photo1.m95v.com - social engineering and account hijacking on Facebook

6c0a2e2f7574696c2f7065726c2f54 image fringe loggedin no-preview 2022-01-24 UTC From https://www.facebook.com/[redacted]/ - screencap'd via a liveboot of Lubuntu These files were stored at the following locations according to Linux: "[My Passport 25E2, 8430F302-178B-4501-B793-820CD63E9293; https://archive.org/details/4d616769636b2f64656661756c740d - +info]" > * "/media/ubuntu/My Passport/1/0/canada_hacker_9.png" - PNG * "/media/ubuntu/My Passport/1/0/canh9.png" - PNG file * "/media/ubuntu/My Passport/1/0/pastel.pat" - PAT file These files were stored at the following locations according to Windows: "Volume in drive G is My Passport \ Volume Serial Number is 1093-F3E8" > * "G:\1\0\canada_hacker_9.png" - PNG image file * "G:\1\0\canh9.png" - derived from "canada_hacker_9.png" * "G:\1\0\pastel.pat" - used in image file "canh9.png" The PAT file was originally stored at the following location according to Linux: <pre>lubuntu@lubuntu:/$ lsblk --ascii NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT loop0 7:0 0 1.5G 1 loop /rofs sda 8:0 0 29.1G 0 disk |-sda1 8:1 0 260M 0 part |-sda2 8:2 0 16M 0 part |-sda3 8:3 0 27.9G 0 part `-sda4 8:4 0 979M 0 part sdb 8:16 1 59.5G 0 disk `-sdb1 8:17 1 59.5G 0 part /[...] sdc 8:32 0 29.8G 0 disk /cdrom |-sdc1 8:33 0 1.6G 0 part `-sdc2 8:34 0 3.7M 0 part sde 8:64 0 3.7T 0 disk `-sde1 8:65 0 3.7T 0 part /media/lubuntu/My Passport sdf 8:80 0 4.6T 0 disk `-sdf1 8:81 0 4.6T 0 part /media/lubuntu/My Passport1 zram0 252:0 0 971.3M 0 disk [SWAP] zram1 252:1 0 971.3M 0 disk [SWAP] lubuntu@lubuntu:/$ sudo fdisk -l [...] Disk /dev/sda: 29.1 GiB, 31268536320 bytes, 61071360 sectors Disk model: BHT WR202I0032G Units: sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disklabel type: gpt Disk identifier: E03B4A94-D1F4-4023-ABA8-BC5E82674CE1 Device Start End Sectors Size Type /dev/sda1 2048 534527 532480 260M EFI System /dev/sda2 534528 567295 32768 16M Microsoft reserved /dev/sda3 567296 59052031 58484736 27.9G Microsoft basic data /dev/sda4 59052032 61057023 2004992 979M Windows recovery environment</pre> > "/usr/share/gimp/2.0/patterns/Legacy/pastel.pat" File "canada_hacker_9.png" was not uploaded to this item by me. As of 2022-01-24 12:17:14 GMT, all files in "/media/ubuntu/My Passport/1/0/" -- AKA "G:\1\0\" -- previously had the path "/media/ubuntu/My Passport/1/2001[...]/" (Windows: "G:\1\2001[...]\"). Move log: <pre>ubuntu@ubuntu-HP-Laptop-14-bw0xx:/$ stat "/media/ubuntu/My Passport/1/2001[...]" File: /media/ubuntu/My Passport/1/2001[...] Size: 262144 Blocks: 512 IO Block: 4096 directory Device: 821h/2081d Inode: 1297930 Links: 1 Access: (0777/drwxrwxrwx) Uid: ( 1000/ ubuntu) Gid: ( 1000/ ubuntu) Access: 2022-01-24 05:12:55.063416600 -0700 Modify: 2022-01-24 05:10:29.354213900 -0700 Change: 2022-01-24 05:10:29.354213900 -0700 Birth: - ubuntu@ubuntu-HP-Laptop-14-bw0xx:/$ stat -t "/media/ubuntu/My Passport/1/2001[...]" /media/ubuntu/My Passport/1/2001[...] 