID:2196
                                                                                                                • /usr/lib/firefox/firefox-bin
                                                                                                                  /usr/lib/firefox/firefox-bin -contentproc -ipcHandle 0 -signalPipe 1 -initialChannelId "{0d9004c9-27f4-4fb2-8e28-69138d5fecd3}" -parentPid 2183 -greomni /usr/lib/firefox/omni.ja -appomni /usr/lib/firefox/browser/omni.ja -appDir /usr/lib/firefox/browser 1 forkserver
                                                                                                                  3⤵
                                                                                                                  • Reads CPU attributes
                                                                                                                  • Enumerates kernel/hardware configuration
                                                                                                                  • Reads runtime system information
                                                                                                                  • Writes file to tmp directory
                                                                                                                  PID:2271
                                                                                                            • /usr/libexec/gvfsd-fuse
                                                                                                              /usr/libexec/gvfsd-fuse /root/.gvfs -f
                                                                                                              1⤵
                                                                                                              • Reads runtime system information
                                                                                                              PID:2282

                                                                                                            Network

                                                                                                                  MITRE ATT&CK Enterprise v16

                                                                                                                  Replay Monitor

                                                                                                                  Loading Replay Monitor...

                                                                                                                  Downloads

                                                                                                                  1378179556
                                                                                                                  • Path /root/.cache/mozilla/firefox/v423ya1n.default-release/cache2/doomed/1378179556
                                                                                                                  • Size 17KB
                                                                                                                  • SHA256 5da59b501795f5f1e9fa2e3680f11b9ab8bc7d8462f7952b32adc0a9a2744163
                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                  Submit Download

                                                                                                                  06735A974DF1893796260A845C9C4280E6BDD037
                                                                                                                  • Path /root/.cache/mozilla/firefox/v423ya1n.default-release/cache2/entries/06735A974DF1893796260A845C9C4280E6BDD037
                                                                                                                  • Size 17KB
                                                                                                                  • SHA256 7cb1eed3b59304084b038fc153495de1c8ccd7c6bb8e07a6f8245a1eb807ad02
                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                  Submit Download

                                                                                                                  14B3C472384DAE68086FB482138E4D9418395138
                                                                                                                  • Path /root/.cache/mozilla/firefox/v423ya1n.default-release/cache2/entries/14B3C472384DAE68086FB482138E4D9418395138
                                                                                                                  • Size 17KB
                                                                                                                  • SHA256 f714cfb5c8de720844074afffabc4594c6fa9ffa503d02844986dc694e547bed
                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                  Submit Download

                                                                                                                  4834978AED2C6B62A9B483EAFD9E43B304CC45E8
                                                                                                                  • Path /root/.cache/mozilla/firefox/v423ya1n.default-release/cache2/entries/4834978AED2C6B62A9B483EAFD9E43B304CC45E8
                                                                                                                  • Size 17KB
                                                                                                                  • SHA256 788e6e55ce9616d78653a1d7a3635177b480c4933b97ac667a4aea50bff053e1
                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                  Submit Download

                                                                                                                  6E7C72B58DD19446CD32AC5809F9CF381FDD9B9B
                                                                                                                  • Path /root/.cache/mozilla/firefox/v423ya1n.default-release/cache2/entries/6E7C72B58DD19446CD32AC5809F9CF381FDD9B9B
                                                                                                                  • Size 16KB
                                                                                                                  • SHA256 3b1db28293ff648f3f68bf9abb0ec36a8ddcb17ede749eed04526cf172e904a9
                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                  Submit Download

                                                                                                                  75B5AB405E2524132CB5F49D04222C9B898C9CCA
                                                                                                                  • Path /root/.cache/mozilla/firefox/v423ya1n.default-release/cache2/entries/75B5AB405E2524132CB5F49D04222C9B898C9CCA
                                                                                                                  • Size 15KB
                                                                                                                  • SHA256 0255baf2e0570e34fbf020b531b4bb152ee83e44769ce57cebededf6483b3f97
                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                  Submit Download

