Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
20/09/2024, 14:56
240920-sbcqxasfrq 420/09/2024, 14:52
240920-r827dssepm 303/09/2024, 13:17
240903-qjkelsyfkb 330/08/2024, 12:26
240830-pmm48svflp 305/06/2024, 15:48
240605-s8zxpsbb5y 1Analysis
-
max time kernel
976s -
max time network
986s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system -
submitted
20/09/2024, 14:56
Static task
static1
Behavioral task
behavioral1
Sample
873d16767e0895ff109b2a2ae61335f5_JaffaCakes118.html
Resource
win10-20240404-en
General
-
Target
873d16767e0895ff109b2a2ae61335f5_JaffaCakes118.html
-
Size
175KB
-
MD5
873d16767e0895ff109b2a2ae61335f5
-
SHA1
15ce4fd25f2709f3a3379a41e51337ddfa6c773c
-
SHA256
77da860cd56ac35ea77e4768745a0c36a3662ad08fca31aa6a5ab1cec5c3d4e0
-
SHA512
280efb73feb2b569444212a708be2e1d9432752ececc7302f4841235c6d76f3d50f2732f12d867b289f9c881a282abf5709918435344d91948ee7570a2d436f5
-
SSDEEP
1536:SqtY8hd8Wu8pI8Cd8hd8dQg0H//3oS34GNkFjYfBCJisl+aeTH+WK/Lf1/hmnVSV:SBoT34/F6BCJiZm
Malware Config
Signatures
-
Drops file in Windows directory 11 IoCs
description ioc Process File created C:\Windows\rescache\_merged\3720402701\1568373884.pri MicrosoftEdge.exe File created C:\Windows\rescache\_merged\3720402701\1568373884.pri MicrosoftEdgeCP.exe File created C:\Windows\rescache\_merged\3720402701\1568373884.pri MicrosoftEdgeCP.exe File opened for modification C:\Windows\Debug\ESE.TXT MicrosoftEdge.exe File created C:\Windows\rescache\_merged\3720402701\1568373884.pri MicrosoftEdgeCP.exe File created C:\Windows\rescache\_merged\3720402701\1568373884.pri MicrosoftEdgeCP.exe File created C:\Windows\rescache\_merged\3720402701\1568373884.pri MicrosoftEdgeCP.exe File created C:\Windows\rescache\_merged\3720402701\1568373884.pri MicrosoftEdgeCP.exe File created C:\Windows\rescache\_merged\3720402701\1568373884.pri MicrosoftEdgeCP.exe File created C:\Windows\rescache\_merged\3720402701\1568373884.pri MicrosoftEdgeCP.exe File created C:\Windows\rescache\_merged\3720402701\1568373884.pri MicrosoftEdgeCP.exe -
Checks processor information in registry 2 TTPs 5 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision firefox.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz firefox.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier firefox.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 firefox.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature firefox.exe -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000\Software\Microsoft\Internet Explorer\Main MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000\Software\Microsoft\Internet Explorer\Main MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000\Software\Microsoft\Internet Explorer\Main browser_broker.exe -
Modifies registry class 64 IoCs
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Explorer\DOMStorage\Total\ = "45872" MicrosoftEdgeCP.exe Set value (str) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:" MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ServiceUI MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Explorer\DOMStorage\Total\ = "0" MicrosoftEdgeCP.exe Set value (str) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\History\CachePrefix = "Visited:" MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\bing.com\Total = "0" MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\EdpDomStorage\bing.com\Total = "0" MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Explorer\Main\OperationalData = "1" MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Explorer\DOMStorage\youtube.com\Total = "407" MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\bing.com\NumberOfSubdomains = "0" MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Explorer\DOMStorage\www.youtube.com\ = "36720" MicrosoftEdgeCP.exe Set value (str) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\AdapterInfo = "vendorId=\"0x10de\",deviceID=\"0x8c\",subSysID=\"0x0\",revision=\"0x0\",version=\"10.0.15063.0\"hypervisor=\"No Hypervisor (No SLAT)\"" MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\Wow64-DXFeatureLevel = "0" MicrosoftEdge.exe Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\CIStatusTimestamp = 3c5e0d536d0bdb01 MicrosoftEdge.exe Set value (str) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\AdapterInfo = "vendorId=\"0x10de\",deviceID=\"0x8c\",subSysID=\"0x0\",revision=\"0x0\",version=\"10.0.15063.0\"hypervisor=\"No Hypervisor (No SLAT)\"" MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Explorer\DOMStorage\youtube.com\Total = "49943" MicrosoftEdgeCP.exe Set value (str) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\AdapterInfo = "vendorId=\"0x1414\",deviceID=\"0x8c\",subSysID=\"0x0\",revision=\"0x0\",version=\"10.0.15063.0\"hypervisor=\"No Hypervisor (No SLAT)\"" MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Explorer\DOMStorage\youtube.com\Total = "9720" MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Explorer\DOMStorage\www.youtube.com\ = "51329" MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Explorer\DOMStorage\Total\ = "52790" MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\HistoryJournalCertificate MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Explorer\EdpDomStorage MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\EdpDomStorage\Total MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Internet Explorer\Main MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Recovery\PendingRecovery\ReadingStorePending = "1" MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Explorer\DOMStorage\Total\ = "325" MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Settings\Cache\Content\CacheLimit = "256000" MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Explorer\DomStorageState MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\msn.com\Total = "122" MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\Main MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\Wow64-SubSysId = "0" MicrosoftEdge.exe Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Explorer\DOMStorage\youtube.com MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Explorer\DOMStorage\Total\ = "121" MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Explorer\DOMStorage\Total\ = "48576" MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Explorer\DOMStorage\Total\ = "18788" MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Explorer\DomStorageState\EdpState = "0" MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\ACGStatus MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\006\CIStatus MicrosoftEdgeCP.exe Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\CIStatus\SignaturePolicy = 06000000 MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Explorer\DOMStorage\youtube.com\Total = "18788" MicrosoftEdgeCP.exe Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\CIStatus\SignaturePolicy = 06000000 MicrosoftEdgeCP.exe Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\006\ACGStatus\DynamicCodePolicy = 00000000 MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Explorer\DOMStorage\youtube.com\NumberOfSubdomai = "1" MicrosoftEdgeCP.exe Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\CIStatusTimestamp = 8a6efb5a6d0bdb01 MicrosoftEdge.exe Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\CIStatusTimestamp = 339670696d0bdb01 MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\DataStore\OneTimeCleanup = "1" MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\bing.com\NumberOfSubdomains = "1" MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\CVListXMLVersionHigh = "268435456" MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\IECompatVersionHigh = "268435456" MicrosoftEdge.exe Set value (str) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\History\CachePrefix = "Visited:" MicrosoftEdgeCP.exe Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\CIStatus\SignaturePolicy = 06000000 MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Main\DisallowDefaultBrowserPrompt = "0" MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus\ACGPolicyState = "8" MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Explorer\DOMStorage\youtube.com\Total = "50025" MicrosoftEdgeCP.exe Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\ACGStatus\DynamicCodePolicy = 05000000 MicrosoftEdgeCP.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Explorer\DOMStorage\youtube.com\Total = "48576" MicrosoftEdgeCP.exe Set value (data) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\CIStatusTimestamp = c91f31706d0bdb01 MicrosoftEdge.exe Set value (str) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:" MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Recovery\Active MicrosoftEdge.exe Set value (int) \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\Internet Explorer\DOMStorage\youtube.com\Total = "0" MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\www.bing.com MicrosoftEdgeCP.exe Key created \REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\TabbedBrowsing\NewTabPage MicrosoftEdge.exe -
Suspicious behavior: MapViewOfSection 21 IoCs