262144 512 41ff 1000 1000 821 1297930 1 0 0 1643026375 1643026229 1643026229 0 4096 ubuntu@ubuntu-HP-Laptop-14-bw0xx:/$ mv -n "/media/ubuntu/My Passport/1/2001[...]" "/media/ubuntu/My Passport/1/0"; date Mon, 24 Jan 2022 12:17:14 +0000 ubuntu@ubuntu-HP-Laptop-14-bw0xx:/$ stat "/media/ubuntu/My Passport/1/0" File: /media/ubuntu/My Passport/1/0 Size: 262144 Blocks: 512 IO Block: 4096 directory Device: 821h/2081d Inode: 1297930 Links: 1 Access: (0777/drwxrwxrwx) Uid: ( 1000/ ubuntu) Gid: ( 1000/ ubuntu) Access: 2022-01-24 05:17:18.629367200 -0700 Modify: 2022-01-24 05:10:29.354213900 -0700 Change: 2022-01-24 05:17:14.857849600 -0700 Birth: - ubuntu@ubuntu-HP-Laptop-14-bw0xx:/$ stat -t "/media/ubuntu/My Passport/1/0" /media/ubuntu/My Passport/1/0 262144 512 41ff 1000 1000 821 1297930 1 0 0 1643026638 1643026229 1643026634 0 4096</pre> Copying log: <pre>ubuntu@ubuntu-HP-Laptop-14-bw0xx:/$ cp -n "/usr/share/gimp/2.0/patterns/Legacy/pastel.pat" "/media/ubuntu/My Passport/1/0/"; date Mon, 24 Jan 2022 13:04:42 +0000</pre> Hashes of these (probably) regular files via sed, crc32, md5sum, sha1sum, sha224sum, sha256sum, sha384sum, sha512sum, and b2sum: <pre>ubuntu@ubuntu-HP-Laptop-14-bw0xx:/$ h1="/usr/share/gimp/2.0/patterns/Legacy/pastel.pat" ubuntu@ubuntu-HP-Laptop-14-bw0xx:/$ hs1 crc32 "$h1" | sed "s/$/\"/g" | sed "s/\\t\//\\t\"\//g"; md5sum "$h1" | sed "s/$/\"/g" | sed "s/\x20\x20\//\x20\x20\"\//g"; sha1sum "$h1" | sed "s/$/\"/g" | sed "s/\x20\x20\//\x20\x20\"\//g"; sha224sum "$h1" | sed "s/$/\"/g" | sed "s/\x20\x20\//\x20\x20\"\//g"; sha256sum "$h1" | sed "s/$/\"/g" | sed "s/\x20\x20\//\x20\x20\"\//g"; sha384sum "$h1" | sed "s/$/\"/g" | sed "s/\x20\x20\//\x20\x20\"\//g"; sha512sum "$h1" | sed "s/$/\"/g" | sed "s/\x20\x20\//\x20\x20\"\//g"; b2sum "$h1" | sed "s/$/\"/g" | sed "s/\x20\x20\//\x20\x20\"\//g"; echo "" 5e19deb7" 5bb0c03fecf664222a07fef986fa66f1 "/usr/share/gimp/2.0/patterns/Legacy/pastel.pat" 3afbd0c0f1da0a8caca2723f8c7e5c4eb4586def "/usr/share/gimp/2.0/patterns/Legacy/pastel.pat" 8ed244a8235d2f72adef894da71271d82e3f56fa95b51d578b822818 "/usr/share/gimp/2.0/patterns/Legacy/pastel.pat" ff3699206b2a757192519272c6a4a64b67452d1c007cb94c81464e6d38b46d36 "/usr/share/gimp/2.0/patterns/Legacy/pastel.pat" a96b38fa43beb62a5d6f6d1af6ebf50abaea8b7cde1693ef3285fee51f288cbb261718b4c1c9c276be6421a72dc215ac "/usr/share/gimp/2.0/patterns/Legacy/pastel.pat" 83e5ee611b43cc2f1d031675c701a454365f28a94e4901cfd1aad0d060a28ad438a74a565462bec40c3c972e126e6a0a2484042c80a3a0faa03e2582fb0a9497 "/usr/share/gimp/2.0/patterns/Legacy/pastel.pat" 552c1d180d69da9c695df721658aeee49f4ec56d515ff30efb252c4004f81cc8e52713953ddb6cabf7b3c0f374e4bebd36fb35dbb60f46226605fb2396a103cc "/usr/share/gimp/2.0/patterns/Legacy/pastel.pat" ubuntu@ubuntu-HP-Laptop-14-bw0xx:/$ h1="/media/ubuntu/My Passport/1/0/canada_hacker_9.png" ubuntu@ubuntu-HP-Laptop-14-bw0xx:/$ hs1 crc32 "$h1" | sed "s/$/\"/g" | sed "s/\\t\//\\t\"\//g"; md5sum "$h1" | sed "s/$/\"/g" | sed "s/\x20\x20\//\x20\x20\"\//g"; sha1sum "$h1" | sed "s/$/\"/g" | sed "s/\x20\x20\//\x20\x20\"\//g"; sha224sum "$h1" | sed "s/$/\"/g" | sed "s/\x20\x20\//\x20\x20\"\//g"; sha256sum "$h1" | sed "s/$/\"/g" | sed "s/\x20\x20\//\x20\x20\"\//g"; sha384sum "$h1" | sed "s/$/\"/g" | sed "s/\x20\x20\//\x20\x20\"\//g"; sha512sum "$h1" | sed "s/$/\"/g" | sed "s/\x20\x20\//\x20\x20\"\//g"; b2sum "$h1" | sed "s/$/\"/g" | sed "s/\x20\x20\//\x20\x20\"\//g"; echo "" 3dc4419e" 9ceddf8f222ec3be489dea015094efa3 "/media/ubuntu/My Passport/1/0/canada_hacker_9.png" f4aa2cdb3f7243b4b33ba96357ab75b751b604ed "/media/ubuntu/My Passport/1/0/canada_hacker_9.png" 25a246c3c6bad600bc4866b5f6ca4ec446c878e51f0296493b13d27f "/media/ubuntu/My Passport/1/0/canada_hacker_9.png" 9d2f9b9fb14030dd7e4222bd4aefe4f787ff4c6ea3fa525643c1d23addad171a "/media/ubuntu/My Passport/1/0/canada_hacker_9.png" 990701cdbbf8075d7a824be5648a1ba4ca945a4f86c1852e3a159f6a400fa7dca1f0581ae54dc2877666727b03e3d8df "/media/ubuntu/My Passport/1/0/canada_hacker_9.png" 53d9a5f9a1ad6dc590bd58d91dcc7dae5f64cd66a81e6f383f88a442ac2cf881aa28812e563b1134946b21596a096bf9d4f4f6786b983adbe5ad12348d9b012a "/media/ubuntu/My Passport/1/0/canada_hacker_9.png" 92a0bb96bb34e66093dc4d9f1efeed93a60d3e2799ea7b71f0c8ba88d96f202d39da9519e5ff986a2592510d5a5efc6c0b3cd32eacc4093d0e5382697005c971 "/media/ubuntu/My Passport/1/0/canada_hacker_9.png" ubuntu@ubuntu-HP-Laptop-14-bw0xx:/$ h1="/media/ubuntu/My Passport/1/0/canh9.png" ubuntu@ubuntu-HP-Laptop-14-bw0xx:/$ hs1 crc32 "$h1" | sed "s/$/\"/g" | sed "s/\\t\//\\t\"\//g"; md5sum "$h1" | sed "s/$/\"/g" | sed "s/\x20\x20\//\x20\x20\"\//g"; sha1sum "$h1" | sed "s/$/\"/g" | sed "s/\x20\x20\//\x20\x20\"\//g"; sha224sum "$h1" | sed "s/$/\"/g" | sed "s/\x20\x20\//\x20\x20\"\//g"; sha256sum "$h1" | sed "s/$/\"/g" | sed "s/\x20\x20\//\x20\x20\"\//g"; sha384sum "$h1" | sed "s/$/\"/g" | sed "s/\x20\x20\//\x20\x20\"\//g"; sha512sum "$h1" | sed "s/$/\"/g" | sed "s/\x20\x20\//\x20\x20\"\//g"; b2sum "$h1" | sed "s/$/\"/g" | sed "s/\x20\x20\//\x20\x20\"\//g"; echo "" db10c43a" 4a5a104319505dc78a2b166cc944f215 "/media/ubuntu/My Passport/1/0/canh9.png" dc0c5259d0f7b56d0e32b554004cc62caf7924af "/media/ubuntu/My Passport/1/0/canh9.png" 551402b9da8810db9f5fcc7a189607107c7e9f1d24188cc09afe3291 "/media/ubuntu/My Passport/1/0/canh9.png" 3137a175b313b7a21212e2f76fd90fda67fdf2d7337b28b8d26a5d8e4176ebae "/media/ubuntu/My Passport/1/0/canh9.png" 5f0f3f76ee6b165f71d5bf3985e5ecbd0afbb32cca3f383f9d2199bbfdac358ec79b29f8be87ff145c06d57e4be90eb2 "/media/ubuntu/My Passport/1/0/canh9.png" 42d6975fb91eb96ca095d1fef26d3019740a635b5853f7f4398ec3e1063af793359486f03f99f836da77b1bc0e530d6057481f97680b4a697a07db502e6947e1 "/media/ubuntu/My Passport/1/0/canh9.png" 6965a7b030300cfaded4d19cabff9c035dbc5eb6a6c7f2503bac22cdc7aaac0bc37d079083c1ec7473562b713e3cb3f7192726872e46dec45a81d1b6535b8b55 "/media/ubuntu/My Passport/1/0/canh9.png" ubuntu@ubuntu-HP-Laptop-14-bw0xx:/$ h1="/media/ubuntu/My Passport/1/0/pastel.pat" ubuntu@ubuntu-HP-Laptop-14-bw0xx:/$ hs1 crc32 "$h1" | sed "s/$/\"/g" | sed "s/\\t\//\\t\"\//g"; md5sum "$h1" | sed "s/$/\"/g" | sed "s/\x20\x20\//\x20\x20\"\//g"; sha1sum "$h1" | sed "s/$/\"/g" | sed "s/\x20\x20\//\x20\x20\"\//g"; sha224sum "$h1" | sed "s/$/\"/g" | sed "s/\x20\x20\//\x20\x20\"\//g"; sha256sum "$h1" | sed "s/$/\"/g" | sed "s/\x20\x20\//\x20\x20\"\//g"; sha384sum "$h1" | sed "s/$/\"/g" | sed "s/\x20\x20\//\x20\x20\"\//g"; sha512sum "$h1" | sed "s/$/\"/g" | sed "s/\x20\x20\//\x20\x20\"\//g"; b2sum "$h1" | sed "s/$/\"/g" | sed "s/\x20\x20\//\x20\x20\"\//g"; echo "" 5e19deb7" 5bb0c03fecf664222a07fef986fa66f1 "/media/ubuntu/My Passport/1/0/pastel.pat" 3afbd0c0f1da0a8caca2723f8c7e5c4eb4586def "/media/ubuntu/My Passport/1/0/pastel.pat" 8ed244a8235d2f72adef894da71271d82e3f56fa95b51d578b822818 "/media/ubuntu/My Passport/1/0/pastel.pat" ff3699206b2a757192519272c6a4a64b67452d1c007cb94c81464e6d38b46d36 "/media/ubuntu/My Passport/1/0/pastel.pat" a96b38fa43beb62a5d6f6d1af6ebf50abaea8b7cde1693ef3285fee51f288cbb261718b4c1c9c276be6421a72dc215ac "/media/ubuntu/My Passport/1/0/pastel.pat" 83e5ee611b43cc2f1d031675c701a454365f28a94e4901cfd1aad0d060a28ad438a74a565462bec40c3c972e126e6a0a2484042c80a3a0faa03e2582fb0a9497 "/media/ubuntu/My Passport/1/0/pastel.pat" 552c1d180d69da9c695df721658aeee49f4ec56d515ff30efb252c4004f81cc8e52713953ddb6cabf7b3c0f374e4bebd36fb35dbb60f46226605fb2396a103cc "/media/ubuntu/My Passport/1/0/pastel.pat"</pre> Properties of the containing folders, the PNG files, and the other file via exiftool, expr, ls, sed, grep, for, eval, do, echo, stat, xargs, and find: <pre>ubuntu@ubuntu-HP-Laptop-14-bw0xx:/$ h1="/media/ubuntu/My Passport/1/0/canada_hacker_9.png" ubuntu@ubuntu-HP-Laptop-14-bw0xx:/$ hs1s stat "$h1"; stat -t "$h1"; hs1sc=$(expr $(ls -d "$h1" | sed "s/\//\\n/g" | grep -c .) - 1); temp="$h1"; for n in $(eval echo {1.."$hs1sc"}); do temp=$(ls -d "$temp" | sed "s/\/[^\/]\+$//"); echo $temp; done | xargs -d "\n" stat; temp="$h1"; for n in $(eval echo {1.."$hs1sc"}); do temp=$(ls -d "$temp" | sed "s/\/[^\/]\+$//"); echo $temp; done | xargs -d "\n" stat -t; stat /; stat -t / File: /media/ubuntu/My Passport/1/0/canada_hacker_9.png Size: 384375 Blocks: 752 IO Block: 4096 regular file Device: 821h/2081d Inode: 1310506 Links: 1 Access: (0777/-rwxrwxrwx) Uid: ( 1000/ ubuntu) Gid: ( 1000/ ubuntu) Access: 2021-11-09 09:52:34.573266200 -0700 Modify: 2021-11-09 09:52:34.482922000 -0700 Change: 2021-11-09 09:52:34.482922000 -0700 Birth: - /media/ubuntu/My Passport/1/0/canada_hacker_9.png 384375 752 81ff 1000 1000 821 1310506 1 0 0 1636476754 1636476754 1636476754 0 4096 File: /media/ubuntu/My Passport/1/0 Size: 262144 Blocks: 512 IO Block: 4096 directory Device: 821h/2081d Inode: 1297930 Links: 1 Access: (0777/drwxrwxrwx) Uid: ( 1000/ ubuntu) Gid: ( 1000/ ubuntu) Access: 2022-01-24 06:07:25.616783900 -0700 Modify: 2022-01-24 06:04:42.705610300 -0700 Change: 2022-01-24 06:04:42.705610300 -0700 Birth: - File: /media/ubuntu/My Passport/1 Size: 196608 Blocks: 384 IO Block: 4096 directory Device: 821h/2081d Inode: 104193 Links: 1 Access: (0777/drwxrwxrwx) Uid: ( 1000/ ubuntu) Gid: ( 1000/ ubuntu) Access: 2022-01-24 05:17:18.642137200 -0700 Modify: 2022-01-24 05:17:14.857850100 -0700 Change: 2022-01-24 05:17:14.857850100 -0700 Birth: - File: /media/ubuntu/My Passport Size: 12288 Blocks: 24 IO Block: 4096 directory Device: 821h/2081d Inode: 5 Links: 1 Access: (0777/drwxrwxrwx) Uid: ( 1000/ ubuntu) Gid: ( 1000/ ubuntu) Access: 2021-11-20 