                                                                                                                  7D4951A9FE7A78EFDEFC2D33D3CACDD2616567A0
                                                                                                                  • Path /root/.cache/mozilla/firefox/v423ya1n.default-release/cache2/entries/7D4951A9FE7A78EFDEFC2D33D3CACDD2616567A0
                                                                                                                  • Size 17KB
                                                                                                                  • SHA256 982f48db103e018538c57ec9f780b428cc840847c8a569cd294c2d7def13170d
                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                  Submit Download

                                                                                                                  90DB2272E6B685EA24D17FF9D2187F531D01EF65
                                                                                                                  • Path /root/.cache/mozilla/firefox/v423ya1n.default-release/cache2/entries/90DB2272E6B685EA24D17FF9D2187F531D01EF65
                                                                                                                  • Size 17KB
                                                                                                                  • SHA256 fe95b7e28c9f7613e78d6da5a079af58d9385f992dc54f5da4bb0f6011e09183
                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                  Submit Download

                                                                                                                  99E254AD13D0691D8116830B47B4CA099750BF30
                                                                                                                  • Path /root/.cache/mozilla/firefox/v423ya1n.default-release/cache2/entries/99E254AD13D0691D8116830B47B4CA099750BF30
                                                                                                                  • Size 169KB
                                                                                                                  • SHA256 d34d9ed9710bdb51d7aa56d789965ad2a452a198adf0036bcdb09ccc861e69d8
                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                  Submit Download

                                                                                                                  C6A0A79FC4222804D511A2AED2B4CAFB6906A2B2
                                                                                                                  • Path /root/.cache/mozilla/firefox/v423ya1n.default-release/cache2/entries/C6A0A79FC4222804D511A2AED2B4CAFB6906A2B2
                                                                                                                  • Size 17KB
                                                                                                                  • SHA256 dd33da56dc003e74456ec29200ab90e578c606a65138e69eb7a92f54e7e6ad68
                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                  Submit Download

                                                                                                                  C7F5AA44F61B5E3DB095096E80D00E5C32E7B840
                                                                                                                  • Path /root/.cache/mozilla/firefox/v423ya1n.default-release/cache2/entries/C7F5AA44F61B5E3DB095096E80D00E5C32E7B840
                                                                                                                  • Size 1KB
                                                                                                                  • SHA256 3c18ac855e7d26cf7c50bf069c8afbdb7dcd0061928a7799b0b7c78e03e78ecc
                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                  Submit Download

                                                                                                                  C7F5AA44F61B5E3DB095096E80D00E5C32E7B840
                                                                                                                  • Path /root/.cache/mozilla/firefox/v423ya1n.default-release/cache2/entries/C7F5AA44F61B5E3DB095096E80D00E5C32E7B840
                                                                                                                  • Size 17KB
                                                                                                                  • SHA256 c1b03d136d09fac0c79b8c64b5c980a773f7a7a831d87f814d0a42046bbfe26e
                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                  Submit Download

                                                                                                                  D0F48A0632B6C451791F4257697E861961F06A6F
                                                                                                                  • Path /root/.cache/mozilla/firefox/v423ya1n.default-release/cache2/entries/D0F48A0632B6C451791F4257697E861961F06A6F
                                                                                                                  • Size 839KB
                                                                                                                  • SHA256 537af527ce3969cd2c0a23d8f44b91888ed639c95b9a29cd6b420c7d86a93fde
                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                  Submit Download

                                                                                                                  startupCache.8.little
                                                                                                                  • Path /root/.cache/mozilla/firefox/v423ya1n.default-release/startupCache/startupCache.8.little
                                                                                                                  • Size 4.1MB
                                                                                                                  • SHA256 5c73aa0a7980816a07f99b539eaab65f88e78ad1545d871442744870b8da93e0
                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                  Submit Download

                                                                                                                  events
                                                                                                                  • Path /root/.config/mozilla/firefox/v423ya1n.default-release/datareporting/glean/events/events
                                                                                                                  • Size 19KB
                                                                                                                  • SHA256 bd23bf536857744c13be4f5f348c98361d75007391f9f5929dc7dcaa01cd8f04
                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                  Submit Download