pid Process 2800 MicrosoftEdgeCP.exe 2800 MicrosoftEdgeCP.exe 2800 MicrosoftEdgeCP.exe 2800 MicrosoftEdgeCP.exe 2800 MicrosoftEdgeCP.exe 2800 MicrosoftEdgeCP.exe 2800 MicrosoftEdgeCP.exe 2800 MicrosoftEdgeCP.exe 2800 MicrosoftEdgeCP.exe 2800 MicrosoftEdgeCP.exe 2800 MicrosoftEdgeCP.exe 2800 MicrosoftEdgeCP.exe 2800 MicrosoftEdgeCP.exe 2800 MicrosoftEdgeCP.exe 2800 MicrosoftEdgeCP.exe 2800 MicrosoftEdgeCP.exe 2800 MicrosoftEdgeCP.exe 2800 MicrosoftEdgeCP.exe 2800 MicrosoftEdgeCP.exe 2800 MicrosoftEdgeCP.exe 2800 MicrosoftEdgeCP.exe -
Suspicious use of AdjustPrivilegeToken 17 IoCs
description pid Process Token: SeDebugPrivilege 748 MicrosoftEdgeCP.exe Token: SeDebugPrivilege 748 MicrosoftEdgeCP.exe Token: SeDebugPrivilege 748 MicrosoftEdgeCP.exe Token: SeDebugPrivilege 748 MicrosoftEdgeCP.exe Token: SeDebugPrivilege 2336 MicrosoftEdgeCP.exe Token: SeDebugPrivilege 2336 MicrosoftEdgeCP.exe Token: SeDebugPrivilege 2336 MicrosoftEdgeCP.exe Token: SeDebugPrivilege 2336 MicrosoftEdgeCP.exe Token: SeDebugPrivilege 3332 MicrosoftEdge.exe Token: SeDebugPrivilege 3332 MicrosoftEdge.exe Token: SeDebugPrivilege 6048 firefox.exe Token: SeDebugPrivilege 6048 firefox.exe Token: SeDebugPrivilege 6048 firefox.exe Token: SeDebugPrivilege 6048 firefox.exe Token: SeDebugPrivilege 6048 firefox.exe Token: SeDebugPrivilege 6048 firefox.exe Token: SeDebugPrivilege 6048 firefox.exe -
Suspicious use of FindShellTrayWindow 4 IoCs
pid Process 6048 firefox.exe 6048 firefox.exe 6048 firefox.exe 6048 firefox.exe -
Suspicious use of SendNotifyMessage 3 IoCs
pid Process 6048 firefox.exe 6048 firefox.exe 6048 firefox.exe -
Suspicious use of SetWindowsHookEx 7 IoCs
pid Process 3332 MicrosoftEdge.exe 2800 MicrosoftEdgeCP.exe 748 MicrosoftEdgeCP.exe 2800 MicrosoftEdgeCP.exe 7036 MicrosoftEdgeCP.exe 7036 MicrosoftEdgeCP.exe 6048 firefox.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2800 wrote to memory of 2336 2800 MicrosoftEdgeCP.exe 76 PID 2800 wrote to memory of 2336 2800 MicrosoftEdgeCP.exe 76 PID 2800 wrote to memory of 2336 2800 MicrosoftEdgeCP.exe 76 PID 2800 wrote to memory of 2336 2800 MicrosoftEdgeCP.exe 76 PID 2800 wrote to memory of 2336 2800 MicrosoftEdgeCP.exe 76 PID 2800 wrote to memory of 5716 2800 MicrosoftEdgeCP.exe 82 PID 2800 wrote to memory of 5716 2800 MicrosoftEdgeCP.exe 82 PID 2800 wrote to memory of 5716 2800 MicrosoftEdgeCP.exe 82 PID 2800 wrote to memory of 5716 2800 MicrosoftEdgeCP.exe 82 PID 2800 wrote to memory of 5716 2800 MicrosoftEdgeCP.exe 82 PID 2800 wrote to memory of 5716 2800 MicrosoftEdgeCP.exe 82 PID 2800 wrote to memory of 5716 2800 MicrosoftEdgeCP.exe 82 PID 2800 wrote to memory of 5716 2800 MicrosoftEdgeCP.exe 82 PID 2800 wrote to memory of 5716 2800 MicrosoftEdgeCP.exe 82 PID 2800 wrote to memory of 5716 2800 MicrosoftEdgeCP.exe 82 PID 2800 wrote to memory of 5716 2800 MicrosoftEdgeCP.exe 82 PID 2800 wrote to memory of 5716 2800 MicrosoftEdgeCP.exe 82 PID 2800 wrote to memory of 5716 2800 MicrosoftEdgeCP.exe 82 PID 2800 wrote to memory of 5716 2800 MicrosoftEdgeCP.exe 82 PID 2800 wrote to memory of 5716 2800 MicrosoftEdgeCP.exe 82 PID 2800 wrote to memory of 5716 2800 MicrosoftEdgeCP.exe 82 PID 2800 wrote to memory of 5716 2800 MicrosoftEdgeCP.exe 82 PID 2800 wrote to memory of 5716 2800 MicrosoftEdgeCP.exe 82 PID 2800 wrote to memory of 5716 2800 MicrosoftEdgeCP.exe 82 PID 2800 wrote to memory of 5716 2800 MicrosoftEdgeCP.exe 82 PID 2800 wrote to memory of 5716 2800 MicrosoftEdgeCP.exe 82 PID 2800 wrote to memory of 5716 2800 MicrosoftEdgeCP.exe 82 PID 2800 wrote to memory of 5716 2800 MicrosoftEdgeCP.exe 82 PID 2800 wrote to memory of 5716 2800 MicrosoftEdgeCP.exe 82 PID 2800 wrote to memory of 5716 2800 MicrosoftEdgeCP.exe 82 PID 2800 wrote to memory of 5420 2800 MicrosoftEdgeCP.exe 83 PID 2800 wrote to memory of 5420 2800 MicrosoftEdgeCP.exe 83 PID 2800 wrote to memory of 5420 2800 MicrosoftEdgeCP.exe 83 PID 2800 wrote to memory of 3908 2800 MicrosoftEdgeCP.exe 90 PID 2800 wrote to memory of 3908 2800 MicrosoftEdgeCP.exe 90 PID 2800 wrote to memory of 3908 2800 MicrosoftEdgeCP.exe 90 PID 2800 wrote to memory of 3908 2800 MicrosoftEdgeCP.exe 90 PID 2800 wrote to memory of 3908 2800 MicrosoftEdgeCP.exe 90 PID 2800 wrote to memory of 3908 2800 MicrosoftEdgeCP.exe 90 PID 2800 wrote to memory of 5716 2800 MicrosoftEdgeCP.exe 82 PID 2800 wrote to memory of 5716 2800 MicrosoftEdgeCP.exe 82 PID 2800 wrote to memory of 5716 2800 MicrosoftEdgeCP.exe 82 PID 2800 wrote to memory of 5716 2800 MicrosoftEdgeCP.exe 82 PID 2800 wrote to memory of 5716 2800 MicrosoftEdgeCP.exe 82 PID 2800 wrote to memory of 6036 2800 MicrosoftEdgeCP.exe 91 PID 2800 wrote to memory of 6036 2800 MicrosoftEdgeCP.exe 91 PID 2800 wrote to memory of 6036 2800 MicrosoftEdgeCP.exe 91 PID 2800 wrote to memory of 3908 2800 MicrosoftEdgeCP.exe 90 PID 2800 wrote to memory of 3908 2800 MicrosoftEdgeCP.exe 90 PID 2800 wrote to memory of 3908 2800 MicrosoftEdgeCP.exe 90 PID 2800 wrote to memory of 3908 2800 MicrosoftEdgeCP.exe 90 PID 2800 wrote to memory of 3908 2800 MicrosoftEdgeCP.exe 90 PID 2800 wrote to memory of 3908 2800 MicrosoftEdgeCP.exe 90 PID 5068 wrote to memory of 6048 5068 firefox.exe 97 PID 5068 wrote to memory of 6048 5068 firefox.exe 97 PID 5068 wrote to memory of 6048 5068 firefox.exe 97 PID 5068 wrote to memory of 6048 5068 firefox.exe 97 PID 5068 wrote to memory of 6048 5068 firefox.exe 97 PID 5068 wrote to memory of 6048 5068 firefox.exe 97 PID 5068 wrote to memory of 6048 5068 firefox.exe 97 PID 5068 wrote to memory of 6048 5068 firefox.exe 97 PID 5068 wrote to memory of 6048 5068 firefox.exe 97 PID 5068 wrote to memory of 6048 5068 firefox.exe 97 PID 5068 wrote to memory of 6048 5068 firefox.exe 97 -
Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
Processes
-
C:\Windows\system32\LaunchWinApp.exe"C:\Windows\system32\LaunchWinApp.exe" "C:\Users\Admin\AppData\Local\Temp\873d16767e0895ff109b2a2ae61335f5_JaffaCakes118.html"1⤵PID:3800
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca1⤵
- Drops file in Windows directory
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:3332
-
C:\Windows\system32\browser_broker.exeC:\Windows\system32\browser_broker.exe -Embedding1⤵
- Modifies Internet Explorer settings
PID:2312
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Modifies registry class
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2800
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Drops file in Windows directory
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:748
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Drops file in Windows directory
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
PID:2336
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Modifies registry class
PID:4680
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Drops file in Windows directory
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:7036
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Modifies registry class
PID:5572
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Drops file in Windows directory
PID:5716
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Drops file in Windows directory
- Modifies registry class
PID:5420
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Drops file in Windows directory
- Modifies registry class
PID:5232
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Drops file in Windows directory
PID:3908
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Drops file in Windows directory
- Modifies registry class
PID:6036
-
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca1⤵
- Drops file in Windows directory
- Modifies registry class
PID:6896
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:5068 -
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe"2⤵
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:6048 -
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6048.0.622233782\2087611993" -parentBuildID 20221007134813 -prefsHandle 1692 -prefMapHandle 1684 -prefsLen 20747 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {2dcaceac-1608-4af7-872a-0c20273abebd} 6048 "\\.\pipe\gecko-crash-server-pipe.6048" 1780 2dc1edd6e58 gpu3⤵PID:5200
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6048.1.349568441\590734184" -parentBuildID 20221007134813 -prefsHandle 2124 -prefMapHandle 2120 -prefsLen 20828 -prefMapSize 233444 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {495681cb-9cef-44c7-9e90-d26fc85b80ac} 6048 "\\.\pipe\gecko-crash-server-pipe.6048" 2136 2dc13b6fb58 socket3⤵PID:5916
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6048.2.1449547544\641751217" -childID 1 -isForBrowser -prefsHandle 2776 -prefMapHandle 2944 -prefsLen 20931 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {69d1522c-8fdb-4231-aed4-a33bdeb96008} 6048 "\\.\pipe\gecko-crash-server-pipe.6048" 2700 2dc1ed5f358 tab3⤵PID:6392
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6048.3.1855629746\1161420775" -childID 2 -isForBrowser -prefsHandle 3488 -prefMapHandle 3484 -prefsLen 26109 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {09db424b-fd48-4a47-84f9-828464c9b51e} 6048 "\\.\pipe\gecko-crash-server-pipe.6048" 3500 2dc13b69358 tab3⤵PID:6892