01:45:49.912957400 -0700 Modify: 2021-11-19 06:47:27.476364200 -0700 Change: 2021-11-19 06:47:27.476364200 -0700 Birth: - File: /media/ubuntu Size: 4096 Blocks: 8 IO Block: 4096 directory Device: 805h/2053d Inode: 1179865 Links: 4 Access: (0750/drwxr-x---) Uid: ( 0/ root) Gid: ( 0/ root) Access: 2022-01-22 23:37:44.879397929 -0700 Modify: 2022-01-17 09:26:47.236616833 -0700 Change: 2022-01-17 09:26:47.236616833 -0700 Birth: - File: /media Size: 4096 Blocks: 8 IO Block: 4096 directory Device: 805h/2053d Inode: 786433 Links: 3 Access: (0755/drwxr-xr-x) Uid: ( 0/ root) Gid: ( 0/ root) Access: 2022-01-22 23:37:45.075399187 -0700 Modify: 2021-12-20 18:58:11.977915847 -0700 Change: 2021-12-20 18:58:11.977915847 -0700 Birth: - /media/ubuntu/My Passport/1/0 262144 512 41ff 1000 1000 821 1297930 1 0 0 1643029645 1643029482 1643029482 0 4096 /media/ubuntu/My Passport/1 196608 384 41ff 1000 1000 821 104193 1 0 0 1643026638 1643026634 1643026634 0 4096 /media/ubuntu/My Passport 12288 24 41ff 1000 1000 821 5 1 0 0 1637397949 1637329647 1637329647 0 4096 /media/ubuntu 4096 8 41e8 0 0 805 1179865 4 0 0 1642919864 1642436807 1642436807 0 4096 /media 4096 8 41ed 0 0 805 786433 3 0 0 1642919865 1640051891 1640051891 0 4096 File: / Size: 4096 Blocks: 8 IO Block: 4096 directory Device: 805h/2053d Inode: 2 Links: 20 Access: (0755/drwxr-xr-x) Uid: ( 0/ root) Gid: ( 0/ root) Access: 2022-01-24 02:38:00.150736778 -0700 Modify: 2021-12-20 18:48:07.907789849 -0700 Change: 2021-12-20 18:48:07.907789849 -0700 Birth: - / 4096 8 41ed 0 0 805 2 20 0 0 1643017080 1640051287 1640051287 0 4096 ubuntu@ubuntu-HP-Laptop-14-bw0xx:/$ exiftool "$h1" ExifTool Version Number : 11.88 File Name : canada_hacker_9.png Directory : /media/ubuntu/My Passport/1/0 File Size : 375 kB File Modification Date/Time : 2021:11:09 09:52:34-07:00 File Access Date/Time : 2021:11:09 09:52:34-07:00 File Inode Change Date/Time : 2021:11:09 09:52:34-07:00 File Permissions : rwxrwxrwx File Type : PNG File Type Extension : png MIME Type : image/png Image Width : 1366 Image Height : 768 Bit Depth : 8 Color Type : RGB Compression : Deflate/Inflate Filter : Adaptive Interlace : Noninterlaced Pixels Per Unit X : 3780 Pixels Per Unit Y : 3780 Pixel Units : meters Image Size : 1366x768 Megapixels : 1.0 ubuntu@ubuntu-HP-Laptop-14-bw0xx:/$ stat "/media/ubuntu/My Passport/1/0/canh9.png" File: /media/ubuntu/My Passport/1/0/canh9.png Size: 318878 Blocks: 624 IO Block: 4096 regular file Device: 821h/2081d Inode: 2560710 Links: 1 Access: (0777/-rwxrwxrwx) Uid: ( 1000/ ubuntu) Gid: ( 1000/ ubuntu) Access: 2022-01-24 06:06:27.828471000 -0700 Modify: 2022-01-24 05:53:54.046096700 -0700 Change: 2022-01-24 05:53:54.046096700 -0700 Birth: - ubuntu@ubuntu-HP-Laptop-14-bw0xx:/$ stat -t "/media/ubuntu/My Passport/1/0/canh9.png" /media/ubuntu/My Passport/1/0/canh9.png 318878 624 81ff 1000 1000 821 2560710 1 0 0 1643029587 1643028834 1643028834 0 4096 ubuntu@ubuntu-HP-Laptop-14-bw0xx:/$ exiftool "/media/ubuntu/My Passport/1/0/canh9.png" ExifTool Version Number : 11.88 File Name : canh9.png Directory : /media/ubuntu/My Passport/1/0 File Size : 311 kB File