                                                                                                                  nimbus-targeting-context
                                                                                                                  • Path /root/.config/mozilla/firefox/v423ya1n.default-release/datareporting/glean/events/nimbus-targeting-context
                                                                                                                  • Size 56KB
                                                                                                                  • SHA256 08bcbb69afd0b8666556ce1abc9e1f49cd326fe8ff472f9c248d080de19d6186
                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                  Submit Download

                                                                                                                  2382ca89-3744-46ee-8ae9-7ac31f119aab
                                                                                                                  • Path /root/.config/mozilla/firefox/v423ya1n.default-release/datareporting/glean/tmp/2382ca89-3744-46ee-8ae9-7ac31f119aab
                                                                                                                  • Size 7KB
                                                                                                                  • SHA256 8d864c6d11ca90796110cd3c1aa3866f68fc38a898f201997d2fab5ff43d36fb
                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                  Submit Download

                                                                                                                  3c64308d-7731-46c5-984d-9df57e48414a
                                                                                                                  • Path /root/.config/mozilla/firefox/v423ya1n.default-release/datareporting/glean/tmp/3c64308d-7731-46c5-984d-9df57e48414a
                                                                                                                  • Size 368B
                                                                                                                  • SHA256 9235eb71088d26389bab152e4787be5fb0cdf147ab9168861a8fb34d8d03f02e
                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                  Submit Download

                                                                                                                  4960019d-4eab-4ef6-8e8d-c87c3e8aa26d
                                                                                                                  • Path /root/.config/mozilla/firefox/v423ya1n.default-release/datareporting/glean/tmp/4960019d-4eab-4ef6-8e8d-c87c3e8aa26d
                                                                                                                  • Size 4KB
                                                                                                                  • SHA256 d17a3020340ee33cbbc50f000228fe5572e98c26fc3568efc03285d357197901
                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                  Submit Download

                                                                                                                  6056fdf8-72b0-4584-975c-8c0e91a7b9a5
                                                                                                                  • Path /root/.config/mozilla/firefox/v423ya1n.default-release/datareporting/glean/tmp/6056fdf8-72b0-4584-975c-8c0e91a7b9a5
                                                                                                                  • Size 5KB
                                                                                                                  • SHA256 3bf6d87efeab77e42dcdbf180c0d6643f6b9643d8e4ec42491d9c66c8fa62f42
                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                  Submit Download

                                                                                                                  68a0c19c-985b-4af5-9b35-b03d7c5b6872
                                                                                                                  • Path /root/.config/mozilla/firefox/v423ya1n.default-release/datareporting/glean/tmp/68a0c19c-985b-4af5-9b35-b03d7c5b6872
                                                                                                                  • Size 39KB
                                                                                                                  • SHA256 d2b24b5ab909270c16c38ed0268164482f3904f5b7bb82dae622e8eada3e36cd
                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                  Submit Download

                                                                                                                  6dc4b30b-a77c-45c0-ad12-535b9cf5ee9c
                                                                                                                  • Path /root/.config/mozilla/firefox/v423ya1n.default-release/datareporting/glean/tmp/6dc4b30b-a77c-45c0-ad12-535b9cf5ee9c
                                                                                                                  • Size 64KB
                                                                                                                  • SHA256 23b8ca0e0e170731994b52750fde2689c6f968c0c171553c62e9747018a3d838
                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                  Submit Download

                                                                                                                  7c0a85aa-bef6-43a8-a13a-b61ed412fe42
                                                                                                                  • Path /root/.config/mozilla/firefox/v423ya1n.default-release/datareporting/glean/tmp/7c0a85aa-bef6-43a8-a13a-b61ed412fe42
                                                                                                                  • Size 4KB
                                                                                                                  • SHA256 596a7c80940d9cdacaf0bfa5e7751bd12c796ff7737fb50f618c68e374d88aee
                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                  Submit Download