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6048.4.366450030\929273702" -childID 3 -isForBrowser -prefsHandle 3936 -prefMapHandle 3932 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {a80b2665-2a17-4f97-8ad9-b31a036f8d0f} 6048 "\\.\pipe\gecko-crash-server-pipe.6048" 3940 2dc23eef758 tab3⤵PID:6280
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6048.5.1600102114\57303333" -childID 4 -isForBrowser -prefsHandle 4892 -prefMapHandle 4900 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {a473b5da-fae7-43e5-a2a4-e894aa7e5925} 6048 "\\.\pipe\gecko-crash-server-pipe.6048" 4912 2dc2103fd58 tab3⤵PID:5224
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6048.6.852202809\1456730652" -childID 5 -isForBrowser -prefsHandle 5048 -prefMapHandle 5052 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {1f7cdcc9-f947-4e5c-a22c-96a47dec6a5d} 6048 "\\.\pipe\gecko-crash-server-pipe.6048" 5040 2dc253d7558 tab3⤵PID:5744
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6048.7.706760780\108287411" -childID 6 -isForBrowser -prefsHandle 5212 -prefMapHandle 5216 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {2080017f-0d53-4513-9b83-e64d7a7b69c4} 6048 "\\.\pipe\gecko-crash-server-pipe.6048" 5204 2dc25919158 tab3⤵PID:3608
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="6048.8.1854696792\1303983252" -childID 7 -isForBrowser -prefsHandle 5704 -prefMapHandle 5700 -prefsLen 26249 -prefMapSize 233444 -jsInitHandle 1316 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {6b89181a-f2d7-47bd-8b7b-bd3c90f409dc} 6048 "\\.\pipe\gecko-crash-server-pipe.6048" 5712 2dc272c0858 tab3⤵PID:3980
-
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
74KB
MD5d4fc49dc14f63895d997fa4940f24378
SHA13efb1437a7c5e46034147cbbc8db017c69d02c31
SHA256853d2f4eb81c9fdcea2ee079f6faf98214b111b77cdf68709b38989d123890f1
SHA512cc60d79b4afe5007634ac21dc4bc92081880be4c0d798a1735b63b27e936c02f399964f744dc73711987f01e8a1064b02a4867dd6cac27538e5fbe275cc61e0a
-
Filesize
9KB
MD5bf4c2d68947c1a400dac83e0a7e4d23a
SHA17f2e755042c5eed32b321960c372c7b10a80e663
SHA2568538dae71a5b92a16cd7a9eac2ddf8ccc88992a7e7df264c016f747528c2b843
SHA512c21e9b4e44c3554c5b2fe183a867a0610381081377af3642a338e76f8f340f793fc5933a75ab31fbac0e8519f7d1b01a58f2b29f3a8c7bc95b946c1056bfa9a9
-
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\cache2\entries\FAA749CEDCE427A154C0BB6A9180421E04A0EF0F
Filesize221KB
MD5b7092623049d793110cd5a4e3904a500
SHA13a3556bb4386158f3801f383f6e17565376d4a68
SHA2560b42f402207815c089186dc654045d396b499b0487e6b1913bcde16350a0888a
SHA51286f4cf383950b3ecd63ce6f7981f9417ba9839ccccd6e94206661f8e762e3f0561bec4255d949441ce5279adedf9700d6e06baf910479e80f55b80f33637e063
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\D8L5CGE3\fRSNKQanUHk53F1a1Bi8UA71Qt4.br[1].js
Filesize289B
MD59085e17b6172d9fc7b7373762c3d6e74
SHA1dab3ca26ec7a8426f034113afa2123edfaa32a76
SHA256586d8f94486a8116af00c80a255cba96c5d994c5864e47deac5a7f1ae1e24b0d
SHA512b27b776cb4947eef6d9e2a33b46e87796a6d4c427f4759c08cf5aa0ee410a5f12e89ca6ab9cddd86c8471037e3c505f43c8b7fc6d8417f97f9fe3c5c47216bc4
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\D8L5CGE3\xvEz2IbMlyghPZ3oNAHr9N-xMOA.br[1].js
Filesize6KB
MD5dc221228e109f89b8b10c48f2678fb46
SHA11bfc85cba5c424136941ac1dfd779a563b5beed4
SHA256f4fb7234959f48c2b2ca73fd6c35d36eaf65d8c431d982a1ba208f5cdc766419
SHA51246f49e5ac18436251778d1f50c027729a2442ed6541c3162d878720703e37797b6028d96eb1568c23ec5006fb022c8e05855e250d6a1a590f41e890866529cd2
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!121\MicrosoftEdge\Cache\1CGV19TB\KFOmCnqEu92Fr1Mu4mxK[1].woff2
Filesize14KB
MD55d4aeb4e5f5ef754e307d7ffaef688bd
SHA106db651cdf354c64a7383ea9c77024ef4fb4cef8
SHA2563e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
SHA5127eb7c301df79d35a6a521fae9d3dccc0a695d3480b4d34c7d262dd0c67abec8437ed40e2920625e98aaeafba1d908dec69c3b07494ec7c29307de49e91c2ef48
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!121\MicrosoftEdge\Cache\1CGV19TB\XSOeYOgfx9Jh0OnrBRoGZITK3RITQeOfJZOsiQTg9Ss[1].js
Filesize54KB
MD5ce93bfe3bb2e95a67aeed7fcaa2d3a39
SHA1e66335974e59aabee6602f10ff74f87ce6629a2b
SHA2565d239e60e81fc7d261d0e9eb051a066484cadd121341e39f2593ac8904e0f52b
SHA512f80d0fe494d4d1fba2b0b18fb85aaeb16af51942180caf3bd840de384bf2863ecadc30bca67d4372a7125201cff3c76ae8db274e4573ec6aedb8cf12176366b6
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!121\MicrosoftEdge\Cache\2UQDG2NE\base[1].js
Filesize2.3MB
MD59f5bf11cd4068cab63057ed99069fed9
SHA17a6329b5dde6cc10a6b6753a18d1178f46ea4d3c
SHA25689e1ad6ead4278ad4bba8ea5501ca5c79b066c61cfe38b70169181520fb5b0f7
SHA512768fa98c09d02d0b72cbcb9701ad0547c72c401854f251445fbb5d446da2d7b24a66059cd1e55ecff318a064bf9fe69356b4ae18f4273c13d4c14a7f9dae0d47
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!121\MicrosoftEdge\Cache\2UQDG2NE\www-embed-player[1].js
Filesize331KB
MD5e05ae65e7290835392021a7595916b92
SHA1f1a340473bc52f98f2e73ee422b5b10d246b2fa4
SHA2567a0c22ec1c43c774664255605c026a3025992bee2a2e1441d391e58b30cabbc9
SHA512c40fe5dba0e7209ede7845892a3a5c92085d88263efdb3b6b9929d1bc269aaa517d1dd218a449ffc0aa3b82903ee5a840e021d6ceddefd57aff6d0419a0e3d9f
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!121\MicrosoftEdge\Cache\ZQ1E8DVA\embed[1].js
Filesize66KB
MD5266940708e18b768536a35ff3018fe34
SHA1bdc725b2d6f8442260d996146e0aac75275af468
SHA2563c27b6e9d3d30224a589131e2aae5370d19b32038e292e2d92198a73a8e5147a
SHA512f22e4c43013a4024b5bf2289d69d24f8089d56562dd6987c9cf8474a8b352f0af359c2b5ff6aa9a9370835a46411dc3523144e6043d393eb17cbf339c157ab17
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!121\MicrosoftEdge\Cache\ZQM8LE7V\KFOlCnqEu92Fr1MmEU9fBBc4[1].woff2
Filesize15KB
MD5285467176f7fe6bb6a9c6873b3dad2cc
SHA1ea04e4ff5142ddd69307c183def721a160e0a64e
SHA2565a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
SHA5125f9bb763406ea8ce978ec675bd51a0263e9547021ea71188dbd62f0212eb00c1421b750d3b94550b50425bebff5f881c41299f6a33bbfa12fb1ff18c12bc7ff1
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!121\MicrosoftEdge\Cache\ZQM8LE7V\ad_status[1].js
Filesize29B
MD51fa71744db23d0f8df9cce6719defcb7
SHA1e4be9b7136697942a036f97cf26ebaf703ad2067
SHA256eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
SHA51217fa262901b608368eb4b70910da67e1f11b9cfb2c9dc81844f55bee1db3ec11f704d81ab20f2dda973378f9c0df56eaad8111f34b92e4161a4d194ba902f82f
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!121\MicrosoftEdge\Cache\ZQM8LE7V\remote[1].js
Filesize118KB
MD5bd24e895b4340f7fa4d8ee7e5d9c143a
SHA145aa69a80b17487f15a05f2b2b71993cd6b0a96c
SHA256d19c33f7c67935c89977505aa9bb5aaab498ae265ac93bf4694edaaf939abe7a
SHA512d12c23e51b1bdb384cd5928f034b5b542bc18147c36d09b8c82abcdcc869e0530d5bdb204506a7b8cebb7f245b8db6ddf6c2f4ed3aa43377da9a1ed5c19382f5
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!121\MicrosoftEdge\User\Default\DOMStore\326NJ9P1\www.youtube[1].xml
Filesize448B
MD5ad1a5ab065ea5ed92aaa0c8bdc0b779e
SHA1ef19a2112a769693615bff9815af65583ab4a1d0
SHA25620049c7a27a4d5784f56156bd556d6e9ac92ec873dfbaabb81fc4e18bd6d71ec
SHA512ce4dc68f05b3592791635c6ed3406622ff807572d05059fd9ecc74796a54659f845d5fa06bf3e963c7760dcc0e9259374a93b508874803f2bd45668ebab59f21
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!121\MicrosoftEdge\User\Default\DOMStore\326NJ9P1\www.youtube[1].xml
Filesize641B
MD507d3abdc67a8be388d79cf28385711ac
SHA1d07c519f8978773852e3651c702e22c67c5a5999
SHA256f257956914945b77cb7c33368c74392ce83e2b149e4455f6d61da248afc2078a
SHA512b0a8924ecab23c981b58a00396316f09483209e81e49e0270683de5934bedc1e0b8d7387fec52d8d48e7cef01b4d95c0feed536cf522cd10094bbfe9be5de27b
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!121\MicrosoftEdge\User\Default\DOMStore\326NJ9P1\www.youtube[1].xml
Filesize641B
MD5a86f1e1630122571c116b8c68d9facea
SHA1df72477a1cece1390d174444757ca475cf87a87a
SHA256a56db8e759f84a21b5d08da446598457bc18e87c3ed1eb3a58e914fed9c2de5a
SHA5120d86a7f70ff1b1e3486a0e93ec0eb9aa70644930b2bda05ea0dc921123ce1ca70d0ab9df15fe83f72fe1f5beeddcfd5d1c8253394b8be05eb4429d5c30e2224c
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!121\MicrosoftEdge\User\Default\DOMStore\326NJ9P1\www.youtube[1].xml
Filesize15KB
MD5a1fdbbdbab005ac235e5ba373edbfd31
SHA1c8886a632f8520410a57d51759bc1a5e101ab241
SHA2563be574850e78f60dfaf0f1680db75826b1a1d21c992c5286b081c143a37eae5d
SHA5124fdca907e3aa3d1b52e580275c5ba68a30477974393b0bbb2e49e5a411abfd961a21c65dab57242ceb3eaebfce0c40865ec1923e6f9e91ebdc3c35e6f5a24dd1
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!121\MicrosoftEdge\User\Default\DOMStore\326NJ9P1\www.youtube[1].xml
Filesize42KB
MD5b3c07f2c2ea02d577fc75d987be24616
SHA1f34eadc15f4b19ddc65c095cd34dfea20b94ffc7
SHA256fc599efa6660a750b8454575210c0502671973ef4991c3545a44dc905d55814c
SHA5123329a370c5dafbcdfb21bc8d044cdfb8527d5a2f5642f868ed6aa51a3e50955f95d9ccce437f58d27b70ee160fb9639a8395fe18283a466511e5c9fefb602e7b
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!121\MicrosoftEdge\User\Default\DOMStore\326NJ9P1\www.youtube[1].xml
Filesize56KB
MD543803576381affd75b7fe4c816356a0b
SHA1053f95b0b8cab3b10e4327221eb3b8242902840b
SHA2562c154ef7be87f19019a1e0d4e736900b27f6a6f732ef9feb227206b558f29302