Modification Date/Time : 2022:01:24 05:53:54-07:00 File Access Date/Time : 2022:01:24 06:06:27-07:00 File Inode Change Date/Time : 2022:01:24 05:53:54-07:00 File Permissions : rwxrwxrwx File Type : PNG File Type Extension : png MIME Type : image/png Image Width : 1366 Image Height : 768 Bit Depth : 8 Color Type : RGB Compression : Deflate/Inflate Filter : Adaptive Interlace : Noninterlaced Exif Byte Order : Little-endian (Intel, II) Bits Per Sample : 8 8 8 X Resolution : 37.8 Y Resolution : 37.8 Resolution Unit : cm Software : GIMP 2.10.18 Color Space : sRGB Photometric Interpretation : YCbCr Samples Per Pixel : 3 Thumbnail Offset : 304 Thumbnail Length : 9308 Profile Name : ICC profile Profile CMM Type : Little CMS Profile Version : 4.3.0 Profile Class : Display Device Profile Color Space Data : RGB Profile Connection Space : XYZ Profile Date Time : 2022:01:24 12:28:09 Profile File Signature : acsp Primary Platform : Apple Computer Inc. CMM Flags : Not Embedded, Independent Device Manufacturer : Device Model : Device Attributes : Reflective, Glossy, Positive, Color Rendering Intent : Perceptual Connection Space Illuminant : 0.9642 1 0.82491 Profile Creator : Little CMS Profile ID : 0 Profile Description : GIMP built-in sRGB Profile Copyright : Public Domain Media White Point : 0.9642 1 0.82491 Chromatic Adaptation : 1.04788 0.02292 -0.05022 0.02959 0.99048 -0.01707 -0.00925 0.01508 0.75168 Red Matrix Column : 0.43604 0.22249 0.01392 Blue Matrix Column : 0.14305 0.06061 0.71393 Green Matrix Column : 0.38512 0.7169 0.09706 Red Tone Reproduction Curve : (Binary data 32 bytes, use -b option to extract) Green Tone Reproduction Curve : (Binary data 32 bytes, use -b option to extract) Blue Tone Reproduction Curve : (Binary data 32 bytes, use -b option to extract) Chromaticity Channels : 3 Chromaticity Colorant : Unknown (0) Chromaticity Channel 1 : 0.64 0.33002 Chromaticity Channel 2 : 0.3 0.60001 Chromaticity Channel 3 : 0.15001 0.06 Device Mfg Desc : GIMP Device Model Desc : sRGB Pixels Per Unit X : 3780 Pixels Per Unit Y : 3780 Pixel Units : meters Modify Date : 2022:01:24 12:53:53 Image Size : 1366x768 Megapixels : 1.0 Thumbnail Image : (Binary data 9308 bytes, use -b option to extract) ubuntu@ubuntu-HP-Laptop-14-bw0xx:/$ stat "/media/ubuntu/My Passport/1/0/pastel.pat" File: /media/ubuntu/My Passport/1/0/pastel.pat Size: 12325 Blocks: 32 IO Block: 4096 regular file Device: 821h/2081d Inode: 1302506 Links: 1 Access: (0777/-rwxrwxrwx) Uid: ( 1000/ ubuntu) Gid: ( 1000/ ubuntu) Access: 2022-01-24 06:05:53.020446400 -0700 Modify: 2022-01-24 06:04:42.707814200 -0700 Change: 2022-01-24 06:04:42.707814200 -0700 Birth: - ubuntu@ubuntu-HP-Laptop-14-bw0xx:/$ stat -t "/media/ubuntu/My Passport/1/0/pastel.pat" /media/ubuntu/My Passport/1/0/pastel.pat 12325 32 81ff 1000 1000 821 1302506 1 0 0 1643029553 1643029482 1643029482 0 4096 ubuntu@ubuntu-HP-Laptop-14-bw0xx:/$ exiftool "/media/ubuntu/My Passport/1/0/pastel.pat" ExifTool Version Number : 11.88 File Name : pastel.pat Directory : /media/ubuntu/My Passport/1/0 File Size : 12 kB File Modification Date/Time : 2022:01:24 06:04:42-07:00 File Access Date/Time : 2022:01:24 06:05:53-07:00 File Inode Change Date/Time : 2022:01:24 06:04:42-07:00 File Permissions : rwxrwxrwx Error : Unknown file type ubuntu@ubuntu-HP-Laptop-14-bw0xx:/$ h1="/usr/share/gimp/2.0/patterns/Legacy/pastel.pat" ubuntu@ubuntu-HP-Laptop-14-bw0xx:/$ hs1s stat "$h1"; stat -t "$h1"; hs1sc=$(expr $(ls -d "$h1" | sed "s/\//\\n/g" | grep -c .) - 1); temp="$h1"; for n in $(eval echo {1.."