                                                                                                                  8d992a1e-de36-436e-8502-fa8af9504a99
                                                                                                                  • Path /root/.config/mozilla/firefox/v423ya1n.default-release/datareporting/glean/tmp/8d992a1e-de36-436e-8502-fa8af9504a99
                                                                                                                  • Size 14KB
                                                                                                                  • SHA256 0c1a0cbcda6706a5b96060a6c0e71d469f75b5814098510552357d88f81b839f
                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                  Submit Download

                                                                                                                  ac686b33-120a-4ec0-b677-fc8293e943cd
                                                                                                                  • Path /root/.config/mozilla/firefox/v423ya1n.default-release/datareporting/glean/tmp/ac686b33-120a-4ec0-b677-fc8293e943cd
                                                                                                                  • Size 4KB
                                                                                                                  • SHA256 944e62ab2062f3a8bb505e4551c81f01f570af5405db606bcb4882e66b64444d
                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                  Submit Download

                                                                                                                  ea6f8c9d-3143-4429-a7cd-a23d47f2d704
                                                                                                                  • Path /root/.config/mozilla/firefox/v423ya1n.default-release/datareporting/glean/tmp/ea6f8c9d-3143-4429-a7cd-a23d47f2d704
                                                                                                                  • Size 5KB
                                                                                                                  • SHA256 4e9a5d96192b3f9e65eafec2e08857d5115cd8993c93a5ebed85499ced524f7d
                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                  Submit Download

                                                                                                                  prefs-1.js
                                                                                                                  • Path /root/.config/mozilla/firefox/v423ya1n.default-release/prefs-1.js
                                                                                                                  • Size 7KB
                                                                                                                  • SHA256 4aefa1f9d178e0fdb753b3d11ff5f87436e441f21c13ce30db8a1afb3b112f26
                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                  Submit Download

                                                                                                                  prefs-1.js
                                                                                                                  • Path /root/.config/mozilla/firefox/v423ya1n.default-release/prefs-1.js
                                                                                                                  • Size 7KB
                                                                                                                  • SHA256 d15d9fa85a54c148f105bd9c4bbbe68c14506520e93446dd990d5d3d39cbeabf
                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                  Submit Download

                                                                                                                  prefs-1.js
                                                                                                                  • Path /root/.config/mozilla/firefox/v423ya1n.default-release/prefs-1.js
                                                                                                                  • Size 7KB
                                                                                                                  • SHA256 3e570c3ed7fc3a558d57aad0789701969eb42298ff870fb62c50cd77921c34f1
                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                  Submit Download

                                                                                                                  prefs-1.js
                                                                                                                  • Path /root/.config/mozilla/firefox/v423ya1n.default-release/prefs-1.js
                                                                                                                  • Size 8KB
                                                                                                                  • SHA256 42edccf411abbadcfea5a84c676cbb4ae4f6d0075725f3e250d639d829120711
                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                  Submit Download

                                                                                                                  prefs-1.js
                                                                                                                  • Path /root/.config/mozilla/firefox/v423ya1n.default-release/prefs-1.js
                                                                                                                  • Size 7KB
                                                                                                                  • SHA256 c5bc47bd30e7e3641b7a122a3880d008e4454f4e4ef6ac2feb2b503e818d49bc
                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                  Submit Download

                                                                                                                  protections.sqlite
                                                                                                                  • Path /root/.config/mozilla/firefox/v423ya1n.default-release/protections.sqlite
                                                                                                                  • Size 64KB
                                                                                                                  • SHA256 975a14a7750970486c672a1295dc46c1f69b29aaafbdad6830de817ea57f7281
                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                  Submit Download

                                                                                                                  webappsstore.sqlite
                                                                                                                  • Path /root/.config/mozilla/firefox/v423ya1n.default-release/webappsstore.sqlite
                                                                                                                  • Size 96KB
                                                                                                                  • SHA256 645b2e2c23a53d763abf3ce4cb02f8f9c59bafc01009dbaa6543bbd6f6716a05
                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                  Submit Download