SHA51211d2c59b7ebb6b391cf4938fb92501a3ffea70734c2f82b80945c2d0c936009cdf1f3de47428e7d9c0376cfa7b75de0aec4274afa664cefbbd0932771c1107ab
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!121\MicrosoftEdge\User\Default\DOMStore\326NJ9P1\www.youtube[1].xml
Filesize70KB
MD592580827cd30f17b0b90404e73b1627b
SHA1390f5e324e445acd17c7563a5904b391a7cf37e7
SHA256700df78c4b1fb2045e101b91ba9883416fbedf13833a95aeef73895e8983763e
SHA512d5f689116a29ca969aae0d46d6d34f90d7b0dd37a629c2e2059dbc02269e4c5c8da217a40bb41ce74e861c1ca94e45992e8f90c785065656ee673e444d042ad9
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!121\MicrosoftEdge\User\Default\DOMStore\326NJ9P1\www.youtube[1].xml
Filesize72KB
MD5c2ae43927684efb35c25de3aac5c75e8
SHA1031c442463a8ec376748435eda3b62fa31b46cee
SHA256b8e2e55b1357a372260def5023c7268833dadef2de7331e2b6164d5c16536727
SHA5121b88c7b88b408a6db9c7eb5ff28f2fc706e18a4123ba007b797f0b4f39473ffc06f64adb3db4df247c28b216942c1de3671fa10bd1dddeaf5539c410626cc7b6
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!121\MicrosoftEdge\User\Default\DOMStore\326NJ9P1\www.youtube[1].xml
Filesize74KB
MD5209520dccd9c28b044125c066379b1c8
SHA15fbf0709bcf28c746854348550ec625684180b83
SHA2569f810967234359290ef80dfd2314559bf4dd4b1810a62b9b4a1f9d1a4bab900f
SHA5125708f8b876519f31b13583c204d0839984ebabad92c5e3bbc51d1b930ba94711758962b803cc139f72c83ba833315f715430ced5b3645e49a2ee3185b7f22d96
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!121\MicrosoftEdge\User\Default\DOMStore\326NJ9P1\www.youtube[1].xml
Filesize76KB
MD5ea25d8b5f47ecd66f4ab1fef6122b0f5
SHA10329680038d30543258cc795af64fa5a6912a00f
SHA2566435a96177dd0153c6d808a33dd33316aee184997b285a5c468f9dfca906d46d
SHA512627f2d52dd92df95964cb50e6a657cbef94e5a1398fc72f7e93652449932d17a21abac4d75a27f3f7ba6e3a732d954266552b5246806822c96e6df2b341d282a
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!121\MicrosoftEdge\User\Default\DOMStore\326NJ9P1\www.youtube[1].xml
Filesize77KB
MD5976b923264893dad5b0d94469e37aaf7
SHA197e23e6fa8ca61e8623805847bcdb2447e544153
SHA256c39f41a408f294b11cd5bea1fda30760e21fff68f612268ece4683026a3bbcd2
SHA5120d17841239b79da6122abeaebb2ce7c46b0bf1cef06b4fcbad62164bdc0ac7b9235e91758f1a6939c62fac2baaa8edfbd06c362fef4e4b57f7e42d33d3d0e89c
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!121\MicrosoftEdge\User\Default\DOMStore\326NJ9P1\www.youtube[1].xml
Filesize79KB
MD59e69a2899be434e5fbd57db896c9698f
SHA17153e55d6efdaab2d1056f2c473023203f230d1e
SHA256328552a16b6fee9da8a1753d679895e4df5bc4f15a105fd17f01b4b45b51823f
SHA51260d3451f4df0d7b77e440071b392a9f697d400bcca5b31ccd57095f317aa905df4d5d22ce246ddc67a570630eb935bcd9035808640465a3a511387ad32cf4201
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!121\MicrosoftEdge\User\Default\DOMStore\326NJ9P1\www.youtube[1].xml
Filesize13B
MD5c1ddea3ef6bbef3e7060a1a9ad89e4c5
SHA135e3224fcbd3e1af306f2b6a2c6bbea9b0867966
SHA256b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db
SHA5126be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!121\MicrosoftEdge\User\Default\DOMStore\326NJ9P1\www.youtube[1].xml
Filesize229B
MD54dcc98c1a2e102ccd03887b041c12dff
SHA19d79d63db53fa51813ac46a813792782e7ffba5a
SHA256b8faf988537e43e48ad5e92817db6fa42a787f7ff610c875e568e16adb24f17f
SHA512ace29cfbd50a5203f2df1b3a94cac12685e384e70b671129030f5e749cb47b1274ad08caeb3b65a474d70885ef17f07d702e58261750c7d436f6007034862d48
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!121\MicrosoftEdge\User\Default\DOMStore\326NJ9P1\www.youtube[1].xml
Filesize229B
MD53ca02afa3405b8cdd5282218fe8576b4
SHA15f938cdef6987f9319b238048e53a648b425510b
SHA2562b245aa2eaa59537b26a2bad7e1969d1936e31c58a89e90d33db68981c6dd916
SHA5122b06c2f3d433d315fa54bac8fd418bb80d312927297961b82212c4a68baec6491a1e5377b84bc973c680052b8a5a0de69a418355862936d0d0e10562ce08f186
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!121\MicrosoftEdge\User\Default\DOMStore\326NJ9P1\www.youtube[1].xml
Filesize229B
MD5566f7a6dc6018842a38fafc5edd24725
SHA189a19447a26906f11b66bb97262309a0633b8d49
SHA2566783dfee74df3e6910d48db527386155d49daeec1cac37edbb2a47b1aab4fca7
SHA51289139aa07beac912bf6c46beec6a23bfdcb0366e0112d98ff29359440980d47830daebf8f2cd50827daac5532d5022bace53dad3291b704de2d8041e96323fad
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!121\MicrosoftEdge\User\Default\DOMStore\326NJ9P1\www.youtube[1].xml
Filesize229B
MD5fc09d4a27b419831c9127e7d11570725
SHA102fc00079dd816cadde7c8d843c44e1b36144865
SHA256d8f3917c11998b10813fc74546144d1569bd9e1e69cc50409781e43492554ff8
SHA5127c97747e20b339a1703b2dd215d2c377c2adfefa28e5cd04c8a8c71b1ab04fe46306207d3d674e0f1cc5491588b05bb9c838bbdf63da87090e79de55df963e55
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!121\Microsoft\CryptnetUrlCache\Content\57C8EDB95DF3F0AD4EE2DC2B8CFD4157
Filesize4KB
MD51bfe591a4fe3d91b03cdf26eaacd8f89
SHA1719c37c320f518ac168c86723724891950911cea
SHA2569cf94355051bf0f4a45724ca20d1cc02f76371b963ab7d1e38bd8997737b13d8
SHA51202f88da4b610678c31664609bcfa9d61db8d0b0617649981af948f670f41a6207b4ec19fecce7385a24e0c609cbbf3f2b79a8acaf09a03c2c432cc4dce75e9db
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!121\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157
Filesize338B
MD50abe61c709aff8a4fb4e044eeb9a0628
SHA1fda913e7183219a03f47b44514b8bac7c73846f2
SHA2567f568a6f5517c9e808bc4f5cf3053e3e766c5b7750beaf9ba393a1414ed5da57
SHA5120e6663acce1505b9b783aea63f5f7648ac45208e347c03b1e9b1694b2ae08a3a59867943688011f4f4e7ebae67ffc676579810d98af5312cfa69259030bcc6f5
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\AKM4261H\favicon[1].ico
Filesize758B
MD584cc977d0eb148166481b01d8418e375
SHA100e2461bcd67d7ba511db230415000aefbd30d2d
SHA256bbf8da37d92138cc08ffeec8e3379c334988d5ae99f4415579999bfbbb57a66c
SHA512f47a507077f9173fb07ec200c2677ba5f783d645be100f12efe71f701a74272a98e853c4fab63740d685853935d545730992d0004c9d2fe8e1965445cab509c3
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\OTL76J9M\favicon-trans-bg-blue-mg[1].ico
Filesize4KB
MD530967b1b52cb6df18a8af8fcc04f83c9
SHA1aaf67cd84fcd64fb2d8974d7135d6f1e4fc03588
SHA256439b6089e45ef1e0c37ef88764d5c99a3b2752609c4e2af3376480d7ffcfaf2e
SHA5127cb3c09a81fbd301741e7cf5296c406baf1c76685d354c54457c87f6471867390a1aeed9f95701eb9361d7dfacce31afd1d240841037fc1de4a120c66c1b088c
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\SY0KG4SN\favicon[1].ico
Filesize4KB
MD5da597791be3b6e732f0bc8b20e38ee62
SHA11125c45d285c360542027d7554a5c442288974de
SHA2565b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07
SHA512d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e
-
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\Temp\~DFAD9EC98025E57617.TMP
Filesize16KB
MD5272f5d409897bbbcbe5260ed4c1f5ff1
SHA15856d24e69ddd19e8396456658b2b65916cf62fe
SHA2560cb7955da687c7d9c476eae7fab459b458d5d896e7d62e6e4d76612961f0c00d
SHA512f8b44cdde24d9a8cffd09f93fa90fc0304277804100663ec7105b56361b9593efef56622e667e298bcd3ff22149e7b8252f0463e9aa5e2531e09ad1494e5e633
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\23SDAGO0\vendors-node_modules_github_quote-selection_dist_index_js-node_modules_github_textarea-autosi-ded18a-121705d071ff[1].js
Filesize43KB
MD53cd24f1b39058ef50945e3ce6a000941
SHA16dcd625edc8d06ea0cf50f26386b608eed0fdafd
SHA256af36fb7f70e4f4e5e0c29f0d32956814d4b68d9722a7adf5d67747272b47f036
SHA512121705d071ffcb41941474cb451395237173a82ec31e9d5f97a5c014861387f8cc4dc1ab878c3a08ae0fa4826bf67a8cdcd8656b8e3a6c051e1c018a028b199f
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\23SDAGO0\vendors-node_modules_github_relative-time-element_dist_index_js-6d3967acd51c[1].js
Filesize15KB
MD5e89cac3e3116110f5678d2857d9803d4
SHA1c357fa95477a3a0a1a63dec0e9d2433d172bd005
SHA256bf6dfa6b068f933d79071102dd912171c8feea27e9bb3f332ec9e6c358e199a2
SHA5126d3967acd51ceaed2dc7390dea496c2db52afe8eb556126ee2b2f52b0b127e2869a921146554e8d1809ef22c2aba53019700a283f4362d85b226ad6fb1f5871b
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\23SDAGO0\vendors-node_modules_github_text-expander-element_dist_index_js-cd48220d74d5[1].js
Filesize14KB
MD569f387b852329683c3f4856ccb905f60
SHA1a58ffa40abbb4c6f5ef0545c1ffb932c21d73cc1
SHA256d9cdb2e9f9c648237f22c43f8f12e85d8944c75ab325352059c3e53516635167
SHA512cd48220d74d52b956312b2c59ec764d2d559e73c51789f9d649e108925f79ae3c910744161904b2840894bfcff64507971d5a19f921e5190a710bda4eceb63e2
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\23SDAGO0\vendors-node_modules_primer_behaviors_dist_esm_anchored-position_js-node_modules_github_combo-c8f81b-aae774371435[1].js
Filesize29KB
MD59d13c4c392ede7d3ac6891e4e9b8b1b4
SHA10de12052b5d1301ce3a66a1c2231f1986e17bf67
SHA25648cbaf4333499bf64b7d67414e61eafb9d449bdb8bc464dc9db735c8d7c399ec
SHA512aae774371435bae51a107a8bef537e4f799c11458bd2c22b8703c6d3c3a7da7cf0568c283bc877c24da9912bc0aa1c57507f9776d391a873c3a17e54333a9111
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\23SDAGO0\vendors-node_modules_primer_behaviors_dist_esm_focus-zone_js-3993df7a23db[1].js
Filesize8KB
MD50d93dd6b285e3c7398d18419f29e3859
SHA1cfd5b588cfe3c6312b91fc90bb9d2c4cb8f131fc
SHA256ecd5af5201e3baadc6b5355b5281e0c7626a0b08dc46958442b8cbc6d9eaace9
SHA5123993df7a23db4367b825b191f0387d1bcab33929e7d67fb6536e0e746a73dadc0f27d4f56841149e43a6eda60d75bf187f923195791c86abadad05197333bed2