$hs1sc"}); do temp=$(ls -d "$temp" | sed "s/\/[^\/]\+$//"); echo $temp; done | xargs -d "\n" stat; temp="$h1"; for n in $(eval echo {1.."$hs1sc"}); do temp=$(ls -d "$temp" | sed "s/\/[^\/]\+$//"); echo $temp; done | xargs -d "\n" stat -t; stat /; stat -t / File: /usr/share/gimp/2.0/patterns/Legacy/pastel.pat Size: 12325 Blocks: 32 IO Block: 4096 regular file Device: 805h/2053d Inode: 684519 Links: 1 Access: (0644/-rw-r--r--) Uid: ( 0/ root) Gid: ( 0/ root) Access: 2022-01-24 03:02:46.705686559 -0700 Modify: 2020-03-28 23:27:45.000000000 -0600 Change: 2021-12-20 19:18:20.819720404 -0700 Birth: - /usr/share/gimp/2.0/patterns/Legacy/pastel.pat 12325 32 81a4 0 0 805 684519 1 0 0 1643018566 1585459665 1640053100 0 4096 File: /usr/share/gimp/2.0/patterns/Legacy Size: 4096 Blocks: 8 IO Block: 4096 directory Device: 805h/2053d Inode: 688180 Links: 2 Access: (0755/drwxr-xr-x) Uid: ( 0/ root) Gid: ( 0/ root) Access: 2022-01-24 03:02:46.693686503 -0700 Modify: 2021-12-20 19:18:20.823720788 -0700 Change: 2021-12-20 19:18:20.823720788 -0700 Birth: - File: /usr/share/gimp/2.0/patterns Size: 4096 Blocks: 8 IO Block: 4096 directory Device: 805h/2053d Inode: 688176 Links: 12 Access: (0755/drwxr-xr-x) Uid: ( 0/ root) Gid: ( 0/ root) Access: 2022-01-24 03:02:46.685686464 -0700 Modify: 2021-12-20 19:18:19.579600881 -0700 Change: 2021-12-20 19:18:19.579600881 -0700 Birth: - File: /usr/share/gimp/2.0 Size: 4096 Blocks: 8 IO Block: 4096 directory Device: 805h/2053d Inode: 682570 Links: 22 Access: (0755/drwxr-xr-x) Uid: ( 0/ root) Gid: ( 0/ root) Access: 2021-12-20 19:18:12.000000000 -0700 Modify: 2021-12-20 19:18:19.879629992 -0700 Change: 2021-12-20 19:18:19.879629992 -0700 Birth: - File: /usr/share/gimp Size: 4096 Blocks: 8 IO Block: 4096 directory Device: 805h/2053d Inode: 682569 Links: 3 Access: (0755/drwxr-xr-x) Uid: ( 0/ root) Gid: ( 0/ root) Access: 2021-12-20 19:18:12.000000000 -0700 Modify: 2021-12-20 19:18:17.319379217 -0700 Change: 2021-12-20 19:18:17.319379217 -0700 Birth: - File: /usr/share Size: 12288 Blocks: 24 IO Block: 4096 directory Device: 805h/2053d Inode: 1310733 Links: 272 Access: (0755/drwxr-xr-x) Uid: ( 0/ root) Gid: ( 0/ root) Access: 2021-08-19 04:46:32.000000000 -0600 Modify: 2022-01-10 04:29:02.985306478 -0700 Change: 2022-01-10 04:29:02.985306478 -0700 Birth: - File: /usr Size: 4096 Blocks: 8 IO Block: 4096 directory Device: 805h/2053d Inode: 1310722 Links: 14 Access: (0755/drwxr-xr-x) Uid: ( 0/ root) Gid: ( 0/ root) Access: 2022-01-20 18:45:36.651017048 -0700 Modify: 2021-08-19 04:32:34.000000000 -0600 Change: 2021-12-20 18:47:32.591602994 -0700 Birth: - /usr/share/gimp/2.0/patterns/Legacy 4096 8 41ed 0 0 805 688180 2 0 0 