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\D8L5CGE3\dark-9c5b7a476542[1].css
Filesize48KB
MD5c21f8fd1aa4306567381fc98c4658451
SHA18b1a242ba7d5c59596d31580b5b8f4a7bed32726
SHA256396d793cf41edbb2964b3993c58be3224430678db6de696a3940d01eb3ab43b1
SHA5129c5b7a4765424368e00d62b4ae89aff8c5b86fc4e93b09d49ac4d1b18f65ce9dfd3fae52e9ac25bb0d0a024ea9a08e638a36cdc278111cd7e62c5be38a1fd23c
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\D8L5CGE3\environment-9d8fe9c86899[1].js
Filesize12KB
MD5a69bde03730bd4701b6345436dbb3a67
SHA19b30d5d36936b671d40a562934150085b15ea623
SHA2568cc70ab1de2444d0425b39e79ccc5ab015dbc82c70bd02039c39e58f36ed34c2
SHA5129d8fe9c8689955b54ccbdac008c9e4e1541f65b023d6b0c0a6e847a1aa35cbb434ba782e6294f0b9e574c5eec1ee42fb2c368705ecc3c11ab07c3ecafd08fb4d
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\D8L5CGE3\github-e4eed26e112b[1].css
Filesize125KB
MD54d2d7de8ee14fb8447f915c98cda7ed4
SHA11efbfbdc473f5c54970f6ff20c50b94191a5dd62
SHA256a75f760f25d26b5ca740a5a4fef64f87e0ba2a7627ca8c720b38d02c50485c55
SHA512e4eed26e112bf0ee40121f594b2d0cbb4f9bb86fa1b8f8dbe915ac1d2dc605b2b9943dc289f290316fd1e7ec124a4c1e539eb1e517853394f7499e9d78085ff6
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\D8L5CGE3\global-e647c9e7e18c[1].css
Filesize284KB
MD514f28d72bafffe1401540601e0b68220
SHA1d79fcb1fe2c0b979bbc78c6d8df9ab2ba363bdfc
SHA256d6e27fad6865cab2090618cddd44101c2eebb0107021aed77f801d2a5aba13b8
SHA512e647c9e7e18c83042f9989959976189f5d7704c3571c46768e86e2c96777ceceee0f2845a1503005641a3b1f8e5c587cf7761748922ee8782bbdfd940d2ced6d
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\D8L5CGE3\light-3e154969b9f9[1].css
Filesize48KB
MD5dda4611c92e86740cc9ea1301c6ea9f7
SHA11d20bb0250a31e8f62cd738a41881d0155ff9726
SHA25616299e8062cd02bb5746969f27f13765ff6ab6108a88fe69925007b65134e0c0
SHA5123e154969b9f981782a137ade0196adbdc3919c451a134f632b4f748faabd3136e76013775f56bf3acce47e40b389a209ba3b9ae7c3b554f4619e861c128d1de9
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\D8L5CGE3\primer-f4d27dc36ca2[1].css
Filesize332KB
MD5dba92d9d41dba74ad0db62b8c9c3a9b7
SHA179d9ae965f56834ff3dc732bd05f12ba218f9d7d
SHA2569eca40f348ea907e32ac45b15e5366e8bb3be8d6e860bae8671cb7a628e0a634
SHA512f4d27dc36ca2764e7049a58003023f60d1452e2876837fdc64098fe440673a2d7d6226acda9c81edee1a068d9e24df6449fefd0882d6fc7e9496e5f8daed4cb5
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\D8L5CGE3\primer-primitives-4cf0d59ab51a[1].css
Filesize8KB
MD5095a01e2f3bac9b2b48bb28ad38a4a8d
SHA191855599af787299cece3999adaa4e440dff84dc
SHA256555bd75cf2fad0dcfcbb3578d074a907d437f0832629f3d6f83c9cc4ae8b4eaa
SHA5124cf0d59ab51a237735819fe02c3b39528990b6717c4d555dad7053a842ac428aad3166e66699e3277cd4d4d3a3e779b4896ef42b1c26934e0349b706d3c077c1
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\D8L5CGE3\vendors-node_modules_github_arianotify-polyfill_ariaNotify-polyfill_js-node_modules_github_mi-247092-b9c7cf3107b7[1].js
Filesize16KB
MD5296c61843cf768161b75f8ba7db0803a
SHA1a2fe171b4773a7ee5fe50b463cef3cf99585a712
SHA256dc3a837b7d3d883b43e92ca92dd8172255ee4a8254ae3d59075c955156d0eebf
SHA512b9c7cf3107b742310fca225fd701b7035cf3f8ac9438c3b1e0bc1eead2c0747fc1e8ff9849df20f13e8ee54054ec0e383e6a35919f89d8bcee7fb9e123ea7bb1
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\D8L5CGE3\vendors-node_modules_github_selector-observer_dist_index_esm_js-f690fd9ae3d5[1].js
Filesize9KB
MD5e131f8c9b77918aeb94fd82199a423d6
SHA171eaae086cd44a8904f39d27fb5387bb957976f0
SHA25601f9a0ec0bb24312ae0395b6aa238f8d910dc35c08ef5a25a1e9cd8feac83c32
SHA512f690fd9ae3d5a240e479fea97ac82940f136f3f2e0262cac840345f2b956123117ca94424dc354d90d13f1c0169c24b19526505bb2fad70c8c364899474a9495
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\D8L5CGE3\vendors-node_modules_oddbird_popover-polyfill_dist_popover_js-56729c905fe2[1].js
Filesize9KB
MD52eb9961e08f81bdca617ddb67c2fb708
SHA115cb6d7ffe93324b38bb62bcc4ff14d1a57f94bb
SHA2560f2cd40ad364711db1fee03cf9f6ca04fc56f5c3ba497dc476c5879e129d968b
SHA51256729c905fe263a6b7978bc67c09b8dab69592e21aa9addba78866790bdb2dbd85e41e6a6663d511e73a8edeb75933b549b3c393a465748790a6fd50b337cee9
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\M9Z3J3NW\The-MALWARE-Repo[1].htm
Filesize300KB
MD562c0af442277189867c51993089c433f
SHA12510432e2bd07a07089603ad5bac870308e00751
SHA2565241bf0d6b47fc08ee766b7b2c6cf1509f44cf6eb805158e289f09680e489569
SHA512cefc263dfcb924917193daa09f6e2f6bf4df4b166cd0aef31cac550b6537d765cfc0bdaff9a3b1c4e96f27d5568b1bc98bbafe39c79d28660f541356f94118d3
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\M9Z3J3NW\element-registry-a5784131b451[1].js
Filesize50KB
MD5ed08c8c615fe432e14caeff2fd70c666
SHA1fb6052536336e4011f9bb14b48eb940bace94607
SHA2560f9dc14436d32f7047d624914e132f9f752cf7b7ba9bfa6f99cd197912916bef
SHA512a5784131b4515b3e24235dc7111d4f76448c259d4bb90e53bcce285caba1676940f956db31766af5fb0523f330289db2f77b3c1295cfc64b7d208ecdec4425ed
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\M9Z3J3NW\github-elements-212af089b7d6[1].js
Filesize44KB
MD5689d4508ca84895ecca77883378c9041
SHA148345fefc8054ad4f1e812c97bd05c1791cc7858
SHA2568e1a560374a953729c96276dff22d74d3b866d885c2f04321c6b12afcd1ee443
SHA512212af089b7d653cbb0d8756f84682cab2616304cbf11ef6996d0718fd81279524d54394df54090375114fc5a44b14c6841075ef81cd163970965b3a580e662b9
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\M9Z3J3NW\vendors-node_modules_braintree_browser-detection_dist_browser-detection_js-node_modules_stack-68835d-f76b8ac8a5c7[1].js
Filesize22KB
MD5c0da2eee74340964e2c1353ba5ed9c75
SHA1bae8ee7d5ccf1cc7bc70a1807d380ecbe4a3eb97
SHA2560b39f6ba9bafebdfb4db9f71b63f66bad3a3b0e485179ff57544668049508f93
SHA512f76b8ac8a5c72e30f5dbfc5e9ad7125b5c807184fc7b4c223ed4c396c8fe1c398da20f502fccb2cc780182a002d534ad73e57a89b874e3e9cc7e38f95cbbe519
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\M9Z3J3NW\vendors-node_modules_color-convert_index_js-0e07cc183eed[1].js
Filesize12KB
MD5b36809a997ce5e5ad8b0b4f661ce60d1
SHA1fff11cfd01b744a770de926e13dde8f546e565e7
SHA256687890a8b37083fcbd85fe5fcd960a6d80378b01a5f86287f207bb7c807b5ee8
SHA5120e07cc183eed2b6d1302e51254f6b4f204a920873dadd83581483d52bf9a2e6537ebbb0417eb04567411dac64232653a0d046abf2c31c4809bc72fc6603b0749
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\M9Z3J3NW\vendors-node_modules_delegated-events_dist_index_js-node_modules_github_catalyst_lib_index_js-f4b251-f7c3b6081b19[1].js
Filesize13KB
MD507db8fd7c0d6d1d98d1e07156a23c873
SHA126c0a8e9de88a9e88e96985613b9145ecc294d2c
SHA25618c24a8fd0f795bd9220dbdd2ef08c8b0ee030dc0123af5a570555d94fc61dbc
SHA512f7c3b6081b195e4be03cb8c99b16624a685f2f7a3c39a9bdcc0f8e439019e8ab6640a0a2673d5597dd1808f149371a05c9be8a9ad7f41759e6ba4a3433ce0cff
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\M9Z3J3NW\vendors-node_modules_dompurify_dist_purify_js-89a69c248502[1].js
Filesize20KB
MD536f04458790e19bb99bd77a1cdc16295
SHA18f25cd75135fec8c088728f53d39dcc21d375fdf
SHA256cfac43b55a6b86258b9d3495eff18f26f598313a14cf76a3dbb1e3e7fd341f00
SHA51289a69c2485029e3393d81637b2eeac776d0765835e6ffcdddb1394f4421c5236b5cfee873568736d8a233b6c9bafe6ea828d2b718133aae8f0d22f220165fb9e
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\M9Z3J3NW\vendors-node_modules_github_auto-complete-element_dist_index_js-node_modules_github_details-d-ed9a97-841122a1e9d4[1].js
Filesize17KB
MD5d50f30bd48bf15a39fb0de84d338b063
SHA1c974701a469b2ae91195cc57a42c3157c0210646
SHA25621c5e70f201ea5ebcaff6f1244e6a7fbfca84d1878cd41d4400696bbbe09af5a
SHA512841122a1e9d49b8484e68dc82869b7835e54a9d632909ec4f0c386ba843d2eaf20416c75c19c4a250a8cf22de8ef43f1fff6d77d29630132266c6f533c487e2f
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\M9Z3J3NW\vendors-node_modules_github_catalyst_lib_index_js-node_modules_github_hydro-analytics-client_-7901e7-b9a6188c064d[1].js
Filesize15KB
MD563af780baf16c7361c8c5e722b07e22e
SHA194ec2d205894d3266ccf7841cefdbef0bdb17a3a
SHA256ecd8fe1eda6a6f72e65661dbd1c42f8c955f53068524f451453da12a8dd0c50f
SHA512b9a6188c064dc21ec3bceef6f47e67d5e24fc4cb3b595990cf39b3dc5b95f9a1a435468944095d3895c7a3fb080280da8e2c6b1e67b91526ddc69f58267e94bc
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\M9Z3J3NW\vendors-node_modules_github_filter-input-element_dist_index_js-node_modules_github_remote-inp-d1a841-1cb70ce9c8ac[1].js
Filesize24KB
MD5813202d2ceac4c30e939f771802cfa9e
SHA17167458ddafbf43a1b7f73a70f6eafd8c4ce0e80
SHA2565c7003ec2145e96637f227d236411a32458e32fbc161d9b7c30bc69dca8d5c8f
SHA5121cb70ce9c8ac89e02f34b46fcc1f20dd92d0b7649ed757218f14d011ec32d6881d7f3806d1add6e2e1b7400b8fccffe8bf890abd009a6d3feca1b42bcd42e43f
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\M9Z3J3NW\vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_morphdom_dist_morphdom-e-7c534c-f8a5485c982a[1].js
Filesize5KB
MD5e87764e4b54806bd9528e9413f05201a
SHA15d1c284dc8e2d047de24f8380f71ea9989d732bb
SHA256a38e79c76a05e2473cefde9829cb125563e2bb06965aa3d0a41b314816bd1097
SHA512f8a5485c982a797682c4138b024f83ea2669b7b7458c2d9eeb2c18526260e2dde0b3bc68d98415f8513e4ce099e46783a9ef8ad08b58929ca66972630953822e
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\M9Z3J3NW\vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_stacktrace-parser_dist_s-d71043-2f71edbcd4a2[1].js
Filesize16KB
MD5f355e6f42d80f845084583df20a8fa46
SHA1dff4cea70228e198bb2ca3f745cc19c3bdc9a947
SHA256065aec73ca0f23a79a0f62212dbf5ba3b8acf5fcf1836f26e346f91ae9299ded
SHA5122f71edbcd4a2a23ed5e2aefc380764c90d146b1d395c6d23bea2bd8378df828e18145af478a1c4fd6bcbe887d2e7dc2ef9597b2a203f1a76b455fd200bf974ed
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\M9Z3J3NW\vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-893f9f-6cf3320416b8[1].js
Filesize9KB
MD5fbbd4bcc22313de76bcd2b3e4bb12e0b
SHA11422fbb0c4a416eb66e429d2cf797ed29a70dca5
SHA2568060d4de1a065854c98adcc50f292dcab8f424a9edbdd4aabb7409cc4c6eab99
SHA5126cf3320416b89fca281c439927ac3d76da74f9463345a891c4904c8e50b476e21d11ed06aa2316ce770c36f18337aa4e2619bd3fd28a4cc8454d649110060726
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\M9Z3J3NW\vendors-node_modules_github_session-resume_dist_index_js-node_modules_primer_behaviors_dist_e-da6ec6-5de3eedc1320[1].js
Filesize8KB
MD59c5d3b27f0ba2ac8670f6d6bbcc5448e
SHA1a1fb9b26f44b6a835d6e3547f350a1ee17aba73e
SHA25663e1578e28e58d18070a75c923b936f0d92ce8be99058ed80d66a9d5a90f227b
SHA5125de3eedc132092a565d571ae0105bd63285825faf693cd05b3f34fb8c9bf6cedfa97f72fb326bfdc2d526e5b7ba9b93b7b80f252f64057366375269c5028638a
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\M9Z3J3NW\vendors-node_modules_github_turbo_dist_turbo_es2017-esm_js-858e043fcf76[1].js
Filesize75KB
MD5bc119e97d7bbac343f62984dc8d4dcfb
SHA1b7fe0a56ce370e54bad0aae6d96bf52cc192a03c
SHA25609620d3f9286d39a8eee8f036655e3555fab6c6b6ea0abd84a466aff8ae3814f
SHA512858e043fcf7611a217e05ae5a181c4addfa23f21a298036b48430fbaa153a7248777408c1238742e7f6c53cd6bb4a1d6b6f60344048fa3714df464ce44b902e6
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\M9Z3J3NW\vendors-node_modules_lit-html_lit-html_js-ce7225a304c5[1].js
Filesize15KB
MD5b4de96241178473d9f682dea5a92e41b
SHA1e274c147c9bcb636b3bf4f9df1acfbada27d8a90
SHA256c823056c4e37d95cdee809f535000bb37b9c8d956ab0410c98a6f4a8fab4f47f
SHA512ce7225a304c5935fa3fdab2e736d9738651ed0fa6f4503bb65deaee022bc03c3033170d53adc2c1a77c88904ea14a9603519b87990f04e47885209a53c893056
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\M9Z3J3NW\wp-runtime-5502f2a60a02[1].js
Filesize54KB
MD5d92018cc39c2976a8a7b2fe2e826c33c
SHA11e5ea7c5c01efe577da5ff38e78d91ed330ab7ec
SHA2560cdc8612d986afd7c4a6146373cdbb2e59916b4ab26edeba254097fb1b8fe4a5
SHA5125502f2a60a02fc1939c25588b4b9c6ba9c26d6efb191e35b51982431c6864e794bab948a8faa86ebee7dd0808150c134d2ddf3cc5be351e82014e8bb5a500131
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\XY7TBSDB\app_assets_modules_github_behaviors_ajax-error_ts-app_assets_modules_github_behaviors_include-d0d0a6-e8165d062a74[1].js
Filesize17KB
MD5efab56d6b0bd7f21d1cce2f3e43d5fd1
SHA1e456cefe8b8e82184832f6d282b153cab512c734
SHA2569a4ca8d578f9ff1246a54bcb743915a80c9a60fed995f4a68a1250b9975822c3
SHA512e8165d062a74347ffec6643346e17b302130f7c132bbecd6c9c908464fb0deb83ada30d49545310bcd31712af6e15ecdfcbe13582b67b7f16ec175a466b93e77
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\XY7TBSDB\app_assets_modules_github_behaviors_commenting_edit_ts-app_assets_modules_github_behaviors_ht-83c235-aeae6fcdf371[1].js
Filesize11KB
MD5b2958aff0cff1327739cb5f8cb1e6f5e
SHA1db1cf967cfa841741e99dff1a862bc7f71a921d0
SHA256964c451b19206c8d5c38eef573fbaee22d5cf16153d7fa5d3e1ff6cc6bdea180
SHA512aeae6fcdf3717d89b8aa808dde59986fd48dd3d8d03cc9ca6072e3537f34ca564bc5202b4034541441feaadc9e30fc519d6ebf45bfba1f30ea740e0d9f07da42
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\XY7TBSDB\app_assets_modules_github_behaviors_task-list_ts-app_assets_modules_github_sso_ts-ui_packages-900dde-ab87c1d6c5c8[1].js
Filesize13KB
MD5b21890d8481d25b90a00e3ed03b50ed2
SHA1076a919247341bc75956932151e5503dced4506f
SHA256c9b49f15328cbeb36c21dbd6d8a92d7a4b49e0deab7f160db26d9873610e7779
SHA512ab87c1d6c5c8ff03e5e5bd8862d2409142547b55b646f13d4359a3bcafd07da55b216511dbd526c93956b3f9e7370f9da9beb6d013c1a6f70aa2f44bb363ac17
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\XY7TBSDB\app_assets_modules_github_ref-selector_ts-00df584d9e79[1].js
Filesize9KB
MD51eb64f6ceb00aa312e65aa7933353945
SHA1b982eab4bcd320b994fff9f28b2efb49dbbcc080
SHA256c758400e596d7b029c2f8ce60335349ab1c11f1ef0a0845935a221a03a07e9d7
SHA51200df584d9e79169fb0674e21a5eaf54298124d08999b069cb2475e2f1af3486e343342f04c84f2937447cdd3b1a360585cf6afede8ac3a9a9a2f4d679971e088
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\XY7TBSDB\app_assets_modules_github_repositories_get-repo-element_ts-78999cbaea69[1].js
Filesize8KB
MD51e3d3f17d87f047720f1ca0460c989d2
SHA1cf3700822ac3643ed96f3cda57aa5b751db130c1
SHA2567b4ae72ffd1a3a43793d502f3e7b4ba3970370def25343c42581a61b607b6922
SHA51278999cbaea691faa13dffe881143e0a79680a8481683e1faa4a75cd1992465f2fc3b462548498245885f53d18c55a5b7f3e576076f16e1749c288af52f5a889f
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\XY7TBSDB\app_assets_modules_github_sticky-scroll-into-view_ts-112600808cf9[1].js
Filesize10KB
MD5df07a1b760a955a9549078fd16f19934
SHA1ff64f8bae2c22502111201422afb4f64aac7ebaa
SHA2563cb902578dbcc1d6a3b67aecd7ee7f6dd086a3093655a292f78a8e3c6974212e
SHA512112600808cf97132db023097b068afb0b49f7019b4333ec71f7fdb4070d69f6027541eb9437e3091c2910d47dea3a4be4a9aba67dcbce3d738897e6871592f21
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\XY7TBSDB\behaviors-78844c84764f[1].js
Filesize230KB
MD59a150aa1f7c853f64431eaf3b55e0ded
SHA150090dc7d71c19ab9eb34bee79dbe9c98bc721da
SHA2564a3e72fb54659c9c089cb3b225bb88d637879ec2152fd50f3e036896f6c00e74
SHA51278844c84764f6e4b0b74a605e9669784d14322f2dbc2ebd5d00407500936d0fb9ee438ce5d450000d941b477b663df633520c60ee9b18c8e5f3c8d57df634f87
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\XY7TBSDB\code-84c85cb29e52[1].css
Filesize28KB
MD50b30edeaa10ccf3df9856a35ee22ef0f
SHA1a1500e566e39db7391d76ee48770a558a565dd48
SHA2568f668c673d7f2b9fef3969f77b900c6be970968b5caa56ea9ae8b83095492b6b
SHA51284c85cb29e521faf41c581dfa0e963a8f4cf533a1dce054196f87542235f7dcd2c5a9878c31dc1be87f088d39e3dd95b9f6c7ccff3b1f10ecc65ac230f55cc8d
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\XY7TBSDB\code-menu-a8d08997ac4f[1].js
Filesize398B
MD522c54e20af0b00c9896a92477cb154c4
SHA1f488ce3df8c40f5d7e850ffad4fde40042ce8871
SHA256acefcf0f5f14cbacf0edaae733e026217216efcfead9e9696f102c5fcecf8365
SHA512a8d08997ac4fcff5d9d49f490f7628852443b9091363b9d0cbfc74cb5778804d9ad01ffd93c95ae3736ca353626d3525a2f1d044849963ffee0494b03a011b86
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\XY7TBSDB\codespaces-ed7a29194f47[1].js
Filesize29KB
MD5f62ab333f6a44e0cd79fa55e152c0084
SHA1f0dcc2a81f9dc9845ec736e24c60ac5c3cbeb816
SHA256a4932e0595d1a2f306a681adeea27daa0eb6ec1e5deebfaddedf477541e4a168
SHA512ed7a29194f4746ec2b6df06aebbfe18f3bdcc037b0cd26d57bf358050732b5a2377626be34cdeb83d1f251e972a0fdeb616f8f0c2d210779c3e59ce8735b40cb
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\XY7TBSDB\notifications-global-54f34167118d[1].js
Filesize11KB
MD505e151ff3fcbcd0d995cc40fbdc541d3
SHA1eb2f73aa190834b9fc5b6c1dc1bf825a596a68b5
SHA256172e0baa0a86380302c90584a0abe6c4154ea76319987790399a437f202af72e
SHA51254f34167118da8d30df24005519ffd6ead0f0fbd0835a40e689c062a1932faea9563e3506fe6ce903f837855b69a60dad9e400483185f716c9d7b6a1a0a9c19c
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\XY7TBSDB\react-lib-7b7b5264f6c1[1].js
Filesize209KB
MD5c0772c4a7a3f6a29256a69e8feca82d8
SHA175ff0ed2d25d36f7c6e933030e691228e37c5264
SHA2564736f0203a41862c10e5b93529b15897813bca088a8dc952250ba7c19b6901d9
SHA5127b7b5264f6c11eb55aca6b7788e67f89f5638a53c75589dfebdb7e08f6fcad5b2555a90eeff60da4578ee429cbbdf1d886f55a30355d9386d7006241e65ee632
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\XY7TBSDB\repositories-4a50bed3f731[1].js
Filesize63KB
MD5ebc222885939a5c5b9dcada808cbd6f6
SHA1587f490c810c5530076a2405535a62dd81285f5a
SHA256479c50127d907665bd460ac95ac011451aeada5f0795de3c17bdfe3ea9bde58a
SHA5124a50bed3f7317fe1d7608574101d13d868b47995b33ef5370dc3299d53dadb2f95378a9c24fa7b065d39f3687a94401e549f663ee221eda0bb7482acb0536fd8
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\XY7TBSDB\repository-0f7cf89e325a[1].css
Filesize29KB
MD51680289ab5dba7c7d2f122630b9c820b
SHA1d24856e6233eb9a45e9b60e822c6dd92f32efa40
SHA25681488a04cf8146db85d91c58695d5147a7a02d6ac61210d83decf90fe5ac9247
SHA5120f7cf89e325a36d5dad6762760cd27d42e2b00c2adde6c5916a1872e536ad2eb02ddc58b4e5e67fdcde705677429cc8c353a8669bf0c4cb678b9053530716b0a
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\XY7TBSDB\ui_packages_updatable-content_updatable-content_ts-b2e3c7cc6e92[1].js
Filesize20KB
MD5aa48da2cc614efde023fea2645f4488f
SHA183971e24ff64ec43c7de36bad1ce9e609834c8e0
SHA2565bf11fc61533514b8bf70de180a10912b5fb693d94a065f056c4bcbdda3d3da1
SHA512b2e3c7cc6e9233a31e891fc88726a7087bd39643659a17e5803531983b17d7a12e060b2b4b81d21b6b6a08fe3eeb748a42e39a483fb3f8d4a46955626a050b74
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\XY7TBSDB\vendors-node_modules_delegated-events_dist_index_js-node_modules_github_catalyst_lib_index_js-06ff531-bf7e5a3732fd[1].js
Filesize11KB
MD557ade457a2db48ce3827acaca61735c3