1643018566 1640053100 1640053100 0 4096 /usr/share/gimp/2.0/patterns 4096 8 41ed 0 0 805 688176 12 0 0 1643018566 1640053099 1640053099 0 4096 /usr/share/gimp/2.0 4096 8 41ed 0 0 805 682570 22 0 0 1640053092 1640053099 1640053099 0 4096 /usr/share/gimp 4096 8 41ed 0 0 805 682569 3 0 0 1640053092 1640053097 1640053097 0 4096 /usr/share 12288 24 41ed 0 0 805 1310733 272 0 0 1629369992 1641814142 1641814142 0 4096 /usr 4096 8 41ed 0 0 805 1310722 14 0 0 1642729536 1629369154 1640051252 0 4096 File: / Size: 4096 Blocks: 8 IO Block: 4096 directory Device: 805h/2053d Inode: 2 Links: 20 Access: (0755/drwxr-xr-x) Uid: ( 0/ root) Gid: ( 0/ root) Access: 2022-01-24 02:38:00.150736778 -0700 Modify: 2021-12-20 18:48:07.907789849 -0700 Change: 2021-12-20 18:48:07.907789849 -0700 Birth: - / 4096 8 41ed 0 0 805 2 20 0 0 1643017080 1640051287 1640051287 0 4096</pre> See also: * https://photo1.m95v.com/nJBztvH4 - redirected to preview.p5js.org, see: ** https://web.archive.org/web/20211109153721/https://preview.p5js.org/app897/present/Facebook-Video-207.241.232.185#0.16305727023319616 * https://heavy.com/news/2020/06/alexandria-ocasio-cortez-tweets/ * http://www.shadyurl.com/ * https://archive.org/details/6a6e670d0a7e2f446f776e6c6f6164 - other upload of mine, has the text ** "Ah, what swell day it is!", which should be the following text instead: *** "Ah, what a swell day it is!", unless I fixed it identifier basically from stdout of "lubuntu@lubuntu:[/home/lubuntu/openssl-3.0.0]$ find . -type d", 3 eng Internet Archive HTML5 Uploader 1.6.4 spam; malware; security; computer security; cyber security; security research; preview.p5js.org; p5js.org; photo1.m95v.com; m95v.com; fight spam fighting spam; screenshot; screencap; screen shot; screengrab; edit; edited; pastel.pat; pastel; pattern; GIMP pattern; redacted; redacted via .pat redacted via pattern; redacted via GIMP pattern; social; engineering; social engineering; account; hijacking; Facebook; facebook.com; boomer trap boomer; www.facebook.com; boomers; save the boomers; link; URL; links; URLs; 2022-01-24; 2022-01-24 UTC; 2022; 2020s; the 2020s; cybersecurity; sus shady URL; sketchy URL; shady link; sketchy link; sussy; suspicious; suspicious link; suspicious URL; derived; derived file; derived via GIMP; page webpage; web page; emoticon; emoji; spammer; spamming; spammed; account hijacking; account hijack; hijack; hijacked; hijacked account; fail; fails hijacked accounts; trick; tricked; trickster; 1636476754; unix time 1636476754; Unix Epoch 1636476754; screenshot from Unix Epoch 1636476754; 2021 unix time 1636476754 (Tue Nov 09 16:52:34 2021 UTC); Nov 09 16:52:34 2021 UTC; 2021-11-09 16:52:34 UTC; 2021-11-09 16:52:34; 2021-11-09; 2021-11 screenshot from 2021-11-09 16:52:34 UTC; screenshot from 2021-11-09; 2021-11-09 screenshot; 20211109165234; derived in 2022-01-24 photo1.m95v.com - social engineering and account hijacking on Facebook leedusmcclein@gmail.com 2022-01-24 13:11:16 2022-01-24 13:11:16 [curator]validator@archive.org[/curator][date]20220124131131[/date][comment]checked for malware[/comment] 2022

true

deemphasize