SHA1fa201f97596c327ac68bf39600e91f3edced1368
SHA2566e2d6a3eff85e0161488a91b33ec517d2aa727580a74be88666b47a0b4459a71
SHA512bf7e5a3732fd2f07f6b274beb43d15397f077fc66beede98f59a295819dfd2814c935729244fd1eaa99a6788810b64cc00e57c846f3b0c02fa6ac514ffd2a3b6
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\XY7TBSDB\vendors-node_modules_github_file-attachment-element_dist_index_js-node_modules_github_filter--0d643d-7118dc5b6df7[1].js
Filesize42KB
MD5abe08b9eddbb092ff96bce59660d0f06
SHA126de380b1fc7db26d9e6597937392fbd780a63af
SHA256265e4a9ba8c4d625fbf71c0e80b4dbb4e1924b75ee50d51f89a25e95a9b68c8e
SHA5127118dc5b6df79214eb167c12ed1600b059f0a3e2248301278d2523e2782fee13c7568b0f311aba5462e8eb00c3d1fc8c00e8546e6f37f9e93fcb0a4128211c7d
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\XY7TBSDB\vendors-node_modules_github_file-attachment-element_dist_index_js-node_modules_primer_view-co-278f98-614627bd58c2[1].js
Filesize88KB
MD5d0372280902d706d2719c4a5f3eb2b1f
SHA10bfafe365d14bf186150a0454fd94036bfc16787
SHA2567417835168bca58a27e3766b0cba6027baf943540a07782e232a576d66798c03
SHA512614627bd58c2ac3af41e85cdf77a0830b549353eab7ee03bde9bda0294a4cb5e7a9502720c3506b2c7692a4d47feb36414894c2f3d7f3b2513cc571a000dbc34
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\XY7TBSDB\vendors-node_modules_github_mini-throttle_dist_decorators_js-node_modules_delegated-events_di-e161aa-b4cf94700a0f[1].js
Filesize10KB
MD5df7fc4694b3a9173337af5a6d25e8775
SHA1b160f5faab016e422c04e1a129a0ca42264430e6
SHA2565a245e92b498f42e527988792d5f09fdd44043d06b5f785bc2f554a9a37621ca
SHA512b4cf94700a0f03c0e250d152b8debc895ea7d905388b84d4cb5b9d725536f64fbc0f964c25b62cb29c6ece8c3d74ca5ffe2b2dd63518e6547e92a4a9f573556d
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\XY7TBSDB\vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_github_catalyst_lib_inde-dbbea9-e73b311a14f1[1].js
Filesize7KB
MD51f9e895454770e1761ae99dd4376e3ca
SHA11fdffc28e441a9c15df55dfaa565a3a27ac26e2a
SHA2564e81ad5d4bda114b1e514c806f9e6275e1815cd20b5bc8036212537941d39445
SHA512e73b311a14f1d2a0299829139774493c67a6b550eaf3a10b32496657c812b60d859ed364306d11e051c2d25fad6e4ebe7518fa62fc82f420517d3741a7f71214
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\XY7TBSDB\vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_primer_octicons-react_di-5313f5-154d7a5d5f50[2].js
Filesize748KB
MD5d7fac127ff9d810df3d503c5449ca767
SHA17974defb184951d761f6a489072647b994292239
SHA256a8339bfec57034e576f1857e1048ca9d104b59e61eb7bca06aa3267c3e5c8ce4
SHA512154d7a5d5f5018e8d03ecab3c1773307ee36b92f59542c214bf334284737525288763dce5c85ebd5c84faed798ceb41e76837d83ad111dfc328b53bfac4004fa
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\XY7TBSDB\vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-e53a3f-57969dfe86b0[1].js
Filesize22KB
MD5e6abff5662d5514be517414e6f596411
SHA15672c4b3111f073dd40ac0a6a93cad5c668bc984
SHA256763a4770a70f409234c5197d4f2a28d7db5e89e239279c1e8ef9dd39c78751b8
SHA51257969dfe86b0fd9385ea5ba786faa6a47db7961a8d9e6f5b340d2929c55700a7308eb66e9ba7b347b2e6c158ac2c850c1e8a72b8dad7a819eb94ce79d1b847a5
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\XY7TBSDB\vendors-node_modules_primer_react_lib-esm_Button_Button_js-6357bb73e9e3[3].js
Filesize17KB
MD58a2220fae221a8f5648fa224c4ca18f5
SHA198479132ae3c7ef7f610618774396fe08e5def1f
SHA2569f8f3fcc7f634165c421c8de8471a8463d4937c31a106e0ac2cb6c24afdb81b0
SHA5126357bb73e9e38a9da76093cdee0b405c12badcfe69bfe4b5145e70eb83bb3314ad78673943d88792d3af1e51da9ad13925934b3e9c22ab41aa330334d6a70676
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\XY7TBSDB\vendors-node_modules_virtualized-list_es_index_js-node_modules_github_template-parts_lib_index_js-96453a51f920[1].js
Filesize12KB
MD57b6a14cf341122f898139383421d81fa
SHA16a06ae26974d95507d4b2f08d89c726707f31349
SHA256729874dd25b54af397b158e7d249fd5e0d0423d45bc2470a6bb1140a54e56ebb
SHA51296453a51f92073faa4b763f80658bef3f14d005ddbb8dc157321c02080dde34df8a1b0ba665ce221019c067162dab88cfd5095ad09446de665ad3afcafe574ae
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\26C212D9399727259664BDFCA073966E_F9F7D6A7ECE73106D2A8C63168CDA10D
Filesize314B
MD5d74dbb8f738c8c63fc8df859eb5286e9
SHA1341ce22e9c4295715365dc50894235afbae1d120
SHA256f8695c4f69b951ec278bdfae01ec88c757937995bbb183886232867f651791c4
SHA512747d0a92db2c564298d4e0f1ba3bc5980f37e5c103dfaa2f000ac98852ea48d7ecc0d0e8698620919fd4185ee8d59c1e692c2c06e4291d0315354346742f7cb3
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\A66A8DB907BADC9D16AD67B2FBFFDD5C
Filesize281B
MD59940e07922cbeca2994020f0138ae310
SHA1cdc728495751208e08e24430dfc9dc8fe9d6b01a
SHA256240f7e58e7a07fc5c2f57d084d3e00f4f9ac745ada1af615e8ba4a13dcf5d1d6
SHA5125f966218b0151024ca5be399b4f68ef08e635990799689d7a8dd0a6418077c4131061f15ed98dc233473786e155dbd453bdec67f966eeddb79e43e549054b2ab
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25
Filesize1KB
MD5fc26bf1f0c0646ccb9aa12f5baf2f3d7
SHA1f011463b8edda0521577f88066f851f38e7a0f41
SHA2562efd83280a336d33c2a97cbd9c1d47c6c53393bf84cf03aa412a67ed6f58ed16
SHA512aa1b3327833548496c0fe39cae952c2ac472e58a1b2c1bc79dd890b6a4ead46d3e18267342f6e8a46507d67e92f5e67a894dbec630e7f4d1c00ff0034db72f3e
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90
Filesize979B
MD5621d518af6be9df1abeb8b3b6b66eae4
SHA17cf9ab5a7e3558d8afd6985bc0cbbabdeca277cc
SHA256bba0137028953432024d26d0e6e52fa12f88210b48583059126a95987f2c6a3e
SHA51250364198ebdedf190002198fc00709846bc12bd65cdf880295765c8cacdcd998a92c31d40fb3e1af0652bf0f15d19c0ad4a8971649e50252dfe444bebf192549
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\26C212D9399727259664BDFCA073966E_F9F7D6A7ECE73106D2A8C63168CDA10D
Filesize400B
MD522fb8e763aecd283e527b9a1d866cae8
SHA1676554ccea755a7bc51e42f3f0d53468d13015c8
SHA256bbfb5f2dcb1b4edf1ca526ccdd5ff9a977665745a501960f546253e226996d77
SHA512c22be9d534c3f027cf6e7647522d456ef65c2cb87c08ac93b86003e6e272bf241a88c8ffd91170b70e3d9f25212395f81f3eea7f36d8aba34b145b71bde8b7a9
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\A66A8DB907BADC9D16AD67B2FBFFDD5C
Filesize480B
MD5736453f52a69f042dca36fae02211367
SHA1c6ef19ebe47f8e8ab2967ab2b67c8d0aaf6eb544
SHA2564d6258bf0d9c6ed40270404dc38470f44f4418bfffa436ccfcbbde3bbd3555f9
SHA5122718cfc866ef4e25a57c31a93c09009442948f798d2a10bb06f79e88056d42af692c9c28f7e2f07ff426763ccc97f930c41ad4d23e6b9cefc0f4aa8ef0b02af0
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25
Filesize482B
MD57b54d437af06a206d4fbab8e56f9b154
SHA11ffb27700a0d7fdbc48772a7dd574c3e2cfb14e5
SHA2566b94f050c1bc760ae343b83827b78f00a6a71a81ddc234885181762ecae9ea79
SHA51216988d92fd209b30f2a89f0bb14a0284cae54cf8f73ce02bc871e645015b014e4a810cb065001224b1272ffe65f084ea98be821132eb9d64756fba90e61b47a2
-
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90
Filesize480B
MD51bc444805e9ce4b444381ccb1b920d1f
SHA110285ca34f8da7f14788545f612436e703032580
SHA256efb27ac5aa5ca05592c52bee8b15256f768ccc573fc643ef028f6132dd7d6624
SHA51279719b2bd6a4d02d0f8c16270803b1dda0db4a827129e57b12552479274375376b45e5c5a5a986012efe6aaef5e107d9520c059ab386b833d630079a40d11104
-
Filesize
442KB
MD585430baed3398695717b0263807cf97c
SHA1fffbee923cea216f50fce5d54219a188a5100f41
SHA256a9f4281f82b3579581c389e8583dc9f477c7fd0e20c9dfc91a2e611e21e3407e
SHA51206511f1f6c6d44d076b3c593528c26a602348d9c41689dbf5ff716b671c3ca5756b12cb2e5869f836dedce27b1a5cfe79b93c707fd01f8e84b620923bb61b5f1
-
Filesize
8.0MB
MD5a01c5ecd6108350ae23d2cddf0e77c17
SHA1c6ac28a2cd979f1f9a75d56271821d5ff665e2b6
SHA256345d44e3aa3e1967d186a43d732c8051235c43458169a5d7d371780a6475ee42
SHA512b046dd1b26ec0b810ee441b7ad4dc135e3f1521a817b9f3db60a32976352e8f7e53920e1a77fc5b4130aac260d79deef7e823267b4414e9cc774d8bffca56a72
-
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
Filesize9KB
MD5694b1e9c0401617556dc70e5ab0209c1
SHA1fa76ab3e4200e2291da3ee7df43de84b2fb3ec52
SHA256343906b5385172148942f0929a818a24bbfa8a03451313f45fcd552d963df442
SHA512db92688e922cccd0539dbf040b5d85cb32c3846f8e0f60342c276d674c2508847fdcdb376da3f42add825b1742a3d8275b25e05da14ce3c5f66c272caac1aee0
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\bookmarkbackups\bookmarks-2024-09-20_11_zkyArsjCOU--EPr8Tsic3A==.jsonlz4
Filesize943B
MD578124222403db4c8e2ca3bf935365332
SHA12254fb36f2c34312a92ca3ea3cb5f87d6722abd1
SHA25628a46f0d7961fa57b84cd7f2c66de99cefc6b36b106b3c9e770373acc0a3d95f
SHA5125fc58f9dc76d8b677e86d0a7c32b64a6e11b953176f175955cad3edb85f9cc4ec6d057b6fc2d3080d0b7cad11facb5ca5362a3aaa081963a45fb6f2bfd07c78e
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\broadcast-listeners.json
Filesize204B
MD572c95709e1a3b27919e13d28bbe8e8a2
SHA100892decbee63d627057730bfc0c6a4f13099ee4
SHA2569cf589357fceea2f37cd1a925e5d33fd517a44d22a16c357f7fb5d4d187034aa
SHA512613ca9dd2d12afe31fb2c4a8d9337eeecfb58dabaeaaba11404b9a736a4073dfd9b473ba27c1183d3cc91d5a9233a83dce5a135a81f755d978cea9e198209182
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\datareporting\glean\db\data.safe.bin
Filesize2KB
MD5016c0b3746bd6d3ac96f2bf0f3da2039
SHA1b7f8caf9c130d00cbe8e365473f9fddc26421bee
SHA256abcdd71ac8bed905f72f335fcbf7226994dae8247d455addf9e2ebd9e606de09
SHA51284a647eb287ab1b70fbd25f8e39674bf27b644936b5e27abfec31c83a13ccc213a11f49b0f61cfa491af3529c7d1bbda052dc62586fcd5e403982bdd676eb6a7
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\datareporting\glean\pending_pings\222f3d51-5506-4b5c-baec-1263fc2f28d8
Filesize746B
MD5bb89c4f5f2643d7f8d0dcd6fb29d3faf
SHA132a8c449d033ba01dec9c863cf9a145a95f0d543
SHA2568b35e14a98ea2746282861bf5ad15ee1455528378e3242463b17dca34cb23417
SHA512461c43e3adbabf40301c8c83688acee6235650ce0fc26b3fd3c079704ce7037eadc78f6843dc6c981a6f5d9245f6f3dd33c0d0adbaecbca28484088856556ac6
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\datareporting\glean\pending_pings\3a0b06a7-eda4-4669-a8d1-8b7cf73a6ff9
Filesize855B
MD51ac5723e1dd3c0226d566346957ff78c
SHA146762f8cd18aff62e17dca9dc9134fe2b30bebf5
SHA2564a5bf775bafd2cabc66146a50874d182287c482a4cdf10e1bb3c2e4c4acc2aa8
SHA5125b9395bedf7fbaef2339faadda65c4e8135371ec0567d81a398f5180b99a97f46e6259b9be2e9c0f55ac8bebc04c9dc8345a3201ef59f783eabd0d5fdd916a9d
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\datareporting\glean\pending_pings\c4a0a4a7-1c57-4d56-ba29-7b5aba3c4a46
Filesize933B
MD5bf892824022342727accde81369c00e5
SHA10fe8ca2bf03dd6866fd79c8d5b16efe4c68e5de5
SHA2563f39f2d31dbe0a96055d442102b62b361a742d4642a8fc9c079e2b622a4885b0
SHA512056c76eb1400811b3b5b63e784985b93d77969707ee1949e4d10c7fb28777305b370ccdd0a999d768657aab816e9654e271665a9cb011240d8fab97efc1627bd
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\datareporting\glean\pending_pings\f0275a3d-5e48-4a04-b8cd-bff0b9f41c3d
Filesize11KB
MD5326ddf0b1af49384e9b27dfd13bbc32e
SHA10c6d833af7674f2e2fbb7f3aef9a7829efb223c8
SHA2562e8be9961ee17910db7fbefd82e3f9dee96cf2178c148e68fc8f04cc2460b00a
SHA51283e3d3a8c2d99573ac42b75ce3ee84341451e48cba060ea7456501bf3d178da6ec818fe5c2dfb72610b6fbe8ae72243c0e16c2618a8089092cab01a58369ad5b
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.dll
Filesize997KB
MD5fe3355639648c417e8307c6d051e3e37
SHA1f54602d4b4778da21bc97c7238fc66aa68c8ee34
SHA2561ed7877024be63a049da98733fd282c16bd620530a4fb580dacec3a78ace914e
SHA5128f4030bb2464b98eccbea6f06eb186d7216932702d94f6b84c56419e9cf65a18309711ab342d1513bf85aed402bc3535a70db4395874828f0d35c278dd2eac9c
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.info
Filesize116B
MD53d33cdc0b3d281e67dd52e14435dd04f
SHA14db88689282fd4f9e9e6ab95fcbb23df6e6485db
SHA256f526e9f98841d987606efeaff7f3e017ba9fd516c4be83890c7f9a093ea4c47b
SHA512a4a96743332cc8ef0f86bc2e6122618bfc75ed46781dadbac9e580cd73df89e74738638a2cccb4caa4cbbf393d771d7f2c73f825737cdb247362450a0d4a4bc1
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\gmp-widevinecdm\4.10.2557.0\LICENSE.txt
Filesize479B
MD549ddb419d96dceb9069018535fb2e2fc
SHA162aa6fea895a8b68d468a015f6e6ab400d7a7ca6
SHA2562af127b4e00f7303de8271996c0c681063e4dc7abdc7b2a8c3fe5932b9352539
SHA51248386217dabf7556e381ab3f5924b123a0a525969ff98f91efb03b65477c94e48a15d9abcec116b54616d36ad52b6f1d7b8b84c49c204e1b9b43f26f2af92da2
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\gmp-widevinecdm\4.10.2557.0\manifest.json
Filesize372B
MD58be33af717bb1b67fbd61c3f4b807e9e
SHA17cf17656d174d951957ff36810e874a134dd49e0
SHA256e92d3394635edfb987a7528e0ccd24360e07a299078df2a6967ca3aae22fa2dd
SHA5126125f60418e25fee896bf59f5672945cd8f36f03665c721837bb50adf5b4dfef2dddbfcfc817555027dcfa90e1ef2a1e80af1219e8063629ea70263d2fc936a7
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll
Filesize11.8MB
MD533bf7b0439480effb9fb212efce87b13
SHA1cee50f2745edc6dc291887b6075ca64d716f495a
SHA2568ee42d9258e20bbc5bfdfae61605429beb5421ffeaaa0d02b86d4978f4b4ac4e
SHA512d329a1a1d98e302142f2776de8cc2cd45a465d77cb21c461bdf5ee58c68073a715519f449cb673977288fe18401a0abcce636c85abaec61a4a7a08a16c924275
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.lib
Filesize1KB
MD5688bed3676d2104e7f17ae1cd2c59404
SHA1952b2cdf783ac72fcb98338723e9afd38d47ad8e
SHA25633899a3ebc22cb8ed8de7bd48c1c29486c0279b06d7ef98241c92aef4e3b9237
SHA5127a0e3791f75c229af79dd302f7d0594279f664886fea228cfe78e24ef185ae63aba809aa1036feb3130066deadc8e78909c277f0a7ed1e3485df3cf2cd329776
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.sig
Filesize1KB
MD5937326fead5fd401f6cca9118bd9ade9
SHA14526a57d4ae14ed29b37632c72aef3c408189d91
SHA25668a03f075db104f84afdd8fca45a7e4bff7b55dc1a2a24272b3abe16d8759c81
SHA512b232f6cf3f88adb346281167ac714c4c4c7aac15175087c336911946d12d63d3a3a458e06b298b41a7ec582ef09fe238da3a3166ff89c450117228f7485c22d2
-
Filesize
6KB
MD5a6aa346e0239df53ceaca5b0e3fc4ae4
SHA14867cf7b6455d74e8eb53fc8be593283f3f8d77e
SHA256d48458c55c5e47b8f9e26a2875ca77a0a8cf52108c3e78510f0efe50a7244020
SHA512c01afd47d106acb739025b1a19320026d06fc4f3eeb5af3e36235a6750a06ad2c5ab9497f5950b49324f53de80fa3dde6c158419b87f9bc5d6fe443394fd8879
-
Filesize
7KB
MD546f4b49ada5f6ea740a4dcc1d4566211
SHA1d082592434a837f19a64c2803d9b532f2bbbbfe2
SHA25668d6c94df72cf2ad9615c2d251c75ceba7c08955db1a60736ce2dad79970e718
SHA51216ba59e2dbdb3da5c157fb8edfe8b49c2df1c01ebd7b4370322b2f83bb8b6b7a207366e986640ab63bb0f4952a02eba98d91598d4a62ff1e6ef7be25904a8141
-
Filesize
7KB
MD5f5106d1e68f5593ca43a086a66c6db15
SHA103ff87cee4a8fc879f489abae6445793d1b29a25
SHA2561030a0ed1042ca168dc53ea794ab938a45ec0dfbac75fb03d59328694c65d9db
SHA512c4a51cfe367956ff95921cd30c26b5be56c98a9be0730c94ef72e11b811c5155dd794446035c30545e5f04fd79179ad44aeb575da856805b6cfe4048ecfa178b
-
Filesize
6KB
MD5e2c4b4666a80baa6711d641f98bfda99
SHA1faeaa796b15aaf25e528a702be18d8ace9742fdb
SHA256cfd5d514bbce435d722f27b4b9f61385a95f3e0309a7502ae74d45c25ba043b4
SHA51236d4c0919eebdb8b5b95fde84dce7754f7965d9aa7bd843f8bbd75ffd8f6d774cc444adc6edaa618001efbfaa987104dee87883f33fc7f322b8eb4f6d52dac1c
-
Filesize
6KB
MD54b4eccbcae6d22a917965f8d89059098
SHA1eaac49d1deecb1cb7f703f2c2998eafd519c21c7
SHA256617cec2da116c7decff93481b477f1afe74715a8d76c6f27e9d3d888971a917e
SHA512bb50f7b0a8b992ac2d11db953f41b7ac7f489a01af091afcda91ec7e2b5393d42e6a837b949d0542afc5df3bded961299bb6f967085d581fefd5e0028ba7bfa0
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionCheckpoints.json
Filesize90B
MD5c4ab2ee59ca41b6d6a6ea911f35bdc00
SHA15942cd6505fc8a9daba403b082067e1cdefdfbc4
SHA25600ad9799527c3fd21f3a85012565eae817490f3e0d417413bf9567bb5909f6a2
SHA51271ea16900479e6af161e0aad08c8d1e9ded5868a8d848e7647272f3002e2f2013e16382b677abe3c6f17792a26293b9e27ec78e16f00bd24ba3d21072bd1cae2
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
Filesize4KB
MD51531392d1398034fc7532d98266fdecc
SHA1eab040540dc8d351fcf0d35f45025493d6828617
SHA25601bf95ab4c803f45b0fb46de4c76acb52d7fab2cb23b2e525185463ab984e4bd
SHA512184ef250cd599708839a1184ddea8eb2dadd24247042eb249efc0071d8878388d5405bddf21bd6c7932be7bd04b385d46a0a8631a997526a3d7a87c6c74188c8
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
Filesize5KB
MD5ccebd6f452d0cf7108b8f7c6b0b7c29a
SHA102096a26846feb84bba804a266438d1566cc570b
SHA25661b9a3d162592f0c9e11493eaba3230732704f531fadbe8fa3a1ae0b28e470d3
SHA512f49107ade6835b627cb1950dcace97c2c229ae56f0a1caebac2ac5dbd9f2eef2158298264d5e22dd5859cca130db0b5757cad28d19bec365b2ea8d6f9aa36f42
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
Filesize3KB
MD52d63aa411bf1d0ab98ac428cc540a388
SHA1d3dfa43dd4d4e2350867100786bce5b8fdc8e4b9
SHA2566dc784dcb38faaf0bc6d67cac546637b59d653e3c137467bc8a7a61749055662
SHA5127effd80cb241da772f5ee3b8d8bda23a5821ba1578ea159583bbd42bb41a9b4c35b56ed40f17547e8049813b1d1f3d90630e0170c9136e144fd4fde2f7406aa2
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
Filesize4KB
MD542a7bc07ac7f9f1fdce7bd59a6433bc7
SHA1315576d75fccc90b7c8867782997ad87c8d66b57
SHA256e65d2d06faafef824ed630c391b06ebe2ec10e83f1af9de4d3895207ad027f6a
SHA5123af9f71ea72e2ee2a44b01f71960f051c96232241770422d37d1e9760b0863c99100c1a939d44bba102d6286b2b8462b0dc5c052a94d286ae452d169b877a298
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\sessionstore-backups\recovery.jsonlz4
Filesize4KB
MD5869cca374da62d25fe62c7f496479d12
SHA1cf426c49e59ceb61527d49d0c05bafd0aa7c3f96
SHA2561d5e210c4188afa46e7a67ebb3961e746d3722b9a3d8ec259e194dc2b98c7010
SHA51256f2195e770bf138ae7d7687b772b0be2cc4b9a866305d9b953c926db8fb9d9606550c97c49a15d07978a994f13e97b931c5bd720bd7fea006aa8867adeb2b5d
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Filesize184KB
MD53018d1aad8385b734068dbad441e344e
SHA12a3925bc92ec843db64b6db2cd6fe18ccf084a86
SHA256f33415b0b1fc8c7e52356318d44aef1ae6bd9c64a89afa012d43a01a79954f88
SHA5127ab1a1115a4f7ac61ba41bfe5875792cfa84d81f14f71239e43848de5940bfa07e2e34ea4be85a61c091d0b4b7742f3f55961fd26734b528cdb2c0b4d169c5e0
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Filesize192KB
MD540afe3f4ef93a872bf66473bae686bd8
SHA132dfe562b19ce24e04c9b33275cdfafefdc50e53
SHA256b6b34bb3f59a576f9394bca6871d5bb55fe217f2142ed5dc866e39f4aed9b13d
SHA512308a27c5aa8259ed7354a02425c93ca50d4bbe83f6556ea209333bf44073bdbc0c16489663770bf3d4d8f2319d2b8b120f24d549b449b47265fd7928513772a9
-
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\6lk2b5bo.default-release\targeting.snapshot.json
Filesize3KB
MD5c6acf07f0ce0da7e600f6452d670fa87
SHA1ea01ac0fa3315335535359d33affc6cf35cfece5
SHA2565da2a2cae293c15210cff26fc12ceef58e000dac07e00208dcacd21297b8fefa
SHA5121359bf351aee7a813a4f6e091643832908a0bf5c127af9b07b0afbbaa7d7ff9ef8d1ca094fab4bf90b828e2c4330ecb1c12953e08d14899776cd340bd3ee7a00